--- title: "Privacy" url: "https://www.goms.ch/en/privacy" language: "en" breadcrumb: "Root > Goms > Special > Footer > Privacy" --- This privacy policy applies to Obergoms Tourism AG. **DATA PROTECTION.** ==================== The protection of your privacy is important to us. We respect your privacy and personal rights and ensure that your personal data is protected and processed in accordance with the law. Personal data is any information relating to an identified or identifiable individual. This includes your contact details such as your name, telephone number, address, or email address, as well as any other information you provide to us. We are committed to handling your personal data responsibly and guarantee compliance with the legal requirements of the Swiss Federal Act on Data Protection (FADP), the Ordinance to the Federal Act on Data Protection (FADP), the Telecommunications Act (TCA), and other provisions of Swiss data protection law, as well as the provisions of the EU General Data Protection Regulation (EU GDPR). We also refer to the relevant legal basis in the GDPR below. This privacy policy informs you about what personal data we collect and process, why we need this data, and how you can object to the collection of data. The "processing of your personal data" means any handling of your personal data (DSG) or personal information (GDPR), i.e. storage, processing, use, deletion, etc. This privacy policy covers not only data processing in connection with the website , but also the processing of personal data at the tourist offices and other sales outlets and channels of Obergoms Tourismus AG. This privacy policy is an integral part of the General Terms and Conditions (GTC) of Obergoms Tourismus AG. Expand allCollapse all - Who is responsible for data processing?Obergoms Tourismus AG is responsible for processing your personal data. If you have any questions or suggestions regarding data protection, please contact our company data protection officer at any time. By post: Obergoms Tourismus AG Data Protection Officer Furkastrasse 617 CH-3985 Münster VS By email: marketing@goms.ch Based on Art. 27 GDPR, Obergoms Tourismus AG has appointed an EU data protection representative. For all questions relating to European data protection, please contact our EU data protection representative: ADVOVOX Rechtsanwalts GmbH Sven Krüger Romain-Rolland-Straße 24 D - 13089 Berlin Phone: +49 - (0) 30 - 22 48 75 28 Email: gdpr@advovox.de Website: advovox.de UID: DE 253207773 - WHY DO WE COLLECT PERSONAL DATA?We collect personal data to inform you about the latest news (products, events, etc.) and to make your stay in the Goms holiday region as pleasant as possible. We are aware of how important the careful handling of your personal data is to you. All data processing is carried out for specific purposes only. These may arise, for example, from technical necessity, contractual requirements, legal regulations, legitimate interests, i.e. for legitimate reasons, or your express consent. We collect, store, and process personal data to the extent necessary. - WHAT DATA DO WE COLLECT, FOR WHAT PURPOSE, HOW LONG IS IT STORED, AND WHERE IS IT STORED?Below, we show you for each case of use which personal and usage data we collect, for what purpose, how long and where we store your data accordingly. In all cases of use, no personal data will be collected by Obergoms Tourism AG without your active consent. Note: The legal basis in accordance with the GDPR applies to guests from the EU. For guests from Switzerland, the Swiss Federal Act on Data Protection (FADP) applies with regard to processing in accordance with Articles 12 and 13 in conjunction with the principles of Articles 4 ff FADP. **When visiting the websites** When you visit the websites of Obergoms Tourismus AG, data is stored on our web agency's server. *What technical data is stored?* On our websites, we only collect data that is stored on your device (computer, smartphone, tablet) in the image gallery and in the quick search of the booking platform. *For what purpose?* - **To recognize your search habits and adapt the content accordingly** - **To pass on data (e.g., search for accommodation, filtering of modules)** *How long is the data stored?* The data is only stored for as long as you retain the browser data. *Where is the data stored?* Locally on your device (computer, smartphone, tablet) *On what legal basis is the data processed?* Legitimate interest of the guest (Art. 6 para. 1 lit. f GDPR) No guarantee is given for compliance with data protection regulations on external websites linked to the websites of Obergoms Tourism AG. **When you subscribe to the newsletter** The newsletter provides you with regular updates by email or post about exciting news, special offers, etc. from the destination. *What personal data is stored?* - **Title** - **First name** - **Last name** - **Address** - **Phone / Mobile** - **Email** - **Preferences** - **Declaration of consent** The mandatory fields are marked with an asterisk (\*). *What technical data is stored?* - **Time of registration and declaration of consent** - **Website from which the conversation was conducted** - **IP address of the requesting device (if cookies are accepted)** - **See also “Cookies”** *For what purpose?* - **Without this information, we cannot send you our newsletter.** - **The information on gender and preferences is used to address you correctly and personally.** *How long is the data stored?* If you consent to receive the newsletter, your data will be stored in our marketing tool for as long as your subscription is active. If you are inactive for two years, your data will be deleted unless you have already unsubscribed from all subscriptions (opt-out). *Where is the data stored?* Indual GmbH (dodeley), Sebastiansplatz 4, Postfach 377, 3900 Brig, Switzerland *Where can I manage my subscription?* Every marketing email you receive from us contains a link to unsubscribe. You can manage your subscription on the corresponding website. *On what legal basis is the data processed?* Consent of the guest (Art. 6 para. 1 lit. a GDPR) Your personal data is automatically transferred to the service provider's database via a secure connection using the registration form on goms.ch. We use the newsletter software “Dodeley” to send our newsletter. All newsletters contain a link at the end that you can use to unsubscribe from the newsletter. **When you open a newsletter** The newsletters contain a so-called “web beacon,” i.e., a pixel-sized file that is retrieved from our service provider's server when you open the newsletter and enables us to analyze the use of the newsletter. *What technical data is stored?* - **Information about whether the newsletter was opened** - **Date and time of opening** - **Information about articles/links clicked on** - **See also “Cookies”** *For what purpose?* - **To improve the technical quality of our services** - **To identify your reading habits and tailor the content accordingly** *How long is the data stored?* If you consent to receive the newsletter, the data will be stored in our marketing tool for as long as the subscription is active. If you are inactive for two years, your data will be deleted unless you have already unsubscribed from all subscriptions (opt-out). *Where is the data stored?* Indual GmbH (dodeley), Sebastiansplatz 4, Postfach 377, 3900 Brig, Switzerland *On what legal basis is the data processed?* Consent of the guest (Art. 6 para. 1 lit. a GDPR) To prevent the use of web beacons, please set your email program so that HTML is not displayed in your messages. **When registering for the winter sports report** With the winter sports report, we will regularly inform you by email about the current conditions of the cross-country ski trails, snowshoe trails, winter hiking trails, etc. *What personal data is stored?* - **First name** - **Last** - **Email** The mandatory fields are marked with an asterisk (\*). *What technical data is stored?* - **Time of registration and declaration of consent** - **Website from which the conversation was conducted** - **IP address of the requesting device (if cookies are accepted)** - **See also “Cookies”** *For what purpose?* - **Without this information, we cannot send you the newsletter.** *How long is the data stored?* If you consent to receiving the winter sports report, the data will be stored in our tool for as long as the subscription is active. *Where is the data stored?* INTERMAPS AG & GmbH, Untere Paulistrasse 6b, 8834 Schindellegi, Switzerland *Where can I manage my subscription?* Every email containing the winter sports report that you receive from us includes a link to unsubscribe. You can manage your subscription on the corresponding website. *What is the legal basis for data processing?* Consent of the guest (Art. 6 para. 1 lit. a GDPR) Your personal data is automatically transferred to the service provider's database via a secure connection using the registration form on goms.ch. We use the Ski Resort Manager from Intermaps AG & GmbH to send our winter sports report. You will find an unsubscribe link at the end of all emails, which you can use to unsubscribe from the winter sports report. **When booking via the web shop** Various offers such as experiences, event tickets, and souvenirs can be ordered via the web shop shop.goms.ch. If such services are provided by third parties, we will forward your data to the relevant service providers. Obergoms Tourismus AG acts as an intermediary between you and the service provider for bookings or enquiries. Accordingly, certain data required for the preparation of offers or the fulfilment of contracts must be forwarded to the service provider. If the service provider processes the collected data independently, the data protection provisions of the respective service provider apply. We ask you to consult these as well. However, we will also store your data in our central database and process it for marketing purposes, provided you have consented to this. *What personal data is stored?* - **Gender** - **Email** - **First name** - **Mobile** - **Last** - **Traveler** - **Address** - **Date of birth** - **Language** - **Credit card** The information marked with (\*\*) is only required for individual products. *For what purpose?* - **We need your telephone number so that we can contact you quickly if you have any questions or problems regarding your booking/enquiry/order. The service provider may also contact you by telephone, for example to coordinate key collection or to clarify other details.** - **When booking accommodation, the service provider is legally obliged to register you with the authorities, so we require information about the travelers, including their dates of birth (see “Digital registration”).** - **Credit card information is forwarded to the payment service provider or credit card acquirer for payment processing, but is not stored by us (see “What data do we pass on to third parties?”). We only store the payment method you used to make the booking.** - **If you have actively subscribed to the newsletter, we reserve the right to send you news from the destination by email. You can unsubscribe from the newsletter at any time (see “When accessing a newsletter”).** - **When ordering brochures, we require your address so that we can send you the brochures you have ordered.** *How long is the data stored?* - With a user account, for as long as the user account is active. - Without a user account (booking as a guest) and without interaction with us, for a maximum of 2 years. - For as long as statutory retention obligations exist. *Where is the data stored?* feratel media technologies AG, Maria-Theresien-Straße 8, 6020 Innsbruck, Austria *On what legal basis is the data processed?* Consent of the guest (Art. 6 para. 1 lit. a GDPR); fulfillment of a contract (Art. 6 para. 1 lit. b GDPR) **For digital registration** Guests, owners, and permanent tenants of chalets, vacation homes, and second homes who stay overnight in the Goms destination are subject to a visitor's tax (SGS 935.1 – Tourism Act of 1996). The visitor's tax is calculated on the basis of a registration form. This means that holders of a business license who accommodate guests must have a registration form filled out and keep a register of their guests. The registration data can be entered electronically by the guest (pre-check-in) or by the accommodation provider. *What personal data is stored?* - **Arrival date\*** - **Departure date\*** - **Title** - **State** - **Country (country code)\*** - **Arrival by** - **First name\* / \*\*** - **Date of birth\* / \*\*** - **Last name\* / \*\*** - **Nationality\*** - **Email** - **Zip** - **City** - **ID** - **ID** The mandatory information is marked with (\*). The information marked with (\*\*) is also mandatory for fellow travelers. *For what purpose?* - **For the transfer of data by the service provider to Obergoms Tourismus AG (either by the service provider itself, through a booking system of the service provider or by Obergoms Tourismus AG)** - **For recording booking data in a central database of Obergoms Tourismus AG** - **For billing and collection of the tourist taxes owed by Obergoms Tourismus AG** - **For anonymous reporting to the Federal Statistical Office by Obergoms Tourismus AG.** - **To grant access to the police (e.g., inquiries about missing persons)** - **To collect anonymous statistics (occupancy, length of stay, number of arrivals, etc.) by Obergoms Tourismus AG** *How long will the data be stored?* We are legally obliged to store a guest's registration data for at least 10 years. The data is automatically stored in the registration system and deleted after 10 years. *Where is the data stored?* feratel media technologies AG, Maria-Theresien-Straße 8, 6020 Innsbruck, Austria *On what legal basis is the data processed?* Legal obligation (Art. 6 para. 1 lit. c GDPR) **When using the digital guest card** Guests as well as owners and permanent tenants of chalets, vacation homes, and second homes who pay visitor's tax are entitled to a (digital) guest card. With the digital guest card, you can enjoy numerous reduced and included services. You will receive the guest card directly from your landlord. *What personal data is stored?* - **Arrival date\*** - **Postal code\*** - **Departure date\*** - **Location\*** - **Title** - **State** - **First name\* / \*\*** - **Country** - **Last name\* / \*\*** - **Date of birth\* / \*\*** - **Email** - **Personal password** The mandatory information is marked with (\*). The information marked with (\*\*) is also mandatory for fellow travelers. *For what purpose?* - **To fulfill contractual obligations** - **To maintain and improve customer relationships** - **To ensure and improve the quality of products and services** - **To compile anonymous statistics on the use of services and for corresponding invoicing** - **For the early detection and sanctioning of misuse** - **Obergoms Tourismus AG may be obliged to transfer the data to authorities or make it accessible to them.** - **Obergoms Tourismus AG reserves the right to transfer the data to third parties for the enforcement of legitimate interests or to the authorities if a criminal offense is suspected.** *How long is the data stored?* - With a user account, for as long as the user account is active. - For as long as statutory retention obligations exist. *Where is the data stored?* feratel media technologies AG, Maria-Theresien-Straße 8, 6020 Innsbruck, Austria *On what legal basis is the data processed?* Consent of the guest (Art. 6 para. 1 lit. a GDPR) **Cookies** Cookies help, among other things, to make your visit to our websites easier, more pleasant, and more meaningful. Cookies are information files that your web browser automatically stores on your computer's hard drive when you visit our websites. Cookies do not damage your computer's hard drive and do not transmit your personal data to us. Most Internet browsers automatically accept cookies. However, you can adjust the settings in your browser so that no cookies are stored on your computer or you receive a warning message when a new cookie is received. You can find more information on this in your browser settings. However, deactivating cookies may mean that you cannot use all the functions of our online services. The cookies are provided by our marketing tool. *What technical data is stored?* - **Domain User token (utk)** - **First timestamp (of the first visit)** - **Last timestamp (of the last visit)** - **Current timestamp (for this visit)** - **Session number (increases with each subsequent session)** *For what purpose?* - **For technical improvement of the services To improve our offers** - **To recognize your reading habits and to adapt the content accordingly** *How long is the data stored?* The cookie is valid for 13 months, i.e. the data is stored for a period of 13 months. *Where is the data stored?* Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark *On what legal basis is the data processed?* Consent of the guest (Art. 6 para. 1 lit. a GDPR) **Google Analytics** For the purpose of designing our websites in line with requirements and continuously optimizing them, we use Google Analytics, a web analytics service provided by Google Inc. In this context, pseudonymized usage profiles are created and small text files (see “Cookies”) are used. The information generated by cookies about your use of the websites is transmitted to the server of the service provider Google Analytics, stored there, and processed for us. In addition to the data listed above (see “When visiting the websites”), we receive the following information. *What data is stored?* - **Name and URL of the data accessed** - **Website from which access is made, including any search terms used** - **Device (type, version, color depth, resolution, width and height of the browser window, language settings)** - **The browser you are using, including the version** - **Country, region or city from which access is made** - **Date and time of the visit** - **The name of your Internet access provider Transmission protocol used** - **Navigation path taken by a visitor on the website Length of stay on the website or subpage** - **Length of stay on the website or subpage** - **“Subpage” from which the website is left** - **Information on whether the visitor is a returning or new visitor** *For what purpose?* - **To evaluate and improve the use of the websites** - **For transfer to third parties, if required by law or if third parties process this data on our behalf** *What technical data is stored?* Cookies (user ID, advertising ID) *How long is the data stored?* 26 months *Where is the data stored?* Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA *On what legal basis is the data processed?* Consent of the guest (Art. 6 para. 1 lit. a GDPR) The anonymized IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. According to Google Inc., the IP address is never associated with other data relating to you. Further information about the web analytics service used can be found on the Google Analytics website. You can prevent Google from collecting the data generated by the cookie about your use of the website (including your IP address) and from processing this data by downloading and installing the browser plugin available at the following link: . **Google Tag Manager** Google Tag Manager is a solution that allows us to manage so-called website tags via an interface and thus integrate Google Analytics and other Google marketing services into our online offering. The Tag Manager itself, which implements the tags, does not process any personal data. With regard to the processing of your personal data, please refer to the following information on Google services: Terms of use: **Adform** Tracking points from Adform, Wildersgade 10B, 1408 Copenhagen, Denmark, are integrated into our websites. This enables Obergoms Tourismus AG to track the actions of users after they have visited and navigated the websites. The data collected remains anonymous. This means that the data of individual users cannot be viewed. However, the data collected is stored and processed by Adform in encrypted form. We cannot use this data to identify individual visitors to our websites. We are informing you of this matter in accordance with our current information. These tracking points allow Obergoms Tourismus AG to display tailored advertising to users. Our websites also use cookies and products from Adform A/S (Ad Server, DSP, and DMP) for target group-oriented advertising in joint processing in accordance with Art. 26 GDPR. - DATA RETENTIONWe only process personal data for as long as this is necessary for the respective purpose or required by law. If you have created a user account with us, we will store the master data provided for this purpose for an unlimited period of time. However, you can request the deletion of your user account at any time (see "What are your rights?"). We will delete the master data unless we are required to retain it by law. Contract data, which may also include personal data, will be retained until the expiry of the statutory retention period of 10 years. Data retention obligations arise, among other things, from accounting regulations and tax regulations, as well as from the obligation to retain electronic communications. If we no longer need this data to perform our services, it will be blocked. This means that the data may then only be used for accounting and tax purposes. If we wish to refuse further business contact with a data subject due to misuse, payment defaults, or other legitimate reasons, we will retain the relevant personal data for five years, or for ten years in the event of a repeat offense. - WHAT DATA DO WE PASS ON TO THIRD PARTIES?We will only disclose your personal data if you have expressly consented to this, if we are legally obliged to do so, or if this is necessary to enforce our rights, in particular to enforce claims arising from the contractual relationship. Various third-party service providers are explicitly mentioned in this privacy policy (see "What data do we collect, for what purpose, how long and where is it stored?"). Another service provider to whom personal data is passed on or who has or may have access to personal data is our web host, neusta destination.one GmbH, Leopoldsstr. 16, 80802 Munich, Germany (www.neusta-ds.de). The website is hosted on servers in Germany by neusta infastructure Services GmbH, Konsul-Smidt-Strasse 24, 28217 Bremen, Germany, www.neusta-is.de. Third-party service providers We use third-party service providers to process personal data on our behalf. This may serve various purposes, such as sending advertising content or verifying the email address you provided during the booking process. All third-party service providers are subject to confidentiality and data processing agreements, which means that they are not permitted to process your personal data for any purposes other than those specified by Obergoms Tourismus AG. Payment providers When you pay by credit card on the website, we forward your credit card information to your credit card issuer and the credit card acquirer. If you choose to pay by credit card, you will be asked to enter all the necessary information. With regard to the processing of your credit card information by third parties, we ask you to also read the general terms and conditions and privacy policy of Datatrans AG and your credit card issuer. Competent authorities We disclose personal data for law enforcement purposes if required by law (e.g., reporting requirements), if urgently necessary to prevent, detect, or prosecute criminal acts or fraud, or if we are otherwise legally obligated to do so. In addition, we may share personal data with the relevant authorities to protect our rights and those of our service providers or business partners. - WHAT ARE YOUR RIGHTS?You have the following rights with regard to your personal data: Right to withdraw consent at any time (CH: general principle; EU: Art. 7 para. 3 GDPR). If you have previously consented to the processing of personal data, you can withdraw your consent at any time. Right to information about the data processed (CH: Art. 8 DSG, EU: Art. 15 GDPR). You have the right to request information about whether your personal data is being processed by the provider, as well as information about individual aspects of the processing and a copy of the data. Right to review and correction (CH: Art. 15 DSG, EU: Art. 16 GDPR). You have the right to review the accuracy of your data and request that it be updated or corrected. Right to deletion or other removal of personal data (CH: Art. 15 DSG, EU: Art. 17 GDPR) Under certain circumstances, you have the right to request that the provider delete your data. Right to restriction of processing (EU: Art. 18 GDPR). Under certain conditions, you have the right to restrict the processing of your data. Right to data portability (EU: Art. 20 GDPR). You have the right to receive your data in a structured, commonly used and machine-readable format and, where technically feasible, to have it transmitted to another controller without hindrance. Right to object to the processing of your data (CH: Art. 15 DSG, EU: Art. 21 GDPR). You have the right to object to the processing of your data if the processing is based on a legal basis other than consent. Right to lodge a complaint (CH: Art. 20 DSG) or, in the EU, right to lodge a complaint (EU: Art. 77 GDPR). To exercise your rights, please contact the contact person listed at the beginning of this privacy policy. - HOW IS DATA SECURITY ENSURED?We use appropriate technical and organizational security measures to protect your personal data stored with us against manipulation, partial or complete loss, and unauthorized access by third parties. Our security measures are continuously improved in line with technological developments. You should always treat your information as confidential and close the browser window when you have finished communicating with us, especially if you share your computer with other people. We also take internal data protection very seriously. Our employees and the service providers we commission are bound by confidentiality and data protection regulations. - CHANGES TO THIS PRIVACY POLICYWe reserve the right to amend and supplement this privacy policy at any time and at our sole discretion. Please consult this policy regularly. Last updated: August 30, 2023