Privacy Policy

Backpackers Villa Sonnenhof takes data protection seriously. In this privacy policy, we, Backpackers Villa Sonnenhof Interlaken, describe how we collect and process personal data. This privacy policy is not an exhaustive description; other privacy-related statements may regulate specific matters. For the purposes of this privacy policy, personal data refers to all information relating to an identified or identifiable person. For those who would like to learn more about this topic, we have provided further links in the relevant sections.

1. Responsible entity and contact details

Backpackers Villa Sonnenhof Interlaken is responsible for the data processing described here, unless otherwise specified in individual cases. Questions regarding data protection can be sent to us by letter or email:

Backpackers Villa Sonnenhof, Alpenstrasse 16, CH-3800 Interlaken

Email: office@villa.ch

2. Collection and processing of personal data

We process personal data in particular in the following categories of processing.

  • Customer data from customers for whom we provide or have provided services.
  • Personal data that we have indirectly received from our customers in the course of providing services.
  • When visiting our website
  • When we communicate or a visit takes place.
  • In the case of other contractual relationships, e.g. as a supplier, service provider, or consultant.
  • For applications
  • If we are required to do so for legal or regulatory reasons.

You can find more detailed information in the description of the respective categories of processing in section 4. 4.

3. Categories of personal data

The personal data we process depends on your relationship with us and the purpose for which we process it.

We collect the following categories of personal data, depending on the purpose for which we process it:

 

  • Contact information (e.g., last name, first name, address, phone number, email)
  • Customer information (e.g., date of birth, country of residence, marital status, occupation, title, job title, passport/ID number, social security number)
  • Financial information (e.g., bank account details)
  • Website data (e.g., IP address, device information (UDI), browser information, website usage (analysis and use of plugins, etc.)
  • Application documents (e.g., resume, job references)

4. Purposes of data processing and legal basis

4.1. Provision of services

We primarily process personal data that we receive from our customers and other contractual relationships with business partners and other persons involved in these relationships within the scope of our business relationship.

The personal data of our customers includes the following information in particular:

  • Contact information (e.g., last name, first name, address, telephone number, email, other contact information)
  • Personal information (e.g., date of birth, country of residence, etc.)
  • Financial information (e.g., bank account details, credit card information, etc.)

We process this personal data for the purposes described above based on the following legal grounds:

 

  • Conclusion or execution of a contract with or in favor of the data subject, including contract initiation and possible enforcement (e.g., overnight stays, booking of premises)
  • Consent (e.g., to send you marketing information).

4.2. Use of our website

4.2.1. Secure connection

Access to villa.ch is encrypted (transport encryption, TLS/SSL).

4.2.2. Evaluation of user data

Because we are interested in how many people use our website and which topics are of most interest to them, we evaluate user data statistically. This is done using the open source tool Matomo, which does not store any personal data.

4.2.3. Hosting

Our website is hosted by Cyon in Basel. Cyon creates standard web server log files for each access to the website. The IP address, date and time including the corresponding time zone, browser request including referrer (origin of the request), operating system and user interface used including version, browser used including version and language settings, and the amount of data transferred are stored. These records are used to identify technical problems and to ensure security. Cyon also uses the open source software AW-Stats for statistical analysis of website usage.

4.3. Applications

You can submit your application for a position with us via the email address provided on our website. The application documents and all personal data disclosed to us in this context will be treated as strictly confidential, will not be disclosed to third parties, and will only be processed for the purpose of processing your application for employment with us. Unless you give your consent to the contrary, your application file will be deleted/destroyed after the application process has been completed, unless it is subject to a legal retention obligation. The legal basis for the processing of your data is your consent, the fulfillment of the contract with you, and our legitimate interests.

In particular, we process the following information:

  • Kontaktinformationen (z.B. Name, Vorname, Adresse, Telefonnummer, E-Mail)
  • Personal information (e.g., occupation, position, title, employer)
  • Application documents (e.g., letter of motivation, certificates, diplomas, resume)
  • Assessment information (e.g., evaluation by personnel consultants, reference information, assessments)

We process this personal data for the purposes described above based on the following legal grounds:

  • Protection of legitimate interests (e.g., hiring new employees)
  • Consent.

4.4. Suppliers, service providers, other contractual partners

When we enter into a contract with you to provide a service for us, we process personal data relating to you or your employees. We need this data in order to communicate with you and make use of your services.

In particular, we process the following information:

  • Contact information (e.g., last name, first name, address, phone number, email address).
  • Personal information (e.g., occupation, position, title, employer).
  • Financial information (e.g., bank account details).

We process this personal data for the purposes described above based on the following legal grounds:

 

  • Conclusion or execution of a contract with or in favor of the data subject, including contract initiation and any enforcement
  • Safeguarding legitimate interests (e.g., avoiding conflicts of interest, protecting the company, enforcing legal claims).

5. Data disclosure and data transfer

We only share your data with third parties if this is necessary for the provision of our services, if these third parties provide a service for us, if we are legally or officially obliged to do so, or if we have an overriding interest in sharing the personal data.

The following categories of recipients may receive personal data from us:

  • Service providers (e.g., IT service providers, hosting providers, suppliers).
  • Third parties within the scope of our legal or contractual obligations, authorities, government agencies, courts.

We conclude contracts with service providers who process personal data on our behalf, obliging them to ensure data protection. Most of our service providers are located in Switzerland or in the EU/EEA. Certain personal data may also be transferred to the USA (e.g. Google Maps data) or, in exceptional cases, to other countries worldwide. If data transfer to other countries that do not have an adequate level of data protection is necessary, this is done on the basis of the EU standard contractual clauses (e.g., in the case of Google) or other suitable instruments.

6. Duration of storage of personal data

We process and store your personal data for as long as it is necessary to fulfill our contractual and legal obligations or otherwise for the purposes pursued with the processing, i.e., for example, for the duration of the entire business relationship (from the initiation, execution, to the termination of a contract) and beyond, in accordance with the statutory retention and documentation obligations. As soon as your personal data is no longer required for the above-mentioned purposes, it will be deleted or anonymized as a matter of principle and as far as possible. For operational data (e.g., system logs), shorter retention periods of twelve months or less generally apply.

7. Data security

We take appropriate technical and organizational security measures to protect your personal data from unauthorized access and misuse, such as issuing instructions, training, IT and network security solutions, access controls and restrictions, encryption of data carriers and transmissions, pseudonymization, and controls.

8. Your rights

You have the following rights in connection with our processing of personal data:

  • Right to information about personal data stored by us about you, the purpose of processing, the origin, and the recipients or categories of recipients to whom personal data is disclosed.
  • Right to rectification if your data is incorrect or incomplete.
  • Right to restrict the processing of your personal data
  • Right to request the deletion of processed personal data
  • Right to data portability
  • Right to object to data processing or to withdraw consent to the processing of personal data at any time without giving reasons.
  • Right to lodge a complaint with a competent supervisory authority, where provided for by law.

To exercise these rights, please contact the address specified in section 1.

Please note, however, that we reserve the right to enforce the restrictions provided for by law, for example if we are obliged to store or process certain data, have an overriding interest in doing so (insofar as we are permitted to invoke this), or need it to assert claims. If you incur any costs, we will inform you in advance.

9. Changes to the privacy policy

We expressly reserve the right to change this privacy policy at any time.

Last modified: February 13, 2026, translated with deepl.com