When you contact us via email, your data will be processed for the purpose of processing or following up on the request, contacting you, and for technical administration.

We collect and use data on the website to improve the information, products, and services provided, to better tailor our business operations to the needs of customers and website visitors («visitors»), and to ensure efficient access to information.

If you have any questions regarding data protection or would like to exercise your rights, you can contact us using the following contact details:

Schloss Freudenfels AG
Schlossweg
8264 Eschenz
Switzerland

Telephone: +41 52 742 72 11

E-mail: info@schloss-freudenfels.ch

Web server logs.

When using the website, anonymized access data (e.g. log files, IP address, date and time of access, name of the accessed file, access status, page from which access was made, top-level domain, used web browser, used operating system) are stored. We use this data for statistical purposes, for technical evaluations, and to determine access frequencies in order to improve user-friendliness and functionality.

Cookies.

The website uses so-called cookies, which are small text files that are stored on your device with the help of your browser. They do not cause any damage, but serve to facilitate your use of the website and make it more individual.

If you do not wish to accept cookies, you can set up your browser to inform you about the setting of cookies and to allow this only in individual cases. In addition, common browsers have the option to not allow or disable cookies. You can usually find instructions on how to manage cookies in your browser's help function or in the operating manual of your device. For common browsers, you can also access instructions on how to disable cookies at the following links:

• Internet Explorer 
• Firefox
• Chrome
• Safari
• Opera

Some cookies are necessary for the website to function properly. The technically necessary cookies remain stored on your device for a certain period of time or until deleted. You can delete technically necessary cookies from your browser after using the website.

Due to cookies, the IP data of the connection owner is stored when visiting the website. Under certain circumstances, personal data such as the visitor's name and address are also collected via corresponding input masks.

Visitors to the website are informed about the collection of personal data on the corresponding pages. We use personal data for the processing of which you have given us your consent (e.g. ordering newsletters or brochures), or which is necessary for the performance of a contract or in the course of initiating business.

Personal data that we collect via the website will only be used in accordance with the purpose arising from the page in question and will be stored until this purpose has been fulfilled. In the event of a contract being concluded, the data from the contractual relationship will be stored until the expiry of the statutory retention or limitation periods.

The data collected on the website is forwarded internally when you enter it. The confidentiality of the data is maintained. The data is only passed on to third parties if this is necessary (e.g. dispatch of newsletters or brochures by service providers).

By using state-of-the-art security software and certified coding and encryption procedures, our IT infrastructure complies with international security standards. In addition, we have taken additional, comprehensive security precautions and technical and organisational measures to protect your data from loss, unauthorised access or misuse in accordance with the state of the art for Internet access to accounts and deposits.

Notwithstanding the measures taken to protect your data, data protection and confidentiality may be limited when processing data via universally accessible media. When using the Internet as a transmission medium by means of a computer, mobile phone or other end device, it cannot be ruled out that third parties may gain access to your data and thus draw conclusions about any existing business relationships or that personal data may flow to third countries without our intervention and knowledge.

We recommend that particularly sensitive data, especially personal data and data relating to customer relationships (account, deposit, transactions, etc.), should only be transmitted via secure communication channels. Due to the risks involved, your entry or transmission of personal or business data within the framework of the website or other digital services is voluntary and subject to the waiver of corresponding securities. We accept no liability for any direct or indirect damage arising in connection with the use of the website, the digital services or their content.

Your data is processed on the basis of a legitimate interest (Art. 6 para. 1 lit. f DSGVO) for the following purposes:

• As the operator of the website, we have a legitimate interest in the effective design of the website, in the best possible stability and functionality of the website, the statistical analysis of visitor behaviour for optimisation and marketing purposes, targeted advertising or personalised direct advertising and a secure and user-friendly newsletter dispatch.
• Due to the legitimate interest of a third-party provider (e.g. Google, Wistia) in displaying personalised advertising based on the visitor's surfing behaviour or market research. The third-party providers have committed to comply with the Privacy Shield agreement between the EU and the USA on the collection, use and storage of personal data from EU member states.

If necessary, your data may also be processed for the purpose of contract fulfilment or in the context of business initiation or on the basis of your express consent.

Your rights.

With regard to your personal data, you have the following data subject rights (Art. 15 to 21 DSGVO):

• Right to information:
  You can request information about whether and to what extent we process personal data about you.
• Right to rectification, erasure and restriction of processing:
  You can have inaccurate or incomplete personal data concerning you corrected or request that your data be deleted (e.g. if it is no longer necessary, you have withdrawn your consent or the data processing is unlawful) or the processing of your data be restricted.
• Right of withdrawal:
  You can revoke your consent to the processing of your data at any time. The revocation of consent is only effective for the future and does not affect the lawfulness of the data processed until the revocation. The revocation also has no influence on data processing on the basis of another legal basis.
• Right to data portability:
  You can have your data that you have provided to us transferred in a structured, common and machine-readable format.
• Right of appeal:
  If you feel that your rights have been violated by our data processing, you can lodge a complaint with the Liechtenstein data protection authority or another supervisory authority in an EU or EEA member state (e.g. at the place of residence or place of work or at the place of the breach of the GDPR).

The contact details of the competent supervisory authority are as follows:

Eidgenössischer Datenschutz- und Öffentlichkeitsbeauftragter
Feldeggweg 1
3003 Bern
Schweiz

Telephone: +41 58 462 43 95

E-mail: info@edoeb.admin.ch

Right to object.

• In individual cases:
  Where the processing of your data is carried out in the public interest or to protect the legitimate interests of us or a third party, you may object to such processing at any time on grounds relating to your particular situation.
• Direct mail:
  You can informally object to the use of your data for direct marketing. In the event of your objection, we will no longer process your data for this purpose.

You have the option to subscribe to our newsletter. To do this, we need your e-mail address and possibly other personalisation details as well as your declaration that you agree to receive the newsletter.

As soon as you have registered for the newsletter, you will receive a confirmation e-mail with a link to confirm your registration.

You can unsubscribe from a subscribed newsletter at any time with effect for the future by clicking on the link provided for this purpose in the newsletter. Your data in connection with the newsletter dispatch will then be deleted immediately unless you have expressly given your consent to further data use or we have reserved further data use that is permitted by law.

The dispatch of our newsletter as well as the processing of the newsletter recipients' data is carried out by commissioned service providers or their subcontractors who are based in the EU and are obliged to comply with the GDPR.