Further information in connection with individual offers may be contained in general terms and conditions, conditions of participation and similar provisions.
Saastal Bergbahnen AG („STB“)
Saastal Tourismus AG
Obere Dorfstrasse 2
Phone no.: + 41 (0)27 958 18 58
Saas-Fee/Saastal Webshop GmbH
Obere Dorfstrasse 2
Phone no.: + 41 (0)27 958 18 58
“Personal data" means all information that can be associated with a particular natural person, including for example:
- contact information/details, e.g. name/company ("name"), address, e-mail address;
- further personal information, e.g. gender, date of birth, nationality; passport photo;
- purchasing data, such as information on purchases, shopping carts, preferences regarding certain product categories;
- information about your visits to our websites and the use of our apps;
- possibly information on whether you are the owner of other products (e.g. SwissPass, Skidata KeyCARD, Citizens’ Pass) which can be combined and/or offered in combination with our products.
We generally collect your personal data from you directly, e.g. when you communicate with us, when you visit our website or use an offer online or via an app. However, your personal data may also be collected indirectly, e.g. if you order one of our offers for your whole family and we require personal details for this or if you receive one of our offers as a gift.
By "processing" we mean any form of handling of your personal data, including for example:
- the collection and storage;
- the organisation and management;
- the adaptation and modification;
- the reading and retrieval;
- the use and application;
- the transfer and disclosure;
- the combination;
- the restriction; and
- the erasure and destruction of personal data.
You decide which personal data you wish to disclose to us. If you benefit from one of our offers and/or use one of our services which we offer on our website, the personal data collected in each case may be different.
As a rule, you are not obliged to provide us with certain information. However, we can often only reply to you or make our services and online offers fully available to you if you provide us with certain personal data and we can process them.
3.1. Visit to our website
When you access our website, technical information (e.g. IP address, date and time of access, country from which you are accessing the website) is automatically forwarded to our server by the browser used on your end device and temporarily stored with us (so-called "log data").
We use these data to provide the website, for reasons of IT security and to improve the user-friendliness of the website.
We also use „Cookies“; these are files that are stored on your end devise when you visit our website. Cookies are often required for the functionality of our website and are automatically deleted after your visit (so-called „sessions cookies“). Other cookies are used to personalise the offer and are stored for a certain period of time (so-called „permanent cookies“). However, you have the option of setting your browser to notify you when your receive a cookie or to refuse it automatically. However, rejeting a cookie may mean that you cannot or can no longer use certain functions on our website.
Furthermore, we use various analysis services (e.g. Google Analytics and similar providers) or social plug-ins (e.g. Facebook) with which detailed information about the behaviour of the users of our website is collected. We can also integrate functions of social media providers, which can lead to the respective provider receiving data about you. In addition, we use other services from similar providers to analyse the behaviour of our website’s users and thus optimise our offer. However, in most cases we do not know the names of website visitors.
We will collect personal data when you contact us through one of the following communication channels. We process your personal data in order to handle and answer your concerns and questions. Furthermore, we are at your disposal for questions in connection with other processing purposes.
There are several ways to communicate with us. You can reach us by phone through our customer service (phone no. +41 27 958 18 58) or contact our support by e-mail (firstname.lastname@example.org). Naturally, you can also send us a letter to the following address. If you use our contact form, your message will be sent to a configured e-mail address and your data will be stored temporarily as a backup on the website.
Your details such as name and contact information (e-mail/address) as well as the content and time of your message are usually sufficient for us. We use these data to process your request and to communicate with you for this purpose and to ensure the quality of our communication with you in the future. If your request concerns other involved parties of our business partners or our group, we will forward your details so that your request can be dealt with as quickly as possible and to your satisfaction.
Furthermore, you have the possibility to register for different offers/events via a contact form. In this case, we may collect additional – possibly particularly sensitive – data which are necessary for the safe execution of the corresponding event (e.g. eating habits, date of birth, state of health, etc.).
Telephone calls with us may be recorded, of which you will be informed in advance.
If you communicate with us on your own initiative, we understand this as consent to the processing of your personal data. In many cases, the processing of personal data by customer service and the communication by electronic means are also in our legitimate interest as they enable us to communicate with customers and others, improve the quality of our services, avoid errors in our processes and achieve greater customer satisfaction.
3.3. Purchase and use of services
We offer you an extensive range of services. When you make use of such services, we process your personal data mainly in the context of processing contracts or for delivery and invoicing (e.g. contact details, the specific offer which you have booked, the date when you have booked a certain offer). When you book an offer via our website, we will collect personal data in connection with your creditworthiness and payment behaviour. Depending on the offer/service, we may collect additional data which are required for processing (e.g. a passport photo for issuing a ski pass, Swiss ID, etc.). Furthermore, we may collect personal data (e.g. on your purchasing behaviour) in order to inform you in the future about further offers which we can tailor to your needs and your previously observed demand based on your previous information. We may also use your personal data for statistical purposes.
In the context of our WinterCARD program we will process your personal data in a "personalised order process“. All WinterCARDs acquired with a purchase transaction must be personalised in one process. In this context, we will process your personal data by requiring a valid e-mail address for each cardholder; for children, the buyer's details may be provided. We will then store information as to whether or not you have personalised the individual cards (providing your name, address, date of birth and passport photo) and will send you a reminder e-mail to the e-mail address you have provided at regular intervals until then. We will also store the information about when you personalise your tickets and automatically initiate the production of the tickets after the purchase has been made. You will then receive a so-called voucher by e-mail, which you must present together with your ID card at our cash desk in order to receive the WinterCARD.
Alternatively, you can register your SwissPass when you buy a WinterCARD. If you choose this option, we will process your data by automatically loading the purchased WinterCARD onto your SwissPass. In this case you do not have to contact us personally.
Once the purchase is complete, we may also process your personal data if you decide to invite your friends to purchase a WinterCARD through social media communication channels. If you send such invitations by e-mail or via social media communication channels, the link to the shop in such invitations contains a code by which we can identify you and thus know that you have sent such invitations and how many of your friends have also purchased a WinterCARD at your request.
For further information on the use of our services in connection with the purchase of a WinterCARD, please refer to the General Terms and Conditions of WinterCARD. If you would like to see them, you are welcome to contact us by telephone, e-mail or post (see contact details).
We will base this processing on the fact that we may process personal data in order to process your contract applications and contracts. The processing also serves legitimate interests, e.g. if we deliver goods to third parties (e.g. in the case of gifts). By evaluating information about your purchasing behaviour, we can better and more specifically tailor our services to your needs and interests and expand and improve our offerings. This is important for us so that we can continue to offer attractive products (such as e.g. our WinterCARD program) to the needs of our customers (especially guests, tourists).
As far as we process particularly sensitive personal data, we usually rely on your express consent.
3.4. Online services and applications (apps)
Even if you do not obtain any specific services, when you visit our website we will collect personal data, e.g. information about your registration as a user, information about which offers you have already received via your user account and information about which apps you download and how you use them.
3.5. Information and direct marketing
We will process personal data for sending information and advertising messages. For example, if you register for a newsletter, we will process your personal data in order to get to know you better, to tailor our offers more closely to you and to improve them in the future. To subscribe to our newsletter, you must register by providing us with your e-mail address. You will then receive an e-mail with the message that you should confirm your registration.
As part of our WinterCARD program, we carry out separate direct marketing measures specifically aimed at WinterCARD holders. This enables us to get to know our customers better and to analyse their needs and consumer behaviour more closely. You can register for a separate newsletter which informs you about further offers within the scope of this program. If you so wish, we will send you information on current offers and events as well as survey enquiries regarding e.g. slope conditions. If you so wish, we can send you further information of interest to you (e.g. personal offers and discounts; advertisements based on your Skiline account information, etc.).
You can unsubscribe at any time by clicking on the link at the end of each newsletter.
We understand your registration for an electronic newsletter as consent to the processing of the mentioned personal data for the stated purposes. We also have a legitimate interest in direct marketing and evaluating your response to such advertising. Both are important to us so that we can compete successfully in the market.
3.6. Participation in competitions
From time to time we will hold competitions and contests. If you decide to participate, we will collect your personal data about your participation and your contact details so that we can inform you about the course/results of the competition or contest. Furthermore, we may collect additional personal data – which may also be particularly sensitive – if it is necessary for the execution of the respective competition or contest (e.g. age, state of health). We may also use these data for our own advertising purposes.
More detailed information on the individual events can be found in the corresponding conditions of participation.
If you participate in an event, you agree that we process your personal data for this purpose. The processing also serves legitimate interests. You also agree to the respective conditions of participation. We can thus better and more specifically tailor our services to your needs and interests and expand and improve our offerings. This is important for us so that we can successfully compete in the market.
3.7. Business partners
We work with different companies and business partners in the tourism industry, e.g. with hotels, but also with cooperation partners and other service providers. In the course of preparing and executing contracts we will also process personal data about the contact persons in these companies (e.g. name, function, communication, etc.) for planning and accounting purposes as well as for other purposes related to the respective contract.
This processing is in our legitimate interest because it enables us to use and sell goods and services. We also have a legitimate interest in preventing abuse and ensuring an adequate level of security. Customer care is also in our legitimate interest. If we have a contract with you directly or if you wish to conclude a contract with us directly, we will process your personal data to conclude and process the contract.
If we process particularly sensitive personal data for the purposes mentioned, we usually do so to assert, exercise or defend legal claims or with your express consent.
We will process personal data for various administrative purposes, such as the management of orders and online registrations in connection with contract processing, in particular your contact details or information on the specific offer of which you make use. Within the framework of such contract processing, we may also disclose personal data to our partners.
The processing of personal data for the aforementioned purposes may be necessary for the processing of contracts. It is also necessary for the legitimate interest of internal administration.
3.9. Compliance with legal requirements
We will process personal data to comply with legal requirements. This includes, for example, the receipt and processing of complaints and other reports, internal investigations or the disclosure of documents to an authority if we have good reason to do so or are legally obliged to do so.
The processing of personal data for the aforementioned purposes is necessary for compliance with legal obligations and for legitimate interests.
3.10. Protection of rights
We will process personal data in various constellations in order to protect our rights, e.g. to assert claims in court, pre-litigation or out of court and before authorities in Switzerland and abroad or to defend ourselves against claims. For example, we can have the chances of succeeding in court assessed or submit documents to an authority. In doing so, we may process your personal data or disclose them to third parties in Switzerland and abroad, insofar as this is necessary and permissible.
The processing of personal data for the aforementioned purposes may be necessary for the processing of contracts. It is also in our legitimate interest.
You can object to data processing at any time and, as a rule, freely withdraw your consent to data processing. A right to object exists in particular against data processing in connection with direct advertising (e.g. against advertising e-mails).
Right to information
Right of access
You have the right to request free access to your personal data stored by us at any time when we process them. This gives you the opportunity to check which personal data we process about you and that we use them in accordance with the applicable data protection regulations. Please contact us at
In individual cases, the right of access may be restricted or excluded, in particular:
· if we have doubts about your identity and you cannot identify yourself;
· for the protection of other persons (e.g. to safeguard confidentiality obligations or the data protection rights of third parties);
· in the case of excessive exercise of the right of access (alternatively, we can charge a fee for access); or
· if full access would generate disproportionate effort.
Right to rectification
You have the right to have inaccurate or incomplete personal data rectified and to be informed of such rectification. In this case, we will inform the recipients of the data concerned about the adjustments made, unless this is impossible or involves disproportionate effort.
Right to erasure
You have the right to have your personal data erased. You can request the erasure of your personal data if:
· the personal data are no longer required for the purposes pursued;
· if you have effectively withdrawn your consent or effectively objected to the processing;
· if the personal data are processed unlawfully.
In this case, we will inform the recipients of the data concerned about the erasure, unless this is impossible or involves disproportionate effort.
In individual cases, the right to erasure may be excluded, in particular if processing is necessary:
· for the exercise of freedom of expression;
· to perform a legal task or if it is in the public interest;
· to exercise legal claims.
Right to restrict processing
Under certain conditions, you have the right to request that the processing of your personal data be restricted. This may mean, for example, that personal data are (provisionally) not processed further or that published personal data are (provisionally) removed from a website. In this case, we will inform the recipients of the data concerned about the adjustments made, unless this is impossible or involves disproportionate effort.
Right to data portability
You have the right to receive the personal data you have provided to us in a readable format free of charge, as long as:
· the specific data processing is based on your consent or is necessary for the fulfilment of a contract; and
· the processing is carried out by automated means.
Depending on the individual case, your personal data may be transferred to you or directly to a third party provider.
Right to lodge a complaint
You have the right to lodge a complaint with a competent supervisory authority against the way in which your personal data are processed.
Right of withdrawal
In principle, you have the right to withdraw your consent at any time. However, processing activities based on your consent in the past will not become unlawful as a result of your withdrawal.
Our employees have access to your personal data insofar as this is necessary for the purposes described and the activities of the employees concerned. They act in accordance with our instructions and are bound to confidentiality and secrecy when handling your personal data.
We may disclose your personal data to other companies for management, administrative and contract processing purposes in connection with purchases, orders and/or registrations made on the online sales platform. This may be the case in particular in connection with services which you book, for example, via our web shop and which are carried out by one of our business partners (hotels, ski lifts, etc.). Furthermore, we may be contractually obliged to disclose your personal data to this contracting party for the purpose of processing the service you have booked.
Furthermore, we may disclose your personal data to third parties if we wish to make use of their services ("data processor"). In particular, this concerns services in the following areas:
- Administrative work (e.g. accounting);
- Advisory services, e.g. services of tax consultants, lawyers and management consultants;
- IT services, e.g. services with respect to data storage (hosting), cloud services, sending e-mail newsletters, data analysis and data refinement, etc;
- Credit checks, e.g. if you wish to make a purchase via booking platforms, direct reservation systems or on account.
Through the selection of data processors and suitable contractual agreements, we ensure that data protection is also ensured by third parties during the entire processing of your personal data. Our data processors are obliged to process your personal data exclusively on our behalf and according to our instructions.
It is also possible that we will disclose personal data to these and other companies (also) for their own purposes. In these cases, the recipient of the data is a controller under data protection law that will determine the processing of your personal data in its own data protection regulations. This concerns for example the disclosure of personal data to hotels or other accommodation providers through our webshop.
We may also disclose your personal data to third parties (e.g. Swiss and foreign authorities) if required to do so by law. We also reserve the right to process your personal data in order to comply with a court order or to assert or defend legal claims or if we consider it necessary for other legal reasons.
The recipients of your personal data, to whom we disclose personal data for the purpose of e.g. IT services, may be located abroad – sometimes also in countries outside the EU or the EEA. The countries concerned may not have laws that protect your personal data to the same extent as in Switzerland, the EU or the EEA. If we transfer your personal data to such a country, we are obliged to ensure the protection of your personal data in an appropriate manner. One way of achieving this is to conclude data transfer agreements with the recipients of your personal data in third countries, which ensure the necessary data protection. These include agreements approved, issued or recognised by the European Commission and the European Data Protection Commissioner, so-called standard contractual clauses. The transfer to recipients that are subject to the US Privacy Shield Program is also permitted. According to this program, the companies subject to it also have a corresponding level of data protection.
In exceptional cases, the transfer to countries without adequate protection is also permitted in other cases, e.g. based on express consent, to fulfil a contract with the data subject or to process his or her contract application, to conclude or fulfil a contract with someone else in the interest of the data subject, or to assert, exercise or defend legal claims.
We will store and process your personal data for as long as it is necessary or legally prescribed or permitted to achieve the respective processing purpose of the personal data’s collection. For example, we have a legitimate interest in the storage of your personal data as long as they are subject to a retention obligation or storage is necessary for evidentiary or security reasons. Data which we store when you visit our websites will be deleted after twelve months at the latest. We usually store personal data with respect to contracts at least for the duration of the contractual relationship.
We have a legitimate interest in the storage of personal data in order to safeguard legal claims, for archiving purposes, to guarantee IT security or if limitation periods for contractual or non-contractual claims are in force. A limitation period of e.g. ten years often applies, in some cases a limitation period of five years or one year. Furthermore, we must retain your personal data as long as they are subject to a statutory retention obligation.
After the expiry of these periods, we will erase or make anonymous your personal data so that you can no longer be identified or be identifiable.
We have taken appropriate security measures of a technical nature (e.g. encryption, access restrictions, data backup, etc.) and of an organisational nature (e.g. instructions to our employees, etc.) to protect the security of your personal data, including protection against unauthorised or unlawful processing and to counteract the risk of loss, accidental alteration, unintended disclosure or unauthorised access. However, security risks cannot generally be completely ruled out; certain residual risks cannot be avoided.
We take special care to protect children and their personal data. In the case of data processing of children, which may only be carried out on the basis of consent, we will ask the parents or the child’s legal representatives for their consent. If consent for a child has been given by its parents or legal representative, the adult person is free to withdraw this consent at a later date.
If you have any questions, concerns, requests for access or other comments, you can contact us any time as follows:
Saas-Fee/Saastal Webshop GmbH
Obere Dorfstrasse 2, 3906 Saas-Fee, Switzerland
Phone no.: + 41 (0)27 958 18 58
Saastal Tourismus AG
Obere Dorfstrasse 2, 3906 Saas-Fee, Switzerland
Phone no.: + 41 27 958 18 58