Privacy Policy
ODA Suites is a brand of Bazar Hospitality Group and part of Baser Gastro AG.
1. Responsible body
Baser Gastro
Pilatusstraße 23
6003 Lucerne
switzerland
UID/VAT: CHE-222.815.164
+41 41 313 47 84
luzern@odasuites.ch
www.odasuites.ch
2. Scope
This privacy policy applies to the website of ODA Suites as well as for personal data that we process in connection with contact requests, newsletter registrations, website usage, bookings and stays.
It is primarily based on Swiss data protection law. Where applicable, we also take into account the requirements of the GDPR.
3. Which data we process
In particular, we process the following personal data:
- Master data (name, gender, date of birth, nationality and address)
- Contact details (email address and telephone number)
- Booking and stay dates
- Payment details or payment-related information
- Communication data (forms, email, OTAs, WhatsApp)
- Technical data (IP address, device, browser, date and time)
- Website usage and interaction data
- Document data, insofar as this is required as part of legal obligations or check-in
Depending on the booking channel and stay, not all data may always be required.
4. Purposes of data processing
In particular, we process personal data for the following purposes:
- Operation and provision of the website
- Processing inquiries
- Sending newsletters and marketing communications
- Processing bookings and payments
- Implementation and management of stays
- Fulfilment of legal obligations (accommodation, accounting and reporting)
- Analysis, security and optimization of our website
- Marketing, reach measurement and conversion tracking
5. Bookings, Mews, and OTAs
Bookings can be made directly via our website or via third-party platforms such as Airbnb, Booking.com or other online travel agencies (OTAs).
For the central administration of bookings, availabilities, stays and related processes, we use Mews as a booking and property management system. In this context, booking data is processed and stored centrally via Mews. Mews provides its own privacy information and security information for its services.
If you book via an OTA, the privacy policy of the respective platform also applies. In this case, we receive from the platform and/or via Mews the data we need to process the contract and manage your stay.
6. Payments
Payments are processed via external payment service providers or as part of the booking system used. We do not store complete credit card details ourselves in unencrypted form. Payment data is only processed to the extent necessary for payment processing, booking management, documentation and legal obligations.
7. Contact
If you contact us via contact form, email or WhatsApp, we will process the information you provide to process your request and for any communication.
8th newsletter
When you sign up for our newsletter, we process the data you provide, in particular your email address and possibly your name, to send you information, offers and news about ODA Suites.
To send the newsletter, we use Mailchimp. The data required for sending can be processed by Mailchimp. Mailchimp processes customer data as part of its services and provides its own privacy and security information for this purpose. Mailchimp also points out that data transfers can also take place to the USA and that suitable transfer mechanisms are used for this purpose.
You can unsubscribe from the newsletter at any time via the unsubscribe link in the newsletter or by sending us a message.
9. Cookies, Tracking and Consent
Our website uses cookies and similar technologies.
- Technically necessary cookies are used without consent
- Analytical and marketing tools will activated only after your consent
You can adjust your settings at any time via the consent banner.
10. Analysis and marketing tools
In particular, we use the following tools:
- Google Analytics
- Google Tag Manager
- Meta Pixel
These services help us to evaluate the use of our website, measure reach, optimize marketing measures and track conversions. In particular, technical data, usage data, interactions and device-related information can be processed.
Important: Insofar as high-risk profiling could occur through the use of these tools, this is done exclusively on the basis of your express consent.
11. External content and services
External services and content may be integrated on our website, in particular:
- Google Maps
- Video hosting via Vidzflow
- Third party widgets
When loading such content, technical data such as IP address, browser information and usage data may be transmitted to the respective providers.
12. Social media and communication
Our website may link to social media profiles. In addition, communication channels such as e-mail or WhatsApp can be used. If you contact us via such channels, we will process the data you provide to communicate with you.
When using these services, data is processed in accordance with the respective platform conditions.
13. Transfer to third parties/order processing
We only share personal data when necessary, in particular to:
- Booking and PMS service provider (MEWS)
- Payment provider
- Newsletter service provider (Mailchimp)
- Hosting, IT, and support service providers
- Analytics and marketing providers (Google, Meta)
- Authorities or other bodies, insofar as we are required to do so by law
In principle, our service providers only process data to the extent necessary for their services.
These service providers are used on the basis of suitable contracts and only process data in accordance with our instructions.
Subcontract processing is only carried out within the framework of legal requirements.
14. Disclosure of data abroad
Personal data may be transferred to the following countries:
- USA (e.g. Google, Meta, Mailchimp)
- EU/EEA countries (e.g. Mews, hosting service provider)
- more states as part of OTAs (e.g. Airbnb, Booking.com)
The transmission is based on:
- Standard Contractual Clauses (SCC)
- If applicable, other appropriate guarantees
- or legal admissibility
15. Retention period
We only store personal data for as long as is necessary for the stated purposes or as long as there are legal storage obligations.
In particular, the following are decisive:
- Duration of customer relationship or stay
- legal obligations in the area of accounting and accommodation
- legitimate interests in documentation, security and law enforcement
16. data security
We take appropriate technical and organizational measures (TOMs) taking into account:
- the state of the art
- the nature and scope of processing
- the probability of occurrence and severity of risks
The aim is to protect against loss, misuse and unauthorised access.
17. Rights of data subjects
Within the framework of applicable data protection law, you have in particular the right to:
- information
- rectification
- Deletion (where permitted)
- constraint
- contradiction
- Data release
- Withdrawal of consent
Please direct inquiries to: luzern@odasuites.ch
18. Data Protection Impact Assessment (DPIA)
For high-risk processing, we carry out a data protection impact assessment in accordance with Art. 22 DSG.
If there is still a high risk, the FDOEB can be consulted.
19. Amendments
We can update this privacy policy at any time. The version published on our website applies.