Privacy Statement

Important Legal Information

Please read the following privacy policy carefully before proceeding. Persons who access the website https://citystay.com/en declare their agreement to the following conditions.
CITY STAY Management GmbH, Papieri-Ring 4, 6330 Cham (hereinafter also referred to as “we”) is the operator of the website https://citystay.com/en (hereinafter referred to as “technology”) , and thus responsible for the collection, processing, and use of your personal data.
Your trust is important to us, so we take the topic of data protection seriously and ensure it, we train our employees.

Whenever we commission third parties to process personal data, the third party will be carefully selected and must take appropriate security measures to ensure the confidentiality and security of your personal information.

Responsible body for data protection:
CITY STAY
Papieri-Ring 4
6330 Cham
info@citystay.com

Copyright and trademark rights

The entire content of the website https://citystay.com/en is protected by copyright. All rights belong to CITY STAY or third parties. The elements on the website https://citystay.com/en are freely accessible only for browsing purposes. Reproduction of the material or parts thereof in any written or electronic form is only permitted with explicit mention of https://citystay.com/en. Reproducing, transmitting, modifying, linking, or using the website https://citystay.com/en for public or commercial purposes is prohibited without our prior written consent. Please contact us at info@citystay.com.

The various names and logos on the website https://citystay.com/en are usually registered trademarks. No part of the website https://citystay.com/en is designed to grant a license or right to use an image, a registered trademark, or a logo. By downloading or copying the website https://citystay.com/en parts thereof, no rights with regard to software or elements on the website https://citystay.com/en are transferred. We reserve all rights with respect to all elements on the website https://citystay.com/en, with the exception of third-party rights.

No warranty

Although we have made every effort to ensure the reliability of the information contained on the https://citystay.com/en website at the time of publication, neither our contractual partners nor we can make any explicit or implicit assurances or warranties (including those with regard to third parties) concerning accuracy, reliability, or completeness of the information on https://citystay.com/en. Opinions and other information on the website https://citystay.com/en are subject to change without notice.

We assume no responsibility and give no guarantee that the functions on the website https://citystay.com/en will not be interrupted or that the website or the respective server is free from viruses or other harmful components.

Limitation of liability

If a contractual relationship exists between the user of the website https://citystay.com/en or another of our services and us, we are only liable for grossly negligent or intentionally caused damage. We exclude any liability for damage caused by an auxiliary. We are not liable for lost profits, data loss or any other direct, indirect or consequential damages resulting from the access to or use of elements of the website https://citystay.com/en or the impossibility to access or use them or from links to others Websites or technical malfunctions.

Links to other websites

The website https://citystay.com/en contains links to websites of third parties that may be of interest to you. When activating such links, you may leave the website https://citystay.com/en , or you may see excerpts from third-party websites within the environment of the website https://citystay.com/en. CITY STAY has not carried out any checks on the websites of third parties connected to the website https://citystay.com/en by links and is in no way responsible or liable for the content or functioning of these third-party websites. This applies regardless of whether you leave the website https://citystay.com/en when activating a link or the representation occurs within the environment of the website, and even if in the latter case the information provider of a foreign website is not readily apparent. Establishing this connection or consulting third-party websites is solely at the account and risk of the user.

General

All personal data collected during the registration or generated during use and protected by the DSG (Schweizer Bundesgesetz über den Datenschutz) or the DSGVO (Datenschutz-Grundverordnung der Europäischen Union) will be used exclusively for the purpose of fulfilling the contract, unless, in particular, according to this privacy policy, your express consent to any further use exists or applicable law allows this.

Our employees are obliged to treat personal data confidentially.

Scope and purpose of the collection, processing, and use of personal data

What personal data we collect

We may collect personal data about received services, your payment details, your online preferences, and your customer feedback, including your company name, your name, address, email, and so on. We use this personal information to communicate with you, to conclude business with you and process transactions, to operate the technology, for billing purposes, to conduct market research as well as for marketing purposes, e.g. to analyse our customer base or to contact you by mail, email, or text messages.
We may collect personal information about your credit standing to protect us against payment default.
Furthermore, your browsing and usage data will be collected. This includes, for example, the IP address, the information with which device, browser and browser version you visited the technology; when you accessed it, which operating system you use, from which website or app you have accessed our technology via a link, and what elements of the technology you use. This personal information is stored together with the IP address of your access device. The purpose is to represent and optimise our technology accurately, to protect against attacks or other violations, and to personalise the technology for you.

When visiting https://citystay.com/en

When visiting our website, our servers temporarily store every access in a log file. The following user and device data, as well as personal data, are collected without your intervention and stored by our host (ISP – Internet Service Provider):

the IP address of the requesting computer
the date and time of access
the name and URL of the retrieved file
the website from which the access was made
the operating system of your computer and the browser you use
the country from which you accessed and the language settings in your browser

The collection and processing of this data is for the purpose of enabling the use of our website (connection establishment), to ensure the long-term security and stability of the system and to optimise our website and for internal statistical purposes. This is our legitimate interest in data processing. The IP address is used in particular to record the country of residence of the website visitor. Furthermore, in case of attacks on the network infrastructure of https://citystay.com/en, the IP address evaluated for statistical purposes.
Furthermore, when visiting our technology, we use so-called pixels and cookies to display personalised advertising and to use web analytics services.

When using our contact forms

You have the option to use a contact form to contact us. The entry of the following personal data is mandatory:

Title
First and Last Name
Address (street, house number, city, zip code)
Phone number
email address

The mandatory entries are marked by (*). Failure to provide this information may hinder the provision of our services. The specification of personal data in other fields is voluntary. You can inform us at any time that you no longer consent to the processing of this voluntarily provided personal data (see heading “Your Rights”). Other information is optional and does not affect the use of our technology.
We only use this data to answer your contact request in the best possible and personalised way. You can inform us at any time that you no longer consent to the processing of this voluntarily provided personal data (see heading “Your Rights”).

Use of your data for advertising purposes

Creation of pseudonymized usage profiles

To enable personalised marketing in social networks, we use so-called remarketing pixels on the technology. If you have an account with a social network involved in this and are logged in at the time of the page visit, this pixel links the page visit with your account. You can make additional settings for advertising in the respective social networks in your user profile. We use re-targeting technologies. Your user behaviour will be analysed on our technology, in order to be able to offer you personalised advertisements on partner websites. Your user behaviour is recorded under a pseudonym. Most re-targeting technologies use cookies. You can prevent re-targeting at any time by rejecting or disabling cookies in the menu bar of your web browser. You can also visit the Digital Advertising Alliance website at
optout.aboutads.info to apply for an opt-out for the other advertising and re-targeting tools mentioned. The following remarketing pixels are used on our technology:

AdWords and DoubleClick

We use Google AdWords Remarketing and DoubleClick by Google services of Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Irland (Registration number: 368047), to display ads based on the use of previously visited websites. Google uses the so-called DoubleClick cookie, which allows the recognition of your browser when visiting other websites. The information generated by the cookie about your visit to this technology (including your IP address) will be transmitted to and stored by Google on a server in the United States (for additional information regarding transfers of personal data to the United States, see “Transfer of Personal Information Abroad” below). Google will use this information to evaluate your use of the technology in relation to the advertisements to be displayed, to compile reports on the website activities and advertisements for the website operators and to provide other services related to the use of the website and the Internet. Google will also transfer this information to third parties if required by law or if third parties process this data on behalf of Google. However, Google will never associate your IP address with other Google data.

Sharing of your data with third parties

We share your personal data if you have expressly consented, there is a legal obligation, or if it is necessary for the enforcement of our rights, in particular for the enforcement of claims arising from the relationship between you and CITY STAY(e.g. collection agencies, authorities, or lawyers). We may share your data with third parties as far as required in the context of the use of the technology for the provision of the desired services (e.g. outsourcing partners, web hosts, companies through which we offer the services on our technology (e.g. for bookings, rent, purchase, etc.), companies that advertise on our behalf) as well as the analysis of your user behaviour.

When sharing your data with third parties, we provide sufficient contractual guarantees that such a third party uses the personal data in accordance with legal requirements and exclusively in our interest.

If the technology contains links to third-party websites, CITY STAY no longer has any influence on the collection, processing, storage, or use of personal data by the third party after clicking on these links and assumes no responsibility.

Transfer of personal data abroad

CITY STAY is entitled to transfer your personal data to third parties (contracted service providers) abroad if this is necessary for the data processing described in this privacy policy. They are obliged to data protection to the same extent as we are. If the level of data protection in one country does not correspond with Swiss or the European standards, we contractually ensure that the protection of your personal data corresponds to that in Switzerland or the EU at all times.
For the sake of completeness, we would like to point out to users domiciled or residing in Switzerland that in the US, there are surveillance measures implemented by US authorities, which generally require the storage of all personal data of all persons whose data was transferred from Switzerland to the USA. This takes place without any differentiation, limitation, or exception on the basis of the objective pursued and without an objective criterion that would limit the US authorities’ access to the data and its subsequent use to very specific, strictly limited purposes, which could justify both with access to as well as the use of the information obtained this way. Furthermore, we would like to point out that in the USA, there are no legal remedies available for persons concerned from Switzerland which would allow them to obtain access to the data concerning them and to pursue their rectification or deletion, and no effective judicial protection against the access rights of US authorities. We explicitly inform the person concerned about this legal and factual situation in order to make an informed decision regarding the consent to the use of their data. For users residing in EU Member States, please note that, from the point of view of the European Union, the US does not have sufficient data protection levels due to, among other things, the issues mentioned in this section. To the extent that we have explained in this privacy statement that recipients of data (such as Google, Facebook, or Twitter) are based in the US, we will either be governed by contractual arrangements with these companies or by securing certification of these companies under the EU-US -Privacy Shield to ensure that your data is protected at an appropriate level by our partners.

Data security

We use appropriate technical and organisational security measures to protect your stored personal data against manipulation, partial or total loss, and against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments. You should always keep your information confidential and close the browser window when you stop communicating with us, especially if you share the computer with others. We also take corporate privacy very seriously. We have obliged our employees and the service companies commissioned by us to secrecy and to comply with data protection regulations.

Cookies

We use cookies in our technology. Cookies help in many ways to make your visit to our website more accessible, enjoyable, and meaningful. Cookies are information files that your web browser automatically saves to your computer’s hard drive when you visit our website.

Session cookies are used during access to our website (e.g. the online shop) to assign information stored on the server side for each access clearly to you or your internet browser (e.g. so that the shopping cart content is not lost). Session cookies are deleted after closing your Internet browser. Permanent cookies are used to save your default settings (e.g. preferred language) over several independent accesses to our website, i.e. even after closing your Internet browser, or to enable automatic login. Permanent cookies are deleted according to the setting of your Internet browser (e.g. one month after the last visit). By using our website as well as the corresponding functions (e.g. language choice or autologin), you consent to the use of permanent cookies.

Cookies neither damage the hard disk of your computer nor is personal data of the user transmitted to us by these cookies. For example, we use cookies to better tailor information, offers, and advertising to your individual interests. The use does not mean that we receive new personal information about you as an online visitor. Most internet browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer, or you are always notified when you receive a new cookie. The deactivation of cookies may mean that you cannot use all functions of our website.

Tracking tools

On our website, we use so-called tracking tools. These tracking tools will monitor your browsing behaviour on our website. This observation is made for the purpose of the needs-based design and continuous optimisation of our website. In this context, pseudonymized usage profiles are created and small text files stored on your computer (“cookies”).
For this purpose, third-party entrepreneurs can also use permanent cookies, pixel tags, or similar technologies. The third-party entrepreneur does not receive any personal data from us but can track your use of our website, combine this information with data from other websites that you have visited and are also tracked by the third-party entrepreneur, and use these findings for their own purposes (e.g. advertising). The processing of your personal data by the third-party entrepreneur then takes place in the responsibility of the service provider according to its data protection regulations.
The following tracking tools are used:

Google Analytics

Google Analytics is a service of Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Irland (Registration number: 368047). We use Google Analytics on our website in order to create anonymous evaluations of website usage. A cookie is set, and the session’s log data is sent to Google.

Social media plug-ins

The website uses the social plugins described below. The plugins are disabled on our website whenever possible by default and therefore do not send any data. By clicking on the corresponding social media button, you can activate the plugins. If these plugins are activated, your browser will establish a direct connection with the servers of the respective social network as soon as you access one of our websites. The content of the plugin is transmitted by the social network directly to your browser and incorporated by this into the website. The plugins can be deactivated with a click.

TripAdvisor

On our website, we use the social media plugin from TripAdvisor Inc., 400 1st Avenue, Needham, MA 02494 USA. TripAdvisor is an online travel industry company that collects reviews of its users about tourism offerings and combines them with booking recommendations. We use the TripAdvisor widget to display customers opinions about us in a neutral manner. TripAdvisor will place a cookie on your computer as soon as you visit a page with the widget. TripAdvisor Privacy Policy

Google Maps

On certain pages, you can find maps that are integrated from Google Maps. Google Maps is a product of Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Irland (Registration number: 368047). The maps are displayed by I-frame. This means that a foreign website is accessed in the I-frame area of the website. The data processing in this I-frame is beyond our control. Google will assign the access to your Google Account. Google Maps will write a cookie as soon as the page loads. If you wish to prevent this, you can opt-out of the activation of Google cookies for your browser by using the links provided under “Opt-out/Opt-In”.

Facebook Social plugins

On this website, Facebook social plugins are used to make our website more personal. For this purpose, we use the “LIKE” or “SHARE” button. This is an offer from the US company Facebook Headquarters, 1 Hacker Way, Menlo Park, California 94025 USA, 1-650-308-7300. By integrating the plugins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are currently not logged in to Facebook. This information (including your IP address) is transmitted from your browser directly to a Facebook server in the US and stored there. If you are logged in to Facebook, Facebook can assign your visit to our website directly to your Facebook account. If you interact with the plugins, for example by clicking on the “LIKE” or “SHARE” button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information will also be posted on Facebook and displayed to your Facebook friends. For this purpose, Facebook uses usage, interest, and relationship profiles, e.g. to evaluate your use of our website with regard to the advertisements displayed on Facebook, to inform other Facebook users about your activities on our website, and to provide other services related to the use of Facebook. The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your rights in this regard and setting options for the protection of your privacy, can be found in the Privacy policy of Facebook.

Cloudinary

Cloudinary is a service operated by Cloudinary Inc., 111 W Evelyn Ave, Suite 206, Sunnyvale, CA 94086, USA. We use this service to optimise photos from our channels in the social networks for our website. If you access pages where this service is required, Cloudinary will create a cookie that will query IP and the User Agent (browser).

Automated decision-making/profiling

We (or third parties commissioned by us) generally do not make automated decisions that affect your personal information or unlawfully affect or otherwise significantly affect you.

Legal basis of processing

The legal basis for the processing of personal data by us is generally laid down in Article 13 (2) (a) of the GDPR (processing directly related to the conclusion or performance of a contract, corresponds to Article 6 (1) (b) EU GDPR) and Article 13 (1) DSG (consent of the data subject or obligation to be processed by law, corresponds to Article 6 (1) (a) EU GDPR). In cases where we wish to refuse to conclude contracts with data subjects in the future due to abuse, default, or similar legitimate reasons, we reserve the right, based on Article 13 (1) of the DSG (corresponding to Article 6 (1) (f) EU GDPR) to keep name, first name, address, and email address of a data subject as well as the personal data on the circumstances for the sake of our own interest. Processing of your personal data by other affiliates is also based on Article 13 (1) of the DSG (corresponding to Article 6 (1) (f) EU GDPR).

Your Rights

Upon request, we provide information to each data subject as to whether and, if so, which personal data is being processed about them (right to confirmation, right to information). At your request:

We waive all or part of the processing of personal data (right to revoke your consent to the processing of non-essential personal data, right “to be forgotten”). Your request to be forgotten will be shared with third parties we have previously shared your personal information with.
We correct the corresponding personal data (right to rectify incorrect data)
We restrict the processing of the relevant personal data (right to restriction of processing, in which case we will only save your personal data or use it to protect our legal rights or to protect the rights of another person.)
You will receive the relevant personal data in a structured, common and machine-readable format (right to data portability).

To make such a request to exercise any of the rights described in this section, such as when you no longer wish to receive email newsletters or to cancel your account, use the feature on our website or contact our Privacy Officer/or point of contact as stated at the beginning of this Privacy Policy. If we fail to comply with a request, we will inform you of the reasons for doing so. For example, we may, in a legally permissible manner, deny deletion if your personal data is still needed for the original purposes (for example, if you still receive a service from us) if the processing is based on a compelling legal basis (for example, legal accounting rules) or if we have an overriding interest (such as in the case of litigation against the data subject). If we assert an overriding interest in the processing of personal data, you have the right to object to the processing, provided that your particular situation leads to a different balance of interests compared to other data subjects (right to object). For example, this could be the case if you are a person in the public eye or the processing causes the risk that you will be harmed by a third party. If you are not satisfied with our response to your request, you have the right to lodge a complaint with a competent regulatory authority, for example in your country of residence or at the registered office of CITY STAY (right to complain).

Storage of data

We only process personal data for as long as necessary for the purpose or as required by law. If you have set up an account with us, we will store the specified master data without restriction. However, you can request the deletion of the account at any time (see heading “Your Rights”). We will delete the master data unless we are required by law to retain it. In the case of an order without an account, your master data will be deleted after the expiration of the guarantee period or the end of the service insofar as we are not obliged by law to retain it. This deletion can be carried out immediately or in the course of periodically carried out deletion runs.

Contract data, which may also include personal data, will be kept by us until the expiry of the statutory retention period of 10 years. Data retention obligations arise, among other things, from accounting regulations and tax regulations as well as the obligation to retain electronic communications. As far as we no longer need this data to carry out the services for you, the data will be blocked. This means that the data may then only be used for accounting purposes and tax purposes.

If we wish to refuse further business contacts with a data subject due to abuse, payment default, or other legitimate reasons, we will retain the corresponding personal data for a period of five years or, in the event of a recurrence, for ten years.

Possibility to opt-out/opt-in

If you do not agree that we evaluate your usage data, you can disable it. Switching off the tracking is done by filing a so-called “opt-out cookie” on your system. If you delete all your cookies, please note that the opt-out cookie will also be lost and may have to be renewed. Please note that the list below is a list of opt-out options that sometimes includes trackers used by our partners that are not necessarily used on the website:

A good way to configure a large number of cookies can be found at youronlinechoices.com or optout.aboutads.info
or install the browser extension Ghostery, which is available for every popular browser.

Applicable Law and Jurisdiction

This Privacy Policy and the agreements that are concluded based on or in connection with this privacy policy are governed by Swiss law unless the law of another state is necessarily applicable. Jurisdiction is at the headquarters of CITY STAY unless another jurisdiction is mandatory.

Final Provisions

Should individual parts of this privacy policy be ineffective, this does not affect the validity of the remaining privacy policy. Due to the further development of our website and offers or due to changed legal or regulatory requirements, it may be necessary to change this privacy policy. The current privacy policy is published on our website.

This page was last changed on Nov 14, 2022. If you have questions or comments about our legal information or privacy policy, please contact us at info@citystay.com.