Privacy Policy

The Ski Lodge, Rue de la Poste 12, 1936 Verbier, Switzerland, is responsible for the processing of personal data described in this policy.

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where it applies, the European Union’s General Data Protection Regulation (GDPR).

For any question about data protection, you can contact us at any time: hello@theskilodge.com

When you visit our website

Our servers automatically record technical information such as your IP address, the date and time of access, the pages visited, the browser and operating system used and the referring website. This data is needed to display the website, keep it secure and fix technical problems.

When you book a stay

To process your reservation, we collect your first and last name, your contact details (email address, phone number, postal address), the dates and details of your stay, the number of guests, your preferences and special requests, and the payment details needed to guarantee or pay for your booking.

During your stay

Swiss federal and cantonal law require us to register our guests: we therefore collect identity information (such as date of birth, nationality and identity document details) at check-in. We also process information related to the services you use at the hotel, such as restaurant, bar and spa reservations, treatments and invoices.

When you contact us

When you write to us or call us, we process your name, your contact details and the content of your message in order to reply to you.

When you subscribe to our newsletter

We store your email address, the language of the website, the date of your subscription and your consent.

We use your personal data only for the following purposes:

• Your reservation and stay: to confirm and manage your booking, welcome you, provide the services you request and invoice them.
• Legal obligations: guest registration, collection of the tourist tax, accounting and tax obligations.
• Communication: to reply to your requests and send you information about your stay.
• Newsletter: to send you news and offers from The Ski Lodge, only if you have subscribed. You can unsubscribe at any time with the link in each email or by writing to us.
• Operation and security of the website: to provide the website, prevent abuse and improve our services.

Where the GDPR applies, the legal bases are the performance of a contract or of pre-contractual measures, compliance with our legal obligations, our legitimate interests and, for the newsletter, your consent.

We do not sell your personal data. We only share it with third parties when this is necessary for the purposes described above:

• Mews, the booking engine and hotel management system we use to process reservations and payments. Card details entered in the booking engine are processed by Mews and its payment partners according to the PCI DSS security standard and are not stored on our website.
• Hosting and IT providers, who host the website and our data on our behalf.
• Partners you ask us to book, such as transfer companies, ski schools, equipment rental shops or activity providers, only with the information they need.
• Authorities, when the law requires it (for example guest registration with the police and the tourist tax).

Our service providers process data on our behalf and are contractually bound to protect it.

Our website only uses the cookies and similar technologies it needs to work, for example to remember a display preference or to keep editors logged in to the site administration. We do not use advertising cookies or audience analytics tools. If this changes, we will update this policy and ask for your consent where required.

Booking engine

When you open the booking window, the Mews booking engine is loaded from Mews servers and may store technical information in your browser to run the reservation process.

Google Maps

Our contact page displays a Google Maps map provided by Google Ireland Limited and Google LLC. When the map is displayed, your browser connects to Google servers, which receive your IP address and may set cookies. More information: policies.google.com/privacy

You can block or delete cookies in your browser settings at any time; some features of the website may then no longer work.

Personal data is mainly processed in Switzerland and in the European Union or European Economic Area (EU/EEA), whose level of data protection is recognised as adequate by the Swiss Federal Council. Some providers, such as Google, may process data in other countries, including the United States. In such cases, we ensure that the data is protected by appropriate safeguards, such as the Swiss-U.S. Data Privacy Framework or the standard contractual clauses recognised by the Federal Data Protection and Information Commissioner (FDPIC).

We keep personal data only for as long as necessary for the purposes for which it was collected, or for as long as the law requires:

• Booking and accounting documents: 10 years, as required by Swiss law.
• Guest registration data: for the period required by cantonal law.
• Correspondence: as long as necessary to handle your request and its follow-up.
• Newsletter: until you unsubscribe.
• Server log files: a few weeks, unless they are needed to investigate a security incident.

Under the conditions of the applicable law, you have the right to:

• know whether we process personal data about you and obtain a copy of it;
• have inaccurate data corrected;
• have your data deleted or its processing restricted;
• object to certain processing, in particular for marketing purposes;
• receive the data you have provided to us in a common electronic format;
• withdraw your consent at any time, without affecting processing carried out before.

To exercise your rights, write to us: hello@theskilodge.com

We may ask you to prove your identity.

You can also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) or, where the GDPR applies, with the data protection authority of your country of residence.

We take appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. Our website is encrypted (HTTPS) and access to personal data is limited to the people who need it for their work. However, no transmission over the internet can be guaranteed to be completely secure.

We may update this policy to reflect changes to our services or to the law. The version published on this page, with its date of last update, applies.