Data protection declaration

1.    Privac Policy

This Privacy Policy applies to Luftseilbahn Pfingstegg AG, Rybigässli 25, 3818 Grindelwald, Switzerland, pfingstegg.ch.

This Privacy Policy explains which personal data we process, why we require this data, and how you can object to the processing of your personal data.

Protecting your personal rights and your privacy is of great importance to us and to the companies of the Swiss public transport sector. We are committed to processing your personal data in accordance with the applicable data protection legislation.

The companies of the tourism and public transport sector are committed to the following principles to ensure the responsible and trustworthy handling of your personal data.

You decide how your personal data is processed

Within the limits of the applicable law, you may object to the processing of your personal data at any time, withdraw your consent, or request the deletion of your personal data. You also have the option of travelling anonymously, without your personal data being collected.

We use your personal data to provide added value

The companies of the Swiss public transport sector use your personal data to provide added value throughout your customer journey (e.g. tailored offers and information, assistance or compensation in the event of service disruptions). Your personal data is therefore used solely for the development, provision, improvement and evaluation of our services, as well as for maintaining our customer relationship.

Your personal data is never sold

Your personal data is disclosed only to selected third parties expressly identified in this Privacy Policy and solely for the purposes specified herein. Where we engage third parties to process personal data on our behalf, they are contractually obliged to comply with our data protection standards.

We ensure the security and protection of your personal data

The companies of the Swiss public transport sector are committed to handling customer data with due care and ensuring the security and protection of your personal data. We implement the necessary organisational and technical measures to safeguard your data.

1.1.       Who is responsible for processing your personal data?

Luftseilbahn Grindelwald–Pfingstegg AG (LGP) is responsible for processing your personal data.

As a company operating within the Swiss tourism and public transport sector, we are legally required to participate in the Direct Transport Services (Direkter Verkehr – DV) system. For this purpose, certain data is exchanged between public transport companies (transport operators), public transport networks, and third parties that distribute public transport products. This data is also stored centrally in databases jointly operated by all participating public transport companies and networks.

For certain processing activities, we therefore act as joint controllers together with these transport companies and public transport networks. Further information on these specific processing activities can be found in the section "What does joint controllership in Swiss public transport mean?"

If you have any questions or suggestions regarding data protection, you may contact our Data Protection Officer at any time.

Data Protection Officer
Luftseilbahn Grindelwald–Pfingstegg AG
Remo Spieler
Rybigässli 25
CH-3818 Grindelwald
Email: info@pfingstegg.ch

1.2.       Why do we collect personal data?

We recognise the importance of handling your personal data with care.

All personal data is processed only for specific purposes. These purposes may arise from technical requirements, contractual obligations, legal requirements, overriding legitimate interests, or your explicit consent.

We collect, store and process personal data where necessary, for example to manage customer relationships, sell our products and provide our services, process orders and contracts, handle sales and invoicing, respond to enquiries, provide information about our products and services and market them, offer technical support, and evaluate and further develop our products and services.

For more detailed information about which data is processed for which purposes, please refer to the sections below.

a) When you visit www.pfingstegg.ch

When you visit our website, our servers temporarily record each access in a log file.

The following information is collected automatically, without any action on your part, and stored until it is automatically deleted after a maximum of twelve months:

• the IP address of the requesting device

• the date and time of access

• the name and URL of the file accessed

• the website from which access was made (referrer URL)

• your device's operating system and the browser you use

b) When you subscribe to our newsletter

You may subscribe to our newsletter via our website. Registration is required for this purpose. During registration, the following information is requested:

• Title

• First name and surname

• Email address

• Mobile phone number

The above information is required to process your subscription. We use this data exclusively to personalise the information and offers sent to you and to better tailor them to your interests.

By explicitly confirming your registration, you consent to the processing of the data you have provided for the regular distribution of our newsletter to the email address you have specified, as well as for statistical analysis of user behaviour and the optimisation of our newsletter. This consent constitutes the legal basis for processing your email address in accordance with Article 6(1)(a) GDPR.

We may engage third-party service providers to carry out the technical processing of our marketing activities and may share your data with them for this purpose (see Section 5).

Every newsletter contains an unsubscribe link, allowing you to withdraw your consent at any time. Once you unsubscribe, your personal data will be deleted. Further processing will only take place in anonymised form for the purpose of improving our newsletter.

Please also note that we carry out data analysis in connection with newsletter distribution (see Section 5).

c) When booking, ordering or making reservations through third parties

Our website provides various options for making bookings or reservations, requesting information material, or ordering other services. These services are provided by third-party providers.

Depending on the service, the following personal data may be collected:

• Title and/or company name

• First name and surname

• Postal address (street, house number, postcode, city, country)

• Additional contact details (email address, telephone number)

• Where applicable, credit card details

Mandatory fields will be clearly identified. If this information is not provided, it may not be possible to process your booking or provide the requested service.

Providing any additional information is voluntary and does not affect your use of our website.

As a general rule, the data you enter is collected directly by the relevant service provider. In some cases, we transmit your data to the provider in order to process your request. In such cases, the privacy policy of the respective provider applies to the further processing of your personal data.

The legal basis for processing the above-mentioned data is the performance of a contract in accordance with Article 6(1)(b) GDPR.

Apart from the data processing and transfers described above, no additional processing or disclosure of your personal data takes place.

1.3.       Data Security

We implement appropriate technical and organisational security measures to protect the personal data stored by us against manipulation, partial or complete loss, and unauthorised access by third parties. Our security measures are continuously reviewed and improved in line with technological developments.

You should always keep your payment information confidential and close your browser window once you have finished communicating with us, especially if you share your computer with others. We also take the protection of personal data within our organisation very seriously. Our employees and the service providers engaged by us are bound by confidentiality obligations and are required to comply with the applicable data protection legislation.

We take appropriate precautions to safeguard your personal data. However, the transmission of information over the internet and other electronic means always involves certain security risks. Therefore, we cannot guarantee the absolute security of information transmitted in this way.

1.4.       What does "joint controllership" mean?

Luftseilbahn Grindelwald–Pfingstegg AG is responsible for processing your personal data. As a public transport company, we are legally required to provide transport services together with other transport operators and public transport networks under the Swiss Direct Transport system ("Direkter Verkehr"), pursuant to Articles 16 and 17 of the Swiss Passenger Transport Act.

To facilitate this, certain data—for example, information obtained when you contact us or data relating to the services you purchase—is shared within the National Direct Transport (NDV) network, an association of more than 240 Swiss public transport companies and transport networks.

Your data is stored in the central NOVA (Network-wide Public Transport Connectivity) database, which is operated by Swiss Federal Railways (SBB) on behalf of the NDV. Together with the other transport companies and networks participating in the NDV, we act as joint controllers for this database.

NOVA is the central technical platform used for the sale and administration of Swiss public transport services. It contains the core components required for selling public transport products, including the central customer database. Access to the shared databases by individual transport companies and transport networks is governed by a joint agreement.

The sharing and processing of personal data within the NDV is limited to the following purposes:

Provision of transport services

To ensure that your journey runs smoothly, your travel and purchase data may be shared within the NDV.

Contract management

We process your personal data to establish, administer and fulfil contractual relationships.

Customer relationship management and support

We process your personal data to communicate with you, respond to your enquiries, enable you to exercise your rights, identify you across the Swiss public transport network when you require assistance, provide customer support, and process any compensation claims.

Ticket inspection and revenue protection

Customer and subscription data are processed to ensure revenue protection, including verifying the validity of tickets and discount entitlements, debt collection, and preventing misuse.

Incidents involving travel without a valid or only partially valid ticket may also be recorded in the national fare evasion register.

Revenue allocation

The Alliance SwissPass Office, operated by ch-integral, performs the statutory task defined under the Swiss Passenger Transport Act of collecting travel data for the correct allocation of revenue among participating transport companies.

The Alliance SwissPass Office acts on behalf of the transport companies participating in the National Direct Transport (NDV) system.

Identification through SwissPass Login (Single Sign-On)

If you purchase services using your SwissPass Login, your personal data will be stored in the central NOVA customer database.

To provide Single Sign-On (SSO) functionality—allowing you to use one login for all participating public transport services—login information, SwissPass card details, customer information and service-related data are exchanged between the central SwissPass authentication system and us during the authentication process.

Joint marketing and market research activities

In certain cases, personal data collected when purchasing public transport services may also be processed for marketing purposes.

Where you have given your consent, marketing communications will generally be carried out only by the transport company or public transport network from which you purchased the relevant service.

Other transport companies participating in the NDV will contact you only in exceptional circumstances, under strict conditions, and only where data analysis indicates that a particular public transport offer may be of benefit to you.

An exception applies to Swiss Federal Railways (SBB). Acting on behalf of the NDV, SBB is responsible for marketing national NDV products (such as the GA Travelcard and the Half Fare Travelcard) and may therefore contact you on a regular basis regarding these products.

We also process your personal data for market research, service improvement and product development.

Development of public transport systems using anonymised data

We analyse anonymised data to continuously improve and further develop the Swiss public transport system in line with customer needs.

1.5.       Cookies

Cookies are small files that are stored on your computer or mobile device when you visit or use one of our websites. Cookies store certain settings via your browser and information about the interaction between your browser and the website. When a cookie is activated, it may be assigned a unique identification number that enables your browser to be recognised and allows the information stored in the cookie to be used.

Cookies help make your visit to our website easier, more convenient and more meaningful in many ways. Cookies do not damage your computer's hard drive, nor do they transmit personal data from your device to us. For example, we use cookies to tailor the information, offers and advertisements displayed to you to better match your interests. The use of cookies does not result in us obtaining any additional personal data about you as an online visitor.

Most web browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your device or so that you are always notified whenever a new cookie is set.

Please note that certain functions of our website may not work correctly if cookies are disabled.

When you first visit our website, you will be asked to accept the use of cookies before continuing to use the website. By clicking the confirmation button in the cookie banner, you expressly consent to the use of cookies.

1.6.        Use of Our Own Cookies

When you access certain pages of our website, a so-called session cookie is placed on your device. A session cookie is a small text file that is automatically deleted from your computer once your browser session ends.

This cookie is used solely to enable certain functions and applications on our website.

Most web browsers allow you to change your settings so that your browser does not accept new cookies or so that you can delete cookies that have already been stored.

The following pages provide instructions on how to configure your browser's cookie settings:
‒ Google Chrome für Desktop
‒ Google Chrome für Mobile
‒ Microsofts Windows Internet Explorer
‒ Apple Safari für Mobile

1.7.       Social Media Plug-Ins

Our website uses social media plugins provided by Facebook, Instagram and Tripadvisor.

When these plugins are activated, your browser establishes a direct connection with the servers of the respective social media platform as soon as you visit one of our web pages. The content of the plugin is transmitted directly from the respective social network to your browser and integrated into the website.

For further information, please refer to the privacy policies of the respective social media providers.

1.8.       Auswertung der Newsletter-Nutzung

We use third-party email marketing services to distribute our newsletter. As a result, our newsletters may contain web beacons (tracking pixels) or similar technologies.

A web beacon is an invisible graphic measuring 1 × 1 pixel that is associated with the unique user ID of the respective newsletter subscriber.

These technologies enable us to analyse whether our newsletters have been opened. They also allow us to track and evaluate which links recipients click within the newsletter.

We use this information exclusively for statistical purposes and to improve the content, structure and effectiveness of our newsletters. This helps us tailor the information and offers in our newsletters more closely to the interests of individual recipients.

The tracking pixel is deleted when you delete the newsletter.

If you do not wish tracking pixels to be loaded, you can configure your email application to display emails in plain text instead of HTML. This will prevent tracking technologies contained in the newsletter from being activated.

1.9.       Notice Regarding Data Transfers to the United States

For the sake of transparency, we inform users who are resident or established in Switzerland that United States authorities may be subject to surveillance laws that allow the broad collection and storage of personal data transferred from Switzerland to the United States.

Such data collection may occur without distinction, limitation or exception based on the purpose pursued and without objective criteria limiting the access of U.S. authorities to such data or restricting its subsequent use to specific, strictly limited purposes.

We also inform you that individuals from Switzerland may not have effective legal remedies in the United States to obtain access to their personal data, request its correction or deletion, or challenge the general access rights of U.S. authorities before an independent court.

We explicitly draw your attention to this legal and factual situation so that you can make an informed decision regarding your consent to the transfer and use of your personal data.

Users who are resident in a Member State of the European Union are also informed that, from the perspective of the European Union, the United States may not provide an adequate level of data protection in certain cases, including for the reasons described above.

1.10.       Tracking Tools

To ensure the needs-based design and continuous improvement of our website, apps and email communications, we use web analytics services provided by Microsoft, Google Analytics, Google Tag Manager, and Google Search Console. The legal basis for the data processing described below is our legitimate interest.

Website Tracking

When you visit our website, pseudonymised user profiles may be created and small text files ("cookies") may be stored on your device (see "Cookies" above).

The information generated by these cookies about your use of our website is transmitted to and processed on the servers of the respective service providers. In addition to the data described under "When you visit www.pfingstegg.ch", we may receive the following information:

• the navigation path taken through our website

• the time spent on individual pages

• the page from which you leave our website

• the country, region or city from which you access the website

• device information (device type, version, colour depth, screen resolution, browser window size)

• whether you are a new or returning visitor

• browser type and version

• operating system

• referrer URL (the previously visited website)

• hostname of the accessing device (IP address)

• time of the server request

This information is used exclusively to analyse and improve the use of our website.

Email Tracking

We use third-party email marketing services to distribute our emails and newsletters. For this purpose, our emails may contain web beacons (tracking pixels) or similar technologies.

A web beacon is an invisible 1 × 1 pixel image associated with the unique user ID of the respective email recipient.

For each newsletter sent, we may collect information such as:

• the mailing list used

• the subject line

• the number of emails sent

• which recipients have not yet received the newsletter

• which recipients successfully received the newsletter

• delivery failures

• open rates

• which recipients opened the newsletter

• which recipients unsubscribed

• click behaviour within the newsletter

We use this information solely for statistical purposes and to optimise the content and relevance of our email communications. This allows us to tailor our information and offers more closely to the interests of individual recipients.

The tracking pixel is deleted when you delete the email.

If you do not wish web beacons to be loaded, you can configure your email application to display emails in plain text rather than HTML.

Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies to analyse how visitors use our website (see Section 1.5 Cookies).

Google processes this information on our behalf to evaluate website usage, compile reports on website activity, and provide us with other services relating to website and internet usage.

The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data.

You can prevent cookies from being stored or delete existing cookies at any time through your browser settings.

Google Tag Manager

Our website uses Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is used to manage and deploy website tags. The Tag Manager itself does not set cookies and does not process personal data. It serves solely as a platform for loading other services, particularly Google Analytics.

Google may process personal data outside Switzerland or the European Economic Area (EEA). Where data is transferred to countries that do not provide an adequate level of data protection, Google relies on appropriate contractual safeguards, in particular the European Commission's Standard Contractual Clauses (SCCs).

Microsoft Clarity

Our website uses Microsoft Clarity, a web analytics service provided by Microsoft Corporation.

Microsoft Clarity helps us understand how visitors use our website by analysing user interactions such as clicks, scrolling behaviour and mouse movements in an anonymised manner.

Cookies and similar technologies may be used for this purpose.

The information collected is used exclusively to improve our website and enhance the user experience.

1.11.  Advertising and Marketing (Google Ads, Meta and TikTok)

We work with Artasio AG to plan, manage and optimise our online marketing activities. As part of this collaboration, personal data may be processed where necessary for the implementation, management and evaluation of advertising campaigns.

We use various online advertising services to promote our products and services and to analyse the effectiveness of our marketing activities. For this purpose, cookies, pixels and similar technologies may be used to recognise visitors to our website, display personalised advertisements (remarketing), create audience segments, and measure the success of advertising campaigns (conversion tracking).

In particular, we use the following services:

Google Ads and Google Ads Conversion Tracking

We use Google Ads and Google Ads Conversion Tracking, services provided by Google Ireland Limited.

These services allow us to determine whether users reached our website via a Google advertisement and whether they subsequently performed specific actions on our website, such as making a purchase or submitting an enquiry.

Meta Pixel (Facebook and Instagram)

We use the Meta Pixel, provided by Meta Platforms Ireland Limited.

The Meta Pixel enables us to measure the effectiveness of our advertising campaigns on Facebook and Instagram, create custom audiences for future campaigns, and display interest-based advertising to users.

TikTok Pixel

We use the TikTok Pixel, provided by TikTok Technology Limited and/or TikTok Information Technologies UK Limited.

The TikTok Pixel enables us to measure the success of our advertising campaigns, create target audiences and deliver personalised, interest-based advertising on TikTok.

1.12.      Your Rights Regarding Your Personal Data

You have the right to request, free of charge, information about the personal data we store about you.

You also have the right to request the correction of inaccurate personal data and the deletion of your personal data, provided that no statutory retention obligations or other legal grounds require or permit us to continue processing your data.

In accordance with Articles 18 and 21 of the GDPR, you also have the right to request the restriction of the processing of your personal data and to object to such processing.

You further have the right to receive the personal data you have provided to us in a commonly used, machine-readable format (right to data portability). Upon request, we will also transfer this data directly to another controller designated by you, where technically feasible.

For any of the above requests, you may contact us by email at info@pfingstegg.ch.

To protect your privacy, we may, at our discretion, request proof of identity before processing your request.

You may also provide us with instructions regarding the handling of your personal data after your death.

You have the right to request the correction of inaccurate or incomplete personal data and to be informed once such corrections have been made.

You have the right to object at any time to the use of your personal data for direct marketing purposes.

Where processing is based on your consent, you have the right to withdraw that consent at any time with effect for the future. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Furthermore, every individual has the right to enforce their rights through the courts or to lodge a complaint with the competent data protection authority.

The competent supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).

Website: https://www.edoeb.admin.ch

1.13.  Contact and Group Reservation Forms

When you use our contact form or group reservation form, we process the personal data you provide (such as your name, company name, email address, telephone number, preferred date of visit, group size, and any other information you choose to provide) in order to process your enquiry or reservation, communicate with you, and provide the requested service.

Your personal data is used solely for these purposes and will only be shared with third parties where this is necessary to process your reservation or where we are legally required to do so.

We retain your personal data only for as long as necessary to process your enquiry, fulfil your reservation, and comply with applicable legal retention obligations.

1.14.  Content-Management-System (CMS)

Our website is operated in cooperation with Bold AG using its Content Management System (CMS).

As part of the operation, maintenance and technical support of the website, Bold AG may have access to personal data where this is necessary to provide its services.

Any processing of personal data by Bold AG is carried out solely on our behalf, in accordance with our instructions, and in compliance with the applicable data protection legislation.

1.15. Website-Hosting

Our website is hosted by Hoststar AG.

As part of the hosting services, technical data may be processed to ensure the secure operation and availability of the website. This may include, for example:

• IP address

• date and time of access

• browser information

• server log files

This data is processed solely for the purpose of providing, maintaining and securing our website.

Domain Registration

Our domain is managed by METANET AG, Josefstrasse 218, CH-8005 Zurich, Switzerland.

As part of the domain registration and administration services, the technical and administrative data required for the management of our domain may be processed. Such processing is limited to what is necessary for the provision and administration of the domain registration services.

1.16. Ticketing- und Reservationssystem

We use the n-tree solutions ticketing system for the sale and management of tickets and the processing of reservations.

When you make a booking or reservation, we process the personal data required for this purpose, which may include:

• your name

• contact details

• booking information

• payment information

Your personal data is processed solely for the purpose of handling your booking or reservation, fulfilling our contractual obligations, and complying with applicable legal requirements.

1.17.  Live-Webcam (Roundshot)

Our website features live webcams.

One webcam is located at the Pfingstegg mountain station and is operated by us. A second webcam, located at Bäregg, is operated by a third party and embedded on our website.

The webcams are used solely to display current weather conditions, visibility and operational conditions.

Any individuals captured by the webcams are automatically blurred and are therefore generally not identifiable.

The webcams are not used for surveillance or the monitoring of individuals.

1.18.  Social Media

Our website contains links to our profiles on social media platforms such as Facebook, Instagram, TikTok and YouTube.

These are external links only. A connection to the respective social media platform is established only when you actively click on one of these links.

From that point onwards, the privacy policy and terms of use of the respective platform apply.

1.19.     Data Retention

We retain personal data only for as long as necessary:

• to use the tracking, advertising and analytics services described above on the basis of our legitimate interests;

• to provide the services you have requested or to which you have given your consent (for example, sending newsletters); and

• to comply with our legal obligations.

Contract-related data is retained for longer periods where required by statutory retention obligations.

These retention obligations arise in particular from accounting and tax legislation. Under these legal requirements, business correspondence, concluded contracts and accounting records must generally be retained for up to 10 years or, for users resident in France, for up to 5 years.

Once we no longer require this data to provide our services to you, it will be restricted (blocked). This means that the data will thereafter only be processed where necessary to comply with accounting, tax or other applicable legal obligations.

1.20.     Is Your Personal Data Shared with Third Parties?

We do not sell your personal data.

Your personal data is disclosed only to selected service providers and only to the extent necessary to provide the relevant service. These service providers may include:

• IT support providers;

• providers of travel cards and subscription cards;

• postal and delivery service providers (such as Swiss Post);

• service providers responsible for allocating public transport revenue among participating transport companies (including the preparation of revenue distribution keys under the Swiss Passenger Transport Act);

• our website hosting provider (see Section 1.15 – Website Hosting and Domain Registration); and

• the providers referred to in the sections on Tracking Tools, Social Media Plugins, and Advertising and Marketing.

Where service providers are located outside Switzerland, please also refer to the section "Notice Regarding Data Transfers to the United States" and any other applicable provisions on international data transfers.

In addition, we may disclose your personal data where we are legally required to do so or where such disclosure is necessary to protect or enforce our legal rights, including the assertion of claims arising from our relationship with you.

Your personal data is not disclosed to other third parties outside the Swiss public transport system, except in the following cases.

Certain SwissPass partners and companies that have been contractually authorised by Swiss public transport companies to distribute public transport services may access your personal data, but only if:

• you wish to purchase a public transport service through such a partner; and

• you have expressly given your consent for this access.

Even in these cases, access is limited to the information necessary to determine whether you already hold tickets or travel passes that are relevant to your planned journey or to the third-party service you wish to use.

The legal basis for this processing is your consent, which you may withdraw at any time with future effect.

If you use offers provided by a SwissPass partner by means of your SwissPass, information about certain public transport products you have purchased from us (such as a GA Travelcard, Half Fare Travelcard, or regional travel pass) may be shared with the respective SwissPass partner in order to verify whether you are entitled to specific benefits or discounts offered by that partner.

If your SwissPass is lost, stolen, misused, forged, or replaced after the purchase of a service, the relevant SwissPass partner may also be informed where necessary.

These processing activities are necessary for the performance of the contract relating to the use of the SwissPass and are therefore based on that contractual relationship.

Further information can be found in the SwissPass Privacy Policy and in the privacy policy of the respective SwissPass partner.

1.21.     Use of Chatbase (AI Chatbot)

Our website includes an AI-powered chatbot provided by Chatbase (www.chatbase.co). The service is based on technology provided by OpenAI (United States) and is designed to enable automated conversations with website visitors, for example to answer questions or assist with website navigation.

When you use the chatbot, the following types of data may be processed:

• content entered by the user (text messages);

• technical information (such as IP address, timestamp and browser type); and

• location data (where transmitted by your browser).

This data may be transferred to and processed on servers operated by Chatbase and/or OpenAI in the United States.

The use of the chatbot is entirely voluntary. By starting a conversation with the chatbot, you consent to the transfer and processing of your data in accordance with the applicable privacy policies of Chatbase.

For further information, please refer to the Chatbase Privacy Policy:
www.chatbase.co/legal/privacy

1.22.  Souvenir Photos on the Summer Toboggan Run and the Fly-Line

Automated souvenir photographs are taken of guests on the Summer Toboggan Run and the Fly-Line.

These photographs are taken solely for the purpose of offering guests the opportunity to purchase personal souvenir photos.

Please note that there is no guarantee that a photograph will be taken of every person or every ride. Technical malfunctions, weather conditions or other operational circumstances may prevent a photo from being captured.

The photographs can be viewed and purchased at the designated photo points. Any photographs that are not purchased will be automatically deleted after the operational retention period required for the operation of the photo system.

Image data is processed exclusively for the purpose of providing and selling souvenir photographs. Personal data will only be disclosed to third parties where this is necessary for the technical operation of the photo system or where disclosure is required by law.

1.23. Video Surveillance

To ensure the safe operation of our facilities and to protect our guests, employees and infrastructure, the Summer Toboggan Run, the Fly-Line, and the valley and mountain stations are monitored by video surveillance.

The recordings are used exclusively for operational safety, accident prevention and the investigation of accidents, safety-related incidents or criminal offences.

Video recordings are automatically deleted after 72 hours, unless an accident, safety-related incident or other event becomes known or is observed by our employees, making it necessary to retain the relevant recordings.

Where recordings are retained, they are processed solely for the purposes of:

• investigating the incident;

• preserving evidence;

• handling liability, insurance or legal claims; and

• complying with applicable legal obligations.

Retained recordings are stored for a maximum period of ten (10) years and are then permanently deleted unless a longer retention period is required by law or necessary in connection with ongoing legal or administrative proceedings.

Where relevant recordings are provided to the police, public prosecutors, courts or other competent authorities, any copies retained by Luftseilbahn Grindelwald–Pfingstegg AG will be deleted once the transfer has been completed, unless further retention is required for legal or operational reasons.

Access to stored video recordings is strictly limited to authorised personnel only.

1.24.     Right to Lodge a Complaint with a Data Protection Supervisory Authority

You generally have the right to access, correct, erase and restrict the processing of your personal data, as well as the right to data portability, to withdraw your consent, and to object to the processing of your personal data, where applicable.

If you are resident in a Member State of the European Union, you also have the right to lodge a complaint at any time with a competent data protection supervisory authority.

You can contact us using the following details:

Luftseilbahn Grindelwald–Pfingstegg AG
Phone: +41 33 853 26 26 (during the summer season and within our published opening hours, from 9:00 a.m. to 5:00 p.m.)
Email: info@pfingstegg.ch

In the event of any inconsistency or discrepancy between the German version of this Privacy Policy and any translated version, the German version shall prevail and be legally binding.

We reserve the right to amend or update this Privacy Policy at any time. The version published on this website shall be the version that applies.

Grindelwald, 23 July 2026