Privacy Policy "WEISSE ARENA GROUP"
Scope of Application
This Privacy Policy applies to Weisse Arena AG (hereinafter “WAG”) and its affiliated companies (hereinafter, together with WAG, referred to as the “GROUP” or “we”). Currently, WAG holds stakes in the following companies based in Laax or Flims, Switzerland, with others potentially to follow:
Weisse Arena Bergbahnen AG
Mountain Vision AG
Weisse Arena Hospitality AG
Weisse Arena Leisure AG
Mountain Adventures AG
LAAX HOMES AG
Baugesellschaft Rocksresort
Startgels AG
Privacy Policy
WAG operates various websites, as well as the interactive mobile app (hereinafter the “LAAX App”), either directly or indirectly through its companies or contractors, and in doing so collects, processes, and uses your personal data. The protection of your personal data is of great importance to us. Therefore, it is important to us that you know what personal data we collect from you, how this is done, how this data is processed, and for what purposes this is done. By accepting our Privacy Policy and using our websites, the LAAX App, and other services, you consent to all such data processing (including the transfer of data). We therefore ask that you read the following information carefully.
Purpose of Data Processing
We process your personal data, among other things, to respond to your inquiries, fulfill the contract entered into with you (contract performance), offer you products and services tailored to your needs as well as advertising, protect legitimate interests (legitimate interest), and comply with legal obligations (legal obligation). To this end, we collect personal data and process it to, among other things:
offer you our services and products,
ensure a better customer experience for you and tailor it to be user-friendly and personalized,
process orders and contracts,
To answer questions and address concerns,
To ensure your safety and satisfaction through video surveillance of our facilities,
To optimize our offerings and services, and
To optimize the flow of information within the GROUP.
Data Collection and Data Processing
Websites
You can generally use the website https://weissearena.com and the individual websites of the companies listed in Section 1 without providing any personal data. To optimize our advertising and our entire online offering, we collect anonymized data based on our legitimate interest in order to analyze website usage.
When you visit our websites, we process the following data:
IP address of the requesting computer
Date and time of access
Name and URL of the file accessed
Your computer’s operating system and the browser you are using
Country from which you accessed the site and your browser’s language settings
Name of your Internet service provider
Cookie information
Browser settings such as name and version
Frequency of visits to the website
Duration of visits to the website
Search terms
Shopping cart contents
Clicks on content
Referring website
Data is collected and processed to enable the use of the websites (establishing a connection), to ensure system security and stability, to optimize our online offerings, and for internal statistical purposes. In particular, the IP address is used to determine your country of residence and to apply corresponding default settings (e.g., language). The IP address is also stored to enable us to respond appropriately to attacks on our network infrastructure. All of these purposes constitute our legitimate interest in this data collection and processing.
LAAX App
The LAAX App is your mobile, personalized companion for a perfect experience at our destination. You decide whether to create a profile with your personal data.
When using the LAAX App, the following data is processed:
Contact information: First name, last name, email, phone number, address, city, ZIP code, country, date of birth, family membership (season pass)
Ski data: Days skied, lift usage
Financial data: Token-based payment information
Location data: Location information collected at regular intervals while using the app and during specific actions such as guest card activation, ticket purchase, SOS functionality, use of location tracking on the live map, gamification, and GPS tracking
Location data (background location tracking): For GPS-based gamification, we track your location in the background. We cross-reference GPS tracking data with ski runs and trails to display personalized statistics such as active days, elevation gain, distance, and speed.
Contacts: Friend connections
User content: Feedback emails, user-generated photos to complete the profile, gameplay content (statistics such as elevation gain, leaderboard rankings, answers to quizzes and surveys), customer support (conversations between users and the customer support team), as well as other data such as interests based on users’ self-reported information in their profiles, number of loyalty points, and token activation.
Search queries
Identification information: User identification (user ID, keycard ID, third-party system IDs such as Axess, ikentoo, aleno) and device identification
Transaction data via the LAAX app and web store: Tickets for users or third parties, food orders, Loyalty Rewards purchases, rentals, table reservations, donations, and other products
Usage data: Product information such as page views and interactions; advertising data such as views of NewsFeed campaigns
Diagnostic data: Crash logs and events; performance metrics such as startup time, load times, and data volume; device information such as manufacturer, device model, and operating system
Service data: Clothing and shoe sizes and skiing ability
If you wish to prevent the transmission of location data, you can decline this option when you first install the LAAX app or adjust your settings later in your device and app settings. The same applies to notifications via push functions. To serve you as best as possible, we process your data within the GROUP and in collaboration with or through our contractors (such as inside labs AG) and contractual partners. Your data is linked to your profile. It is stored in the app’s database and deleted when you delete your profile—which you can request from us at any time.
When you use the LAAX app, information is collected each time you open it. This information is used to make our service more user-friendly, effective, and secure.
Contact Form
When you use our contact form, we process the following data:
Contact information: Title, first name, last name, company, email, street, ZIP code, city, phone number
Inquiry details: Subject, reason for the inquiry, date, number of people, request/description
We use this data to respond to your inquiry in the best possible and most personalized way. This also constitutes our legitimate interest.
Guest Profile
When you use our guest profile, we process the following data:
Contact Information: Title, First Name, Last Name, Company, Email, Street, ZIP Code, City, Phone Number
Personal Information: Gender, Date of Birth
Booking Information: Comments, booking date, booking period, number of guests, accompanying persons, booking history, booking channel
Financial data: Credit card information, payment history
We use this data to process your request in the best possible and most personalized way and to tailor your stay with us to your needs. This also constitutes our legitimate interest.
Newsletter
When you subscribe to our newsletter, we process the following data:
Contact information: Title, first name, last name, language, email address
We process this data to personalize the information and offers we send you and to better tailor them to your interests. By registering, you give us your consent to process the provided data for the regular distribution of the newsletter to the address you provided and for the statistical analysis of usage behavior to optimize the newsletter. This consent constitutes our legal basis for processing the aforementioned data. We also have a legitimate interest in the aforementioned analysis purposes.
Online Application
When you apply online for one of our advertised positions, we process the following data:
Contact information: Title, first name, last name, email address, street address, ZIP code, city, phone number
Submitted information, such as employment references and certificates
This data is collected and processed for the specific purpose of filling positions within the GROUP. As a general rule, the data is forwarded only to the internal departments within the GROUP responsible for the specific application process.
Online Bookings
When you make a booking through one of our websites or through the booking website of a provider we partner with (e.g., TCS Training & Freizeit AG), we process
the following data:
Contact information: Title, First name, Last name, Company, Email, Street, ZIP code, City, Phone number
Personal data: Gender, date of birth, height, weight, type of skier, skill level, language, special characteristics (such as disabilities, allergies, dietary preferences)
Booking data: Flight number, arrival time, accommodations, booking period, number of people, accompanying persons, booking channel, comments
Financial data: Credit card information, payment history
We process data that is necessary to provide the booking services. Please note that the data you enter is generally also collected directly by the booking service provider, stored by them, and/or forwarded to them by us. To the extent that a booking service provider subsequently processes the collected data independently, that provider’s privacy policy applies, and we ask that you review it as well. The legal basis for this data processing is the performance of a contract.
Flims Laax Falera Wi-Fi
When you use our Flims Laax Falera Wi-Fi, we process the following data:
Contact information: email address, phone number
IP address of the device
Website usage
Connections to access points
We process this data primarily to comply with legal obligations and to provide you with personalized services.
Data Disclosure
We will only disclose your personal data if you have expressly consented, if there is a legal obligation to do so, or if it is necessary to enforce our rights, in particular to enforce claims arising from the relationship between you and WAG and its companies. In addition, we disclose your data to third parties to the extent necessary in connection with your use of the websites and the LAAX App to provide the products or services you have requested and to analyze your user behavior. Where necessary, such disclosure may also take place abroad. We may make your data available to or disclose it to recipients, such as contractors within and outside the GROUP and other third parties, such as business partners, service providers, or government authorities, in compliance with legal requirements.
We are also authorized to transfer your personal data to third parties (i.e., contracted service providers) abroad, provided this is necessary for data processing
. These third parties are obligated to protect your personal data to the same extent as we are
. If the level of data protection in a country does not correspond to that of Switzerland or the European Union, we ensure through contractual agreements with the third party that the protection of your personal data is equivalent to that in Switzerland or the EU.
For the sake of completeness, we would like to point out that surveillance measures by U.S. authorities exist in the United States that generally allow for the storage of all personal data of any individuals whose data has been transferred from Switzerland to the United States. This occurs without differentiation, restriction, or exception based on the intended purpose and without an objective criterion that would allow the access of U.S. authorities to the data and its subsequent use to be limited to very specific, strictly defined purposes capable of justifying the intrusion associated with both access to and use of this data. Furthermore, we would like to point out that there are no legal remedies in the United States that allow you to obtain access to the data concerning you and to have it corrected or deleted, nor is there any effective judicial protection against the general access rights of U.S. authorities.
It is important to us to inform you of this legal and factual situation so that you can make a well-informed decision regarding your consent to the use of your data.
If you are a resident of an EU member state, we would also like to point out that, from the EU’s perspective—in part due to the issues mentioned in this section—the United States does not have an adequate level of data protection.
In exceptional cases, transfers to countries without adequate protection are permitted,
e.g., based on explicit consent, to fulfill a contract with the data subject or to process your contract application, for the conclusion or fulfillment of a contract with another party in your interest, or to assert, exercise, or defend legal claims.
Right of Access, Rectification, Restriction of Processing, Erasure, Data Portability, and Withdrawal
You have the following rights regarding your personal data:
Information
You have the right to receive confirmation from us as to whether we process your personal data and, if so, to request information regarding the processing of your personal data.
Correction
You have the right to have your personal data that we process corrected and/or supplemented.
Restriction of Processing
You have the right to restrict the processing of your personal data by us.
Deletion
You have the right to have your personal data deleted, provided that we are not required by applicable laws and regulations to retain your personal data, if
the personal data is no longer necessary for the purposes for which it was collected;
you have withdrawn your consent and there is no other legal basis for the processing;
you have effectively objected to the processing;
the data was processed unlawfully.
Restriction of Processing
You may request that we restrict the processing of your personal data in the following cases:
If you dispute the accuracy of the data, for the duration of our review and the subsequent correction or rejection of the correction.
If, in the event of unlawful processing, you object to erasure and instead request that processing be restricted.
If, after the purpose has been fulfilled, you request that the data not be erased but rather retained for the purpose of asserting your rights.
Data Portability
Under certain conditions, you have the right to receive the personal data you have provided in a structured, commonly used, and machine-readable format. You have the right to have this personal data transmitted to another company without hindrance, to the extent that this is technically feasible.
Right to Object
You have the right to object at any time, on grounds relating to your particular situation, to our processing of your personal data, and we may be required to stop processing your personal data.
If you have a right to object and exercise that right, we will no longer process your personal data for such purposes.
In particular, the right to object does not apply if we have compelling legitimate grounds for the processing that override your interests and rights, or if the processing is necessary for the establishment, exercise, or defense of legal claims or for the conclusion and performance of a contract.
To the extent that we process your personal data for the purpose of direct marketing, you have the right to object to this processing at any time. Once you have objected, your personal data will no longer be processed for direct marketing purposes.
Right to Withdraw Consent
You have the right to withdraw your consent to the processing of your personal data for one or more specific purposes. Withdrawing your consent does not affect the lawfulness of the processing carried out prior to the withdrawal.
Contact Point and Reporting
You may exercise your rights regarding the processing of your personal data by contacting the contact point specified in Section 12.
You also have the right to file a complaint with the competent supervisory authority if you believe that the processing of your personal data violates applicable law.
Retention Period and Data Deletion
We store and process your personal data for as long as necessary to fulfill the purpose for which it was collected, or as required or permitted by law, or in accordance with your consent. For example, we have a legitimate interest in storing your personal data as long as it is subject to a retention requirement or as long as storage is necessary for evidentiary or security reasons.
After that, your personal data will be deleted from our systems or anonymized so that you can no longer be identified. Data may be stored for a longer period, for example, if we detect attacks on our websites and need to take appropriate measures. For example, when you register on the websites of the GROUP companies or in the LAAX app, we store your data in accordance with our legal obligations, among other things.
Data from video surveillance is not stored permanently. This data is used solely for monitoring operations.
Data Transmission
Please note that data transmission over the Internet (e.g., when communicating via email) may be subject to security vulnerabilities. It is not possible to completely protect data from access by third parties.
Cookies
Our websites, as well as those of our partner companies, use so-called cookies in some cases. These are used to make our services more user-friendly, effective, and secure.
Cookies are small text files that are stored on your device. Most cookies are so-called “session cookies.” They are automatically deleted after you visit the website. Other cookies, known as “persistent cookies,” remain on your device and allow us to recognize your browser the next time you visit. You determine how long such cookies are stored.
Accepting cookies is not a requirement for visiting the websites. If you do not wish to receive cookies, you can configure your browser to notify you when cookies are set, to allow cookies only on a case-by-case basis, to block cookies in specific cases or generally, and to enable the automatic deletion of cookies when you close your browser. If you disable cookies, the functionality of this website may be limited.
Tools and Advertising
On the website https://weissearena.com, on the individual pages of the companies listed in Section 1, and in the LAAX app, we use the following tools in pursuit of our legitimate interests:
Google Fonts
Google Ireland Limited
Google Building, Gordon House, Barrow St.
Dublin 4, Ireland
Our websites use so-called web fonts, provided by Google, to ensure consistent font display. When you visit a webpage, your browser loads the necessary web fonts into your browser cache to display text and fonts correctly.
To do this, the browser you are using must connect to Google’s servers. As a result, Google becomes aware that our websites have been accessed via your IP address. We use Google Web Fonts to ensure a consistent and visually appealing presentation of our online content. This constitutes a legitimate interest.
https://policies.google.com/privacy
Outdooractive
Outdooractive GmbH & Co KG HRA 8939
Missener Strasse 18
87509 Immenstadt, Germany
We use Outdooractive’s services on our websites. Outdooractive provides electronic databases that you, as our users, can access via an electronic information portal in the digital tourism sector. This includes, for example, maps and route planning.
https://www.outdooractive.com/de/datenschutz.html
Meta Pixel
Meta Platforms Ireland Limited
Merrion Road, Dublin 4, Ireland
8 Q V H U H : H E V H LMeWta
for the following purposes:
H3 QL de[ r sHoYziOaHle‡nUNeZtzwHerkQe voGn MHetQa zu
G H Q
Facebook and Instagram Custom Audiences
We use the Meta Pixel for remarketing purposes so that we can reach out to you again within 180 days. This allows users of our websites to be shown interest-based ads when they visit social networks such as Facebook and Instagram or other websites that also use this method. Our goal is to show you ads that are relevant to your interests, thereby making our websites and offers more appealing to you.
Facebook and Instagram Conversion
We also use the Meta Pixel to ensure that our online ads align with users’ potential interests and do not come across as intrusive. With the help of the Meta Pixel, we can track the effectiveness of online advertising for statistical and market research purposes by seeing whether users visit our
: H E V H L W H Q Z H L W H U J H O H L W H W Z X U
https://www.facebook.com/privacy/policy/
Google Tag Manager
Google Ireland Limited
Google Building, Gordon House, Barrow St.
Dublin 4, Ireland
Our websites use Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage website tags through a single interface. The tool itself (which implements the tags) is a cookie-free domain and does not collect any personal data. The tool triggers other tags, which may in turn collect data. Google Tag Manager does not access this data.
If deactivation has been set at the domain or cookie level, it applies to all tracking tags implemented with Google Tag Manager.
https://policies.google.com/privacy
Google DoubleClick Floodlight
Google Ireland Limited
Google, Gordon House, Barrow St.
Dublin 4, Ireland
We use “DoubleClick Floodlight,” a service provided by Google Ireland Limited, on our website. Google DoubleClick Floodlight allows us to determine how clicks on ads or information on Google platforms effectively lead to transactions and similar user actions on our site. These features use temporary cookies from Google and do not process individual user data. You can opt out of the use of these cookies by using the options provided by Google or by adjusting your browser settings accordingly.
https://www.google.com/intl/de/policies/privacy/
YouTube
YouTube (Google LLC) 901 Cherry Ave.
San Bruno, CA 94066 USA
We have embedded YouTube videos in our website that are stored at https://www.youtube.com and can be played directly from our website. For information on the purpose and scope of data collection and its processing by YouTube, please refer to the YouTube Privacy Policy.
https://www.google.de/intl/de/policies/privacy
Vimeo
Vimeo, Inc.
555 West 18th Street New York
New York 10011 USA
We embed videos from the Vimeo platform, operated by Vimeo, Inc., into our online content. In doing so, usage and communication data, device data, and content data may be transmitted to the provider. Our legitimate interests lie in the user-friendly integration of videos and their optimal display.
https://vimeo.com/privacy
June
JUNE
Grosse Johannisstrasse 3
20457 Hamburg, Germany
We use June to send out newsletters. After you sign up, you’ll receive
a personalized newsletter with news, offers, and other information. To do this, we analyze your purchasing and clicking behavior on our websites and within the newsletter to compile information that is relevant to you.
https://juneapp.com/imprint/#data-security
Branch.io
Branch Metrics, Inc. 1400 Seaport Blvd, Building B, 2nd Floor, Redwood City, CA 94063, USA
Branch Metrics, Inc. offers a platform for deep linking and analyzing cross-application experiences between apps and the web. This allows us, for example, to redirect users to the appropriate app store or to specific sections within the app.
https://branch.io/policies/#privacy
Google Ads
Google Ireland Limited
Google Building, Gordon House, Barrow St.
Dublin 4, Ireland
Our websites use Google’s online marketing tool Google Ads (including conversion tracking and remarketing).
Google Ads uses cookies to display ads relevant to users, improve campaign performance reports, or prevent users from seeing the same ads multiple times. Google uses a cookie ID to track which ads are displayed in which browser. In addition, Google Ads can use cookie IDs to track so-called “conversions” related to ad requests. This happens, for example, when a user sees a Google Ads ad and later visits the advertiser’s website using the same browser and makes a purchase there.
Due to the marketing tools used, your browser automatically establishes a direct connection to Google’s server. Through the integration of Google Ads, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or are not logged in, it is possible that Google may process your IP address.
Our legitimate interest lies in optimizing our advertising offerings through the analysis of user behavior.
https://policies.google.com/privacy
LinkedIn
LinkedIn Ireland Unlimited Company Wilton Place
Dublin 2 Ireland
We use the LinkedIn Insight Tag and conversion tracking provided by LinkedIn Ireland Unlimited Company. These services allow us to analyze the effectiveness of our ads on the LinkedIn network and display personalized ads to you there.
The LinkedIn Insight Tag sets a cookie in your browser. If you visit our websites while logged into your LinkedIn account, a connection is established with the LinkedIn server. The following personal data is processed: referrer URL, IP address, device and metadata, timestamps, and your page views and usage. This data is encrypted, anonymized within seven days, and deleted within 90 days. We receive only aggregated reports from LinkedIn regarding the website audience and ad performance, allowing us to analyze the success of our advertisements.
Through conversion tracking, you as a website visitor can also be recognized (across devices), enabling us to display targeted advertisements for you on LinkedIn—outside of our websites—that may be of interest to you (retargeting).
We have a legitimate interest in analyzing user behavior in order to optimize both our website and our advertising.
https://www.linkedin.com/legal/privacy-policy
Braze
Braze, Inc.
330 West 34th Street, New York, NY 10001, USA
Braze is a comprehensive customer engagement platform that enables relevant interactions between customers and brands.
Braze functions as a mobile CRM and communication platform. In the analytics area, it allows users to analyze Braze campaigns and communication efforts for relevance and effectiveness, using the insights gained to develop more relevant communication strategies that deliver the right information to the right person at the right time.
User profiles are stored in Braze and enriched based on their behavior within the app. Based on this, personalized communication is delivered using the implemented communication methods, such as News Feed Cards, push notifications, in-app messages, or email.
https://www.braze.com/privacy
Typeform
TYPEFORM SL
c/ Bac de Roda, 163 (local) 08018 – Barcelona, Spain
Typeform is a company that provides online questionnaires as Software as a Service.
With the help of Typeform, surveys and quizzes can be created in the LAAX app. Personal data is not stored in Typeform unless it is collected during a survey. Responses and information are matched using an anonymous user ID from the LAAX app account.
https://admin.typeform.com/to/dwk6gt
Zendesk
Zendesk, Inc.
989 Market Street
San Francisco, CA 94103 USA
Zendesk offers a cloud-based customer support platform that provides help desk ticketing, self-service, and customer service support features.
Inquiries and feedback sent via the LAAX app or by email to feedback@laax.com or bergbahninfo@laax.com are processed and answered by us in Zendesk. In addition to the email address, the language and content of the inquiry or feedback are stored in Zendesk.
https://www.zendesk.de/company/customers-partners/privacy-policy/
Amazon Web Services
Amazon Web Services, Inc. 410 Terry Avenue North Seattle WA 98109
USA
Amazon Web Services (hereinafter “AWS”) is a subsidiary of Amazon that provides on-demand cloud computing platforms and APIs.
The app’s infrastructure is hosted on and through AWS services. A range of services from the AWS suite is used here to ensure a smooth and scalable standard. Personal data is stored on the Amazon S3 service only in the form of the profile picture. However, this is done without linking it to any other personal information about the user.
https://aws.amazon.com/de/privacy/
MongoDB Atlas
MongoDB, Inc. 1633 Broadway, 38th Floor, New York, NY 10019
USA
MongoDB Atlas is a global provider of cloud database services for modern applications. By hosting on Amazon Web Services in Frankfurt, MongoDB Atlas ensures that the LAAX app’s MongoDB database is always accessible and scalable, and complies with the latest security standards. The MongoDB database is the central database of the LAAX app, where all relevant data is stored. Data can be created, read, updated, and deleted (CRUD operations) here.
https://www.mongodb.com/legal/privacy-policy
Snowflake
Snowflake Inc.
106 East Babcock Street, Bozeman, MT 59715, USA
Snowflake is a global provider of cloud-based data warehouse services for modern data platforms.
We use Snowflake to consolidate and analyze data from various specialized applications. Our Snowflake data warehouse is hosted in Microsoft Azure data centers in Switzerland.
https://www.snowflake.com/legal/privacy-policy/
Google Analytics
Google Inc.
1600 Amphitheatre Parkway Mountain View
CA 94034 USA
Google Analytics is a web analytics service provided by Google Inc.
Google Analytics uses so-called “cookies” for its web analytics services. These are text files that are stored on your computer and enable an analysis of your use of the websites. The information generated by the cookie regarding your use of our websites is typically transmitted to a Google server in the U.S. and stored there.
We have a legitimate interest in analyzing user behavior in order to optimize both our website and our advertising.
https://policies.google.com/privacy
Mixpanel
Mixpanel, Inc.
400 4th Ave, Suite 300 San Francisco, CA 94107 USA
Mixpanel is a Software-as-a-Service (SaaS) product used to analyze user behavior and product usage. It enables companies to track and understand user interactions with their websites and mobile applications. The collected data can be used to create custom reports, measure user interaction and engagement, create user segments, and run targeted marketing campaigns.
https://mixpanel.com/legal/privacy-policy/
Auth0
Auth0 Inc.
10800 NE 8th St, Suite 700
Bellevue, WA 98004 USA
Auth0 is the authorization service that ensures verification during user account creation and sends the verification code during login. With Auth0, the email address is used for account creation to enable verification via email.
https://auth0.com/privacy
Aleno
Aleno AG Aegertenstrasse 6
8003 Zurich, Switzerland
Aleno is a reservation management system for restaurants.
Table reservations made via the LAAX app or restaurant-specific websites are transmitted to Aleno. In addition to information about your reservation (date, time, number of guests), this also includes your contact information, such as first name, last name, and phone number (for a possible callback).
https://www.aleno.me/de/policy
Wallee
Wallee Group AG Neuwiesenstrasse 15 CH-8400 Winterthur
Wallee is a Swiss payment service provider that specializes in processing online payments. Wallee is integrated into the restaurant reservation software Aleno
and is used in some of our restaurants to bill for no-show reservations.
https://wallee.com/legal/datenschutzhinweise
Lightspeed K-Series
Lightspeed Hardturmstrasse 101
8005 Zurich, Switzerland
Lightspeed is a restaurant point-of-sale system.
Mobile ordering in the LAAX app and on the web is powered by Lightspeed K-Series. Personal data such as last name, first name, and phone number is collected to match orders to guests in the restaurant or for pickup/delivery.
https://de.lightspeedhq.ch/datenschutzerklarung/
Worldline
Worldline Schweiz AG Hardturmstrasse 201
8005 Zurich, Switzerland
Worldline is a provider of in-store and online payment solutions. Through Worldline, we process national and international payment methods in apps, online stores, and at physical payment terminals.
Worldline collects information about the transaction, as well as other information related to the transaction, such as financial information, information about the interaction between you and Worldline, and merchant information, including details about payment instruments. Worldline uses the data for purposes including payment processing, as well as to monitor and improve its services.
https://worldline.com/de-ch/compliancy/privacy
Protel
Protel Hotelsoftware GmbH Europaplatz 8
44269 Dortmund, Germany
Protel is a company that develops and sells hotel software. We use Protel to process and manage your hotel reservations.
https://www.weareplanet.com/privacy-policy
Simple Booking
Simple Booking Hotel Booking Engine Via Lucca 52
50142 Florence, FI, Italy
Simple Booking provides solutions for hotel reservations.
With the help of Simple Booking, we offer you the opportunity to book the right hotel room for your stay with us.
https://www.simplebooking.travel/privacy-policy/
Bocco Group
Bocco Group GmbH Bernastrasse 8
3005 Bern
The Bocco Group specializes in providing customized consulting services to Swiss hotels in the areas of online sales and marketing and serves as the sales and implementation partner for Simple Booking software in Switzerland.
Avantio
Avantio
c/ Charles Robert Darwin 5 Parque Tecnológico
46980 Paterna, Spain
Avantio helps us manage and market vacation homes and apartments.
Using Avantio’s system, we manage reservations and bookings for vacation homes and apartments in our destination and offer you the opportunity to book them.
https://de.avantio.com/datenschutzbestimmungen/
Datatrans
Datatrans AG Kreuzbühlstrasse 26
8008 Zurich, Switzerland
Datatrans is a company that offers online payment solutions.
With the help of Datatrans, we process credit card transactions related to bookings for your stay at our destination.
https://www.datatrans.ch/de/datenschutzbestimmungen/
Mapbox
Mapbox, Inc.
740 15th Street NW Washington, D.C. 20005 USA
Mapbox is a provider of mapping services for modern applications. Mapbox is used in the LAAX app to display trails and tours, as well as for location-based search results.
https://www.mapbox.com/legal/privacy
Google Maps
Google LLC
1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Google Maps is a provider of mapping services for web and mobile applications. The Google Maps platform is used on individual websites to provide interactive maps, location-based information, and navigation assistance.
https://policies.google.com/privacy
Shopify
Shopify Inc.
Ground Floor
Ottawa, ON K2P 2L8 Canada
Shopify is a global provider of e-commerce platforms for the online sale of products and services. Shopify is used on the websites airportshuttle.laax.com and thelastdaypass.com to facilitate the sale of the Airport Shuttle and the Last Day Pass. The platform provides a secure and user-friendly environment for online transactions, including payment processing and order management.
https://www.shopify.com/legal/privacy
Price Now
PriceNow AG Ogimatte 7
3713 Reichenbach im Kandertal Switzerland
Price Now is an e-commerce platform for operating and managing online stores. We use Price Now to operate our online store, specifically to display products, process orders, and manage customer and transaction data. In doing so, personal data is processed as part of the ordering process and the use of the store. For more information on data protection at pricenow.ch, please visit: https://www.pricenow.ch/datenschutz/
Inside Labs
Inside Labs AG Via Davos Sulten 4 7017 Flims Switzerland
Inside Labs is a provider of digital solutions and mobile applications, specializing in their development and operation. We use Inside Labs in connection with our mobile application, specifically for its development, operation, and further enhancement, as well as for providing features within the app. Personal data may be processed in connection with the use of the mobile application. For more information on data protection at Inside Labs, please visit: https://insidelabs.tech/privacy-policy/
Additional Provisions
In the event of any conflict between the German and English versions of the Privacy Policy, the provisions of the German Privacy Policy shall prevail.
Unless the GDPR is mandatorily applicable, this contractual relationship shall be governed exclusively by Swiss substantive law. The place of jurisdiction is Laax.
Contact Point / Data Controller
Please submit your inquiry to our contact point:
Weisse Arena Group Haempa Maissen
Via Murschetg 17 CH-7032 Laax
feedback@laax.com
Laax, September 14, 2026