Data protection

The topic of data protection is very important to us.
At this point you will find valuable information on your personal data protection.

What is automatically stored by our hoster
Hosting operator and data storage location: cyon GmbH, Brunngässlein 12, 4052 Basel, Switzerland
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. The access data includes:

  • Name of the website accessed
  • Date and time of access
  • Amount of data transferred
  • Message about successful retrieval
  • Browser type and version, the user's operating system
  • Referrer URL (the URL referring to our website, e.g. Google search)
  • IP address and the requesting provider
  • .

The provider uses the log data only for statistical evaluations for the purpose of operation, security and optimisation of the website. However, the provider reserves the right to check the log data retrospectively if there is a justified suspicion of unlawful use based on concrete evidence.

You can find all further information on this here:
https://www.cyon.ch/legal/datenschutzerklaerung
https://www.cyon.ch/legal/agb

What happens when I write an email
Email operator and data storage location: cyon GmbH, Brunngässlein 12, 4052 Basel, Switzerland

If you contact us by email, your message will be forwarded to the operator of our email hosting. Mail hosting is a type of hosting service that focuses specifically on the provision of email functions. It allows individuals, companies and organisations to create and manage email accounts associated with their domain name (e.g. info@www.hotelheiden.ch). Mail hosting providers usually offer email services with features such as spam filtering, virus protection, webmail access and the ability to use email clients such as Outlook or Thunderbird. This type of hosting is part of a larger hosting package, such as web hosting or domain hosting, or is offered as a standalone service. It is a convenient solution for those who need a professional email service with their own domain name. The storage of messages is handled individually. Normally, we archive your messages for the traceability of past enquiries, e.g. enquiries about completed orders, repeat orders, complaints or similar. In addition, there are specifications for the operation of a mail hosting service as to which data must be collected and stored for security reasons. These are regulated in accordance with contract data processing with the operator. Further details can be found on the website of the mail hosting operator:
https://www.cyon.ch/legal/datenschutzerklaerung
https://www.cyon.ch/legal/agb

How we handle personal data
Personal data is information that can be used to identify a person, i.e. information that can be traced back to a person. This includes the name, email address or telephone number. But data about preferences, hobbies, memberships or which websites have been viewed by someone also count as personal data. Personal data is only collected, used and passed on by the provider if this is permitted by law or if the users consent to the data collection.

How we protect your personal data
We have taken technical and organisational security measures to protect your personal data from loss, destruction, manipulation and unauthorised access. Our security measures are continuously revised and optimised in line with technological developments.

When you use a service on our website, your personal data is transmitted to us. To prevent this data from falling into the wrong hands, we encrypt it using the SSL (Secure Socket Layer) method. The SSL method is currently the most common and secure data transmission method on the internet.

How the SSL process works
The SSL (Secure Socket Layer) process is used to protect data that a customer sends to a company's server via the Internet. SSL provides triple protection:

  • Your data to be transmitted is encrypted
  • .
  • It is ensured that the form is only sent back to the server from which it was opened.
  • A check is carried out to ensure that the data reaches its respective recipient complete and unchanged.

    SSL is always used when you see a small (usually green) lock in the bottom left-hand corner of the status bar of your browser.

    What we store when you contact us
    When you contact us via our contact form, the user's details are stored for the purpose of processing the enquiry and in the event that follow-up questions arise. We do not pass on this data without your consent. The contact requests are automatically deleted from the CMS after 1 year.
    The data is stored on the same hosting storage as mentioned above under point "What is automatically stored by our hoster".

    What the newsletter data is used for
    Newsletter operator: Mailjet GmbH,4 rue Jules Lefebvre, 75009 Paris

    Data storage location: Google Cloud Platform in Frankfurt (Germany) and Saint-Ghislain (Belgium)

    If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data is collected. We use this data exclusively for sending the requested information and do not pass it on to third parties. You can revoke your consent to the storage of the data, the e-mail address and its use for sending the newsletter at any time.

    Further information on data protection can be found on the operator's website:
    https://www.mailjet.com/de/rechtliches/av-vertrag/
    https://www.mailjet.com/de/rechtliches/datenschutzerklaerung/

    Integration of third-party services and content
    It may happen that third-party content, such as videos from YouTube, maps from Google Maps, RSS feeds or graphics from other websites are integrated into this online offering. This always presupposes that the providers of this content (hereinafter referred to as "third-party providers") recognise the IP address of the user. This is because without the IP address, they would not be able to send the content to the respective user's browser. The IP address is therefore required to display this content. We endeavour to only use content whose respective providers only use the IP address to deliver the content. However, we have no influence on whether the third-party providers store the IP address, e.g. for statistical purposes. If we are aware of this, we will inform users about it.

    Use of social plugins from Facebook
    Operator: Meta Platforms, Inc., Menlo Park, California, USA

    Data storage location: Krogslundvej 140, 5220 Odense, Denmark or Portan Co. Meath Clonee, Ireland

    We use social plugins from facebook.com, operated by Facebook Inc. The plugins can be recognised by the Facebook logo or the addition "Facebook Social Plugin". The data exchange does not explicitly take place by clicking on the Like button, but already through the code delivered by Facebook on this website. This data cannot be viewed or changed by the website operator in bundled form. Details on how Facebook handles your personal data can be found in Facebook's privacy policy:
    https://www.facebook.com/privacy/policy/

Why cookies may be stored on your computer
In order to make your visit to the website attractive and to enable the use of certain functions, the website uses so-called cookies on various pages. These are small text files that are stored on your end device (e.g. mobile phone, tablet, PC). Some of the cookies used are deleted again at the end of the browser session, i.e. after you close your browser (so-called session cookies, e.g. are you logged in?). Other cookies remain on your end device and make it possible to recognise your browser on your next visit (so-called persistent cookies, e.g. the storage of your login data on request). You can set your browser so that you are informed about the setting of cookies and can decide for yourself whether to accept them or generally exclude their acceptance. We would like to point out that the functionality and ease of use may be restricted without cookies. You can find out more about this here:
https://www.allaboutcookies.org/ge/cookies-verwalten/

Use of Google Analytics
Operator: Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

Data storage location: Google Cloud Infrastructure, the exact location may vary depending on the specific Google data centre, Google account and regional settings.

This website uses functions of the web analysis service Google Analytics. Google Analytics uses cookies. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Further information on this can be found at: https://policies.google.com/privacy

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en

Use of Google Web Fonts
Operator: Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

Data storage location: Google Cloud Infrastructure, The exact location may vary depending on the specific Google data centre, Google account and regional settings.

This website uses external fonts, Google Fonts. Google Fonts is a service of Google Inc ("Google"). These web fonts are integrated by a server call, usually a Google server in the USA. This tells the server which of our web pages you have visited. The IP address of the browser of the end device of the visitor to this website is also stored by Google. You can find more information in Google's privacy policy, which you can access here:
https://fonts.google.com/
https://www.google.com/policies/privacy/

Purpose-related data use
We observe the principle of purpose-related data use and only collect, process and store your personal data for the purposes for which you have provided it to us. Your personal data will not be passed on to third parties without your express consent, unless this is necessary to provide the service or fulfil the contract. Data will also only be transferred to state institutions and authorities authorised to receive information within the scope of the statutory duty to provide information or if we are obliged to provide information by a court decision.

We also take data protection within the company very seriously. Our employees and the service companies commissioned by us have been obliged by us to maintain confidentiality and to comply with data protection regulations.

Right to information and cancellation
You can obtain information about your data stored by us free of charge at any time without giving reasons. You can block, correct or delete your data collected by us at any time and object to the anonymised or pseudonymised collection and storage of data for the purpose of optimising our website. You can also revoke the consent you have given us to collect and use data at any time without giving reasons.

Please contact info@hotelheiden.ch. We will be happy to answer any further questions you may have about our privacy policy and the processing of your personal data. Please note that data protection regulations and data protection practices, e.g. at Google, can change constantly. It is therefore advisable and necessary to keep up to date with changes to legal provisions and the practices of companies such as Google.

Still have questions or are unsure?
Your trust is important to us. Therefore, we would like to be at your disposal regarding the processing of your personal data. If you have any questions that are not answered by this privacy policy, please contact us by email at info@hotelheiden.ch

CHEZ HENRY - THE FRENCH POP-UP RESTAURANT

A touch of France has recently come to Heiden, in the former Barissimo at Poststrasse 32a: just in time for France's national holiday on 14 July, the Hotel Heiden opened the pop-up restaurant ‘Chez Henry’ – a place that combines French bistro culture with local flair. The name is a double tribute: to the French women's national football team, which stayed at the Hotel Heiden during WEURO 2025, and to the great humanist Henry Dunant, whose spirit of humanity and hospitality shapes the concept.

At Chez Henry, nothing is set in stone: the menu changes regularly and is influenced by seasonal ideas, market trends and exciting guest chefs. Sometimes rustic, sometimes refined – but always as regional as possible, made with love and only available for a short time.

13 August to 6 September 2025 with guest chef Micha Merz
Every evening, Micha Merz transforms Chez Henry into a Parisian bistro serving classic French cuisine – with a modern twist, seasonal ingredients and great attention to detail. Early reservations are recommended as seating is limited.

Mid-November 2025 to the end of February 2026
Chez Henry becomes a cosy fondue restaurant – perfect for winter evenings with friends, family or for Christmas dinners with business associates.

The team at Hotel Heiden is looking forward to creating a new meeting place with ‘Chez Henry’.

À bientôt at Chez Henry