Legal Standards

Privacy Policy

Updated January 1, 2026. Fully compliant with the revised Swiss Federal Data Protection Act (FADP) and EU General Data Protection Regulation (GDPR).

1. Overview & Data Controller Identification

This Privacy Policy explains how Encore Wonderstack Hospitality AG ("Encore Wonderstack", "we", "us", or "our"), registered under Swiss Company No. CHE-482.910.374 with official headquarters located at Gotthardstrasse 26, 8002 Zürich, Switzerland, collects, utilizes, stores, and protects personal data obtained through encorewonderstack.com and our affiliated alpine booking desks.

We operate as the primary Data Controller. Protecting the confidentiality, integrity, and privacy of your personal information is foundational to our high-touch hospitality ethos.

2. Scope of Personal Data Collected

We only collect data strictly necessary to facilitate high-altitude chalet reservations, coordinate concierge services, and satisfy Swiss canton hospitality record-keeping mandates. Categories of personal data include:

  • Identity and Contact Data: Full legal name, passport information (required by Swiss cantonal tourism laws for tourist registration), email address, phone number, and physical mailing address.
  • Stay & Itinerary Preferences: Dates of stay, chalet selections, wellness dietary requests, private aviation transfers, and emergency medical contact points for extreme-altitude excursions.
  • Technical & Browsing Data: IP address, browser type and version, timezone settings, operating system, and anonymized interaction metrics gathered via compliant cookies.

3. Lawful Bases for Data Processing

We process your personal information under the following legal frameworks established by the Swiss FADP and GDPR Article 6:

  • Contractual Performance: Processing necessary to confirm sanctuary reservations, process deposits, and deliver personalized concierge services.
  • Legal Obligation: Compliance with Swiss cantonal guest registration requirements (*Meldescheinpflicht*) and tax accounting standards.
  • Legitimate Interests: Enhancing the security of our 3D spatial interface, preventing fraudulent booking requests, and maintaining system stability.
  • Explicit Consent: Where you opt in to receive our seasonal Swiss Alpine architectural monographs or non-essential analytical cookies.

4. Third-Party Processors & Cross-Border Transfers

Encore Wonderstack does not sell, lease, or monetize your personal information under any circumstance. We disclose necessary data exclusively to verified third-party partners operating under strict Data Processing Agreements (DPAs):

  • Certified Swiss Payment Gateway Processors complying with PCI-DSS Level 1 standards.
  • Local Swiss Chalet Butler & Mountain Guide teams directly handling on-site check-in logistics.
  • ISO/IEC 27001 certified cloud infrastructure hosted within Swiss and European Economic Area (EEA) data centers.

5. Data Retention & Security Protocols

We maintain end-to-end TLS 1.3 encryption across all communication layers and AES-256 encryption for stored reservation databases. Guest records are retained only for the duration of the active contractual relationship plus the statutory 10-year retention period mandated under the Swiss Code of Obligations (*Obligationenrecht*).

6. Your Statutory Rights (GDPR & Swiss FADP)

You maintain full authority over your personal information. Under applicable data privacy laws, you possess the right to:

  • Request Access: Obtain a complete copy of all personal records currently maintained by Encore Wonderstack Hospitality AG.
  • Demand Rectification: Correct any inaccurate or incomplete personal information.
  • Right to Erasure ("Right to Be Forgotten"): Request deletion of data where statutory Swiss retention requirements no longer apply.
  • Data Portability: Receive your data in a structured, commonly used, and machine-readable format.
  • Withdraw Consent: Revoke previously granted cookie or marketing consent at any time without retroactive penalty.

7. Data Protection Officer (DPO) Contact

For all inquiries regarding our data handling practices or to formally exercise your privacy rights, please direct written requests to:

Data Protection Officer
Encore Wonderstack Hospitality AG
Gotthardstrasse 26, 8002 Zürich, Switzerland
Direct Email: [email protected]