Privacy policy

1. Privacy Policy

The website of Chateau de Dompierre is subject to Swiss data protection law, in particular the Federal Act on Data Protection (FADP), and, where applicable, foreign data protection law such as the General Data Protection Regulation (GDPR) of the European Union (EU). The EU recognizes that Swiss data protection law ensures an adequate level of data protection.

We are very pleased about your interest in our company. Data protection has a particularly high priority for us. The use of the internet pages of Chateau de Dompierre is generally possible without any indication of personal data. However, if a data subject wants to use special services via our website, processing of personal data might become necessary. If the processing of personal data is required and there is no legal basis for such processing, we generally obtain consent from the data subject.

The processing of personal data, such as the name, address, email address, or telephone number of a data subject, is always in line with legal data protection requirements. Through this privacy policy, our company would like to inform the public about the nature, scope, and purpose of the personal data we collect, use, and process. Additionally, this privacy policy informs data subjects of their rights.

Chateau de Dompierre, as the data controller, has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. Nevertheless, internet-based data transmissions can generally have security gaps, so absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us via alternative means, for example by telephone.

2. Definitions

This privacy policy of Chateau de Dompierre is based on the terminology used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). Our privacy policy should be easy to read and understandable for the general public as well as for our customers and business partners. To ensure this, we would like to explain the terminology used in advance.

In this privacy policy, we use the following terms, among others:

a) Personal data
Personal data means any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

b) Data subject
A data subject is any identified or identifiable natural person whose personal data is processed by the data controller.

c) Processing
Processing is any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

d) Restriction of processing
Restriction of processing is the marking of stored personal data with the aim of limiting its future processing.

e) Profiling
Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.

f) Pseudonymization
Pseudonymization is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

g) Controller or data controller
The controller or data controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

h) Processor
A processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

i) Recipient
A recipient is a natural or legal person, public authority, agency or another body to whom personal data are disclosed, whether a third party or not.

j) Third party
A third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor, and persons who, under the direct authority of the controller or processor, are authorized to process personal data.

k) Consent
Consent is any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

3. Name and Address of the Controller

Requests from supervisory authorities or data subjects to the data protection officer are generally made via email but can also be submitted by postal mail:

Chateau de Dompierre
Le Château N,
87190 Dompierre-les-Églises, France
Email: [email protected]
Website: chateau-de-dompierre.com

4. Information You Provide to Us

These are details you share with us through:

filling out forms on our website (or other forms we may ask you to complete),
handing us a business card (or similar),
corresponding with us via phone, mail, email, or other means.

This may include, for example, your name, address, email address, and telephone number, information about your business relationship with us, and information about your professional role, background, and interests.

5. Other Information

We may also collect some information from other sources. For example:

If we have a business relationship with the organization you represent, your colleagues or other business contacts may provide us with information about you, such as your contact details or your role within the business relationship.
Occasionally, we obtain information from third-party providers or publicly accessible sources for purposes such as anti-money laundering checks, background checks, and similar activities to protect our business and comply with legal and regulatory obligations.

6. Cookies

The website of Chateau de Dompierre uses cookies and tracking pixels (web beacons). Cookies are text files that are stored on a computer system via an internet browser.

Many websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier for the cookie. It consists of a string of characters through which websites and servers can recognize the specific internet browser in which the cookie was stored. This allows visited websites and servers to differentiate the individual browser of the data subject from other internet browsers that contain different cookies. A specific internet browser can be recognized and identified using the unique cookie ID.

By using cookies and tracking pixels, we can provide users of this website with more user-friendly services that would not be possible without the cookie setting.

Cookies and tracking pixels allow us to optimize the information and offers on our website in the interest of the user. As mentioned above, cookies enable us to recognize users of our website. The purpose of this recognition is to make it easier for users to use our website. For example, the user of a website that uses cookies does not have to enter access data again each time the website is visited, because this is handled by the website and the cookie stored on the user’s computer system.

The data subject can prevent the setting of cookies by our website at any time by adjusting the settings of the internet browser used and thus permanently object to the setting of cookies. Furthermore, already set cookies can be deleted at any time via an internet browser or other software programs. Tracking pixels can also be blocked at any time in the browser settings or using appropriate browser extensions. This is possible in all common internet browsers. If the data subject deactivates the setting of cookies and blocks tracking pixels, not all functions of our website may be fully usable.

7. Collection of General Data and Information

Each time the website of Chateau de Dompierre is accessed by a data subject or an automated system, a series of general data and information is collected. This general data and information is stored in the server’s log files. The data collected may include:

the types and versions of browsers used,
the operating system used by the accessing system,
the website from which an accessing system reaches our website (so-called referrer),
the subpages accessed via an accessing system on our website,
the date and time of access to the website,
an Internet Protocol address (IP address),
the Internet service provider of the accessing system, and
other similar data and information used for risk prevention in the event of attacks on our IT systems.

When using these general data and information, Chateau de Dompierre does not draw any conclusions about the data subject. Rather, this information is needed to:

deliver the content of our website correctly,
optimize the content and advertising of our website,
ensure the long-term functionality of our IT systems and the technology of our website, and
provide law enforcement authorities with the necessary information in case of a cyberattack.

These anonymously collected data and information are evaluated statistically by Chateau de Dompierre and also with the aim of increasing data protection and data security in our company, in order to ultimately ensure an optimal level of protection for the personal data we process. The anonymous data from the server log files are stored separately from all personal data provided by a data subject.

8. Registration on Our Website

Data subjects have the possibility to register on the website of Chateau de Dompierre by providing personal data. The specific personal data transmitted to the data controller is determined by the input form used for registration. The personal data entered by the data subject is collected and stored exclusively for internal use by Chateau de Dompierre and for our own purposes. The data controller may arrange for transfer to one or more processors (such as a parcel service), who will also use the personal data exclusively for internal purposes attributable to the controller.

When registering on the website of the data controller, the IP address assigned by the Internet service provider (ISP) to the data subject, along with the date and time of registration, is also stored. The storage of this data is necessary to prevent misuse of our services and, if necessary, to investigate criminal offenses. In this respect, the storage of this data is required to protect the controller. This data is not passed on to third parties unless there is a legal obligation to do so or the transfer serves law enforcement purposes.

The registration of the data subject, voluntarily providing personal data, is intended to allow Chateau de Dompierre to offer content or services to the data subject that may only be offered to registered users due to their nature. Registered individuals are free to modify the personal data provided during registration at any time or to have it completely deleted from the data controller’s records.

Upon request, the data controller will provide any data subject with information about what personal data is stored about them. Furthermore, the controller will correct or delete personal data at the request or instruction of the data subject, provided there are no statutory retention obligations. All employees of the controller are available as contact persons in this context.

9. Subscription to Our Newsletter

The website of Chateau de Dompierre offers users the opportunity to subscribe to various newsletters from our organization. The personal data transmitted to the controller when ordering the newsletter is determined by the input form used for this purpose.

Chateau de Dompierre regularly informs its customers, business partners, and stakeholders via newsletter about offers from the organization and other operational matters. A newsletter can generally only be received by the data subject if:

the data subject has a valid email address, and
the data subject registers for the newsletter mailing.

For legal reasons, a confirmation email is sent to the email address entered for the first time by a data subject for newsletter delivery using the double opt-in procedure. This confirmation email is used to verify whether the owner of the email address, as the data subject, has authorized the receipt of the newsletter.

When registering for the newsletter, we also store the IP address assigned by the ISP to the computer system used by the data subject at the time of registration, as well as the date and time of registration. The collection of this data is necessary to trace (potential) misuse of a data subject’s email address at a later date and therefore serves the legal protection of the controller.

The personal data collected during registration for the newsletter will be used exclusively to send our newsletter. In addition, newsletter subscribers may be informed by email as necessary for the operation of the newsletter service or related registration—such as in the event of changes to the newsletter offering or changes in technical requirements.

There is no disclosure of personal data collected as part of the newsletter service to third parties. The subscription to our newsletter can be terminated by the data subject at any time. Consent to the storage of personal data provided for newsletter delivery can be withdrawn at any time. A corresponding link for this purpose is included in every newsletter. It is also possible to unsubscribe directly on the website of the controller or to inform the controller by other means.

10. Newsletter Tracking

The newsletters of Chateau de Dompierre contain so-called tracking pixels. A tracking pixel is a miniature graphic embedded in emails sent in HTML format to allow log file recording and analysis. This enables statistical evaluation of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, Chateau de Dompierre can see if and when an email was opened by a data subject and which links in the email were clicked.

Such personal data collected through the tracking pixels in the newsletters is stored and analyzed by the data controller in order to optimize the newsletter delivery and better tailor the content of future newsletters to the interests of the data subject. These personal data are not passed on to third parties. Data subjects have the right at any time to withdraw the separate consent given via the double opt-in procedure for tracking. Upon withdrawal, this personal data will be deleted by the controller. Unsubscribing from the newsletter is automatically interpreted by Chateau de Dompierre as a withdrawal of consent.

Chateau de Dompierre uses the services of Mailchimp (The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA) to manage and track newsletters.

11. Contact via the Website

The website of Chateau de Dompierre contains, due to legal requirements, information that enables quick electronic contact with our organization as well as direct communication with us. This includes a general address for so-called electronic mail (email address).

If a data subject contacts the data controller via email or a contact form, the personal data transmitted by the data subject will be automatically stored. For security reasons, the IP address is also recorded. Such personal data voluntarily transmitted by a data subject to the data controller is stored for the purpose of processing the inquiry or contacting the data subject. There is no disclosure of this personal data to third parties.

12. Use of Google Analytics

We use Google Analytics from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This is a tool that enables analysis of website usage. Google uses various techniques for this, including the placement of cookies on your computer. These cookies store information about your use of our site, which we use to improve our services.

Google Analytics stores cookies and typically saves them outside the EU/EFTA area. Google uses this information to evaluate the use of the website on behalf of Chateau de Dompierre, to compile reports on website activities and to provide other services related to website and internet usage. According to Google, the company may also transfer this information to third parties where required by law or where such third parties process the data on Google’s behalf.

The IP address transmitted by your browser in the context of Google Analytics will not be merged with other data from Google. Users can prevent the storage of cookies (see “Cookies” above). Users can also prevent the collection of data generated by the cookie and related to their use of the website (including their IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=en

13. Use of Google Tag Manager

We use Google Tag Manager by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Tag Manager allows marketers to manage website tags via a user interface. The Tag Manager itself, which implements the tags, works without cookies and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Corresponding explanations on these third-party providers can be found in this privacy policy. However, Google Tag Manager does not access this data.

If you have disabled cookies or otherwise configured your browser to block tracking, this will be respected for all tracking tags implemented with Google Tag Manager. In other words, the tool does not alter your cookie settings.

Google may ask for your permission to share some product data (such as your account information) with other Google products to enable certain features—like simplifying the addition of new conversion tracking tags for AdWords. Google’s developers may also occasionally review information on product usage to further optimize the service. However, Google will never share this type of data with other Google products without your consent.

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat.

14. Use of Google Maps

This website uses the Google Maps API to visually display geographic information and to calculate travel times via the route planner. When using Google Maps, Google also collects, processes, and uses data about the use of map functions by visitors.

Further information on the processing of data by Google can be found in the Google Privacy Policy. There, you can also change your personal privacy settings in the Privacy Center.

Detailed instructions for managing your own data in connection with Google products can be found here.

15. Use of Social Plugins

a) Facebook

Our website uses so-called social plugins (“plugins”) of the social network Facebook, operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). The plugins are marked with a Facebook logo or the label “Facebook Social Plugin.” An overview of Facebook plugins and their appearance can be found here: https://developers.facebook.com/docs/plugins

When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to Facebook’s servers. The content of the plugin is transmitted directly to your browser by Facebook and integrated into the page. Through this integration, Facebook receives the information that your browser has accessed the corresponding page on our website—even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is transmitted from your browser directly to a Facebook server in the USA and stored there.

If you are logged in to Facebook, Facebook can directly associate your visit to our website with your Facebook profile. If you interact with the plugins, such as by clicking the “Like” button or leaving a comment, this information is also transmitted directly to a Facebook server and stored there. The information may also be published on your Facebook profile and shown to your Facebook friends.

For details on the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your rights in this regard and settings options to protect your privacy, please refer to Facebook’s privacy policy: http://www.facebook.com/policy.php

If you do not want Facebook to assign the data collected via our website to your Facebook profile, you must log out of Facebook before visiting our website. You can also completely block Facebook plugins with browser add-ons, such as:

for Mozilla Firefox: https://addons.mozilla.org/en/firefox/addon/facebook-blocker/
for Opera: https://addons.opera.com/en/extensions/details/facebook-blocker/
for Chrome: https://chrome.google.com/webstore/detail/facebook-blocker/chlhacbfddknadmnmjmkdobipdpjakmc?hl=en

16. Routine Erasure and Blocking of Personal Data

The data controller processes and stores personal data of the data subject only for the period necessary to achieve the purpose of storage or as provided by the European legislator or another competent legislator in laws or regulations to which the controller is subject.

If the purpose of storage no longer applies or if a storage period prescribed by the European legislator or another competent legislator expires, the personal data will be routinely blocked or deleted in accordance with legal requirements.

17. Rights of the Data Subject

If you wish to exercise any of the following rights, please contact us as outlined in Section 3.
You may also file a complaint about our processing of your personal data with the Swiss Federal Data Protection and Information Commissioner (FDPIC) at www.edoeb.admin.ch.

a) Right to confirmation
Every data subject has the right to obtain confirmation from the controller as to whether or not personal data concerning them are being processed.

b) Right of access
Each data subject has the right to obtain free information at any time from the controller about their stored personal data and to receive a copy of this information. This includes:

the purposes of the processing,
the categories of personal data processed,
the recipients or categories of recipients to whom the personal data has been or will be disclosed, especially in third countries or international organizations,
where possible, the planned duration of storage or, if not possible, the criteria used to determine that duration,
the existence of the right to rectification, erasure, restriction of processing or to object to such processing,
the right to lodge a complaint with a supervisory authority,
if the personal data is not collected from the data subject: all available information about the source of the data,
the existence of automated decision-making including profiling (Article 22 GDPR) and—at least in these cases—meaningful information about the logic involved as well as the significance and envisaged consequences for the data subject.

If data is transferred to a third country or international organization, the data subject also has the right to be informed of the appropriate safeguards relating to the transfer.

c) Right to rectification
The data subject has the right to request the immediate correction of inaccurate personal data. Considering the purposes of the processing, the data subject also has the right to request completion of incomplete data—including by means of a supplementary statement.

d) Right to erasure (“right to be forgotten”)
The data subject has the right to request the controller to erase personal data concerning them without undue delay, where one of the following grounds applies and insofar as processing is not necessary:

The personal data is no longer necessary in relation to the purposes for which it was collected or processed.
The data subject withdraws consent and there is no other legal basis for processing.
The data subject objects to processing and there are no overriding legitimate grounds.
The personal data has been unlawfully processed.
Erasure is necessary to fulfill a legal obligation.
The data was collected in relation to the offer of information society services (Article 8(1) GDPR).

Where the controller has made the personal data public and is obliged to erase it, Chateau de Dompierre will take reasonable steps—including technical measures—to inform other data processors that the data subject has requested erasure of all links, copies, or replications of that data.

e) Right to restriction of processing
The data subject has the right to obtain restriction of processing where one of the following applies:

The accuracy of the personal data is contested by the data subject.
The processing is unlawful and the data subject opposes erasure and requests restriction instead.
The controller no longer needs the personal data, but the data subject requires it for legal claims.
The data subject has objected to processing, pending verification of whether the controller’s legitimate grounds override those of the data subject.

f) Right to data portability
The data subject has the right to receive the personal data they provided to a controller in a structured, commonly used, and machine-readable format and to transmit it to another controller, where:

the processing is based on consent or on a contract, and
the processing is carried out by automated means.

They also have the right to have the data transmitted directly from one controller to another, where technically feasible and where this does not adversely affect the rights and freedoms of others.

g) Right to object
The data subject has the right to object, on grounds relating to their particular situation, at any time to processing based on Article 6(1)(e) or (f) GDPR—including profiling based on those provisions.

If Chateau de Dompierre processes personal data for direct marketing, the data subject may object at any time to such processing, including profiling related to such marketing.

Additionally, the data subject may object to processing of personal data for scientific, historical research, or statistical purposes unless the processing is necessary for the performance of a task carried out for reasons of public interest.

h) Automated decisions in individual cases including profiling
The data subject has the right not to be subject to a decision based solely on automated processing—including profiling—which produces legal effects or significantly affects them, unless the decision:

is necessary for entering into or performing a contract,
is authorized by Union or Member State law, or
is based on the data subject’s explicit consent.

In such cases, Chateau de Dompierre will take appropriate steps to safeguard the data subject’s rights and freedoms, including the right to human intervention, to express their point of view, and to contest the decision.

i) Right to withdraw consent
The data subject has the right to withdraw consent to processing of personal data at any time.

To exercise any of the above rights, please contact our data protection officer.

18. Legal Basis for Processing

Article 6(1)(a) GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose.

If the processing of personal data is necessary for the performance of a contract to which the data subject is party—such as when processing operations are required for the delivery of goods or provision of another service—the processing is based on Article 6(1)(b) GDPR. The same applies to processing operations that are necessary to carry out pre-contractual measures, such as in the case of inquiries regarding our products or services.

If our company is subject to a legal obligation requiring the processing of personal data—such as for fulfilling tax obligations—the processing is based on Article 6(1)(c) GDPR.

In rare cases, processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were injured on our premises and their name, age, health insurance details, or other vital information needed to be passed on to a doctor, hospital, or third party. In that case, the processing would be based on Article 6(1)(d) GDPR.

Finally, processing operations could be based on Article 6(1)(f) GDPR. This legal basis applies to processing operations that are not covered by any of the aforementioned legal grounds, if the processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party—provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject.

Such legitimate interests include when the data subject is a customer of the controller, as explicitly mentioned by the European legislator (Recital 47 GDPR).

19. Legitimate Interests in Processing Pursued by the Controller or a Third Party

If the processing of personal data is based on Article 6(1)(f) GDPR, our legitimate interest is the performance of our business activities in favor of the well-being of all our employees and shareholders.

20. Duration of Storage of Personal Data

The criterion for the duration of storage of personal data is the respective statutory retention period. After this period expires, the corresponding data is routinely deleted, provided it is no longer required for the fulfillment or initiation of a contract.

21. Legal or Contractual Requirements for the Provision of Personal Data; Necessity for Conclusion of the Contract; Obligation of the Data Subject to Provide Personal Data; Possible Consequences of Non-Provision

We inform you that the provision of personal data may be partly required by law (e.g., tax regulations) or may also result from contractual provisions (e.g., information about the contractual partner).

Sometimes it may be necessary, for the conclusion of a contract, that a data subject provides us with personal data that we subsequently need to process. For example, the data subject is obliged to provide us with personal data when Chateau de Dompierre enters into a contract with them. Failure to provide the personal data would mean that the contract with the data subject could not be concluded.

Before providing personal data, the data subject may contact one of our employees. Our employee will inform the data subject on a case-by-case basis whether the provision of the personal data is legally or contractually required, or necessary for the conclusion of the contract, whether there is an obligation to provide the personal data, and what consequences the failure to provide the data would have.

22. Existence of Automated Decision-Making

As a responsible organization, Chateau de Dompierre does not use automated decision-making or profiling.

We reserve the right to update our privacy policy at any time by publishing changes on this website.
Chateau de Dompierre, March 2025