WF International AG is a limited liability company registered in Switzerland with its principal place of business in Inseliquai 8, 6002 Luzern (hereinafter referred to as "we" or "us").
As a matter of principle, we do not collect personal data by default. You can browse our website completely anonymously. Only when signing up for an account and/or purchasing a product or service from us we will ask for personal data, much of which is however optional for you to give us. The more we know about you, the better we can respond to your needs and preferences. But we are happy with the bare minimum required to allow your account with us to function and/or your contract with us to be performed. Should you choose to sign up for an account, we offer a range of options that put you in control of the data you share with us, and what we are allowed to do with it.
If you choose to provide us with personal data, we pledge to handle it fairly and in accordance with applicable law, in particular the General Data Protection Regulation (Regulation (EU) 2016/679, hereinafter “GDPR”). We try to be as transparent as possible concerning the nature of the data we process, the extent to which that data is or will be processed, and the purposes for which it is or will be processed. We only collect personal data that is adequate, relevant and limited to what is necessary for the purposes for which it is or will be processed. We periodically review whether we still need the personal data that we have stored about you in order to not keep it longer than necessary. Any personal data that you provide to us is stored and visible on a need-to-know basis to ensure that the services or products you purchase from us can be delivered and carried out to your satisfaction. The foundation of our concierge services is you, our customer, and requires personal data to deliver a luxury service. The personal data that you provide verbally, or by inputting from our systems, or any other data that our concierge deems helpful for a better operation, will be securely stored on our servers.
Please note that our website is not intended for children (under 16 years of age) and we do not knowingly collect and/or use data relating to children.
We have appointed a data protection officer to ensure that our data protection policies and measures reflect the state of the art. If you have any questions about how we process your personal data that are not answered here, or if you want to exercise your rights regarding your personal data, please contact Marcus Bergstrom at firstname.lastname@example.org.
1. What personal data do we collect?
We do not collect personal data without your consent, and you can browse our website without giving us any personal data.
1.2 Registered Users
Certain features and areas of our website require a person to be identified to use or access them. In these scenarios, you will be asked to ‘sign up’ for an account. There are three categories of personal data we may collect from you to become and remain a registered user:
(1) data that is required to have an account,
(2) data required to use our services, and
(3) optional data that you will be given the opportunity to disclose in order for us to provide our concierge services.
When you purchase a product or service for someone else through our website, we will request personal data about that individual. You hereby consent that you have obtained the consent of other individuals prior to providing us with their personal data.
1.2.1 Data required to have an account
In order to create and maintain an account with us, we have to collect and store your name, email address(es) and password(s).
1.2.2 Data required to use our services
In order to enter into, and perform, a contract with you, and to comply with our legal obligations, we have to collect and store further personal data, such as
your first and last name, date and place of birth;
contact details (postal address, including billing and delivery addresses, phone numbers, including mobile phone numbers, and email addresses);
identity verification information (such as details about, or images of, your passport or other identification documents, driving license etc.);
products and services purchased by you in the past;
reservation and booking information, including billing information (such as bank account or credit card information, including card number, cardholder name, and expiration date);
your correspondence and communications with us.
1.2.3 Optional data
On occasion, we will ask you to provide personal data in order to offer our luxury concierge services. This information is entirely optional. The data will usually, but not always, be related to a booking or purchase you have made with us. Optional data that you may choose to give us includes
further details about yourself (such as gender, languages);
preferences and needs, including dietary restrictions, food preferences, personal interests, special service needs, preferred room temperature and pillow softness, etc.;
clothing and shoe sizes, preferred ski length, type of snow or kite board;
travel details such as flight numbers and arrival/departure times;
health information, such as prescribed medication, injuries, heart condition, allergies etc.;
marketing preferences, including products and services you are interested in.
We will only collect optional personal data, in particular sensitive personal data (cf. Article 9 GDPR), if you have given explicit consent to the processing of such data.
2. How do we use your personal data?
We do not collect personal data without your consent or a legitimate purpose within the meaning of Article 6 GDPR, and we do not collect more data than is necessary in order to fulfil that purpose. The personal data we collect is used
to verify your identity;
to manage your account(s) with us, including sending you service or support messages, updates, security alerts, and account notifications;
to sell and supply our goods and services to you;
to understand your behaviour, activities, preferences, and needs in order to offer you tailored products and services;
to improve existing products and services and develop new products and services according to your preferences and needs;
to provide customer service and handle queries, complaints and disputes;
to operate, protect, and optimise our website;
to comply with legal obligations to which we are subject;
for crime and fraud prevention, detection and related purposes.
to promote, market and advertise our products and services to you;
to contact you about promotional offers and products and services which we think may interest you.
Personal data collected as part of the registration process for our newsletter is used to inform you about things you have asked us to inform you about, to contact you if we need to obtain or provide additional information, to make sure our records are up to date and to check every now and then that you are happy with our services. We will not sell, exchange or otherwise share our mailing lists with others. You have the right to withdraw consent at any time by clicking the unsubscribe link at the bottom of any of our emails, changing your privacy settings in your account, or by emailing our data protection officer Marcus Bergstrom at email@example.com.
3. Legal basis for processing your personal data
In accordance with Article 6 GDPR, we process your personal data only if, and to the extent that,
you have given consent to the processing of your personal data;
it is necessary to enter into, or perform, a contract with you;
it is necessary to comply with a legal obligation to which we are subject;
it is necessary to protect vital interests of yourself or another natural person;
it is necessary for the performance of a task carried out in the public interest; or
we have a legitimate interest in processing your personal data, provided that such interest is not overridden by your interests or fundamental rights and freedoms.
In general, we only rely on consent as a legal basis for processing personal data (cf. Article 7 GDPR) in relation to sending you promotional offers and other direct marketing communications via newsletter. You have the right to withdraw consent at any time by clicking the unsubscribe link at the bottom of any of our emails, changing your privacy settings in your account, or by emailing our data protection officer Marcus Bergstrom at firstname.lastname@example.org.
We may process sensitive personal data, such as data concerning your health, in order to offer you products and services that are tailored to your needs and preferences. We only process sensitive personal data if you have given explicit consent (cf. Article 9 GDPR). By providing sensitive personal data to us, you give consent to its processing for the purpose of offering and selling you tailor-made products and services. You have the right to withdraw your consent at any time by emailing our data protection officer Marcus Bergstrom at email@example.com.
4. With whom may we share your personal data?
As a matter of principle, we do not sell, exchange or otherwise share your personal data with others. However, in order to make certain products or services available to you, we may need to share your personal data with third parties, including:
suppliers, such as accommodation, transport, and experience providers;
business partners with whom we jointly offer products or services;
financial service providers, such as banks and payment service providers;
companies within our corporate family.
The third parties we share your personal data with are required to treat it as confidential and to use it exclusively for the purposes for which it is provided to them. They are contractually bound by the applicable data privacy laws and regulations.
We may also share your personal data to comply with a legal obligation to which we are subject or for crime and fraud prevention, detection and related purposes.
All cookies we use can be seen by clicking the 'Customize' button on the cookie popup that appears when you visit our site. We use them for your convenience - to recall any selections you have already made, such as your cookie preferences, or answers you have already provided on one of our application forms. A cookie will also be stored should you opt in to Google Analytics (see below).
6. Google Analytics
When visiting our site, we provide visitors with the opportunity to help us understand their needs and to continually improve our site for them. This service is provided by Google Analytics, is optional, and is turned off by default.
Website users who do not want their data collected with Google Analytics can also install the Google Analytics opt-out browser add-on. This is compatible with all major browsers and can be downloaded and installed via the Google Analytics opt-out page.
7. Social Media
Our website provides users with the opportunity to interact with social media sites such as Facebook, Twitter, Instagram, and Pinterest. If you click on a social media plugin, it will be activated and your browser will directly connect to that provider’s servers. In these cases, the social media provider will receive information concerning your visit of our website, as well as further data such as your IP address. We have no influence on the type and amount of data that is transferred. The provider may also send us information about you such as your registration and profile information from that service. This information varies and is controlled by the social media provider or as authorised by you via your privacy settings at that service.
If you do not want social media providers to map data collected about you via our website to your social media account, you must log out of the services before visiting our website.
Our website contains links to other sites that are not owned or controlled by us. Please be aware that we are not responsible for the privacy practices of such other sites.
9. Your rights
According to the GDPR, you enjoy a number of rights relating to the processing of your personal data (cf. Articles 15 to 22 GDPR). You are entitled to, inter alia,
access your personal data (cf. Article 15 GDPR);
have it rectified (cf. Article 16 GDPR) or erased (cf. Article 17 GDPR);
restrict its processing (cf. Article 18 GDPR);
receive it in a structured, commonly used and machine-readable format (cf. Article 20 GDPR);
object to its processing (cf. Article 21 GDPR).
If you wish to exercise any of the above or other rights according to the GDPR or any other applicable data protection legislation, please contact our data protection officer Marcus Bergstrom at firstname.lastname@example.org. We will respond to your request without undue delay, at the latest within one month of receipt of the request (cf. Article 12 GDPR).
10. Changes to this policy
Thanks for reading all the way to the end. Now get on with your life, lean back and book one of our fascinating Escapes or Experiences – you certainly deserve it after all the fine print.