Privacy policy.

Last updated: April 2026. This privacy policy explains how we process your personal data when you visit our website and use our services. Controller under the revised Swiss Federal Act on Data Protection (FADP) and — where applicable — the EU General Data Protection Regulation (GDPR):

Boutique Hotel Belle Époque
Gerechtigkeitsgasse 18, 3011 Bern
reception@belle-epoque.ch · +41 31 311 71 71

1 · Principles

We process personal data in good faith, only for purposes that are determined in advance and recognisable to the data subject, and proportionate to those purposes. We take appropriate technical and organisational measures to ensure data security (FADP art. 8, GDPR art. 32).

2 · Categories of data processed

• Reservation and stay data: name, address, date of birth (registration duty), travel dates, payment information, special requests.
• Communication data: emails, calls, contact-form requests, newsletter sign-ups.
• Website usage data: IP address (truncated), user agent, referrer, page views, dwell time — only with your consent, via Google Analytics 4.
• Restaurant / Bar contract data: reservation, allergies, accompanying guests.

3 · Purposes of processing

• Contract conclusion, performance and billing (lodging, restaurant)
• Compliance with legal obligations (registration, accounting, retention)
• Handling enquiries, complaint management, concierge
• Direct marketing of our own offers (with consent)
• Audience measurement and website improvement (with consent)
• Legitimate interests: IT security, fraud prevention, evidence preservation

4 · Cookies & tracking

On your first visit we ask for consent by cookie category (Necessary · Statistics · Marketing). Necessary cookies are set even without consent; they are required for login, language, and security (e.g. CSRF protection). All other categories are only set after explicit confirmation. You can change your choice at any time:

◆ Open cookie preferences

5 · Processors

We use carefully selected service providers with whom we have concluded data-processing agreements under FADP art. 9 / GDPR art. 28:

• Netlify (hosting · USA, with EU-compliant data-processing agreements)
• Google Ireland Ltd. (Analytics, Ads, Tag Manager, Maps embed · IE/USA)
• Hotel property management / channel-manager system
• Booking tool: SiteMinder "Direct Book" / direct-book.com
• Payment provider (Worldline, Stripe or equivalent)
• Email/CRM provider for newsletter

6 · Transfers abroad

Disclosure abroad only takes place if the recipient country provides adequate data protection or if suitable safeguards are in place (e.g. EU Standard Contractual Clauses, Swiss Federal Council decision on adequate protection). For transfers to the USA we rely on the EU-US Data Privacy Framework and the corresponding Swiss adequacy declaration.

7 · Retention

Contract data is retained for 10 years under Swiss Code of Obligations. Registration data per the Bern cantonal registration law. Enquiries without a contract are deleted after 12 months. Newsletter data until withdrawal.

8 · Your rights

• Right of access to your processed data (FADP art. 25)
• Right to rectification of inaccurate data (FADP art. 32)
• Right to erasure or restriction of processing
• Right to data portability (FADP art. 28)
• Right to withdraw consent with effect for the future
• Right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC)

Please direct requests to our email address. We may require official ID for verification. reception@belle-epoque.ch

9 · Security

Transmission is via TLS (HTTPS). We use Strict Transport Security, Content Security Policy, Frame-Options and other headers according to the state of the art. Only authorised personnel under confidentiality duty have access to personal data.

10 · Changes

This policy may be adapted to new legal requirements or services. The version currently published on this page applies.