Privacy Policy

1. Data controller and content of this Privacy Notice

We, Badrutt’s Palace Hotel AG, Via Serlas 27, 7500 St. Moritz, Switzerland, entered in the commercial register of the Canton of Graubünden under number CHE-105.980.962 (we, us, our, etc.), are the operators of Badrutt’s Palace Hotel (hotel) and the website www.badruttspalace.com (website) and, unless stated otherwise in this Privacy Notice, we are responsible for the data processing described in this Privacy Notice.

To find out which personal data we collect from you and for which purposes, please read the following information. Our data protection practices are based primarily on Swiss data protection laws, especially the Federal Act on Data Protection (FADP), though the provisions of the EU General Data Protection Regulation (GDPR) may also apply in certain cases.

Our website contains links to third-party websites at various points of the site. The data processing on these external websites is the sole responsibility of their operators, unless expressly stated otherwise in this Privacy Notice.

Please note that the information below is reviewed and amended from time to time. We therefore recommend that you consult this Privacy Notice regularly. Furthermore, for the individual data processing activities described below, other companies are legally responsible for data protection or they share this responsibility with us; this means that the information from such providers is also relevant in these instances.

2. Data protection contact

If you have any questions about data protection or would like to exercise your rights, please e-mail our contact person for data protection at the following address: [email protected]

You can contact our EU data protection representative at: MLL Bruxelles SPRL, 222 Avenue Louise, 1050 Brussels, Belgium ([email protected])

3. Data processing when contacting us (telephone and e-mail)

If you contact us by telephone or e-mail (e.g. by clicking on our e-mail symbol), your personal data will be processed. The data that you have provided, such as your name, e-mail address or telephone number and the reason for contacting us, will be processed. We process this data to fulfil your request (e.g. to provide you with information about our rooms, products and services, to support the performance of the contract, to obtain feedback for the improvement of our products and services, etc.).
The lawful basis for this data processing is our legitimate interest within the meaning of Art. 6(1)(f) GDPR in fulfilling your request or, if your enquiry concerns the conclusion or performance of a contract, the necessity of carrying out the requisite measures within the meaning of Art. 6(1)(b) GDPR.

4. Data processing when contacting us using the contact form

If you contact us using the contact form on our website, your personal data will be processed. In such case, we will collect the following data, whereby the mandatory fields in the forms are marked with an asterisk (*):


• Title
• First name
• Last name
• Company
• E-mail address
• Phone number
• Message

The data that you provide us with in your message will also be processed. In addition, the time of receipt of the enquiry is documented. We process this data to fulfil your request (e.g. to provide you with information about our products and services, to support the performance of the contract, to obtain feedback for the improvement of our products and services, etc.).