1. Principle

We place a high value on protecting our clients' privacy.

Below, we describe the principles by which we collect and process personal data (information that identifies you or allows us to identify you; commonly referred to as "data") via our website, as well as the purposes for which we do so.

We take great care with your information and only store it for as long as it is required to deliver our services or as long as we are legally required to do so.

We collect and process personal data for the following purposes in general:

• to contact you and make you an offer in order to meet our contractual responsibilities to our customers;

• to adhere to legal requirements

• for other purposes, such as ensuring IT security, for training and education purposes (e.g. recording customer advice calls), for internal administrative purposes or to enforce our rights and to defend against claims;

• We can create customer, consumption and transaction profiles and also link the above-mentioned personal data with data from other sources (e.g. data purchased from data publishers). We do this to process the contractual relationship, for risk management (e.g. preventing credit defaults and fraudulent transactions) and for marketing purposes (e.g. to optimize offers and services for you).

2. General notice

Based on Article 13 of the Swiss Federal Constitution (BV) and the data protection regulations of the federal government (Data Protection Act, DSG), every person has the right to protection of their privacy and protection against misuse of their personal data. The operators of these pages are committed to protecting your personal information. We keep your personal information private and adhere to the statutory data protection requirements as well as this data protection declaration. We work with our hosting providers to ensure that the databases are protected as much as possible from unauthorized access, loss, misuse, or falsification. We'd like to emphasize that data transfer over the Internet (for example, when conversing via e-mail) can have security flaws. It is not possible to completely protect data from third-party access. By using this website, you agree to the collection, processing and use of data as described below. This website can generally be visited without registration. Data such as the sites accessed or the name of the file accessed, as well as the date and time, are recorded on the server for statistical purposes but are not linked to you personally. Personal information, such as a person's name, address, or e-mail address, is gathered on a voluntary basis whenever possible. Without your permission, your information will not be shared with third parties. Third-party engagement is the third point to consider. To provide our services, we collaborate with third parties in particular (order data processing). These third parties are subject to contractual and statutory confidentiality and data protection obligations. External processors of personal data include in particular service providers in the field of bulk mailings, payment services, credit agencies, transport, customer feedback, IT, marketing and platforms for sending newsletters as well as government agencies and authorities.

3. Privacy Policy for SSL/TLS Encryption

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties. V. Data protection declaration for server log files The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us.

These are:

• Browser type and browser version

• operating system used

• Referrer URL

• Host name of the accessing computer

• Time of server request

This data cannot be assigned to specific persons. This data is not merged with other data sources. We reserve the right to subsequently check this data if we become aware of specific indications of illegal use.

4. Privacy Policy for Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the person responsible for data processing on this website is located outside the European Economic Area or Switzerland, Google Analytics data processing is carried out by Google LLC. Google LLC and Google Ireland Limited are hereinafter referred to as "Google". We can use the statistics obtained to improve our offer and make it more interesting for you as a user. This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out using a user ID. If you have a Google user account, you can deactivate the cross-device analysis of your use in the settings there under “My data”, “Personal data”. The legal basis for the use of Google Analytics is Article 6 Paragraph 1 Clause 1 Letter f GDPR. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. We would like to point out that on this website Google Analytics has been extended by the code "_anonymizeIp();" was extended to ensure an anonymous collection of IP addresses. As a result, IP addresses are further processed in abbreviated form, which means that they cannot be linked to individuals. If the data collected about you has a personal reference, this will be excluded immediately and the personal data will be deleted immediately. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. Google Analytics uses cookies. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out to you however that in this case you will if applicable not be able to use all functions of this website in full. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: Disable Google Analytics. You can also prevent the use of Google Analytics by clicking on this link: Disable Google Analytics. This saves a so-called opt-out cookie on your data carrier, which prevents the processing of personal data by Google Analytics. Please note that if you delete all cookies on your end device, these opt-out cookies will also be deleted, i.e. you will have to set the opt-out cookies again if you want to continue to prevent this form of data collection. The opt-out cookies are set per browser and computer/device and must therefore be activated separately for each browser, computer or other device.

5. Processing of personal data

Purpose of data processing For the purpose of booking, carrying out a trip/holiday stay and optimizing your travel/accommodation experience, we process your personal data as part of the following activities:

• Dealing with irregularities/complaints;

• Improvement of offers (e.g. customer surveys);

• Ensuring payment transactions.

6. General Disclaimer

All information on this website has been carefully checked. We make every effort to ensure that the information we offer is up-to-date, correct in terms of content and complete. Nevertheless, the occurrence of errors cannot be completely ruled out, which means that we cannot guarantee the completeness, correctness and topicality of information, including that of a journalistic and editorial nature. Liability claims for damage of a material or immaterial nature caused by the use of the information provided are excluded unless there is evidence of intentional or grossly negligent fault. The publisher can change or delete texts at its own discretion and without notice and is not obliged to update the content of this website. Use of or access to this website is at the visitor's own risk. The publisher, its clients or partners are not responsible for any damage, such as direct, indirect, accidental, damage to be determined in advance or consequential damage, which is alleged to have arisen from visiting this website and therefore assume no liability for this. The publisher also assumes no responsibility and liability for the content and availability of third-party websites that can be accessed via external links on this website. The operators of the linked pages are solely responsible for their content. The publisher expressly distances himself from all third-party content that may be relevant under criminal or liability law or that violate common decency.

7. Customers’ Rights

You have the right to information, correction and deletion of your data. You also have the right to restrict processing. Statutory retention requirements remain reserved. You have the right to object to the processing of your personal data. An objection only applies to the future and does not affect previous processing. If we can no longer provide the services contractually agreed with you due to the objection, the objection is considered a breach of contract by the customer and we have the right to terminate the contract with you without notice. The customer's contractual payment obligations remain in effect. To assert these rights, you can contact the address given below.

8. Changes

We can adjust this data protection declaration at any time without prior notice. The current version published on our website applies. Insofar as the data protection declaration is part of an agreement with you, in the event of an update we will inform you of the change by e-mail or by other suitable means.

9. Questions to the data protection officer

If you have any questions about data protection, please send us an e-mail or contact the person responsible for data protection in our organization listed at the beginning of the data protection declaration. In addition to these data protection regulations, our general terms and conditions apply, which can also be accessed on our homepage and form an integral part of the contract concluded between us and the customer.

Zug, April 11, 2023