Privacy Policy

Last updated on 7 December 2025

A transparent approach to personal data is very important to us. This privacy policy informs you about which personal data we collect, for what purpose, and to whom we pass it on. We regularly review and update this privacy policy to ensure the highest level of transparency.

What data we collect

Which services we use

Privacy Policy

Last updated on 7 December 2025

What are we doing?

Centurio 5 Bed & Breakfast, Reto Rahm (Schiffländeweg 5, 4302 Augst BL) operates the website centurio5.com (hereinafter referred to as «we»).

The protection of your personal data is a great concern to us. In this privacy policy, we transparently and comprehensibly inform you about what data we collect via our website and how we handle it.

For this reason, we use the club's icons PRIVACY ICONS. This will help you quickly get an overview of how we process your data.

What do we inform about?

• Who is responsible for the data processing;
• What data is collected;
• For what purpose this data is collected;
• On what legal basis do we collect this data?;
• To whom we pass this data;
• How to object to data processing;
• What rights you have and how you can claim them.

Contact

Should you have any questions or concerns regarding the protection of your data by us, you can contact our Data Protection Officer:

Centurio 5 Bed & Breakfast, Reto Rahm
Reto Rahm
Schiffländeweg 5
4302 Augst BL
bb@centurio5.com

Data security

We will keep your data secure and take all reasonable steps to protect your data from loss, access, misuse or alteration.

Our contractual partners and employees who have access to your data are obliged to comply with data protection regulations. In some cases, it will be necessary within the scope of order processing for us to forward your requests to affiliated companies. Your data will be treated confidentially in these cases as well.

Within our website, we use the SSL (Secure Socket Layer) procedure in conjunction with the highest encryption level supported by your browser.

Rights of affected persons

Right to information

You can request information about the data we hold on you at any time. Please send your request for information, along with credible proof of identity, to bb@centurio5.com.

The information will be provided in written or other form, including electronically where applicable. If you request it, we can also provide the information verbally, provided you prove your identity in another form. If you submit your information request electronically, we will provide the information in a common electronic format, unless you specify otherwise.

The information is usually free of charge. If copies are requested in addition, a reasonable fee may be charged.

The right to receive a copy of the processed data must not adversely affect the rights and freedoms of others.

In the case of obviously unfounded or excessive requests for information, we reserve the right to refuse the information within the legal limits or to charge an appropriate fee.

The processing of your application is subject to the statutory period of one month. We may extend this period by a further two months if necessary, due to the complexity and the high number of requests. You will be informed about the extension of the period within one month of submitting the information request. At the same time, you will be informed of the reasons for the extension.

Deletion and Correction

You always have the option to request the deletion or correction or completion of your data, provided that there are no legal retention obligations or legal grounds for permission to the contrary.

Please note that exercising your rights may conflict with contractual agreements and may have consequences for the performance of the contract (e.g. early termination of the contract or cost implications).

Restriction of processing

You also have the right to request a restriction of processing if you dispute the accuracy of these data, the processing is unlawful, the data are no longer required or you have objected to the processing.

If the processing of the data is restricted, it may only be stored. Further processing may only take place with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another person, or for reasons of an important public interest. In the event of a lifting of the restriction, you will be notified.

Right to data portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, common and machine-readable format and to transmit this data to another controller without hindrance from us, to whom the personal data have been provided, provided that the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a GDPR or on a contract pursuant to Article 6(1)(b GDPR and the processing is carried out using automated procedures. You also have the right to request that the personal data be transmitted directly from us to another controller, as far as this is technically feasible.

Right of objection

If you have given consent for the processing of your data, you can withdraw this consent at any time. Such a withdrawal affects the admissibility of the processing of your personal data after you have declared your objection to us.

As far as we rely on the balancing of interests for the processing of your personal data, you may object to this processing. This is the case if the processing is not necessary, in particular, for the performance of a contract with you, which we will describe for each individual function described below. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and will either cease or adapt the data processing or show you our compelling legitimate grounds for continuing the processing.

You can object to the processing of your personal data for advertising and data analysis purposes at any time. You can contact us regarding your advertising objection using the contact details provided in this privacy policy.

Right to complain

You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.

General Principles

What data do we process from you and from whom do we receive this data?

Primarily, we process personal data that you submit to us or that we collect when operating our website. We may also receive personal data about you from third parties. These can be the following categories:

• Personal master data (name, address, date of birth, etc.);
• Contact details (mobile number, email address etc.);
• Financial data (e.g., account details);
• Online identifiers (e.g. cookie IDs, IP addresses);

These data can originate from the following sources:

• Information from publicly accessible sources (e.g. media, internet);
• Information from public registers (e.g. commercial register, debt enforcement register, land register);
• Details related to administrative or legal proceedings;
• Details concerning your professional functions and activities (e.g., professional networks);
• Information about you in correspondence and meetings with third parties;
• Credit reports (where we process personal transactions with you);
• Details about you provided by people you know, which enable us to enter into or fulfil contracts with you;
• Data relating to website usage.

Under what circumstances do we process your data?

We process your data in accordance with applicable data protection laws, in particular the GDPR. The processing is carried out for the purposes specified in this privacy policy. We pay attention to transparency and proportionality.

The processing of your data is lawful if a legal basis under the GDPR is met. The legal bases that may be relevant include, in particular:

• Your consent (Art. 6(1)(a) GDPR);
• The performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR);
• The fulfilment of legal obligations to which we are subject (Art. 6(1)(c) GDPR);
• Protecting the vital interests of the data subject or another natural person (Art. 6(1)(d) GDPR);
• The perception of a task that lies in the public interest or is carried out in the exercise of public authority conferred on the controller (Art. 6 para. 1 lit. e GDPR);
• Our legitimate interests, provided your interests do not override them (Art. 6(1)(f) GDPR).

Under certain circumstances, it may be necessary for you to provide us with certain personal data so that contractual obligations can be fulfilled. Without such data, we are normally unable to process a contract.

Normally, the website cannot be used either if certain details to ensure data traffic, such as your IP address, are not disclosed.

In which cases can we share your data with third parties?

a. Principle

We may rely on third-party services or affiliated companies to process your data (so-called data processors). Categories of recipients include:

• Accounting, fiduciary and auditing firm;
• Consultancy firm (legal advice, tax etc.);
• IT service provider (web hosting, support, cloud services, website design, etc.);
• Payment service provider;
• Provider of tracking, conversion and advertising services.

We ensure that these third parties and our affiliates comply with data protection requirements and treat your personal data confidentially.

Under certain circumstances, we may also be obliged to disclose your personal data to authorities.

b. Passing on to partners and cooperation companies

We work with various companies and partners who publish their offers on our website. You will be able to tell that these are third-party offers (marked as «advertisements»).

If you take up such an offer, we will transmit your personal data to the relevant partner or cooperative company (e.g. name, position, communication, etc.) whose offer you wish to take up. These partners and cooperative companies are independently responsible for the personal data received. After the transmission of data, the data protection regulations of the respective partner shall apply.

c. Transfer abroad

In certain circumstances, your personal data may be transferred to companies abroad as part of order processing. These companies are obliged to protect data to the same extent as we are. The transfer may take place worldwide.

If the level of data protection does not correspond to that of the EEA region, we will carry out a prior risk assessment and contractually ensure that the same protection as in the EEA region is guaranteed (e.g. by means of the EU Commission's standard contractual clauses or other legally prescribed measures). Should our risk assessment turn out negative, we will take additional technical measures to protect your data. You can access the EU Commission's standard contractual clauses at the following Link.

How long do we keep your data for?

We only store personal data for as long as is necessary to fulfil the particular purposes for which the data were collected.

We store contract data for longer as we are legally obliged to do so. In particular, we must retain business communications, concluded contracts, and booking confirmations for up to 10 years. If we no longer require such data from you for the provision of services, the data will be restricted for further processing, and we will only use it for accounting and tax purposes.

Individual data processing operations

Serving the webpage and creating log files

By merely visiting centurio5.com, meaning without registering or providing any other information, only data that your browser automatically transmits to our server will be collected. This data is technically required for the operation of the website.

What data do we process?

In particular, the following data is processed for the provision of the website and the creation of log files:

• Internet Service Provider name
• IP address
• Technical information such as browser, operating system, or screen resolution
• The date and time of the access
• Referrer URL

These data cannot be attributed to any specific person, and these data are not merged with other data sources.

For what purpose do we process the data?

The processing of log files is carried out in order to guarantee the functionality of the website and to ensure the security of our information technology systems.

On what basis do we process the data?

The legal basis for this data processing is our legitimate interest in accordance with Article 6(1)(f) of the GDPR. Our legitimate interests arise from the purpose of the data processing.

Who do we pass the data on to?

The disclosure of data by us is governed by our Information on data transfer.

How can you prevent data processing?

The data will only be stored for as long as is necessary to fulfil the purpose for which it was collected. Consequently, the data will be deleted at the end of each session. The storage of log files is essential for the operation of the website, therefore you have no possibility to object to this, unless you do not visit our website.

Contact

You can contact us in several ways. If you contact us and provide personal data, this will result in data being processed by us. This refers to any verbal, written, or other form of contact with us.

What data do we process?

When you contact us, we process all the data you provide to us. This includes, in particular:

• Name
• Email address
• Content and timing of your contact
• Contact details

It may be that you are required to provide certain data in order to contact us, for example, when contacting us via a contact form or when requesting a callback.

For what purpose do we process the data?

The purpose for which we use the data arises from the nature of the contact made. However, we do not use the data for any unpredictable or unforeseen purposes. The most common purposes are communication and feedback, customer service, and the processing of business enquiries.

On what basis do we process the data?

The legal basis for this data processing is our legitimate interest in accordance with Article 6(1)(f) of the GDPR. Our legitimate interests arise from the purpose of the data processing.

Who do we pass the data on to?

The disclosure of data by us is governed by our Information on data transfer. If the purpose of your contact requires the transfer of your data to third parties, we will pass on the data to the extent necessary.

How can you prevent data processing?

If you contact us, data processing cannot be avoided. Consequently, you must refrain from contacting us if you do not wish for your data to be processed.

Biscuits

Our website uses cookies. Cookies are text files that are placed on your device's operating system using your browser when you visit our website. Cookies do not harm your computer and do not contain viruses. Some cookies are technically necessary for the website to function. Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them or their expiry date passes.

For what purpose do we process the data?

We use cookies to make our website more user-friendly, effective, and secure based on the data collected. In particular, we use cookies for saving your preferences (e.g. language and location settings), the quick provision and attractive display of website content (e.g. through the use of fonts and Content Delivery Networks), and for analysing the use of this website for statistical evaluation and continuous improvements (usually via third-party cookies). The specific purposes for which we use the cookies (which are not technically necessary) are set out in the following explanations in this privacy policy.

On what legal basis are we processing the data?

The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR. Where technically necessary cookies are concerned, our legitimate interest pursuant to Art. 6(1)(f) GDPR forms the legal basis.

Who do we pass the data on to?

The disclosure of data by us is governed by our Information on data transfer. In addition, the following information regarding the individual data processing operations in this privacy policy must be observed.

How can you prevent data processing?

When you visit the website, a cookie banner is displayed. Cookies that require your consent according to Art. 6(1)(a) GDPR will only be activated once you give your consent. If you refuse consent, no data will be collected by the cookies requiring consent.

The data collection by cookies, which we employ based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, cannot be prevented by means of the cookie banner. These cookies, which are technically necessary for the operation of the website, are stored on your computer. You can delete these entirely or deactivate or restrict their transmission by changing the settings in your browser. If cookies are deactivated for our website, it may no longer be possible to use all website functions to their full extent.

Instructions for the most common browsers can be found here:

• For Chrome from Google
• For Safari from Apple
• For Edge by Microsoft
• For Firefox from Mozilla

For cookies used for performance and reach measurement, or for advertising, a general opt-out is possible for numerous services via the Network Advertising Initiative (NAI), YourAdChoices (Digital Advertising Alliance), or Your Online Choices (European Interactive Digital Advertising Alliance, EDAA).

Newsletter

Through our website, you have the option to sign up for our newsletter. With the newsletter, you will receive information about new posts, events, and offers. We collect performance and reach measurement data for our newsletter.

What data do we process?

To send the newsletter and measure success and reach, we collect the following data in particular:

• IP address
• Contact details
• Date and time of login
• Technical information such as browser, operating system, or screen resolution
• Interactions with the newsletter

The IP address is usually anonymised, meaning that personal identification is no longer possible.

For what purpose do we use the data?

We use the data collected to send out the newsletter, for verification, and for addressing you. We store your data, particularly the IP address used at the time of registration, and the date and time, to log your registration and to detect misuse. This data is stored for as long as you are subscribed to the newsletter. We also use your IP address to determine your approximate location. From the information gained, we can measure the relevance of our offers in different regions and segment advertising campaigns. The technical information is used to ensure the newsletter can be displayed correctly on every device. The interactions, time, and date are collected so that we can evaluate and optimise our marketing campaigns and offers based on this data. Furthermore, this data allows us to determine how subscribers interact with our newsletter.

On what legal basis are we processing the data?

The legal basis for this processing is your consent, as per Article 6(1)(a) of the GDPR. By entering your data to subscribe to the newsletter, you consent to the data processing.

Who do we pass the data on to?

We will pass on your data to commissioned service providers for the purposes of technical processing and measuring the success and reach of the newsletter. Some of these service providers have servers all over the world. This means that the data collected may be transferred worldwide by our service providers. Furthermore, our Information on data transfer.

How can you prevent data processing?

You can unsubscribe from the newsletter at any time by confirming the unsubscribe link in an email received from us. Alternatively, you can unsubscribe by sending us an email.

Count pixels

We may use tracking pixels on our website or in our emails. Tracking pixels are also known as web beacons. Tracking pixels are small, usually invisible images that are automatically retrieved when you visit our website or open our emails.

What data do we process?

Tracking pixels can capture the same data as log files. In addition, movement profiles for the entire session can be recorded. Tracking pixels are used in particular by third parties whose services we use. The services of these third parties are described in detail below in this statement.

For what purpose do we process the data?

Tracking pixels are used by various tracking services to analyse the use of this website, for statistical evaluation, and for continuous improvements. Tracking pixels can also be used for email tracking.

On what legal basis are we processing the data?

The legal basis for distribution is your consent pursuant to Art. 6(1)(a) GDPR.

Who do we pass the data on to?

The disclosure of data by us is governed by our Information on data transfer. Please also note the details in this privacy policy regarding the individual tracking services.

How can you prevent data processing?

To prevent data processing using tracking pixels, you can install suitable browser extensions like uBlockOrigin and block external graphics in your email client.

Matomo Analytics

PrivacyBee

Does our privacy policy always stay the same?

We may change this privacy policy at any time. The changes will be posted on centurio5.com published. You will not be informed separately.