Privacy

About this notice

This notice describes the admtt.com discovery and booking service and its connected map and content services. The final notice will identify the responsible operator and a direct contact for privacy requests. A venue linked from this website may have its own privacy notice.

Published Andermatt Swiss Alps privacy contact

[email protected]

This is the contact published in the Andermatt Swiss Alps privacy statement. Its group privacy policy describes the group's services. Responsibility for admtt.com must be confirmed separately; those policies are not represented as covering this platform.

Information used by the service

• Account and business information you provide, such as name, email, contact details, venue details and availability.
• When a card or stay is linked, the guest reference, property or room information, card association and session validity needed to provide access. Reassigned cards must not give the next guest access to a previous guest's history.
• Booking and reservation details, including the selected activity or table, time, party size, status and transaction reference. Availability and payment confirmation are separate from simply opening a booking link.
• Technical request and security information, such as IP address, request time, browser information and authentication events, handled by the website and its infrastructure providers.
• Content interaction measurements: an individual page-visit identifier, item viewed, active viewing time, booking and directions clicks, and video playback counts. The current web collector does not include names, emails, card IDs or room numbers in these measurements.

Why this information is used

Information is used to provide requested access, reservations and booking history; administer business listings; maintain security; respond to enquiries; and understand which content is useful. Where the GDPR applies, the relevant grounds may include performance of a requested contract, legal obligations, legitimate interests in operating and securing the service, or consent for optional functions. The final notice must specify the grounds and safeguards for the deployed services.

Maps, location and your choices

Navigation requests your device's location permission. You can decline it, revoke it in browser settings or use destination search instead. Device heading is used only when supported and permitted. Opening an external directions or booking provider shares the information included in that link with that provider; its own terms and privacy notice apply.

The current page-interaction collector respects supported Do Not Track and Global Privacy Control signals. Optional location permission is not permission for unrelated marketing.

Cookies and local storage

Authentication cookies maintain sign-in and guest sessions. Session and interface state may also be stored by the browser. Clearing site data may sign you out or reset preferences. The final deployment review must document any additional non-essential cookies and obtain consent where required; this notice does not replace a consent mechanism.

Recipients and storage

Authorized staff and service providers may access information needed for their functions. Participating venues receive the details necessary to handle reservations. The service uses Supabase-backed authentication and storage and separate hosting and delivery infrastructure. The operator must confirm provider identities, processing countries and any required international-transfer safeguards in the final notice.

Retention and security

Access controls separate internal staff, business owners and guest sessions. Expiring a session is not the same as deleting a booking record. Records should be retained only for the purpose for which they are needed, including applicable accounting and dispute obligations. The final retention schedule, including logs and backups, is awaiting operator confirmation; no automatic deletion period is promised here.

Your rights

Depending on applicable law, you may request access, correction, deletion or restriction of your personal information, object to certain processing, withdraw consent, or request a portable copy. Identity may need to be verified before acting. You may also contact the competent data-protection authority, including the Swiss Federal Data Protection and Information Commissioner or, where applicable, your EU supervisory authority.

Until the dedicated privacy contact is confirmed, use your existing service contact for a request. Do not send card credentials or passwords in an enquiry.