Privacy & Data Protection Policy

1. Introduction & Overview

Showtrailcrossrods Hospitality Ltd. ("Company", "Cloudline Hotel", "we", "us", or "our") is deeply dedicated to maintaining the absolute confidentiality, integrity, and security of your personal data. This comprehensive Privacy Policy governs all interactions across our web property (Showtrailcrossrods.com), flight desk bookings, high-altitude hotel reservations, concierge requests, and wellness services.

We process all personal data strictly in compliance with the Swiss Federal Data Protection Act (FADP), the European Union General Data Protection Regulation (GDPR - Regulation EU 2016/679), and relevant international data privacy statutory requirements including the California Consumer Privacy Act (CCPA).

2. Data We Collect Directly and Indirectly

In operating an ultra-luxury, high-altitude sanctuary, specific identity and operational details are necessary to ensure safety and impeccable service:

• Identity & Contact Information: Full name, passport/government ID details (for Swiss hotel registration and civil aviation clearance), residential address, email address, telephone contact numbers.
• Flight & Helipad Manifest Details: Helicopter weights, arrival coordinates, passenger manifests, and travel schedule logistics.
• Health, Wellness & Altitude Customizations: Voluntary disclosure of dietary allergens, oxygen enrichment preferences, mobility requirements, and hydrotherapy treatment waivers.
• Financial & Transaction Data: Encrypted payment card information processed via PCI-DSS Level 1 compliant tokenized gateway processors, billing addresses, invoice history.
• Technical & Browsing Data: IP addresses, browser fingerprinting, atmospheric view simulator choices, device operating systems, and page interaction timestamps.

3. Legal Bases for Data Processing

We process your personal information exclusively under the following statutory grounds:

• Performance of Contract: Facilitating your room reservations, helicopter transfers, dining degustations, and spa appointments.
• Legal & Regulatory Compliance: Fulfilling Swiss Canton of Valais guest registration mandates, civil aviation requirements, and tax audit laws.
• Legitimate Interests: Protecting the physical security of our mountain infrastructure, cybersecurity fraud prevention, and performance analytics.
• Explicit Consent: Sending curated high-altitude event invitations or storing voluntary physiological spa preferences.

4. Third-Party Data Disclosures & Processors

Showtrailcrossrods Hospitality Ltd. will never sell, rent, or trade your personal records. We only disclose data to trusted service providers who adhere to strict contractual data processing agreements:

• Certified Swiss aviation charter carriers operating scheduled and private helicopter transfers to Helipad 01.
• Secure cloud hosting providers with sovereign Swiss or EEA data center guarantees.
• Payment processors operating under strict PCI-DSS accreditation.
• Governmental and law enforcement bodies strictly when required by formal Swiss judicial process.

5. International Data Transfers & Security Measures

All sensitive information collected via Showtrailcrossrods.com is encrypted in transit via Transport Layer Security (TLS 1.3) and encrypted at rest utilizing AES-256 standards. If any secondary data transfer occurs outside Switzerland or the European Economic Area (EEA), we implement standard contractual clauses (SCCs) approved by the European Commission.

6. Your Statutory Rights

Under GDPR and applicable international frameworks, you maintain the following rights:

• Right of Access: Request a complete copy of all personal records we hold regarding you.
• Right to Rectification: Require prompt correction of inaccurate or incomplete biographical details.
• Right to Erasure ("Right to be Forgotten"): Request immediate destruction of records, subject to statutory tax or aviation record-keeping mandates.
• Right to Restriction & Objection: Object to processing carried out under our legitimate business interests.
• Right to Data Portability: Receive your data in a structured, machine-readable JSON/CSV format.

7. Data Retention Periods

Guest reservation records are retained for ten (10) years in accordance with Article 957 of the Swiss Code of Obligations for accounting and corporate compliance. Non-essential communication and marketing preferences are purged within thirty (30) days of consent withdrawal.

8. Data Protection Officer (DPO) Contact Information

To exercise any statutory rights, submit privacy inquiries, or lodge a formal data concern, please reach our Data Protection Officer directly: