DATA PROTECTION DECLARATION ON THE PROCESSING OF PERSONAL DATA
Information pursuant to Articles 12, 13 and 14 of EU Regulation 2016/679

Data controller

Hauserhof
Sauders 3
39040 Villanders
South Tyrol | Italy

Privacy information – Website

Dear website visitor,
we are pleased to inform you about how your personal data is processed when you visit our website. You can also see from this information letter which rights you can exercise as a data subject.
Your personal data will be processed in accordance with EU Regulation 2016/679 (the General Data Protection Regulation) and national data protection legislation.
The use of the website implies that you agree with this privacy information letter, otherwise we ask you not to continue using the website.
In addition, we would like to inform you that links on our website that lead to other websites have been carefully selected and checked by us. Since these websites can be updated without our knowledge and their contents can change continuously, we do not assume any liability or responsibility for them.

Purpose of processing personal data:
In order to ensure the functionality of the website and for statistical purposes, technical data with potential personal reference, such as the IP address, the time of requests, the name of the domain and similar data are processed. In addition, the website operator has a legitimate interest (Art. 6f GDPR) in providing you with a visually appealing website and a pleasant user experience. With given consent (Art. 6a GDPR), user behavior can also be analyzed and marketing purposes pursued.
The main purpose of the data processing is the provision of our website and its contents as well as the fulfilment of your requests.
Furthermore, personal data are processed in order to offer you various services:

Contact form
The website visitor can contact the company using the contact form. For this purpose, the personal data entered will be processed in order to respond to the request. An explicit consent to the processing of data in the contact form is available.

Transmission of personal data of special categories
We ask you not to transmit sensitive data (personal data of special categories – Art. 9 as well as Art. 10 GDPR) via the website, e.g. by using the contact form.

Legal basis of data processing
The main legal basis for the processing is Art. 6b) GDPR (fulfilment of pre-contractual/contractual measures) and Art. 6f) GDPR (functionality of the website) as well as the consent obtained, if given by you (Art. 6a GDPR).

Cookies
Our website uses cookies, whereby personal data can be processed.

There are four categories of cookies:

Essential cookies – for the basic functionality of the website
Functional cookies – for ensuring the optimal performance of the website, this includes, for example, saving the language selection
Performance cookies – for improving the user experience and processing information about the use of the website, e.g. measuring loading times
Marketing cookies – to record the behavior and interests of the user for marketing purposes, e.g. to serve targeted advertisements
Non-essential cookies are deactivated by default on our websites and are only activated if you have given us your consent to do so.

Most cookies used are “session cookies” which are deleted after closing the browser. Other cookies are stored for longer, e.g. to display the correct language the next time you visit the website.
For all cookies that are not subject to a legitimate interest of the website operator (Art. 6f) GDPR), you will be explicitly asked for your consent.

You can delete your cookies at any time by, depending on your browser, usually clicking on the 3 dots/stripes at the top right and then opening the settings, entering cookies in the search field, and selecting: delete cookies/delete browser data.

Provision of the data
The provision of your data is voluntary (with the exception of the processing of navigation data) and not required by law. However, failure to provide it may result in restricted use of the website and the services offered.

Data transfer to third parties
Your data may be passed on to third parties if necessary, but only within the scope of our business relationship, e.g. for the fulfilment of your request or, if applicable, the execution of payments via third parties and for the fulfilment of legal obligations. In principle, your data will not be transferred to non-EU countries without your explicit consent. The same also applies to the use of profiling and automated decisions.

Hosting of the website
This website is hosted by an external service provider. For this purpose, the external hoster receives personal data collected on the website. The legal basis is Art. 6b) GDPR (pre-contractual/contractual measures) as well as Art. 6f) (smooth guarantee of the tools on our website).

Google services
Our website uses services from the operator Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google may therefore process information and personal data. Please note that American authorities could theoretically gain access to this data due to American legislation (in particular the Cloud Act). Information on the legal framework for data transfer can be found at https://policies.google.com/privacy/frameworks.

With given consent: Google Tag Manager
Our website uses Google Tag Manager. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
The Google Tag Manager makes it easier to integrate tracking codes. It also gives site operators the opportunity to make changes that are automatically applied to the pages without having to adapt the source code.
The Google Tag Manager can communicate with the Tag Manager servers, in the course of which, when a tag is triggered, personal data may be processed (e.g. the IP address).
You will be explicitly asked for your consent before the Google Tag Manager is activated. The legal basis is Art. 6a) GDPR.
You can find detailed information at: https://policies.google.com/privacy

With given consent: Web analysis with Google Analytics
Our website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
The information obtained through the cookies about your use of the website (including your IP address) can be transmitted to Google on servers in the USA. The full information letter can be found in Google’s privacy policy:
https://support.google.com/analytics/answer/6004245?hl=en
We use Google Analytics as an analysis tool to monitor the performance of our website, analyse customer behavior and take appropriate action.
You will be explicitly asked for your consent before Google Analytics is activated. The legal basis is Art. 6a) GDPR.
You can also prevent the described collection and processing of data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout

With given consent: Facebook Pixel
Our website uses the so-called “Facebook Pixel” of the social network Facebook, which is operated by Facebook Inc. or, if you are a resident of the EU, by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
A direct connection to the Facebook servers is established via Facebook Pixel when you visit the website. This transmits to the Facebook server that you have visited this website and Facebook may be able to assign this information to your personal Facebook user account. We can thus track the effect of advertising campaigns.
It cannot be ruled out that information is transmitted to servers in non-EU countries.
If you give your consent to the use of the Facebook Pixel, it will be integrated by Facebook and a cookie will be stored on your device as described above. When you log in to Facebook, the offers you have visited are recorded in your profile. The data is anonymized for us, but Facebook can process this data.
For more information on the collection and use of data by Facebook, as well as your rights in this regard and options for protecting your privacy, please refer to Facebook’s privacy policy at: https://www.facebook.com/business/m/privacy-and-data
You will be explicitly asked for your consent before Facebook Pixel is activated. The legal basis is Art. 6a) GDPR.

SSL Encryption
This site uses SSL encryption for transmission security, e.g. for enquiries in contact forms. Active SSL encryption is used to encrypt the transmission of data that you send to us.

Underage visitors
This website is not intended for use by minors. We therefore do not collect and store data of underage visitors (except involuntarily).

Duration of data retention
The duration of data retention is measured according to the statutory retention obligations and legal obligations applicable to us.

Information on the rights of the data subjects
The data subject has the right to obtain from the controller confirmation as to whether or not personal data concerning them are being processed; where that is the case, they have the right of access to the personal data and the information listed in detail in Art. 15 GDPR.
The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning them and, where applicable, the completion of incomplete personal data (Art. 16 GDPR).
The data subject has the right to obtain from the controller the erasure of personal data concerning them without undue delay where one of the grounds listed in Art. 17 GDPR applies, for example where the data is no longer necessary for the purposes for which it was collected (right to erasure).
The data subject has the right to obtain from the controller the restriction of processing where one of the conditions listed in Art. 18 GDPR applies, for example where the data subject has objected to the processing.
The data subject has the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format, and has the right to transmit those data to another controller without hindrance under certain circumstances, for example where the processing is based on consent and carried out by automated means (right to data portability, Art. 20 GDPR).
The data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims (Art. 21 GDPR).
Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement, if the data subject considers that the processing of personal data relating to them infringes the GDPR (Art. 77 GDPR). The competent supervisory authority in Italy is: Garante per la protezione dei dati personali.

This privacy information may be updated at any time.

South Tyrol Guest Pass

Purpose
The personal data transmitted will be forwarded to the central coordination office of the Guest Pass in order to enable the creation and use of the Guest Pass and to provide the associated services.

Recipients
In connection with the issuance of the Guest Pass, your data will be transmitted to the Mobility Consortium with VAT No. 02735170215, which, as the Guest Pass carrier and central coordination office, acts as an independent data controller for the processing of the transmitted data. For further information on the processing to which the data is subject, you can send an email to privacy@moko.bz.it.

Legal basis
The legal basis for the processing is Art. 6(1)(b) GDPR.

Terms and Conditions
Upon completion of the accommodation agreement, the guest will be issued the South Tyrol Alto Adige Guest Pass (hereinafter “Guest Pass”), which, pursuant to South Tyrolean Provincial Government Resolution No. 732/2022, is valid for the entire duration of their stay, from 00:00 on the day of arrival until 24:00 on the day of departure.
The Guest Pass includes the use of all public transport within the SüdtirolMobil network as well as additional services, which may vary by tourism organisation. Detailed information can be found at: suedtirol-guestpass.info.
The sole South Tyrol-wide carrier of the Guest Pass is the Mobility Consortium, which was appointed as the central coordination office pursuant to the above-mentioned Provincial Government Resolution by the Provincial Association of Tourism Organisations of South Tyrol (LTS) on 16 November 2022. The details of the additional services associated with the Guest Pass and the terms of use of the Guest Pass are communicated by the third party entrusted with the issuance and management of the Guest Pass. Detailed information can be found at: suedtirol-guestpass.info.