Data protection notice pursuant to EU Regulation No. 679/2016
The purpose of this notice is to provide information on the methods, scope and purposes of the processing of personal data by Unterberger Gastronomie KG des Unterberger Manfred, Markus, Christoph & Co, in compliance with EU Regulation no. 679/2016 (hereinafter GDPR).
The Data Controller is Unterberger Gastronomie KG des Unterberger Manfred, Markus, Christoph & Co, with registered offices in Stegona/Brunico, in the person of their legal representative Manfred, Markus, Christoph Unterberger, contact details: Hotel Wochtla Baum, Anello Nord 1, I-39031 Stegona/Brunico, Val Pusteria in Alto Adige.
The Data Protection Officer, Manfred, Markus, Christoph Unterberger, may be contacted either by registered letter or e-mail at the following addresses: Hotel Wochtla Baum, Anello Nord 1, I-39031 Stegona/Brunico / firstname.lastname@example.org.
Data Subjects and type of personal data processed:
Unterberger Gastronomie KG des Unterberger Manfred, Markus, Christoph & Co processes the personal data of customers, suppliers and persons who voluntarily provide their data personally (whether by telephone, fax or e-mail) and/or by registering on our website, as well as persons whose data have been shared by third parties, for example in public registers and directories, etc. In the case of third parties, processing is limited to basic personal data.
Purpose of data processing:
Personal data are processed exclusively for the following purposes:
- fulfilment of legal obligations, including tax and accounting requirements
- execution of a contract
- activities related to the company’s business, like internal statistics, invoicing and accounting
- sending newsletters
- internal statistics
Lawful bases for data processing:
Data are processed in compliance with the applicable law and based on the following grounds, in accordance with Art. 6 and 7 of the GDPR:
– contract execution, i.e. providing the services required, fulfilling contractual requirements, answering enquiries
– compliance with legal obligations
– pursuing the Company’s legitimate interests
– consent provided by the Data Subject
Methods of data processing:
Data may be processed with or without the aid of electronic or automated means. Data processing activities may include the collection, storage, organisation, filing, consultation, processing in the strict sense of the term, and modification, selection, extraction, comparison, use, linking, blocking, transmission and deletion of data.
Data processing is carried out by the Data Controller as well as by Data Processors and third parties who may have been entrusted by the Data Controller with processing data for the purposes outlined in paragraph 3 or in cases where this is required by law. The Data Controller guarantees that any Processors and third parties that have been granted access to the personal data also process them in accordance with the GDPR.
If necessary for the activities and purposes outlined in paragraph 3, the data will be shared with domestic and/or foreign natural and/or legal persons. With the exception of these cases, personal data are not disseminated.
Data are processed using the following methods:
On registration, personal data are collected and processed to create a user account. During registration and login to the user’s account, their IP address and access times are tracked.
These data will be deleted as soon as the user’s account is deleted, except in cases where storage is required for tax or accounting purposes.
When the user contacts the Company via a contact form, e-mail or social media, their personal data are processed to reply to enquiries or provide the services they require. In these cases, the data collected may be stored in a customer relationship management system or similar systems.
Enquiries are deleted as soon as no longer necessary, unless the relevant data are required for compliance with legal obligations.
Google Tag Manager:
This website uses Google Tag Manager, a tag management interface that enables Google marketing services to be integrated into our online offer. The Tag Manager itself does not process any personal data; for further information please refer to the Google Tag Manager use policy: https://www.google.com/analytics/tag-manager/use-policy/
In this respect, Data Subjects have the right to withdraw their consent at any time by installing the opt-out browser add-on, available at: https://tools.google.com/dlpage/gaoptout?hl=en.
Google Adwords and Conversion measurement:
This website uses social plug-ins provided by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA. Recognisable by the Instagram logo, the plug-ins establish a direct connection between the user’s browser and the Instagram server located in the United States, so that Instagram receives information that the user has visited the relevant page. If the user is logged into the social network, Instagram can directly associate the data with the respective account. For further information, please refer to the Instagram data policy
Presence on social media:
Unterberger Gastronomie KG des Unterberger Manfred, Markus, Christoph & Co maintains an online presence within various social networks and platforms to communicate with customers, users and anyone interested and inform them about its services. In this context, the data protection policies of each respective social network apply.
Transfer of data for domain registration:
Domain registration requires that personal data be transmitted to the relevant national or international registrars. In this respect, we only transmit the minimum amount of data required. Users may view and consult the data provided to the registrars if they so wish. The registries prohibit the use of personal data for commercial or abusive purposes.
Transfer of data to certification purposes:
Personal data are transferred to the competent authority for the issuance of an SSL certificate. In this respect, we only transmit the minimum amount of data required. The Data Subject consents to his/her data being automatically transferred to the authority for the purposes of certification.
Business analyses and market research:
This website carries out analysis and profiling activities using personal data to identify current market trends and meet the wishes of users and clients. The data processed for these purposes include contact details, contract and invoicing data, payment data and usage data, as well as metadata of contractual partners, interested parties, customers and visitors to our website. Analysis of these data serves to increase user-friendliness, optimise our offer and increase efficiency; the data collected will not be disclosed to third parties.
When you visit this website, session cookies are generated that are only stored for the duration of your visit. These cookies are not shared across domains nor used to track user behaviour.
Provision of personal data and refusal:
The provision of personal data is optional but strictly necessary for the purposes listed in paragraph 3; failing to provide the data requested will result in the impossibility to perform the said activities.
Storage of personal data:
Unless expressly stated otherwise in this notice, processed data will be deleted as soon as they are no longer required for the purposes outlined in paragraph 3, provided that storage is not or no longer required by law. As a general rule, personal data will not be kept for longer than two years.
If deletion is not possible for legal reasons, data processing will be restricted, i.e. the data will be blocked and not used for any other purposes.
Rights of Data Subjects:
Pursuant to the GDPR, Data Subjects have the following rights:
- The right to access their personal data that the Data Controller stores about them, to demand the erasure or rectification of data and the restriction of processing as well as the right to object to processing;
- The right to data portability, i.e. to receive their own data from the Data Controller in a structured and comprehensible format, and to request the transmission of data to another Controller;
- The right to revoke their consent to the processing of data at any time provided that the lawful basis of the processing is the Data Subject’s consent, without prejudice to the legitimacy of data processing carried out on the basis of consent until the time of revocation;
- The right to file a complaint with the competent Supervisory Authority.
To exercise these rights, Data Subjects may send a request by certified e-mail to the following e-mail address email@example.com or by registered letter with acknowledgement of receipt to: Hotel Wochtla Baum, Anello Nord 1, I-39031 Stegona/Brunico, Val Pusteria in Alto Adige.
Data protection declaration on the processing of personal data
Information pursuant to Articles 12, 13 and 14 of EU Regulation 2016/679
Hotel Wochtla Buam
Anello Nord 1
I-39031 Stegona/Brunico (BZ)
T +39 0474 530371
Contact details of the data protection officer
Hotel Wochtla Buam
Anello Nord 1
I-39031 Stegona/Brunico (BZ)
T +39 0474 530371
Privacy information – Website
Dear website visitor,
We are pleased to inform you about how your personal data is processed when you visit our website. You can also see from this information letter which rights you can exercise as a data subject.
Your personal data will be processed in accordance with EU Regulation 2016/679 (the General Data Protection Regulation) and national data protection legislation.
The use of the website implies that you agree with this privacy information letter, otherwise we ask you not to continue using the website.
In addition, we would like to inform you that links on our website that lead to other websites have been carefully selected and checked by us. Since these websites can be updated without our knowledge and their contents can change continuously, we do not assume any liability or responsibility for them.
Purpose of processing personal data:
In order to ensure the functionality of the website, statistical purposes, technical data with potential personal reference, such as the IP address, the time of requests, the name of the domain and similar data are processed. In addition, the website operator has a legitimate interest (Art. 6f GDPR) in providing you with a visually appealing website and a pleasant user experience. With given consent (Art. 6a GDPR), user behavior can also be analyzed, and marketing purposes pursued.
The main purpose of the data processing is the provision of our website and its contents as well as the fulfilment of your requests.
Furthermore, personal data are processed in order to offer various services:
Each visitor can register on the website for our newsletter by double opt in procedure. This voluntary registration and this data processing can be revoked by the user at any time.
The website visitor can contact the company using the contact form. For this purpose, the personal data entered will be processed in order to respond to the request. An explicit consent to the processing of data in the contact form is available.
Transmission of personal data of special categories
We ask you not to transmit sensitive data (personal data of special categories – Art. 9 as well as Art. 10 GDPR) via the website, e.g. by using the contact form.
Legal basis of data processing:
The main legal basis for the processing is Art. 6b) GDPR (Fulfilment of precontractual/contractual measures) and Art. 6f) GDPR (functionality of the website) as well as the consent obtained, if given by you (Art. 6a GDPR).
There are four categories of cookies:
- Essential cookies – for the basic functionality of the website.
- Functional cookies – for ensuring the optimal performance of the website, this includes, for example, saving the language selection
- Performance cookies – for improving the user experience and processing information about the use of the website, e.g. measuring loading times
- Marketing cookies – to record the behavior and interests of the user for marketing purposes, e.g. to serve targeted advertisements.
Non-essential cookies are deactivated by default on our websites and are only activated if you have given us your consent to do so.
Most cookies used are “session cookies” which are deleted after closing the browser. Other cookies are stored for example to display the correct language the next time you visit the website.
For all cookies that are not subject to a legitimate interest of the website operator (Art. 6f) GDPR), you will be explicitly asked for your consent.
You can delete your cookies at any time by, depending on your browser, usually clicking on the 3 dots/stripes at the top right and then opening the settings, entering cookies in the search field, and selecting: delete cookies/delete browser data.
Provision of the data
The provision of your data is voluntary (with the exception of the processing of navigation data) and not required by law. However, failure to provide it may result in restricted use of the website and the services offered.
Data transfer to third parties
Your data may be passed on to third parties, if necessary, but only within the scope of our business relationship, e.g. for the fulfilment of your request or, if applicable, the execution of payments via third parties and for the fulfilment of legal obligations. In principle, your data will not be transferred to non-EU countries without your explicit consent. The same also applies to the use of profiling and automated decisions.
Hosting of the website
This website is hosted by an external service provider.
For this purpose, the external hoster receives personal data collected on the website. The legal basis is Art. 6b) GDPR – pre-contractual measures as well as Art. 6f) (Smooth guarantee of the tools on our website).
Our website uses services from the operator Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google may therefore process information and personal data. Please note that American authorities could theoretically gain access to this data due to American legislation (in particular the Cloud Act). Information on the legal framework for data transfer can be found at https://policies.google.com/privacy/frameworks.
With given consent: Google Tag Manager
Our website uses Google Tag Manager. The provider is Google Ireland Limited (“Google”), House, Barrow Street, Dublin 4, Ireland.
The Google Tag Manager makes it easier to integrate tracking codes. It also gives site operators the opportunity to make changes that are automatically applied to the pages without having to adapt the source code.
The Google Tag Manager can communicate with the Tag Manager servers, in the course of which, when a tag is triggered, personal data may be processed (e.g. the IP address).
You will be explicitly asked for your consent before the Google Tag Manager is activated. The legal basis is Art. 6a) GDPR.
You can find detailed information at: https://policies.google.com/privacy
With given consent: Web analysis with Google Analytics
Our website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, U S A. Google Analytics.
The information obtained through the cookies about your use of the website (including your IP address) can be transmitted to Google on servers in the U S A.
We use Google Analytics as an analysis tool to monitor the performance of our website, analyse customer behavior and take appropriate action.
You will be explicitly asked for your consent before Google Analytics is activated. The legal basis is Art. 6a) GDPR.
You can also prevent the described collection and processing of data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
This website uses Google Maps API, a mapping service provided by Google Inc (“Google”), to display an interactive map and to create driving directions. Google Maps is operated by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, U S A .
By using Google Maps, we cannot exclude that information about your use of this website (including your IP address) is transmitted to a Google server in the U S A and stored there. Google may transfer the information obtained through Maps to third parties where required to do so by law, or where such third parties process the information on Google’s behalf.
We use social plugins from YouTube, a site operated by Google. The operator of this site is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, U S A. When you visit a page equipped with a YouTube plugin, a connection to the YouTube servers is established. This informs the YouTube server that you have visited our site and user statistics can be compiled, e.g. by means of cookies.
If you are logged into your YouTube account, YouTube can assign your visit to our website to your user account. You can prevent this by logging out of your YouTube account.
With given consent: Facebook Pixel
Our website uses the so-called “Facebook Pixel” of the social network Facebook, which is operated by Facebook Inc. or, if you are a resident of the EU, by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
A direct connection to the Facebook servers is established via Facebook Pixel when you visit the website. This transmits to the Facebook server that you have visited this website and Facebook may be able to assign this information to your personal Facebook user account. We can thus track the effect of advertising campaigns.
It cannot be ruled out that information is transmitted to servers in non-EU countries.
If you give your consent to the use of the Facebook Pixel, it will be integrated by Facebook and a cookie will be stored on your device as described above. When you log in to Facebook, the offers you have visited are recorded in your profile. The data is anonymized for us, but Facebook can process this data.
You will be explicitly asked for your consent before Facebook Pixel is activated. The legal basis is Art. 6a) GDPR.
This site uses SSL encryption for transmission security, e.g. for enquiries in contact forms. Active SSL encryption is used to encrypt the transmission of data that you send to us.
This website is not intended for use by minors. We therefore do not collect and store data of underage visitors (except involuntarily)
The duration of data retention
The duration of data retention is measured according to the statutory retention obligations and legal obligations applicable to us.
Information on the rights of the data subjects
You can exercise your rights free of charge at any time: right to access (Art. 15 GDPR), right to rectification (Art. 16 GDPR), right to erasure (Art. 17 GDPR), right to restriction of processing (Art. 18 GDPR), right to data portability (Art. 20 GDPR), right to object (Art. 21 GDPR).
Please contact the above data controller.
You also have the right to lodge a complaint with the Italian supervisory authority for data protection “Garante per la protezioni dei dati personali”.
This privacy Information may be updated at any time.