Information pursuant to Articles 12, 13 and 14 of EU Regulation 2016/679

Data controller
Oberlinderhof
Florian Innerhofer
Linder Antratt 9
39030 Steinhaus Ahrntal
South Tyrol
E-Mail: oberlinderhof@rolmail.it
Internet: www.oberlinderhof.it

Contact details of the data protection officer
Oberlinderhof
Florian Innerhofer
Linder Antratt 9
39030 Steinhaus Ahrntal
South Tyrol
E-Mail: oberlinderhof@rolmail.it
Internet: www.oberlinderhof.it

Privacy information website

Dear website visitor,

We are pleased to inform you about how your personal data is processed when you visit our website. This information letter also tells you what rights you can exercise as a data subject.

Your personal data will be processed in accordance with EU Regulation 2016/679 (General Data Protection Regulation) and national data protection legislation.

The use of the website presupposes that you agree with this data protection information letter, otherwise we ask you not to continue using the website.

We would also like to inform you that links on our website that lead to other websites have been carefully selected and checked by us. As these websites can be updated without our knowledge and their content can change constantly, we accept no liability or responsibility for this.

Purpose of processing personal data:

In order to ensure the functionality of the website and for statistical purposes, technical data with a potential personal reference, such as the IP address, the time of requests, the name of the domain and similar data are processed. In addition, the website operator has a legitimate interest (Art. 6f GDPR) in offering you a visually appealing website and a pleasant user experience. If consent has been given (Art. 6a GDPR), user behaviour can also be analysed and marketing purposes pursued.

The main purpose of data processing is to provide our website and its content and to fulfil your enquiries.

Furthermore, personal data is processed in order to offer you various services:

Contact form
The website visitor can contact the company using the contact form. The personal data entered will be processed in order to answer the enquiry. Express consent to the processing of the data in the contact form is given.

Guest Pass
Upon completion of the accommodation contract, the Südtirol Alto Adige Guest Pass (consequently Guest Pass) will be issued to the guest, which according to the decision of the South Tyrolean regional government No. 732/2022, is valid for the entire duration of their stay as well as from 0:00 on the day of arrival unto 24:00 on the day of departure. • The Guest Pass includes the use of all public transport within the “südtirolmobil” network area as well as additional services, which vary depending on the tourism organization. Detailed information can be found at: suedtirol-guestpass.info• The sole entity carrying the Guest Pass in South Tyrol is the Mobilitätskonsortium, appointed as the unified coordination point in accordance with the above decision of the South Tyrolean regional government by the Provincial Association of Tourism Organizations of South Tyrol on November 16, 2022.The details of the additional services associated with the Guest Pass and the conditions of use of the Guest Pass are communicated by the third party responsible for issuing and managing the Guest Pass. Detailed information is available at: suedtirol-guestpass.info
Purpose
The personal data provided will be transmitted to the single coordinating body of the Guest Pass in order to enable the creation and use of the Guest Pass and to provide the associated services.
Recipient
In connection with the issue of the Guest Pass, your data will be transmitted to the Mobilitätskonsortium, VAT Nr. 02735170215, which acts as the cardholder and unified coordinating body and assumes the role of autonomous data controller in processing the transferred data. For further information regarding the processing to which the data will be subjected, you can send an email to privacy@moko.bz.it.
Legal basis
The legal basis for processing is Art. 6 (1) (b) of the GDPR.

Transmission of special categories of personal data
Please ensure that no sensitive data (special categories of personal data - Art. 9 and Art. 10 GDPR) are transmitted via the website, e.g. via the contact form.

Legal basis for data processing

The main legal bases for processing are Art. 6b) GDPR (fulfilment of pre-contractual/contractual measures) and Art. 6f) GDPR (functionality of the website) as well as the consent obtained from you, if given (Art. 6a GDPR).

Cookies
Our website uses cookies, whereby personal data can be processed.

There are four categories of cookies:

Strictly necessary cookies - for the basic functionality of the website
Functional cookies - to ensure the optimal performance of the website, including, for example, saving the language selection
Performance cookies - to improve the user experience and to process information on the use of the website, e.g. measuring loading times
Marketing cookies - for recording the behaviour and interests of the user for marketing purposes, e.g. for the placement of tailored advertisements

Non-essential cookies are deactivated on our websites by default and are only activated if you have given us your consent to do so.

The majority of cookies used are ‘session cookies’, which are deleted after the browser is closed. Other cookies are stored for longer, e.g. to display the correct language the next time you visit the website.

For all cookies that are not subject to a legitimate interest of the website operator (Art. 6f) GDPR), you will be explicitly asked for your consent.

Depending on your browser, you can delete your cookies at any time by clicking on the 3 dots/stripes at the top right and opening the settings, entering cookies in the search field and selecting Delete cookies or browser data.

Provision of data

The provision of your data is voluntary (with the exception of the processing of navigation data) and is not required by law. However, failure to provide data may result in limited use of the website and the services offered.

Data transfer to third parties

Your data may be passed on to third parties if necessary, but only within the framework of our business relationship, e.g. to fulfil your request or, if applicable, to make payments via third parties and to fulfil legal obligations. In principle, your data will not be transferred to other EU countries without your explicit consent. The same applies to the use of profiling and automated decision-making.

Hosting of the website

This website is hosted by an external service provider. For this purpose, the external host receives personal data collected on the website. The legal basis is Art. 6b) GDPR (pre-contractual/contractual measures) and Art. 6f) (smooth operation of the tools on our website).

Google services

Our website uses services from the operator Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland.

Google may therefore process information and personal data. Please note that American authorities could theoretically gain access to this data due to American legislation (in particular the Cloud Act). Information on the legal framework for data transfer can be found at https://policies.google.com/privacy/frameworks.

If consent has been given: Google Tag Manager

Our website uses services from the operator Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager makes it easier to integrate tracking codes. It also allows site operators to make changes that are automatically applied to the pages without having to adapt the source code.

The Google Tag Manager can communicate with the Tag Manager servers, in the course of which personal data can be processed when a tag is triggered (e.g. the IP address).

You will be expressly asked for your consent before the Google Tag Manager is activated. The legal basis is Art. 6a) GDPR.

You can find detailed information at: https://policies.google.com/privacy

If consent has been given: Web analysis with Google Analytics

Our website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, U S A. Google Analytics.

The information collected by the cookies about your use of the website (including your IP address) may be transmitted to and stored by Google on servers in the United States. You can find the full information in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de

We use Google Analytics as an analysis tool to monitor the performance of our website, analyse customer behaviour and initiate appropriate measures.

You will be expressly asked for your consent before Google Analytics is activated. The legal basis is Art. 6a) GDPR.

You can also prevent the described collection and processing of data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout

Google-Maps

This website uses Google Maps API, a map service of Google Inc (‘Google’), to display an interactive map and to create directions. Google Maps is operated by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, U S A.

By using Google Maps, we cannot exclude the possibility that information about your use of this website (including your IP address) will be transmitted to a Google server in the USA and stored there. Google may transfer the information obtained through Maps to third parties where required to do so by law, or where such third parties process the information on Google's behalf.

In principle, it would be technically possible for Google to identify at least individual users on the basis of the data received. It is possible that personal data and personality profiles of users of the website could be processed by Google for other purposes over which we have and can have no influence. You can deactivate the Google Maps service at any time and thus prevent the transfer of data to Google by deactivating JavaScript in your browser. We would like to point out that in this case you will not be able to use the map display on our website.

You can find the terms of use for Google Maps at: https://www.google.com/intl/de_de/help/terms_maps.html

The privacy policy of Google you can find at: https://policies.google.com/privacy

YouTube

We use social plugins from the YouTube site operated by Google. The operator of this site is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, U S A. When you visit a page equipped with a YouTube plugin, a connection to the YouTube servers is established. The YouTube server is informed that you have visited our site and user statistics can be compiled using cookies, for example.

If you are logged into your YouTube account, YouTube can associate your visit to our website with your user account. You can prevent this by logging out of your YouTube account.

Further information on how YouTube processes user data can be found in the privacy policy at https://www.google.de/intl/de/policies/privacy

If consent has been given: Facebook Pixel

Our website uses the so-called ‘Facebook Pixel’ of the social network Facebook, which is operated by Facebook Inc. or, if you are based in the EU, by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

A direct connection to the Facebook servers is established via Facebook pixels when you visit the website. It is transmitted to the Facebook server that you have visited this website and Facebook may be able to assign this information to your personal Facebook user account. This allows us to track the effectiveness of advertising campaigns.

It cannot be ruled out that information will be transmitted to servers in other EU countries.

If you consent to the use of the Facebook pixel, it will be integrated by Facebook and a cookie will be stored on your device as described above. When you log in to Facebook, the offers you have visited are stored in your profile. The data is anonymised for us, but Facebook can process this data.

You can find more information on the collection and use of data by Facebook as well as your rights in this regard and options for protecting your privacy in Facebook's privacy policy at: https://www.facebook.com/business/m/privacy-and-data

You will be expressly asked for your consent before Facebook Pixel is activated. The legal basis is Art. 6a) GDPR.

SSL encryption

This site uses SSL encryption for transmission security, e.g. for enquiries in contact forms. Active SSL encryption is used to encrypt the transmission of data that you send to us.

Underage visitors

This website is not intended for use by minors. We therefore do not collect and store any data of underage visitors (except involuntarily).

Duration of data storage

Your data will be stored in accordance with the statutory retention obligations and legal obligations applicable to us.

Information on the rights of data subjects

The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the information specified in Art. 15 GDPR.

The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her and, where applicable, the completion of incomplete personal data (Art. 16 GDPR).

The data subject has the right to obtain from the controller the erasure of personal data concerning him or her without undue delay where one of the grounds described in Art. 17 GDPR applies, for example if the processing of the data is no longer necessary for the purposes for which it was originally collected (right to erasure).

The data subject has the right to obtain from the controller restriction of processing where one of the conditions listed in Art. 18 GDPR applies, for example if the data subject has objected to processing.

The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where certain conditions apply, for example where the processing is based on consent and the processing is carried out by automated means (right to data portability Art. 20 GDPR).

The data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her. The controller will then no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims (Art. 21 GDPR).

Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes the GDPR (Art. 77 GDPR). In Italy, the competent supervisory authority is Garante per la protezione dei dati personalii

This data protection information letter can be updated at any time.