Privacy

Data protection notice pursuant to EU Regulation No. 679/2016

The purpose of this notice is to provide information on the methods, scope and purposes of the processing of personal data by Traube des Gander Ulrich, in compliance with EU Regulation no. 679/2016 (hereinafter GDPR).

Data controller

The Data Controller is Traube des Gander Ulrich, with registered offices in Vipiteno, in the person of their legal representative Gander Ulrich, contact details: Traube des Gander Ulrich, Città Vecchia 12, 39049 Vipiteno in South Tyrol – ITALY.
The Data Protection Officer, Gander Ulrich, may be contacted either by registered letter or e-mail at the following addresses: Traube des Gander Ulrich, Città Vecchia 12, 39049 Vipiteno in South Tyrol – ITALY or [email protected].

Data Subjects and type of personal data processed:

Gander Ulrich processes the personal data of customers, suppliers and persons who voluntarily provide their data personally (whether by telephone, fax or e-mail) and/or via the forms on our website, as well as persons whose data have been shared by third parties, for example in public registers and directories, etc. In the case of third parties, processing is limited to basic personal data.

Purpose of data processing:

Personal data are processed exclusively for the following purposes:
1. fulfilment of legal obligations, including tax and accounting requirements
2. execution of a contract
3. activities related to the company’s business, like internal statistics, invoicing and accounting
4. quotations
5. sending newsletters (only with your consent)
6. internal statistics

Lawful bases for data processing:

Data are processed in compliance with the applicable law and based on the following grounds, in accordance with Art. 6 and 7 of the GDPR:

• contract execution, i.e. providing the services required, fulfilling contractual requirements, answering enquiries
• compliance with legal obligations
• pursuing the Company’s legitimate interests
• consent provided by the Data Subject

Methods of data processing:

Data may be processed with or without the aid of electronic or automated means. Data processing activities may include the collection, storage, organisation, filing, consultation, processing in the strict sense of the term, and modification, selection, extraction, comparison, use, linking, blocking, transmission and deletion of data.
Data processing is carried out by the Data Controller as well as by Data Processors and third parties who may have been entrusted by the Data Controller with processing data for the purposes outlined in paragraph 3 or in cases where this is required by law. The Data Controller guarantees that any Processors and third parties that have been granted access to the personal data also process them in accordance with the GDPR.
If necessary for the activities and purposes outlined in paragraph 3, the data will be shared with domestic and/or foreign natural and/or legal persons. With the exception of these cases, personal data are not disseminated.

Data are processed using the following methods:

Contact:
When the user contacts the Company via a contact form, e-mail or social media, their personal data are processed to reply to enquiries or provide the services they require. In these cases, the data collected may be stored in a customer relationship management system or similar systems.
Enquiries are deleted as soon as no longer necessary, unless the relevant data are required for compliance with legal obligations.

Google Tag Manager:
This website uses Google Tag Manager, a tag management interface that enables Google marketing services to be integrated into our online offer. The Tag Manager itself does not process any personal data; for further information please refer to the Google Tag Manager use policy: https://www.google.com/analytics/tag-manager/use-policy/

Google Analytics 4:
With your consent in the “Statistics” category, we use Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to understand how our website is used (e.g. pages viewed, time spent, where visits come from, completed enquiries and bookings). Cookies are set and usage and device information is transmitted to Google; Google Analytics 4 does not store IP addresses. Without your consent, Google Analytics is not triggered (Google Consent Mode). The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via “Cookie settings”. The data is deleted after 14 months. A transfer to the USA is possible; Google LLC is certified under the EU-US Data Privacy Framework. Further information: https://policies.google.com/privacy

Google Ads and conversion tracking:
This website may use Google Ads by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to place adverts in the Google advertising network and to measure their performance. A cookie is set on your device recording which advert led to a visit. Processing takes place solely on the basis of your consent in the “Marketing” category and can be withdrawn at any time via “Cookie settings”. A transfer to the USA is possible; Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission adopted an adequacy decision in July 2023. Further information: https://policies.google.com/technologies/ads

Google reCAPTCHA:
To protect the enquiry forms against automated submissions we use reCAPTCHA v3 by Google Ireland Limited. Your IP address and interaction data (mouse and keyboard behaviour, time spent) are transmitted to Google and evaluated there in order to distinguish humans from bots. The legal basis is our legitimate interest in preventing misuse (Art. 6(1)(f) GDPR). Further information: https://policies.google.com/privacy

Booking engine and enquiry form (Booking Südtirol):
The booking engine and the enquiry form of Booking Südtirol GmbH are embedded on the “Book now” and “Request” pages. A connection to their servers is established when these pages load. The data you enter (name, contact details, period of stay and, for bookings, payment details) is processed to answer your enquiry or to handle your booking. The legal basis is the performance of pre-contractual measures and of the contract (Art. 6(1)(b) GDPR).

Newsletter:
In the enquiry form you can choose to receive our newsletter by ticking a box. Only then do we use your name and e-mail address to send you offers and news about our house. The data is processed in the system of Booking Südtirol GmbH, acting as our data processor. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time via the unsubscribe link in every newsletter or by e-mail to [email protected]. Your data is stored until you withdraw your consent.

Review widget (Booking.com):
A review widget loaded via badge.hotelstatic.com is embedded on this website. A connection to the provider’s server is established and your IP address is transmitted.

Google Maps:
We use Google Maps by Google Ireland Limited to display directions. When the map is opened, your IP address and possibly location data are transmitted to Google. Further information: https://policies.google.com/privacy

Cloudflare:
This website is delivered via the content delivery network and security services of Cloudflare Inc. All traffic passes through their servers; connection data such as IP address, requested page and time are processed in order to deliver the site and protect it against attacks. The legal basis is our legitimate interest in secure and performant operation (Art. 6(1)(f) GDPR).

Presence on social media:
Traube des Gander Ulrich maintains an online presence within various social networks and platforms to communicate with customers, users and anyone interested and inform them about its services. In this context, the data protection policies of each respective social network apply.

Cookies and consent:
This website uses cookies and comparable technologies. Technically necessary cookies are set without consent because the site would not work without them. All other cookies – in particular for statistics and marketing – are only set after your explicit consent via the consent banner. The maximum storage period is 365 days. You can withdraw or change your consent at any time via the “Cookie settings” link in the footer. A complete list of the cookies used can be found in the cookie policy.

Provision of personal data and refusal:
The provision of personal data is optional but strictly necessary for the purposes listed in paragraph 3; failing to provide the data requested will result in the impossibility to perform the said activities.

Storage of personal data:
Unless expressly stated otherwise in this notice, processed data will be deleted as soon as they are no longer required for the purposes outlined in paragraph 3, provided that storage is not or no longer required by law. As a general rule, personal data will not be kept for longer than two years.
If deletion is not possible for legal reasons, data processing will be restricted, i.e. the data will be blocked and not used for any other purposes.

Rights of Data Subjects

Pursuant to the GDPR, Data Subjects have the following rights:

• The right to access their personal data that the Data Controller stores about them, to demand the erasure or rectification of data and the restriction of processing as well as the right to object to processing;
• The right to data portability, i.e. to receive their own data from the Data Controller in a structured and comprehensible format, and to request the transmission of data to another Controller;
• The right to revoke their consent to the processing of data at any time provided that the lawful basis of the processing is the Data Subject’s consent, without prejudice to the legitimacy of data processing carried out on the basis of consent until the time of revocation;
• The right to file a complaint with the competent Supervisory Authority.

To exercise these rights, Data Subjects may send a request by e-mail to the following e-mail address [email protected] or by registered letter with acknowledgement of receipt to: Traube des Gander Ulrich, Città Vecchia 12, 39049 Vipiteno in South Tyrol – ITALY.