Small text files consisting of letters and numbers that are placed on your computer when you visit certain websites. Cookies make it possible to recognize the user’s computer when a website is called up again. A cookie itself does not contain or collect any personally identifiable information. Cookies can be used for behavioral advertising to create profiles about users’ browsing behavior so that more relevant advertising can be delivered.
More information about cookies on Wikipedia
Information about cookies on the site of the “Garante per la protezione dei dati personali”.
This website uses, on the one hand, technical cookies, which are used to navigate, function and improve the performance of the website and, on the other hand, cookies from third parties. These third party cookies can be both technical cookies and profiling cookies, which are used for statistics and data collection in order to send users advertising messages that interest them (cookies for marketing and retargeting purposes).
Users can disable cookies.
Here’s how you can disable or reject cookies. Consult these links.
How to disable cookies in the most popular browsers:
Mozilla Firefox Windows Internet Explorer Google Chrome Opera Apple Safari
Third party information pages about their cookies:
Google Google Analytics Youtube Google Maps Facebook Google Plus Twitter Microsoft Weather Autonomous Province of Bolzano Trekking South Tyrol HolidayCheck Tripadvisor Peer Booking South Tyrol
For more information on how to disable and/or delete third-party cookies, please visit the European Interactive Digital Advertising Alliance website: www.youronlinechoices.eu.
This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
In case of activation of IP anonymization on this website, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On this website, the anonymous IP address is active. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
In accordance with the provisions of the Regulation, the processing carried out by Hotel Traminerhof is based on the principles of lawfulness, fair processing, transparency, purpose limitation, storage limitation, data minimization, accuracy, integrity and confidentiality.
- The data controller
- The personal data that are the object of processing
a. Navigation data
b. Special categories of personal data
c. Data voluntarily provided by the data subject
- Purpose of the processing
- Legal basis and compulsory or optional nature of the processing
- Recipients of personal data
- Disclosure of personal data
- Storage of personal data
- Rights of the data subjects
- the person in charge
The controller of the processing carried out on the website is Pomella Margarethe & CO OHG as determined above. For information on the processing of personal data by the controller, including the list of processors entrusted to process the data, please write to the following address: email@example.com
. The personal data that are the subject of processing
We inform you that, as a result of your navigation on the Website , the Controller will process personal data that may consist of an identifier such as your name, an identification number, an online identifier, a postal address, an email address, a telephone number (fixed and/or mobile) or one or more elements of your physical, physiological, psychological, economic, cultural or social identity in order to identify or make identifiable the data subject (hereinafter referred to as “personal data”).
2. The personal data processed through the Website are the following:
a. Navigation data
The computer systems and software procedures used to operate the Website collect, during their normal operation, some personal data whose transmission is implicit in the communication protocols of the Internet. This information is not collected to be associated with identified data subjects, but by its nature, through processing and association with third party data, may allow users to be identified. This category of data includes IP addresses or domain names of computers used by users connecting to the website, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to send the request to the server, the size of the file received in response, the numerical code indicating the status of the server’s response (successful, error, etc.) and other parameters related to the operating system and computer environment. These data are used exclusively to obtain anonymous statistical information on the use of the website and to verify its correct operation, detect anomalies and/or abuse and are deleted immediately after processing. The data may be used to establish liability in case of hypothetical computer crimes against the website or third parties. Apart from this possibility, the data collected on the website will be deleted after a short period of time.
b. Special categories of personal data
When you use our website to apply for a job (or send us an email), there could be a transfer of your personal data that fall under the special categories of personal data as defined in Art. 9 of the Regulation, literally the “[…] personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade-union membership, as well as […] genetic data, biometric data uniquely identifying a natural person, health data or data concerning a natural person’s sex life or sexual orientation.” Please do not disclose this data unless it is absolutely necessary. We expressly inform you that in relation to the transfer of special categories of personal data, but in the absence of explicit consent to the processing of such data (you are of course allowed to send a CV), the controller cannot be held responsible for whatever, nor receive remonstrances of any kind, since in this case the processing is allowed as it relates to data that have been manifestly made public by the data subject, in accordance with Art. 9(1)e of the Regulation. However, we point out that, as mentioned above, it is important to give explicit consent to the processing of special categories of personal data if you decide to provide this information.
We also inform you that for the purpose of candidate selection, the Controller may analyze social profiles freely available on the Internet for professional purposes (e.g. LinkedIn).
c. Data voluntarily provided by the data subject
When you use certain services on the website (for example, the request, contact or reservation form), we may process personal data provided by third parties that you send to the data controller. In these cases, you are the data controller, who assumes all legal obligations and liabilities. In this sense, you give us the maximum indemnity in relation to any remonstrance, claims, claims for damages arising from the processing, etc., that the data controller may receive from third parties whose personal data have been processed through the use of the functions of the website in violation of the applicable regulations on the protection of personal data. If you provide or otherwise process personal data of third parties in the course of using the Website, you warrant in any case that this particular case of processing is based on an adequate legal basis pursuant to Article 6 of the Regulation, which legitimizes the processing of the information in question.
3. Purpose of the processing
The purposes of the processing we intend to carry out (where necessary) with your explicit consent are as follows:
a. To enable the provision of the services requested by you
b. To respond to customer service requests, requests for information or reservations
c. To analyze resumes and contact applicants who have submitted their applications
d. Comply with all legal, accounting and tax obligations
e. Marketing purposes: the data provided may be processed, with prior explicit and specific consent, for the sending of promotional and marketing communications, including the sending of newsletters and market research surveys, using automated (SMS, MMS, email, push messages) and non-automated (postal, call center) systems. The legal basis for processing your data for these purposes is Article 6(1)(a) of the Regulation. Consent to processing for direct marketing is optional and depends on your free choice, so not giving your consent for this purpose will not affect your use of the Services.
f. Marketing purposes with profiling: the data provided may be processed, subject to explicit and specific consent, for the purposes of commercial profiling and formulation of personalized offers and targeted advertising based on the purchases made and/or navigation behavior and/or other consumption behavior and/or data entered in the forms and/or answers in market research surveys. The processing of data for marketing with profiling is optional and depends on your consent; therefore, not giving your consent to the processing for this purpose will not affect the use of the Services
4. Legal basis and compulsory or optional nature of the processing.
The legal basis for processing personal data for the purposes mentioned in Section 3 (a-b-c) is Article 6(1)(b) of the Regulation (performance of a contract), as the data processing is necessary for the provision of the Services or to respond to requests from the data subject. Providing personal data for these purposes is optional, but failure to do so would make it impossible to activate the services provided by the website, process requests or evaluate resumes. With specific reference to purpose 3.c and the related analysis of social media profiles of a professional nature made freely available on the Internet in accordance with section 2.b, Article 6(1)(f) of the Regulation constitutes the legal basis for the treatment of the data, i.e. the legitimate interest of the data controller to verify possible risks to the suitability of the candidate to fill the specific vacancy.
The purpose stated in Section 3.d constitutes lawful processing of personal data within the meaning of Article 6(1)(c) of the Regulation (compliance with a legal obligation). Indeed, once the personal data have been provided, the processing is necessary for compliance with a legal obligation to which the controller is subject.
The legal basis of the processing for the purposes mentioned in Section 3.e is Article 6(1)(a) of the Regulation (consent of the user).
The Controller may, without your consent, in order to carry out the processing for the same purposes, which include the direct sending of promotional material or direct sales or the carrying out of market research or commercial communications relating to products or services of the Controller that are similar to those purchased, use e-mail addresses and postal addresses in accordance with and within the limits permitted by article 130, paragraph 4 of the Privacy Code and the Order of the Guarantor for the Protection of Personal Data of June 19, 2008. The legal basis for processing your data for this purpose is Art. 6(1)(f) of the Regulation (the legitimate interest).
The legal basis for processing for the purposes mentioned in section 3.f is Art. 6(1)(a) (the user’s consent).
- recipients of personal data
Your personal data may be disclosed for the purposes mentioned in Section 3 to:
a. Subjects who typically act as processors, i.e.: i. Persons, companies or office partnerships who provide accounting, administrative, legal, tax, financial, collection, marketing and communication assistance and advice to the Controller in relation to the provision of the Services; ii. Subjects with whom cooperation is necessary for the provision of the Services (e.g.. e.g. hosting providers); iii) Subjects engaged to perform technical maintenance work (including maintenance of network equipment and electronic communication networks) (collectively referred to as “Recipients”);
b. Subjects, entities or authorities to whom your personal data must be communicated by virtue of legal provisions or official orders;
c. Persons authorized by the Controller to process personal data necessary for the performance of activities relating to the provision of the Services or for the other purposes referred to in Section 3, and who have undertaken to maintain confidentiality or have a reasonable legal obligation to maintain confidentiality (e.g. employees of the Controller).
- transfer of personal data
Some of your personal data will be disclosed to recipients who may be located outside the European Economic Area. The data controller will ensure that the processing of your personal data by these recipients is in compliance with the Regulation. In fact, transfers may be based on an adequacy decision, on the contractual clauses approved by the European Commission or on another appropriate legal basis. For more information, please contact the data controller at the following address: firstname.lastname@example.org.
Additive + Lead Cloud
In order to increase customer loyalty and to sell our services and additional services we use software provided by ADDITIVE s.n.c., 39011 Lana (BZ), Italy (“ADDITIVE”).
Therefore your data, which we gather and process in connection with your request, reservation, order, activation, registration or the transmission of other contact forms on our website, will be analysed and used to provide you with automatically generated offers for our services and additional services. Through the use of these services and systems your data will be processed and stored, at least in part, also outside of the EU or the EEC. The adequate level of data protection is based on an adequacy decision taken by the European Commission (“Privacy Shield”) or on data processing agreements.
You can deny the use of your data for this purpose anytime by clicking on the “unsubscribe” link in the respective message.
The data processing takes place in accordance with the requirements of art. 6 para. 1 lit f (legitimate interests) of the GDPR.
Our objective in accordance with the GDPR (legitimate interests) is the prevention of competitive disadvantages, the increase in brand awareness and the maximisation of our economic success through an optimal use of the acquired contacts.
- retention of personal data
Personal data processed for the purposes referred to in Section 3(a-b) will be kept for as long as strictly necessary for the achievement of those purposes. In any case, since the data processing is carried out for the provision of services, the data controller will process the personal data until the time provided for by the Italian legislation on the safeguarding of interests (art. 2946 and following of the Civil Code). With regard to the CVs sent through the website or by e-mail pursuant to section 3.c, the personal data will be kept for a period deemed adequate for the purpose for which the data was collected. This shall apply notwithstanding the possibility for the Controller to contact the Applicant again shortly before the expiry of the indicated period for requesting an extension of this retention period.
Personal data processed for the purposes referred to in Section 3.d will be retained until the date provided for by the specific obligation or applicable law.
Personal data processed for the purposes referred to in Section 3.e and 3.f, on the other hand, will be kept until the withdrawal of consent by the data subject or, in the absence of such withdrawal, for a specified maximum period deemed appropriate.
For more information on the retention period of the data and the criteria for determining this period, please contact the data controller at the following address: email@example.com.
- rights of the data subjects
Pursuant to Article 15 et seq. of the Regulation, you have the right to ask the controller at any time for access to your personal data, to request the controller to rectify or erase it, or to object to the processing. You have the right to request the restriction of processing in the cases provided for in Article 18 of the Regulation, as well as to receive the data concerning you in a structured, commonly used and machine-readable format in the cases provided for in Article 20 of the Regulation.
Any request must be made in writing to the data controller at the following address: firstname.lastname@example.org.
You have the right at any time to lodge a complaint with the competent supervisory authority (personal data protection guarantor) in accordance with Art. 77 of the Regulation, if you consider that the processing of your personal data violates applicable law.