Data protection
Gemäß der europäischen Datenschutz-Grundverordnung (DSGVO, EU 2016/679) informieren wir Sie über die Art, den Umfang und Zweck der Erhebung und Verwendung von personenbezogenen Daten. Diese Erklärung betrifft alle unsere Gäste.
In accordance with the European Data Protection Regulation (DSGVO, EU 2016/679), we inform you about the nature, scope and purpose of the collection and use of personal data. This declaration concerns all our guests.
The person responsible for data processing is:
Philipp Frötscher
Tschöfs 39
39049 Vipiteno
Tel. +39 391 1386690
E-mail: schallerhof-sterzing@gmail.com
In accordance with Art. 13 of the European General Data Protection Regulation, we process the following data of our guests: Master data (first name, last name, address, telephone, e-mail, date of birth, place of birth, language, etc.), data in travel documents and identity cards, data on payments, EC cards, credit cards and bank cards as well as the requested length of stay and personal preferences related to the stay, which have been made known to us.
The data will be stored and processed by us in order to provide our services and, if necessary and required by law, transmitted to third parties (e.g. public authorities, tourist association). Your data will not be transferred to third countries.
Should you refuse to disclose master data, travel document data and bank data, it will not be possible for us to fulfil our contractual obligations and accommodate you in our establishment. We do not use profiling or automated decision-making.
The legal bases for these data processing operations are: the fulfilment of our pre-contractual and contractual obligations towards you
consent obtained from you, statutory, contractual or other legal obligations on our part (e.g. documentation rights and obligations under accounting, tax and customs law, contract law, reporting, or litigation), our legitimate interests (e.g. improving our customer service, including in the area of direct advertising, or safeguarding our own legal interests).
The duration of storage is determined by the duration of our business relationship, the consent you have given and, in addition, by the statutory retention obligations and legal obligations applicable to us.
You can request information about your personal data stored by us free of charge at any time. As a data subject, you also have the right to revocation, information, deletion, correction, restriction and transfer of your personal data, insofar as this is not opposed by any legal obligation to retain data on our part. If you exercise your right of revocation, all your data will be irrevocably deleted, unless overriding legal provisions are violated.
For more information on your rights as a data subject, please contact us at schallerhof-sterzing@gmail.com. We will be happy to help you. For complaints, the following body is responsible as the supervisory authority: Garante per la protezione dei dati personali”, Piazza di Monte Citorio n. 121, 00186 Rome; telephone: (+39) 06696771, e-mail: garante@gpdp.it.
Cookies
The EU Directive 2009/136/EC (E-Privacy) regulates the use of cookies on websites. This was implemented in Italy on 25 May 2012. What are cookies? A cookie is a short snippet of text sent to your browser by a website you visit. It stores information about your last visit, such as your preferred language or other settings.
Cookies are divided into mainly the following two groups:
Technical cookies: these contain data to enable the website to function and provide the services requested by the user such as navigation or login functions. Without these cookies, parts of the website will not function correctly.
Profiling cookies: these are used to record the user’s navigation on the internet and to create a profile of the user’s interests, habits and choices. Such cookies may be used to display advertisements or products that may interest you.
How do we use cookies?
We use cookies to ensure the best possible user experience. Third party services are also used to determine how you navigate through our website and what content you are interested in. These services also store cookies on your device.
How can I prevent cookies from being stored?
You can disable or delete cookies using your browser settings. Disabling cookies may mean that some websites no longer function as they should.
Collection of general data and information
The website “schallerhof-sterzing.com” collects a series of general data and information every time a data subject or automated system calls up the website. This general data and information is stored in the log files of the server. The following data may be collected: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system accesses our website (so-called referrer), (4) the sub-websites which are accessed via an accessing system on our website, (5) the date and time of access to the website, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information that serve to avert danger in the event of attacks on our information technology systems.
When using these general data and information, no conclusions are drawn about the data subject. Rather, this information is needed (1) to deliver the content of the website correctly, (2) to optimise the content of the website and the advertising for it, (3) to ensure the long-term functionality of the information technology systems and the technology of the website, and (4) to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack. Therefore, the “schallerhof-sterzing.com” analyzes anonymously collected data and information on one hand, and on the other hand, with the aim of increasing the data protection and data security of our enterprise, to ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from any personal data provided by a data subject.
Contact options via the website
The website of the “schallerhof-sterzing.com” contains voluntarily provided information that enables a quick electronic contact to our enterprise, as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the controller by e-mail or by using a contact form, the personal data transmitted by the data subject will be stored automatically. Such personal data transmitted on a voluntary basis by a data subject to the controller will be stored for the purposes of processing or contacting the data subject. This personal data will not be disclosed to third parties.
The controller has integrated components of the company Facebook on this website. Facebook is a social network. Here are the data protection provisions on the use and application of Facebook.
A social network is a social meeting place operated on the Internet, an online community that generally enables users to communicate and interact with each other in virtual space. A social network can serve as a platform for exchanging opinions and experiences or enables the internet community to provide personal or company-related information. Facebook allows users of the social network, among other things, to create private profiles, upload photos and network via friend requests.
Facebook’s operating company is Facebook, Inc, 1 Hacker Way, Menlo Park, CA 94025, USA. The controller of personal data where a data subject lives outside the USA or Canada is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Each time one of the individual pages of this website operated by the data controller is called up and on which a Facebook component (Facebook plug-in) has been integrated, the internet browser on the information technology system of the data subject is automatically caused by the respective Facebook component to download a representation of the corresponding Facebook component from Facebook. A complete overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=de_DE. Within the scope of this technical procedure, Facebook receives information about which specific sub-page of our website is visited by the data subject.
If the data subject is logged in to Facebook at the same time, Facebook recognises which specific sub-page of our website the data subject is visiting each time the data subject calls up our website and for the entire duration of the respective stay on our website. This information is collected by the Facebook component and assigned by Facebook to the respective Facebook account of the data subject. If the data subject activates one of the Facebook buttons integrated on our website, for example the “Like” button, or if the data subject posts a comment, Facebook assigns this information to the personal Facebook user account of the data subject and stores this personal data.
Facebook always receives information via the Facebook component that the data subject has visited our website if the data subject is logged into Facebook at the same time as calling up our website; this takes place regardless of whether the data subject clicks on the Facebook component or not. If the data subject does not want this information to be transmitted to Facebook, he or she can prevent the transmission by logging out of his or her Facebook account before accessing our website.
The data policy published by Facebook, which can be accessed at https://de-de.facebook.com/about/privacy/, provides information on the collection, processing and use of personal data by Facebook. It also explains which setting options Facebook offers to protect the privacy of the data subject. In addition, various applications are available that make it possible to suppress data transmission to Facebook. Such applications can be used by the data subject to suppress data transmission to Facebook.
Google Analytics
The controller has integrated the Google Analytics component (with anonymisation function) on this website. Here are the data protection provisions on the use of Google Analytics (with anonymisation function). Google Analytics is a web analysis service. Web analysis is the collection, compilation and evaluation of data about the behaviour of visitors to websites. A web analysis service collects, among other things, data about the website from which a data subject has accessed a website (so-called referrers), which sub-pages of the website have been accessed or how often and for how long a sub-page has been viewed. A web analysis is mainly used to optimise a website and to analyse the costs and benefits of internet advertising.
The operating company of the Google Analytics component is Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The controller uses the addition “_gat._anonymizeIp” for web analysis via Google Analytics. By means of this addition, the IP address of the Internet connection of the data subject is shortened and anonymised by Google if access to our Internet pages is from a Member State of the European Union or from another State party to the Agreement on the European Economic Area.
The purpose of the Google Analytics component is to analyse the flow of visitors to our website. Google uses the data and information obtained, among other things, to evaluate the use of our website, to compile online reports for us showing the activities on our website and to provide other services related to the use of our website.
Google Analytics sets a cookie on the information technology system of the data subject. What cookies are has already been explained above. By setting the cookie, Google is enabled to analyse the use of our website. Each time one of the individual pages of this website operated by the data controller is called up and on which a Google Analytics component has been integrated, the internet browser on the data subject’s information technology system is automatically caused by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. As part of this technical process, Google obtains knowledge of personal data, such as the IP address of the data subject, which Google uses, among other things, to track the origin of visitors and clicks and subsequently to enable commission settlements.
By means of the cookie, personal information, for example the access time, the place from which an access originated and the frequency of visits to our website by the data subject, is stored. Each time the data subject visits our website, this personal data, including the IP address of the internet connection used by the data subject, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may share this personal data collected via the technical process with third parties.
The data subject can prevent the setting of cookies by our website at any time by means of an appropriate setting of the Internet browser used, as already described above, and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system of the data subject. In addition, a cookie already set by Google Analytics can be deleted at any time via the internet browser or other software programmes.
Furthermore, the data subject has the option to object to the collection of data generated by Google Analytics and related to the use of this website as well as to the processing of this data by Google and to prevent such processing. For this purpose, the data subject must download and install a browser add-on under the link https://tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data and information on visits to Internet pages may be transmitted to Google Analytics. The installation of the browser add-on is considered by Google as an objection. If the data subject’s information technology system is deleted, formatted or reinstalled at a later date, the data subject must reinstall the browser add-on in order to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by the data subject or another person within his or her control, the browser add-on can be reinstalled or reactivated.
Further information and the applicable data protection provisions of Google can be found at https://www.google.de/intl/de/policies/privacy/ and at http://www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail under this link https://www.google.com/intl/de_de/analytics/.
Google+
The controller has integrated the Google+ button as a component on this website. Here are the data protection provisions on the use and application of Google+. Google+ is a so-called social network. A social network is a social meeting place operated on the Internet, an online community, which generally enables users to communicate with each other and interact in virtual space. A social network can serve as a platform for sharing opinions and experiences or enables the internet community to provide personal or company-related information. Among other things, Google+ allows users of the social network to create private profiles, upload photos and network via friend requests.
The operating company of Google+ is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
By each call of one of the individual pages of this website, which is operated by the controller and on which a Google+ button has been integrated, the internet browser on the information technology system of the data subject is automatically caused by the respective Google+ button to download a representation of the corresponding Google+ button from Google. Within the scope of this technical procedure, Google receives information about which specific sub-page of our website is visited by the data subject. More detailed information on Google+ is available at https://developers.google.com/+/.
If the data subject is logged into Google+ at the same time, Google recognises which specific sub-page of our website the data subject is visiting each time the data subject calls up our website and for the entire duration of the respective stay on our website. This information is collected by the Google+ button and assigned by Google to the respective Google+ account of the data subject.
Google stores the Google+1 recommendation of the data subject and makes it publicly available in accordance with the conditions accepted by the data subject in this regard. A Google+1 recommendation made by the data subject on this website will subsequently be stored and processed together with other personal data, such as the name of the Google+1 account used by the data subject and the photo stored in this account, in other Google services, for example the search engine results of the Google search engine, the Google account of the data subject or in other places, for example on websites or in connection with advertisements. Furthermore, Google is able to link the visit to this website with other personal data stored by Google. Google also records this personal information for the purpose of improving or optimising Google’s various services.
Google always receives information via the Google+ button that the data subject has visited our website if the data subject is simultaneously logged into Google+ at the time of calling up our website; this takes place regardless of whether the data subject clicks on the Google+ button or not.
If the data subject does not want personal data to be transmitted to Google, he or she can prevent such transmission by logging out of his or her Google+ account before accessing our website.
Further information and the applicable data protection provisions of Google can be found at https://www.google.de/intl/de/policies/privacy/. Further information from Google on the Google+1 button can be found at https://developers.google.com/+/web/buttons-policy.
The controller has integrated components of the Instagram service on this website. Here is the privacy policy on the use of Instagram. Instagram is a service that qualifies as an audiovisual platform and allows users to share photos and videos and also to redistribute such data in other social networks.
The operating company of the Instagram services is Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA.
Each time one of the individual pages of this website operated by the data controller is called up and on which an Instagram component (Insta button) has been integrated, the internet browser on the information technology system of the data subject is automatically caused by the respective Instagram component to download a representation of the corresponding component from Instagram. Within the scope of this technical procedure, Instagram receives information about which specific subpage of our website is visited by the data subject.
If the data subject is logged in to Instagram at the same time, Instagram recognises which specific subpage the data subject is visiting each time the data subject calls up our website and for the entire duration of the respective stay on our website. This information is collected by the Instagram component and assigned by Instagram to the respective Instagram account of the data subject. If the data subject activates one of the Instagram buttons integrated on our website, the data and information thus transmitted will be assigned to the personal Instagram user account of the data subject and stored and processed by Instagram.
Instagram always receives information via the Instagram component that the data subject has visited our website if the data subject is simultaneously logged into Instagram at the time of calling up our website; this takes place regardless of whether the data subject clicks on the Instagram component or not. If the data subject does not want this information to be transmitted to Instagram, he or she can prevent the transmission by logging out of his or her Instagram account before accessing our website.
Further information and the applicable data protection provisions of Instagram can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.
YouTube
The controller has integrated YouTube components on this website. Here are the data protection provisions on the use and application of YouTube. YouTube is an Internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment on them, also free of charge. YouTube allows the publication of all kinds of videos, which is why complete film and television programmes, but also music videos, trailers or videos made by users themselves can be accessed via the internet portal.
The operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Each time one of the individual pages of this website operated by the data controller is called up and on which a YouTube component (YouTube video) has been integrated, the internet browser on the information technology system of the data subject is automatically caused by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information on YouTube can be found at https://www.youtube.com/yt/about/de/. Within the scope of this technical procedure, YouTube and Google receive information about which specific sub-page of our website is visited by the data subject.
If the data subject is logged into YouTube at the same time, YouTube recognises which specific sub-page of our website the data subject is visiting when a sub-page containing a YouTube video is called up. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.
YouTube and Google always receive information via the YouTube component that the data subject has visited our website if the data subject is logged into YouTube at the same time as calling up our website; this takes place regardless of whether the data subject clicks on a YouTube video or not. If the data subject does not want this information to be transmitted to YouTube and Google, he or she can prevent the transmission by logging out of his or her YouTube account before accessing our website.
The data protection provisions published by YouTube, which can be accessed at https://www.google.de/intl/de/policies/privacy/, provide information on the collection, processing and use of personal data by YouTube and Google.
This data protection declaration was created with the help of the data protection declaration generator of the DGD Deutsche Gesellschaft für Datenschutz GmbH, which acts as the External Data Protection Officer Kempten, in cooperation with the lawyer for IT and data protection law Christian Solmecke.