Privacy

Hotel Bergschlössl GmbH, with its registered office at Lüsner Strasse 24, I-39040 Lüsen, (hereinafter referred to as Hotel Bergschlössl) always endeavours to protect the online privacy of its users. This document has been drafted in accordance with Art. 13 of the EU Regulation 2016/679 (hereinafter referred to as the "Regulation") in order for you to be aware of our Privacy Policy and to understand how your personal information will be treated when using our website and, where applicable, to give your explicit and informed consent to the processing of your personal data (valid only for persons aged 16 or over). The information and data provided by you or otherwise acquired by us when using our services on the website (hereinafter referred to as "Services") will be processed in accordance with the provisions of the Regulation and the confidentiality obligations that affect the activities of the controller.

In accordance with the provisions of the Regulation, the processing carried out by Hotel Bergschlössl is based on the principles of lawfulness, fair processing, transparency, purpose limitation, storage limitation, data minimisation, accuracy, integrity and confidentiality.

DIRECTORY

1. The responsible
2. The personal data which are the subject of the processing shall be
   1. navigation data
   2. Special categories of personal data
   3. Data voluntarily provided by the data subject
3. Purpose of the processing
4. Legal basis and mandatory or optional nature of the processing operation
5. Recipients of personal data
6. Disclosure of personal data
7. Storage of personal data
8. Rights of the data subjects
9. Modifications
10. The responsible

The controller of the processing operations carried out on the website is Hotel Bergschlössl GmbH, as designated above. For information about the processing of personal data by the controller, including the list of processors appointed to process the data, please write to the following address: info@bergschloessl.com

1. The personal data which are the subject of the processing operation

We inform you that, as a result of your navigation on the website , the data controller will process personal data that may consist of an identifier such as your name, an identification number, an online identifier, a postal address, an email address, a telephone number (fixed and/or mobile) or one or more elements of your physical, physiological, psychological, economic, cultural or social identity in order to identify or make identifiable the data subject (hereinafter referred to as "personal data").

The personal data processed through the website are the following:

a. Navigation data

The computer systems and software procedures used to operate the website collect, during their normal operation, some personal data, the transmission of which is implicit in the communication protocols of the Internet. This information is not collected to be associated with identified data subjects, but may, by its nature, allow users to be identified through processing and association with third party data. This category of data includes IP addresses or domain names of computers used by users connecting to the website, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to send the request to the server, the size of the file received in response, the numerical code indicating the status of the server's response (successful, error, etc.) and other parameters relating to the operating system and computer environment. These data are used exclusively to obtain anonymous statistical information on the use of the website and to verify its correct functioning, detect anomalies and/or abuse and are deleted immediately after processing. The data may be used to establish liability in the event of hypothetical computer offences against the website or third parties. Apart from this possibility, the data collected on the website will be deleted after a short period of time.

b. Special categories of personal data

When you use our website to apply for a job (or send an email to us), there could be a transfer of your personal data that falls under the special categories of personal data as defined in Art. 9 of the Regulation, literally the "[...] personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade-union membership". ] personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade-union membership, as well as the [...] genetic data, biometric data uniquely identifying a natural person, health data or data concerning a natural person's sex life or sexual orientation." Please do not publish this data unless it is absolutely necessary. We explicitly inform you that in relation to the transfer of special categories of personal data, but in the absence of explicit consent to process such data (you are of course allowed to send a CV), the controller cannot be held liable for whatever, nor receive remonstrances of any kind, as in this case the processing is allowed as it relates to data that have been manifestly made public by the data subject, in accordance with Art. 9(1)e of the Regulation. However, we would like to point out that, as mentioned above, it is important to give explicit consent to the processing of special categories of personal data if you decide to provide this information.

We also inform you that for the purpose of candidate selection, the data controller may analyse social profiles freely accessible on the internet for professional purposes (e.g. LinkedIn).

c. Data voluntarily provided by the data subject

When you use certain services on the website (e.g. the enquiry, contact or reservation form), we may process personal data from third parties that you send to the data controller. In these cases, you are the data controller, who assumes all legal obligations and liabilities. In this sense, you give us the maximum indemnity in relation to any retention, claims, compensation for damages arising from the processing, etc. that the data controller may receive from third parties whose personal data has been processed through the use of the functions of the website in violation of the applicable regulations on the protection of personal data. In any case, if you provide or otherwise process personal data of third parties in the course of using the Website, you warrant that this particular case of processing is based on an adequate legal basis pursuant to Art. 6 of the Regulation, which legitimises the processing of the information in question.

2. Purpose of the processing

The processing we intend to carry out (where necessary) with your explicit consent has the following purposes:

3. Legal basis and mandatory or optional nature of the processing operation

The legal basis for the processing of personal data for the purposes mentioned in section 3 (a-b-c) is Art. 6(1)(b) of the Regulation (performance of a contract), as the data processing is necessary for the provision of the services or to respond to requests from the data subject. Providing personal data for these purposes is optional, but failure to do so would make it impossible to activate the services provided by the website, process requests or evaluate CVs. With specific reference to purpose 3.c and the related analysis of social media profiles of a professional nature made freely available on the internet in accordance with section 2.b, Article 6(1)(f) of the Regulation constitutes the legal basis for the processing of the data, i.e. the legitimate interest of the data controller to check possible risks to the suitability of the candidate to fill the specific vacancy.

The purpose referred to in Section 3.d constitutes lawful processing of personal data within the meaning of Article 6(1)(c) of the Regulation (compliance with a legal obligation). Indeed, once the personal data have been provided, the processing is necessary for compliance with a legal obligation to which the controller is subject.

The legal basis of the processing for the purposes indicated in section 3.e is art. 6(1)(a) of the Regulation (consent of the user).
The controller may, without your consent, in order to carry out the processing for the same purposes involving the direct sending of advertising material or direct sales or the carrying out of market research or commercial communications relating to products or services of the controller that are similar to those purchased, use e-mail addresses and postal addresses in accordance with and within the limits permitted by art. 130, paragraph 4 of the Privacy Code and the order of the Guarantor for the Protection of Personal Data of 19 June 2008. The legal basis for processing your data for this purpose is Art. 6(1)(f) of the Regulation (the legitimate interest).

The legal basis of the processing for the purposes mentioned in section 3.f is Art. 6(1)(a) (consent of the user).

4. Recipients of personal data

Your personal data may be disclosed for the purposes set out in section 3 to:

5. Disclosure of personal data

Some of your personal data will be disclosed to recipients who may be located outside the European Economic Area. The data controller will ensure that the processing of your personal data by these recipients is carried out in accordance with the Regulation. Indeed, transfers may be based on an adequacy decision, on the contractual clauses approved by the European Commission or on another appropriate legal basis. For more information, please contact the data controller at the following address: info@bergschloessl.com.

6. Storage of the personal data

Personal data processed for the purposes referred to in section 3(a-b) will be kept for as long as strictly necessary for the achievement of those purposes. In any case, since the data processing is carried out for the provision of services, the data controller will process the personal data until the time provided for by Italian legislation on the safeguarding of interests (art. 2946 et seq. of the Civil Code). With regard to the CVs sent through the website or by e-mail in accordance with section 3.c, the personal data will be kept for a period deemed adequate for the purpose for which the data was collected. This is without prejudice to the possibility for the data controller to contact the applicant again shortly before the expiry of the period indicated for requesting an extension of this retention period.

The personal data processed for the purposes referred to in section 3.d shall be stored until the date provided for by the specific obligation or applicable law.

Personal data processed for the purposes referred to in sections 3.e and 3.f, on the other hand, shall be kept until consent is withdrawn by the data subject or, in the absence of such withdrawal, for a specified maximum period deemed appropriate.

For more information on the retention period of the data and the criteria for determining this period, please contact the data controller at the following address: info@bergschloessl.com.

7. Rights of the data subjects

In accordance with Article 15 et seq. of the Regulation, you have the right to ask the controller at any time for access to your personal data, to request that it be rectified or erased, or to object to processing. You have the right to request the restriction of processing in the cases provided for in Article 18 of the Regulation, as well as to receive the data concerning you in a structured, commonly used and machine-readable format in the cases provided for in Article 20 of the Regulation.

Any request must be made in writing to the Responsible Officer at the following address: info@bergschloessl.com.

You have the right to lodge a complaint with the competent supervisory authority (personal data protection guarantor) in accordance with Art. 77 of the Regulation at any time if you believe that the processing of your personal data violates applicable law.

8. Modifications

This privacy policy is valid as of 01.01.2023. The responsible person reserves the right to change or update the content in whole or in part, also due to changes in the applicable legislation. Therefore, the responsible person encourages you to visit this section regularly to keep yourself informed about the latest and most up-to-date version of this privacy policy.

Google Analytics & Google Remarketing

This website uses Google Analytics, Google Remarketing and Google Analytics reports on demographic characteristics. These are services provided by Google Inc ("Google"). Google uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. The IP address is then shortened by Google by the last three digits, so that a clear assignment of the IP address is no longer possible. Google observes the data protection provisions of the "US Safe Harbor" agreement and is registered with the "Safe Harbor" programme of the US Department of Commerce. Google Analytics reports use data from Google's interest-based advertising and visitor data from third-party providers. This data cannot be traced back to a specific person and can be deactivated at any time via the ad settings and as follows.

Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.

Third-party vendors, including Google, serve ads on websites on the Internet. Third-party vendors, including Google, use stored cookies to serve ads based on a user's previous visits to this website.

Google will not associate your IP address with any other data held by Google. You can object to the collection and storage of data at any time with effect for the future. You can deactivate the use of cookies by Google by visiting the Google advertising deactivation page. Alternatively, users can deactivate the use of cookies by third-party providers by visiting the Network Advertising Initiative deactivation page.

However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

The collection and storage of data can be objected to at any time with effect for the future. Further information on Google's terms and conditions can be found here.

Zur Steigerung der Kundenbindung sowie zum Verkauf von Leistungen und Zusatzleistungen nutzen wir Hotel Marketing Automation Software von ADDITIVE OHG, 39011 Lana (BZ), Italien („ADDITIVE“) im Bereich Marketing- und Vertriebsautomatisierung für Hotels. Dabei werden Daten, die wir im Zusammenhang mit Ihrer Anfrage, Buchung, Bestellung, Aktivierung, Anmeldung oder sonstigen Übermittlung eines Formulars auf der Website erheben und verarbeiten, analysiert und dazu genutzt, um Ihnen über die ADDITIVE+ MARKETING AUTOMATION automatisiert Angebote für Leistungen und Zusatzleistungen zu unterbreiten. Das angemessene Datenschutzniveau ergibt sich dabei aus der abgeschlossenen Auftragsverarbeitungsvereinbarung.

Sie können der Verwendung Ihrer Daten für diesen Zweck jederzeit über den Abmelde-Link in der jeweiligen Nachricht widersprechen.

Die Datenverarbeitung erfolgt auf Basis der gesetzlichen Bestimmungen des Art 6 Abs 1 lit f (berechtigtes Interesse) der DSGVO.

Unser Anliegen im Sinne der DSGVO (berechtigtes Interesse) ist die Vermeidung von Nachteilen gegenüber unseren Wettbewerbern, die Verbesserung unserer Markenbekanntheit sowie die Maximierung unseres wirtschaftlichen Erfolgs durch bestmögliche vertriebliche Nutzung der gewonnenen Kontakte.

ADDITIVE+ GUTSCHEINE

Sie haben die Möglichkeit, über unsere Website Gutscheine über ein online Gutscheinsystem zu kaufen. Zur Bearbeitung Ihres Kaufs sowie zur Speicherung und Aufbewahrung Ihrer Daten nutzen wir im Bereich Gutschein Marketing Tourismus die Gutschein Software von ADDITIVE OHG, 39011 Lana (BZ), Italien („ADDITIVE“). Ihre Daten werden innerhalb der EU bzw. des EWR verarbeitet und gespeichert.

Die von Ihnen bereitgestellten Daten sind zur Vertragserfüllung bzw. zur Durchführung vorvertraglicher Maßnahmen erforderlich. Ohne diese Daten können wir den Vertrag mit Ihnen nicht abschließen. Eine Datenübermittlung an Dritte erfolgt nicht, mit Ausnahme der Übermittlung der Kreditkartendaten an die abwickelnden Zahlungsdienstleister zum Zwecke der Abbuchung des Einkaufspreises sowie an unseren Steuerberater zur Erfüllung unserer steuerrechtlichen Verpflichtungen.

Die Datenverarbeitung erfolgt auf Basis der gesetzlichen Bestimmungen des Art 6 Abs 1 lit a (Einwilligung) und/oder lit b (notwendig zur Vertragserfüllung) der DSGVO.

ADDITIVE+ NEWSLETTER

Sie haben die Möglichkeit, über unsere Website unseren Newsletter zu abonnieren. Hierfür benötigen wir Ihre E-Mail-Adresse und Ihre Erklärung, dass Sie mit dem Bezug des Hotel Newsletter über ADDITIVE OHG, unseren Anbieter im Bereich E-Mail Marketing Hotel einverstanden sind.

Um Sie zielgerichtet mit Informationen zu versorgen, erheben und verarbeiten wir mit unserem Newsletter System außerdem freiwillig gemachte Angaben zu Interessengebieten, Name, Geburtstag und Herkunftsregion/-land.

Sobald Sie sich für den Newsletter angemeldet haben, senden wir Ihnen ein Bestätigungs-E-Mail mit einem Link zur Bestätigung der Anmeldung.

Das Abo des Newsletters können Sie jederzeit über den Abmelde-Link im jeweiligen Newsletter stornieren.

Zur Verarbeitung Ihres Abos sowie zur Zustellung des Newsletters an Ihre E-Mail-Adresse nutzen wir Software von ADDITIVE OHG, 39011 Lana (BZ), Italien („ADDITIVE“). Mittels dieser Dienste und Systeme werden Ihre Daten zumindest zum Teil auch außerhalb der EU bzw. des EWR verarbeitet und gespeichert. Das angemessene Datenschutzniveau ergibt sich dabei aus der abgeschlossenen Auftragsverarbeitungsvereinbarung.

Online Marketing und Landingpages

Neben unserer Website betreiben wir zusätzlich optimierte Verkaufs-Landingpages. Zur Bearbeitung Ihrer Anfrage, Buchung, Bestellung, Aktivierung, Anmeldung oder sonstigen Übermittlung eines Formulars auf einer solchen Landingpage sowie zur Speicherung und Aufbewahrung Ihrer Daten nutzen wir gängige Cloud-Dienste und CRM-Systeme sowie Software von ADDITIVE OHG, 39011 Lana (BZ), Italien („ADDITIVE“). Das angemessene Datenschutzniveau ergibt sich dabei aus den abgeschlossenen Auftragsverarbeitungsvereinbarungen mit den jeweiligen Unternehmen.
Unsere Landingpages verwenden Funktionen des Webanalysedienstes Google Analytics der Google Inc. („Google“). Google Analytics ermöglicht die Analyse der Benutzung der Website durch ihre Benutzer. Die dadurch erzeugten Informationen über Ihr Nutzerverhalten werden auf den Server des Anbieters übertragen und dort gespeichert.
Ihre IP-Adresse wird erfasst, aber umgehend (z.B. durch Löschung der letzten 8 Bit) anonymisiert. Dadurch ist nur mehr eine grobe Lokalisierung möglich.
Sie können die Übertragung der auf Ihre Nutzung des Onlineangebotes bezogenen Daten an Google sowie die Verarbeitung dieser Daten durch Google verhindern, indem Sie das unter dem folgenden Link verfügbare Browser-Plugin herunterladen und installieren:
https://chrome.google.com/webstore/detail/google-analytics-opt-out/fllaojicojecljbmefodhfapmkghcbnh
ADDITIVE hat Einblick in die mittels Google Analytics erhobenen Daten. Diese Daten werden nicht für andere Zwecke als der Analyse der Benutzung unserer Websites sowie der Auswertung unserer Marketing- und Vertriebsmaßnahmen genutzt.
Unsere Websites und Landingpages verwenden weiters Funktionen von ADDITIVE zur kanalübergreifenden Erfassung der Nutzung unserer Websites sowie Marketing- und Vertriebsmaßnahmen wie bspw. Landingpages, Newsletter und Social-Media-Präsenzen. Dabei werden Informationen zu Ihren Besuchen und abgeschickten Formularen auf unseren Websites auch an ADDITIVE übertragen, um unsere Marketing- und Vertriebsmaßnahmen auszuwerten und zu optimieren.
Die Datenverarbeitung erfolgt auf Basis der gesetzlichen Bestimmungen des Art 6 Abs 1 lit f (berechtigtes Interesse) der DSGVO.
Unser Anliegen im Sinne der DSGVO (berechtigtes Interesse) ist die Verbesserung unseres Angebots und unseres Webauftritts durch Analyse der Benutzung unserer Website sowie Vertriebs- und Marketingmaßnahmen.
Zudem verwenden unsere Landingpages sowie unsere Website Remarketing-Funktionen der Google Inc. („Google“) sowie der Meta Platforms Inc. („Meta“). Dabei wird an Meta und Google übermittelt, dass Sie diese Website besucht haben. Diese Funktionen dienen dazu, Besuchern der Landingpages interessenbezogene Werbeanzeigen im Werbenetzwerk von Google oder im Sozialen Netzwerk Facebook sowie Instagram zu präsentieren.
Die Datenverarbeitung im Zusammenhang mit diesen Remarketing-Funktionen erfolgt auf Basis der gesetzlichen Bestimmungen des Art 6 Abs 1 lit a (Einwilligung) der DSGVO.
Sie werden mittels eines Banners beim Besuch unserer Landingpages auf die Verwendung von Cookies für diese Remarketing-Funktionen hingewiesen. Durch die weitere Nutzung oder durch Klick auf den entsprechenden Button stimmen Sie der Verwendung zu. Sie können jederzeit der Einwilligung widersprechen, indem Sie auf der jeweiligen Landingpage die Seite mit den Cookie-Informationen aufrufen und im erscheinenden Banner die Cookie-Verwendung ablehnen.