Information necessary for the processing of the guest's personal data
In accordance with the EU General Regulations for the protection of data (Regulation 2016/679 issued by the European Parliament and Council), please be informed that:
NAME AND CONTACT DETAILS OF THE CONTROLLER
The data controller is the Hotel Luna Mondschein d. Stefan Mayr 6 Co.
The data processor is Stefan Mayr
PERSONAL DATA AND SPECIAL CATEGORIES OF DATA
The following are considered as being your personal data:
- personal data (surname, name, address, e-mail, telephone number, fax number, date of birth) as well as your language and the license plate of your vehicle
- the data shown in your passport or identity card
- data relative to the method of payment or otherwise connected with your payments (e.g. bank coordinates, details of credit card)
- date of arrival and length of stay
MOTIVES FOR THE PROCESSING OF PERSONAL DATA AND LEGAL GROUND FOR THEIR PROCESSING
The data provided will be processed for the following purposes:
- For compliance with legal obligations
- For the implementation of pre-contractual and contractual requirements relative to the guest's visit (booking, period of stay, departure etc.)
- Forwarding of communications and telephone calls directly to the guest
- Memorization of the data for the purpose of future bookings and requests
- Forwarding of information, special offers and new features offered by the hotel and the other associated hotels by e-mail, ordinary mail, and other means of communication concerning the hotel, the local area and any local events etc.
- compliance with legal and judicial obligations
- compliance with obligations and pre-contractual and contractual requirements
- your consent
- legitimate interests (e.g. for improvements to our client service and our contacts with the clients – also regarding direct advertising – or video surveillance intended to protect persons and property from possible aggression, theft, robbery, damage and vandalism, as well as for fire protection and safety in the workplace).
In most cases, your personal data will not be provided to third parties. In special circumstances, however, the data may:
- be forwarded to other departments within the hotel, subject to the limits of legitimate use;
- be forwarded to the following hotel employees, or to third-party subjects, when necessary to meet your requests or in order to provide specific services:
- to the following associate hotels
Your personal data will not be forwarded to third countries nor to international organizations outside the EU.
DURATION OF CONSERVATION OF DATA
The duration of the conservation of the data is calculated on the basis of the obligations for the conservation of the data and the requirements contemplated by the law. If your personal data are processed in order to comply with a legal requirement or a contractual obligation, they will be kept only for the time that is strictly necessary for their processing. If the data are processed with your consent, they will be kept until that consent is revoked.
RIGHTS OF THE DATA SUBJECT
Right of access by the data subject: In accordance with art. 15 of the GDPR, you are entitled to be informed of the personal data processed, their provenance, nature, possible forwarding to third parties (in such case identifying the same) and their utilization.
Right of rectification and erasure: In accordance with art. 16 of the GDPR, you may at any time require the rectification or completion of your personal data. Similarly, in accordance with art. 17 of the GDPR, you are entitled to require the erasure of the data. In the presence of published data, you also enjoy the "right to be forgotten", i.e. to request that the measures necessary to erase all the links, copies, replications and similar.
Right to object: You may at any time exercise your right to object as described in art. 21 of the GDPR and modify or entirely revoke your consent for the future.
Right of restriction (or blocking) of processing: In accordance with art. 18 of the GDPR, you may require the restriction of the processing of your personal data. The relevant data may be processed only subject to specific prior consent, i.e. their processing will be effectively limited.
Right to data portability: In accordance with art. 20 of the GDPR, you are entitled to request and receive the personal data provided by yourself in a structured, commonly used and machine-readable format, and you have the right to require their transmission to another controller.
In accordance with art. 77 of the GDPR, you have the right to lodge a complaint with the supervisory authority.
CHARACTERISTICS OF CONSENT
Your personal data will be processed in accordance with the contract and with current legislation, as set forth in the provisions of EU Regulation 679/2016 (GDPR).
Consent for the processing of personal data included in special categories is given on a voluntary basis. In the absence of such consent, the personal data cannot be processed for any future bookings. Consent for the processing of personal data as regards the forwarding of information, special offers and new features offered by the hotel, too, is voluntary. If the personal data are not provided, then offers and other information shall not be supplied.
ADDITIVE ONLINE MARKETING
Beside our website we do also operate optimized landingpages. To process your request, reservation, order, activation, registration or the transmission of other contact forms on our website as well as to save and store your data we use cloud services, CRM systems and software provided by ADDITIVE s.n.c., 39011 Lana (BZ), Italy (“ADDITIVE”). Through the use of these services and systems your data will be processed and stored, at least in part, also outside of the EU or the EEC. The adequate level of data protection is based on an adequacy decision taken by the European Commission (“Privacy Shield”) or on data processing agreements with the respective company.
Our landingpages use Google Analytics, a web analytics service provided by Google Inc. (“Google”). For this functions cookies are used to analyse the use of the website. The information generated through the use of these cookies is transmitted to and stored by Google on its servers. If you do not wish to accept these cookies you can change the settings of your browser in order to prevent the saving of cookies or to get a notification anytime cookies are used, so you will be able to allow cookies in individual cases.
Your IP address is collected but immediately anonymised (for example by deleting the last 8 bits). As a result the geolocation data is less accurate.
The connection to the web analytics service provider Google is based on an adequacy decision taken by the European Commission (“Privacy Shield” in case of the USA).
You can prevent the saving of cookies by changing the respective settings of your browser software. You can also prevent data collection connected to your use of our online services through cookies and the processing of this data by Google, by installing the browser-plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Our landingpages also use functions provided by ADDITIVE for the multi-channel monitoring of the use of our websites as well as marketing and distribution strategies like landingpages, newsletter and social media presence.
ADDITIVE has an insight into data gathered through Google Analytics. This data will be used only to analyse the use of our websites and to evaluate our marketing and distribution strategies.
The data processing takes place in accordance with the requirements of art. 6 para. 1 lit f (legitimate interests) of the GDPR.
Our objective in accordance with the GDPR (legitimate interests) is the improvement of our products and services and our web presence through the analysis of the use of our website as well as marketing and distribution strategies.
Our landingpages also use remarketing functions provided by Google Inc. (“Google”) and by Facebook Inc. (“Facebook”). Therefore, Facebook and Google will know that you have visited our website. This way visitors of our website and of our landingpages will find ads adapted to their interests on Google’s advertising platforms and on the social media platforms Facebook and Instagram.
The data processing takes place in accordance with the requirements of art. 6 para. 1 lit a (consent) of the GDPR.
Information is provided in the event that the personal data are taken from a booking portal or similar structure. Information is provided in the event of automated processing (profiling). Where applicable, it will be specified that "Profiling will not be utilized for the processing of your personal data". If the controller intends to utilize the data protection indications for their internet page, information will also be provided concerning cookies and other technical aspects.
Bolzano, 25 may