Source: https://www.abitare-chalets.com/en/data-protection-apartment-obergurgl-tyrol/
Timestamp: 2019-04-23 11:05:16+00:00

Document:
You can demand confirmation from the controller as to whether personal data relating to yourself are being processed by us.
the existence of an automated decision-making process including profiling in accordance with Article 22 (1) and (4) GDPR and — at least in these cases — meaningful information on the logic involved as well as the targeted effects of any such processing for the data subject.
You have the right to demand information as to whether personal data relating to yourself are being transferred to a third country or to an international organization. In this context, you can demand to be informed of the suitable guarantees in accordance with Art. 46 GDPR with respect to the transfer.
You have a right to rectification and/or completion vis-à-vis the controller if the personal data processed in relation to yourself are incorrect or incomplete. The controller must perform the rectification promptly.
if you have objected to the processing in accordance with Art. 21 (1) GDPR and it is not yet clear whether the controller’s legitimate reasons outweigh your own reasons.
If the processing of the personal data relating to yourself has been restricted, such data may only be processed — apart from their storage — with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural person or legal entity, or for reasons of an important public interest of the Union or a Member State.
If the processing has been restricted in accordance with the a.m. conditions, you will be informed by the controller before the restriction is lifted.
The personal data relating to yourself are no longer needed for the purposes for which they were collected or otherwise processed.
You revoke your consent on which the processing was based in accordance with Art. 6 (1) p. 1 (a) or Art. 9 (2) (a) GDPR, and there is no other legal basis for the processing.
You object to the processing in accordance with Art. 21 para. 1 GDPR, and there are no overriding, legitimate reasons for the processing, or you object to the processing in accordance with Art. 21 (2) GDPR.
The personal data relating to yourself were unlawfully processed.
Erasure of the personal data relating to yourself is required to meet a legal obligation in accordance with Union or Member State law to which the controller is subject.
The personal data relating to yourself were collected with reference to services offered by the information society in accordance with Art. 8 (1) GDPR.
If the controller has published the personal data relating to yourself and he is obliged under Art. 17 (1) GDPR to erase them, he will take appropriate steps, including of a technical nature, taking into account the technology available and the implementation costs, to inform controllers responsible for data processing who are processing the personal data that you as the data subject have requested them to delete all links to these personal data or copies or duplicates of such personal data.
If you have asserted a right to rectification, erasure or restriction of processing against the controller, the latter is obliged to inform all recipients to whom the personal data relating to yourself have been disclosed, of such rectification or erasure of the data or restriction of the processing, unless this turns out to be impossible or is associated with a disproportionate degree of time and effort.
In exercising this right, you also have the right to have the personal data relating to yourself transferred directly from one controller to another controller if this is technically feasible. The freedoms and rights of other persons may not be impaired as a result.
The right to data portability does not apply to the processing of personal data required to perform a task which lies in the public interest or carried out in the exercise of official authority conferred on the controller.
You have the right, for reasons stemming from your particular situation, to object at any time to the processing of personal data relating to yourself carried out on the basis of Art. 6 (1) (e) or (f) GDPR; this also applies to any profiling based on these provisions.
The controller will no longer process the personal data relating to yourself unless he can show compelling, sensitive reasons for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If the personal data relating to yourself are processed to run direct mail marketing, you have the right to object at any time to the processing of the personal data relating to yourself for the purpose of such advertising; this also applies to the profiling provided it is associated with such direct mail marketing.
If you lodge an objection to processing for the purpose of direct mail marketing, the personal data relating to yourself will no longer be processed for these purposes.
You are free to exercise your right of objection in connection with the use of services of the information society — notwithstanding Directive 2002/58/EC — by means of automated procedures in which technical specifications are used.
You are entitled at any time to revoke your declaration of consent with respect to data protection laws. Revocation of your consent will not affect the lawfulness of the data processed on the basis of such consent prior to its revocation.
However, such decisions may not be based on special categories of personal data in accordance with Art. 9 (1) GDPR unless Art. 9 (2)(a) or (g) applies and suitable steps have been taken to safeguard rights and freedoms as well as your legitimate interests.
With respect to the cases specified in (1) and (3), the controller will take appropriate steps to safeguard rights and freedoms as well as your legitimate interests which includes at least the right to obtain the intervention of a person with the controller to present your own point of view and to challenge the decision.
Notwithstanding any other administrative or judicial remedy, you have the right to lodge a complaint with a regulatory authority, particularly in the member state of your residence, place of work or the location of the putative breach if you are of the opinion that the processing of the personal data relating to yourself breaches the GDPR.
The regulatory authority to which the complaint has been submitted, will inform the complainant of the status and results of the complaint including the possibility of a judicial remedy in accordance with Art. 78 GDPR.
As a general rule, we only process the personal data of our users if this is necessary to provide a functional website as well as our content and services. The personal data of our users are normally only processed with the user’s consent. An exception applies in cases in which it is not possible to obtain their consent in advance for practical reasons and the processing of the data is permitted by statutory provisions.
Insofar as we obtain the consent of the data subject for processing their personal data, Art. 6 (1) p. 1 (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
If personal data are required to be processed to fulfil a contract to which the data subject is a contracting party, Art. 6 (1) p. 1 (b) GDPR serves as the legal basis. This also applies to processing which is required to carry out pre-contractual steps.
If personal data need to be processed to meet a legal obligation to which our company is subject, Art. 6 (1) p. 1 (c) GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person necessitate the processing of personal data, Art. 6 (1) p. 1 (d) GDPR serves as the legal basis.
If the processing is required to preserve a legitimate interest of our company or that of a third party, and the interests, basic rights and freedoms of the data subject do not outweigh the aforementioned interest, Art. 6 (1) p. 1 (f) GDPR serves as the legal basis of the processing.
The personal data of the data subject will be erased or blocked as soon as the purpose of their storage no longer applies. The period of storage may even be longer if this is provided for by European or national legislators in Union ordinances, laws or other regulations to which the controller is subject. The data will also be blocked or erased if a retention deadline prescribed by the specified standards expires unless there is a need to store the data for a longer period in order to conclude or fulfil a contract.
Every time our website is visited, our system automatically registers data and information about the computer system of the PC calling up the website.
The data are also stored in our system’s log files. These data are not stored together with the user’s other personal data.
The legal basis for the temporary storage of the data and log files is given by Art. 6 (1) p. 1 (f) GDPR.
The system needs to temporarily store the IP address in order to facilitate delivery of the website to the user’s PC. To do so, the user’s IP address has to be retained for the duration of the session.
Log files are used for storage to ensure the functionality of the website. The data also serve to optimize the website and ensure the security of our IT systems. They are not evaluated for marketing purposes in this context.
These purposes also contain our legitimate interest in the data processing in accordance with Art. 6 (1) p. 1 (f) GDPR.
The data will be erased as soon as they are no longer needed to meet the purpose of their collection. If the data are captured in order to provide the website, this is done when the relevant session finishes.
If the data are stored in log files, this will be the case after seven days at the latest. More extensive storage is possible. In this case, the IP addresses of users are deleted or distorted with the result that the client calling up the website can no longer be identified.
Analytical cookies are used for the purpose of improving the quality of our website and its content. By analyzing cookies, we are able to find out how the website is used and can thus constantly optimize our offering.
These purposes also contain our legitimate interest in the processing of personal data in accordance with Art. 6 (1) p. 1 (f) GDPR.
The transmission of flash cookies cannot be prevented through your browser settings but by changing the settings in your Flash Player.
There is an option on our website to subscribe to a free newsletter. If you register for the newsletter, the following data are sent to us from the input window.
No data will be passed on to third parties in connection with the processing data for the despatch of newsletters. The data will be used exclusively for the despatch of the newsletter.
The legal basis for processing the data after the user registers for the newsletter is given by Art. 6 (1) p. 1 (a) GDPR as long as the user’s consent has been obtained.
Collection of the user’s email address serves to deliver the newsletter.
The collection of other personal data in the course of the registration procedure serves to prevent any abuse of the services or the email address used.
The data will be erased as soon as they are no longer needed to meet the purpose of their collection. The user’s email address will therefore be stored for as long as the subscription to the newsletter is active.
Any additional personal data collected during the registration procedure will normally be deleted after a period of seven days.
The subscription to the newsletter can by cancelled at any time by the user concerned. You will find a corresponding link in every newsletter for this purpose.
This also enables the user to revoke their consent to the storage of their personal data collected during the registration process.
There is an option on our website to book rooms and arrangements and/or submit an enquiry. If the user takes advantage of this option, the data entered in the input window are sent to us and stored. Such data can be: form of address, first name, surname, email address, telephone, address, number of accompanying persons, requests, date, time, room selection, package, price.
If you make an online booking on our website, this is conducted by the online reservation system of websLINE Internet-& Marketing GmbH, Sägewerkstrasse 24, 83395 Freilassing, Germany. All the booking data entered by you are encrypted for transmission. websLINE has undertaken to treat the data of yours sent to it in compliance with data protection requirements. It takes all the organizational and technical steps required to protect your data.
No data will be sent to third parties in this context. The data are used exclusively to process the booking and for communication.
The processing of personal data from the input window serves exclusively to process the booking enquiry and process the payment transaction.
The data will be erased as soon as they are no longer needed to meet the purpose of their collection. In the case of a contractual relationship, we will delete the data received as soon as national, commercial, constitutional or contractual retention requirements have been met.
The user has the option at any time to object to the processing of their personal data.
We would point out that if an objection is lodged, it may be impossible to complete the booking or continue the conversation.
We may also pass your application on internally to the responsible departmental head. The data will not be passed on to third parties in this context. The data will be used exclusively to process the application and for communication.
The legal basis for processing the data is processing as part of a contract initiation process or a contractual relationship.
The processing of personal data serves the sole purpose of processing the application.
The data will be erased as soon as they are no longer needed to meet the purpose of their collection.
As the applicant, you have the option at any time to object to the processing of your personal data.
We would point out that if an objection is lodged, it may be impossible to complete the application process or continue the conversation.
There is a contact form on our website which can be used to contact us electronically. If the user takes advantage of this option, the data entered in the input window are sent to us and stored.
As part of the transmission process, your consent is obtained to the processing of your data and reference made to this data protection notice.
Alternatively, you can contact us via the email address provided. In this case, the personal data of the user transmitted with the email will be stored.
The data will not be passed to third parties in this context. The data will be used exclusively for processing the conversation.
The legal basis for processing the data is given by Art. 6 (1) p. 1 (a) GDPR provided the user’s consent has been obtained.
The legal basis for processing data transmitted as part of the process of sending email, is given by Art. 6 (1) p. 1 (f) GDPR. If the purpose of making contact by email is to conclude a contract, Art 6 (1) p. 1 (b) constitutes a further legal basis for the processing.
The processing of personal data from the input window serves the sole purpose of processing the contact. In the event of contact by email, this also provides the required legitimate interest in processing the data.
Further personal data processed during the sending procedure serve to prevent any abuse of the contact form and ensure the security of our IT systems.
The data will be erased as soon as they are no longer needed to meet the purpose of their collection. As far as personal data from the input window of the contact form and data sent by email are concerned, this is the case when the particular conversation with the user has been completed. The conversation has been completed when it can be deduced from the circumstances that the matter in hand has been conclusively dealt with.
Any additional personal data collected during the sending procedure will be deleted after a period of seven days at the latest.
The user has the option at any time to revoke their consent to the processing of their personal data. If the user makes contact with us by email, they can object to the storage of their personal data at any time. In any such case, it will not be possible to continue the conversation.
We use the so-called "Facebook Pixel" of the social network Facebook, Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025 United States or if you reside in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. With this analytical tool, Facebook can define the users of our website as a target market for advertising.
The legal basis for the processing of personal data is given by Art. 6 (1) p. 1 (f) GDPR.
The use of a Facebook pixel serves to evaluate the effectiveness of Facebook advertising for statistical and market research purposes. This enables future advertising campaigns to be optimized.
We have no information on the length of storage.
The data collected remain anonymous for us. They are stored and processed by Facebook. There is a possibility that a connection can be established with your Facebook profile. Facebook can use these data for its own advertising purposes within the bounds of the Facebook Data Usage Policy. If you do not want Facebook to match use our website with your Facebook profile, please log out of your user account with Facebook. You can object to use of a Facebook pixel to record information and use of your data to show Facebook ads via the following link.
You can also object to use of the Facebook pixel through our opt-out link: Tracking via the Facebook pixel is activated on this website. Click here to deactivate tracking.
We use the plug-in of Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025 United States or if you reside in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. If this plug-in is activated, your browser will establish a connection with Facebook’s servers. In this way, Facebook learns that you are visiting our website with your IP address. Facebook also receives information on the date, time, type of browser and version, operating system and version as well as Facebook cookies already installed in the browser. From this, Facebook can see which websites you have visited with Facebook content. The plug-in is part of Facebook and is only displayed on our site. Any interaction with the plug-in constitutes interaction on “facebook.com”.
If you are logged onto Facebook, your Facebook registration number will also be transmitted when the plug-in is activated. This means a visit to our website can be associated with your Facebook account. Depending on the settings in your Facebook account, clicking on the plug-in will also be published on Facebook. You can prevent this by logging out of your Facebook account before activating the plug-in and deleting all Facebook cookies after visiting websites with Facebook plug ins.
The legal basis for the processing is given by Art. 6 (1) p. 1 (a) GDPR.
Facebook processes these data to identify errors in its own system, improve its own products and adapt them to user behavior and to monitor, place and personalize advertising. Processing also serves the processes of localizing content, recording the way in which websites with Facebook content are used and for market research.
According to Facebook, it stores the data for up to 90 days. Thereafter, they are only used in anonymized form.
You can find further information on the use and collection of data in Facebook’s data protection notice at: www.facebook.com/about/privacy .
We use Google AdWords on our website from Google Inc., 1600 Amphiteatre Parkway, Mountain View, CA 94043, United States. This is an online advertising program in which conversion tracking is used. If you reach our website via a Google advertizement, Google AdWords will place a cookie on your computer. Every Google AdWords customer is assigned a different cookie.
The legal basis for the processing is given by Art. 6 (1) p.1 (f) GDPR.
We are only given the total number of users who have responded to our ad. No information is passed on with which we might be able to identify you. We do not use it to track individuals.
You can prevent Google conversion tracking by deactivating the tracking mechanism in your browser. You can find more details at www.google.com/intl/de/policies/privacy.
We use Google Analytics on our website, a web analysis service from Google Inc., 1600 Amphiteatre Parkway, Mountain View, CA 94043, United States. ("Google") Google Analytics uses so-called "cookies", text files that are stored on your computer and facilitate analysis of your use of the website. The information generated by the cookies regarding your use of this website is transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be truncated beforehand within the area of Member States of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the whole IP address be transferred to a Google server in the USA and truncated there. IP anonymization is active on this website. Google will use this information on behalf of the operator of this website in order to evaluate your use of the website, compile reports on website activity and provide further services relating to use of the website and internet usage for the website operator. The IP address transmitted from your browser by Google Analytics is not combined with other Google data. You can prevent the storage of cookies by a corresponding setting in your browser software; however, we would like to point out that in this case you might not be able to use all functionalities of our website to their full extent.
The purpose of processing the personal data lies in the facility to personally address a target market that has already shown initial interest by visiting the site.
According to Google, it anonymizes advertising data in server logs by deleting parts of the IP address and cookie information after 9 and 18 months respectively.
In addition, you can prevent the registration of the data created by the cookie and related to your use of the website (including your IP address) at Google and the processing of this data by Google by downloading and installing the browser plug-in available on the following link.
You can find more details at www.google.com/intl/de/policies/privacy.
You can prevent Google Analytics from recording your data by clicking on the following link. An opt-out cookie is placed on your computer which prevents your data from being registered on future visits to this website: Deactivate Google Analytics.
The purpose of processing the personal data lies in the facility to personally address a target market. The cookies stored on your computer recognize you when you visit a website and can therefore show you advertising that matches your interests.
You can prevent the use of the remarketing function by modifying the settings in the following links. You can find more details at www.google.com/intl/de/policies/privacy.
We use the online map service Google Maps on our website from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States. By using Google Maps on our website, information on the use of our website, your IP address and addresses entered in the route plan function are sent to a Google server in the USA and stored there. By using our website, you agree to the processing of your data collected by Google Maps.
We know neither the purpose of collecting these data nor the use to which they are put by Google.
Plug-ins from the Instagram service are incorporated on our web pages. These are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. The integrated Instagram buttons are used by us to facilitate a link to our Instagram profile. A widget has also been integrated which permits us to show certain photos and videos from our Instagram profile on our website. When you visit a page of ours containing such a plug-in, your browser will establish a direct connection to an Instagram server. The contents of the plug-in are transferred by Instagram directly to your browser and incorporated in the website. Data are automatically transmitted to Instagram in the process and stored on their servers. The data transmitted include connection data (e.g. your IP address, date and time, the URL viewed) as well as the browser and operating system used. As a result, Instagram can track your visit to our website even if you are not actively using the plug-in functions. If you are logged in to your Instagram account, you can link the contents of our pages to your Instagram profile by clicking on the Instagram button. This means that Instagram can match the visit to our website to your user account. If you wish to suppress this direct identification, you must log out of Instagram before visiting our website. You can find further information in Instagram’s data protection guidelines.
The legal basis for processing users’ personal data is given by Art. 6 (1) p.1 (f) GDPR.
Please take information on the purpose of processing the personal data from Instagram’s data protection guidelines.
You can find further details on the following link.
Our website uses session cookies from VG-Wort, Verwertungsgesellschaft WORT Rechtsfähiger Verein kraft Verleihung, Untere Weidenstraße 5, 81543 Munich. When you use our website, a cookie is saved on your computer. The cookies are used to measure when articles are accessed.
This enables the probability that articles will be copied to be registered. The measurements are made by INFOnline GmbH (www.infonline.de) by means of a scalable central measuring procedure. No personal data are processed by means of cookies.
The legal basis for processing users’ personal data is given by Art. 6 (1) p.1 (c) GDPR in conjunction with Sections 53, 54 I of the Copyright Act (UrhG).
The use of session cookies from VG-Wort serves to establish the probability that individual articles will be copied in order to remunerate the statutory claims of authors and publishing houses.
If you do not wish the cookies to be stored, you can deactivate their storage in your browser.
You can find further information on the session cookies of VG-Wort at: www.vgwort.de/datenschutz.html.
We use the conversion tracking tool of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA on our website. A cookie from Microsoft Bing Ads is saved on your computer if you reach our website via a Microsoft Bing ad. We are only told the total number of users who have clicked on a Bing ad and were then relayed to the conversion page. No personal information on the identity of the user is divulged.
In this way, Microsoft Bing and we can recognize that someone has clicked on an ad, was transferred to our website and has reached a predetermined target page (conversion page).
The length of storage depends on the particular browser settings and is not in our control. If you do not wish information on your behavior to be used as explained above, you can refuse to have the cookie required for this purpose installed.
You can find further details on the following link. With the following link, you can deactivate usage by Microsoft (blacklisting).
We use the Google+ plug-in from Google Inc., 1600 Amphiteatre Parkway, Mountain View, CA 94043, United States. When you visit our website, your browser establishes a direct connection with Google’s servers. Information on your visit to the website is relayed to Google. We have no control over the content of the plug-in. If you are logged in to a user account at Google+ or Google during your visit, Google can match your visit to the website to this account. By interacting with this plug-in, this information is sent directly to Google and stored there. If you do not wish this data transmission, you must log out from your Google+ or Google account before visiting our website. We have no control over the scope and content of the data which Google collects via this button.
The legal basis for the processing is given by Art. 6 (1) p. 1 (fa GDPR.
Usage serves to improve and personalize Google’s product for you.
Google anonymizes advertising data in server logs by deleting parts of the IP address and cookie information after 9 and 18 months respectively.
You can find more details on the purpose and scope of data collection by Google+ at www.google.com/intl/de/policies/privacy.

References: Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 17
 Art. 6
 Art. 9
 Art. 9
 Art. 78
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6