Source: https://www.pensionwidmann.com/en/data-protection
Timestamp: 2019-04-18 14:26:34+00:00

Document:
Declaration issued pursuant to art. 13 of EU Regulation 2016/679 enacted by the European Parliament and by the Council on 27 April, 2016 relative to the protection of natural persons as regards the processing of personal data and the free movement of such data, which also supersedes directive 95/46/EC (General Data Protection Regulation).
The controller of the data processing is Jürgen Widmann, Pension Widmann, Stulles 7/a, 39013 Moso in Passiria, Alto Adige – Italy, tel. +39 0473 649514, e-mail: info@pensionwidmann.com, internet: www.pensionwidmann.com.
- data relative to you as an individual (surname, name, address, e-mail, telephone number, telefax number, date of birth), as well as language and vehicle license plate number.
- data relative to the methods of payment or relating to payments (e.g. banking information, details of credit cards).
- date of arrival and duration of visit.
- data relative to access, utilization and communication.
Special categories of data include data relative to health care and to special personal needs.
- data regarding access, utilization and communication, which are processed for security reasons and to guarantee correct functioning of the Internet page.
- for legitimate interests (art. 6, section 1, para. f) of the RGPD).
Special categories of personal data are not processed on our internet page.
Your consent is necessary if special categories of personal data are processed during the course of your visit to the Pensione Widmann.
It is necessary to enter your personal data on the booking form included in our web site in order to make a booking and to make use of the contractual services. The travel data marked with an asterisk must be entered when booking your stay.
We utilize a payment platform which guarantees the security of any payments made using your credit card.
When you elect to pay the deposit by bank transfer, additional personal data such as the name of the account-holder and bank coordinates, too, will be processed.
Indication of the data relative to the invoice is not obligatory, but is necessary for issuing an invoice.
The legal ground for the processing of personal data is compliance with the law and fulfilment of pre-contractual and contractual obligations.
The period for which the data will be stored is in accordance with the obligations for the storage of data and the requirements of the law; your personal data provided for the purposes of booking will be stored only for the period strictly necessary for processing.
Data processed subject to your consent will be stored until you withdraw such consent.
The indication of your personal data on the relative request form included in our internet page is necessary for your request and to allow you to make use of the pre-contractual and contractual services. The travel data marked with an asterisk must be entered when entering a request.
The period for which the data will be stored is in accordance with the obligations for the storage of data and the requirements of the law; your personal data provided for the purposes of your request will be stored only for the period strictly necessary for processing.
Indication of your personal data for the sending by the hotel of information, special offers and newsletters is not obligatory. If you do not submit your personal data, you will not receive special offers and newsletters.
Personal data provided in order to receive information, special offers and newsletters will be processed only with your consent, and will be stored until you withdraw such consent.
These cookies are stored on the user’s device only during the current session and are designed to ensure that the website can be used correctly. Analytical cookies, used to collect access statistics, are considered to be technical cookies. They collect general information without identifying the user.
These cookies are used to track the user’s browsing behaviour, including their preferences, habits, etc. In this way, the user can be sent advertising messages tied to the products previously viewed or similar to these.
These are cookies of other websites.
We use technical cookies, and third-party cookies on this website.
When the web page is accessed, data are automatically identified and stored in the archives of the server log. In this case, these data include: IP address, browser and browser version, operating system, time of access and quantity of data transferred.
Our web page also utilizes the functions provided by the web analysis service of Google Analytics developed by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA in order to optimise our online service. To this end, the data may be transferred to third countries. The Privacy Shield framework, which has certified Google, ensures that the protection of personal data is in compliance with European laws.
We utilize the maps provided by Google's mapping service "Google Maps". The data processed may include the user's IP address and position, though these will not be identified without your consent (check the settings on your mobile device).
SSL protocol (Secure Sockets Layer): In order to guarantee the security of your data during transmission, we use state-of-the-art coding procedures via https.
Data regarding access, utilization and communication are stored and processed for reasons of security and to ensure the correct operation of the internet page. The legal ground is the pursuit of the legitimate interests in accordance with art. 6, section 1, para. f) of the RGPD.
We are present on the social networks with the purpose of providing information to and communicating with clients and potential clients. As a result, the user's data may also be processed outside the European Union. However, a European Union adequacy decision is in place as set forth in art. 45 of the RGPD which provides adequate guarantees relative to the transfer of data in accordance with art. 46 of the RGPD.
The legal ground for the processing of the data relative to your visit to our social media platforms is the pursuit of legitimate interests in accordance with art. 6, section 1, para. f) of the RGPD.
To this end, we maintain sites on both facebook and instagram.
- IT specialist for the remote maintenance of the hotel programme.
Right of access: as set forth in art. 15 of the RGPD, you shall have the right to be informed of the personal data processed, the source and nature of the data, the transfer of the data (if any) and the recipient, and the manner in which the data are utilized.
Right of rectification and erasure: as set forth in art. 16 of the RGPD, you may at any time request the rectification or completion of your personal data. Similarly, as set forth in art. 17 of the RGPD, you may request the erasure of your personal data. In the case of published data, you shall also enjoy the "right to be forgotten", in other words request the enactment of the measures necessary to delete all the links, copies, replications etc.
Right to object: you may at any time exercise the right to object as set forth in art. 21 of the RGPD and modify or entirely withdraw your consent to any future processing.
Right to restriction (or cessation) of the processing: as set forth in art. 18 of the RGPD, you may also require that the processing of your personal data be restricted. In this case, the data may be processed only subject to specific consent, therefore the processing of the data will be effectively restricted.
Right to data portability: as set forth in art. 20 of the RGPD, you shall enjoy the right to receive the data provided by you in a structured, commonly-used and machine-readable format, and may also require the transmission of said data to a different Data Processor.
As set forth in art. 77 of the RGPD, you shall enjoy the right to lodge a complaint with a supervisory authority.

References: art. 13
 art. 6
 art. 45
 art. 46
 art. 6
 art. 15
 art. 16
 art. 17
 art. 21
 art. 18
 art. 20
 art. 77