Source: https://www.guidemonterosa.com/data-protection-agreement/
Timestamp: 2019-04-24 07:48:39+00:00

Document:
As operators of the website www.guidemonterosa.com we are responsible for the personal data of the user (“you”) of this website within the meaning of the applicable data protection law, in particular the General Data Protection Regulation (GDPR). In the following we inform you clearly in the context of our duty to inform (Art. 13 ff. GDPR) about which data is processed during your visit of our website and on what legal basis this is done. You will also receive information on how we protect your data from a technical and organisational point of view and what rights you have over us and the responsible supervisory authority.
As soon as you visit our website, so-called log files are processed by our system automatically.
The log files contain your IP address, but it is shortened before saving. Therefore an assignment to you is not possible and your data will not be stored together with other personal data. The processing of the above data is necessary for the provision of our website.
The legal basis for the processing of data for anonymisation purposes is Art. 6 (1) lit. f GDPR.
You have the possibility to contact us by e-mail. Your personal data transmitted in the e-mail will be stored by us. The data will not be passed on to third parties. The data will only be processed in order to process your contact. The legal basis for processing your personal data is Art. 6 (1) lit. f GDPR. The data will be stored until they are no longer necessary to achieve the purpose of the conversation with you and the purpose of your contact has been fully clarified.
If your e-mail is intended to conclude a contract with us, the additional legal basis for processing your personal data is Art. 6 (1) lit. b GDPR. These data are stored as long as they are necessary for the execution of the contract. In addition, we store your data only to meet contractual or legal obligations (e.g. tax obligations).
You can revoke your consent to the processing of your personal data at any time by sending an e-mail to info@guidemonterosa.com. In this case all personal data of the conversation will be deleted and a continuation of the conversation is not possible.
Should you send us questions via the contact form or the guest registration sheet we will collect the data entered on the form, including the contact details you provide, to answer your question and any follow-up questions. We do not share this information without your permission.
On our website we offer you the opportunity to subscribe to our newsletter free of charge. In addition to your declaration of consent, we need your e-mail address. By sending the newsletter registration you agree to the processing of your data by us.
Further information, e.g. your name, is voluntary and serves to contact you personally. The legal basis for sending the newsletter is Art. 6 (1) lit. b GDPR with regard to your e-mail address, because we provide our services to you in this way and Art. 6 (1) lit. a GDPR with regard to further data provided voluntarily.
We will not send you the newsletter until you confirm your registration by clicking on the appropriate link in a confirmation e-mail sent to you for this purpose. This is to ensure that only you can subscribe to the newsletter. Your confirmation must be sent shortly after receipt of the confirmation e-mail, otherwise your newsletter subscription will be automatically deleted from our database.
In addition, we store the time (date and time) of transmission of your data to us and your IP address within the scope of your newsletter registration. The processing of this data corresponds to our legitimate interest according to Art. 6 (1) lit. f GDPR in order to guarantee the security of our systems and to counteract misuse.
Your data will not be passed on to third parties and will only be processed in connection with the dispatch of newsletters. The purpose of processing your e-mail address is to be able to send you the newsletter. Further data within the registration process serve either to address you personally or to guarantee the security of our services and to prevent misuse of the e-mail address used.
Your data will only be stored for as long as is necessary to achieve the purpose. Your e-mail address will therefore be stored for the period of your active newsletter subscription if you have given your consent. The data that we additionally collect automatically during your registration (IP address, date and time) will be deleted at the latest when you cancel your newsletter subscription.
You can unsubscribe or cancel our newsletter at any time. You will find the link at the end of each newsletter. By doing so, you revoke your consent or object to further use of your data for the purpose of sending the newsletter.
If you provide your e-mail address when using our services, for example when making a purchase via our website, we may use it to send you our newsletter. This is done exclusively in the context of direct advertising for own or similar goods or services. The legal basis for sending newsletters in connection with the sale of goods or services is § 7 (3) UWG. If we send you a newsletter following an order on our website, we store your e-mail address for the purpose of advertising our own or similar goods or services until you unsubscribe from the newsletter.
As explained in this section, you can enable or restrict the transmission of cookies by changing the settings in your Internet browser. You can delete cookies that have already been saved by your Internet browser at any time. If cookies for our website are restricted or deactivated, it may be that not all functionalities can be used.
The analysis service Google Analytics of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (hereinafter: “Google Analytics”) is implemented on our website.
We use the function of Google Analytics to make your IP address anonymous before saving or processing. Your IP address is usually shortened within the European Union/EEA and only then transmitted to Google servers in the USA. Your information will be processed pseudonymously and we will not combine it with other personal data of yours.
We use the data collected in this way for statistical purposes in order to optimise our website and offers. The legal basis for this is Art. 6 (1) lit. f GDPR.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: https://policies.google.com/privacy?hl=de.
On our website we use small icons that refer to our website on platforms of third parties (Facebook, Instagram, Twitter, YouTube and Google+). These are hyperlinks, so no data from you is transferred automatically; only when you click on the icons and a new tab with the website of the third party provider opens in your browser.
We integrate videos from Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (hereinafter: “YouTube”) for the purpose of the appealing design of our website. We use the advanced privacy mode so that information about you is only shared with YouTube when you activate the video by clicking the video’s play button.
The legal basis for the processing of your data is Art. 88 GDPR.
When we process your data, you are “affected” within the meaning of the GDPR. You have the following rights: right to information, right to rectification, right to limitation of processing, right to cancellation, right to information and right to data transferability. In addition, you have a right of objection and a right of revocation.
If we transfer your data to an international organisation or to a third country, you also have the right to request information on whether suitable guarantees pursuant to Art. 46 GDPR exist in connection with the transfer.
You have the right to correct and/or complete the data that we have stored about you if this data is incorrect or incomplete. We will make the correction or completion without delay.
• You have lodged an objection to the processing pursuant to Art. 21 (1) GDPR, as long as it is not yet clear whether our justified reasons outweigh your interests.
• You object to the processing pursuant to Article 21 (1) GDPR and there are no overriding legitimate grounds for processing or you object to the processing pursuant to Article 21 (2) GDPR.
If you have exercised your right of rectification, deletion or restriction against us, we are obliged to inform all recipients to whom we have disclosed your personal data of the correction, deletion or restriction of the processing of your data, unless this proves impossible or involves a disproportionate effort.
You have the right to have us transfer your personal data directly to another person responsible, insofar as this is technically feasible and does not impair the freedoms and rights of other persons.
After an objection, we will no longer process your personal data unless we can prove compelling grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
You have the possibility to exercise your objection in connection with the use of Information Society services by means of automated procedures using technical specifications, notwithstanding Directive 2002/58/EC (Directive on privacy and electronic communications).
They shall have the right of appeal to a supervisory authority, without prejudice to any other administrative or judicial remedy. In particular, you may exercise your right of appeal in your Member State of residence, place of work or place of suspected infringement if you believe that the processing of your personal data is contrary to GDPR’s.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 § 7
 Art. 6
 Art. 88
 Art. 46
 Art. 21