Privacy Policy

This is the data privacy statement (“Privacy”) of the website www.harrerhof.eu, which is operated and provided. We will process the personal data collected on this website solely as set out in this declaration. Further down we will inform you on how we will process your personal data, at which purpose we process them, with whom they will be shared and which rights of control and information you are entitled of.

Notice concerning the party responsible for this website
The party responsible for processing data on this website is:

Harrerhof

Siegfried Mutschlechner
Wielenberg 9
I-39030 Percha / Südtirol
Tel.: +39 0474 401191
E-Mail: info@harrerhof.eu
PEC Mail: mutschlechner.sigi@secure-pec.it
VAT no.: IT02325800213

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (names, email addresses, etc.).

I. Summary of our processing activities

The following summary provides you with a quick overview of the processing activities that are undertaken on our website. You will find more detailed information in the indicated sections further down.

  • When you visit our website for informational reasons without setting up an account, only limited personal data will be processed to provide you with the website itself (see section III).
  • If you are interested in our services (i.e. offers, bookings etc.) or subscribe to our newsletter, personal data will be processed within this framework (see IV and V).
  • Furthermore, your personal data will be used for interesting advertising and products (see VI) as well as for statistical analysis in order to improve our website (see VII).
  • If necessary, your personal data will be disclosed to third parties (see VIII).
  • We have implemented appropriate safeguards to secure your personal data (see section IX) and retain your personal data only as long as necessary (see section XI).
  • According to the circumstances of the concrete case, you are entitled to specific rights in relation to the processing of your personal data (see XI).

II. Definitions

  • Personal data means any information relating to a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, or an online identifier.
  • Processing means any operation which is performed on personal data, such as collection, recording, organisation, structuring, storage, adaptation or any kind of disclosure or other use.

III. Informational use of the website
When you visit our website for informational reasons, i.e. without applying for a one of the services cited in section IV and without providing us with personal data in any other way we will, if necessary, automatically collect additional information about you which only in limited cases contain your personal data and are automatically recorded by our server such as:

  • your device type, device name and screen resolution information
  • on your browser version
  • information on your operating system, including language settings
  • date and time of your requests
  • information on your requests

We use such information only to assist us in providing an effective service (e.g. to adapt our website to the needs of your device or to allow you to log in to our website), and to collect broad demographic information for an anonymised statistic about the use of our Website. The personal data automatically collected is necessary for us to provide the website, Article 6 sec. 1 sent. 1 lit. b GDPR, and for our legitimate interest to guarantee the website’s stability and security, Article 6 sec. 1 sent. 1 lit. f GDPR. Personal data that is collected automatically is stored one month and properly erased afterwards.

IV. Applying for our services
Our website provides you with the possibility to request offers, catalogues and the subscription to newsletters or general requests. In order to make use of the services mentioned above, you need to submit personal data. We process:

  • information such as your name, address and e-mail address you provide when contacting us

Information required for us to provide the service are marked accordingly. All further data are given freely. We process the personal data provided by you for the following purposes:

  • provide you with the services and information offered by the website or which you request
  • to communicate with you
  • (behavioral-based) advertising and profiling

The legal basis for this processing is Article 6 sec. 1 sent. 1 lit. b GDPR. We use your personal data for the purpose of behaviour-based adverstising and profiling for we have a legitimate interest to improve your user experience, Article 6 sec. 1 sent. 1 lit. f GDPR. We process the data provided by you on your registration in order to directly inform you about our other products and services. The use of your personal data to promote similar products and services in the framework of direct mailing poses a legitimate interest of us being the provider of this website, Article 6 sec. 1 sent. 1 lit. f GDPR. You may object at any time to the processing of your personal data for the purpose of direct mailing. We will withdraw from further processing for these purposes. You can send us your objection via e-mail.

V. Newsletter
If you would like to receive our newsletter, we require a valid e-mail address. This newsletter informs you about our newest products and services should you agree to receive this newsletter. The legal basis for the processing operation is Art. 6 paragraph 1 section 1 lit. a of the GDPR. The service is provided by the “Double Opt In” procedure. You will receive an e-mail containing a link with which you can confirm that you are the owner of this e-mail address and that you want to be informed by our e-mail service. If you do not confirm the subscription to our e-mail service after requesting the confirmation mail, the personal data provided by you will not be processed but automatically disabled and deleted in the course of the next data examination (generally within a week). You may unsubscribe from our newsletter by clicking the link included in every newsletter.

VI. Automatised decision making
We do not process your personal data for automised decision making which take legal effects with respect to you or significantly comprise you in similar ways.

VII. Analysis
General information on analysis
For statistical analyses we use web analytics services to collect information about the use of this site. The tools collect information such as

  • device and browser information (device type, operating system information, browser version)
  • IP address
  • pages accessed, URL click stream (the chronological order of our internet sites you visited)
  • geographic location
  • date and time of visit
  • referring site, application, or service

We use the information we get from the providers only to determine the most useful information you are looking for, and to improve and optimise this website. We do not combine the information collected through the use of the analytical tools with personal data. According to the provider, the data generated by your use of the website may possibly be stored in a state outside the European Economic Area (EEA) and processed there, i.e. in the United States. Further information on the possible risks of a trans-border data transmission can be found in section XII. The tools collect only the IP address assigned to you on the date you visit this site, rather than your name or any other identifying information. The provider will use this information in order to evaluate your use of the website, to compile reports on website activities and to provide other services relating to website and internet use to us. The legal basis for this processing is Art. 6 sec. 1 sent. 1 lit. f GDPR and represents our legitimate interest to analyse our website’s traffic to improve the user’s experience and to optimise the website in general.

Google Analytics
We use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). On our behalf Google will use the information generated by a cookie for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet activity in connection with the use of the website. We have activated the IP anonymisation within the Google Analytics service, and your IP address will be truncated within the area of member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases the whole IP address will be first transferred to a Google server in the USA and truncated there. The IP-address your browser conveys within the scope of Google Analytics will not be associated with any other data held by Google. You may refuse the use of such cookies as follows:

  • by selecting the appropriate settings on your browser that prevent the setting of cookies by third parties (however, please note that if you do this you may not be able to use the full functionality of this website)
  • you may prevent the collection of the information generated by the cookie about your use of the website (including your IP address) and the processing of this data by Google if you download and install the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout

For further information on data protection and Google Analytics see the Google website: http://www.google.com/analytics/learn/privacy.html?hl=en

Privacy police for the using of Facebook plugins (Like button)
Our websites contain plugins of the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA. The Facebook plugins are made clearly visible on our website through the use of the add-on “Like” button. In the following link you will find a list of all Facebook plugins: http://developers.facebook.com/docs/plugins/. When you visit our websites, the plugin will establish a direct link between your browser and the Facebook servers. Information concerning your visit to our website will be passed to Facebook. When you click the “Like” button while logged in your Facebook account, you can link the contents of our sites on your Facebook profile. That’s how Facebook can assign your visit to our websites to your user account. Please note that we as supplier of the websites have no knowledge of the data transferred nor its use by Facebook. Please refer to Facebook’s privacy policy (https://www.facebook.com/privacy) for more information on: the purpose and scope of data collection and data analysis undertaken by Facebook. If you do not wish that Facebook links your visit to our websites with your Facebook account, please make sure you are logged out from your account when visiting our websites. For further information please refer to the Facebook cookie policy: https://www.facebook.com/about/privacy/cookies

Google Maps
For a simplified research of the position and a better description of the accessibility of the location in question and based on the law in force related to the legitimate interest, on this homepage interactive maps of Google Maps owned by Google Ireland Limeted (“Google”) with registered office in Gordon House, Barrow Street, Dublin 4, Irland are used. A contract with Google authorizes us to evaluate the information. As soon as the website is visited it connects to a server of the corporation Google, which is situated partly in the USA and sends data to this server. Google, using cookies, saves several information about the user of the website as well as information about his behavior as user. As informed by Google, these data will be analysed and used to edit reports concerning the use of websites. The aim is to increase the visit of the homepage and the associated services. Google reserves itself the right to send acquired information to third party in case of legal obligation. More detailed information about the treatment of the user data on Google Maps can be found on https://www.google.com/intl/en_en/help/terms_maps/. Visit the website https://policies.google.com/privacy?hl=en to find all information about the general data privacy statement. To read more about the treatment of the privacy in matters of Google publicity visit the website https://policies.google.com/technologies/ads.

VIII. Transfer of Personal Data to Third Parties
Your personal data may be disclosed to contractors who assist us in providing our services. The data transfer takes place based on order processing agreements. Our contractors will use your personal information to the extent necessary to perform their duties. You are obliged contractually to process your personal data exclusively in your interest and according to your requests. In the event of restructuring or sale of our company to a third party, any personal data we hold about you may be transferred to that re-organised entity or third party in compliance with applicable law. We may disclose your personal data if legally entitled or required to do so (for example if required by law or by a court order).

IX. Security
We have reasonable state-of-the-art security measures in place to protect against the loss, misuse and alteration of personal data under our control. Our security and privacy policies are periodically reviewed and enhanced as necessary and only authorised personnel have access to personal data. Whilst we cannot ensure or guarantee that loss, misuse or alteration of information will never occur, we use reasonable efforts to prevent it. You should bear in mind that submission of information over the internet is never entirely secure. We cannot guarantee the security of information you submit via our website whilst it is in transit over the internet and any such submission is at your own risk.

X. Data retention
We strive to keep our processing activities with respect to your personal data as limited as possible. In the absence of specific retention periods set out in this policy, your personal data will be retained only for as long as we need it to fulfil the purpose for which we have collected it and, if applicable, as long as required by statutory retention requirements.

XI. Your rights
Depending on the circumstances in the specific case, you have the following data protection rights:

  • to request access to your personal data and/or copy of such data. That includes information about the purpose of use, the category of the used data, their recipients and persons authorised to access them, and, where possible, the planned duration of data storage or, if this is not possible, the criteria for establishing this duration;
  • to request that your personal data be corrected, deleted, or restricted in terms of processing if their use is impermissible under data protection law, particularly because (i) the data are incomplete or inaccurate, (ii) they are no longer needed for the purposes for which they were collected, (iii) the consent to processing was revoked, or (iv) you successfully made use of a right of revocation concerning data processing; in cases where the data are processed by third parties, we will forward your applications for correction, deletion, or restriction in terms of processing to such third parties unless this proves to be impossible or is associated with unreasonable effort;
    refuse to provide and – without impact to data processing activities that have taken place before such withdrawal – withdraw your consent to processing of your personal data at any time;
  • not to be subjected to a decision based exclusively on automated processing that is legally effective against you or substantially interferes with you in a similar fashion;
  • to request that you be provided with the personal data concerning you that you provided to us in a structured, common, and machine-readable format and to transmit such data to another data controller without interference by us; you may also have the right to request that we transmit the personal data directly to another data controller, if this is technically feasible;
  • to take legal steps or to request the involvement of the responsible supervisory authorities if you believe that your rights were infringed as a result of your personal data being processed in a manner that is not in conformity with the requirements of data protection law.

In addition to the foregoing, you have the right to object at any time to the processing of your personal data:

  • if we process your personal data for purposes of direct marketing; or
  • if we process your personal data for the purposes of pursuing our legitimate interests and reasons exist that result from your special situation.

You may (i) exercise the rights referred to above or (ii) pose any questions or (iii) make any complaints regarding our data processing by contacting us. You will find our contact details further down.

XII. Cookies
To facilitate the use of the homepage for the website-visitor and to raise its efficiency this website uses cookies. Cookies are small data files in textual form. Every time a user visits a homepage cookies are placed on the computer of the user. All information are saved so that at a second visit of the homepage these information can be analyzed. The process here described is important, because of the collect of essential information about the behavior of the user, the frequency of the homepage visit, the different pages and undersites of interest. If you want to get more information about the issue “Cookies” please visit the site http://de.wikipedia.org/wiki/HTTP-Cookie. You find all information about the application of cookies on www.AboutCookies.org.

Indispensible cookies
Some cookies are indispensable elements. They are necessary for reservation and inquiry purposes in digital form but also for the general functionality of the homepage. As basic data files in textual form they allow the virtual access to several services on the website mainly concerning reservations and requests.

Used cookies on this website
The italian law concerning the protection of the privacy n° 229/2014 informs the user about the application of cookies on the visited homepage. The applied cookies can be found in the list below, so that the user can search them in the browser:

Website:

Name Type Description Duration
PHPSESSID 2 Internal use of the server to identify the user session Session


Wordpress:

Name Type Description Duration
botdlang 1 Is used to save the user-selected language in which popular blogs should be displayed 24 hours
resolution 1 Width of the monitor and the ratio between physical and device-independent pixels for optimized display of the website End session
twostep_auth 2 Is set if the user is logged in via two-stage authentication End session
cookietest 2 Checks if cookies are enabled to choose the appropriate user interface End session


Google Analytics

For analytic purposes concerning the behavior of the user visiting the website Google Analytics uses cookies. The application of cookies on our website follows the aim to get information in order to be able to write reports and to increase the quality of the homepage. Anonymity is highly relevant for us. The obtained information refer for example to the number of users, the localization of the original site that lead the user to our homepage and information about the pages visited most.

Name Type Description Duration
_ga 3 Used to differentiate users. 2 years
_gat 3 This cookie is used by Google Analytics to reduce the request rate. 1 minute
__gid 3 Used to differentiate users. 1 minute
_gac_ 3 Contains campaign-related information for the user. If you’ve linked your Google Analytics and Google Ads accounts, this cookie will be read by Google Ads website conversion tags unless you sign out. 90 days
__utma 3 Used to differentiate users and sessions. The cookie is created when the javascript library is run and there are no __utma cookies. The cookie is updated each time data is sent to Google Analytics. 2 years
__utmt 3 Used to throttle the request rate. 10 minutes
__utmb 3 Used to determine new sessions / visits. The cookie is created when the javascript library is run and there are no __utmb cookies. The cookie is updated each time data is sent to Google Analytics. 30 minutes
__utmz 3 Stores the traffic source or campaign that shows how the user came to your site. The cookie is created when the javascript library is run and updated each time data is sent to Google Analytics. 6 months
__utmv 3 Used to store custom variable data at the visitor level. This cookie is created when a developer uses the _setCustomVar method with a visitor-level custom variable. This cookie was also used for the deprecated _setVar method. The cookie is updated each time data is sent to Google Analytics. 2 years


Holidaycheck

Name Type Description Duration
hc_agent, hcweb_branch, mobile_detected, hcweb 2 Used to display the HolidayChek Widget End session – 3 months


Tripadvisor

Name Type Description Duration
ServerPool, TACds, TASession, TATravelInfo, TAUD, TAUnique, TASSK, PCM, SRT, TART, 2 Used to display the Tripadvisor widget End session – 2 years

Type 1: Functional Cookies: Created by the site itself
Type 2: Technical Cookies: Automatically created by the application server to manage the session.
Type 3: Analytical Cookies: Create cookies using the messaging code in the manner of Google Analytics.

Deactivation of Cookies
If the user wishes to refuse the use of some or all cookies, the user has to adjust the corresponding settings on the browser used. The description can be found on the links below (depending on the browser used):

XIII. Amendments to this privacy policy
We reserve the right to change this privacy policy from time to time by updating our website respectively. Please visit the website regularly and check our respectively current privacy policy. This policy was last updated on 16 May 2018.