Data protection information – Website

Dear website visitor,
we are pleased to inform you about how your personal data is processed when you visit our website. This information notice also explains which rights you may exercise as a data subject.
Your personal data is processed in accordance with EU Regulation 2016/679 (General Data Protection Regulation – GDPR) and the applicable national data protection legislation.
Use of this website requires your consent to this data protection information. If you do not agree, we kindly ask you to refrain from further use of the website.
Furthermore, we would like to inform you that links on our website leading to other websites have been carefully selected and reviewed by us. However, as these websites may be updated without our knowledge and their content may change at any time, we assume no liability or responsibility for their content.

Purpose of processing personal data

To ensure the functionality of the website and for statistical purposes, technical data with potential personal reference—such as the IP address, time of requests, domain name, and similar data—are processed. In addition, the website operator has a legitimate interest (Art. 6(1)(f) GDPR) in providing you with a visually appealing website and a pleasant user experience. Where consent has been given (Art. 6(1)(a) GDPR), user behavior may also be analyzed and used for marketing purposes.
The primary purpose of data processing is the provision of our website and its content, as well as the fulfillment of your inquiries.
Furthermore, personal data is processed in order to offer you various services:

Contact form

The website visitor can contact the company via the contact form. For this purpose, the personal data entered is processed in order to respond to the inquiry. Explicit consent to the processing of the data entered in the contact form is given.

Transfer of personal data of special categories

We kindly ask you not to transmit any sensitive data (personal data of special categories pursuant to Art. 9 and Art. 10 GDPR) via the website, for example through the contact form.

Legal basis for data processing

The main legal bases for processing are Art. 6(1)(b) GDPR (performance of pre-contractual and contractual measures) and Art. 6(1)(f) GDPR (functionality of the website), as well as any consent obtained from you, where applicable (Art. 6(1)(a) GDPR).

Cookies

Our website uses cookies, which may involve the processing of personal data.

Four categories of cookies are distinguished:

• Strictly necessary cookies – required for the basic functionality of the website.
• Functional cookies – ensure optimal performance of the website, including, for example, the storage of the selected language.
• Performance cookies – improve the user experience and process information about website usage, such as measuring loading times.
• Marketing cookies – collect information about user behavior and interests for marketing purposes, for example to display tailored advertising.

Non-essential cookies are disabled on our website by default and are only activated once you have given your consent.

Most of the cookies used are so-called “session cookies”, which are automatically deleted after the browser is closed. Other cookies are stored for a longer period of time, for example to display the correct language during the next visit to the website.
For all cookies that are not based on the legitimate interest of the website operator (Art. 6(1)(f) GDPR), your explicit consent will be requested.

You can delete your cookies at any time by opening your browser settings. Depending on the browser you use, this is usually done by clicking on the three dots or lines in the top right corner, opening the settings, entering “cookies” in the search field, and selecting the option to delete cookies or browser data.

Provision of Data

The provision of your data is voluntary (with the exception of the processing of navigation data) and is not required by law. However, failure to provide such data may result in limited use of the website and the services offered.

Disclosure of Data to Third Parties

Your data may be disclosed to third parties where necessary, but only within the scope of our business relationship, for example to process your request or, where applicable, to carry out payments via third parties and to comply with legal obligations. As a general rule, your data will not be transferred to countries outside the European Union without your explicit consent. The same applies to the use of profiling and automated decision-making.

Website Hosting

This website is hosted by an external service provider. For this purpose, the external hosting provider receives personal data that has been collected on the website.
The legal basis for the processing is Art. 6(1)(b) GDPR (pre-contractual and contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in ensuring the smooth and secure operation of the tools provided on our website).

Google Services

Our website uses services provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
In this context, Google may process information and personal data. Please note that, under certain circumstances, U.S. authorities may theoretically gain access to such data on the basis of U.S. legislation (in particular the Cloud Act). Information on the legal framework for data transfers can be found at:
https://policies.google.com/privacy/frameworks

Google Tag Manager (with consent)

Our website uses Google Tag Manager. The service provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager allows tracking codes to be integrated more easily and enables website operators to make changes that are automatically applied to the website without modifying the source code.
Google Tag Manager may communicate with Google Tag Manager servers. In this process, personal data may be processed when a tag is triggered (e.g. the IP address).
Before Google Tag Manager is activated, you will be expressly asked for your consent.
The legal basis for the processing is Art. 6(1)(a) GDPR.
Further information is available at:
https://policies.google.com/privacy

Web Analytics with Google Analytics (with consent)

Our website uses functions of the web analytics service Google Analytics. The service provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
The information generated by cookies about your use of the website (including your IP address) may be transmitted to a Google server in the United States and stored there. The full information notice can be found in Google’s privacy policy at:
https://support.google.com/analytics/answer/6004245
We use Google Analytics as an analysis tool to monitor the performance of our website, analyze user behavior, and take appropriate measures.
Before Google Analytics is activated, you will be expressly asked for your consent.
The legal basis for the processing is Art. 6(1)(a) GDPR.
You can also prevent the collection and processing of data by Google as described above by downloading and installing the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout

Google Maps

This website uses the Google Maps API, a mapping service provided by Google Inc. (“Google”), to display interactive maps and to create directions.
Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
By using Google Maps, it cannot be ruled out that information about your use of this website (including your IP address) may be transmitted to a Google server in the United States and stored there. Google may transfer the information obtained through Google Maps to third parties where required by law or where such third parties process the data on behalf of Google.
It is technically possible that Google may identify individual users on the basis of the data received. It is also possible that personal data and user profiles of website visitors may be processed by Google for other purposes over which we have no influence and cannot have any influence.
You may deactivate the Google Maps service at any time and thus prevent the transfer of data to Google by disabling JavaScript in your browser. Please note that in this case the map display on our website cannot be used.
The terms of use for Google Maps can be found at:
https://www.google.com/intl/de_de/help/terms_maps.html
Google’s privacy policy is available at:
https://policies.google.com/privacy

YouTube

We use social plugins from the Google-operated platform YouTube.
The operator of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
When you visit a page of our website that includes a YouTube plugin, a connection to YouTube’s servers is established. In this process, the YouTube server is informed that you have visited our website, and user statistics may be created, for example by means of cookies.
If you are logged into your YouTube account, YouTube may associate your visit to our website with your personal user account. You can prevent this by logging out of your YouTube account.
Further information on how YouTube processes user data can be found in YouTube’s privacy policy at:
https://www.google.de/intl/de/policies/privacy

Facebook Pixel (with consent)

Our website uses the so-called Facebook Pixel of the social network Facebook, operated by Facebook Inc. or, if you are located in the European Union, by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
When you visit our website, Facebook Pixel establishes a direct connection to Facebook’s servers. In this process, information is transmitted to Facebook indicating that you have visited this website, and Facebook may associate this information with your personal Facebook user account. This allows us to analyze the effectiveness of advertising campaigns.
It cannot be ruled out that information may be transferred to servers located outside the European Union.
If you give your consent to the use of Facebook Pixel, Facebook will integrate the pixel and store a cookie on your device as described above. When logging into Facebook, the visited offers are recorded in your profile. The data is anonymized for us; however, Facebook may process this data.
Further information on the collection and use of data by Facebook, as well as your rights and options for protecting your privacy, can be found in Facebook’s privacy policy at:
https://www.facebook.com/business/m/privacy-and-data
Before Facebook Pixel is activated, you will be expressly asked for your consent.
The legal basis for the processing is Art. 6(1)(a) GDPR.

SSL Encryption

This website uses SSL encryption to ensure secure data transmission, for example for inquiries submitted via contact forms. An active SSL encryption serves to encrypt the data that you transmit to us during transmission.

Minors

This website is not intended for use by minors. Therefore, we do not knowingly collect or store personal data of minor visitors (except in cases of unintentional collection).

Data Retention Period

Your personal data is stored in accordance with the statutory retention obligations and legal requirements applicable to us.

Information on the Rights of Data Subjects

The data subject has the right to obtain confirmation from the controller as to whether or not personal data concerning them is being processed. Where this is the case, the data subject has the right of access to such personal data and to the information listed in detail in Art. 15 GDPR.
The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning them and, where applicable, the completion of incomplete personal data (Art. 16 GDPR).

The data subject has the right to obtain from the controller the erasure without undue delay of personal data concerning them where one of the grounds listed in Art. 17 GDPR applies, for example where the personal data is no longer necessary for the purposes for which it was originally collected or otherwise processed (right to erasure).
The data subject has the right to obtain from the controller the restriction of processing where one of the conditions set out in Art. 18 GDPR applies, for example where the data subject has objected to the processing.

The data subject has the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used and machine-readable format, and has the right to transmit those data to another controller without hindrance from the controller to which the personal data has been provided, under certain conditions, for example where the processing is based on consent and the processing is carried out by automated means (right to data portability pursuant to Art. 20 GDPR).
The data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims (Art. 21 GDPR).

Right to lodge a complaint

Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or the place of the alleged infringement, if the data subject considers that the processing of personal data relating to them infringes the GDPR (Art. 77 GDPR).
In Italy, the competent supervisory authority is:
Garante per la protezione dei dati personali

Südtirol Guest Pass

Purpose

The transmitted personal data is forwarded to the central coordination office of the Guest Pass in order to enable the issuance and use of the Guest Pass and to provide the related services.

Recipients

In connection with the issuance of the Guest Pass, your personal data is transmitted to the Mobility Consortium, VAT No. 02735170215, which, as the Guest Card holder and central coordination office, acts as an independent data controller for the processing of the transmitted data.
For further information on the processing of personal data, you may contact the consortium by email at: [email protected]

Legal Basis

The legal basis for the processing of personal data is Art. 6(1)(b) GDPR.