Effective Date of the Privacy Policy GDPR 2016/679: 25.05.2018.

Data Protection Disclosure and Cookie Policy

The Apartment Sella*** with registered office in 39040 Seis am Schlern, (hereinafter referred to as “the Controller”) is always committed to protecting the online privacy of its users. This document has been drafted in accordance with Art. 13 of EU Regulation 2016/679 (hereinafter referred to as “Regulation”), so that you can get to know our privacy policy and understand how your personal information is treated when using our website and, if necessary, to explicitly and consciously grant your consent to the processing of your personal data (valid only for persons aged at least 16 years). The information and data provided by you or otherwise acquired by us during the use of our services on the website (hereinafter referred to as “Services”) will be processed in accordance with the provisions of the Regulation and the confidentiality obligations that influence the operation of the business.

According to the provisions of the Regulation, the processing carried out by Lageder Sonja Apartment Sella *** is based on the principles of lawfulness, processing in good faith, transparency, purpose limitation, storage limitation, data minimization, accuracy, integrity, and confidentiality.

1. 1. The Controller

The Controller for the processing operations carried out on the website is Apartment Sella *** (data see above/imprint). For information about the processing of personal data by the Controller, including the list of processors commissioned to process the data, please write to the following address: info@apartment-sella.com

2. The personal data subject to processing

We inform you that due to your navigation on the website, the Controller will process personal data, which may consist of an identifier such as your name, an identification number, an online identifier, a postal address, an email address, a telephone number (landline and/or mobile) or one or more elements of your physical, physiological, psychological, economic, cultural, or social identity, in order to make the data subject identified or identifiable (hereinafter referred to as “personal data”).

The personal data processed via the website are the following:

Navigation data

The computer systems and software procedures used to operate the website acquire, during their normal operation, some personal data whose transmission is implicit in the communication protocols of the Internet. This information is not collected to be associated with identified data subjects, but by its nature, through processing and linking with data of third parties, could allow users to be identified. This category of data includes IP addresses or domain names of computers used by users connecting to the website, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the response from the server (successful, error, etc.) and other parameters relating to the operating system and the computer environment. This data is used solely for the purpose of obtaining anonymous statistical information on the use of the website and to check its correct functioning, to detect anomalies and/or abuse, and is deleted immediately after processing. The data may be used to ascertain liability in the event of hypothetical computer crimes against the website or third parties. Apart from this possibility, the data collected on the website is deleted after a short time.

Special categories of personal data

If you use our website to contact us (or send an email to us), this could result in a transmission of your personal data falling under the special categories of personal data pursuant to Art. 9 of the Regulation, literally the “[...] personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the [...] genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation.” Please do not publish this data unless it is absolutely necessary. We explicitly point out to you that with regard to the transmission of special categories of personal data, but in the absence of explicit consent to the processing of this data (you are of course allowed to send a curriculum vitae), the Controller can neither be held responsible nor receive reproaches of any kind, since in this case the processing is permitted because it relates to data which are manifestly made public by the data subject, in accordance with Art. 9(1)e of the Regulation. However, we point out that it is important, as already mentioned above, to grant explicit consent to the processing of special categories of personal data if you decide to transmit this information.

We also inform you that for the purpose of applicant selection, the Controller may analyze social profiles that are freely accessible on the Internet for professional purposes (e.g., LinkedIn).

Data voluntarily provided by the data subject

When you use certain services on the website (e.g., the inquiry, contact, or reservation form), we may process personal data of third parties that you send to the data controller. In these cases, you are the controller for the data processing, who assumes all legal obligations and liabilities. In this sense, you give us the greatest possible indemnification with respect to any reproach, claims, damage claims resulting from the processing, etc., which the Controller may receive from third parties whose personal data were processed through the use of the functions of the website in violation of the applicable regulations on the protection of personal data. If, in the course of using the website, you provide or otherwise process personal data of third parties, you guarantee in any case that this specific case of processing is based on an appropriate legal basis pursuant to Art. 6 of the Regulation, which legitimizes the processing of the information concerned.

Cookies

General information about cookies

Cookies are small text files that are stored by a website and with the help of the browser on the hard drive of a client computer in order to save smaller amounts of information of the website for a certain period of time. Generally, there are various types of cookies. Some are essential for the functioning of the website, such as navigation or shopping cart cookies. Furthermore, there are so-called analytics cookies, which collect information – e.g., about the number of website visitors and the path of visitors to the website. Functional cookies enable the website to remember choices you have made (e.g., selected filter settings or automatic language pre-setting of a website).

In addition, there are cookies, so-called profiling cookies, which record preferences and actions of the user. Based on this information, a user profile is created. This serves to combine advertising messages with the interests of the users and thus enables more target group-oriented advertising. In many cases, these are cookies from third-party providers that the website operator uses to broadcast personalized advertising.

Requirement of consent for cookies

Website visitors must actively consent to the setting of cookies that are not essential for the functionality of the website and also have the right to withdraw their consent at any time.

This website uses exclusively technical cookies for which no consent is necessary.

Block cookies via browser settings

Firefox:

Click on the menu and on Settings.

Go to the Privacy tab.

In the "History" section, under "Firefox will:", select "Use custom settings for history".

In the options that now appear, uncheck "Accept cookies".

Click the "OK" button.

Detailed information on this can be found at: https://support.mozilla.org/de/kb/Cookies-blockieren

Google Chrome

Click on the menu and on Settings.

Click at the very bottom on "Show advanced settings".

In the "Privacy" section, click on "Content settings…".

In the Cookies section, select "Block sites from setting any data".

Click the "Done" button.

Detailed information on this can be found at: https://support.google.com/chrome/answer/95647?hl=de

Internet Explorer

Under the menu item "Tools", open the "Internet Options" or if the menu bar is not displayed, click on the menu icon and on "Internet Options".

Click on the "Privacy" tab.

Using the slider, you can decide between several levels of cookie processing. If the slider is at the very top, all cookies are blocked; if it is at the very bottom, all are allowed.

Click the "OK" button.

Detailed information on this can be found at: https://windows.microsoft.com/de-de/windows7/block-enable-or-allow-cookies

Safari

In the settings, click on "Privacy".

In the "Accept cookies" section, you can specify whether and when Safari should save cookies from websites. For further information, click on the Help button (indicated by a question mark).

Detailed information on this can be found at: https://support.apple.com/kb/PH5042?locale=en_US

3. Purpose of processing

The processing that we want to carry out (where necessary) with your explicit consent has the following purposes:

To enable the provision of the services requested by you

To respond to customer service requests, information inquiries, or reservations

Analysis of curricula vitae and contacting applicants who have submitted their applications

To fulfill all legal, accounting, and tax obligations

Marketing purposes: The data provided can be processed, subject to prior explicit and specific consent, for sending advertising and marketing communications, including sending newsletters and market research surveys, with automated (SMS, MMS, email, push notifications) and non-automated (postal, call center) systems. The legal basis for processing your data for these purposes is Art. 6 paragraph 1 letter a) of the Regulation. Consent to processing for direct marketing is optional and depends on your free decision, so that failure to grant your consent for this purpose does not affect the use of the services.

4. Legal basis and mandatory or optional nature of processing

The legal basis for processing personal data for the purposes mentioned in Section 3 (a-b-c) is formed by Art. 6(1)(b) of the Regulation (performance of a contract), since data processing is necessary for the provision of the services or for responding to requests from the data subject. Providing personal data for these purposes is optional, but a failure would make it impossible to activate the services provided by the website, process inquiries, or evaluate curricula vitae. With specific reference to purpose 3.c and the associated analysis of social media profiles of a professional nature made freely accessible on the Internet according to Section 2.b, Art. 6(1)(f) of the Regulation forms the legal basis for the treatment of the data, i.e., the legitimate interest of the Controller to check possible risks regarding the suitability of the applicant to fill the specific open position.

The purpose mentioned in Section 3.d represents a lawful processing of personal data within the meaning of Art. 6(1)(c) of the Regulation (compliance with a legal obligation). Once the personal data have been provided, processing is in fact necessary to comply with a legal obligation to which the Controller is subject.

The legal basis of processing for the purposes mentioned in Section 3.e is Art. 6(1)(a) of the Regulation (consent of the user). The Controller may, without your consent, for the execution of processing for the same purposes involving the direct sending of advertising material or direct selling or conducting market research or commercial communications regarding products or services of the Controller that are similar to those purchased, use email addresses and postal addresses in accordance with and within the limits permitted in Art. 130 paragraph 4 of the Data Protection Code and the provision of the Garante for the protection of personal data of June 19, 2008. The legal basis for processing your data for this purpose is formed by Art. 6(1)(f) of the Regulation (the legitimate interest).

5. Recipients of personal data

Your personal data may be shared for the purposes mentioned in Section 3 with:

Subjects who typically act as data processors, i.e.: i) persons, companies, or professional offices that provide assistance and advice to the Controller in accounting, administrative, legal, tax, financial, debt collection, marketing, and communication matters regarding the provision of the services; ii) subjects with whom cooperation is necessary for the provision of the services (e.g., hosting providers); iii) subjects commissioned to perform technical maintenance work (including the maintenance of network equipment and electronic communication networks) (collectively referred to as “Recipients”);

Subjects, entities, or authorities to whom your personal data must mandatory be communicated due to legal provisions or official orders;

Persons authorized by the Controller to process personal data who are necessary for carrying out activities regarding the provision of the services or for the other purposes mentioned in Section 3, and who have committed themselves to confidentiality or have an appropriate legal obligation to confidentiality (e.g., employees of the Controller).

6. Transfer of personal data

Some of your personal data are transferred to Recipients who may be located outside the European Economic Area. The Controller of data processing ensures that the processing of your personal data by these Recipients takes place in accordance with the Regulation. In fact, transfers can be based on an adequacy decision, on standard contractual clauses approved by the European Commission, or on another suitable legal basis. Further information can be obtained from the Controller at the following address: info@apartment-sella.com

7. Retention of personal data

Personal data processed for the purposes mentioned in Section 3(a-b) will be retained for as long as is strictly necessary to achieve those purposes. Since the data processing is carried out for the provision of services, the Controller will in any case process the personal data until the time provided by Italian legislation for the safeguarding of interests (Art. 2946 et seq. CC). With regard to the curricula vitae transmitted via the website or by email in accordance with Section 3.c, the personal data will be retained for a period considered appropriate for the purpose for which the data were collected. This applies notwithstanding the possibility for the Controller to contact the applicant again shortly before the expiry of the specified period to request an extension of this retention period.

The personal data processed for the purposes mentioned in Section 3.d will be stored until the time provided by the specific obligation or applicable law.

Personal data processed for the purposes mentioned in Sections 3.e, on the other hand, will be retained until the withdrawal of consent by the data subject or, if such withdrawal does not occur, for a specific maximum period considered appropriate.

Further information about the retention period of the data and the criteria for determining this period can be obtained from the Controller at the following address: info@apartment-sella.com

8. Rights of data subjects

Pursuant to Article 15 et seq. of the Regulation, you have the right to request access to your personal data from the Controller at any time, to request that they be rectified or erased, or to object to the processing. You have the right to request the restriction of processing in the cases provided for in Art. 18 of the Regulation, as well as to receive the data concerning you in a structured, commonly used, and machine-readable format in the cases provided for in Art. 20 of the Regulation.

Any request must be sent in writing to the Controller at the following address info@apartment-sella.com

You have the right at any time to lodge a complaint with the competent supervisory authority (Garante for the protection of personal data) pursuant to Art. 77 of the Regulation if you consider that the processing of your personal data violates applicable law.

9. Amendments

This privacy policy is valid from 18.05.2023. The Controller reserves the right to amend or update its content in whole or in part, also due to changes in applicable legislation. Therefore, the Controller encourages you to visit this section regularly to inform yourself about the latest and most up-to-date version of this privacy policy.