Advisory Notice concerning the processing of guests' personal data

Declaration issued pursuant to art. 13 of EU Regulation 2016/679 enacted by the European Parliament and by the Council on 27 April, 2016 relative to the protection of natural persons as regards the processing of personal data and the free movement of such data, which also supersedes directive 95/46/EC (General Data Protection Regulation).

Pursuant to the EU Regulation for the protection of personal data (Regulation 2016/679 enacted by the European Parliament and by the Council), please be informed as follows:

NAME AND CONTACT DETAILS OF THE DATA CONTROLLER

The controller of the data processing is Wendelin Walder, Hotel Walder, Vorland street 7, 39017 Schenna by Merano, Alto Adige – Italy, tel. + 39 0473 945 735, e-mail: info@hotelwalder.com, internet: https://www.hotelwalder.com/en/.

PERSONAL DATA AND SPECIAL CATEGORIES OF DATA

The following are considered as being your personal data:

• data relative to you as an individual (surname, name, address, e-mail, telephone number, telefax number, date of birth), as well as language and vehicle license plate number.
• the data contained in your passport or identity card
• data relative to the methods of payment or relating to payments (e.g. banking information, details of credit cards).
• date of arrival and duration of visit.
• data relative to access, utilization and communication.

Special categories of data include data relative to health care and to special personal needs.

PURPOSE OF PROCESSING OF THE PERSONAL DATA AND LEGAL GROUND FOR PROCESSING

The data provided will be processed for the following purposes:

• compliance with the requirements of the law;
• fulfilment of pre-contractual and contractual obligations relative to the guest's visit (booking, accommodation, departure etc.);
• sending of communication and telephone contact with the guest;
• storage of data in order to facilitate subsequent bookings and requests;
• transmission of information, offers and news regarding the hotel and its partners, by e-mail, letter and other means of communication relative to the hotels, the local area and any local events, etc.;
• data regarding access, utilization and communication, which are processed for security reasons and to guarantee correct functioning of the Internet page.

Legal grounds for the processing of your data include:

• compliance with the requirements of the law (art. 6, section 1, para. c) of the RGPD);
• fulfilment of pre-contractual and contractual obligations (art. 6, section 1, para. b) of the RGPD);
• your consent (art. 6, section 1, para. a) of the RGPD);
• for legitimate interests (art. 6, section 1, para. f) of the RGPD).

Special categories of personal data are not processed on our internet page.

Your consent is necessary if special categories of personal data are processed during the course of your visit to the hotel Walder.

Booking

It is necessary to enter your personal data on the booking form included in our web site in order to make a booking and to make use of the contractual services. The travel data marked with an asterisk must be entered when booking your stay.

We utilize a payment platform, which guarantees the security of any payments made using your credit card.

When you elect to pay the deposit by bank transfer, additional personal data such as the name of the account-holder and bank coordinates, too, will be processed.

Indication of the data relative to the invoice is not obligatory, but is necessary for issuing an invoice.

The legal ground for the processing of personal data is compliance with the law and fulfilment of pre-contractual and contractual obligations.

The period for which the data will be stored is in accordance with the obligations for the storage of data and the requirements of the law; your personal data provided for the purposes of booking will be stored only for the period strictly necessary for processing.

Data processed subject to your consent will be stored until you withdraw such consent.

Request

The indication of your personal data on the relative request form included in our internet page is necessary for your request and to allow you to make use of the pre-contractual and contractual services. The travel data marked with an asterisk must be entered when entering a request.

The legal ground for the processing of personal data is compliance with the law and fulfilment of pre-contractual and contractual obligations.

The period for which the data will be stored is in accordance with the obligations for the storage of data and the requirements of the law; your personal data provided for the purposes of your request will be stored only for the period strictly necessary for processing.

Newsletters and promotional messages

The indication of your personal data for the sending by the hotel of information, special offers and newsletters is not obligatory. If you do not submit your personal data, you will not receive special offers and newsletters.

Personal data provided in order to receive information, special offers and newsletters will be processed only with your consent, and will be stored until you withdraw such consent.

Guest honor and guestbook

At a holiday anniversary guest are honored and receive a certificate. A photo will be taken, which will be published together with the name on our website.

The data for the guest honor will be processed only with your written consent, and will be stored until you withdraw such consent.

You can leave a message with your name in the guest book on our website. The indication of your data is not obligatory.

Gift Vouchers

On our website you have the possibility to purchase a gift voucher. The following personal data will be processed: name of the recipient, details of the exhibitor (title, name, surname, street, city, zip code, country, e-mail and optionally telephone, fax and mobile phone), optionally different shipping address or special requests.

In the case of a bank transfer, additional personal data, such as the name of the account holder and the bank coordinates, are processed.

Secure gift

The indication of your personal data (name, last name, e-mail and optionally telephone number) for the receipt of a small gift is voluntary, but is necessary to receive the gift.

The data processing takes place on the basis of the contractual relationship. Your data will not be processed for any other purpose, unless you have given your consent.

The indicated data, to secure a gift, will be kept for the period of time strictly required for data processing.

Pay online

Secure payments can be made through an external payment provider. After successful payment you will receive a confirmation to the provided e-mail address.

The legal ground for the processing of personal data is fulfilment of pre-contractual and contractual obligations regarding your booking.

Your personal data will be stored for the period required by law or necessary for the performance of the contractual relationship.

Data relative to access, utilization and communication

Server Log Archives

When the web page is accessed, data are automatically identified and stored in the archives of the server log. In this case, these data include: IP address, browser and browser version, operating system, time of access and quantity of data transferred.

Cookies

All information about cookies can be found in our Cookie Policy.

Google Analytics

Our web page also utilizes the functions provided by the web analysis service of Google Analytics developed by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA in order to optimise our online service. To this end, the data may be transferred to third countries. The Privacy Shield framework, which has certified Google, ensures that the protection of personal data is in compliance with European laws.

Google AdWords

To promote our website, we use the online advertising service Google AdWords by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Maps

We utilize the maps provided by Google's mapping service "Google Maps". The data processed may include the user's IP address and position, though these will not be identified without your consent (check the settings on your mobile device).

SSL protocol and legal ground

SSL protocol (Secure Sockets Layer): In order to guarantee the security of your data during transmission, we use state-of-the-art coding procedures via https.

Data regarding access, utilization and communication are stored and processed for reasons of security and to ensure the correct operation of the internet page. The legal ground is the pursuit of the legitimate interests in accordance with art. 6, section 1, para. f) of the RGPD.

Social Media

We are present on the social networks with the purpose of providing information to and communicating with clients and potential clients. As a result, the user's data may also be processed outside the European Union. However, a European Union adequacy decision is in place as set forth in art. 45 of the RGPD which provides adequate guarantees relative to the transfer of data in accordance with art. 46 of the RGPD.

The legal ground for the processing of the data relative to your visit to our social media platforms is the pursuit of legitimate interests in accordance with art. 6, section 1, para. f) of the RGPD.

We do not use any social plugins from Facebook on our website, we only provide the link to services provided from facebook.com. We also provide links to services from Google+, Twitter, Instagram and Pinterest.

YouTube: Our website uses plugins from YouTube. Site operator is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

RECIPIENTS OF PERSONAL DATA

In principle, your personal data will not be transferred to other subjects. However, the data may in special cases be:

• transferred to other departments of the hotel, though subject to the limits of legitimate use;
• transferred to the following data processors or to third subjects, in those cases where it is necessary to meet your requests or to provide special services:
• Brandnamic srl
• Directa Media srl
• ASA commercial partner for remote maintenance of the hotel program
• tax consultant

Your personal data may also be collected from the following sources:

• Booking Südtirol, Bolzano
• Portali di Internet Consulting, Brunico
• Portali di Peer s.r.l., Frangarto
• Suedtirol-tirol.com, Caldaro
• Suedtirol.de di digital-communications.de, Norimberga
• Sudtirol.com, Bolzano
• Booking.com, Amsterdam
• HolidayCheck, Bottighofen
• Suche.ch, Wil

RIGHTS OF THE DATA SUBJECT

Right of access: as set forth in art. 15 of the RGPD, you shall have the right to be informed of the personal data processed, the source and nature of the data, the transfer of the data (if any) and the recipient, and the manner in which the data are utilized.

Right of rectification and erasure: as set forth in art. 16 of the RGPD, you may at any time request the rectification or completion of your personal data. Similarly, as set forth in art. 17 of the RGPD, you may request the erasure of your personal data. In the case of published data, you shall also enjoy the "right to be forgotten", in other words request the enactment of the measures necessary to delete all the links, copies, replications etc.

Right to object: you may at any time exercise the right to object as set forth in art. 21 of the RGPD and modify or entirely withdraw your consent to any future processing.

Right to restriction (or cessation) of the processing: as set forth in art. 18 of the RGPD, you may also require that the processing of your personal data be restricted. In this case, the data may be processed only subject to specific consent, therefore the processing of the data will be effectively restricted.

Right to data portability: as set forth in art. 20 of the RGPD, you shall enjoy the right to receive the data provided by you in a structured, commonly-used and machine-readable format, and may also require the transmission of said data to a different Data Processor.

As set forth in art. 77 of the RGPD, you shall enjoy the right to lodge a complaint with a supervisory authority.

Scena, 03.10.2018