Graphic Image

Data Privacy

1. General information
We attach great importance to protecting your privacy and processing your personal data in accordance with the law. In our capacity as controller we would like to make processing transparent and use this privacy statement as a means of advising you on how your personal data are processed when you use this website, on how to contact us, on how to express interest in one of our real estate offers and request information on this or other offers and/or on how to conclude a contract with us.

2. Name and contact details of the data controller and of the data protection coordinator
Controller of your personal data:
Villa Eden Hotel GmbH
Tax identification code: 02899870212
Viale della Stazione, 5
IT-39100 Bolzano

Tel.: +39 0365 520 027
E-Mail:concierge@villa-eden-gardone.com

In addition to the controller, you can also contact the relevant data protection coordinator via the below contact details:
E-Mail: datenschutz@signa.at
Postal address:
SIGNA
FAO: Data Protection Coordinator
Freyung 3
A-1010 Vienna

3. Categories of personal data we process in relation to you
Personal data are any items of information concerning an identified or identifiable natural person, meaning they can be attributed to you personally. Examples are your name, address, phone number, email address or IP address. As set out below, we process various items of personal data that we have received from you in the course of
our (business) relations. We also process data we have legitimately received from brokers and consultants or from publicly accessible sources, such as the commercial register or land register.

We collect certain items of information when you use our website (see section on server log files for more details).

Moreover, we collect data automatically by means of cookies (see below for more details).

If you display interest in our offers by filling out the contact form, we will process your first and last name, email address, phone number and any comments you send us via the free text field. We also process any additional (personal) data that you send us voluntarily.

To execute a contract that has or will be concluded between us, we will process your contact details in particular, as well as data required for identification and for executing the contract
(contract and real estate data, correspondence about account and payment data, etc.). Villa Eden Hotel GmbH is primarily responsible for processing and further action.

4. Relevant legal framework
If the privacy statement does not specify the legal framework, the following shall apply. Point (a) of Article 6(1) GDPR and Article 7 GDPR provide the legal framework for obtaining consents, point (b) of Article 6(1) GDPR provides the legal framework for processing to fulfil our services, implementing contractual measures and responding to enquiries, point (c) of Article 6(1) GDPR provides the legal framework for processing to fulfil our legal obligations and point (f) of Article 6(1) GDPR provides the legal framework for processing to safeguard our legitimate interests.

5. Use of our contact form for the purpose of making contact and periodically mailing event invitations and items of information
When you send the contact form your personal data in the contact fields (first and last name, email address, phone number and any comments you send us) are processed for the purpose of making contact and periodically mailing items of information and event invitations for offers. The processing of data entered in the contact form and disclosure of such data to third parties are based on your consent given (in accordance with point (a) of Article 6(1) GDPR) for the purposes stated in each particular case. There is no obligation to actually provide the data we request from you on our website.

You may withdraw your consent completely or partially at any time at widerruf@signa.at, having effect for the future. In its capacity as controller and joint point of contact, Villa Eden Hotel GmbH shall take receipt of the withdrawal, even if the withdrawal concerns data handling by the co-controller. Each mailing also contains an option of withdrawal. Thewithdrawal shall not affect the lawfulness of processing based on consent before its withdrawal.

The personal data you provide via the contact form will be processed until we stop offering you the service described above for our office offers if no withdrawal is made. Provided there are no statutory retention requirements, your personal data will be erased three years after the last use.

6. Provision of contractual services
In cases where a contract is concluded, your personal data (in particular, your contact details and data required for identification and executing the contract, such as contract and real estate data or correspondence about account and payment data) shall be processed for the preparation, conclusion and execution of rental or purchase contracts and the execution of your orders, as well as any other activities or actions that are related and necessary (in accordance with point (b) of Article 6(1) GDPR).

The data shall be kept for the duration of the contract and thereafter for at least as long as statutory retention periods or limitation periods for potential legal claims apply.

You must provide the items of personal data necessary for proper execution of the contract and that we are legally obliged to collect. We will normally be forced to refuse conclusion of the contract if you do not wish to provide us the data. We can no longer execute an existing contract in such cases. Data not needed for proper execution of the business relationship or required by law need not be provided, however. Disclosure of such data is voluntary

7. Server log files
The provider of the website automatically collects and stores items of information (browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server inquiry and IP address) in server log files, which your browser transmits automatically.

The data collected are used to ensure the website can connect in the manner intended, that it is easy to use and to evaluate the security and stability of the system. We reserve the right to examine these data retrospectively if there is concrete evidence of illegal activity. These data will not be combined with data from other sources

Point (f) of Article 6(1) GDPR provides the legal framework for the data processing. The legitimate interest arises from the data collection purposes listed above.

8. Cookies
Our website makes use of cookies, which are small files that can be stored on your terminal device when you visit our website. They help to make the website more user-friendly and effective.

This website makes use of the following transient and persistent cookies, the scope and functioning of which are explained below.

Transient cookies are erased automatically when you close the browser. They include but are not limited to session cookies which store a session ID, making it possible to attribute various requests of your browser to the common session. This means your computer can be recognised when you return to our website. Session cookies are erased when you log out or close your browser.

Persistent cookies are erased automatically after a set period, which varies depending on the cookie. You can erase cookies at any time in your browser’s security settings.

You can prevent the setting of cookies at any time by configuring your browser accordingly.Further, cookies that have already been set can be erased via your browser at any time. This is possible in all popular browsers. However, we would like to point out that full use of all
our website’s features may not be possible if you have disallowed the setting of cookies in your browser or erased cookies that have already been set.Cookies are small text files that websites use to make the user experience more efficient.

The law states that we may store cookies on your device if they are absolutely necessary for the operation of this site. For all other types of cookie, we need your permission.This site makes use of different types of cookie. Some of the cookies that appear on our website are set by third parties.

Your consent applies to the following domain: www.villa-eden-gardone.com.

Ihr aktueller Zustand: Cookies zulassen (Notwendig, Präferenzen, Statistiken, Marketing).
Your current status: Allow cookies (necessary, preferences, statistics, marketing).
Change your consent | Withdraw your consent à Please link to edit cookies
Cookiebot (link to https://www.cookiebot.com/en/) last updated the cookie declaration on
15 April 2020.

Necessary (2)

Necessary cookies help to make a website usable by enabling basic functions, such as the page navigation, and access to secure parts of the website. The website cannot function properly without them.

Name Providers Purpose Expiry Type
ARRAffinity Proaddon Registers a unique ID that is used a generate statistical data on how the visitor uses the website. 2 years HTTP Cookie
CookieConsent Cookiebot Stores the user’s cookie consent state for the current domain 1 Year HTTP Cookie

Statistics (3)

Statistics cookies help website owners understand how visitors interact with websites by collecting and reporting information anonymously.

Name Provide Purpose Expiry Type
_ga Google Tag Manager Registers a unique ID that is used a generate statistical data on how the visitor uses the website. 2 Years HTTP Cookie
_gat Google Tag Manager Used by Google Analytics to throttle request rate 1 Day HTTP Cookie
_gid Google Tag Manager Registers a unique ID that is used a generate statistical data on how the visitor uses the website. 1 Day HTTP Cookie

Marketing (1)

Marketing cookies are used to track visitors on a website with the aim of displaying advertisements that are relevant and appealing to the specific user and thus more valuable to publishers and third-party advertisers.

Name Provider Purpose Expiry Type
ads/ga-audiences Google Used by Google AdWords to re-engage visitors that are likely to convert to customers based on the visitor’s online behaviour across websites. Session Pixel Tracker


9. Google Analytics
Our website makes use of Google Analytics, a web analysis service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (‘Google’). Google Analytics uses cookies that are stored on your terminal device and enable an analysis of your use of the website (including your IP address and accessed website URLs). The resulting information is usually transferred to a Google server in the United States and stored there.

This website makes use of the Google Analytics IP anonymisation option, meaning that Google first truncates your IP address within Member States of the European Union or in the countries and territories of other signatories of the Agreement on the European Economic Area. The full IP address will only be transferred to one of Google’s servers in the USA and truncated there in exceptional cases. Google will use such information on behalf of the operator of this website to analyse your use of the website, compile reports on website activities, and to provide the website operator with other services relating to use of the website and internet. The IP address your browser transmits for Google Analytics is not merged with any other data held by Google.

We have concluded a data processing contract with Google. Section 96(3) of the German Telecommunications Act (TKG) and point (a) of Article 6(1) GDPR (consent) provide the basis for the data processing. In the context of the GDPR, our interest is the opportunity to create easy-to-use website access statistics and then to improve our offering and our website. As already indicated above, you can prevent the storage of cookies by making the appropriate settings in your browser. You can also prevent Google from collecting data for Google Analytics by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en
Otherwise, you can prevent Google Analytics from collecting your data by clicking the following link.
An opt-out cookie that prevents the collection of your data during future visits to this website will be set:

https://tools.google.com/dlpage/gaoptout?hl=en

More information about Google’s terms of use and privacy policy can be found at https://marketingplatform.google.com/about/analytics/terms/gb/ and https://policies.google.com/privacy?hl=en

Google Analytics opt-out is disabled on this website. Enable.

10. Google – AdWords – Conversion tracking
To record usage of our website for statistical purposes and to optimise our website, we also make use of Google Conversion Tracking based on your consent given (in accordance with point (a) of Article 6(1) GDPR). Google AdWords will set a cookie on your computer if you have accessed our website via an advertisement of Google. Such cookies expire after 30 days and are not used for personal identification. If the user visits a certain page on the AdWords customer’s website and the cookie has not yet expired, then Google and the customer can see that the user clicked on the advertisement and was forwarded to the page in question. Every AdWords customer receives a different cookie, which means that cookies cannot be tracked via AdWords customer websites. Information obtained by means of the conversion cookie is used to create conversion statistics for AdWords customers who have opted to use conversion tracking. AdWords customers are informed of the total number of users who have clicked on their advert and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be identified personally. If you do not wish to participate in the tracking process, then you can prevent the placement of a cookie required for this by making a browser setting that generally disables the automatic placement of cookies, for example. You can also disable conversion tracking cookies by configuring your browser to block cookies from the googleadservices.com domain. Google’s privacy statement for conversion tracking can be found at https://policies.google.com/privacy?hl=en.

Google AdWords opt-out is disabled on this website.
Enable.

11. Use of Facebook Pixel, Custom Audiences and Facebook Remarketing
In accordance with point (a) of Article 6(1) GDPR, we make use of the Facebook social network’s ‘Facebook Pixel’ (operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA or (if you are domiciled in the EU) Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (‘Facebook’)) within our website for the purposes of analysing, optimising and the economic operation of our website after obtaining your consent.

Facebook Pixel allows Facebook to assign our visitors to a target group for the presentation of advertisements (‘Facebook Ads’). To achieve this, the Facebook Remarketing tag has been implemented on this website. When you visit the website a direct connection with Facebook’s servers is established via this tag. A message indicating that you have visited this website is sent to Facebook’s server and Facebook assigns this information to your Facebook user account.

More information on the collection and use of data by Facebook, your rights in this regard and on options for protecting your privacy is available in Facebook’s privacy statement at https://www.facebook.com/about/privacy/. Otherwise, you can disable the ‘Custom Audiences’ remarketing function at https://www.facebook.com/settings/?tab=ads#_=_ . You must sign in to Facebook to do this.

The Facebook Web Tracking opt-out is disabled on this website. Enable.

12. YouTube and notes on the integration of videos
We have integrated YouTube videos on our website, which are stored on www.youtube.com à link to website and can be played directly from our website. To better protect your data when you visit our website, the videos are integrated into the page by means of a two-click solution, i.e. no data about you as a user are transferred to YouTube if you do not play a video. YouTube cookies are not stored on your computer and data are not transferred to YouTube’s operator (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) until you play a video and in so doing give your consent to the data transfer. If you are signed in to your YouTube account, then you allow YouTube to associate your surfing habits with your personal profile. You can prevent this by signing out of your YouTube account.

YouTube is used to enhance the presentation of our website. This constitutes a legitimate interest within the meaning of point (f) of Article 6(1) GDPR.

More information on the handling of user data is available in YouTube’s privacy statement at https://policies.google.com/privacy?hl=en&gl=de

You have not accepted the display of YouTube videos

13. Vimeo and notes on the integration of videos
We have integrated Vimeo videos on our website, which are stored on www.vimeo.com and can be played directly from our website. To better protect your data when you visit our website, the videos are integrated into the page by means of a two-click solution, i.e. no data about you as a user are transferred to Vimeo if you do not play a video. Vimeo cookies are not stored on your computer and data are not transferred to Vimeo Inc., 555 West 18th Street, New York, NY 10011, USA until you play a video and in so doing give your consent to the data transfer. If you are signed in to your Vimeo account, then you allow Vimeo to associate your surfing habits with your personal profile. You can prevent this by signing out of your Vimeo account.

Vimeo is used to enhance the presentation of our website. This constitutes a legitimate interest within the meaning of point (f) of Article 6(1) GDPR. More information on the handling of user data is available in Vimeo’s privacy statement at https://vimeo.com/privacy.

You have not accepted the display of Vimeo videos.

14. Social media
We make use of buttons from the Facebook and Instagram social networks on our website to make the website and our projects on it better known via those means. Point (f) of Article 6(1) GDPR provides the basis for this. To better protect your data when you visit our website, the buttons are not fully integrated into the page but rather only by means of an HTML link. This integration ensures that a connection is not immediately established with the servers of the provider of the respective social network when a page on our website containing such buttons is accessed. Clicking on the respective symbol indicates that you agree to communication with the respective platform and transmission of information (e.g. IP address) to the respective service provider. You can recognise the social network provider by the mark on the box above its initials or the logo.

Please refer to the privacy statement of each provider for information on the purpose and scope of data collection and how they use and further process the data on their pages, as well as on your rights in this regard and setting options for protecting your privacy. In our capacity as provider of these pages we would like to point out that we have no knowledge of what the data transmitted comprises or what the respective providers use it for. Addresses of each provider with privacy statements:

a.) Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA or (if you are domiciled in the EU) Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; Facebook’s privacy statement: https://www.facebook.com/policy. Facebook is certified under the Privacy Shield Agreement and thus guarantees compliance with European data protection law.

b.) Instagram Inc, 1601 Willow Road, Menlo Park, CA 94025, USA; Instagram’s privacy statement: http://instagram.com/about/legal/privacy/.

15. Disclosure of data
In particular, your personal data will be sent to the following companies that provide services for us in connection with the provision of information and event invitations for our office offers:

– IT service providers (in particular, SIGNA Informationstechnologie GmbH).

– It may be necessary to transmit your data to the following recipients if the processing of your personal data is connected with performance of the contract (rental contract):

– third parties involved in the transaction (including individuals who inevitably participate in the transaction and potential contractors, financing companies, insurance companies, etc.);

– service providers (including tax advisers, building management, insurance, external service providers such as cleaning companies, safety officers, accounting, facility management, service companies, chimney sweeps, public authorities, lawyers, etc.);

– local tax office and other public authorities, tax advisers and legal representatives (for enforcing rights, defending claims or in the context of administrative proceedings), and

– companies contracted to manage our internal IT infrastructure, e.g. software and hardware (in particular, SIGNA Informationstechnologie GmbH). Your data will only be passed on to the extent required to achieve the purpose of the processing.

Apart from the automated delivery of emails via MailChimp, which has entered into the EU Privacy Shield, we do not intend to transfer data to any recipient in a third country (outside the EU) or international organisation.

Article 28 GDPR provides the basis should we contract any third party to process data on our behalf.

16. Data security
We take appropriate technical and organisational measures to ensure data processing is secure and to process your (personal) data such that unauthorised third parties cannot access it.

Despite our security measures, there is a possibility that other individuals will view and use information you share with us over the internet, especially in unencrypted emails.

17. Changes to this privacy statement
We reserve the right to amend any information provided in this privacy statement in accordance with changes in legislation or case-law without prior notice. The version published here is valid.

18. Your rights in relation to personal data
You have the right of access to information about your personal data (see Article 15 GDPR for more details), as well as to request the rectification (see Article 16 GDPR for more details), erasure (see Article 17 GDPR for more details), restriction of processing (see Article 18 GDPR for more details) and the portability (see Article 20 GDPR for more details) of your personal data.

Furthermore, under certain circumstances you may object to the processing of your personal data (in cases where your personal data are processed based on legitimate interests according to point (f) of Article 6(1) GDPR – see Article 21 GDPR for more details).

If processing is based on your consent, you also have a permanent right to withdraw the consent (see Article 7(3) GDPR for more details), where this shall not affect the legality of any processing prior to withdrawal on the basis of the consent. You may address such requests to Villa Eden Hotel GmbH in its capacity as controller and joint point of contact (see contact details above in Section 3.) or to the data protection coordinator with an indication of your request.

To protect your privacy and security, we reserve the right to verify your identity before taking any of the measures listed above.

We attach great importance to protecting your personal data and processing it in accordance with the law. Please send any questions or concerns regarding the processing of your personal data to Villa Eden Hotel GmbH in its capacity as joint point of contact for the joint controller (see contact details above in Section 3.) or to the data protection coordinator. You also have the option of contacting Italy’s data protection authority if you believe your personal data is being processed unlawfully.