Privacy Policy

Information on data processing pursuant to EU Directive No. 679/2016

In accordance with EU Directive No. 679/2016 (hereinafter referred to as the GDPR), and with regard to the personal and sensitive data it will receive, Baumgartner Georg provides information on the nature, scope, and purpose of its data processing.

‍

South Tyrol Guest Pass

Purpose

The personal data provided will be transmitted to the Guest Pass Central Coordination Office to enable the creation and use of the Guest Pass and to provide the associated services.

Recipient

In connection with the issuance of the Guest Pass, your data will be transferred to the Mobility Consortium (VAT No. 02735170215), which, as the issuer of the Guest Pass and the central coordinating body, acts as the independent data controller for the processing of the transferred data. For further information regarding the processing of your data, please send an email to privacy@moko.bz.it.

Legal basis

The legal basis for the processing is Article 6(1)(b) of the GDPR.

‍

1. Data controller:

The data controller is Baumgartner Georg, represented by its legal representative Baumgartner Georg, with registered office at Sagschmöl 5, Latzfons – 39043 Klausen (BZ), contact details: info@oebersthof.com.

The data controller is Georg Baumgartner and can be contacted by registered mail at Sagschmöl 5, Latzfons – 39043 Klausen (BZ) or by email at info@oebersthof.com.

2. Types of data processed and data subjects:

We process the personal data of customers and suppliers, as well as data from individuals who voluntarily provide their personal information to our company (in person, by phone, by fax, or by email), as well as through registration on our website, and of individuals whose data has been obtained from third parties, for example, when collecting external data for business information, public directories, etc., whereby in the latter case, the data consists exclusively of basic personal information.

3. Purpose of data processing:

Data is processed exclusively for the following purposes:

a. Compliance with the obligations set forth in applicable regulations and laws, including those relating to tax and accounting matters

b. Fulfillment of contractual obligations toward the data subjects

c. Performing activities related to our company’s business operations, such as compiling internal statistics, preparing financial statements, and maintaining customer and supplier accounts

d. Preparation of a quote

e. Sending newsletters

f. Compilation of internal statistics

4. Legal basis for data processing:

Data processing is carried out in accordance with legal requirements and is based on the following legal grounds pursuant to Articles 6 and 7 of the GDPR: Data processing is carried out to fulfill the agreed-upon services, to implement contractual measures and respond to inquiries, to comply with legal obligations and protect legitimate interests, as well as on the basis of the consent of the data subjects.

5. Data processing methods:

Data processing may be carried out with or without the use of electronic means, but in any case by automated means, and includes the collection, storage, organization, retention, retrieval, processing in the strict sense, modification, selection, extraction, comparison, use, interconnection, blocking, transmission, erasure, and archiving of data.

Data processing is carried out both by the data controller and by processors and third parties whom the data controller has commissioned to process the data for the purposes set forth in Section 3, or in cases where this is required by law. The data controller has ensured that processors and third parties also process personal data in accordance with the GDPR.

If necessary, the data may be disclosed to domestic and/or foreign individuals and/or legal entities, provided that such disclosure serves the activities and purposes specified in Section 3. However, personal data is not generally disclosed.

Specifically, data processing is carried out in the following ways:

a. User account:

Personal data is collected during registration and processed for the purpose of creating a user account. As part of the registration and login process, the IP address and the time of each user action are also stored.

This data will be deleted immediately upon termination of the user account, unless retention is necessary for tax or accounting purposes.

b. Contact:

When users contact the company via the contact form, email, or social media, their information is processed for the purpose of handling and resolving their inquiry. This information may be stored in a customer relationship management system or a similar inquiry management system.

Requests will be deleted as soon as they are no longer needed, unless retaining the data is necessary to comply with legal obligations.

c. Newsletter:

This website offers the option to subscribe to a newsletter. By subscribing to the newsletter, the individual agrees to receive emails and other electronic communications containing promotional information. From that point on, the relevant personal data will be deleted, unless its retention is necessary to comply with legal obligations.

d. Google Tag Manager:

Google Tag Manager is a solution that allows so-called website tags to be managed via a user interface in order to integrate Google marketing services into the online offering, and it is used on this website. Tag Manager itself does not process any personal data; for more detailed information, please refer to the Google Services Terms of Service: https://www.google.com/intl/de/tagmanager/use-policy.html

e. Google Analytics:

This website uses analytics tools provided by Google Inc. for marketing and optimization purposes. Data is collected and stored in an anonymized form. Google Analytics uses cookies, which are text files stored on the user’s computer that enable an analysis of the user’s interaction with the website. This data is transmitted to a Google server in the United States and stored there. The IP address transmitted by the user’s browser as part of Google Analytics is not merged with other Google data. Additionally, the “anonymizeIP” function is used in the code, which ensures that the IP address is masked, so that all data is collected anonymously. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and truncated there. The collected data is not used to personally identify visitors to this website; individual users remain anonymous, and no data is shared with third parties. Google uses this information on behalf of the website operator to generate various reports regarding website activity.

In this context, users are informed of their right to object by installing the browser plugin available at https://tools.google.com/dlpage/gaoptout?hl=de to disable Google Analytics.

f. Google AdWords and conversion tracking:

This website also uses the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google is certified under the Privacy Shield Framework and guarantees compliance with European data protection laws. This website uses the online marketing service Google AdWords to place ads on the Google Display Network so that they are shown to users who are likely to be interested in the ads. This allows ads for and within this website’s online offerings to be displayed in a more targeted manner, so that users are shown only ads that potentially match their interests. For this purpose, when visiting websites where the Google advertising network is active, a Google code is executed directly by Google, and so-called marketing tags are integrated into the website, which are used to store an individual cookie—i.e., a small file—on the user’s device. This file records which web pages the user visits, what content they are interested in, as well as technical information about the browser and operating system and the time of the visit. In addition, Google uses conversion cookies to generate statistics that determine the total number of users who have viewed the ad. However, users themselves cannot be personally identified; instead, Google processes only cookie-related data within anonymized user profiles, unless a user expressly permits Google to process the data without anonymization. Further information on this can be found in Google’s Privacy Policy (https://policies.google.com/technologies/ads).

g. Twitter:

A Twitter widget is integrated into the website’s customer management system to display tweets from the company’s Twitter account. This establishes a connection with Twitter, transmits log data to Twitter, and sets a cookie on the user’s computer. Twitter begins deleting, de-identifying, or collecting this data after a maximum of ten days. Further information on this can be found in the Twitter Privacy Policy (https://twitter.com/de/pivacy).

h. Facebook:

This website incorporates plugins from the social network Facebook, located at 1601 South California Avenue, Palo Alto, CA 94304, USA. The Facebook plugins can be identified by the Facebook logo or the “Like” button. This plugin establishes a direct connection between the user’s browser and the Facebook server. Facebook thereby receives the information that the user has visited this website, and the user has the option to link the content of this website to their own Facebook profile using the “Like” button. Further information on this can be found in Facebook’s Privacy Policy (https://de-de.facebook.com/policy.php).

i. Instagram:

This website uses social plugins provided by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA. These plugins are identified by an Instagram logo. These plugins establish a direct connection between the user’s browser and the Instagram server, which is located in the United States, and Instagram receives the information that the user has accessed the corresponding page. If the user is logged into Instagram, Instagram can directly associate the relevant data with the user’s account. Further information regarding the purpose and scope of data collection by Instagram, as well as the further processing of the data, can be found in Instagram’s privacy policy (https://help.instagram.com/519522125107875?helpref=page_content).

j. Social media presence:

Baumgartner Georg maintains online presences on social networks and platforms in order to communicate with customers, prospective customers, and users active on those platforms and to inform them about its services. When accessing these networks, the privacy policies of the respective operators apply.

k. Disclosure of data to domain registrars:

In order to register the domains of the individuals concerned, their data must be forwarded to the respective national and international domain registrars. Only the personal data that is absolutely necessary is transmitted. The data transmitted to the registrars can be accessed and viewed by Internet users. The registrars prohibit commercial and abusive use.

l. Disclosure of data to certification authorities:

Personal data is transmitted to the certificate issuer for the purpose of issuing an SSL certificate. Only the data that is absolutely necessary is transmitted. The data subject consents to this data being automatically transmitted to the certificate issuer during the creation of the certificate.

m. Business Analysis and Market Research:

In order to identify market trends and the needs of our contractual partners and users, we analyze the available data on business transactions, inquiries, contracts, etc. In doing so, we process inventory data, communication data, contract data, payment data, usage data, and metadata from contractual partners, prospective customers, customers, and visitors to our online platform. The analyses are used to improve user-friendliness, optimize the service, and enhance operational efficiency, and are not disclosed externally.

n. Cookies:

When you visit this website, session cookies are created that are valid only for the duration of your visit. It is not possible to track these cookies across domains, as advertising networks do, nor are these cookies used to track user behavior.

6. Disclosure of data and refusal to disclose:

The provision of personal data is essential for the fulfillment of the purposes set forth in Section 3, and any refusal by the data subjects to provide such data will result in the inability to fulfill the purposes set forth in Section 3.

7. Data storage:

Unless otherwise expressly stated in this Privacy Policy, the processed data will be deleted as soon as it is no longer needed for the purposes set forth in Section 3 and there are no longer any legal retention requirements. In general, personal data is not retained for longer than two years.

If deletion is not possible for legal reasons, data processing will be restricted; in other words, the data will be blocked and not used for any other purposes.

8. Rights of the data subject:

The GDPR allows data subjects to exercise specific rights:

a. The right to obtain from the controller information regarding the personal data in question, as well as the right to have such data rectified, erased, or restricted, and the right to object to the processing;

b. The right to receive one’s own data from the data controller in a structured and commonly used format, where possible, also for the purpose of transmitting the data to another controller;

c. The right to withdraw consent to data processing at any time, provided that the lawfulness of the processing is based on the data subject’s consent, and without affecting the lawfulness of the processing carried out on the basis of consent prior to its withdrawal;

d. The right to file a complaint with the data protection supervisory authority.

These rights may be exercised by sending a written notice via certified email to info@oebersthof.com or by registered mail with return receipt requested to Sagschmöl 5, Latzfons – 39043 Klausen (BZ).

‍