Privacy

Privacy Notice Regarding the Processing of Personal Data Pursuant to EU Regulation 2016/679

Baumgartner Georg hereby provides information, in accordance with EU Regulation 2016/679 (hereinafter the GDPR) and in relation to the personal and sensitive data it collects and holds, regarding the purposes and methods of processing users’ data.

‍

South Tyrol Guest Pass

Purpose

The personal data you provide will be forwarded to the Central Guest Card Coordination Center to enable the creation and use of the Guest Pass and the provision of related services.

Recipient

In connection with the issuance of the Guest Pass, your data will be transmitted to Consorzio Mobilità, VAT number 02735170215, which, as the issuer of the guest card and the central coordinating body, acts as the independent controller of the data transmitted. For more information on how your data is processed, please send an email to privacy@moko.bz.it.

Legal basis

The legal basis for the processing is Article 6(1)(b) of the GDPR.

‍

1. Data controller:

The data controller is Baumgartner Georg, represented by its legal representative Baumgartner Georg, with registered office at Sagschmöl 5, 39043 Chiusa (BZ); contact: info@oebersthof.com.

The data controller is Baumgartner Georg and can be contacted by registered mail at Sagschmöl 5, Latzfons – 39043 Chiusa (BZ) or via certified email at info@oebersthof.com.

2. Types of data processed and data subjects:

The processing of data concerns personal data of customers and/or suppliers, which they have voluntarily provided (in person, by phone, fax, or email), data provided during the registration process on the website, and data on third parties obtained through access to public registers, directories, etc. With regard to data on third parties, it should be noted that only common personal data is processed.

3. Purpose of data processing:

The processing of personal data is intended solely for the purpose of

a. compliance with the obligations set forth in applicable law, including tax and accounting obligations;

b. fulfillment of contractual obligations toward data subjects;

c. performance of activities related to the company’s business operations, including the compilation of internal records and statistics, invoicing, and the maintenance of accounts receivable and accounts payable

d. Preparation of a proposal

e. Newsletter distribution

f. Compilation of internal statistics

4. Legal basis for the processing of personal data:

The processing of personal data will be carried out in accordance with applicable regulations and, pursuant to Articles 6 and 7 of the GDPR, on the following legal bases: Personal data will be processed to fulfill the request received from the data subject, to perform a contract to which the data subject is a party, and in response to requests from the data subject; to comply with obligations under applicable law; to protect legitimate interests; and based on the consent given by the data subject.

5. Methods of data processing:

The processing of personal data is carried out through operations that may or may not involve electronic or automated means, and consists of the collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, disclosure, erasure, and destruction of data.

Data processing is carried out by both the data controller and the data processors and/or persons in charge of processing. The latter will be entrusted with data processing for the purposes set forth in section 3 and/or in cases where such entrustment is required by applicable law. The data controller has verified that the data processors and persons in charge of processing will process the data in accordance with the principles set forth in the GDPR.

The data may be disclosed for the purposes set forth in section 3 to natural or legal persons, including those located abroad, and in any case to all parties to whom such disclosure is necessary for the proper fulfillment of those purposes. Personal data will not, however, be made public.

More specifically, personal data will be processed in the following ways:

a. User account:

Personal data is collected when you register on the website and is processed to provide you with a user account. During the registration process and when you log in to your user account, your IP address and the specific times of your logins are stored.

This data is immediately deleted when the data subject deletes their account, unless its retention is necessary for tax and accounting purposes.

b. Contact:

If the data subject contacts the company via the website’s contact form, by email, or through social media, the personal data provided by the data subject is processed to respond to their inquiries or to provide the service they have requested. The personal data obtained in this manner may be stored in a “customer relationship management” system, or a similar system, to manage contact with customers. Data subjects’ requests are deleted as soon as they are no longer necessary to provide the requested services, except in cases where their retention is necessary for tax and accounting purposes.

c. Newsletter:

On this website, you have the option to subscribe to a newsletter. By subscribing, you consent to receiving commercial information regarding the data controller’s business activities via email or other electronic means of communication. Subscription to the newsletter is considered accepted when you use the contact option on the website or manually sign up for the newsletter.

With regard to the newsletter, the system saves your information at the time of registration and subscription confirmation, including your IP address and any other personal data necessary to provide the newsletter service. To unsubscribe from the service or cancel the newsletter, you must click on “unsubscribe” at the end of each newsletter or send an email. From that point on, the company will delete all personal data provided by the data subject at the time of registration, unless retention is necessary for tax and accounting purposes.

d. Google Tag Manager:

This site uses Google Tag Manager, a service that allows you to manage website tags through an interface and activates other tags, which in turn collect data, if applicable. Google Tag Manager does not use any cookies and does not access any personal data that may be collected. For more information, please refer to Google’s privacy policy (https://www.google.com/intl/it/tagmanager/use-policy.html).

e. Google Analytics:

This website uses Google Analytics, a web analytics service provided by Google Inc. Google Analytics uses specific cookies that are stored on users’ computers and enables an analysis of their use of this website. The information generated by the cookies regarding the use of the website is generally transmitted to a Google server in the United States, where it is stored.

Please note that Google Analytics has been implemented on this website in such a way as to include the “anonymizeIP” code, ensuring that IP addresses are recorded anonymously and are then stored on a server located within the EU and the Member States of the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the U.S., where it is then shortened. Google uses the information obtained to compile reports on website activity. Personal data is not used to identify website visitors; individual users remain anonymous, and no data is transmitted to third parties.

You can prevent cookies from being stored by adjusting your browser settings. In addition, you can prevent Google from collecting this data by downloading and installing the browser plugin available at https://tools.google.com/dlpage/gaoptout?hl=it.

f. Google AdWords and conversion tracking:

This website also uses services provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google has obtained the European “Privacy Shield” certification and guarantees compliance with the EU regulation on the processing of personal data. We use Google AdWords to attract users’ attention through advertisements on external websites. Campaign data allows us to measure the success of individual advertising initiatives and to show users ads that are relevant to their interests. For this purpose, a cookie is used to measure certain parameters, such as ad views or user clicks. When accessing the site via a Google ad, a cookie is stored on the user’s computer, which allows Google to recognize their web browser. Thanks to these cookies, we can compile customer conversion statistics, gather information on the total number of users who clicked on an ad, and obtain technical information regarding the system used. This cookie generally lasts 30 days and does not collect or track information capable of personally identifying a user, unless the user has expressly authorized the processing of their data without the need for anonymity. For more information, please refer to Google’s privacy policy (https://policies.google.com/technologies/ads).

g. Twitter:

A Twitter plugin has been added to this website, which allows you to link this website to Twitter and transmit personal data to Twitter. In addition, a cookie is stored on the user’s computer. Twitter will delete, anonymize, and process this data within a maximum of ten days. For more information, please refer to Twitter’s privacy policy (https://twitter.com/it/pivacy).

h. Facebook:

This website incorporates plugins from the social network Facebook, provided by Facebook Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA. Facebook plugins can be identified by the Facebook logo or the “Like” button. The plugin establishes a direct connection between the user’s browser and Facebook’s servers. Facebook is thereby informed that the user has visited this site and clicked the “Like” button; if the user is logged into their Facebook account, the content of this site can be linked to that account. Further information on this is available in Facebook’s privacy policy (https://it-it.facebook.com/policy.php).

i. Instagram:

This website incorporates features from Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. This plugin is recognizable by the Instagram logo. This plugin allows the content of this website to be linked to the user’s Instagram profile, enabling Instagram to associate the user’s visit with their profile. Further information regarding the purposes and methods of data processing by Instagram is available in Instagram’s privacy policy (http://instagram.com/about/legal/privacy/).

j. Interaction with social media:

Baumgartner Georg also offers the option of contacting us via social media and other platforms to communicate with customers, prospective clients, and users, and to provide information about the services we offer. Interactions and information obtained through these platforms are subject to the privacy settings of the respective providers.

k. Submission of data for domain registration:

To register a domain name, you must provide the relevant personal information to the national or international registry responsible for the registration. Only the personal information necessary for registration will be provided. Internet users can view the information provided to the registries. Registries do not permit the use of personal information for commercial or other improper purposes.

l. Disclosure of data for certification purposes:

To obtain the SSL certificate, personal data will be disclosed to the relevant registries. Only the personal data that is strictly necessary will be disclosed. The data subject consents to the automatic transmission of the data required for certification to the relevant registries.

m. Market analysis and research:

To better understand the needs of its users and customers and to identify market trends, this website analyzes and profiles the personal data provided. In this regard, we specifically process contact data, contract data, billing data, usage data, and generally data relating to data subjects, customers, visitors, and users of this website. Profiling is intended to optimize the offerings and user-friendliness of this website, and such data will not be disclosed to third parties.

n. Cookies:

This website uses session cookies, which are not stored permanently on the user’s computer and are deleted when the browser is closed; they are therefore strictly limited to the transmission of session identifiers. The cookies used by this site avoid the use of other IT techniques that could potentially compromise privacy, and do not allow for the collection of personally identifiable information or profiling data.

6. Provision of data and refusal:

The provision of personal data is strictly necessary to fulfill the purposes set forth in section 3, and the data subject’s refusal to provide personal data will make it impossible to carry out these activities.

7. Data retention:

Personal data is retained for the period necessary to fulfill the purposes set forth in section 3, unless otherwise specified in this policy and subject to any retention obligations required by applicable law. Generally, data is not retained for a period exceeding two years. If retention is required for legal purposes, data processing is restricted: this means that the data will be blocked and used solely for the fulfillment of legal purposes.

8. Rights of the data subject:

The GDPR grants data subjects the right to exercise specific rights:

a. the right to access your personal data and information related thereto, to have inaccurate data corrected or incomplete data completed, to have your data erased, to restrict the processing of your data, and to object to the processing of your data;

b. the right to request and obtain from the controller, where possible, your personal data in a structured, machine-readable format, including for the purpose of transmitting such data to another controller;

c. the right to withdraw consent at any time, limited to cases where processing is based on consent for one or more specific purposes, without affecting the lawfulness of processing based on consent given prior to withdrawal;

d. the right to file a complaint with the Data Protection Authority.

The rights granted may be exercised by sending a written notice via certified email (PEC) to info@oebersthof.com, or by registered letter with return receipt to Sagschmöl 5, Latzfons – 39043 Klausen (BZ).

‍