Information
This page explains how we process your personal data.
If you want to change your privacy settings (grant consent or revoke your previously granted consent), click here to change your settings.Controller
The controller of your personal data on our website is:
Villa Eden Gardone AG
Viale della Stazione 5
I – 39100 Bozen
Italy
Tel.: +39 0365 520027
E-Mail: concierge@eden-reserve-hotel.com
Data Protection Officer
Datenschutzkoordinator
Viale della Stazione 5
I – 39100 Bozen
Phone: +43 1 532 9848 2875
E-mail: datenschutz@signa.at
Consent Management Tool
LEGALWEB.IO via KEY CDN
This website uses the Consent Management Tool of our processor LEGALWEB.IO, legalweb GmbH, Fürbergstraße 42a, 5020 Salzburg, Austria. The tool sets a cookie on your device in order to save the services you have selected or not selected. That cookie does not involve a user-specific ID and does not save any other personal data. It is saved for a maximum of 1095 days and is then deleted automatically. The legal basis of processing is your consent according to Art. 122 des d-lgs. 196/2003.
The Consent Management Tool is loaded by our sub-processor Key CDN, proinity LLC, Faerberstrasse 9, CH-8832 Wollerau, Switzerland. Key CDN only collects your IP address to ensure the security of the data center. Your IP address will not be transmitted to legalweb GmbH. Data are transferred to Switzerland pursuant to Article 45 GDPR in conjunction with the Adequacy Decision C(2000) 2304 of the European Commission.
Data processing on your end device
The processing operations described in the following text use technologies such as scripts, cookies, WebSQL, LocalStorage, session storage, … . These technologies store or read data on your end device these out.
Webhost
Conova Communications GmbH
Our website is hosted by our processor Conova Communications GmbH, Karolingerstraße 36A, 5020 Salzburg, Austria.
Connection data are processed to provide and to deliver the website. Data are not stored beyond access for the mere purpose of delivery and provision of the website. However, our processor keeps connection data for security purposes. The duration of processing for security purposes varies and ends with the necessity of the security measures. Furthermore, our processor anonymizes collected data immediately after such data were collected and provides us with statistics for analysis containing anonymous data. We use these statistics for debugging and the sophistication of our website.
The legal basis of processing is the absolute technical necessity to provide and deliver the "website" service which you have explicitly requested according to Art. 122 des d-lgs. 196/2003 by visiting the website.
Server Log-Files
Connection data are processed to monitor the technical function and to increase the reliability of our webhost. The duration of processing is limited to 60 days.
The legal basis of processing is the absolute technical necessity of a server log file as fundamental data basis for failure analysis and for security measures in connection with the "website" service you have explicitly requested according to Art. 122 des d-lgs. 196/2003 by visiting the website.
Contend Delivery Network
Key CDN
Parts of our website are hosted by our processor Key CDN, proinity LLC, Faerberstrasse 9, CH-8832 Wollerau, Schwitzerland.
Connection data are processed to provide and to deliver the website. Data are not stored beyond access for the mere purpose of delivery and provision of the website. However, our processor keeps connection data for security purposes. The duration of processing for security purposes varies and ends with the necessity of the security measures. Furthermore, our processor anonymizes collected data immediately after such data were collected and provides us with statistics for analysis containing anonymous data. We use these statistics for debugging and the sophistication of our website.
The legal basis of processing is the absolute technical necessity to provide and deliver the "website" service which you have explicitly requested according to Art. 122 des d-lgs. 196/2003 by visiting the website. Data are transferred to Switzerland pursuant to Article 45 GDPR in conjunction with the Adequacy Decision C(2000) 2304 of the European Commission.
Web analysis
Matomo
We use the local analysis software Matomo to process your data for the purpose of troubleshooting, failure analysis and statistical analysis and to identify measures for the sophistication of our website.
This service is a local analysis tool so that no personal data are transferred to the service provider or to third parties. Furthermore, your personal data are anonymized immediately after such data were collected. Personal data are therefore not stored beyond initial processing.
The legal basis of processing is the absolute technical necessity to provide and deliver the "website" service which you have explicitly requested according to Art. 122 des d-lgs. 196/2003 by visiting the website.
Contact Form
You can contact us by using a contact form provided on our website. After submission of the contact form, the controller will process the personal data you have provided for the purpose of handling your request on the basis of your consent which you have given by submitting the form according to Art. 6 (1) (a) GDPR, until revocation.You have no legal or contractual obligation to provide personal data. If you do not provide such data, you are simply not able to submit and we are not able to process your request.
Newsletter
Mailchimp
After consenting we will process your personal data for the purpose of sending you electronic direct mailings (e.g. newsletter) until revocation.
For the purpose of sending you newsletters we collaborate with our processor Mailchimp, The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000 Atlanta, GA 30308, USA.
The legal basis of processing is your consent according to Art. 122 des d-lgs. 196/2003 iVm Art. 6 Abs. 1 lit. a GDPR. You have no legal or contractual obligation to provide personal data. If you do not provide such data, we will not send you electronic direct mailings.
Data will be transmitted to the United States on the basis of your consent according to Art. 49 (1) (a) in conjunction with Art. 6 (1) (a) GDPR. You were informed already prior to giving your consent that the USA have not adopted data protection standards in conformity with EU requirements. In particular US intelligence agencies will be able to access your data without informing you and without you being able to take legal action. For this reason, the European Court of Justice has issued a judgment by which it invalidated the previous adequacy decision (privacy Shield).
Embeddings
Vimeo
If you have given your consent, we will process your personal data in cooperation with Vimeo, Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA as joint controllers for the purpose of playing videos on our website.
We will enable the service to collect connection data, data of your web browser, and to place an advertising cookie. The placing of advertising cookies allows Vimeo to create an individual user-ID for each user. These personal data can be used for unambiguous identification and are then processed via the advertising network operated by Vimeo.
Any further independent processing of data, especially via the Vimeo advertising network, is carried out by Vimeo as sole controller. Detailed information is provided in the Data privacy policy of Vimeo.
If you do not give your consent, we are simply not able to provide the Vimeo service to you. You can revoke your consent by changing the settings at Privacy settings.
The legal basis of processing is your consent according to Art. 122 des d-lgs. 196/2003. Data will be transmitted to the United States on the basis of your consent according to Art. 49 (1) (a) in conjunction with Art. 6 (1) (a) GDPR. You were informed already prior to giving your consent that the USA have not adopted data protection standards in conformity with EU requirements. In particular US intelligence agencies will be able to access your data without informing you and without you being able to take legal action. For this reason, the European Court of Justice has issued a judgment by which it invalidated the previous adequacy decision (privacy Shield).
Right to objekt
You have the right to object to processing if your personal data are processed based on legitimate interests. We will then cease the processing carried out on this basis, unless there are compelling and legitimate reasons for us to do so. You have the right to object to the processing of your personal data for the purpose of direct marketing. In this case, we will cease the processing of your personal data for the purpose of direct mail. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Right to withdrawl
You have the right to withdraw your consent at any time by changing the settings at Privacy settings. If you have given your consent to receipt of advertising by email, you may withdraw your consent by clicking the unsubscribe link. In this case, we will cease the processing operations, unless there is any other legal basis. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Other rights
You have the right to access to, rectification, erasure and restriction of processing of personal data. You have also the right to data portability if the processing of your personal data is based on your consent or on a contract concluded with you. You have also the right to lodge a complaint with the supervisory authority. If you need more information on the supervisory authorities in the European Union, click here.