Information pursuant to Articles 12, 13 and 14 of EU Regulation 2016/679
In accordance with EU Regulation 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, this administration, which has always been attentive to the confidentiality, accuracy, availability and security of personal data, provides the following information:
Purpose of data processing
Personal data is collected and processed in the context of administrative activities for the performance of institutional, administrative and accounting functions or for purposes related to the exercise of rights and powers of customers/suppliers and administrators or for non-institutional purposes.
Processing methods
The data are processed with computerized systems and/or in manual form, in any case by means of suitable procedures that guarantee their security, confidentiality and availability.
The communication of data is optional.
Failure to provide the data means that the administration is prevented from providing the requested services.
The data may be communicated to all subjects (offices, bodies and organs of the public administration, companies or institutions) that are obliged to know them or may know them in accordance with the provisions. In the case of special personal data and/or data relating to criminal convictions and offenses, the communication is made to the subjects and in the forms indicated in the Regulation on the processing of sensitive and judicial data (Measure of the Data Protection Authority of 30.05.2005).
The data may be accessed by the controller, the processors, the data protection officer, the persons responsible for the processing of personal data and the system administrator of this administration.
The data will only be disseminated within the scope permitted by the regulations.
Duration of data processing and storage of personal data
The processing operations referred to in this information will only last as long as strictly necessary to fulfill the obligations imposed on the controller by national and/or international laws, as well as by the laws of the countries to which the data may be transferred.
Information on the rights of the data subject
The data subject has the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the information specified in Art. 15 GDPR.
The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her and, where applicable, the completion of incomplete personal data (Art. 16 GDPR).
The data subject has the right to obtain from the controller the erasure of personal data concerning him or her without undue delay where one of the grounds listed in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued (right to erasure).
The data subject has the right to obtain from the controller restriction of processing where one of the conditions listed in Art. 18 GDPR applies, e.g. if the data subject has objected to processing, for the duration of the verification by the controller.
The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, under certain circumstances, e.g. if the processing is based on consent and the processing is carried out by automated means (right to data portability Art. 20 GDPR).
The data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her. The controller will then no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims (Art. 21 GDPR).
Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data relating to him or her infringes the GDPR (Art. 77 GDPR). The data subject may exercise this right before a supervisory authority in the Member State of their habitual residence, place of work or place of the alleged infringement. In Italy, the competent supervisory authority is Garante per la protezione dei dati personali
Controller, data processor
Apartment Schuster, with legal offices at San Vito, 39030 Braies, is the controller of all personal data that may be collected via the aforementioned website.
Personal data will only be processed in accordance with this privacy policy by employees and collaborators who have been expressly appointed as data protection officers. The employees have been adequately trained in this regard and work under the direct supervision and responsibility of the Data Controller.
Further data protection information – Website
Apartment Schuster has drawn up the present data protection statement in order to inform visitors to this website about the terms and purposes of data processing. In particular, visitors or persons who make use of the web services offered on the website are informed in accordance with Article 13 of Regulation (EU) 679/2016 on the protection of personal data. Your personal data will be processed in accordance with Legislative Decree no. 196/2003, EU Regulation 2016/679 (General Data Protection Regulation) and Legislative Decree 101/2018. This privacy policy refers to the above-mentioned website and does not apply to linked websites that may be visited by users.
Your data will be processed to provide our services based on your request and to fulfill our pre-contractual and contractual obligations to you. Your data may be passed on to third parties if necessary, but only within the scope of our business relationship. Your data will not be transferred to other EU countries. Profiling and automated decisions are not used.
The legislator has issued various retention obligations and periods. After these periods have expired, the corresponding data will be deleted.
We check links that leave our website very carefully. Nevertheless, we accept no responsibility or liability for the content of pages linked to from this website or from another website.
This Privacy Policy is an integral part of our website and the services we offer. Access to and use of the website presupposes that this Privacy Policy has been read and understood. If you do not agree with this Privacy Policy, please do not use our website.
Apartment Schuster may modify or update this Privacy Policy in whole or in part. Changes or updates to the privacy policy are visible to all users in the privacy column of the website and are binding from the moment of publication on the website. If the user does not agree with the changes, he or she can stop using our website. Continued use of our website and our products and services following the publication of the aforementioned changes and/or updates shall be deemed to constitute acceptance of the changes and acceptance of the binding nature of the new terms and conditions. The website is the property of Apartment Schuster and is administered by the same.
Types of data collection and purpose of processing:
Navigation data
The systems and software processes necessary for the correct operation of the website acquire, during normal use, some personal data whose transmission is implicit in the normal use of Internet communication protocols. This is information that is not collected to identify a data subject, but which, by its very nature, could, through processing and association with data transmitted by third parties, allow users to be identified. This category of data includes IP addresses or domain names, the computers used by users of the website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the status of the response given by the server (successful, error, etc.) in numerical code, and other parameters relating to the user’s operating system and computer environment. This data is used exclusively for statistical purposes and is only managed in anonymous form in order to guarantee its correct functioning. The data may also be used to ascertain responsibility in the event of hypothetical IT infringements with damage to the website: with the exception of this case, the aforementioned data will not be stored for more than 24 months.
Data provided voluntarily by users/visitors
Data, which are transmitted by the visitor to the website, voluntarily and expressly for the purpose of using specific services, or by means of e-mail inquiries sent to Apartment Schuster, may be automatically registered, in which case the information is used exclusively for the services specified in the communication of the information. Your data will be used for the purpose of fulfilling your specific requests, contractual obligations, tax or accounting obligations, invoicing, debt collection and for the fulfillment of the obligations required by the applicable laws.
Cookies
This website also collects personal data through the use of cookies.
There are three categories of cookies:
# strictly necessary cookies to ensure the basic functions of the website
# functional cookies to ensure the performance of the website
# targeted cookies to improve the user experience.
Some websites use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser on your next visit.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.
If you generally do not allow us to use cookies, certain functions and pages will not work as expected.
With the exception of navigation data, Apartment Schuster solely processes data, which has been submitted voluntarily and expressly by the user. However, the refusal to provide certain information could result in a limitation of the services offered. Once the registration has been completed, the personal data will be processed exclusively for the services indicated in the information letter.
Visitors to the website can register for one or more of the following services:
– Information about services, inquiries etc.
– Express your interest in a service
– Contact Apartment Schuster using the form provided.
Contact
Visitors have the possibility to contact Apartment Schuster. In the event of a request, all personal data will be processed in accordance with the information letter or for the purpose of data processing in accordance with the internal procedures for managing contacts. This service is also subject to express acceptance, by ticking the appropriate box, of Apartment Schuster’s privacy policy.
Disclosure to third parties
The personal data will not be disclosed in any case, unless required by law or requested by the judicial authority or other bodies and institutions. Furthermore, Apartment Schuster also uses the services of other companies and/or persons to provide certain services, such as sending e-mails, delivering parcels, making payments. The aforementioned third parties only have access to those personal data that are absolutely necessary for the performance of their own tasks. Apartment Schuster emphasizes that the third parties are prohibited from using the personal data for other purposes and are obliged to use this data in accordance with the privacy policy and the applicable legal provisions.
Apartment Schuster does not intentionally collect sensitive or judicially relevant personal data via its website. Within the meaning of Art. 9 of Regulation (EU) 2016/679, special categories of data (“sensitive data”) are personal data concerning gender and ethnic origin, religious, philosophical or other beliefs, political opinions, membership of political parties, trade unions, associations or organizations with a religious, philosophical, political or trade union background, as well as data concerning health or sexual orientation. Within the meaning of Art. 10 of Regulation (EU) 2016/679, judicially relevant data includes criminal convictions and offenses. We recommend that you do not provide such information on our website. If this is unavoidable (for example, in the case of assignment to protected groups of persons when sending a CV for employment purposes, in response to a job offer or when expressing interest in employment with our company), we request that you send us the specific information letter by post. In it, please give your written consent to the processing of said personal and sensitive data.
Retention of data
Information and personal data collected through this website, including those voluntarily provided by the visitor to obtain the sending of information material or other communications by writing to the addresses indicated in the “Contacts” section, will only be retained for the time strictly necessary to provide the requested service. Once the service has been provided, all personal data will be deleted in accordance with the privacy policy of Apartment Schuster, unless otherwise requested by the authorities or required by law.
Data security
Apartment Schuster protects personal data by means of internationally recognized security standards, as well as procedures that
make
– unauthorized access
– unauthorized use and distribution
– unauthorized modification
– loss and unintentional or unlawful destruction impossible.
Real Cookie Banner
We use the “Real Cookie Banner” consent tool to manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and the associated consents. Details on how “Real Cookie Banner” works can be found at https://devowl.io/rcb/data-processing/. The legal bases for the processing of personal data in this context are Art. 6 (1) lit. c GDPR and Art. 6 (1) lit. f GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the associated consents. The provision of personal data is not yet contractually required and is not required for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consents.
YouTube
Videos from the YouTube website are embedded on this website. The operator of the pages is Google Ireland Limited. We use YouTube in extended data protection mode – this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the transmission of data to YouTube partners is not necessarily excluded by the extended data protection mode. As soon as you start a YouTube video on this website, a connection to the Google/YouTube servers is established. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.
YouTube can store various cookies on your device. In this way, YouTube can obtain information about visitors. The use of YouTube is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 GDPR. Consent can be revoked at any time. Further information on data protection can be found at: https://policies.google.com/privacy?hl=en.
Wordfence
We have integrated Wordfence on this website. The provider is Defiant Inc.
Wordfence is used to protect our website from unwanted access or malicious
cyberattacks. We have concluded an order processing agreement (AVV) for the use of the above-mentioned service.
The use of Wordfence is based on Art. 6 para. 1 lit. f DSGVO. The website operator
has a legitimate interest in protecting its website as effectively as possible against cyberattacks.
If a corresponding consent has been requested, the processing is carried out exclusively on the
basis of Art. 6. The consent can be revoked at any time.
Details can be found here:
https://www.wordfence.com/help/general-data-protection-regulation/
Google Maps
This website uses Google Maps, which is provided by Google Ireland Limited. In order to use the functions of Google Maps, your IP address is transmitted to a Google server in the USA and stored there. As the provider of this site, we have no influence on this data transfer. When Google Maps is displayed, Google can load Google Fonts into your browser cache to display texts. The use of Google Maps is in the interest of an appealing presentation of our website, production facilities and locations. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If a corresponding consent has been obtained, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25. Consent can be revoked at any time. Data is transferred to the USA on the basis of the EU Commission’s standard contractual clauses.
You can find details here: https://policies.google.com/privacy?hl=en.
Google Fonts (hosted locally on our server)
This website uses Google Fonts, which are provided by Google. These fonts are hosted locally so that no connection to Google’s servers is established.
You can find more information about Google Fonts here: https://policies.google.com/privacy?hl=en.
Font-Awesome (hosted locally on our server)
This website uses Font-Awesome, which is provided by Fonticons, Inc. These fonts are hosted locally, so there is no connection to Fonticons’ servers.
You can find more information about Font-Awesome at: https://fontawesome.com/privacy.SSL-Verschlüsselung
Google Analytics (with anonymization function)
The controller has integrated the Google Analytics component (with anonymization function) on this website. Google Analytics is a web analytics service. Web analysis is the collection, compilation and evaluation of data about the behavior of visitors to websites. Among other things, a web analysis service collects data about the website from which a data subject came to a website (so-called referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. Web analysis is primarily used to optimize a website and for the cost-benefit analysis of Internet advertising.
The operator of the Google Analytics component is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland.
The data controller uses the addition “_gat._anonymizeIp” for web analysis via Google Analytics. With the help of this addition, the IP address of the Internet connection of the data subject is shortened and anonymized by Google if access to our Internet pages is from a member state of the European Union or from another state party to the Agreement on the European Economic Area.
The purpose of the Google Analytics component is to analyze the flow of visitors to our website. Google uses the data and information obtained, among other things, to evaluate the use of our website, to compile online reports on the activities on our website for us and to provide other services related to the use of our website.
Google Analytics places a cookie on the data subject’s IT system. What cookies are has already been explained above. By setting the cookie, Google is given the opportunity to analyze the use of our website. Each time one of the individual pages of this website is accessed, which is operated by the data controller and on which a Google Analytics component has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. During the course of this technical procedure, Google gains knowledge of personal information, such as the IP address of the data subject, which Google uses, inter alia, to understand the origin of visitors and clicks, and subsequently create commission calculations.
The cookie is used to store personal information, such as the access time, the location from which the access was made and the frequency of visits to our website by the data subject. Each time the data subject visits our website, this personal data, including the IP address of the Internet connection used by the data subject, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may share this personal data collected through the technical process with third parties.
The data subject may, as stated above, prevent the setting of cookies through our website at any time by means of a corresponding adjustment of the web browser used and thus permanently deny the setting of cookies. Such a setting of the Internet browser used would also prevent Google from placing a cookie on the data subject’s IT system. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.
Furthermore, the data subject has the option of objecting to the collection of data generated by Google Analytics and relating to the use of this website and the processing of this data by Google and to prevent such processing. To do this, the data subject must download and install a browser add-on from the link https://tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data and information about visits to websites may be transmitted to Google Analytics. The installation of the browser add-on is considered an objection by Google. If the data subject’s IT system is deleted, formatted or reinstalled at a later date, the data subject must reinstall the browser add-on in order to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by the data subject or another person who is attributable to their sphere of control, there is a right to choose between uninstallation and deactivation.
Further information and the applicable data protection provisions of Google can be found at https://www.google.de/intl/de/policies/privacy/ and at http://www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail at this link https://www.google.com/intl/de_de/analytics/.
SSL:
This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the requests you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL encryption is activated, the data you send to us cannot be read by third parties.
Underage visitors
The Apartment Schuster website, which is governed by this privacy policy, is not intended for use by minors. We are aware of the need to protect data relating to minors, especially in the online environment. Therefore, we do not collect and store any data of underage visitors, unless this is done involuntarily.
Responsible for the content Headquarters / Address
Apartment Schuster
Family Schuster Dietmar
San Vito 2b, 39030 Braies
Tel: +39 349463672
Mail: info@schuster-prags.com