PRIVACY
Data protection
In the following section you will find information on the handling of your personal data, which is collected during your navigation on the website and when using the services we offer. In order to be able to provide you with all functions and services of our website, it is necessary for us to collect and process personal data about you. The processing of your personal data can include any type of action, including collecting, organizing, storing, querying, evaluating, changing, selecting, reading out, comparing, using, linking, blocking, communicating, deleting and destroying. Your personal data is always processed in accordance with the principles of legality and fairness, taking into account all applicable regulations and in accordance with EU Regulation 679/2016 of the European Parliament and Council. We explain what data we collect, why it is necessary and what rights you have in relation to your data.
​
responsibility for data processing
Residence Edelweiss, Via Vierbrunnen 21, 39030 Rasun Anterselva, Italy, VAT no. IT02856050212.
If you have any questions, you can also contact us at any time.
Phone: +39 0474 493063 | Mobile: +39 349 3439466
E-mail: info@residence-edelweiss.net
Internet: www.residence-edelweiss.net
​
​
purpose of data processing
Residence Edelweiss processes data
to fulfill legal obligations
to fulfill the obligations arising from contracts
to provide you with the information and services you have requested
to check the efficiency of the system
to carry out marketing campaigns such as sending commercial information, advertising material and market research
to protect liabilities (e.g. payments)
to determine customer satisfaction with regard to the quality of products and services
​
type of data processing
Your personal data will be processed manually, telematically, but mainly with automated means and processes adapted to the respective purposes. Databases and electronic platforms managed by us or by third parties are mainly used here. Any type of data processing ensures the security and confidentiality of the data.
When connecting to the website, computer systems and software procedures automatically and indirectly manage and/or acquire a series of general data and information. The following data can be recorded:
browser types and versions used
the operating system used
the website from which an accessing system reaches our website (so-called referrer)
the sub-websites, which are controlled via an accessing system on our website
Date and time of access
an internet protocol address (IP address)
other similar data and information
This general data and information is stored in the server's databases and log files to ensure you a stable and secure experience. The legal basis is Art. 6 in the GDPR.
This anonymously collected data and information is therefore evaluated statistically on the one hand and also with the aim of increasing data protection and data security in order to ultimately guarantee an optimal level of protection for the personal data we process.
retention of data
In order to comply with the law, the Owner has established different retention periods for personal data depending on the individual purposes:
In order to manage and respond to your requests related to products and initiatives, your personal data will be retained for as long as is necessary to process your request.
In order to manage the activities related to your use of the website, your personal data will be kept for the time necessary to provide the service you have requested
For the management and exercise of the provision of services provided for by law (related to accounting, administration, taxation, etc.), your personal data will be kept for the time necessary for this purpose
For the management of disputes and any litigation, your personal data will be kept for the time strictly necessary for the pursuit of these purposes and, in any case, no longer than the limitation periods in force.
​
Use of cookies
In order to improve the use of our website, we use cookies. Cookies are pieces of text information that are stored on a computer via the browser when you visit a website. This storage serves to recognize a session. You can delete saved cookies at any time via your web browser or adjust the settings so that no cookies are saved. It may then happen that not all of our services and functions of our website are available. For more information, see our cookie policy.
​
​
contact form
Should you decide to send an inquiry via the contact form, the provision of certain personal data is necessary in order to meet your requirements. This is also the reason why the respective fields of the form are marked with an asterisk or otherwise as mandatory data. The provision of other personal and sensitive data is entirely up to you. Failure to provide or incomplete personal data marked with an asterisk or otherwise as mandatory data will result in the service you requested not being able to be performed. By submitting the form you agree to the data processing. Your data will be processed to administer and answer your questions and will not be stored for longer than is necessary for the respective processing purposes.
​
Newsletter
We only send newsletters with advertising information with the consent of the recipient or legal permission. Our newsletter contains information about the company, services, offers and promotions (e.g. new platform functions, travel tips, travel offers, additional offers for your trip, vouchers, competitions or information on participating in the community), which may come from us or our partners. When and how often the newsletter is sent depends on the respective newsletter. Before we send out a newsletter, we obtain confirmation of your subscription to the newsletter (double opt-in procedure). This is regulated in Art. 6 Para. 1 Letter b) GDPR. Recipient data is transmitted to the service provider for sending the newsletter. According to the GDPR, this partnership is regulated in the order processing contract. In order to meet the legal requirements, we log the registrations for the newsletter. This includes in particular the recording of the registration and confirmation time. Personal master data is only used to personalize the newsletter and recipients can object to the sending at any time directly in the newsletter. The storage period corresponds to the duration of the newsletter subscription.
​
profiling
Profiling is any type of automated processing of personal data, which consists in using this personal data to evaluate, analyze and predict certain aspects relating to a natural person. We have entered into agreements with third parties for this type of marketing.
​
Partnersch aft with third parties
When we work with our third party service providers, they are contractually bound to use the same privacy/security standards and we ensure that they are adhered to. Such third parties acting as processors guarantee that they will not store the data received from us and will not use them for any other purpose.
Within the framework of such agreements, user e-mail addresses are transmitted to the third-party provider using cryptographic mechanisms (e.g. hashing). A traceability of the e-mail address is therefore denied.
We may need to transfer your data to service providers in non-European countries (EEA). The EEA consists of European Union countries and Switzerland, Iceland, Liechtenstein and Norway, which are considered countries with equivalent data protection and privacy laws. This type of data transfer may occur when our servers (ie where we store data) or our suppliers and service providers are located outside the EEA. In the event that we transfer your information to a country outside the European Economic Area (EEA), we will ensure that the information is properly protected.
​
​
dissemination of the data
The personal data processed by us are generally not subject to dissemination. In certain cases, data is transmitted to the following recipients.
Subcontractors for technical checks, payments, identity and delivery services, analytics providers or credit insurance agencies
Public administration and authorities when provided for by law
Credit institutions with which we have business relationships for the management of receivables/liabilities and for arranging financing
any natural or legal person, public and/or private (legal, administrative and tax offices, courts, chambers of commerce, etc.) if the communication of the data proves necessary or useful for the performance of our activity
​
User Rights
The above-mentioned rights can be asserted by the data subject or a person commissioned by him/her by sending a registered letter or e-mail to the person responsible, Mr Konrad Messner, at the operational company headquarters Residence Edelweiss, Via Vierbrunnenstraße 21, 39030 Rasun Antholz, Italy. The user has the right to obtain a copy of the personal data in our possession. The answer will be given within the period prescribed by law. In certain cases we may store some information for legal purposes (suspicion of fraud, breach of terms and conditions). If you believe that your rights have been violated, you also have the right to lodge a complaint with the responsible data protection supervisory authority or to take legal action.
We summarize the rights of the affected user as follows:
right to confirmation
Every data subject has the right to request confirmation from the data controller that the personal data concerned is being processed. If a data subject wishes to exercise this right to confirmation, they can contact us at any time.right to information
Every data subject has the right to receive information about the personal data stored about them free of charge at any time. The information contains the following information:the processing purposes
the categories of personal data being processed
the recipients or categories of recipients to whom the personal data has been or will be disclosed, in particular recipients in third countries or international organizations. If the data is transmitted to a third country, the person concerned also has the right to receive information about the guarantees of data processing.
the planned duration for which the personal data will be stored
the existence of a right of appeal to a supervisory authority
if the personal data is not collected in the company concerned: all available information about the origin of the data
the existence of automated decision-making including profiling in accordance with Article 22 (1) and (4) GDPR and - in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
Right to Rectification
Every person affected by the processing of personal data has the right to demand the immediate correction of incorrect personal data concerning them.Right to Erasure
Every person affected by the processing of personal data has the right to demand that the person responsible delete the personal data concerning them immediately if one of the following reasons applies and if the processing is not necessary:The personal data was collected or processed in some other way and is no longer necessary.
The data subject revokes their consent on which the processing is based in accordance with Art. 6 Para. 1 Letter a DS-GVO or Art. 9 Para. 2 Letter a DS-GVO or the processing contradicts another legal basis.
The data subject objects to the processing in accordance with Art. 21 (1) GDPR and there are no overriding legitimate reasons for the processing.
The personal data have been unlawfully processed.
Erasure of the personal data is necessary to fulfill a legal obligation in Union or Member State law to which the controller is subject.
The personal data was not collected in relation to services offered in accordance with Art. 8 Para. 1 DS-GVO - protection of minors.
Right to restriction of processing
Any person affected by the processing of personal data has the right to request that the person responsible restrict the processing if one of the following conditions is met:The accuracy of the personal data is contested by the data subject. The restriction applies for a period that enables the person responsible to verify the accuracy of the personal data.
The processing is unlawful, the data subject refuses the deletion of the personal data and instead requests the restriction of the use of the personal data.
The person responsible no longer needs the personal data for the purposes of processing, but the data subject needs them to assert, exercise or defend legal claims.
The data subject has lodged an objection to the processing pursuant to Article 21(1) of the GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.
Right to data portability
Every person affected by the processing of personal data has the right to receive the personal data relating to them, which the person concerned has provided to a person responsible, in a structured, common and machine-readable format. You also have the right to transmit this data to another person in charge without hindrance from the person in charge to whom the personal data was provided. Furthermore, when exercising their right to data portability in accordance with Art. 20 Para the rights and freedoms of other persons are not impaired by this.right to object
Every person affected by the processing of personal data has the right to object at any time to the processing of personal data relating to them for reasons that arise from their particular situation. This also applies to profiling based on these provisions. In the event of an objection, we no longer process the personal data unless we can demonstrate compelling reasons for the processing which outweigh the interests, rights and freedoms of the data subject or the processing serves to assert, exercise or defend legal claims. If we process personal data in order to operate direct advertising, the person concerned has the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to profiling insofar as it is associated with such direct advertising.Automated decisions on a case-by-case basis, including profiling
Any person affected by the processing of personal data has the right to object to a decision based solely on automated processing - including profiling - which has legal effect on them and significantly affects them, provided that the decision is not necessary for the conclusion or performance of a contract between the data subject and the person responsible is required. If the decision is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or it is based on the data subject's explicit consent, we shall implement suitable measures to safeguard the rights and freedoms.Right to withdraw consent under data protection law
Any person affected by the processing of personal data has the right to revoke consent to the processing of personal data at any time.
​
​
Place of processing of your personal data
Your personal data will be processed mainly in our premises and in those departments where the data controllers are located. The contractually agreed service is provided exclusively in a member state of the European Union or in a state party to the Agreement on the European Economic Area. Any relocation of the service or part of the work to a third country requires the prior consent of the client and may only take place if the special requirements of Art. 44 et seq. .
For further information, please contact us at the addresses given in the "Imprint" section.
​
​
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including your IP address) is transmitted to a Google server in the USA and stored there. Google will use this information to evaluate your use of the website, to compile reports on website activity for website operators and to provide other services related to website activity and internet usage. Google may also transfer this information to third parties if required to do so by law or if third parties process this data on Google's behalf. Under no circumstances will Google associate your IP address with other Google data. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. You can prevent the installation of cookies by setting your browser software accordingly; we would like to point out to you however that in this case you can if applicable not use all functions of this website in full. You can prevent the collection of data and the processing of this data by Google by downloading and installing the following browser plugin: https://tools.google.com/dlpage/gaoptout?hl=de .
You can find more information on the terms of use and data protection of Google Analytics at: https://www.google.com/analytics/terms/de.html as well as below https://support.google.com/analytics/answer/6004245?hl=de .
The site uses Google Analytics using IP masking to ensure the anonymous collection of IP addresses.
It should be noted that we use Google Analytics to evaluate data from AdWords and the double-click cookie for statistical purposes. If you do not want this, deactivate it under https://adssettings.google.com/?hl=de .
SSL/TLS encryption
SSL/TLS encryption is used for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us. You can recognize such an encrypted connection by the fact that the address line of the browser begins with "https://". You can also recognize the encryption by the lock symbol in your browser line. If SSL/TLS encryption is active, the data you transmit to us cannot be read by third parties.
Encrypted payment transactions
If, after the conclusion of a fee-based contract, there is an obligation to send us your payment data, such as your account number, this data is required for payment processing. Payment transactions using common means of payment (Visa/MasterCard, direct debit) are made via an encrypted SSL/TLS connection.
​
​
​
​
​
​
​