Privacy Policy

 

This privacy policy informs you about the nature, scope and purpose of the processing of personal data (hereinafter referred to as “data”) within our online services and the associated websites, functions and content, as well as external online presences such as our social media profiles (hereinafter collectively referred to as the “online offer”). Regarding the terminology used, such as “processing” or “controller”, we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).

Pörnbacher Family
Bödenstraße 5
I-39030 Olang
Puster Valley | Dolomites | South Tyrol

Types of data processed:
• Inventory data (e.g. names, addresses)
• Contact data (e.g. email addresses, phone numbers)
• Content data (e.g. text entries, photographs, videos)
• Usage data (e.g. visited websites, interest in content, access times)
• Meta/communication data (e.g. device information, IP addresses)

 

 

Categories of affected persons
Visitors and users of the online offer (hereinafter collectively referred to as “users”).
Purpose of processing
• Provision of the online offer, its functions and content
• Responding to contact inquiries and communication with users
• Security measures
• Reach analysis / marketing

 

Terminology Used

“Personal data” means any information relating to an identified or identifiable natural person.
“Processing” means any operation performed on personal data, with or without automated means.
“Pseudonymisation” means processing personal data in such a manner that the data can no longer be attributed to a specific person without additional information.
“Profiling” means any form of automated processing of personal data to evaluate certain personal aspects relating to a natural person.
“Controller” means the natural or legal person who determines the purposes and means of processing personal data.
“Processor” means a natural or legal person who processes personal data on behalf of the controller.

Applicable Legal Bases
In accordance with Art. 13 GDPR, we inform you of the legal bases of our data processing. Unless otherwise stated, the following applies:
• Consent: Art. 6 para. 1 lit. a GDPR
• Fulfilment of contractual obligations: Art. 6 para. 1 lit. b GDPR
• Legal obligations: Art. 6 para. 1 lit. c GDPR
• Legitimate interests: Art. 6 para. 1 lit. f GDPR

Security Measures
We implement appropriate technical and organisational measures in accordance with Art. 32 GDPR to ensure a level of protection appropriate to the risk.
These measures include in particular ensuring the confidentiality, integrity and availability of data as well as procedures for safeguarding data subject rights.

Cooperation with Processors and Third Parties
If data is disclosed or transferred to third parties or processors, this is done only on the basis of legal permission, contractual necessity, consent or legitimate interests.
Where third parties process data on our behalf, this is done in accordance with Art. 28 GDPR.

Transfers to Third Countries
If data is processed outside the European Union (EU) or the European Economic Area (EEA), this will only take place in compliance with Arts. 44 et seq. GDPR and under appropriate safeguards.

Rights of Data Subjects
Users have the right to:
• obtain confirmation as to whether data concerning them is being processed
• access personal data
• request correction of inaccurate data
• request deletion or restriction of processing
• receive their data in a portable format
• lodge a complaint with the competent supervisory authority

Right of Withdrawal
Users have the right to withdraw consent at any time with future effect in accordance with Art. 7 para. 3 GDPR.

Right to Object
Users may object at any time to future processing of their data in accordance with Art. 21 GDPR.

Cookies
Cookies are small files stored on users’ devices. We use temporary and permanent cookies to improve the functionality of our website.
Users may disable cookies in their browser settings. Disabling cookies may limit website functionality.

Further information:
• http://www.aboutads.info/choices/
• http://www.youronlinechoices.com/

Deletion of Data
The data processed by us will be deleted or restricted in accordance with Arts. 17 and 18 GDPR, unless statutory retention obligations apply.

Administration and Accounting
We process data within the scope of administrative tasks, accounting and legal obligations in accordance with Art. 6 para. 1 lit. c and f GDPR.

Contact Requests
When contacting us (e.g. via contact form, email, telephone or social media), users’ details are processed for handling the request in accordance with Art. 6 para. 1 lit. b and f GDPR.

Hosting and Email Services
The hosting services we use serve to provide infrastructure, storage space, databases, email services and technical maintenance.

Collection of Access Data and Log Files
Our hosting provider collects data about every access to the server (server log files), such as:
• name of the accessed webpage
• date and time of access
• browser type
• operating system
• IP address
Log file information is stored for security reasons for a maximum of 7 days.

Social Media Presence
We maintain online presences on social networks in order to communicate with users and customers.
Data may also be processed outside the EU. Detailed information can be found in the privacy policies of the respective providers.

Integration of Third-Party Services and Content
We use third-party content and services (e.g. videos, fonts, social plugins) on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR.

Google Fonts
We use Google Fonts provided by Google LLC.
Privacy Policy: https://www.google.com/policies/privacy/

Google ReCaptcha
We use Google ReCaptcha to protect forms from spam and bots.
Privacy Policy: https://www.google.com/policies/privacy/

Use of Facebook Social Plugins
We use social plugins from Facebook.
Further information: https://www.facebook.com/about/privacy/