Advisory Notice concerning the processing of guests' personal data 
Declaration issued pursuant to art. 13 of EU Regulation 2016/679 enacted by the European Parliament and by the Council on 27 April, 2016 relative to the protection of natural persons as regards the processing of personal data and the free movement of such data, which also supersedes directive 95/46/EC (General Data Protection Regulation).
Pursuant to the EU Regulation for the protection of personal data (Regulation 2016/679 enacted by the European Parliament and by the Council), please be informed as follows:
Name and contact details of the data controller
The controller of the data processing is Jürgen Widmann, Pension Widmann, Stulles 7/a, 39013 Moso in Passiria, Alto Adige – Italy, tel. +39 0473 649514, e-mail: info@pensionwidmann.com, internet: www.pensionwidmann.com.

Personal data and special categories of data
The following are considered as being your personal data:

- data relative to you as an individual (surname, name, address, e-mail, telephone number, telefax number, date of birth), as well as language and vehicle license plate number.
- the data contained in your passport or identity card
- data relative to the methods of payment or relating to payments (e.g. banking information, details of credit cards).
- date of arrival and duration of visit.
- data relative to access, utilization and communication.

Special categories of data include data relative to health care and to special personal needs.

Purpose of processing of the personal data and legal ground for processing
The data provided will be processed for the following purposes:

- compliance with the requirements of the law;
- fulfilment of pre-contractual and contractual obligations relative to the guest's visit (booking, accommodation, departure etc.);
- sending of communication and telephone contact with the guest;
- storage of data in order to facilitate subsequent bookings and requests;
- transmission of information, offers and news regarding the hotel and its partners, by e-mail, letter and other means of communication relative to the hotels, the local area and any local events, etc.;
- data regarding access, utilization and communication, which are processed for security reasons and to guarantee correct functioning of the Internet page.


Legal grounds for the processing of your data include:

- compliance with the requirements of the law (art. 6, section 1, para. c) of the RGPD);
- fulfilment of pre-contractual and contractual obligations (art. 6, section 1, para. b) of the RGPD);
- your consent (art. 6, section 1, para. a) of the RGPD);
- for legitimate interests (art. 6, section 1, para. f) of the RGPD).
Special categories of personal data are not processed on our internet page.
Your consent is necessary if special categories of personal data are processed during the course of your visit to the Pensione Widmann.


Booking
It is necessary to enter your personal data on the booking form included in our web site in order to make a booking and to make use of the contractual services. The travel data marked with an asterisk must be entered when booking your stay.
We utilize a payment platform which guarantees the security of any payments made using your credit card.
When you elect to pay the deposit by bank transfer, additional personal data such as the name of the account-holder and bank coordinates, too, will be processed.
Indication of the data relative to the invoice is not obligatory, but is necessary for issuing an invoice.
The legal ground for the processing of personal data is compliance with the law and fulfilment of pre-contractual and contractual obligations.
The period for which the data will be stored is in accordance with the obligations for the storage of data and the requirements of the law; your personal data provided for the purposes of booking will be stored only for the period strictly necessary for processing.
Data processed subject to your consent will be stored until you withdraw such consent. 

Request
The indication of your personal data on the relative request form included in our internet page is necessary for your request and to allow you to make use of the pre-contractual and contractual services. The travel data marked with an asterisk must be entered when entering a request.
The legal ground for the processing of personal data is compliance with the law and fulfilment of pre-contractual and contractual obligations.
The period for which the data will be stored is in accordance with the obligations for the storage of data and the requirements of the law; your personal data provided for the purposes of your request will be stored only for the period strictly necessary for processing. 

Newsletters and promotional messages
Indication of your personal data for the sending by the hotel of information, special offers and newsletters is not obligatory. If you do not submit your personal data, you will not receive special offers and newsletters. 
Personal data provided in order to receive information, special offers and newsletters will be processed only with your consent, and will be stored until you withdraw such consent.

Data relative to access, utilization and communication

Cookies
What are cookies?
Cookies are small text files, which are downloaded from your internet browser when you visit a website. If you access the same page again using the same device, the cookie is sent back to the website or to a different website to which it belongs. The website therefore recognises that the web page has already been viewed using this browser, and is able to improve the user’s browsing experience when the page is viewed again. For example, cookies remember user preferences and adapt the offers displayed to the user’s personal needs and interests. Depending on their function and purpose, cookies are divided into various categories:
Technical cookies
Profile cookies
Third-party cookies

Technical cookies
These cookies are stored on the user’s device only during the current session and are designed to ensure that the website can be used correctly. Analytical cookies, used to collect access statistics, are considered to be technical cookies. They collect general information without identifying the user.

Profile cookies
These cookies are used to track the user’s browsing behaviour, including their preferences, habits, etc. In this way, the user can be sent advertising messages tied to the products previously viewed or similar to these.

Third-party cookies
These are cookies of other websites.
By closing the information banner or clicking on any element of the website, you provide your consent to the use of cookies.

Which cookies are used on this website?
We use technical cookies, and third-party cookies on this website.

How to disable cookies
Standards on the protection of personal information require the user being able to disable cookies that are already installed. The links below contain explanations on how to disable the use of cookies in the various browsers.
Google Chrome
Firefox
Microsoft Edge
Safari
If a browser other than those listed above is used, it is possible to deactivate the use of cookies by following the instructions in the help menu of the relative browser (insert the word "cookie" in the search menu). The user can therefore disable and/or cancel cookies from the relative settings in their browser, and disable and/or cancel single non "technical" cookies installed by third parties by accessing the website managed by European Interactive Digital Advertising Alliance (EDAA) at the web address: www.youronlinechoices.eu
Here you can adjust your cookie settings.
  
Server Log Archives
When the web page is accessed, data are automatically identified and stored in the archives of the server log. In this case, these data include: IP address, browser and browser version, operating system, time of access and quantity of data transferred.

Google Analytics
Our web page also utilizes the functions provided by the web analysis service of Google Analytics developed by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA in order to optimise our online service. To this end, the data may be transferred to third countries. The Privacy Shield framework, which has certified Google, ensures that the protection of personal data is in compliance with European laws.

Google Maps
We utilize the maps provided by Google's mapping service "Google Maps". The data processed may include the user's IP address and position, though these will not be identified without your consent (check the settings on your mobile device).

SSL protocol and legal ground
SSL protocol (Secure Sockets Layer): In order to guarantee the security of your data during transmission, we use state-of-the-art coding procedures via https.
Data regarding access, utilization and communication are stored and processed for reasons of security and to ensure the correct operation of the internet page. The legal ground is the pursuit of the legitimate interests in accordance with art. 6, section 1, para. f) of the RGPD. 


Social Media

We are present on the social networks with the purpose of providing information to and communicating with clients and potential clients. As a result, the user's data may also be processed outside the European Union. However, a European Union adequacy decision is in place as set forth in art. 45 of the RGPD which provides adequate guarantees relative to the transfer of data in accordance with art. 46 of the RGPD.
The legal ground for the processing of the data relative to your visit to our social media platforms is the pursuit of legitimate interests in accordance with art. 6, section 1, para. f) of the RGPD.
To this end, we maintain sites on both facebook and instagram. 


Recipients of Personal data
  
In principle, your personal data will not be transferred to other subjects. However, the data may in special cases be:

- transferred to other departments of the hotel, though subject to the limits of legitimate use;
- transferred to the following data processors or to third subjects, in those cases where it is necessary to meet your requests or to provide special services:
     - HGV – Association of Hoteliers and Caterers
     - IT specialist for the remote maintenance of the hotel programme.

Your personal data may also be collected from the following sources:
     - Booking.com B.V., Herengracht 597, 1017 CE Amsterdam, Netherlands
     - Expedia Inc., 333 108th Avenue NE, Bellevue, WA 98004, USA
     - HRS – HOTEL RESERVATION SERVICE, Blaubach 32, 50676 Cologne, Germany
     - Booking Alto Adige, HGV Service Cooperativa, Via Macello 59, 39100 Bolzano, Italy
     - Val Passiria Tourist Board, Via Passiria 40, 39015 S. Leonardo in Passiria (BZ), Italy 


Rights of the data subject
  
Right of access: as set forth in art. 15 of the RGPD, you shall have the right to be informed of the personal data processed, the source and nature of the data, the transfer of the data (if any) and the recipient, and the manner in which the data are utilized.

Right of rectification and erasure: as set forth in art. 16 of the RGPD, you may at any time request the rectification or completion of your personal data. Similarly, as set forth in art. 17 of the RGPD, you may request the erasure of your personal data. In the case of published data, you shall also enjoy the "right to be forgotten", in other words request the enactment of the measures necessary to delete all the links, copies, replications etc.

Right to object: you may at any time exercise the right to object as set forth in art. 21 of the RGPD and modify or entirely withdraw your consent to any future processing.

Right to restriction (or cessation) of the processing: as set forth in art. 18 of the RGPD, you may also require that the processing of your personal data be restricted. In this case, the data may be processed only subject to specific consent, therefore the processing of the data will be effectively restricted.

Right to data portability: as set forth in art. 20 of the RGPD, you shall enjoy the right to receive the data provided by you in a structured, commonly-used and machine-readable format, and may also require the transmission of said data to a different Data Processor.

As set forth in art. 77 of the RGPD, you shall enjoy the right to lodge a complaint with a supervisory authority.
Enquire
