#exploreYourWay

Data protection and cookies statement

Declaration regarding the duty to provide information
Protection of your personal data is very important to us. Hence, we process your data only pursuant to the legal provisions as amended (GDPR 679/2016; TKG of 2003) and under consideration of necessary technical and organisational measures concerning security of your data, but also regarding the state of the art, the type of data and the risks to which it is exposed. Based on this Privacy Policy, we provide you with information on the most important data processing aspects.

Purpose of the processing; legal basis
If you contact us by writing an email, completing forms, participating in events on our website and/or by directly referring to the tourism associations’ offices, the data you provided will be used only for processing your written or electronic queries and related purposes. This includes the delivery of information/advertising materials for Alta Badia products and services, all types of marketing, re-marketing and profiling activities to submit personalised offers by the controller and/or their shareholders.
Data processing is required only for dealing with your queries and related legal obligations. Possible refusal might impact on correctly dealing with your queries. The processing of your data for delivering information/advertising material and for any (re-)marketing and profiling purposes, including the delivery of newsletters, is exclusively based on your consent which you may withdraw at any time.

Types of processing; place of processing; retention period
The data is processed at the controller's registered office by themselves, their shareholders and/or other associated legal persons who commission dedicated employees with this task.
Processing includes all processes with or without automated procedures, in writing or electronically, including the recording with databases and the processing through automated computer systems. This is related to personal data, such as data gathering, collection, organisation, arrangement, storage, adjustment, modification, reading, retrieval, use, disclosure by transfer, distribution or any other type of provision, comparison or linking, restriction, erasure or destruction of data.
To fulfil the above purposes, data may be transferred to third parties in Italy and other EU Member States for organisational and/or administrative reasons who are connected to the controller based on contracts.
Upon the data subject’s request, the controller provides him/her with an exact list of third parties to whom the data is transferred.
The data will be stored digitally and/or analogously for 6 months from the time of collection. If you participate in any events, the data will be stored for the period pursuant to the law and/or for the limitation periods concerning any legal matters. Data processed for advertising, (re-)marketing and profiling will be stored until you revoke your consent and not longer than for 8 years from registration; after that, a new consent will be required.

Cookies
Our website uses what is called “cookies”. Cookies are small text files which are stored on your end device with the use of the browser. They do not cause any harm. We use cookies to configure our offer so that it is user-friendly. Some cookies remain stored on your device until you delete them. These cookies allow us to recognise your browser on your next visit. Third party providers place other cookies on our website by us embedding their services. This way, session data, e.g. your IP address, the URL or the website you accessed, the referrer URL, a time stamp or information on the user’s terminal or browser may be transmitted to such third parties. For more details in this regard and the storage periods, please refer to the linked privacy policy of the relevant third party. If you do not want such cookies to be placed on your terminal, you can adjust your browser settings so that you are informed about the use of cookies and only allow them to be used in individual cases. If the cookies are deactivated, the functionality of this website may be limited.

Embedding third-party services/contents

Web analysis by Google Analytics
Our website uses features of the Google Analytics web analysis service. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use cookies which enable analyses of the website use by visitors. Information which is generated will be transferred to and saved on the service providers’ servers.
You can prevent this from happening by adjusting your browser so that no cookies are saved. We have concluded an appropriate contracted data processing agreement with the service provider.
The legal basis for data processing is your consent according to point (a) of Article 6(1) GDPR.

IP anonymisation
We activated the IP anonymisation function on this website. This means that Google shortens your IP address within the European Union Member States or other states party to the Agreement on the European Economic Area before it is transmitted to the United States. Only in exceptional cases is the full IP address transmitted to a Google server and shortened in the US. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activities and to provide other services relating to the use of the website and the internet to the website operator. The IP address transmitted by your browser in connection with Google Analytics will not be merged with any other Google data.

Browser plug-in
You can prevent the storage of such cookies by changing the settings of your browser software accordingly; however, please note that, in this case, you may not be able to make full use of all the functions of this website. In addition, you can prevent the collection of the data created by the cookie and related to your use of the website (including your IP address) as well as the processing of such data by Google by downloading and installing the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout

Demographic features with Google Analytics
This website uses the “Demographic Features” function in Google Analytics. This allows for the compilation of reports containing information about age, gender and interests of website visitors. These data originate from advertisements by Google based on users’ interests and from third-party user data. These data cannot be attributed to a specific person. You can deactivate this function at any time in the display settings in your Google account, or refuse the collection of data by Google Analytics entirely, as described in the “Objection to data collection” section.

Google Fonts and APIs
We use the “Google Fonts” external fonts and scripts for this website. Google Fonts is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Web Fonts inclusion is based on calling a Google server which is generally located in the US. This way, this server receives information about which of our websites you visited. Google also stores the IP address belonging to the terminal browser of the users of the website. The legal basis of data processing is point (f) of Article 6(1) GDPR. To this extent, optimum display of our website is a legitimate interest in terms of the above Regulation. For more information, please refer to the Google Privacy Policy available at
https://tools.google.com/dlpage/gaoptout

YouTube
This website includes YouTube elements. YouTube is an internet-based video portal allowing video publishers to freely upload videoclips and users to watch, grade and comment on such videos for free. YouTube allows the publication of all types of video which is why complete films and TV broadcasts are accessible on that internet platform, but also music videos, trailers or videos which users made themselves.
YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The legal basis for data processing is your consent according to point (a) of Article 6(1) GDPR.
With each view of the individual pages of this website which are operated by the controller and on which a YouTube element (YouTube video) was integrated, the web browser on the data subject’s IT system is automatically prompted by the respective YouTube element to download from YouTube a presentation of the relevant YouTube element. For more information on YouTube, please refer to https://www.youtube.com/about/. In the context of this technical process, YouTube and Google receive information on which pages of our website the data subject concretely accesses.
Should the data subject be logged on to YouTube at the same time, YouTube recognises the concrete web page accessed by the data subject when accessing any web page which contains a YouTube video. YouTube and Google collect and assign such information to the data subject’s respective YouTube account.
Via the YouTube element, YouTube and Google receive information on the data subject having accessed our website whenever the data subject is logged on to YouTube at the time of accessing our website. This occurs independent of whether the data subject clicks on a video. If data subjects do not want such information to be transferred to YouTube and Google, they may prevent transmission by logging off from their YouTube account before accessing our website.
The YouTube Privacy Policy available at https://policies.google.com/privacy contains information on personal data collection, processing and use by YouTube and Google.

Google Tag Manager
This is a tag management system to manage JavaScript and HTML tags used to implement tracking and analysis tools and, hence, relevant to website functioning. In this context, aggregated data on tag triggering is collected.
The processor is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Outdooractive
The website uses technologies and contents of the “Outdooractive” platform to provide users with several services, including, but not limited to, the display of tours exchanged through interfaces between the website and Outdooractive. Outdooractive uses a session cookie to differentiate between users once a user accesses the website with the relevant contents. It is possible that Outdooractive becomes aware of personal data. The provider is Outdooractive GmbH, Missener Straße 18, 87509 Immenstadt.
Without embedding Outdooractive technologies and contents, tours presentation in this way focussed on services and user-friendliness would be impossible which is why the contents are embedded based on a legitimate interest pursuant to point (f) of Article 6(1) GDPR.
For more information on the use of personal data, please refer to the Outdooractive GmbH Privacy Policy at https://www.outdooractive.com/en/privacy.html

LTS.it
LTS (Landesverband der Tourismusorganisationen Südtirol, Regional Association of Tourism Organisations in South Tyrol, Gerbergasse 60, 39100 Bolzano) is the umbrella organisation of tourism associations in South Tyrol. One of the most important tasks of the LTS is the implementation of national projects relevant for tourism and the coordination of national standard tourism solutions, such as the TIC-Web back-office software program used for collecting data from regions, e.g. on accommodations, prices, services, vacancies, restaurants/cafés, activities and POIs.
On our website, LTS TIC-Web data is embedded into the website through the interface to enable accommodation display/searches, restaurants/cafés, hair salons, shops, craftsmen and POI (museums and other interesting places).
The legal basis of data processing is point (f) of Article 6(1) GDPR. To this extent, optimum display of our website is a legitimate interest in terms of the above Regulation.
Contact: Landesverband der Tourismusorganisationen Südtirols, Gerbergasse 60, 39100 Bolzano, info@lts.it
For information on data protection, please refer to https://www.lts.it/index.php/en/it-tic-web/useful/data-protection

Newsletter
You can subscribe to our newsletter via our website. We need to have your e-mail address, your given and family name and a declaration according to which you consent to receiving our newsletter.
To deliver tailored information, we also collect and process voluntary information on fields of interest, addresses, dates of birth and other aspects, if applicable. The legal basis for data processing is your consent according to point (a) of Article 6(1) GDPR.
After subscribing to our newsletter, we send to you a confirmation mail containing a link to confirm registration. You may unsubscribe at any time by simply completing the below form: https://www.altabadia.org/en/newsletter-cancellation.html
We immediately erase your data relating to newsletter deliveries.

Your rights
Generally, you have the right to be provided with information and those of access, rectification, erasure, restriction of processing, data portability, withdrawal of your consent and objection. To exercise your rights or if you believe the processing of your data violates the General Data Protection Regulation or your claims under data protection law, you may always refer to ABB, the controller, or lodge a complaint with the supervisory authority (Garante per la Privacy).

Controller:
Alta Badia Brand Ltd. Consortium
Str. Planmurin 5
39036 La Villa
Tel. +39 0471 095895
info@altabadia.org
Certified e-mail address: altabadiabrand@legalmail.it

This Privacy Policy is subject to amendments.
Last update: January 2021