Introduction

In accordance with Articles 13 and 14 of the General Data Protection Regulation (EU) 2016/679 (or General Data Protectioner Regulation (GDPR)) and generally in accordance with applicable national and European data protection regulations and standards, Ansitz Jenner provides the following information on the processing of personal data.

1. Data Controller

The right holder and controller of the data processing is the owner and controller of the data processing company Jenner in person of the legal representative pro tempore, with registered office in 39057 Eppan, Pigenoerweg, 10, VAT number IT02863170219, phone +39 335 5696655, e-mail elena.declaraicloudicloud.com, ZEP (PEC): declaraelena.pec@legalmail.it

Ansitz Jenner – Elena Declara
Pigenoerweg, 10
39057 Eppan

VAT number IT02863170219

Phone +39 335 5696655
E-mail: elena.declaraenicloud.com
ZEP (PEC): declaraelena.pec@legalmail.it

For contacts specifically related to the protection of personal data, including the exercise of the rights referred to in point 8, please send your enquiries to the following e-mail address: elena.declara-icloud.com

2. Types of data collected

The personal data that this website processes independently or through third parties includes: cookie, usage data and telephone number.
Full details of any type of personal data processed are provided in the relevant sections of this Privacy Policy or, on a case-by-case basis, by means of explanatory texts that are displayed prior to the data collection.

Personal data may be provided voluntarily by the user or, in the case of usage data, automatically collected when this website is used.

Any use of cookies – or other tracking tools – by this website or third-party service providers used by this website is intended to provide the service requested by the user and all other purposes described in this document and, if any, in the Cookie Policy.

3. Purposes of processing

The processing of your personal data may serve the following purposes:

(a) the conclusion of contracts and the performance of contractual obligations (for and on behalf of the right holder), f.e. purposes closely linked to the management of customer relations, including administrative and accounting formalities and operations (f.e.: carrying out transactions based on obligations arising from the contract concluded with the Customer, application of the agreed payment terms, operational and administrative requirements, requirements for the control of payments and the steps to be taken, access to all services offered on the website, including interactive services, obtaining information necessary for the handling of complaints and/or requests for information relating to the services, handling of disputes - contractual non-performance, reminders, settlements, debt recovery, arbitration, litigation, etc.);

(b) the fulfilment of legal obligations and orders issued by statutory authorities and supervisory (Privacy Guarantor);

(c) market research and customer satisfaction surveys, which are also carried out by specialized companies with personal or telephone surveys, questionnaires, online surveys, with the aim of offering special products and services (marketing);

d) The data subject declares his consent, conducts automated processes to analyze your preferences, habits and/or consumer decisions in order to be able to offer you products or services tailored to your interests (profiling);

4. Art and place of data processing

The following categories of personal data may be processed:

• surname, name, date of birth, place of birth, place of residence;

• Tax number and VAT number;

• Telephone number and/or e-mail address and other contact details;

• Address and house number of the delivery;

• payment methods and bank coordinates.

With respect to the above purposes, your personal data may be processed for the following purposes:

• Fulfillment of our obligations under contracts between you and us and providing the information and services you provide. This treatment is necessary to fulfil our mutual contractual obligations;

• Sending information for services by e-mail and /or SMS and/or other means of communication (e.g. booking confirmation). This treatment is necessary for the fulfilment of our mutual obligations and / or carried out with the consent of the user

• Receive payments from the user or transfer payments to you that we receive on your behalf. This treatment is necessary for the fulfilment of our mutual contractual obligations;

• Customize, edit, and maintain the user profile on our platforms;

• Access to our customer service and enable the user to communicate with the Team of Ansitz Jenner. This treatment is necessary for the fulfilment of our mutual contractual obligations, which are made with the consent of the user and / or are necessary to justify, exercise or defend the legal rights.

The data will be processed in the provider's branch office and in all other locations, where the bodies involved in the data processing are located. Depending on the location of users, data transfers may be made to another country (also outside the EU and the EEA). To learn more about the place where the data was processed, users can contact Jenner.

5. Legal basis for data processing and obligation to provide data

Art. 6I(point) (a) the GDPR serves as the legal basis for our company, for processing operations in which we obtain consent for a specific processing purpose. Where the processing of personal data is necessary for the performance of a contract, to which the data subject is a party, as is the case, for example, in the case of processing operations necessary for the supply of goods, or the provision of any other service or consideration, the processing shall be based on Article 6I(b). (b)of the GDPR. The same applies to such processing operations that are necessary for the implementation of pre-contractual measures, for example in cases of enquiries about our products or services. If our company is subject to a legal obligation that requires the processing of personal data, such as the fulfilment of tax obligations, the processing shall be based on Article 6 I letter. (c)of the GDPR. Ultimately, processing operations could be referred to in Article 6I(1) (f)of the GDPR. This legal basis is based on processing operations which are not covered by any of the before mentioned legal bases, where the processing is necessary, to safeguard a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not prevail. We are allowed to do this kind of processing, in particular because they have been specifically mentioned by the European legislator. In that regard, it considered that a legitimate interest could be presumed if the data subject is a customer of the controller (recital 47, second sentence, of the GDPR).

6. Collection, modalities of processing and storage of data

The data is collected from the data subject, f.e. the data you provide to us and those resulting from the use of the contractually defined services.
The data processing takes place:

• manual and automated systems;

• by persons authorized to carry out these tasks;

• by taking measures which are likely to ensure the confidentiality of the data and to avoid access to them by unauthorized third parties.

Regarding the purposes from c) to d) of point 3 above, it is noted, that, in particular, the personal data will also be processed as follows:

• automated call or call communication systems;

• with electronic means of communication such as e-mail, fax, short message service or other messages;

• by a telephone employee or by post.

With reference to the purposes a) and b) of point 3 above, your data will be stored for the entire duration of the contractual relationship, and after its termination, this will be done – only in so far as the relevant data is concerned – with a view to the termination of the contractual obligations and for the continuation of all any steps required by law, as well as for protection requirements of a contractual nature, which are connected with or arising from the contract.

With reference to purpose d) of the foregoing point 3, the data processing ends at the latest – f.e. if you don´t revoke your consent in advance – upon termination of the contractual relationship.

With reference to purposes c) and (d) of point 3 above, the processing of data may continue until the consent has been revoked, but in no case more than two years after the termination of the contractual relationship or after renewal of the consent.

No automated decision-making processes are provided for, whereby the possibility of profiling (if you declare the corresponding consent) remains untouched.

7. Disclosure of data

We do not share the information you provide with us, including your personal information, with third parties, except in cases where:

• It is necessary to include a third party for the performance of a contract with the user in order to simplify or extend our services (f.e. if we charge the User for costs or credits in connection with services on the Platforms);

• We use analytics suppliers and search engines to help improve and optimize our platforms;

• We may distribute portions of our platforms for viewing on our business partners' websites through APIs or widgets. In such cases, some information from the user's public profile may appear on these sites.

In accordance with applicable laws and, if necessary, with the user's consent, we may combine information about you, including personal information and information about cookies we send and receive from our business partners. We may use this information and the combined information for the above purposes.

8. Rights of the data subject

a) Right to confirmation

Each data subject has the right granted by the European legislator to require the controller to certify whether personal data concerning him or her will be processed. If a data subject wishes to aware this right of confirmation, he or she may at any time contact an employee of the controller.

b) Right to information

Any person concerned by the processing of personal data shall have the right granted by the European legislator to obtain free information at any time from the controller about the personal data stored about him or her and a copy of that information. In addition, the European legislator has granted the data subject information on the following information:

• the processing purposes

• the categories of personal data that are processed

• the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular, to recipients in third countries or international organizations

• if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining that duration

• the existence of a right of rectification or erasure of personal data relating to them or of a right of objection to their processing by the controller

• the existence of a right of appeal in the case of a supervisory authority

• if the personal data are not collected from the data subject: all available information on the origin of the data

• the existence of automated decision-making, including profiling in accordance with Article 22(1) and 4 GDPR and, at least in such cases, meaningful information on the logic involved and the scope and intended impact of such processing on the data subject

In addition, the data subject has a right of access to whether personal data have been transferred to a third country or to an international organisation. If this is the case, the data subject shall also have the right to obtain information on the appropriate guarantees in connection with the transfer.

If a data subject wishes to aware this right of access, he or she may at any time contact an employee of the controller.

c) Right to correction

Any person concerned by the processing of personal data shall have the right granted by the European legislator to request the immediate rectification of inaccurate personal data concerning him/her. In addition, the data subject has the right, taking into account the purposes of the processing, to request the completion of incomplete personal data, including by means of a supplementary declaration.

If a data subject wishes to exercise this right of rectification, he or she may at any time contact a member of staff of the controller.

d) Right to erasure (right to be forgotten)

Any person concerned by the processing of personal data shall have the right granted by the European legislator to require the controller to delete the personal data concerning him or her without delay, provided that one of the following reasons is true and that the processing is not necessary:

• The personal data has been collected or otherwise processed for purposes for which it is no longer necessary

• The data subject withdraws his consent on which the processing was based in accordance with Article 6(1) (a) GDPR or Article 9(2) (a) GDPR and there is no other legal basis for processing

• the data subject objects to the processing pursuant to Article 21(1) of the Block Exemption Regulation and there are no overriding legitimate reasons for processing, or the data subject objects to the processing pursuant to Article 21(2) of the Block Exemption Regulation

• The personal data were processed in an illegal manner

• The disclosure of personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the controller is subject.

• The personal data were collected in relation to the information society services offered in accordance with Article 8(1) of the GDPR

If one of the above reasons applies and a data subject wishes to request the deletion of personal data stored at the Jenner residence, he or she may at any time contact an employee of the controller. The employee of the Jenner seat will arrange for the deletion request to be complied with immediately.

If the personal data has been made public by the Jenner residence and our company is responsible in accordance with Art. 17 Paragraph 1 GDPR obliges the deletion of personal data, he shall take appropriate measures, including technical measures, taking into account the available technology and implementation costs, to inform other data controllers who process the published personal data that the data subject has requested from those other data controllers the deletion of all links to that personal data or copies or replications of that personal data, unless the data subject is required to process such data. The employee of the Jenner residence will arrange the necessary measures in individual cases.

e) Right to restrict processing

Any person concerned by the processing of personal data shall have the right granted by the European legislator to require the controller to restrict the processing if one of the following conditions is met:

• The accuracy of the personal data is disputed by the data subject for a period of time which enables the controller to verify the accuracy of the personal data.

• The processing is illegal, the data subject refuses to disclose the personal data and instead demands that the use of the personal data be restricted.

• The controller does not need the personal data for the purposes of processing, but the data subject does not need them to assert, exercise or defend legal claims.

• The data subject has objected to the processing in accordance with Article 21(1) of the GDPR and it is not yet clear whether the legitimate reasons of the controller predominate against those of the data subject.

If one of the above conditions is met and a data subject wishes to request the restriction of personal data stored at the Jenner residence, he or she may at any time contact an employee of the controller. The employee of the Jenner seat will arrange the restriction of the processing.

f) Right to data portability

Any person concerned by the processing of personal data shall have the right granted by the European legislator to obtain the personal data concerning him or her, which have been provided by the data subject to a controller, in a structured, common and machine-readable format. It also has the right to transfer this data to another controller without hindrance by the controller to whom the personal data were provided, that the processing is based on the consent in accordance with Article 6(1) (a) GDPR or Article 9(2) (a) OR on a contract under Article 6(1) (b) of the GDPR and the processing is carried out using automated procedures, provided that the processing is not necessary for the performance of a task which is in the public interest or in the exercise of official authority entrusted to the controller.

Furthermore, in exercising his right to data portability in accordance with Article 20(1) of the GDPR, the data subject has the right to obtain that the personal data be transferred directly from a controller to another controller, so far as this is technically feasible and provided that this does not affect the rights and freedoms of other persons.

In order to assert the right to data portability, the data subject may at any time contact an employee of the Jenner residence.

g) Right to object

Any person concerned by the processing of personal data shall have the right granted by the European legislator to object at any time to the processing of personal data concerning him or her, on the basis of Article 6(1) (e) or (f) GDPR, for reasons arising from his or her particular situation. This also applies to profiling based on these provisions.

The Jenner Residence will no longer process the personal data in the event of an objection, unless we can prove compelling legitimate grounds for the processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

If the Jenner residence processes personal data for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to profiling in so far, as it is related to such direct marketing. If the data subject objects to Jenner's processing for direct marketing purposes, the person concerned will no longer process the personal data for these purposes.

In addition, the data subject has the right, for reasons arising from his or her particular situation, to object to the processing of personal data concerning him or her, which takes place at the residence of Jenner for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) GDPR, unless such processing is necessary for the performance of a task in the public interest.

In order to exercise the right to object, the data subject may directly contact any employee of the Jenner residence or any other employee. The data subject is also free to exercise his right of objection in connection with the use of information society services, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications.

h) Automated decisions on a case-by-case basis, including profiling

Any person concerned by the processing of personal data shall have the right granted by the European legislator not to be subject to a decision based solely on automated processing, including profiling, which has legal effect against it or similarly significantly impairs it, provided that decision (1) is not necessary for the conclusion or performance of a contract between the data subject and the controller, or (2) is permissible under Union or Member State legislation to which the controller is subject and that such legislation contains appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject, or (3) with the express consent of the data subject.

If the decision (1) is necessary for the conclusion or performance of a contract between the data subject and the controller, or (2) it is made with the express consent of the data subject, he shall take appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject, including at least the right to obtain the intervention of a person on the part of the controller, to express his or her point of view and to challenge the decision.

If the data subject wishes to exercise rights relating to automated decisions, he or she may at any time contact an employee of the controller.

i) Right to withdraw from data protection consent

Any person affected by the processing of personal data has the right granted by the European legislator to withdraw consent to the processing of personal data at any time.

If the data subject wishes to exercise his or her right to withdraw consent, he or she may at any time contact an employee of the controller.