Privacy Policy pursuant to Articles
13 and 14 of Regulation (EU) 2016/679 (GDPR)
Information on the processing of personal data pursuant to Article 13 of Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR).
1. Name and contact details of the data controller and the data protection officer
The data controller within the meaning of the General Data Protection Regulation (GDPR) is:
Data Controller: Stolzlechner Klaus
Koflberg 6, I-39030 St. Jakob (BZ), Italy
E-mail: info@oberkofl-chalet.com
Telephone: +39 0474 652411
No Data Protection Officer has been appointed, as there is currently no legal obligation to appoint one.
2. Collection and storage of personal data and the nature and purpose of their use
When you visit our website, information is automatically sent to the server of our website by the browser used on your device. This information is temporarily stored in a so-called server log file.
The following information may be collected without any action on your part and stored until it is automatically deleted:
- IP address of the requesting device
- date and time of access
- name and URL of the requested file
- website from which access is made (referrer URL)
- browser used and, where applicable, the operating system of your device
- name of your access provider
The data mentioned above is processed by us for the following purposes:
- to ensure a smooth connection to the website
- to ensure convenient use of our website
- to evaluate system security and stability
- for other administrative and technical purposes
The legal basis for data processing is Article 6(1)(f) GDPR. Our legitimate interest arises from the purposes listed above.
Cookies and, where applicable, analytics services may also be used on our website. Further information on this can be found in Sections 4 and 5 of this Privacy Policy.
3. Disclosure of data to third parties
Your personal data will not be transferred to third parties for purposes other than those listed below.
We will only disclose your personal data to third parties if:
- you have expressly consented to the disclosure pursuant to Article 6(1)(a) GDPR;
- disclosure is necessary pursuant to Article 6(1)(b) GDPR for the performance of a contract with you;
- there is a legal obligation to disclose the data pursuant to Article 6(1)(c) GDPR;
- disclosure is necessary pursuant to Article 6(1)(f) GDPR to protect our legitimate interests or those of a third party, and there is no reason to assume that you have an overriding legitimate interest in your data not being disclosed.
4. Cookies and consent management
Our website uses cookies and comparable technologies. Cookies are small text files that are stored on your device when you visit a website.
We distinguish between technically necessary cookies and cookies or technologies that are used for analytics, marketing, external content or other purposes and are not technically necessary for the operation of the website.
Technically necessary cookies may be used without prior consent to the extent that they are strictly necessary to provide a service explicitly requested by the user or to ensure the technical operation of the website.
Non-essential cookies and external services are activated on our website via the consent management platform Klaro! only after the user has given the relevant consent.
Consent is voluntary. If consent is not given or is subsequently withdrawn, the website can generally still be used. However, individual functions or external content may not be available.
You can change or withdraw your consent at any time via the consent management settings provided on the website.
The legal basis for processing based on consent is Article 6(1)(a) GDPR and, where applicable, Article 122 of Italian Legislative Decree No. 196/2003 (Italian Privacy Code), as amended.
Further information on the individual cookies and services, their purposes, providers and storage periods can be found directly in the consent management platform.
5. External services and analytics
a) Google Analytics 4
We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics 4 is used to analyse the use of our website and to improve its content and functionality.
Google Analytics 4 is activated on our website only after the user has given the relevant consent via Klaro.
The legal basis for the processing is Article 6(1)(a) GDPR and, where applicable, Article 122 of Italian Legislative Decree No. 196/2003.
Depending on the technical configuration and the services used, data may be processed by Google group companies and transferred to countries outside the European Economic Area. Google applies appropriate safeguards for such transfers in accordance with applicable data protection law.
Further information on data processing by Google can be found in Google's privacy documentation.
b) Google Tag Manager
We use Google Tag Manager to manage and technically integrate tags and scripts on our website.
Google Tag Manager is used as a technical tag management system and is not intended by us as an independent profiling or analytics tool.
Services and tags that require consent are configured so that they are activated in accordance with the consent given via Klaro.
The actual processing of personal data depends on the respective services and tags integrated via Google Tag Manager.
c) Google Maps
Our website may use Google Maps to display maps and location information.
Google Maps is activated only after the user has given the relevant consent via Klaro. No connection to the Google Maps service is established before consent has been given.
After activation, technical information such as the IP address and information required to display the map may be transmitted to Google and processed by Google.
The legal basis for this processing is Article 6(1)(a) GDPR and, where applicable, Article 122 of Italian Legislative Decree No. 196/2003.
d) YouTube
Our website may contain embedded videos from YouTube, a service provided by Google.
If YouTube videos are embedded, they should only be loaded and activated after the user's consent has been obtained via Klaro. No connection to YouTube should be established before consent has been given.
After activation, data such as the IP address, browser information and information relating to the video viewed may be transmitted to Google and processed by Google.
The legal basis for this processing is Article 6(1)(a) GDPR and, where applicable, Article 122 of Italian Legislative Decree No. 196/2003.
e) Google Fonts
One of the fonts used on our website is currently loaded externally via Google Fonts. When an externally hosted font is loaded, a connection to Google's servers may be established and technical information, including the IP address and browser information, may be transmitted.
Where technically possible, we recommend hosting the fonts locally on our own web server in order to avoid an unnecessary connection to an external provider.
f) Klaro! Consent Management
We use Klaro! as a consent management platform to manage and document users' consent preferences regarding cookies and external services.
Klaro! stores the user's selected consent settings so that these preferences can be respected during subsequent visits to the website.
6. Rights of data subjects
You have the following rights in relation to your personal data under the GDPR:
- the right to obtain information about your personal data processed by us pursuant to Article 15 GDPR;
- the right to request the correction of inaccurate personal data pursuant to Article 16 GDPR;
- the right to request the deletion of your personal data pursuant to Article 17 GDPR;
- the right to request the restriction of processing pursuant to Article 18 GDPR;
- the right to data portability pursuant to Article 20 GDPR;
- the right to lodge a complaint with a data protection supervisory authority pursuant to Article 77 GDPR.
You may exercise these rights by contacting us using the contact details provided above.
You also have the right to lodge a complaint with the competent data protection supervisory authority. In Italy, this is the Garante per la protezione dei dati personali.
7. Right to object
If your personal data is processed on the basis of legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right to object to such processing pursuant to Article 21 GDPR for reasons arising from your particular situation.
To exercise your right to object, please contact us using the contact details provided above.
8. Data security
During your visit to our website, we use the widespread SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead.
You can recognise whether an individual page of our website is transmitted in encrypted form by the closed padlock symbol displayed in the address bar of your browser.
We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss or destruction, and against unauthorised access by third parties.
Our security measures are continuously improved in accordance with technological developments.
9. Currency and amendments to this Privacy Policy
This Privacy Policy is currently valid as of the date stated on the website.
Due to the further development of our website and services or due to changes in legal or regulatory requirements, it may become necessary to amend this Privacy Policy.
The current version of the Privacy Policy can always be accessed on our website at:
