Data Protection Policy

This application collects personal data from its users.

PROVIDER AND DATA CONTROLLER ACCORDING TO ARTICLE 4(7) GDPR

Amolaris Garden Lodges & Guesthouse
Schanzenstr. 31
39021 Goldrain
South Tyrol – Italy

Tel: +39 0473 74 20 57

Email: info@amolaris.com
PEC: obermuehle@pec.rolmail.net

TYPES OF DATA COLLECTED

Among the types of personal data this application collects, either independently or through third parties, are: cookies, usage data, and email address.

Full details on each type of personal data processed are provided in the dedicated sections of this privacy policy or by specific explanation texts displayed prior to data collection.

Personal data may be freely provided by the user, or, in the case of usage data, automatically collected when using this application.

Unless otherwise specified, all data requested by this application is mandatory. Failure to provide such data may make it impossible for this application to provide its services. In cases where this application specifically states that certain data is optional, users may choose not to provide such data without consequences for the availability or functioning of the service.

Users who are uncertain about which personal data is mandatory are welcome to contact the provider.

Any use of cookies – or other tracking tools – by this application or by third-party service providers used by this application is intended to provide the service requested by the user, as well as any other purposes described in this document and, if available, in the cookie policy.

Users are responsible for any third-party personal data obtained, published, or shared through this application and confirm that they have the third party’s consent to provide such data to the provider.

METHODS AND PLACE OF DATA PROCESSING

PROCESSING METHODS

The provider processes user data in a proper manner and takes appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of the data.

Data processing is carried out using computers and/or IT-enabled tools, following organizational procedures and methods strictly related to the purposes indicated. In addition to the data controller, in some cases the data may be accessible to certain categories of persons involved with the operation of the site (administration, human resources, sales, marketing, legal, system administration) or external parties (such as technical service providers, delivery companies, hosting providers, IT companies, communication agencies), appointed, if necessary, as processors by the provider. An updated list of these parties may be requested from the provider at any time.

LEGAL BASIS OF PROCESSING

The provider may process personal data relating to users if one of the following applies:

• The user has given consent for one or more specific purposes. Note: In some jurisdictions, the provider may be allowed to process personal data until the user objects (“opt-out”), without relying on consent or any other legal basis. This does not apply when the processing of personal data is subject to European data protection law.
• Processing is necessary for the performance of a contract with the user and/or for pre-contractual obligations.
• Processing is necessary for compliance with a legal obligation to which the provider is subject.
• Processing is related to a task carried out in the public interest or in the exercise of official authority vested in the provider.
• Processing is necessary for the purposes of the legitimate interests pursued by the provider or by a third party.

In any case, the provider will gladly clarify the specific legal basis that applies to the processing, and whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.

PLACE OF PROCESSING

Data is processed at the provider’s operating offices and in any other places where the parties involved in the processing are located.

Depending on the user’s location, data transfers may involve transferring the user’s data to a country other than their own. To learn more about the place of processing, users may refer to the relevant sections of this document.

Users also have the right to learn about the legal basis of data transfers outside the European Union or to an international organization governed by public international law or formed by two or more countries, such as the UN, and about the security measures taken by the provider to safeguard their data.

If such a transfer takes place, users can find out more by checking the relevant sections of this document or by contacting the provider using the information provided in the contact section.

RETENTION TIME

Personal data shall be processed and stored for as long as required by the purpose for which it has been collected.

Therefore:

• Personal data collected for the performance of a contract between the provider and the user shall be retained until such contract has been fully performed.
• Personal data collected for the purposes of the provider’s legitimate interests shall be retained as long as needed to fulfill such purposes. Users may find specific information regarding the legitimate interests pursued by the provider in the relevant sections of this document or by contacting the provider.

The provider may also be allowed to retain personal data for a longer period whenever the user has given consent, as long as such consent is not withdrawn. Furthermore, the provider may be required to retain personal data for a longer period whenever necessary for compliance with a legal obligation or upon order of an authority.

Once the retention period expires, personal data will be deleted. Therefore, users cannot claim the rights to access, rectification, erasure, or data portability after the expiration of the retention period.

PURPOSES OF PROCESSING

User data is collected so the provider can provide its services. Data is also collected for the following purposes: displaying content from external platforms, interaction with external social networks and platforms, remarketing and behavioral targeting, analytics, spam protection, tag management, payment processing, and management of landing pages and invitation pages.

Users may refer to the relevant sections of this document for detailed information on the purposes of processing and the personal data used for each purpose.

DETAILED INFORMATION ON THE PROCESSING OF PERSONAL DATA

Personal data is collected for the following purposes and using the following services:

USER RIGHTS

Users may exercise certain rights regarding their data processed by the provider:

• Withdraw consent at any time.
• Object to processing.
• Access their data.
• Verify and request correction.
• Restrict processing.
• Request erasure.
• Receive their data and have it transferred to another controller.
• Lodge a complaint.

DETAILS ABOUT THE RIGHT TO OBJECT

Users may object to processing carried out in the public interest, in the exercise of official authority, or for the purposes of the provider’s legitimate interests by providing a ground related to their particular situation.

Users may object to processing for direct marketing purposes at any time without justification.

HOW TO EXERCISE THESE RIGHTS

Requests to exercise user rights may be directed to the provider using the contact details provided in this document. These requests are free of charge and will be processed by the provider as early as possible and always within one month.

LEGAL INFORMATION

This privacy policy has been prepared based on provisions of multiple legislations, including Articles 13 and 14 of Regulation (EU) 2016/679 (General Data Protection Regulation).

Unless otherwise specified, this privacy policy refers solely to this application.