Effective date of the GDPR 2016/679 Privacy Policy: 25.05.2018.

Privacy Policy and Cookie Policy

The Controller Martina Rainer is constantly committed to protecting the online privacy of its users. This document has been drawn up pursuant to Article 13 of EU Regulation 2016/679 (hereinafter referred to as the “Regulation”) in order to allow you to become familiar with and understand our privacy policy and how your personal information is handled when using our website and, where necessary, to expressly and consciously give your consent to the processing of your personal data (valid only for persons aged at least 16 years). The information and data you provide or otherwise acquired by us through the use of our services on the website (hereinafter referred to as the “Services”) are processed in compliance with the provisions of the Regulation and the confidentiality obligations governing the activity of the business.
 

In accordance with the provisions of the Regulation, the processing carried out by Rainer Martina is based on the principles of lawfulness, fairness and transparency, purpose limitation, storage limitation, data minimisation, accuracy, integrity and confidentiality.

The Controller

The Controller of the processing carried out through the website is Rainer Martina (details see above / imprint). For information regarding the processing of personal data by the Controller, including the list of data processors appointed to process the data, please write to the following address: info@gasthauszumlex.it

Personal data subject to processing

We inform you that, as a result of your navigation on the website, the Controller will process personal data consisting of identifiers such as your name, an identification number, an online identifier, a postal address, an e-mail address, a telephone number (landline and/or mobile), or one or more elements of your physical, physiological, psychological, economic, cultural or social identity, enabling the identification or identifiability of the data subject (hereinafter referred to as “personal data”).
 

The personal data processed through the website are the following:
 

Navigation data

The computer systems and software procedures used to operate the website acquire, during their normal operation, certain personal data whose transmission is implicit in Internet communication protocols. This information is not collected in order to be associated with identified data subjects but, by its very nature, through processing and association with data held by third parties, may allow the identification of users. This category of data includes IP addresses or domain names of the computers used by users connecting to the website, the URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server’s response (successful, error, etc.) and other parameters relating to the operating system and computer environment. These data are used exclusively to obtain anonymous statistical information on the use of the website and to check its correct functioning, to detect anomalies and/or misuse, and are deleted immediately after processing. The data may be used to ascertain liability in the event of hypothetical computer crimes against the website or third parties. Apart from this possibility, the data collected on the website are deleted after a short period of time.

Special categories of personal data

If you use our website to contact us (or send us an e-mail), there may be a transmission of your personal data falling within the special categories of personal data pursuant to Article 9 of the Regulation, namely “[…] personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as […] genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.” Please do not disclose such data unless strictly necessary. We expressly point out that the Controller cannot be held liable with regard to the transmission of special categories of personal data in the absence of explicit consent to process such data (although you are of course allowed to send a curriculum vitae), as in such cases the processing is permitted because it concerns data manifestly made public by the data subject, in accordance with Article 9(1)(e) of the Regulation. We nevertheless stress the importance, as already mentioned above, of providing explicit consent to the processing of special categories of personal data should you decide to transmit such information.
 

We also inform you that, for the purpose of candidate selection, the Controller may analyse professional social profiles freely accessible on the Internet (e.g. LinkedIn).

Data voluntarily provided by the data subject

If you use certain services on the website (e.g. enquiry, contact or reservation forms), we may process personal data of third parties that you submit to the Controller. In such cases, you act as an independent data controller, assuming all legal obligations and liabilities. In this respect, you grant us the broadest indemnity against any objection, claim or compensation claim arising from the processing that the Controller may receive from third parties whose personal data have been processed through the use of website functions in violation of applicable personal data protection regulations. If you provide or otherwise process personal data of third parties while using the website, you guarantee in any case that such processing is based on an appropriate legal basis pursuant to Article 6 of the Regulation, legitimising the processing of the relevant information.

Cookies

General information on cookies

Cookies are small text files that are stored on the hard drive of a client computer by a website via the browser in order to store small amounts of information for a certain period of time. In general, there are various types of cookies. Some are essential for the functioning of the website, such as navigation or shopping cart cookies. There are also analytics cookies that collect information, for example on the number of website visitors and how visitors move around the website. Functional cookies allow the website to remember choices you make (e.g. selected filter settings or automatic language settings of a website).

In addition, there are so-called profiling cookies, which record user preferences and actions. Based on this information, a user profile is created. This serves to match advertising messages with the interests of users and enables more targeted advertising. These are often third-party cookies used by website operators to deliver personalised advertising.

Consent requirement for cookies
Website visitors must actively consent to the setting of cookies that are not essential for the functionality of the website and have the right to withdraw their consent at any time.
This website uses exclusively technical cookies, for which no consent is required.
Blocking cookies via browser settings
 

Firefox:
Click on the menu and select Settings.
Go to the Privacy tab.
In the “History” section, select “Use custom settings for history”.
In the options that appear, uncheck “Accept cookies”.
Click the “OK” button.
Detailed information can be found at: https://support.mozilla.org/de/kb/Cookies-blockieren
 

Google Chrome
Click on the menu and select Settings.
Scroll down and click on “Advanced”.
In the “Privacy” section, click on “Content settings…”.
Under Cookies, select “Block all cookies”.
Click the “Done” button.
Detailed information can be found at: https://support.google.com/chrome/answer/95647?hl=de

Internet Explorer
Open “Internet Options” from the “Tools” menu or, if the menu bar is not displayed, click the menu icon and select “Internet Options”.
 

Click on the “Privacy” tab. Use the slider to choose between different levels of cookie handling. If the slider is at the top, all cookies are blocked; if it is at the bottom, all cookies are allowed. Click the “OK” button.

Detailed information can be found at: https://windows.microsoft.com/de-de/windows7/block-enable-or-allow-cookies

Safari 
Click on “Privacy” in the settings. In the “Accept cookies” section, you can specify whether and when Safari should save cookies from websites. For more information, click the Help button (marked with a question mark).

Detailed information can be found at: https://support.apple.com/kb/PH5042?locale=en_US

Purpose of processing
The processing that we intend to carry out (where necessary) with your explicit consent has the following purposes:
To enable the provision of the services requested by you
To respond to customer service requests, information requests or reservations
Analysis of curricula vitae and contacting applicants who have submitted their application
To fulfil all legal, accounting and tax obligations

Marketing purposes: the data provided may, subject to prior explicit and specific consent, be processed for the sending of advertising and marketing communications, including newsletters and market research surveys, using automated (SMS, MMS, e-mail, push notifications) and non-automated (postal mail, call centre) systems. The legal basis for processing your data for these purposes is Article 6(1)(a) of the Regulation. Consent to processing for direct marketing purposes is optional and depends on your free decision, so failure to give consent for this purpose will not affect the use of the services.

Legal basis and mandatory or optional nature of processing

The legal basis for the processing of personal data for the purposes referred to in Section 3 (a-b-c) is Article 6(1)(b) of the Regulation (performance of a contract), as the processing of data is necessary for the provision of services or for responding to requests from the data subject. The provision of personal data for these purposes is optional, but failure to provide them would make it impossible to activate the services provided by the website, process requests or evaluate curricula vitae. With specific reference to purpose 3.c and the related analysis of professional social media profiles freely accessible on the Internet pursuant to Section 2.b, Article 6(1)(f) of the Regulation constitutes the legal basis for processing, i.e. the legitimate interest of the Controller in verifying potential risks regarding the suitability of the applicant for the specific open position.

The purpose referred to in Section 3.d constitutes lawful processing of personal data pursuant to Article 6(1)(c) of the Regulation (compliance with a legal obligation). Once the personal data have been provided, the processing is in fact necessary in order to comply with a legal obligation to which the Controller is subject.

The legal basis for processing for the purposes referred to in Section 3.e is Article 6(1)(a) of the Regulation (user consent). Without your consent, the Controller may process e-mail and postal addresses in order to carry out processing for the same purposes relating to the direct sending of advertising material or direct sales or the performance of market research or commercial communications regarding products or services of the Controller similar to those purchased, in accordance with and within the limits permitted by Article 130(4) of the Privacy Code and the decision of the Italian Data Protection Authority of 19 June 2008. The legal basis for processing your data for this purpose is Article 6(1)(f) of the Regulation (legitimate interest).

Recipients of personal data

Your personal data may be disclosed for the purposes set out in Section 3 to:

Subjects typically acting as data processors, namely: i) persons, companies or professional firms providing the Controller with assistance and consultancy in accounting, administrative, legal, tax, financial, debt collection, marketing and communication matters related to the provision of the services; ii) subjects with whom cooperation is necessary for the provision of the services (e.g. hosting providers); iii) subjects entrusted with carrying out technical maintenance activities (including maintenance of network devices and electronic communication networks) (collectively referred to as “Recipients”);
 

Subjects, bodies or authorities to whom your personal data must be disclosed pursuant to legal provisions or orders of authorities; Persons authorised by the Controller to process personal data necessary for carrying out activities related to the provision of services or the other purposes referred to in Section 3, who are bound by confidentiality obligations or are subject to an appropriate legal obligation of confidentiality (e.g. employees of the Controller).

Transfer of personal data

Some of your personal data may be transferred to recipients located outside the European Economic Area. The Controller ensures that the processing of your personal data by such recipients takes place in compliance with the Regulation. Transfers may be based on an adequacy decision, on standard contractual clauses approved by the European Commission or on another appropriate legal basis. Further information may be obtained from the Controller at the following address: info@gasthauszumlex.it

Retention of personal data

Personal data processed for the purposes referred to in Section 3(a-b) will be retained for as long as strictly necessary to achieve those purposes. Since the processing of data is carried out for the provision of services, the Controller will in any case process personal data until the time limit provided for by Italian law for the protection of interests (Articles 2946 et seq. of the Civil Code). With regard to curricula vitae submitted via the website or by e-mail pursuant to Section 3.c, personal data will be retained for a period deemed appropriate for the purpose for which the data were collected. This applies irrespective of the possibility for the Controller to contact the applicant shortly before the expiry of the indicated period to request an extension of this retention period.

Personal data processed for the purposes referred to in Section 3.d will be retained until the time required by the specific obligation or applicable law. Personal data processed for the purposes referred to in Section 3.e will instead be retained until consent is withdrawn by the data subject or, if such withdrawal does not occur, for a maximum period deemed appropriate. Further information on data retention periods and the criteria used to determine such periods may be obtained from the Controller at the following address: info@gasthauszumlex.it

Rights of data subjects

Pursuant to Articles 15 et seq. of the Regulation, you have the right at any time to request from the Controller access to your personal data, to request their rectification or erasure, or to object to their processing. You have the right to request restriction of processing in the cases provided for by Article 18 of the Regulation, as well as to receive the data concerning you in a structured, commonly used and machine-readable format in the cases provided for by Article 20 of the Regulation.

Any request must be submitted in writing to the Controller at the following address: info@gasthauszumlex.it

You also have the right to lodge a complaint with the competent supervisory authority (Italian Data Protection Authority) pursuant to Article 77 of the Regulation if you believe that the processing of your personal data violates applicable law.

Amendments

This privacy policy is effective as of 18.05.2023. The Controller reserves the right to amend or update the content, in whole or in part, including as a result of changes in applicable legislation. The Controller therefore invites you to regularly consult this section in order to stay informed about the latest and most up-to-date version of this privacy policy.