Controller
Hochseilgarten Villnöss – Walter Schatzer, St.Magdalena 30, 39040 Villnöß / South Tyrol, Italy. Telephone +39 0472 840 602. Email info@hochseilgarten-villnoess.it. VAT number 01242950218. Please use these details for privacy requests.
Purposes and legal bases
Personal data is processed to operate and secure the website (Article 6(1)(f) GDPR), answer enquiries and handle requested bookings and contracts (Article 6(1)(b)), meet legal obligations (Article 6(1)(c)), and operate optional services with your freely given consent (Article 6(1)(a) and Article 7). Optional access to terminal equipment is also subject to Article 122 of the Italian Privacy Code.
Hosting and security
The server processes IP address, time, requested URL, status code and technical browser details to deliver the website. Logs support troubleshooting and abuse prevention. Recipient categories include hosting, email and technical IT providers. Logs are retained only as needed for secure operation, investigating incidents and legal requirements. Actual hosting contracts, server locations and operational deletion periods must be confirmed by the operator; no unverified details are invented here.
Contact form and local protection
The form processes name, subject, email address, telephone and comments. Required fields are marked. Acknowledging this policy is not consent to advertising. Enquiries use the existing email configuration; no additional plaintext form copy is created in the website data area. Data is deleted when no longer required for the enquiry, unless legal retention duties or claims require otherwise. Please do not provide unnecessary sensitive information. The contact form does not request children’s ages. Local CAP and a honeypot prevent spam: the browser solves a computation and the server verifies a short-lived token. No form data is sent to Google or an external captcha provider (Article 6(1)(f)).
Necessary cookies and voluntary choices
Grav session and security cookies enable forms and session protection. The first-party dsgvo_consent cookie stores version, timestamp and selected services for up to 6 months, without enquiry contents. Necessary cookies support requested features. Optional services remain blocked without permission. Rejecting is as direct as accepting. You can change or withdraw your choice through cookie settings at any time. A changed service list requires a fresh choice. The previous cconsent cookie is removed.
Google Analytics
Google Analytics 4 loads only with consent. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Technical usage data, page views and pseudonymous identifiers support audience statistics. Google Signals and personalised advertising are disabled in the integration. Cookies such as _ga and _ga_* may remain for up to two years depending on provider settings; actual property data retention must be confirmed by the operator. Withdrawal removes known first-party Analytics cookies. Recipients include Google and related companies; transfers to the USA are possible.
External media and online booking
Google Maps (Google Ireland Limited) receives your IP address, browser information and requested map position when loaded. YouTube (Google Ireland Limited) processes connection and usage data during playback and may use cookies or local storage. Both embeds are enabled automatically once you consent to the respective service, including through “Accept all” or by enabling it later in the cookie settings. Disabling the service blocks the content again. Online booking uses Regiondo: permission loads the widget from cdn.regiondo.net with the existing products. Regiondo receives connection data; booking, payment and contact data are processed during the subsequent booking flow under the provider’s notices. Permission alone does not make a booking. The basis for optional media is Article 6(1)(a); requested booking processing relies on Article 6(1)(b). Telephone and email remain available without permission.
Recipients, transfers and retention
In addition to necessary technical providers, recipients may include booking and payment providers involved in a requested transaction and legally authorised authorities. Processing is purpose-limited. Providers may process data outside the EEA; Articles 44 et seq. GDPR require an applicable adequacy decision or appropriate safeguards. Actual processor agreements, transfer grounds and provider retention periods must be checked by the operator. Technical integration does not certify those agreements. Data is deleted when its purpose ends unless legal obligations or claims require further retention.
Your rights and withdrawal
Subject to legal conditions, you have rights of access, rectification, erasure, restriction, portability and objection (Articles 15–21 GDPR). Consent may be withdrawn for the future without affecting earlier lawful processing. Contact info@hochseilgarten-villnoess.it. You may complain to the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, or another competent supervisory authority. Security measures and this information are updated when services change.