Tenuta delle Rose - Urlaub in der Toskana / Privacy Policy
Open privacy settings

Name and address of the controller for processing

The controller within the meaning of the GDPR, other data protection laws applicable in the Member States of the European Union and other provisions having the character of data protection legislation is:

Iniziative Rurali di Alfred Hagebusch S.A.S.

Via Santo Stefano 111–117

I-50050 Montaione (Firenze)

Phone   +49 171 34 58 781

Fax    +49 6221 29116

email: info@tenutadellerose.de

Internet: www.tenutadellerose.de

 

General data privacy statement

By using the website operated by Iniziative Rurali di Alfred Hagebusch S.A.S.

you declare that you agree to the collection, processing and use of data as set out below. This data privacy statement tells users about the nature, extent and purpose of the collection and use of personal data by the responsible provider on this website.

You can in principle visit our website without having to register. When you visit, data such as the pages accessed, the names of the file accessed, the date and the time of access will be stored on the server for statistical purposes, but these data will not be associated directly with you personally. Personal data, such as in particular your name, address or email address, are collected on a voluntary basis. Your data will not be forwarded to third parties without your consent.

As the controller responsible for processing, we have implemented many technical and organisational measures to ensure the most seamless protection possible of the personal data processed through this website. Gaps in security may arise when transmitting data over the internet, however, therefore absolute protection cannot be guaranteed. For this reason, every data subject is free to use alternative ways of providing us with personal data, such as by telephone.

 

How personal data are handled

Personal data are pieces of information that enable a person to be identified, i.e. details that can be traced back to a particular person. They include the name, email address or telephone number. Data about preferences, hobbies, memberships or what websites have been viewed by someone are also classed as personal data.

Personal data will only be collected, used and passed on by the provider if it is legally permissible to do so or users give their consent to data collection.

The legal bases of data protection are the EU’s General Data Protection Regulation (GDPR) and the German Telemedia Act (Telemediengesetz, TMG).

 

How to contact us

There is a contact form on our website, which can be used for electronic contact. Alternatively, you may contact us at the email address provided or by telephone/fax. If you contact us through one of these channels, the personal data transmitted by the data subject will be saved. This storage is purely for the purposes of dealing with your enquiry or contacting you. The data are not forwarded to third parties.

The legal basis for the processing of these data is your consent (Art. 6 (1) a GDPR).

 

Creation of log files

Data and information are recorded automatically every time the website is accessed. These are stored in the log files of the server.

The following data may be collected:

  1. Information about the browser type and version used
  2. The user’s operating system
  3. The user’s internet service provider
  4. The user’s IP address
  5. The date and time of access
  6. Websites from which the user’s system gains access to our website (referrer)
  7. Websites accessed by the user’s system via our website

These data are processed in order to deliver the content of our website, ensure the functional capability of our IT systems and optimise our website. The data of the log files are always stored separately from other personal data of users.

The legal basis for the processing of these data is your consent to processing where necessary for the purposes of legitimate interests pursued by the controller or a third party, as long as these are not overridden by the interests, basic rights and basic freedoms of the data subject which necessitate the protection of personal data (Art. 6 (1) a GDPR and Art. 6 (1) f GDPR).

Data privacy statement for cookies

Our website uses cookies. These are small text files that make it possible to store specific user-related information on the user’s device while they are using the website. Cookies in particular enable the frequency of use and the number of users of the pages to be determined and the patterns of site usage to be analysed, but also to make our site more user-friendly. Cookies remain stored beyond the end of a browser session and can be retrieved again the next time the site is accessed. When you visit our website, a pop-up window telling you about the use of cookies appears. If you do not want to have cookies constantly sent, you should change your browser settings so that it refuses cookies. This is done by enabling the option “I do not consent” to the use of cookies. Please note that you give your implicit consent to the use of cookies by continuing to use the website.

The legal basis for the processing of these data is your consent to processing where necessary for the purposes of legitimate interests pursued by us or a third party, as long as they are not overridden by the interests, basic rights and basic freedoms of the data subject which necessitate the protection of personal data (Art. 6 (1) a GDPR and Art. 6 (1) f GDPR).

Data privacy statement for Google Analytics

This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses cookies, which are text files that are stored on the user’s computer and enable their use of the website to be analysed. The information generated by the cookie about the use of this website is generally sent to a Google server in the USA and stored there.

If IP anonymisation is enabled on this website, the user’s IP address is, however, previously abbreviated by Google within the Member States of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional circumstances is the full IP address sent to a Google server in the USA and shortened there. IP anonymisation is enabled on this website. On behalf of the operator of this website, Google will use this information to evaluate the use of the website by users, to compile reports on the website activities and to provide additional services to the website operator in connection with the use of the website and the internet.

The IP address transmitted by your browser as part of Google Analytics is not associated with other Google data. Users can prevent the storing of cookies on your computer by making the corresponding settings in their browser software. Please note, however, that if you do so you may not be able to make full use of all the functions of this website. Users can also prevent Google from recording the data relating to their use of the website that is generated by the cookie (including your IP address) and from processing this data by downloading and installing the browser plug-in available on the following link: http://tools.google.com/dlpage/gaoptout?hl=de .

Google complies with the data protection regulations of the US Privacy Shield” agreement and is registered with the Privacy Shield program of the US Department of Commerce. It uses the collected information in order to analyse the use of our website, compile reports for us in this regard and perform other relevant services for us. You will find further information on the use of data by Google for advertising purposes, setting options and the right of objection on Google websites: https://policies.google.com/technologies/partner-sites/  (use of data by Google if you use websites or apps operated by our partners),
https://policies.google.com/technologies/ads  (use of data for advertising purposes),
https://www.google.com/settings/ads/.  (manage information used by Google to show you advertising) and http://www.google.com/ads/preferences/  (decide which advertising Google shows you).

The legal basis for the processing of these data is your consent to processing where necessary for the purposes of legitimate interests pursued by the controller or a third party, as long as these are not overridden by the interests, basic rights and basic freedoms of the data subject which necessitate the protection of personal data (Art. 6 (1) a GDPR and Art. 6 (1) f GDPR).

To disable tracking by Google Analytics, set the following switch to “Off”:

Registration on our website

If you use the option of registering on our website by giving your personal data, the data in the respective input mask will be transmitted to the controller for processing. The data are saved for the sole purpose of internal use by the controller for processing.

The user’s IP address is saved when registering, as well as the date and time of registration. This serves to prevent any misuse of the services. The data are not forwarded to third parties, unless there is a statutory obligation to do so.

Registration of the data is necessary for the provision of content or services. Registered persons may have the stored data erased or amended at any time. The data subject has the right at any time to be informed which personal data have been saved.

The legal basis for the processing of these data is your consent to processing where necessary for the purposes of legitimate interests pursued by the controller or a third party, as long as these are not overridden by the interests, basic rights and basic freedoms of the data subject which necessitate the protection of personal data (Art. 6 (1) a GDPR and Art. 6 (1) f GDPR).

Newsletter / Gazzetta

If you subscribe to our company’s newsletter or ask us to send you a Gazzetta, the data in the respective input mask will be transmitted to the controller for processing.

When a user registers for the newsletter or requests the sending of a Gazzetta, the user’s IP address and the date and time of registration will saved. This serves to prevent any misuse of the services or the data subject’s email address. The data will not be forwarded to third parties, unless there is a statutory obligation to do so.

The data will be used solely in order to send the newsletter and/or the Gazzetta. The data subject can cancel the newsletter subscription at any time. Similarly, consent to the storage of personal data can be withdrawn at any time. Every newsletter contains a link that enables you to do so.

The legal basis for the processing of these data is your consent (point (a) of Art. 6(1) GDPR).

 

Routine erasure and blocking of personal data

We process and store personal data of data subjects only for as long as is necessary to achieve the purpose of the storage. They may be stored for longer if this has been provided for by European or national regulators in Union regulations, laws or other provisions to which the controller for processing is subject.

As soon as the purpose of storage lapses or a specified storage period stated in the regulations expires, the personal data are routinely erased or blocked.

Recipients and forwarding of data to third parties

This section must be completed if data are forwarded to third parties.

Recipients of your data may also be service providers who process personal data on our behalf, such as IT service providers or similar.

Rights of the data subject

If your personal data are processed, you are a data subject as defined by the GDPR and you have the following rights vis-à-vis the controller:

Right of access

You can demand confirmation from the controller of whether we process personal data concerning you.

Where such processing takes place, you can demand details from the controller concerning the following information:

  1. the purposes for which the personal data are being processed;
  2. the categories of personal data being processed;
  3. the recipients or the categories of recipients to whom the personal data concerning you were disclosed or are being disclosed;
  4. the planned duration of storage of the personal data concerning you or, if concrete details of this are not possible, criteria for determining the storage period;
  5. the existence of a right to rectification or erasure of the personal data concerning you, of a right to restriction of processing by the controller or of a right of objection to this processing;
  6. the existence of a right of complaint to a supervisory authority;
  7. all available information about the origins of the data, if the personal data were not collected from the person concerned;
  8. the existence of automated decision-making including profiling pursuant to Art. 22 (1) and (4) GDPR and – at least in these cases – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

You also have the right to demand information on whether the personal data concerning you are transferred to a third country or an international organisation. In connection with this, you may request to be informed regarding the appropriate safeguards pursuant to Art. 46 GDPR in connection with transfer.

Right to rectification

You have a right to rectification and/or completion vis-à-vis the controller if the processed personal data concerning you are incorrect or incomplete. The controller must bring about the rectification without undue delay.

Right to restriction of processing

Under the conditions set out below, you can demand that the processing of the personal data concerning you be restricted:

  1. if you dispute the accuracy of the personal data concerning you, for a period of time that enables the controller to verify the accuracy of the personal data;
  2. if the processing is unlawful and you refuse the erasure of the personal data and instead request the restriction of use of your personal data;
  3. if the controller no longer needs the personal data for the purposes of the processing, but you require this for the establishment, exercise or defence of legal claims; or

(4)    you have objected to processing pursuant to Art. 21 (1) GDPR, pending the verification whether the legitimate grounds of the controller override your grounds.

If the processing of the personal data concerning you were restricted, these data may – with the exception of storage – only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If processing were restricted in accordance with the above requirements, you will be informed by the controller before the restriction is lifted.

Right to erasure

You can demand that the controller erase any personal data concerning you without undue delay and the controller will be obliged to erase such data without undue delay unless one of the following grounds exists:

  1. the personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
  2. you withdraw consent on which the processing was based pursuant to point (a) of Art. 6 (1) GDPR or point (a) of Art. 9 (2) GDPR and there is no other legal basis for the processing;
  3. you object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR;
  4. the personal data concerning you have been unlawfully processed; or
  5. the personal data concerning you have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.

The right to erasure does not exist to the extent that processing is necessary

  1. for exercising the right to freedom of expression and information;
  2. for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  3. for reasons of public interest in the area of public health in accordance with points (h) and (i) of Art. 9 (2) as well as Art. 9 (3) GDPR;
  4. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 (1) GDPR in so far as the right referred to in paragraph (1) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
  5. for the establishment, exercise or defence of legal claims.

Right to be informed

If you have exercised your right to have the controller rectify or erase the personal data concerning you or restrict their processing, the controller is obliged to communicate this rectification or erasure of the data or restriction of processing to all recipients to whom personal data concerning you have been disclosed, unless this proves impossible or involves disproportionate effort.

You have a right vis-à-vis the controller to be informed of these recipients.

Right to object

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is carried out on the basis of point (e) or point (f) of Art. 6 (1) GDPR. This also applies to any profiling based on these provisions.

The controller will no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

Where the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.

Where you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for such purposes.

In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.

Right to withdraw consent under data protection regulations

You have the right at any time to withdraw consent given under data protection regulations. Withdrawal of consent does not affect the lawfulness of the processing based on consent prior to the withdrawal.

Right to lodge a complaint with a supervisory authority

Notwithstanding any other remedy in administrative law or through the courts, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you believe that the processing of the personal data concerning you infringes the GDPR.

The supervisory authority with which the complaint was lodged will inform the complainant on the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

 

Last revised: May 2018