Privacy

Still open: this text is a draft that has not been reviewed by a lawyer. It describes what the site actually does in technical terms. Please have it checked before going live — until then the page stays on noindex.

Controller

Patrizia Gufler, Unterdorf 4 a, 39040 Ratschings (Racines), Italy.
Email: info@homeinthealps.com

What this website collects

This is a static website. No cookies are set, no analytics or tracking service is embedded and no profiles are built. A consent banner is therefore not required.

Hosting and server log files

The site is hosted by ALL-INKL.COM — Neue Medien Münnich, proprietor René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The data centres are in Dresden and Friedersdorf; processing takes place exclusively in Germany. A data processing agreement under Art. 28 GDPR is in place with the provider.

When you open the page, the provider stores the usual access data (IP address, time, file requested, browser identification). The legal basis is Art. 6(1)(f) GDPR — the legitimate interest in secure operation. These logs are deleted automatically after seven days at the latest. Only where there is a concrete suspicion of misuse or an attack on the systems may they be kept longer, until the incident has been resolved.

Enquiry form

When you submit the enquiry form, we process the details you enter: arrival and departure dates, title, first and last name, email address, the number of adults as well as the number and ages of any children travelling with you, and your note. We use them solely to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) together with your consent under Art. 6(1)(a) GDPR, which you give in the form and may withdraw at any time.

The details are received by a script on our own web space and sent by email to the host’s mailbox. No third-party form service is involved and no database is created — the data never leaves the servers of the hosting provider named above. We keep the enquiry until it has been dealt with and delete it afterwards, unless a statutory retention obligation applies.

So that the form cannot be used for bulk mailing, the server records for one hour how often the same connection has submitted it. Only a checksum of the IP address and the times of submission are stored; after an hour the entry becomes meaningless. The legal basis is Art. 6(1)(f) GDPR.

A field in the form that is invisible to you (“honeypot”) serves to deter spam. If an automated program fills it in, we discard the submission, which is then not stored.

Map

In the “Location & surroundings” section you first see a static map image served from our own server. Nothing is transmitted to third parties at that point.

Only when you click the image to zoom and pan the map does your browser connect to OpenStreetMap (OpenStreetMap Foundation, United Kingdom), which for technical reasons transmits your IP address. The legal basis is your consent under Art. 6(1)(a) GDPR, given with that click. Privacy information: wiki.osmfoundation.org.

External links

The “Book now” buttons lead to an external booking portal. Its data processing is governed solely by that provider’s privacy policy.

Fonts and images

Fonts and images are served from our own server. No connection is made to Google Fonts or to a CDN.

Your rights

• Access to the data stored about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent with effect for the future (Art. 7(3) GDPR)

An informal email to info@homeinthealps.com is enough to exercise them. You also have the right to lodge a complaint with a supervisory authority — in Italy the Garante per la protezione dei dati personali, garanteprivacy.it.