Skip to content
Hotel Schwarzenbach
Enquire

The house·Privacy

Legal

Privacy

Controller

Hotel Schwarzenbach, Stocker Nadia & Co. KG
Owner and controller of data processing: Stocker Nadia
Schwarzenbach 24, 39050 Deutschnofen (Nova Ponente)
VAT number 02737330213
info@schwarzenbach.it · +39 0471 616 460

We have not appointed a data protection officer. Please send any questions about data protection directly to the address given above.

What this website does, and what it does not

  • This website sets no advertising or analytics cookies.
  • No analytics or tracking software is running.
  • No fonts are loaded from external servers; the font is stored on the same server as the website.
  • Videos and images are on the same server as the website. No third-party video service is embedded.
  • Only if you use the switch for motion does your browser remember this choice locally (entry “alpix-bewegung”). If you start an enquiry on the home page, your details are kept in the browser until the enquiry page opens and are deleted there immediately. Both are technically necessary, never leave your device and are not cookies.

Cookie banner

On your first visit a notice appears in which you decide which cookies you allow. The notice is provided by FreePrivacyPolicy.com and is loaded from its servers. In the process your IP address is transmitted to this provider.

Your choice is stored in three cookies on your device (“cookie_consent_level”, “cookie_consent_user_accepted” and “cookie_consent_user_consent_token”) so that the notice does not reappear on every page. These cookies are technically necessary and are deleted after 180 days. After that the website asks again. Without your consent, only technically necessary cookies are set.

You can change or withdraw your choice at any time via the “Cookie settings” link at the bottom of every page.

Digital receptionist (chat)

At the bottom right you will find a chat that answers frequent questions about the hotel. It is operated by ALPIX AI (Jannik Alber, South Tyrol) and is loaded from their servers. In doing so, your IP address is transmitted to this provider. This is necessary for the chat to appear. When it loads, the chat retrieves its settings from the database named below.

What you write in the chat is processed to answer your question and evaluated to improve the answers. Please do not enter payment details, identity document numbers or health information there. For a binding reservation, please use the enquiry form, the telephone or email.

The legal basis is our legitimate interest in providing quick and accurate information (Art. 6(1)(f) GDPR). The answers come from a language model and may be incomplete in individual cases. The information given by the hotel is always what counts.

The chat is delivered via Cloudflare. Your questions and the answers are stored in a database in Frankfurt am Main (Supabase); the answers are generated by a language model from Mistral AI in France. No IP address is stored with the messages, only a pseudonymous identifier calculated from it, which keeps the messages of one conversation together. Cloudflare, Inc. and Supabase, Inc. are based in the USA, so access from there cannot be ruled out. This is based on the data protection agreement between the EU and the USA (Data Privacy Framework) or the standard contractual clauses of the European Commission. ALPIX AI acts on behalf of the hotel (Art. 28 GDPR). The messages are kept for twelve months and then deleted automatically.

Map on the arrival page

The “Location & getting here” page includes a map from OpenStreetMap. It loads only when you press the button. Before that, no connection is made. With the click, your IP address is transmitted to the OpenStreetMap Foundation. It is based in the United Kingdom, for which the European Commission has adopted an adequacy decision. The legal basis is your consent (Art. 6(1)(a) GDPR), which you give with the click.

360° tours (Google Maps)

On several pages you can open virtual tours of the hotel recorded with Google Street View. A tour loads only when you click it; no connection to Google is made beforehand. With the click your IP address is transmitted to Google Ireland Limited, which operates the service. When you close the window the tour is removed again. The legal basis is your consent (Art. 6(1)(a) GDPR), which you give with the click. Google may also process the data in the United States; the basis for this is the data protection agreement between the EU and the US (Data Privacy Framework). Details of processing by Google: policies.google.com/privacy.

Travel cancellation cover (Gastropool)

On the rooms page you can take out travel cancellation cover. The form is provided by HGV-Service Cooperative (Gastropool) and loads only once you click it; no connection is made beforehand. With the click your IP address is transmitted to the operator. The details you enter in the form are processed by the operator together with the insurer in order to conclude the contract; we ourselves only receive the information that cover exists. The form provides a field for Google’s reCAPTCHA to guard against automated entries; this service may be loaded when you submit. The legal basis for loading is your consent (Art. 6(1)(a) GDPR), which you give with the click, and for the conclusion itself the performance of the contract (Art. 6(1)(b) GDPR).

Server logs

When the page is called up, the server processes technically necessary data such as IP address, time, the address called up and the browser identifier. The legal basis is the legitimate interest in secure operation (Art. 6(1)(f) GDPR). The server provider (Variomedia AG) shortens the IP address in the access logs (last digit replaced by 0) and keeps them for no more than 95 days, error logs for 14 days.

Enquiry form

When you send the form, we process the details you have entered in order to answer your enquiry. The legal basis is the performance of pre-contractual measures (Art. 6(1)(b) GDPR). We delete the data when it is no longer needed and no retention obligation applies. Providing the details is voluntary; without the required fields marked with *, however, we cannot answer your enquiry.

To protect against automated entries, the form uses Google’s reCAPTCHA (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The service is only loaded once you start filling in the form. Google receives, among other things, your IP address and information about your browser and sets a cookie of its own (“_GRECAPTCHA”); this may involve a transfer to the USA, based on the EU–US Data Privacy Framework. The legal basis is our legitimate interest in protecting the form from misuse (Art. 6(1)(f) GDPR).

Details of intolerances can be health data. We process these only with your explicit consent (Art. 9(2)(a) GDPR), which you give by entering them in the form, and only to prepare your stay. You can withdraw your consent at any time by e-mail.

How long we keep data

Enquiries that do not lead to a stay are deleted as soon as they have been dealt with. Data relating to a stay is kept for as long as tax and commercial law require, in Italy generally ten years. Reporting data to the police headquarters and the provincial statistics institute follows the rules laid down there; providing these details on arrival is required by law.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Consent once given can be withdrawn at any time with effect for the future. You can also lodge a complaint with the supervisory authority, in Italy the Garante per la protezione dei dati personali.

Processors

The website is hosted on a server of Variomedia AG, Potsdam (Germany). The chat is operated by ALPIX AI on behalf of the hotel (see above).