Privacy

Privacy Policy and Cookie Policy

Kardinerhof, located at Tannstraße 15, IT-39040 Ritten/South Tyrol, is committed to protecting the online privacy of its users. This document has been drawn up in accordance with Art. 13 of EU Regulation 2016/679 (hereinafter referred to as the “Regulation”) so that you can familiarize yourself with our privacy policy and understand how your personal information is handled when you use our website and, if necessary, give your express and informed consent to the processing of your personal data (valid only for persons aged 16 and over). The information and data you provide or otherwise acquire from us when using our services on the website (hereinafter referred to as “Services”) will be processed in accordance with the provisions of the Regulation and the confidentiality obligations that govern the activities of the data controller. In accordance with the provisions of the Regulation, the processing carried out by Kardinerhof is based on the principles of lawfulness, processing in good faith, transparency,
purpose limitation, storage limitation, data minimization, accuracy, integrity, and confidentiality.

Directory

  1. The person responsible
  2. The personal data that is subject to processing
    • a. Navigation data
    • b. Special categories of personal data
    • c. Data provided voluntarily by the data subject
    • d. Cookies
  3. Legal basis and mandatory or optional nature of processing
  4. Purpose of processing
  5. Recipients of personal data
  6. Disclosure of personal data
  7. Storage of personal data
  8. Rights of data subjects
  9. Modifications

  1. The person responsible
    • The data controller for the processing carried out on the website is Stefan Spinell/Kardinerhof, as specified above. For information on the processing of personal data by the data controller, including the list of processors entrusted with processing the data, please write to the following address: info@kardinerhof.com.

  1. The personal data that is subject to processing
    • We hereby inform you that, based on your navigation on the website, the controller will process personal data consisting of an identifier such as your name, an identification number, an online identifier, a postal address, an email address, a telephone number (landline and/or mobile) or one or more elements of your physical, physiological, psychological, economic, cultural, or social identity, in order to identify or make the data subject identifiable (hereinafter referred to as “personal data”). The personal data processed via the website are as follows:
    • a. Navigation data
      The computer systems and software procedures used to operate the website collect some personal data during their normal operation, the transmission of which is implicit in the communication protocols of the Internet. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users connecting to the website, the URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server’s response (successful, error, etc.), and other parameters relating to the operating system and computer environment. This data is used exclusively to obtain anonymous statistical information on the use of the website and to check its correct functioning, to detect anomalies and/or misuse, and is deleted immediately after processing. The data may be used to determine liability in the event of hypothetical computer crimes against the website or third parties. Apart from this possibility, the data collected on the website is deleted after a short period of time.
    • c. Data provided voluntarily by the data subject
      When you use certain services on the website (e.g., the inquiry or contact form), we may process personal data from third parties that you send to the data controller. In these cases, you are the data controller who assumes all legal obligations and liabilities. In this sense, you grant us the broadest possible indemnification with respect to any allegations, claims, damages arising from the processing, etc., that the data controller may receive from third parties whose personal data has been processed through the use of the website’s features in violation of applicable personal data protection regulations. If, in the course of using the website, you provide or otherwise process personal data of third parties, you guarantee in any case that this specific case of processing is based on an appropriate legal basis in accordance with Art. 6 of the Regulation, which legitimizes the processing of the information in question.
    • d. Cookies General information about cookies
      Cookies are small text files that are stored by a website and with the help of the browser on the hard drive of a client computer in order to store small amounts of information from the website for a certain period of time. In general, there are many different types of cookies. Some are essential for the functioning of the website, such as navigation or shopping cart cookies. There are also so-called analytics cookies, which collect information, e.g., about the number of website visitors and the path visitors take to the website. Functional cookies enable the website to remember your selections (e.g., selected filter settings or automatic language settings for a website). Kardinerhof only uses technically necessary cookies.

  1. Purpose of processing
    The processing that we intend to carry out (where necessary) with your express consent has the following purposes:
    • a. To enable us to provide the services you have requested
    • b. To respond to requests for information or reservations
    • c. To comply with all legal, accounting, and tax obligations
  2. Legal basis and mandatory or optional nature of processing
    • The legal basis for the processing of personal data for the purposes referred to in Section 3 (a-b) is Art. 6(1)(b) of the Regulation (performance of a contract), as the data processing is necessary for the provision of services or for responding to requests from the data subject. The provision of personal data for these purposes is optional, but failure to do so would make it impossible to activate the services provided by the website or to process requests.
  3. Recipients of personal data
    • Your personal data may be disclosed for the purposes specified in Section 3 to:
      • Entities that typically act as processors, i.e.: i) individuals, companies, or office communities that provide assistance and advice to the controller in accounting, administrative, legal, tax, financial, collection, marketing, and communication matters relating to the provision of services; ii) entities with whom cooperation is necessary for the provision of the services
        (e.g., hosting providers); iii) entities entrusted with the performance of technical maintenance work (including the maintenance of network equipment and electronic
        communication networks) (collectively referred to as “recipients”);
      • Subjects, entities, or authorities to whom your personal data must be disclosed due to legal provisions or official orders;
      • Persons authorized by the controller to process personal data necessary for the performance of activities related to the provision of services or for the other purposes specified in Section 3, who have committed themselves to confidentiality or are subject to an appropriate legal obligation of confidentiality (e.g., employees of the controller).
  4. Disclosure of personal data
    • Some of your personal data will be transferred to recipients who may be located outside the European Economic Area. The data controller ensures that the processing of your personal data by these recipients is carried out in accordance with the Regulation. In fact, transfers may be based on an adequacy decision, on contractual clauses approved by the European Commission, or on another appropriate legal basis. For further information, please contact the data controller at the following address: info@kardinerhof.com.
  1. Storage of personal data
    • Personal data processed for the purposes specified in Section 3(a-b) will be retained for as long as is strictly necessary to achieve those purposes. Since data processing is carried out for the provision of services, the controller will in any case process the personal data until the time specified by Italian legislation for the protection of interests (Art. 2946 ff. of the Italian Civil Code). Personal data processed for the purposes specified in Section 3.c will be stored until the time specified by the specific obligation or applicable law. Further information on the retention period of the data and the criteria for determining this period can be obtained from the controller at the following address: info@kardinerhof.com.
  2. Rights of data subjects
    • Pursuant to Articles 15 et seq. of the Regulation, you have the right to request information about your personal data from the controller at any time, to request that it be corrected or deleted, or to object to its processing. You have the right to request the restriction of processing in the cases provided for in Article 18 of the Regulation and, in the cases provided for in Article 20 of the Regulation, to receive the data concerning you in a structured, commonly used, and machine-readable format. Any request must be made in writing to the controller at the following address: info@kardinerhof.com.
    • You have the right to lodge a complaint with the competent supervisory authority (Guarantor for the Protection of Personal Data) at any time in accordance with Article 77 of the Regulation if you believe that the processing of your personal data violates applicable law.
  3. Modifications
    • This privacy policy is effective as of August 2, 2025. The controller reserves the right to change or update the content in whole or in part, including due to changes in applicable legislation. Therefore, the controller encourages you to visit this section regularly to stay informed about the latest and most current version of this privacy policy.
Kardinerhof | VAT No.: 03277820217 | CIN: IT021072B5IG7B8JHE | Impressum | Privacy