Privacy Policy
1. Controller
The controller for the processing of personal data in connection with this website is:
Bäcksteinerhof
Lukas Verdorfer
Pflanzensteinstraße 42
I-39012 Merano (BZ)
South Tyrol – Italy
Phone: +39 0473 232648
Email: info@baecksteinerhof.com
PEC: lukas.verdorfer@pec.sbb.it
VAT ID / Partita IVA: 02999530211
Tax ID / Codice fiscale: VRDLKS88R07F132A
2. General information on the processing of personal data
The protection of your personal data is important to us.
We process personal data exclusively within the framework of the applicable data protection regulations, in particular Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and the relevant Italian data protection provisions.
Personal data is any information relating to an identified or identifiable natural person, such as name, email address, phone number, IP address, or booking data.
We only process data that is necessary for the respective purpose.
3. Accessing our website and server log files
When you access our website, information is technically transmitted to the server on which the website is provided.
The following data, in particular, may be processed:
- IP address
- Date and time of access
- Page or file accessed
- Amount of data transferred
- Browser and browser version used
- Operating system
- Referrer URL
- Access status or HTTP status code
This processing is necessary to technically provide the website, ensure its stability and security, and detect misuse and technical attacks.
The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the secure and reliable operation of our website.
The data will only be stored for as long as necessary for the aforementioned technical and security-related purposes.
4. Contacting us
If you contact us by email, phone, contact form, or other means, we process the data you provide to the extent necessary to handle your inquiry.
In particular, the following may be processed:
- First and last name
- Email address
- Phone number
- Content of your message
- Desired travel period
- Number of travelers
- Desired accommodation
- Other voluntarily provided information
If your inquiry relates to a possible booking or an existing stay, processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR for the implementation of pre-contractual measures or the fulfillment of a contract.
For other inquiries, processing is carried out on the basis of our legitimate interest in responding to your message in accordance with Art. 6 para. 1 lit. f GDPR.
The data will be deleted as soon as it is no longer required for processing the inquiry, unless there are legal retention obligations or other permissible reasons for longer storage.
5. Online booking
On our website, you can check availability and book accommodation directly online.
In the context of booking, the following personal data, in particular, may be processed:
- First and last name
- Address and contact details
- Email address
- Phone number
- Arrival and departure date
- Number and, if applicable, age of guests
- Selected accommodation
- Price and booking information
- Payment information
- Special requests, if you voluntarily provide them
The processing of this data is necessary for the preparation, execution, and processing of the booking and is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
Insofar as data must be processed or stored due to legal obligations, processing is additionally carried out on the basis of Art. 6 para. 1 lit. c GDPR.
For the technical execution of online booking, we use:
Sistema di prenotazione / Fornitore: HGV – Booking Alto Adige
Insofar as the provider processes personal data on our behalf, this is done on the basis of a corresponding data processing agreement in accordance with Art. 28 GDPR.
6. Special dietary needs and allergies
To ensure your breakfast is tailored as best as possible to your personal needs, you can voluntarily inform us of any special dietary needs, intolerances, or food allergies.
Such information may, in individual cases, allow conclusions to be drawn about health data and thus constitute special categories of personal data within the meaning of Art. 9 GDPR.
We use this information exclusively to prepare your stay and, in particular, breakfast accordingly.
Insofar as such health information is collected via an online form, processing is only carried out with your explicit consent in accordance with Art. 9 para. 2 lit. a GDPR.
You can revoke your consent at any time with effect for the future.
Providing this information is voluntary. However, without corresponding information, we may not be able to accommodate special needs.
7. Cookies and similar technologies
Our website uses cookies and comparable technologies.
Technically necessary cookies may be used insofar as they are required for the operation of the website, security, the management of your privacy settings, or functions explicitly requested by you.
Non-technically necessary cookies and comparable tracking technologies are generally only used after you have given your consent.
Your consent is voluntary and can be changed or revoked at any time via the Cookie Settings available on the website.
Further information on the cookies used, their purpose, provider, and storage duration can be found in our Cookie Policy or directly in the cookie settings.
8. Consent Management / Cookie Settings
We use a consent management solution to manage your consents.
This stores your selection regarding cookies and other services requiring consent. This processing is necessary so that we can take your decision into account and document the given or refused consent.
9. Google Maps
Google Maps may be used on our website to clearly display the location of Bäcksteinerhof and directions.
Google Maps will – if technically configured accordingly – only be loaded after you have agreed to the use of the service.
The provider is Google Ireland Limited.
When Google Maps is loaded, information such as your IP address, technical device information, and information about your use of the map may be transmitted to Google. In this context, processing of data by companies affiliated with Google outside the European Economic Area cannot be ruled out.
The legal basis for integration is your consent in accordance with Art. 6 para. 1 lit. a GDPR.
You can revoke your consent at any time with effect for the future via the cookie settings.
Further information on the processing of personal data by Google can be found in Google’s privacy policy.
10. Analytics and statistics services
Insofar as analytics or statistics services are used on our website that are not exclusively technically necessary and permissible under data protection law without consent, these will only be activated after your prior consent.
The legal basis is Art. 6 para. 1 lit. a GDPR.
Details on the provider, processed data, storage duration, and any data transfers to third countries must be added in this section after determining the service actually used.
11. External content and services
Our website may contain content or functions from external providers, such as maps, booking services, or other embedded content.
Insofar as personal data is processed by such services and their use requires consent, the corresponding content will only be loaded after your consent.
Information about the services used can be found in this privacy policy and in our cookie settings.
12. Recipients of personal data
Personal data may be passed on to service providers to the extent necessary to support us in operating our website or processing bookings.
These may include, in particular:
- Hosting and IT service providers
- Booking system providers
- Payment service providers, if used
- Tax and administrative service providers
- Technical service providers
- Authorities and public bodies, if there is a legal obligation
Service providers who process personal data on our behalf are – if necessary – contractually obliged in accordance with Art. 28 GDPR.
Personal data will not be passed on for third-party advertising purposes without a corresponding legal basis or consent.
13. Transfer of data to third countries
Some of the services we use may employ providers or subcontractors outside the European Economic Area.
A transfer of personal data to such third countries only takes place if the legal requirements of the GDPR are met, in particular on the basis of an adequacy decision by the European Commission or appropriate safeguards in accordance with Art. 46 GDPR.
Insofar as data transfer takes place on the basis of your consent, you will be informed accordingly.
14. Storage duration
We generally store personal data only for as long as is necessary for the respective processing purpose.
In addition, legal retention obligations may exist, particularly due to tax, commercial, or administrative regulations.
After the respective retention periods have expired, the data will be deleted or anonymized, unless there is another legal basis for its processing.
15. Your rights
Within the framework of the legal requirements, you have the right, in particular, to:
- Receive information about your personal data;
- Request the rectification of inaccurate or incomplete data;
- Request the erasure of your personal data;
- Request the restriction of processing;
- Object to the processing of your personal data;
- Request data portability;
- Revoke a given consent at any time with effect for the future.
To exercise your rights, you can contact us at any time:
Bäcksteinerhof – Lukas Verdorfer
Email: info@baecksteinerhof.com
The lawfulness of processing carried out on the basis of consent until its revocation remains unaffected by the revocation.
16. Right to lodge a complaint
If you believe that the processing of your personal data violates applicable data protection regulations, you have the right to lodge a complaint with a competent data protection supervisory authority.
In Italy, this is, in particular:
Garante per la protezione dei dati personali
www.garanteprivacy.it
17. Automated individual decision-making
Automated individual decision-making, including profiling, within the meaning of Art. 22 GDPR, generally does not take place in connection with our website and direct booking, unless expressly stated otherwise for a specific service.
18. Data security
We take appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, alteration, or disclosure.
Our website specifically uses an encrypted HTTPS connection for secure data transmission.
19. Changes to this Privacy Policy
We reserve the right to adapt this Privacy Policy if legal requirements, our website, or the services we use change.
The current version published on this website applies.
Status: August 2026