Guest privacy
Introduction
Dear guest, Herewith we would like to inform you in terms of Art. 13 of the GDPR about how your personal data is processed.
Data controller
Peter Rauch · Rauchhof Apartments · Bahnhofstrasse - Via Stazione 92 · 39040 Auer – Ora (BZ), Italy · info@rauchhof.com · +39 0471 802413
Purpose and object of data processing
We process your personal data and any possible fellow travellers (to whom this letter must also be presented) in compliance with the applicable data protection regulations in order to provide our services, including the issuance and delivery of the South Tyrol Guest Pass and/or to accommodate you. Among others, the following data may be subject to processing:
✓ Anagraphic data, e.g., name, address, contact data, birth data, nationality
✓ Identity card and travel document
✓ Payment data
✓ Duration of stay
✓ License plate
✓ Personal preferences & additional services (e.g., type of room)
✓ Possibly your tax code (only for Italian guests), if an electronic invoice is required
✓ Health information relevant to your protection, for example allergies (if volunteered by you)
The provision of data is voluntary. However, if you do not provide us with the necessary data, it will not be possible for us to fulfil our pre/contractual obligations and as a result we will not be able to accommodate you.
Recipients of personal data
To the extent necessary and/or if required by law in the course of providing our services, your personal data may be disclosed to third parties/viewed by third parties (for example LTS). In the course of the reporting obligations, your personal data will be forwarded to public authorities (such as reporting to the ASTAT or, for example, to the bursar's office). In connection with the issuance of the South Tyrol Guest Pass, your data will be transmitted to the Mobility Consortium, which acts as the guest card issuer and a unified coordination office, assuming the role of the autonomous data controller in the processing of the transmitted data. For more information about the processing of data, you can send an email to privacy@moko.bz.it. The complete information notice can be found under https://www.moko.bz.it/datenverarbeitung-guest-pass. Your data will not be transferred to non-EU countries. Automated decision-making including profiling is not used. External suppliers, such as the external IT service provider or software suppliers, may also have access to personal data under certain circumstances. Data processors have been appointed in writing as processors in accordance with Art. 28 of the GDPR.
Legal basis of the data processing operations
✓ Fulfilment of pre-contractual/contractual measures (Art. 6 par. 1 b GDPR)
✓ Fulfilment of legal obligations (Art. 6 par. 1 c GDPR), for example, reporting obligations
✓ Legitimate interests of the data controller (Art. 6 par. 1 f GDPR), for example, processing in the internal system
✓ Obtaining your voluntarily given consent (Art. 9 par. 2 a GDPR), processing of relevant health data such as allergies or intolerances for the protection of health
Storage period of personal data
The duration for the storage of your personal data is determined by the legal obligations and the duration of our business relationship. Fiscally relevant data is retained for 10 years.
Your rights
You can exercise your rights free of charge at any time: right to access (Art. 15 GDPR), right to rectification (Art. 16 GDPR), right to erasure (Art. 17 GDPR), right to restriction of processing (Art. 18 GDPR), right to data portability (Art. 20 GDPR), right to object (Art. 21 GDPR). You can revoke your given consents at any time. If you wish to exercise your rights, you can contact the data controller, who is listed above. You also have the right to lodge a complaint with the Italian supervisory authority for data protection "Garante per la protezione dei dati personali".