Privacy policy

Form: IS – Updated Date 10/2024

Privacy Policy for the processing of personal data.

Articles 13 and 14 of REGULATION (EU) NO. 679/2016 -

Legislative Decree No. 196/2003, as amended by Legislative Decree No. 101/2018.

Dear Data Subject,

this privacy policy describes the methods of managing this website (hereinafter, “Website”) regarding the processing of personal data of users who consult it, as well as the data processing practices through the Website.

In compliance with articlest. 13 (for data collected from the Data Subject) and 14 (for data not collected from the Data Subject) of Regulation (EU) 2016/679 (hereinafter, “GDPR”), provide Users of the Website with the following information, which relates exclusively to the processing carried out through the Website and not via other websites possibly visited through links from this site, for which it is recommended to review the relevant privacy notices provided by the respective Data Controllers.

The Website and any services offered through it are reserved for individuals who have reached the age of eighteen. The Data Controller does not process personal data related to minors under 18. Upon request from such Users, the Data Controller will promptly delete all personal data unintentionally collected.

1. Data Controller.

The data controller is the company FRANZ KRALER S.R.L., with registered office at Via Dolomiti n. 46 – ZIP 39034 Dobbiaco (BZ), Tax Code and VAT number 02310600214 (hereinafter, “Data Controller”).

The Data Controller reserves the right to appoint as Data Processing Responsible for the personal data managed for technical assistance, maintenance, technical management, and similar purposes of the Site, web agencies or consultants, whose contact details may be communicated following a request to the addresses indicated above.

The Data Controller and the Responsible(s) process Users' data also thanks to their internal appointed persons, specifically designated with instructions and authorized for processing.

2.  Category of processed data and sources of origin.

•        Browsing data (the IT systems and software procedures responsible for the operation of the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes: IP addresses, browser type used, operating system, domain name, and website addresses from which access or exit was made, information on pages visited by Users within the site, access time, time spent on individual pages, internal path analysis, and other parameters related to the operating system and the User's IT environment. These technical/informatic data are collected and used exclusively in an aggregated and anonymous manner. Such data are processed to enable and monitor the correct use of the Site, as well as to derive anonymous statistical information about its use, and are deleted immediately after processing.

•        Cookies, which we invite you to read our Cookie Policy.

•        Data voluntarily provided by the User, including:

or   common data (identifiers, personal details, billing information, and similar); or only exceptionally: special data (art. 9 GDPR);

or  only exceptionally: criminal data (art. 10 GDPR).

Sources: browsing, other websites, cookies and similar; user; public sources.

We may process, primarily: browsing data, as well as cookies.

We may also process data voluntarily provided by the User, for example through the contact form or by sending a communication via email, including common personal data (identifiers, personal details, billing information, and similar), and exceptionally special data pursuant to art. 9 GDPR or criminal data pursuant to art. 10 GDPR, within the strict limits where such processing is necessary due to the request for information received and with the prior consent of the Data Subject.

Data may come from automatic sources or voluntary sources, as well as from public sources. For example, they may originate from the User's browsing, which could carry information related to previous consultations of other sites, including, in particular, cookies and other similar technologies. Data may also be voluntarily provided by the User or related subjects. Other data may come from public sources, such as those processed in research or from searches, public databases, and similar.

3. Purpose of the processing.

The personal data of the Site Users, as described above, will be processed in the manner and forms prescribed by the GDPR, for the execution of the Site's functionalities, with particular but not exclusive reference to page browsing and the data collection procedures described therein, contact forms, potential registration/login procedures for the reserved area, newsletter subscription, and similar. In particular, the personal data provided to the Data Controller will be processed for the following purposes:

•        to follow up on specific requests made to the Data Controller by the User through the Site and its communication tools (contact forms, information request modules, and similar);

•        for informational communications related to the services of the same Data Controller, following requests for information via email messages or contact form completion and other communication tools;

•        for the possible registration to events organized by the Data Controller and other related activities (for example: participation verification, notices regarding any updates or changes to the event, etc.);

•        for other ancillary or related purposes to those indicated above and in any case within the scope of the Site's activities.

The processing of data provided in a generic manner will be carried out, also following automatic collection during browsing, solely for the purposes of verification and access control to the Site. This also applies to technical cookies, understood as session, functionality, or analytics cookies that meet the requirements specified by the Authority. In particular, regarding these, it is clarified that they can be assimilated to technical cookies, where these are created and used directly by the Site. In any case, for these analytics cookies, the Site, also in accordance with the Authority's clarifications, has provided for the anonymization of IP addresses and the amendment of data processing. The collection and use of the aforementioned browsing data (without prejudice to the anonymization of IP addresses) allow monitoring of the Site's performance and enable the improvement of the service offered, providing the User with a better browsing experience. Please refer to the dedicated Cookie Policy for further information.

4. Legal basis for processing.

The processing of personal data is based on on the fulfillment of contractual obligations or pre-contractual related to the request made by the User (for example: requests for information about the services provided by the Data Controller, requests for quotes, etc.), as well as, where necessary, on consent through the free and informed completion of the appropriate informational fields in the form dedicated to data collection and provision, and the checking of the appropriate checkbox, where provided.

It is clarified that filling in the appropriate fields in forms for requesting information is inherent to the request itself and, therefore, entails the fulfillment of a pre-contractual or contractual obligation, depending on the context. Consent may be requested subsequently for the processing of additional data.

A specific privacy notice will be provided wherever necessary (different from this one).

The processing is, in any case, also based on legitimate interest, including the right to information, which is referred to in the following paragraph.

5. Legitimate interest of the Data Controller.

The processing of personal data is also based on the legitimate interest of the Data Controller, such as exercising their rights within the information society, executing contractual performance, and carrying out direct marketing operations (in the manner, with the means, and within the timeframes provided by law).

6. Obligation to provide data.

The provision of navigation data by Users, for the purposes mentioned above, depends on the level of privacy enabled or disabled by the User through their browser. In some cases, disabling it could impair browsing on the Website. For certain forms on the Website, providing navigation data and/or using technical cookies is mandatory for the proper functioning of the Website itself.

The collection of certain personal data is necessary in any case for the structure of the Website itself and its procedures. Any request for additional optional data will instead be preceded by a specific approval checkbox. The provision of all other data is optional, depending on the type of information the User wishes to provide to the Website.

Notwithstanding the above, for example, providing the email account is necessary to respond to requests made through the contact form, as well as other mandatory data indicated with an asterisk. Other data are optional.

Failure to provide the necessary data for the requested action (for example: the email account via the form for requesting information with this means) makes it impossible for the Data Controller to fulfill the request.

APPLICABLE PROVISIONS TO ALL PROCESSING ACTIVITIES.

In any case, even if the Data Subject has given consent to authorize the Data Controller to pursue all the purposes mentioned above, they remain free at any time to revoke it.

We specifically and separately inform, as required by art. 21 of the Regulation, that the Data Subject has the right to object at any time to the processing of personal data concerning them carried out for the purposes mentioned above and that, should the Data Subject oppose the processing, the personal data can no longer be processed for such purposes.

7. Possible recipients of personal data.

Data may be communicated to connected, affiliated, or controlled companies by the Data Controller, as well as to consultants or third parties operating, also on behalf of and in the name of the Data Controller, for the fulfillment of services related to the purposes indicated in this notice, both within the EU and outside the EU (in the latter case, only subjects adhering to current regulations).

Navigation data and similar data (for which the above is recalled), as well as profiling cookies including third-party cookies (see the Cookie Policy of this Site), will be communicated to the respective interested third parties, where they are not managed directly by them as Data Controllers. 

In any case, data may be communicated to Data Processors, as well as to authorized and properly instructed persons, always within the scope of the processing purposes. 

For brevity, the detailed list of such figures is available at our headquarters.

8. Retention period.

The data voluntarily provided by the Data Subject will be stored until explicit revocation by the Data Subject himself, including through actions on their browser, cookie cleaning, explicit request, or other manifested means. Navigation data will be stored, respecting the principle of proportionality, in a form that allows the identification of the Data Subject for a period not exceeding that necessary for the purposes for which they were collected or subsequently processed. 

Excluded from the above terms are cases where it is necessary to retain data for a longer period to defend or assert a right or to comply with legal obligations or orders from Authorities.

9. Rights of the data subject.

Each Data Subject has the right to access, rectify, delete (be forgotten), restrict, receive notification in case of rectification, data portability, oppose, and not be subject to an automated individual decision, including profiling, pursuant to Articles 15 to 22 of the GDPR. These rights can be exercised in the forms and within the terms specified in Article 12 of the GDPR, by written communication sent to the Data Controller (see the following point 10.). 

The Data Controller will respond appropriately as soon as possible and, in any case, within 1 month of receiving the request.

10. Right to revoke consent (Methods of exercising rights).

It is   it is possible to revoke consent, where provided, at any time and/or exercise your rights sending: 

- a registered letter with return receipt to the sender with an explicit request (see the address indicated in the previous point 1.);

- an email to the address: [email protected]

11. Complaints.

Each Data Subject has the right to lodge a complaint pursuant to Articles 77 and following of the GDPR with a supervisory authority, which for Italy is identified as the Garante per la protezione dei dati personali. The forms, methods, and deadlines for lodging complaints are provided and regulated by current national legislation. The complaint is without prejudice to administrative and judicial actions, which for Italy can be filed either with the same Garante or with the competent Court.

12. Profiling.

Personal data provided through browsing the Website and the possible completion of forms published therein may be subject to profiling by third-party providers via third-party cookies.

Profiling allows these third-party providers, independent Data Controllers of their respective processing of personal data for profiling purposes, different from the Website Controller, to evaluate certain personal aspects of the Data Subject related, in particular, to their preferences, interests, tastes, with reference to the pages visited and activities carried out, in order to enable these independent and different Data Controllers to offer the Data Subject a more specific service tailored to your needs.