Here you can find out which personal data is processed when you visit this website, for what purpose, and to whom it is passed. The controller is Maria Hochgruber as the operator of this website. We name the services that are actually in use here – no more and no less.
1. Controller
The controller responsible for processing your personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Maria Hochgruber
Wöhre 4
IT-39030 Rasen-Antholz/Rasun-Anterselva (BZ)
Phone: +39 340 810 8873
Email: info@halbwoehrerhof.com
VAT no.: IT03129990218
For any data protection matter, you can reach us at info@halbwoehrerhof.com.
2. Website hosting
This website is delivered via the network of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (“Cloudflare”). Each time the site is accessed, Cloudflare processes technically necessary connection data: your IP address, the date and time, the address requested, the amount of data transferred, and information about your browser and operating system. Without this data the page cannot be delivered to your browser; it is also used to fend off attacks.
The legal basis is our legitimate interest in the secure and stable operation of the website (Art. 6(1)(f) GDPR). Cloudflare acts as our processor (Art. 28 GDPR). More information: https://www.cloudflare.com/privacypolicy/.
Fonts and images are served by this website itself. When the page loads, no data is transferred to third parties for this.
3. Enquiry form
You can send us a non-binding enquiry through the enquiry form on this website. The form is “Anexis REQUEST!” by Just Impact Group GmbH, Handwerkerzone 12, 39039 Niederdorf/Villabassa (BZ), Italy (“Anexis”). It is loaded from Anexis’ servers as soon as you scroll close to it, or when you arrive on the page via a link with pre-filled travel dates; in the process, Anexis receives your IP address and technical information about your browser.
What you enter in the form – travel dates, number of guests, salutation, name, postal address, telephone number, email address and your message – is transmitted to Anexis when you send it; we receive and process your enquiry through its system. We use this data to answer your enquiry and to prepare an offer for you. The legal basis is the taking of steps prior to entering into a contract at your request (Art. 6(1)(b) GDPR). For the processing by Anexis, the following also applies: https://anex.is/en/imprint-data-privacy/.
The campaign details from our own measurement (section “Our own campaign and availability measurement”) are not transmitted with an enquiry sent through this form.
4. Direct booking through the booking engine
In addition to the enquiry form, you can make a direct, binding booking on this website through a booking engine. It only opens when you select the “Book” tab: as long as you do not, the booking engine is not loaded at all and no information whatsoever – not even your IP address – is sent to its provider.
It is operated by HGV-Service Genossenschaft, Via Macello 59, 39100 Bozen/Bolzano (BZ), Italy (VAT no. 00576540215), under the name “Booking Südtirol”. When you open the tab, the content of the booking engine is loaded from its provider’s servers; in the process, the provider receives your IP address and technical information about your browser.
The information you enter there – travel dates, number of guests, choice of room and board, name and contact details and, where applicable, payment details – is processed by HGV-Service Genossenschaft and passed on to us as the accommodation you have booked. The provider is an independent controller for this and not our processor; its own privacy policy applies to this processing: https://www.bookingsuedtirol.com/en/privacy. The legal basis for embedding it on this website is the performance of the contract you requested or of steps prior to entering into a contract (Art. 6(1)(b) GDPR); the booking engine therefore does not depend on your consent.
One part of the booking engine, however, requires consent: it sets the cookie bs_widget_promotion (lifetime 30 days), which it uses to remember which campaign brought you here. This cookie is written only if you have consented to the service “Booking Südtirol” in the cookie banner (Art. 6(1)(a) GDPR). Without consent, it is not set, and booking works exactly the same.
The booking engine also reports the steps of a booking back to this website so that we can – with your consent – measure the success of our ads. Which of this data is passed on to third parties is set out in the section “Services we use only with your consent”; without consent, none of it goes to third parties.
Separately from this, we keep our own count of whether a booking was made or an enquiry sent through the booking engine – without names, contact or payment details; see the section “Our own campaign and availability measurement” for details.
5. Cookie banner and consent management
On your first visit, we use a banner to ask which of the services described below you consent to. Everything that is not technically necessary stays switched off until you consent. You can reject everything with a single click, and the website remains fully usable.
For this we use the software “CCM19”. It is operated by our service provider 99tales GmbH (Advertos), Via Vittorio Veneto 67, 39042 Brixen/Bressanone (BZ), Italy, on its own infrastructure; no data is transmitted to the maker of the software. A record of consent is stored: a random identifier, the time, which services you consented to or refused, the version of the banner text, and your browser’s language and technical information. Your decision is also stored in your browser.
The legal basis is our legal obligation to be able to demonstrate consents given (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR). More information: https://advertos.it/consent-manager-privacy.
You can change or withdraw your choice at any time: Cookie settings. The link is also at the bottom of every page.
6. Our own campaign and availability measurement
To understand which of our ads lead to enquiries and which travel periods are in demand, we run our own measurement together with our service provider 99tales GmbH (Advertos). It runs entirely through this website; no data is passed to advertising networks for it.
Without consent (listed in the cookie banner as “Advertos Marketing Essentials”):
- If you arrive on this website via a campaign, we remember for the duration of your visit the general campaign details from the address you called up (source, medium, campaign name and number) and the host name of the referring page – no click identifiers. This information stays in your browser and is only transmitted with a booking or enquiry made through the booking engine.
- If you complete a booking or send an enquiry through the booking engine, this website reports it to us: whether it was a booking or an enquiry, the booking number, booking value and currency, the travel dates, and the page on which it happened – together with the campaign details just mentioned, if there are any. Names, contact and payment details are not included, and nothing is stored in your browser for this. This shows us how many direct bookings our advertising brings in.
The legal basis is our legitimate interest in assessing the success of our advertising and the demand in aggregated form (Art. 6(1)(f) GDPR).
Only with your consent (Art. 6(1)(a) GDPR):
- “Verfügbarkeits-Analyse”: Your browser receives a random identifier that lets us attribute several availability checks to the same browser. It contains neither your name nor your email address.
- “Advertos Marketing Extended”: We additionally store the ad’s click identifier (e.g.
gclid,fbclid), the exact ad parameters and the full address of the referring page, and we count visits even when no enquiry is sent.
If you book or send an enquiry through the booking engine, this information is linked to it. If you withdraw your consent, the identifiers in your browser are deleted.
7. Services we use only with your consent
The following services are switched off until you consent in the cookie banner. The legal basis in each case is your consent (Art. 6(1)(a) GDPR). You can switch them on and off individually and withdraw your consent at any time: Cookie settings.
For users in the European Economic Area, the provider of the Google services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. More information: https://policies.google.com/privacy.
Google Tag Manager
We use Google Tag Manager to manage the Google and advertising services listed below. It does not set any cookies itself and does not create profiles, but it loads the other services. It is only loaded after you consent. The Tag Manager and the Google services loaded through it are not fetched directly from Google’s servers but via the address of this website (path /oq65/). Our server forwards these requests to Google and in doing so transmits your IP address to Google. From your point of view, only the technical route changes – the same data is transmitted to Google as with a direct request, and this too happens only after you consent.
8. What this website stores in your browser
The following overview lists everything this website itself stores in your browser. Cookies of the third-party providers named above are described under the respective service; you can find the complete, continuously updated list in the Cookie settings under “Details”.
| Name | Type | Storage period | Purpose | Consent required |
|---|---|---|---|---|
ccm_consent | Local Storage | 1 year | Stores your choice in the cookie banner so that we do not have to ask you again on every visit. | no |
bw_tracking_params | Session Storage | until the browser tab is closed | Remembers, for the duration of your visit, which campaign brought you here, so that an enquiry can be attributed to the right campaign. Without consent, only general details (source, medium, campaign, host name of the referring page); click identifiers only after consent. | no |
bw_visitor_id | Cookie | 90 days | Random identifier with which we recognise availability checks made from the same browser. Its lifetime is extended with every visit. | yes – “Verfügbarkeits-Analyse” |
bw_session | Cookie | 30 minutes | Random identifier for one continuous visit, so that it is counted only once. | yes – “Advertos Marketing Extended” |
bw_touch | Cookie | 30 minutes | Check value of the campaign parameters of the current visit, so that the same ad click is not counted more than once. Contains no click identifier. | yes – “Advertos Marketing Extended” |
9. Transfers to countries outside the EU
For the following recipients, processing in the USA cannot be ruled out:
- Cloudflare, Inc. (delivery of the website)
- Google LLC, USA (parent company of Google Ireland Limited)
These companies are certified under the EU-U.S. Data Privacy Framework. For certified companies, the European Commission has determined an adequate level of data protection (adequacy decision of 10 July 2023, Art. 45 GDPR). You can find the current list of certified companies at https://www.dataprivacyframework.gov/list. In addition, the providers have included the European Commission’s standard contractual clauses in their contracts.
10. Retention period
We store data from your enquiry for as long as is necessary to process the enquiry and any booking that results from it. If a booking is made, the statutory retention periods under commercial and tax law also apply. Data based on your consent is processed until you withdraw your consent. The storage period of the individual cookies and browser entries is given in the section “What this website stores in your browser”.
11. Your rights
You have the following rights against us with regard to your personal data:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing based on our legitimate interest (Art. 21 GDPR)
- Withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)
An informal message to info@halbwoehrerhof.com is sufficient. Providing your data is voluntary; without the details in the enquiry form, however, we cannot answer your enquiry. No automated decision-making within the meaning of Art. 22 GDPR takes place.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the place of your habitual residence. The authority responsible for us is: Garante per la protezione dei dati personali (Italian Data Protection Authority), Piazza Venezia 11, 00187 Rome, Italy, https://www.garanteprivacy.it.
12. Last updated and changes
We update this privacy policy when the services used or the legal situation change. The version currently published here applies. Last updated: 28 October 2026.