Privacy Policy

1. Data Controller

The data controller for this website is:
Kohlbrennerhof
Mölten, South Tyrol (BZ), Italy
Email:

2. General Information on Data Processing

Personal data is any information that can be used to identify an individual. This includes, for example:
• Name
• Email address
• Phone number
• IP address
• Usage data
This data is processed only to the extent necessary to provide a functional website, process inquiries, or deliver our services.

3. Hosting and Content Delivery Network (Cloudflare)

Our website uses services from the provider: Cloudflare Inc. | 101 Townsend Street | San Francisco, CA 94107 - USA

Cloudflare operates a Content Delivery Network (CDN) and security services for websites. This routes traffic between your browser and our website through Cloudflare's servers.
The following data may be processed:
• IP address
• Technical connection data
• Browser information
• Access times
Cloudflare is used to ensure the security and stability of our website and to protect against attacks.
Legal basis:
Art. 6 para. 1 lit. f GDPR (legitimate interest in secure website operation)
Cloudflare processes data partly in the USA. Data transfer is based on EU standard contractual clauses.

4. Server Log Files

When you visit our website, information transmitted by your browser is automatically collected.
This includes:
• IP address
• Date and time of access
• Browser type and version
• Operating system
• Referrer URL
• Pages accessed

This data is used exclusively for technical monitoring and improvement of our website.
Legal basis:
Art. 6 para. 1 lit. f GDPR

5. Cookies and Consent Management

Our website uses cookies and similar technologies.
Cookies are small text files stored on your device that contain certain information.
We distinguish between:
Technically necessary cookies
These are required for the website to function correctly.
Analytics and marketing cookies
These help us understand how visitors use our website and enable personalized advertising.
Such cookies are only stored after your explicit consent via our cookie consent tool.
Legal basis:
Art. 6 para. 1 lit. a GDPR (consent)
You can change or revoke your cookie settings at any time via the cookie banner.

6. Google Analytics 4

Our website uses Google Analytics 4, a web analytics service provided by Google Ireland Ltd.
Google Ireland Limited | Gordon House | Barrow Street | Dublin 4 - Ireland

Google Analytics uses cookies that enable an analysis of your use of our website.
The following data may be processed:
• IP address (shortened / anonymized)
• User behavior on the website
• Page views
• Duration of stay
• Technical device information
Google uses this information to create reports on website usage.
IP addresses are anonymized within the EU.
Legal basis:
Art. 6 para. 1 lit. a GDPR (consent)
Data may be transferred to the USA. Google uses the EU Commission's standard contractual clauses for this purpose.
Further information:
https://policies.google.com/privacy

7. Meta Pixel (Facebook / Instagram)

The Meta Pixel is integrated into our website.
Provider: Meta Platforms Ireland Ltd. | 4 Grand Canal Square | Dublin 2 - Ireland

With the help of the Meta Pixel, we can track how users interact with our website after clicking on a Facebook or Instagram ad.
The following data may be processed:
• IP address
• Browser information
• Device information
• Visited pages
• Interactions
This data can be linked to your Facebook or Instagram account.
Legal basis:
Art. 6 para. 1 lit. a GDPR (consent)
Further information:
https://www.facebook.com/privacy/policy

8. Contacting Us

If you contact us via email or contact form, the transmitted data will be stored to process your request.
The following data may be processed:
• Name
• Email address
• Phone number
• Message text
Legal basis:
Art. 6 para. 1 lit. b GDPR (contract or pre-contractual measures)

9. Instagram Integration

Content from the social network Instagram may be embedded on our website.
Provider:
Meta Platforms Ireland Ltd.
Dublin, Ireland

When you access a page with Instagram content, a connection to Instagram servers may be established. Instagram may then receive information about your visit to our website.
If you are logged into your Instagram account, Instagram can associate the visit with your user account.
Legal basis:
Art. 6 para. 1 lit. a GDPR (consent via Consent Tool)
Further information:
https://privacycenter.instagram.com

10. Storage Duration

We store personal data only for as long as necessary for the respective purposes.
Typical retention periods:
• Contract and invoice data: 10 years
• Inquiries: 2 years
• Newsletter data: until unsubscribed

11. Data Disclosure

Personal data is only disclosed if necessary, for example to:
• IT service providers
• Tax advisors
• Hosting providers
• Marketing service providers
All service providers are contractually obliged to comply with the GDPR.

12. Rights of Data Subjects

You have the following rights at any time:
• Information about stored data
• Rectification of inaccurate data
• Erasure of your data
• Restriction of processing
• Data portability
• Withdrawal of consent
• Objection to processing
To exercise these rights, you can contact us at any time:

13. Right to Lodge a Complaint

If you believe that your data is being processed unlawfully, you can lodge a complaint with the competent data protection authority.
In Italy:
Garante per la Protezione dei Dati Personali