Personal data is all data that can be used to personally identify you. You can find more detailed information on the subject of privacy in the privacy statement below this text.
1. General Information at a Glance
1.1. Data collection on our website
1.1.1. Who is responsible for data collection on this website?
The data controller within the meaning of data protection law is:
Travel Charme Salo S.R.L.
Cavourstraße 23 / C
39100 Bozen – IT
C/O Winkler e Sandrini
You can find out more about our company, details of authorised representatives as well as further contact options in the legal notice on our website: https://laffetto.com/
1.1.2. What data of yours do we process, and for what purposes?
If we have received data from you, we use this solely for the purposes for which we acquired or collected it in the first place. Some data is collected for the purposes of contract fulfilment or advertising, or to guarantee the error-free provision of the website.
Other data may be used to analyse your user behaviour. The processing of data for purposes other than those stated is only considered where the legal requirements as defined under Article 6(4) GDPR are met. In such cases it goes without saying that we will comply with any information obligations as defined under Article 13(3) GDPR and Article 14(4) GDPR.
1.1.3. What is the legal basis for this?
Article 6 GDPR generally serves as the legal basis for processing personal data, provided there are no other specific legal provisions. The following possibilities in particular are applicable here:
- Consent (Article 6(1)(a) GDPR)
- Data processing for the performance of contracts (Article 6(1)(b) GDPR)
- Data processing based on a weighing up of interests (Article 6(1)(f) GDPR)
- Data processing to fulfil a legal obligation (Article 6(1)(c) GDPR)
If personal data has been processed based on consent provided by you, you are entitled to revoke this consent from us at any time with effect for the future.
If we process data based on a balancing of interests, as the data subject you are entitled to object to said processing of personal data, taking into consideration the provisions of Article 21 GDPR.
1.1.4. How do we collect your data?
On the one hand, we collect data from you when you share said data with us. This might, for example, be data that you enter in a contact form. Other data is registered automatically by our IT systems when you visit our website. This is primarily technical data (e.g. web browser, operating system or the time the site was accessed). This data is recorded automatically as soon as you visit our website.
1.1.5. How long will your data be stored for?
We process data for as long as is required for the respective purpose.
Where statutory retention periods apply – e.g. in reporting law or tax law – the relevant personal data will be stored for the duration of the prescribed retention period. Following the expiry of the statutory retention period, we will determine whether the need for processing still applies. If this is no longer necessary, the data will be deleted.
1.1.6. What rights do you have in relation to your data?
You are entitled to free information as to the origin andrecipients of your saved personal data and the purposes for this at any time. You are also entitled to request that this data be rectified, blocked or erased. To discuss this, or any other questions relating to privacy, please contact us using the address provided in our legal notice. In particular, you have a right under Article 21(1) and (2) GDPR to object to the processing of your data. Many data processing operations are only possible with your express consent. You are entitled to revoke any consent issued previously at any time. This can be done simply by sending a message via email to email@example.com (no official form required). A withdrawal of consent does not retroactively affect the lawfulness of data processing that has taken place up to the moment of withdrawal.
You also have the right to lodge a complaint with the relevant supervisory authority.
In the event of breaches of privacy law, the data subject has the right to lodge a complaint with the relevant supervisory authority. The competent supervisory authority for data protection issues is the data protection officer of the state in which our company’s registered office is located. The following link provides a list of data protection officers and their contact information: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
1.1.7. Who is this data shared with?
Your personal data will generally only be passed on to third parties where this is necessary for the fulfilment of the contract, where this is permitted after weighing up interests within the meaning of Article 6(1)(f) GDPR, where we are legally obliged to disclose said information, or where you have granted us consent in this regard.
1.2. General notes and mandatory information
The operator of these web pages takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy statement.
If you use this website, various personal data will be collected. Personal data is data that can be used to personally identify you. This privacy statement explains what data we collect and what we use it for. It also explains how and why we do this.
Please note that transmitting data over the internet (e.g. when communicating via email) may pose a security risk. End-to-end protection of data from third-party access is not possible. Information relating to the data controller
1.2.1. SSL and TLS encryption
This site uses SSL and/or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries sent to us as the site operator. You can tell a connection is encrypted when the address line of your browser switches from http:// to https:// and the lock symbol appears in your browser line. If SSL and/or TLS encryption is enabled, the data you send to us cannot be accessed by third parties.
1.2.2. Encrypted payment transactions on this website
If, following the conclusion of a contract against payment, the obligation arises to send us your payment details (e.g. account number in the case of a direct debit mandate), this data will be required to transact the payment. Transactions via standard methods of payment (Visa/Mastercard, direct debit) will take place solely via an encrypted SSL and/or TLS connection. You can tell a connection is encrypted when the address line of your browser switches from http:// to https:// and the lock symbol appears in your browser line.
Encrypted communication prevents third parties from gaining access to the payment details you send to us.
2. Data protection officer
Statutorily prescribed data protection officer
We have appointed a data protection officer for our company.
Mr Johannes Baeck
2B Advice GmbH
Joseph-Schumpeter Allee 25
Phone: +49 (0) 228 / 926165120
3. Data collection on our website
Some web pages use what are referred to as cookies. Cookies do not harm your computer and do not contain any viruses. Cookies serve to make our website more user-friendly, effective and secure. Cookies are small text files that are placed on your computer and saved by your browser.
Most of the cookies we use are what are referred to as ‘session cookies’. They are deleted automatically once you have left our website. Other cookies will remain on your device until you delete them. These cookies enable us to identify your browser when you next visit the site.
You can set your browser to alert you when cookies are being set and decide whether or not to allow cookies on a case-by-case basis, to reject cookies in specific circumstances or to reject these generally; you can also enable the automatic deletion of cookies when you close your browser. Disabling cookies may limit the functionality of this website: www.laffetto.com/datenschutz#cmpcookieinfo
Cookies that are required to facilitate electronic communications or to provide certain functions you wish to use (e.g. basket function) are stored on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in storing cookies to facilitate a smooth and optimised provision of its services with no technical difficulties. Insofar as other cookies (e.g. cookies for analysing your browsing behaviour) are saved, these are dealt with separately in this privacy statement.
3.2. Server log files
The provider of the pages automatically collects and stores information in what are referred to as server log files, which are transmitted to us automatically by your browser. This information includes:
- Browser type and browser version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of server request
- IP address
This data is not combined with other data sources.
The legal basis for such data processing is Article 6(1)(b) GDPR, which permits the processing of data for the fulfilment of a contract or the performance of pre-contractual measures.
3.3. Contact form
If you send us enquiries via contact form, the data you enter in the contact form and the contact details you provide there will be saved by us in order to process the enquiry or to answer any follow-up questions. We will not pass on this data without your consent.
The data provided in the contact form will therefore be processed solely on the basis of your consent (Article 6(1)(a) GDPR). You are entitled to revoke this consent at any time. All you have to do is send us a message via email (no official form required). A withdrawal of consent does not retroactively affect the lawfulness of data processing that has taken place up to the moment of withdrawal.
We will retain the data entered in the contact form until such point as you request that we delete it, revoke your consent to the storage of said data, or the purpose for saving the data no longer applies (e.g. once we have finished processing your enquiry). Mandatory statutory provisions – specifically statutory retention periods – shall remain unaffected by this.
3.4. Registering on this website
Wir erheben, verarbeiten und nutzen personenbezogene Daten nur, soweit sie für die Begründung, inhaltliche Ausgestaltung oder Änderung des Rechtsverhältnisses erforderlich sind (Bestandsdaten). Dies erfolgt auf Grundlage von Art. 6 Abs. 1 lit. b GDPR, der die Verarbeitung von Daten zur Erfüllung eines Vertrags oder vorvertraglicher Maßnahmen gestattet. Personenbezogene Daten über die Inanspruchnahme unserer Internetseiten (Nutzungsdaten) erheben, verarbeiten und nutzen wir nur, soweit dies erforderlich ist, um Nutzer:innen die Inanspruchnahme des Dienstes zu ermöglichen oder abzurechnen.
Die erhobenen Kundendaten werden nach Abschluss des Auftrags oder Beendigung der Geschäftsbeziehung gelöscht. Gesetzliche Aufbewahrungsfristen bleiben unberührt.
Registering on our website will allow you to use additional site functions. We will use the data provided during the registration process solely to facilitate your use of the respective offering or service you signed up for. Mandatory information requested in the registration process must be provided in full. Otherwise, we will refuse to accept your registration.
In the event of key changes – e.g. changes to the range of services or necessary technical changes – we will use the email address provided during registration to inform you via this medium.
The data you provide during the registration process will be processed on the basis of your consent (Article 6(1)(a) GDPR). You are entitled to revoke any consent issued previously at any time. All you have to do is send us a message via email (no official form required). A withdrawal of consent does not retroactively affect the lawfulness of data processing that has taken place up to the moment of withdrawal.
The data collected during registration will be stored by us as long as you are registered on our website and will then be deleted. This provision does not take precedence over storage periods set out by statutory law.
3.5. Processing of data (customer and contractual data)
We will only collect, process and use personal data insofar as it is necessary to establish, arrange or amend the legal relationship (master data). The legal basis for such data processing is Article 6(1)(b) GDPR, which permits the processing of data for the fulfilment of a contract or the performance of pre-contractual measures. We only collect, process and use personal data relating to the use of web pages (usage data) insofar as this is necessary to enable the user to use the service or for the purposes of billing the user for said service.
The customer data collected will be deleted following completion of the order or termination of the business relationship. This provision does not take precedence over storage periods set out by statutory law.
4. Analysis tools and advertising
With the help of "Consentmanager", you have the option of granting or rejecting your consent for certain functionalities of our website, e.g. for the purpose of integrating external elements, integrating streaming content, statistical analysis, reach measurement and personalised advertising. You can give or refuse your consent for all functions for individual purposes or individual functions with the help of "Consentmanager". The settings you have made can also be changed by you afterwards. The purpose of integrating "Consentmanager" is to allow the users of our website to decide on the aforementioned matters and to offer them the opportunity to change settings already made in the course of further use of our website. In the course of using "Consentmanager", personal data as well as information of the end devices used, such as the IP address, are processed.
"Consentmanager" stores your data as long as your user settings are active. After two years after the user settings have been made, you will be asked again for your consent. The user settings made will then be stored again for this period.
You can object to the processing. You have the right to object on grounds arising from your particular situation. For the purpose of objection, please contact us by e-mail at: firstname.lastname@example.org
4.2.1. Google Analytics
This website uses features from the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses what are referred to as ‘cookies’. These are small text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is normally sent to a Google server in the USA and stored there.
Google Analytics cookies are stored on the basis of Article 6(1)(f) GDPR.The operator of the website has a legitimate interest in analysing user behaviour in order to optimise both the website and its advertising.
We have activated the IP anonymisation function on this website. This means that your IP address is shortened by Google in member states of the European Union or in other signatories to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address sent to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website for the purposes of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. The IP address sent by your browser through Google Analytics will not be associated with any other data held by Google.
You can prevent the installation of cookies by adjusting the settings of your browser software accordingly. However, we would like to point out that, if you choose to do so, you may not be able to use all of the features of this website. Additionally, you can prevent Google from collecting or processing the data generated by the cookie concerning your use of our website (including your IP address) by downloading and installing the browser plugin using the following link: tools.google.com/dlpage/gaoptout
Objecting to the collection of data
You can prevent your data from being collected by Google Analytics by clicking on the following link. An opt-out cookie that prevents the collection of your data when you visit this website in future will be installed: deactivate: https://tools.google.com/dlpage/gaoptout?hl=en
Contract data processing
We have concluded a contract with Google for contract data processing and adhere fully to the strict requirements of the German data protection authorities when using Google Analytics.
Google Analytics demographics feature
This website uses the ‘Demographics’ feature of Google Analytics. It can be used to generate reports which provide information about the age, gender and interests of visitors to our website. This data originates from interest-based advertising by Google and visitor data from third-party providers. This data cannot be attributed to any specific individual. You can disable this feature at any time by changing the ad settings in your Google account or objecting to the collection of your data by Google Analytics as described in the section entitled ‘Objecting to the collection of data’.
4.2.2. Google Tag Manager
This website uses Google Tag Manager. It is used to record the website data to be sent to the respective analysis tool. This entails only the forwarding of data; it does not collect or store data. This tool may however trigger other tags which, under certain circumstances, do collect data. Google Tag Manager does not access such data. If you have deactivated cookies on a domain or cookie level, the deactivation will also apply to the tracking tags implemented with Google Tag Manager.
4.2.3. Google Ads and Google conversion tracking
This website uses Google Ads. Ads is an online advertising program provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (‘Google’).
We use Google Ads for what is referred to as conversion tracking. When you click on an ad served by Google, a conversion tracking cookie will be installed. Cookies are small text files stored on the user’s computer by their web browser. These cookies expire after 30 days and cannot be used to identify users personally. If a user visits certain pages of this website and the cookie has not yet expired, we and Google can see that the user has clicked on the advert and was referred to this page.
Every Google Ads customer receives a different cookie. Therefore, the cookies cannot be tracked across the websites of Ads customers. The information collected by the conversion cookie is used to generate conversion statistics for Ads customers who have activated conversion tracking. Customers learn the total number of users who have clicked on their advertisement and been redirected to a page with an embedded conversion tracking tag. However, they do not gain access to any information that can be used to identify users personally.
If you do not want to take part in tracking, you can object to this use of your data by disabling the Google conversion tracking cookie in your web browser under user settings. This will ensure you are not included in the conversion tracking statistics. Conversion cookies are stored on the basis of point (f) of Article 6(1) GDPR. The operator of the website has a legitimate interest in analysing user behaviour in order to optimise both the website and its advertising.
You can set your browser to alert you when cookies are being set and decide whether or not to allow cookies on a case-by-case basis, to reject cookies in specific circumstances or to reject these generally; you can also enable the automatic deletion of cookies when you close your browser. Disabling cookies may limit the functionality of this website.
4.2.4. Google Remarketing
Our websites use Google Analytics remarketing features in combination with the cross-device features of Google Ads and Google DoubleClick. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
This function enables the advertising target groups generated with Google Analytics remarketing to be combined with the cross-device functions of Google Ads and Google DoubleClick. This enables interest-related, personalised advertising that has been adapted to you based on your earlier use and browsing behaviour on one device (e.g. mobile phone) to be displayed on another of your devices (e.g. tablet or PC) too.
If you have consented accordingly, Google will link your web and app browsing history with your Google account for this purpose. This means that the same personalised advertising can be displayed on every device you use to log into your Google account.
To support this function, Google Analytics registers Google-authenticated user IDs that are temporarily linked to our Google Analytics data in order to define and generate target groups for cross-device advertising.
You can permanently reject cross-device remarketing/targeting by disabling personalised advertising in your Google account; to do so, follow this link: https://www.google.com/settings/ads/onweb/
The aggregation of the data collected in your Google Account is based solely on your consent, which you can grant or withdraw from Google (Article 6(1)(a) GDPR). In the case of data collection processes that are not merged in your Google Account (e.g. because you do not have a Google account or have objected to said merging), the collection of data is based on Article 6(1)(f) GDPR. Legitimate interest is constituted by the fact that the website operator has an interest in the anonymised analysis of website visitors for the purposes of advertising.
4.2.5. Google Fonts
This site uses Web Fonts, a service provided by Google for the uniform display of fonts. On accessing our website, your browser loads the necessary web fonts into your browser cache in order to display text and fonts correctly.
Your browser must connect to Google servers to facilitate this. This alerts Google to the fact that your IP address has been used to access our website. Google Web Fonts are used in the interests of giving our website a uniform and appealing appearance. This represents a legitimate interest in the sense of Article 6(1)(f) GDPR.
If your browser does not support Web Fonts, your computer will use a standard font.
This website uses the map service Google Maps through an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
It is necessary to store your IP address in order to use the features of Google Maps. This information is normally sent to a Google server in the USA and stored there. The provider of the website has no influence over this transmission of data.
We use Google Maps in order to make our website more appealing and make it easy to find the locations we list on our website. This represents a legitimate interest in the sense of Article 6(1)(f) GDPR.
4.3. Microsoft Bing
4.3.1. Microsoft Bing Ads und Conversion Tracking
We use the conversion tracking of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA on our websites.
If you do not want Microsoft to use information about your behaviour, you can refuse the necessary setting of a cookie, for example, by selecting a browser setting that disables the automatic setting of cookies. You can also prevent the collection of data generated by the cookie and related to your use of the website, as well as the processing of this data by Microsoft, by using the following link to object: https://account.microsoft.com/privacy/ad-settings/signedout?lang=en-GB
Microsoft may also be able to track your usage behaviour across multiple electronic devices through cross-device tracking, which enables Microsoft to display personalised advertising on or within Microsoft websites and apps. You can disable this behaviour.
For more information about Bing's analytics services, please visit the Bing Ads website: https://help.bingads.microsoft.com/#apex/3/de/53056/2
For more information on data protection and the cookies used by Microsoft and Bing Ads, please visit the Microsoft website at: https://privacy.microsoft.com/de-de/privacystatement
4.3.2. Bing Ads Remarketing
We also use Bing Ads Remarketing. Through this application, we can show you our advertisements when you continue to use the internet after visiting our website. In this way, we want to show you advertisements that are of interest to you. This is done via a cookie stored in your browser, which is used to record and evaluate your usage behaviour. No personal information about individual users is disclosed to us.
You can prevent the tracking of cookies in your browser settings. However, our online offer may then only function to a limited extent for you. You can also prevent the collection of data by Microsoft by clicking here: http://choice.microsoft.com/en/opt-out
An opt-out cookie will be set, which will prevent the future collection of your visit to our website. Please note that if you delete all cookies on your end device, this opt-out cookie will also be deleted. If you still wish to object, you must set the cookie again using the button above.
The legal basis for the processing is Art. 6 para. 1 lit. f GDPR.
If you would like to receive the newsletter offered on the website, we will require from you an email address and information that enables us to verify that you are the owner of the email address you provided and that you consent to receive the newsletter. Any further data collection will take place solely on a voluntary basis. We will use this data solely to send the information requested and will not pass this on to third parties.
The data you provide in the newsletter registration contact form will be processed exclusively on the basis of your consent (Article 6(1)(a) GDPR). You can withdraw your consent to the storage and use of the data and email address used to send the newsletter at any time, e.g. by using the opt-out link in the newsletter. A withdrawal of consent does not retroactively affect the lawfulness of data processing that has taken place up to the moment of withdrawal.
We will save the data provided for the purpose of receiving the newsletter until you opt out of the newsletter and delete this once you have unsubscribed from the newsletter. Data saved for other purposes (e.g. email addresses for the member area) will remain unaffected by this.