🔄

Data protection

Information on data processing under EU Directive No 679/2016

Pursuant to EU Directive No. 679/2016, hereinafter referred to as the GDPR, Ausserhofer Martin provides information on the nature, scope and purpose of its processing of personal and sensitive data that come to its attention.

  1. Data controller:

The data controller is Ausserhofer Martin, represented by its legal representative Martin Ausserhofer, with its registered office at Europastraße 15, I-39031 Bruneck, telephone +39 0474 554666.

The person responsible for data processing is Martin Ausserhofer, who may be contacted by registered letter at Europastraße 15, I-39031 Bruneck or by email at info@ausserhofer.immo.

  1. Types of data processed and persons concerned:

We process personal data of customers and suppliers, as well as data of persons who voluntarily provide their details to our company in person, by telephone, fax or email, or by registering on our website. We also process data obtained from third parties, for example when collecting external data for business information, public directories and similar sources. In the latter case, too, only ordinary personal data is involved.

  1. Purpose of data processing:

Data is processed exclusively for the following purposes:

  1. Compliance with obligations under applicable regulations and laws, including tax and accounting requirements
  2. Fulfilment of contractual obligations towards data subjects
  3. Carrying out activities related to our business operations, such as compiling internal statistics, financial reporting and maintaining customer and supplier accounts
  4. Preparation of a quotation
  5. Sending newsletters
  6. Compilation of internal statistics

  1. Legal bases for data processing:

Data processing complies with statutory requirements and is based on the following legal grounds under Articles 6 and 7 GDPR: performance of agreed services, implementation of contractual measures and response to enquiries, compliance with legal obligations and protection of legitimate interests, and the consent of data subjects.

  1. Methods of data processing:

Data may be processed with or without electronic assistance, in any event using automated means, and includes collection, recording, organisation, retention, retrieval, processing in the narrower sense, alteration, selection, extraction, comparison, use, linking, blocking, transmission, deletion and storage of data.

Data is processed by the controller as well as by processors and third parties commissioned by the controller to process data for the purposes specified in point 3, or in cases governed by law. The controller has verified that processors and third parties also process personal data in accordance with the GDPR.

Where necessary, data is disclosed to domestic and/or foreign natural and/or legal persons, provided this serves the activities and purposes specified in point 3. Personal data is not otherwise disseminated generally.

Specifically, data is processed as follows:

  1. Contact:

When the company is contacted through a contact form, email or social media, the user's information is processed to handle and respond to the enquiry. The information may be stored in a customer relationship management system or a comparable enquiry management system.

Enquiries are deleted as soon as they are no longer required, unless retaining the data is necessary to fulfil legal obligations.

  1. Google Tag Manager:

Google Tag Manager is a solution used on this website that enables so-called website tags to be managed through an interface in order to integrate Google marketing services into the online offering. Tag Manager itself does not process personal data. For further information, please refer to the Google services use policy: https://www.google.com/intl/de/tagmanager/use-policy.html

  1. Google Analytics:

This website uses analytics tools from Google Inc. for marketing and optimisation purposes. Data is collected and stored in anonymised form. Google Analytics uses cookies, which are text files stored on the computer that enable analysis of the data subject's use of the website. This data is transmitted to and stored on a Google server in the USA. The IP address transmitted by the browser through Google Analytics is not combined with other Google data. The code also uses the anonymizeIP function, which guarantees IP address masking so that all data is collected anonymously. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The collected data is not used to identify visitors personally; individual users remain anonymous and no data is disclosed to third parties. Google uses this information to produce various reports on website activity on behalf of the website operator.

In this connection, data subjects are informed of the option to object by installing the Google Analytics opt-out browser plugin at https://tools.google.com/dlpage/gaoptout?hl=de.

  1. Google Adwords and conversion measurement:

This website also uses services from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google is certified under the Privacy Shield agreement and guarantees compliance with European data protection law. This website uses the Google Adwords online marketing method to place advertisements in Google's advertising network so they are shown to users presumed to be interested in them. This allows advertisements for and within this website's online offering to be displayed in a more targeted way, showing users only advertisements potentially relevant to their interests. For this purpose, when websites using Google's advertising network are accessed, Google directly executes code and integrates so-called marketing tags into the website. These store an individual cookie, a small file, on the user's device. The file records the websites visited, the content of interest to the user, technical information about the browser and operating system, and the time of the visit. Google also uses conversion cookies to compile statistics determining the total number of users who viewed an advertisement. Users cannot be identified personally; Google processes only cookie-related data within anonymised user profiles, unless a user expressly permits Google to process the data without anonymisation. Further information is available in Google's privacy policy (https://policies.google.com/technologies/ads).

  1. Facebook:

This website integrates plugins from the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA. Facebook plugins can be recognised by the Facebook logo or the Like button. The plugin establishes a direct connection between the data subject's browser and Facebook's server. Facebook thus receives information that the data subject has visited this website, and the Like button can be used to link this website's content to their own Facebook profile. Further information is available in Facebook's privacy policy (https://de-de.facebook.com/policy.php).

  1. Instagram:

This website uses social plugins from Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA. These plugins are marked with an Instagram logo. They establish a direct connection between the data subject's browser and Instagram's server in the USA, informing Instagram that the data subject has accessed the relevant page. If the data subject is logged in to Instagram, Instagram can associate the data directly with their account. Further information on the purpose and extent of Instagram's data collection and subsequent processing is available in Instagram's privacy notice (https://help.instagram.com/519522125107875?helpref=page_content).

  1. Social media presence:

Ausserhofer Martin maintains an online presence on social networks and platforms to communicate with customers, prospective customers and active users and inform them about its services. When accessing those networks, the respective operators’ privacy policies apply.

  1. Disclosure of data to domain registries:

To register data subjects' domains, their data must be forwarded to the respective national and international domain registries. Only strictly necessary personal data is transmitted. Data transmitted to registrars can be queried and viewed by internet users. The registries prohibit commercial use and misuse.

  1. Disclosure of data to certificate issuers:

Personal data is transmitted to the certificate issuer for the issue of an SSL certificate. Only strictly necessary data is transmitted. The data subject consents to this data being transmitted automatically to the certificate issuer when the certificate is created.

  1. Business analysis and market research:

To identify market trends and the wishes of contractual partners and users, available data on business transactions, enquiries, contracts and similar matters is analysed. This involves processing master data, communication data, contract data, payment data, usage data and metadata of contractual partners, prospective customers, customers and visitors to the online offering. The analyses serve to improve ease of use, optimise the offering and improve business efficiency, and are not disclosed externally.

  1. Cookies:

Visiting this website generates session cookies that are valid only for the duration of the visit. These cookies cannot be analysed across domains as advertising networks do, nor are they used to analyse user behaviour.

  1. Disclosure of data and refusal to disclose:

Disclosure of personal data is essential to fulfil the purposes specified in point 3. A refusal by the data subject to disclose the data means that the purposes specified in point 3 cannot be fulfilled.

  1. Data retention:

Unless expressly stated otherwise in this privacy policy, processed data is deleted as soon as it is no longer needed for the purposes specified in point 3 and no statutory retention obligations remain. In general, personal data is not retained for more than two years.

Where deletion is not possible for legal reasons, processing is restricted: the data is blocked and not used for other purposes.

  1. Rights of the data subject:

The GDPR allows data subjects to exercise specific rights:

  1. The right to obtain access from the controller to the personal data concerned, and to rectification, erasure or restriction of processing, as well as the right to object to processing;
  2. The right to receive their own data from the controller in a structured and understandable format, where possible also for transfer to another controller;
  3. The right to withdraw consent to data processing at any time where the lawfulness of processing is based on the data subject's consent, without affecting the lawfulness of processing based on consent before its withdrawal;
  4. The right to lodge a complaint with the data protection supervisory authority.

These rights may be exercised by written notice sent by certified email to info@ausserhofer.immo or by registered letter with acknowledgement of receipt to Europastraße 15, I-39031 Bruneck.