Vouchers: Privacy

Information Letter on the Processing of Personal Data according to Art. 13 Regulation (EU) 2016/679

Data Controller
We would like to inform you that the processing of your personal data within the meaning of Regulation (EU) 679/2016 ("GDPR") is carried out by Yanovis GmbH, located at 2 Hypatiastraße, 39100 Bolzano, as the controller ("Controller"), in order to enable the purchase of vouchers on the website www.bookingsuedtirol.com of HGV-Service Cooperative, which acts as a data processor. Yanovis GmbH handles the sale of vouchers guaranteed by HGV-Service Cooperative and is thus the contractual partner of the purchasers of Booking-Südtirol vouchers.

Types of processed data
The Controller processes personal data within the meaning of Art. 4(1) GDPR, which are collected when concluding and fulfilling the respective contract, such as your name, mobile number, address, email address, payment information, and general contact details, hereinafter referred to as "personal data".

Purpose, Legal Basis, and Voluntary Nature of Processing
Your personal data will be processed - with your explicit consent, if required - for the following purposes:
• Provision of contractually agreed services, processing of any information or assistance requests, performance of activities related to the company's business operations (such as filling out internal statistics, invoicing, accounting, protection of receivables, and management of liabilities) [Legal basis according to Art. 6(1)(b) GDPR];
• Compliance with legal, accounting, and tax obligations [Legal basis according to Art. 6(1)(c) GDPR].
Providing your personal data for the above purposes is voluntary; without this information, it will not be possible for us to conclude or fulfill the contract.

Recipients and Transfer of Personal Data
Your personal data may be shared with the following categories of recipients:
• Natural persons authorized by the Controller after concluding a confidentiality agreement for the processing of personal data (e.g., employees and system administrators);
• Advisors and banks for accounting and administrative purposes, chambers of commerce, and similar entities, if the transmission is necessary or expedient for carrying out the requested activity, which usually act as data processors for the Controller;
• Providers of credit card services acting as autonomous controllers;
• Providers of customer support services acting as data processors in accordance with Art. 28 GDPR;
• Persons, institutions, or authorities to whom your personal data must be transmitted in accordance with legal provisions or administrative orders.

Storage of Your Personal Data
Your personal data will only be stored for the period necessary to provide the planned services. Excluded from this are longer retention periods provided for in applicable legal regulations, including those of Art. 2946 of the Civil Code. For further information, please contact the Controller.

Your Rights
You have the right to obtain information from the Controller at any time about the processing of your personal data, to request rectification or erasure of the data, or to object to its processing. You also have the right to request restriction of processing in cases provided for by Art. 18 GDPR and the right to receive the data in cases provided for by Art. 20 GDPR in a structured, commonly used, and machine-readable format. Corresponding requests to the Controller can be sent to the following address: info@yanovis.com.

In any case, you have the right, in accordance with Art. 77 GDPR, to lodge a complaint with the competent supervisory authority (for Italy: Garante per la protezione dei dati personali) if you believe that the processing of your personal data violates applicable legal regulations.