DATA PROTECTION DECLARATION ON THE PROCESSING OF PERSONAL DATA
Information in accordance with Article: 12, 13 and 14 of the Regulation (EU) 2016/679
In accordance with Regulation (EU) 679/2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, this administration, which has always ensured the confidentiality, accuracy, availability and security of personal data, provides the following information:
Purpose of the data processing
The personal data will be collected and processed within the scope of the management activity for the performance of institutional, administrative, and accounting functions or for purposes related to the exercise of rights of clients/suppliers and managers or for non-institutional purposes. The data processing is necessary for the performance of a contract to which the data subject is party or to implement pre-contractual measures taken at the request of the data subject.
Your application data can be used within 12 months after receipt of your curriculum vitae for possible contact in this regard. Your applicant data will be deleted after this period unless you have consented to its retention until revoked.
The data will be processed with computer systems and/or in manual form, in any case by means of suitable procedures that guarantee the security and confidentiality and the availability of the same.
The communication of the data
The missing communication of data
has the effect of preventing the administration from providing the services requested.
The data can be communicated to
all legal entities (offices, corporations and organs of public administration, companies or institutions), which are obliged to know or may know them in the sense of the regulations. In the case of specific personal data and/or data relating to criminal convictions and offences, communication is made to the legal entities and in the forms specified in the regulation for the processing of sensitive and judicial data (measure of the Data Protection Authority of 30.05.2005).
The data can be
brought to the attention of the controller, the processors, the Data Protection Officer, the personal data processing officers, and the system administrator of this administration.
The data is
distributed exclusively within the framework permitted by the data protection regulations.
Duration of data processing and storage of personal data
The processing operations referred to in the present information will only last for the time strictly necessary to fulfil the obligations imposed on us by national and/or international laws, as well as by the laws of the countries to which the data may be communicated.
Information on the rights of the data subjects
The data subject has the right to obtain confirmation from the controller as to whether personal data relating to him or her are being processed; if this is the case, he or she has the right to be informed of such personal data and to receive the informations specified in Art. 15 GDPR (Right of access by the data subject).
The data subject has the right to request the controller to rectify incorrect personal data concerning him/her and, if necessary, to complete incomplete personal data (Art. 16 GDPR).
The data subject has the right to demand that the controller deletes immediately if one of the reasons listed in Art. 17 GDPR applies (if the data are no longer required for the purposes pursued (right to erasure – right to be forgotten).
The data subject has the right to request the controller to restrict processing if one of the conditions listed in Art. 18 GDPR is met, for example if the data subject has lodged an objection to processing, for the duration of the controller’s examination: Right to restriction of processing.
The data subject has the right to obtain the personal data concerning him/her that he/she has provided to a controller in a structured, common and machine-readable format and the right to transfer such data to another controller without hindrance from the controller to whom the personal data has been provided, under certain circumstances, for example if the processing is based on consent and the processing is carried out throughout automated procedures (right to data portability – Art. 20 GDPR).
The data subject shall have the right to object at any time to the processing of personal data concerning him. The controller will then no longer process the personal data unless he can demonstrate compelling reasons for processing which are worthy of protection and which outweigh the interests, rights and freedoms of the data subject, or unless the processing serves to assert, exercise or defend legal claims (Art. 21 GDPR).
Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data relating to him or her is in breach of the GDPR (Art. 77 GDPR). The data subject may invoke this right before a supervisory authority in the Member State in which he or she is resident, at his or her place of work or at the place where the alleged infringement is committed. In Italy the competent supervisory authority is: Garante per la protezione dei dati personali
Tiefenbrunner Ltd. is a company under Italian law, with legal domicile at Schlossweg 4, Entiklar, I-39040 Kurtatsch an der Weinstraße (BZ), it is responsible for the processing of all personal data that may be collected via this homepage.
Personal data will only be processed in accordance with the present data protection regulations by employees and collaborators of the company who have been expressly appointed as responsible/delegated persons for data processing. The employees have been appropriately trained in this respect and work under the direct supervision and responsibility of the data protection processing owner.
Further privacy information – Website
Your data will be processed in order to provide our services based on your request and to fulfil our pre-contractual and contractual obligations towards you. Your data can be passed on to third parties if required, but only within the scope of our business relationship. Your data will not be transferred to other EU countries. Profiling and automated decisions are not used.
The legislator has enacted a wide range of storage obligations and periods. After these periods have expired, the corresponding data is deleted.
We check links that leave our website editorially very carefully. Nevertheless, we assume no responsibility or liability whatsoever for the content of pages linked to from this website or from any other internet presence.
Types of data collectin and processing purpose:
The systems and software processes necessary for the correct operation of the website, in normal use, collect some personal data, the transmission of which is part of the normal use of Internet communication protocols. This is information which, although not collected to identify a data subject, by its very nature allows users to be identified through processing and combination with data transmitted by third parties. This category of data includes IP addresses or domain names, the computers used by users of the website, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to make the request to the server, the size of the file obtained in response, the status of the response given by the server (successful, error, etc.) in numerical code, and other parameters relating to the user’s operating system and computer environment. These data are used for statistical purposes only and are managed anonymously to ensure their correct functioning. The data may also be used to establish responsibility in the event of hypothetical IT law infringements with damage to the site: with the exception of this case, the aforementioned data will not be kept for more than 24 months.
Data provided voluntarily by users/visitors
voluntarily and expressly by visitors to the website to the Company for the use of certain services or via e-mail requests may be automatically registered, but the information will be used exclusively for the services mentioned in the information letter. Your data will be used for the purpose of fulfilling your specific requests, contractual obligations, fiscal or accounting obligations, invoicing, debt recovery and for the fulfilment of the obligations required by the laws in force.
There are three categories of cookies:
# absolutely necessary cookies to ensure basic functions of the website
# functional cookies to ensure the performance of the website
# targeted cookies to improve the user experience
The Internet pages partly use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser the next time you visit us.
You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or generally, and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.
With the exception of navigation data, the company only processes data that the user provides voluntarily and explicitly. However, refusal to provide certain information could result in a restriction of the services offered. Once the registration has been made, the personal data will be processed exclusively for the services indicated in the information letter.
Visitors to the website can register for one or more of the following services:
Information about services, requests etc.
- Registration on the website
- Purchases of the products offered on the website
The creation of a customer account is voluntary and is not necessary to use the webshop. The customer account will be deleted after 3 years years since the last login. You have the right to delete the customer account at any time, as provided for in the Regulation (EU) 679/2016, upon request by mail or by post.
Disclosure to third parties
Personal data will not be disclosed under any circumstances, unless required by law or if requested by the judicial authorities or other bodies and institutions. The Company also uses the services of other companies and/or individuals to provide certain services, such as sending e-mails, delivering parcels, making payments. The aforementioned third parties have access only to those personal data that are absolutely necessary for the performance of their own tasks. The Company underlines that the third parties are prohibited from using the personal data for other purposes, as well as the obligation to use
The company does not intentionally collect sensitive or legally relevant personal data via its own website. In accordance with Art.9 of Regulation (EU) 2016/679, special categories of data (“sensitive data”) is personal data that reveals racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation. According to Art.10 of Regulation (EU) 2016/679, judicially relevant data includes criminal convictions and offences. We recommend that you do not provide such information on our website. Should this be unavoidable (for example, in the case of assignment to protected groups of persons when sending a CV for employment purposes, in response to an offer of employment or when expressing interest in employment in our company), we request that the specific clarification letter be sent by post. In this letter, please give your written consent to the treatment of said personal and sensitive data.
Storage of data
The Company protects the personal data by means of internationally recognized security standards and procedures that
- the unauthorised access
- unauthorised use and distribution
- unauthorised amendment
- loss and accidental or unlawful destruction.
Web analysis with Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses such target-oriented cookies.
You can prevent the collection of the data generated by the cookie and related to your use of the website to Google, and the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de
In our internet presence we use Google Maps to show our location and to provide directions. This is a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter only “Google”. Through certification in accordance with the EU-US Privacy Shield, Google guarantees that the data protection requirements of the EU are also complied with when processing data in the USA.
If you call up the Google Maps component integrated into our website, Google will store a cookie on your terminal device via your Internet browser. In order to display our location and to create a route description, your user settings and data are processed. We cannot exclude the possibility that Google uses servers in the USA. The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the optimisation of the functionality of our internet presence.
Through the connection to Google established in this way, Google can determine from which website your request has been sent and to which IP address the directions are to be sent. If you do not agree with this processing, you have the possibility to prevent the installation of cookies by the appropriate settings in your internet browser.
In addition, Google offers further information at adssettings.google.com/authenticated , policies.google.com/privacy.
In our internet presence we use Google Fonts to display external fonts. This is a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter only referred to as “Google”.
By being certified according to the EU-US Privacy Shield, Google guarantees that the data protection requirements of the EU are also complied with when processing data in the USA.
To enable the display of certain fonts on our website, a connection to the Google server in the USA is established when our website is called up. The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the optimisation and economic operation of our internet presence.
Through the connection to Google established when you call up our website, Google can determine from which website your enquiry has been sent and to which IP address the representation of the font is to be transmitted.
Google offers further information
under adssettings.google.com/authenticated, policies.google.com/privacy, in particular regarding the possibilities of preventing the use of data.
The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.
Stripe is based outside the territory of the European Union in the USA: Stripe, 510 Townsend Street, San Francisco, CA 94103, USA. Any data transfers outside the EU are subject to the terms of the EU-US Privacy Shield Agreement (https://stripe.com/privacy-shield-policy).
This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the requests you send to us as site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If the SSL encryption is activated, the data that you transmit to us cannot be read by third parties.
Responsible for the content Head office / address
Tiefenbrunner Ltd. Tiefenbrunner Ltd. SchlosskellereiTurmhof
Via Castello 4, Niclara
I-39040 Cortaccia sulla Strada del Vino (BZ)
Tel: +39 0471 88 01 22
Fax: +39 0471 88 04 33