
Privacy Policy
(Information pursuant to Regulation (EU) 2016/679 – GDPR)
1. Data Controller
MENA GmbH (MENA SRL)
Anselm Pattis Street 23
39020 Marling (BZ) – Italy
VAT No.: IT03333980211
Email: info@mena-guesthouse.it
PEC: office.mairhofer@pec.it
The data controller determines the purposes and means of processing personal data.
2. Collection and Processing of Personal Data
We process personal data exclusively in accordance with applicable legal provisions.
a) When visiting the website
When accessing our website, the following data is automatically collected:
-
IP address
-
Date and time of access
-
Browser type and version
-
Operating system
-
Referrer URL
This data is used solely to ensure the technical security and stability of the website.
Legal basis:
Art. 6(1)(f) GDPR (legitimate interest)
b) When contacting us
If you contact us via form or email, we process:
-
Name
-
Email address
-
Phone number (optional)
-
Content of the message
Purpose: handling of the request
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures)
c) When booking accommodation
In the case of a booking – either directly or via the booking widget of the South Tyrol Hotel and Restaurant Association (HGV) – we process:
-
First and last name
-
Address
-
Date of birth
-
Nationality
-
Stay period
-
Contact details
-
Payment information
Purpose:
-
Contract execution
-
Guest registration with authorities
-
Tax obligations
Legal basis:
Art. 6(1)(b) GDPR (contract performance)
Art. 6(1)(c) GDPR (legal obligation)
3. Legal Reporting Obligations in Italy
As an accommodation provider, we are legally required to transmit guest data to the following authorities:
-
Police authority (Questura – Alloggiati Web)
-
ISTAT (statistical surveys)
-
Provincial or tourism authorities
This transmission takes place exclusively within the legally required scope.
4. Payment Processing
Payments are made:
-
via bank transfer, or
-
via the booking and payment system of the HGV South Tyrol
Processing is carried out by the respective payment service provider in accordance with their privacy policies.
5. Newsletter
If you subscribe to our newsletter, we process:
-
Email address
-
Name (if provided)
The newsletter is sent via the Wix newsletter tool.
Legal basis:
Art. 6(1)(a) GDPR (consent)
Consent can be withdrawn at any time.
6. Google Analytics
This website uses Google Analytics to analyse user behaviour.
The following data may be processed:
-
IP address (anonymised)
-
Usage behaviour
-
Technical device data
Google may transfer data to third countries (e.g. USA).
Processing is based on standard contractual clauses of the European Commission.
Legal basis:
Art. 6(1)(a) GDPR (consent via cookie banner)
Google Analytics is only activated after consent.
7. Hosting via Wix
Our website is hosted by Wix.com Ltd.
Wix stores data on servers within and outside the EU.
Wix commits to complying with GDPR and uses appropriate safeguards for international data transfers.
8. Data Retention
-
Booking data: 10 years (tax retention obligations)
-
Registration data: according to legal requirements
-
Contact enquiries: max. 24 months
-
Newsletter data: until withdrawal of consent
9. Data Sharing
Data is only shared:
-
with authorities as required by law
-
with payment service providers
-
with IT service providers (e.g. hosting)
-
with our tax advisor
No data is shared for advertising purposes.
10. Rights of Data Subjects
You have the right to:
-
Access (Art. 15 GDPR)
-
Rectification (Art. 16 GDPR)
-
Erasure (Art. 17 GDPR)
-
Restriction (Art. 18 GDPR)
-
Data portability (Art. 20 GDPR)
-
Objection (Art. 21 GDPR)
Complaints can be addressed to:
Garante per la Protezione dei Dati Personali
www.garanteprivacy.it
11. Data Security
Our website uses SSL encryption.
We implement appropriate technical and organisational measures to protect personal data.