Information according to Art. 13 of Regulation (EU) 2016/679 valid from May 25, 2018

1.   PURPOSE AND LEGAL BASIS OF DATA PROCESSING

When using the websites of Dream Beyond Srls, users generate data, which may be anonymous or personal data. This data can be used to respond to a user request or for statistical purposes with the aim of improving the website content and the platform users' experience. Purpose, legal basis and duration of these categories of data processing are described in point n. 3. Dream Beyond organizes the collection and further processing of data in order to respect the principles of correctness, legality and transparency.
 

2.   DATA CONTROLLER AND RIGHTS OF DATA SUBJECTS

The controller of the processing of personal data is:

Dream Beyond srls
Via Maria Teresa 4B
39052 Caldaro (BZ)
South Tyrol – Italy
+39 342 6481608
Website: www.dreambeyond.com

Legal representative: Alia Radetti (administrator).

Any data subject can contact this address to assert his or her right of information and access to personal data and the right to rectification of inaccurate personal data concerning him or her.

If data concerning him or her are not processed for compliance with a legal obligation to which the controller is subject or necessary for the performance of a contract to which the data subject is party, he or she has the right to obtain the erasure or the restriction of processing; the right to object to their processing and to assert the right to data portability. When the legal basis of a data processing consists in the consent given by the data subject, he or she has the right to withdraw consent at any time. Furthermore, the interested party has the right to lodge a complaint with a supervisory authority according to the provisions of art. 51 of Regulation (EU) 2016/679.
 

3.   LIST OF THE PURPOSES OF DATA PROCESSING OF USERS OF WEBSITES

• Statistical survey of usage data for website optimization

  Html page hits (web server log files), generated by a specific IP address and carried out by the same device. Since an IP address does not permit identification without being assigned to other personal data, we do not classify it as a personal date within the meaning of art. 4 of Regulation (EU) 2016/679. Dream Beyond Srls does not transfer IP address data to third parties and does not own or acquire data from third parties that can make users identifiable.
   

• Transfer of user contact data to the accommodation selected by the user

  User contact details (Name, e-mail address, postal address, various notes) and information on the accommodation request (rooms, age of children following, holiday dates) or, for the brochure request, postal address for sending the printed brochure.
  Performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (Article 6, paragraph 1, letter b of Regulation (EU) 2016/679). Dream Beyond Srls is active as data processor, while the client (accommodation business) is the data controller. If the data controller intends to use the data acquired in this context for purposes other than or further than the direct response to the request of the data subject, he or she needs a legal basis, for example a declaration of consent by the data subject, to process his personal data for another specified purpose.
  A temporary storage of personal data by Dream Beyond Srls is necessary until the receiving accommodation confirms receipt, as well as for a further period of time, to allow the recovery of data in case of loss. After this time lapse of security, personal data saved at Dream Beyond Srls are deleted from their systems.
   

• Sending a newsletter to subscribers of the newsletter service

  Data categories: e-mail address, name, preferences on themes and locations or holiday areas.
  Legal basis: Performance of a contract to which the data subject is party (Article 6, paragraph 1, letter b of Regulation (EU) 2016/679).
  Duration of the processing: Upon conclusion of the contract, the data subject is informed that he or she can terminate the contract at any time and his data will be deleted as a result. The termination of the contract and deletion of personal data takes place via the same path as the contract signing and is not more complex for the data subject.
   

Cookies

Our website uses cookies. These are small text files which are stored on your end device by your browser. They do not cause any damage. We use cookies in order to make our website more user-friendly. Some cookies will remain stored on your end device until you delete them. They allow us to recognize your browser on your next visit. If you do not agree to this, you can set your browser so that it informs you about the setting of cookies and you can then decide whether to permit this on a case by case basis. If you deactivate cookies, the functionality of our website may be limited.
 

Browser Plugin

You may refuse to store cookies by selecting the appropriate settings in your browser software; however, we have to make you aware that, in this case, you may not be able to use all functions of this website to their full extent. In addition, you can prevent Google from collecting and processing data generated by cookies as a result of your use of the website (incl. your IP address) by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en
 

Demographic characteristics with Google Analytics

This website uses the "demographic characteristics" feature of Google Analytics. This allows us to compile reports including statements on age, gender and interests of the site visitors. These data come from interest-based advertising by Google as well as from visitor data from third-party suppliers. These data cannot be associated with any specific person. You can turn off this function at any time in the advertising settings in your Google account or generally prohibit the collection of your data by Google Analytics as set out in the section "Objection against data collection".
 

Your rights

You have, in principle, the right to information and access, rights for disclosure, rectification and erasure, restriction of processing, data portability, objection to and revocation of the consent. For claiming your rights or if you think that the processing of your data is in breach of the data protection law or that your data protection rights have otherwise been violated, you can at any time contact Dream Beyond Srls as data holder or lodge a complaint with the supervisory authority.