Privacy Policy
Last updated: September 2026
We take the protection of your personal data seriously. Below we explain which data we process when you use this website, and why.
Who is responsible
The data controller is Ansitz Baumannhof (Schifferegger Family), Schloss-Schöneck-Strasse 8, 39030 Pfalzen, South Tyrol, Italy. You can reach us at [email protected].
Contact & booking forms
When you send a contact or booking request, we process the data you enter (e.g. name, e-mail, travel dates, number of guests, message). These forms are delivered by e-mail via our processor Web3Forms (web3forms.com). We use this data only to answer and handle your enquiry, and we do not sell it. The legal basis is Article 6(1)(b) GDPR (steps taken at your request before entering into a contract), or Article 6(1)(f) GDPR for enquiries that do not lead to a booking (our legitimate interest in answering enquiries). Enquiries that do not lead to a booking are deleted at the latest twelve months after the last correspondence. Where an enquiry becomes a booking, the related correspondence is kept for the statutory tax and accounting retention periods (in Italy normally ten years).
External services
The contact page offers a Google Map. It is loaded only when you explicitly ask for it — until then no connection to Google is made. The booking page links to the booking portal of our partner Holidu; a connection is made only when you open that link. In both cases your IP address is transmitted to the provider concerned at that point. The legal basis is your consent, given by requesting the map or opening the link (Article 6(1)(a) GDPR). Typefaces are served from our own server, not from Google.
Hosting & server logs
This website is delivered from our own server and reaches you through the network of Cloudflare, Inc., which secures and speeds up access. In doing so Cloudflare processes technical connection data, including your IP address, on our behalf. For technical operation and security, standard access logs (e.g. IP address, time, requested page) may be processed; they are deleted after a few days. The legal basis is Article 6(1)(f) GDPR (our legitimate interest in operating the site securely and reliably).
Cookies & local storage
This website itself sets no advertising or tracking cookies. Your chosen language is stored locally in your browser (local storage) for your convenience.
Transfers outside the EU
The providers named above (Google, Cloudflare, Web3Forms, Holidu) may process personal data outside the European Union, in particular in the United States. Such transfers rely on the European Commission’s adequacy decision for the EU-US Data Privacy Framework where the provider is certified under it, and otherwise on standard contractual clauses under Article 46 GDPR.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and the right to object to processing. To exercise these rights, please contact us at [email protected]. You also have the right to lodge a complaint with a supervisory authority; in Italy this is the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome (www.garanteprivacy.it).