Moveen Srl explains on this page how it processes the data of users who visit its website and how the cookies installed on this website work.

This privacy policy is provided pursuant to Art. 13 GDPR 2016/679 (General Data Protection Regulation, the European regulation protecting natural persons), the guidelines of the Data Protection Authority of 10 June 2021, EDPB Opinion 5/2020 concerning consent, CJEU judgment C-673/17 of 1 October 2019, the general measure of the Data Protection Authority concerning cookies No. 229 of 8 May 2014, the “Working Document 02/2013 providing guidance on obtaining consent for cookies”, the Article 29 Working Party Opinion No. 4/2012 “On Cookie Consent Exemption”, Directive 2002/58/EC and Recommendation No. 2/2001 of the Working Party pursuant to Art. 29.

The following information applies exclusively to the website www.holidays.moveen.shop. The data controller is not responsible for data and cookies inserted or installed by third-party websites that may be accessed via links.

The data controller is Moveen GmbH, with registered office at Kuperion-Str. 30, Merano (BZ). To exercise the rights provided for by law and listed above, you may contact the controller at its registered office, by telephone on +39 0473 861886, or in writing at booking@moveen.shop.

Moveen processes the data entered by the user for the following purposes:

Providing the data for this purpose is mandatory and the legal basis is compliance with a legal obligation to which the controller is subject, as provided for in Art. 6(1)(c) GDPR. The user’s consent is not required for processing for this purpose. The processed data will be retained for the period provided for by the applicable legislation.

This type of processing does not allow the user to be identified and serves exclusively to verify the effectiveness of web marketing campaigns or the correct functioning of the site by monitoring access frequency. The processing of aggregated or anonymous data that does not enable users to be identified falls outside the scope of data protection law and therefore does not require consent.

Providing the requested data is necessary in order to handle your request. The legal basis for processing is, pursuant to Art. 6(1)(b) GDPR, the performance of a contract to which the data subject is party or the taking of pre-contractual measures at the request of the data subject and, pursuant to Art. 6(1)(f), processing necessary for the purposes of the legitimate interests pursued by the controller or a third party. Data processed as a result of your request will be retained for a period of 1 year.

Providing the data is necessary to enable you to access the reserved area. The legal basis for processing under Art. 6(1)(b) GDPR is the performance of a contract to which the data subject is party or the taking of pre-contractual measures at the request of the data subject.

Data obtained in connection with your registration will be retained until you request its deletion or give up access to the reserved area.

Providing the requested data is essential in order to make purchases in the online shop. The legal basis for processing is, pursuant to Art. 6(1)(b) GDPR, the performance of a contract to which the data subject is party or the taking of pre-contractual measures at the request of the data subject. Data processed as a result of your request will be retained for the 10-year period provided for by civil-law and tax regulations.

Providing the requested data to subscribe to our newsletter service or to receive advertising communications or promotional material is voluntary, and the legal basis for the related processing is the consent of the data subject. Data processed for advertising and marketing purposes will be retained by us until consent is withdrawn, unless consent is renewed.

Your data will be processed electronically, although potential processing in paper form cannot be excluded. Automated decision-making processes are not used to process your personal data. Data collected via cookies will be stored for the periods set by the individual cookies. Where profiling cookies are used by the website, reference is also made to the specific section describing how they work.

To ensure the functionality of our site and the proper provision of content, we may use services provided by third parties. These include, for example, IT service providers, hosting providers and telecommunications companies. In addition, to ensure the provision of the service you have requested, for example the purchase of goods, we may use further providers (delivery services, etc.). The legal basis for disclosure is the performance of a contract to which the data subject is party or the taking of pre-contractual measures at the request of the data subject. In all cases, only the data that is indispensable for the provision of the respective service will be disclosed. If the transmission of anonymised data is sufficient, only such data will be transmitted. Your personal data will be disseminated only with your express consent.

With regard to the use of third-party cookies, please refer to the relevant section at the end of this document.

The data you provide will not be transferred to third countries or international organisations outside the European Union. The website is hosted within the European Union.

You have the right at any time to request access to the data concerning you, its amendment, completion or deletion and, where there are legitimate grounds, to object to its processing or to request that processing be restricted. You are also entitled to request the transfer of the data concerned to another controller. We will respond to your request in writing within 30 days. You may withdraw any consent you have given on this website at any time. For this purpose, the contact addresses contained in this Privacy Policy are available to you. You also have the option of lodging a complaint with the competent supervisory authority if you believe that your data has been processed unlawfully.

During normal operation, through the use of Internet communication protocols, this website implicitly collects certain personal data relating to users who access the site, such as IP address, domain names of the computers used by users to access the site, MAC addresses assigned by the manufacturer of network cards, WLAN data and so on.

This information is not collected in order to identify users, although identification could occur through linking and cross-processing, including with third-party data. Statistical information about the use and functioning of the website is obtained from this data, as well as further information for the purpose of determining liability in cases of computer crime.

Cookies are small text files that websites visited by the user place on the user’s device. These data records are transmitted back to the website that placed them when the user visits again. If, while browsing the website, the user also receives cookies transmitted by other websites or web servers, these are referred to as third-party cookies.

Cookies are placed for different reasons. These include the ability to carry out IT authentication, monitor browsing sessions and select the language.

Cookies placed directly by Moveen are “first-party cookies”. Cookies that are instead placed and collected by a website other than the website on which the user is browsing are referred to as “third-party cookies”.

Third-party cookies include social buttons (or social plug-ins), which allow the website to interact with well-known social media such as Facebook, Instagram, LinkedIn, Twitter and so on, Google Analytics cookies, and cookies necessary to implement YouTube frames and similar functions. With regard to third-party cookies, the third-party providers to which these cookies relate are responsible for providing the privacy notice and information on how the collected data is managed.

Technical cookies are normally installed directly by the website operator and enable communication between the website and the user. These may be browsing or session cookies that ensure normal navigation and use of the website. They are also known as “necessary cookies”. As a rule, they are stored for the duration of browsing on the website.

Because these cookies are essential for the website to function, no prior consent is required for them to be placed on the user’s device.

These are cookies through which enhanced functionality and personalisation can be provided to the user and which remember preferences expressed by the user during previous visits to the website or changes previously made by the user to customise the website. This category includes, for example, cookies that enable the user to select the language or save products placed in the shopping cart.

These cookies are also referred to as “performance cookies” or “analytics cookies” and make it possible to analyse how the user uses the website in order to improve the browsing experience and resolve navigation-related problems.

Thanks to these cookies, for example, it is possible to count visits to the website and traffic sources or to identify the pages viewed most frequently.

As a rule, they do not allow individual users to be identified, but contain aggregated and therefore anonymous data.

One of the best-known tools for creating these statistical reports is Google Analytics, a service provided by Google Inc.

These are also known as “advertising cookies” and are used to record a user’s preferences and present advertising messages to the user on the basis of the information obtained.

Pursuant to the measure of the Data Protection Authority of 8 May 2014 and the “Guidelines on the use of cookies and other tracking tools”, when cookies other than technical cookies are used, a banner (the so-called short notice) must be displayed when the user first accesses the website, briefly summarising how the website handles cookies. The banner must refer to the detailed privacy policy and must include the option to consent to the placement of cookies, including by selecting them individually.

Moveen has implemented the banner described above. A specific cookie has also been provided that stores the user’s choice regarding the installation of cookies for a period of 180 days: this means that, once the user has given consent, the banner is shown only once. If the user wishes to change their choice at a later date, this must be done via the “Manage my cookies” link.

Access to Facebook requested by our website and use of Facebook Pixel

Our website may request that a connection be established with the user’s Facebook account in order to perform certain actions and collect certain data directly from Facebook.

For more information about how these services work, please refer to: https://developers.facebook.com/docs/facebook-login/permissions and https://www.facebook.com/about/privacy/

Links to the privacy policies of third-party providers that place cookies or have permissions

Facebook: https://www.facebook.com/policies/cookies/

Google, Youtube: https://www.google.com/intl/it_it/policies/technologies/cookies/

Hotjar: https://www.hotjar.com/legal/policies/privacy/