What data is generated?

It is generally possible to use our website without providing any personal data. Our contact form asks for your name, address and e-mail address, but you can also just write us an informal e-mail. It is also up to you whether you post your real name or a pseudonym when using our guestbook.
Other data is collected automatically when you visit the website. They are only stored temporarily until the end of a session (so-called session cookies) or permanently (permanent cookies) until their validity expires or you delete them manually. Many of these cookies are technically necessary for certain functions (e.g. displaying videos), others make it easier for you to use them (e.g. when you repeatedly access a page).
Third-party providers also set cookies when you use their services. As a rule, we refer to these third-party providers via links, so that you can decide for yourself whether, for example, you want to follow Google Maps and have a route calculated.
Google Analytics automatically collects data and is therefore a special case on our website. However, users’ IP addresses are anonymized, so that it is not possible to assign the collected data to a specific person. Google stores data about certain aspects of your user behavior (e.g. how long you spend on a page) and creates statistical reports. These help us, among other things, to understand how our pages are used and which offers are more or less searched for. The so-called marketing function, in which data is evaluated and linked to display targeted advertising, is not activated.
Below we provide specific and more detailed information about the data collection on our pages.

What do we do with your data?

We take the protection of your personal data very seriously. We process it confidentially, in accordance with statutory data protection regulations, and of course we do not pass it on to third parties, especially not without your express consent.
Your data will be deleted or blocked as soon as the purpose of storage no longer applies, the deletion of which does not conflict with any legal retention obligations (e.g. in the case of contracts) and no other information about individual processing procedures is subsequently provided. We provide more information on this point below.
Your personal data is located in the password-protected admin area of ​​our server, in encrypted form on a password-protected PC device, and for backup on the encrypted partition of an external hard drive.
Our company named in the legal notice is responsible for data processing: Take-4 SRL, RO – 557236 Vale nr.325, telephone: +40 744 244943, e-mail: info@casa-vale.net.

What rights do you have regarding your data?

Upon request (to our address given in the legal notice), we will inform you at any time, free of charge and in detail about the collection and processing of your personal data within the framework of the applicable legal provisions. You have the right:

• for information about the purpose for which personal data concerning you is being processed, what category of data it is, whether and to which third parties your data has been or will be transmitted to, the duration of storage or the criteria for determining this duration, among other things of Art.15 GDPR;
• to correct or complete incorrect or incomplete data (Article 16 GDPR);
• to request the deletion of the data concerning you (Article 17 GDPR) or, if further processing is necessary in accordance with Article 17 Paragraph 3 GDPR, to restrict processing in accordance with Article 18 GDPR;
• to receive the data concerning you in a structured, common and machine-readable format (Article 20 GDPR);
• to complain to the supervisory authority if you are of the opinion that the processing of your data violates data protection regulations (Article 77 GDPR).

If your data has been disclosed to others, we are obliged to inform these recipients of any correction or deletion of data or restriction of processing that occurs on the basis of Article 16, Article 17 Paragraph 1 or Article 18 GDPR.
In addition, according to Art.21 GDPR, you have the right at any time to object to the processing of your personal data based on Art.6 Paragraph 1 lit.e or lit.f GDPR. This is particularly true if we use them for direct advertising – which we do not do, so we hereby rule it out.

 

 

Concrete

 

SSL encryption

Our sites use SSL encryption to protect the transmission of confidential content. You can recognize an encrypted connection by the fact that “http://” changes to “https://” in the address bar of your browser and by the lock symbol in front of it. If SSL encryption is activated, the transmitted data cannot be read by third parties. In this respect, it is always safer to send your personal data via our contact form than in an unencrypted email.

Inquiries via contact form, e-mail, telephone or fax

If you contact us via contact form, e-mail, telephone or fax, we will save the contact details you provide in order to process the request and for follow-up questions. We do not pass on this data, especially not without your consent.
Data processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR if your request is related to the fulfillment of a (rental) contract or is necessary to carry out pre-contractual measures. In all other cases, it is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art.6 Para.1 lit.f GDPR) or on your consent (Art.6 Para.1 lit.a GDPR), if this was explicitly requested and is available to us.
E-mails on our server are deleted after seven days at the latest. They remain encrypted on a password-protected PC and an encrypted backup hard drive in order to be able to access inquiries, arrangements and other information relating to bookings. They will be deleted if you request us to do so, if the purpose for storing the data no longer applies (e.g. after your booking has expired) and if there are no legal provisions, in particular retention periods, to the contrary.

Contract execution

In order to issue and transmit rental agreements and invoices, we need the names, addresses and e-mails of our contractual partners. The legal basis for this is Art.6 Para.1 lit.b GDPR. Contracts and invoices are stored in our accounting department in the legally required paper form, as well as encrypted on a password-protected PC and an encrypted external hard drive. Subject to statutory retention periods, we delete this data if the purpose for storing it no longer applies.

User contributions, guestbook

If you post a contribution in the guestbook of our website, only the publication date is automatically specified. You decide everything else yourself. You can use your full name or a pseudonym and provide your complete or abbreviated address.
We store your data including your IP address to the extent that you have communicated it to us on the basis of Art.6 Para.1 lit.a GDPR). As soon as you request it, your contribution will be revised or deleted. An informal email is sufficient. We reserve the right to delete spam and for legal reasons, e.g. if it offends or infringes on the rights of third parties.

Server log files

The provider of our website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. It refers to:

• Browser type and browser version
• operating system used
• Referrer URL
• Host name of the accessing computer
• Time of server request

This data cannot be assigned to specific persons. This data will not be merged with other data sources. We reserve the right to subsequently check this data if we become aware of concrete indications of unlawful use.

 

Exclusion, deletion and legal basis of cookies

Our website uses cookies. These are small text files that your web browser stores on your device without causing any damage.
You can set modern browsers so that you are informed when cookies are set. In addition, you can only allow cookies in individual cases, exclude their acceptance for certain cases or generally, and activate the automatic deletion of all cookies when closing the browser. If cookies are deactivated, the functionality of a website may be restricted.
Cookies that are necessary to carry out the electronic communication process (necessary cookies) or to provide certain functions you want (functional cookies) or to optimize the website (e.g. cookies to measure the web audience) are used on the basis of Art.6 Para.1 lit.f GDPR stored unless another legal basis is stated. As a website operator, we have a legitimate interest in storing cookies in order to provide our services in a technically error-free and optimized manner. If consent to the storage of cookies has been requested, they will be stored exclusively on the basis of this consent (Art. 6 Para. 1 lit.a GDPR), and the consent can be revoked at any time.
Below we provide information about the third-party cookies used on our pages.

Google Analytics

Our website uses Google Analytics, the web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.
When you access our website, Google sets cookies on your device. In accordance with the strict German data protection regulations, we have concluded a data processing contract with Google and commissioned the service to statistically evaluate the tracking data collected on our pages. These reports help us understand how our offerings are being received and how we can improve them.
The legal basis is Art.6 Paragraph 1 lit.f GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website. If consent to the storage of cookies has been requested, processing is carried out on the basis of Art.6 Para.1 lit.a GDPR. Consent can be revoked at any time.
The information generated by Google cookies is usually transferred to a server in Ireland and/or the USA and stored there. They cannot be assigned individually. The following measures serve to protect your privacy:

• The anonymization function for Google Analytics is activated on our pages. This function shortens your IP address within the EU or EEA before it is transferred to a US server.
• By certifying the EU-US Privacy Shield (“EU-US Privacy Shield”), Google guarantees that the EU data protection regulations are also adhered to when processing data in the USA.
• In addition, Google guarantees that it will never connect IP addresses with other data.

Google provides information on https://www.google.com/intl/de/policies/privacy/partners about the use of the data collected through their services and ways to avoid this data collection and cookies.
Google also offers a so-called deactivation add-on at https://tools.google.com/dlpage/gaoptout?hl=de . This add-on can be installed with all common browsers and is intended to deactivate Google Analytics.
You can view Google’s privacy policy here: https://policies.google.com/privacy?hl=de.

 

Google Maps

On some of our pages we use Google Maps to display the locations and to play virtual tours (360° tours) through our holiday homes. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. By certifying the above-mentioned “EU-US Privacy Shield” (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active), the group is committed to complying with the EU’s strict data protection requirements when processing data in the USA It is up
to you whether you continue to use Google Maps or not. As soon as you access the service (click on the map or the photo link at the end of each accommodation description) you establish a connection and Google sets a cookie on yours End device, and your IP address and other information are usually transmitted to a Google server in the USA and stored there. Your location can also be recorded if you have allowed this in your device settings – for example on your smartphone. Google learns from which website your request was sent and to which IP address, for example, directions should be sent. We have no influence on this data transfer.
The use of Google Maps is in the interest of an attractive presentation of our offers and the easy finding of our holiday homes. This represents a legitimate interest within the meaning of Art.6 Para.1 lit.f GDPR. If appropriate consent has been requested, processing takes place exclusively on the basis of Art.6 Para.1 lit.a GDPR. Consent can be revoked at any time.
The use of Google Maps and the information obtained via Google Maps is subject to the Google Terms of Use: https://policies.google.com/terms?gl=DE&hl=de” and Terms and Conditions for Google Maps: http://www.google .com/intl/de_de/help/terms_maps.html”.

OpenStreetMap

As an alternative to Google Maps, you can use the OpenStreetMap (OSM) map service, offered by the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB 4 0 WS, United Kingdom.
OSM is an open source project, meaning the source code of the software is open and freely accessible. OSM’s goal is to create a free world map that can be used license-free and further processed by users as desired.
The text link to OSM is located directly below the Google Maps map section. Apart from the – in comparison – non-commercial background and the correspondingly different interest in the collection and processing of data, when you access OpenStreeMap the same thing happens as with Google Maps: a cookie is stored in your browser and your IP address and information about your user behavior on the site will be forwarded to OSM. By processing this information, OpenStreetMap can recognize from which website your request was sent and to which IP address, for example, a requested directions should be sent. Furthermore, your location can be recorded if you allow this in your device settings – e.g. on your smartphone. Here too, you can prevent the storage of cookies by setting the appropriate settings in your browser, but you may then no longer be able to use the service to its full extent.
For further information, please see OpenStreetMap’s privacy policy at: https://wiki.osmfoundation.org/wiki/Privacy_Policy.
The use of OpenStreetMap is in the interest of an attractive presentation of our offers and the easy finding of our holiday homes. This represents a legitimate interest within the meaning of Art.6 Para.1 lit.f GDPR. If appropriate consent has been requested, processing takes place exclusively on the basis of Art.6 Para.1 lit.a GDPR. Consent can be revoked at any time.

Google reCAPTCHA

To send posts in our guestbook we use ‘Google reCAPTCHA’ from Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Through certification according to the EU-US Privacy Shield (“EU-US Privacy Shield”), Google guarantees that the EU data protection regulations are also adhered to when processing data in the USA.
reCAPTCHA checks whether the data entry in the guestbook was done by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. The analysis begins automatically as soon as you access our guestbook page and takes place in the background without any notice. reCAPTCHA evaluates various information (e.g. IP address, how long you spend on the website, mouse movements) and the collected data is forwarded to Google.
A guestbook post will be published on our website immediately after it has been saved without being checked. The storage and analysis of the data is based on Art.6 Para.1 lit.f GDPR. We have a legitimate interest in protecting our pages from SPAM, abusive spying and offensive or illegal content. If appropriate consent has been requested, processing is carried out exclusively on the basis of Art.6 Para.1 lit.a GDPR. It can be revoked at any time.
You can find an overview of the general use of data in the Google data protection declaration: https://www.google.com/intl/de/policies/privacy/.

Addendum

Various generators provided the framework for this explanation, but we checked each sentence and added a lot. Respect if you have read this far. We are happy to answer questions at info@casa-vale.net, and one likely question should be answered in advance at this point: No, we are not enthusiastic about the Google concept. We are working on replacing at least the Analytics and reCaptcha services in the foreseeable future.