Privacy Policy

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws is:

Kohlbrennerhof einfache landwirtschaftliche Gesellschaft
Spergserbichl Nr.5, 39010 Verschneid in Mölten (BZ), South Tyrol, Italy
Phone: +39 327 416 1479
E-Mail: info@kohlbrenner.it

We process personal data of our users only to the extent necessary to provide a functioning website and our content and services. The processing of personal data of our users regularly takes place only with the user's consent. An exception applies in those cases where obtaining prior consent is not possible for practical reasons and processing of the data is permitted by law.

3.1 Inquiry Form

If you submit an availability inquiry through our contact or inquiry form, the following data is collected and stored:

• First name and last name
• E-mail address
• Phone number (optional)
• Requested travel dates (arrival, departure)
• Number of persons
• Requested lodge
• Breakfast request
• Message / additional notes

Purpose: The processing of this data is carried out exclusively to process your booking inquiry and to contact you.
Legal basis: Art. 6 para. 1 lit. b GDPR (contract initiation).
Storage duration: Your data is stored for as long as required to process the inquiry, but for a maximum of 3 years after the last communication.

3.2 Server Log Files

The hosting provider of this website automatically collects and stores information in server log files, which your browser automatically transmits to us. These are:

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address (anonymized)

This data will not be combined with other data sources. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in the secure and error-free operation of the website).

Personal data will not be transferred to third parties for purposes other than those listed below. We only transfer your personal data to third parties if:

• you have given your explicit consent,
• processing is necessary for the performance of a contract with you,
• there is a legal obligation to transfer the data.

E-mail notifications and newsletter: Upon receipt of an inquiry, an e-mail notification is sent via the service Brevo (Sendinblue SAS, 7 rue de Madrid, 75008 Paris, France). Brevo processes your name and e-mail address as a processor on our behalf. Data processing takes place within the EU. A data processing agreement pursuant to Art. 28 GDPR is in place. More info: brevo.com/legal/privacypolicy.

Online booking via Holidu: The booking widget of our partner Holidu (Holidu GmbH, Riesstraße 24, 80992 Munich, Germany) is available as an iframe on the /verfuegbarkeit page and loads only after an explicit visitor action. Once loaded, technical data (IP address, browser information) is transmitted to Holidu. Holidu processes booking data under its own responsibility. More info: holidu.com/privacy.

We use technically necessary storage to save your consent choice. Analytics and profiling services are activated only with separate consent. Google Maps and the Holidu booking system load only after an explicit action. Current details are available in the Cookie Policy; your choice can be changed at any time through Cookie Settings.

Google Tag Manager & Google Analytics 4 (GA4): This website uses the Google Tag Manager (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) to integrate tracking scripts, including Google Analytics 4. GA4 collects pseudonymized usage statistics (page views, duration of visit, click events). IP addresses are shortened before storage. The legal basis is Art. 6 para. 1 lit. a GDPR (consent via our cookie banner). You can revoke your consent at any time via the "Cookie Settings" link in the footer. More info: policies.google.com/privacy.

Google reCAPTCHA v3: To protect our inquiry form from spam, we use reCAPTCHA v3 (Google Ireland Ltd.). IP address, browser data, and usage behavior are transmitted to Google to detect bots. The script loads only when you interact with the form. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest).

Microsoft Clarity: Microsoft Clarity loads only if you have consented to both analytics and profiling. It helps us understand page use in pseudonymous form. The legal basis is Art. 6 para. 1 lit. a GDPR. You can withdraw consent at any time through Cookie Settings.

Kohlbrenner first-party journey analytics: after analytics consent, we store a random session identifier, the entry page, the referring site without query parameters, optional UTM parameters, active engagement time, scroll depth, clicks and a reduced technical context (browser family, operating system, device class, viewport, timezone and coarse connection class). We do not store the complete user-agent string. A persistent pseudonymous visitor identifier is used only with additional profiling consent. When an inquiry is submitted voluntarily, its journey can be linked to the contact only while that consent remains active. We do not use IP addresses or device fingerprints to link different browsers. The legal basis is Art. 6 para. 1 lit. a GDPR.

Google Maps is embedded only after an explicit visitor action. Until then, no automatic connection to Google Maps is made. External Google Maps links are also opened only at the visitor's request.

Google Places API: To display guest reviews, we use the Google Places API. Only publicly accessible review data is retrieved. No personal data of website visitors is transmitted to Google.

You have the right to:

• Access (Art. 15 GDPR): request information about your personal data stored by us.
• Rectification (Art. 16 GDPR): request immediate correction of inaccurate data.
• Erasure (Art. 17 GDPR): request deletion of your personal data stored by us, unless statutory retention obligations apply.
• Restriction (Art. 18 GDPR): request restriction of the processing of your data.
• Data Portability (Art. 20 GDPR): receive your data in a structured, commonly used and machine-readable format.
• Objection (Art. 21 GDPR): object to the processing of your data.
• Complaint: lodge a complaint with the competent supervisory authority. The competent authority in Italy is the Garante per la protezione dei dati personali: www.garanteprivacy.it

To exercise your rights, please contact: info@kohlbrenner.it

We use technical and organizational security measures to protect your data against accidental or intentional manipulation, loss, destruction, or unauthorized access. Data transfer on the internet is secured using a TLS/SSL encrypted connection.

This privacy policy is currently valid and is dated: January 2026.
Due to the development of our website or changes in statutory or official regulations, it may become necessary to amend this policy.