Information pursuant to Articles 12, 13 and 14 of EU Regulation 2016/679

Data controller

Mountain GOAT
Dorfstraße 27A
39042 St. Andrä / Brixen

Privacy information – website

Dear website visitor,

we are pleased to inform you how your personal data is processed when you visit our website. This information notice also tells you which rights you can exercise as a data subject.

Your personal data is processed in accordance with EU Regulation 2016/679 (General Data Protection Regulation, GDPR) and the national data protection legislation.

Use of the website requires that you agree to this privacy notice; otherwise we kindly ask you not to continue using the website.

We would also like to inform you that links on our website leading to other websites have been carefully selected and checked by us. As these websites may be updated without our knowledge and their content may change at any time, we accept no liability or responsibility for them.

Purpose of processing personal data

To ensure the functionality of the website and for statistical purposes, technical data with a potential personal reference is processed, such as the IP address, the time of requests, the domain name and similar data. In addition, the website operator has a legitimate interest (Art. 6(1)(f) GDPR) in offering you a visually appealing website and a pleasant user experience. If consent has been given (Art. 6(1)(a) GDPR), user behaviour may also be analysed and marketing purposes pursued.

The main purpose of data processing is to provide our website and its content and to respond to your enquiries.

Personal data is also processed in order to offer you various services:

Newsletter
Every visitor can register for our newsletter on the website using a double opt-in procedure. The user can revoke this voluntary registration and processing at any time.

Contact form
Website visitors can contact the company via the contact form. The personal data entered is processed in order to answer the enquiry. Explicit consent to the processing of the data in the contact form is obtained.

Transmission of special categories of personal data

We ask you not to transmit any sensitive data (special categories of personal data – Art. 9 and Art. 10 GDPR) via the website, e.g. via the contact form.

Legal basis for data processing

The main legal bases for processing are Art. 6(1)(b) GDPR (performance of pre-contractual/contractual measures) and Art. 6(1)(f) GDPR (functionality of the website), as well as the consent obtained, if given by you (Art. 6(1)(a) GDPR).

Cookies

Our website uses cookies, which may involve the processing of personal data.

There are four categories of cookies:

• Strictly necessary cookies – for the basic functionality of the website
• Functional cookies – to ensure the optimal performance of the website, e.g. storing the selected language
• Performance cookies – to improve the user experience and to process information on the use of the website, e.g. measuring loading times
• Marketing cookies – to record the user’s behaviour and interests for marketing purposes, e.g. for displaying targeted advertisements

Non-essential cookies are deactivated by default on our websites and are only activated once you have given us your consent.

Most of the cookies used are “session cookies”, which are deleted when you close your browser. Other cookies are stored for longer, e.g. to display the correct language on your next visit to the website.

For all cookies that are not based on a legitimate interest of the website operator (Art. 6(1)(f) GDPR), you will be explicitly asked for your consent.

You can delete your cookies at any time: depending on your browser, usually click on the 3 dots/lines at the top right, open the settings, enter “cookies” in the search field and choose to delete cookies or browsing data.

Provision of data

The provision of your data is voluntary (with the exception of the processing of navigation data) and not required by law. However, failure to provide it may result in limited use of the website and the services offered.

Disclosure of data to third parties

If necessary, but only within the scope of our business relationship, your data may be passed on to third parties, e.g. to fulfil your request or, where applicable, to process payments via third parties and to comply with legal obligations. As a rule, your data is not transferred to countries outside the EU without your explicit consent. The same applies to the use of profiling and automated decision-making.

Website hosting

This website is hosted by an external service provider. For this purpose, the external host receives personal data collected on the website. The legal basis is Art. 6(1)(b) GDPR (pre-contractual/contractual measures) and Art. 6(1)(f) GDPR (smooth operation of the tools on our website).

Google services

Our website uses services provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google may therefore process information and personal data. Please note that US authorities could theoretically gain access to this data on the basis of US legislation (in particular the Cloud Act). Information on the legal framework for data transfers can be found at https://policies.google.com/privacy/frameworks.

With your consent: Google Tag Manager

Our website uses Google Tag Manager. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager makes it easier to integrate tracking codes. It also allows site operators to make changes that are automatically applied to the pages without having to modify the source code.

Google Tag Manager may communicate with the Tag Manager servers; in this process, personal data (e.g. the IP address) may be processed when a tag is triggered.

You will be explicitly asked for your consent before Google Tag Manager is activated. The legal basis is Art. 6(1)(a) GDPR.

Detailed information can be found at: https://policies.google.com/privacy

With your consent: web analysis with Google Analytics

Our website uses functions of the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

The information generated by the cookies about your use of the website (including your IP address) may be transmitted to and stored on a Google server in the USA. The full information notice can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en

We use Google Analytics as an analysis tool in order to monitor the performance of our website, analyse customer behaviour and take appropriate measures.

You will be explicitly asked for your consent before Google Analytics is activated. The legal basis is Art. 6(1)(a) GDPR.

You can also prevent the collection and processing of data by Google described above by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout

Google Maps

This website uses the Google Maps API, a map service of Google Inc. (“Google”), to display an interactive map and to create directions. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

By using Google Maps, we cannot rule out that information about your use of this website (including your IP address) is transmitted to and stored on a Google server in the USA. Google may pass on the information obtained through Maps to third parties where required by law or where third parties process this data on Google’s behalf.

It would in principle be technically possible for Google to identify at least individual users on the basis of the data received. It is possible that personal data and personality profiles of website users could be processed by Google for other purposes over which we have and can have no influence. You can deactivate the Google Maps service at any time and thus prevent the transfer of data to Google by deactivating JavaScript in your browser. Please note that in this case you will not be able to use the map display on our site.

The terms of use for Google Maps can be found at: https://www.google.com/intl/en/help/terms_maps.html

Google’s privacy policy can be found at: https://policies.google.com/privacy

YouTube

We use social plugins of the YouTube website operated by Google. The operator of this site is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page equipped with a YouTube plugin, a connection to the YouTube servers is established. The YouTube server is informed which of our pages you have visited, and user statistics may be compiled, e.g. by means of cookies.

If you are logged into your YouTube account, YouTube can assign your visit to our website to your user account. You can prevent this by logging out of your YouTube account.

Further information on how YouTube processes user data can be found in the privacy policy at https://policies.google.com/privacy?hl=en

SSL encryption

For security reasons, e.g. for enquiries via contact forms, this site uses SSL encryption. Active SSL encryption serves to encrypt the transmission of data that you send to us.

Minors

This website is not intended for use by minors. We therefore do not collect or store any data of minor visitors (except involuntarily).

Duration of data storage

Your data is stored in accordance with the statutory retention periods and legal obligations applicable to us.

Information on the rights of data subjects

The data subject has the right to obtain confirmation from the controller as to whether or not personal data concerning him or her is being processed; if this is the case, he or she has a right of access to this personal data and to the information listed in detail in Art. 15 GDPR.

The data subject has the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her and, where applicable, the completion of incomplete personal data (Art. 16 GDPR).

The data subject has the right to obtain from the controller the erasure of personal data concerning him or her without undue delay where one of the grounds set out in Art. 17 GDPR applies, for example if the data is no longer necessary for the purposes for which it was originally processed (right to erasure).

The data subject has the right to obtain from the controller the restriction of processing where one of the conditions listed in Art. 18 GDPR applies, for example if the data subject has objected to the processing.

The data subject has the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and has the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided under certain circumstances, for example where the processing is based on consent and carried out by automated means (right to data portability, Art. 20 GDPR).

The data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her. The controller shall then no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defence of legal claims (Art. 21 GDPR).

Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement, if the data subject considers that the processing of personal data relating to him or her infringes the GDPR (Art. 77 GDPR). In Italy, the competent supervisory authority is the Garante per la protezione dei dati personali.

This privacy notice may be updated at any time.