Privacy Policy

1. General Information

Protecting your personal data is very important to us. We process data exclusively in accordance with the General Data Protection Regulation (GDPR) and the applicable laws in Italy.

2. Controller

Gesenhof – Farm Holidays – Holiday Apartments
Owner: Julian Seeber
Helmweg 9
I-39030 Sesto, South Tyrol, Italy
Phone: +39 377 59 99 649
E-mail: info@gesenhof.it

3. Purposes and Legal Basis

We process personal data in order to:

* operate our website,
* handle inquiries, in particular booking requests,
* fulfil contracts,
* comply with legal obligations,
* safeguard our legitimate interests,
* based on your consent (e.g. for optional cookies).

4. Data Processing in Detail

4.1 Inquiry Form

Our website includes an inquiry form. The data you enter (e.g. name, e-mail, phone number, travel dates, number of persons, message) will be used exclusively to process your request and prepare an offer (Art. 6 para. 1 lit. b GDPR).

4.2 Server and Usage Data

When you visit our website, technical information (e.g. IP address, browser type, access times) is automatically processed to ensure security and stability.

4.3 Cookies & Cookie Banner

Our website is hosted by **Wix.com Ltd.** (with servers also outside the EU, including Israel/USA). Cookies are used.

Necessary cookies (set automatically):

* XSRF-TOKEN (security)
* hs (security)
* svSession (session ID, up to 12 months)
* SSR-caching (performance, 24h)
* TS\* (security check)
* bSession (performance, 24h)
* fedops.logger.sessionId (monitoring, 12 months)
* \_wixAB3|\* (A/B testing, approx. 6 months)
* server-session-bind / client-session-bind (API protection)

Other cookies (e.g. analytics/marketing) may be added by apps or services.

Cookie Banner:
A cookie banner is integrated on our website. It informs you and collects your consent for non-essential cookies. You can withdraw or change your consent at any time via the settings.

5. Data Transfers to Third Countries

Since Wix operates servers outside the EU, data may be transferred to third countries (e.g. USA, Israel). Such transfers are carried out only on the basis of appropriate safeguards (adequacy decision, standard contractual clauses).

6. Storage Period

Personal data will be stored only for as long as necessary for the purposes described or as legally required. Thereafter, the data will be deleted or anonymized.

7. Your Rights

You have the following rights under the GDPR:

* right of access (Art. 15 GDPR),
* rectification (Art. 16 GDPR),
* erasure (Art. 17 GDPR),
* restriction of processing (Art. 18 GDPR),
* objection (Art. 21 GDPR),
* data portability (Art. 20 GDPR),
* withdrawal of consent (Art. 7 para. 3 GDPR),
* right to lodge a complaint with the supervisory authority.

Competent authority in Italy: **Garante per la protezione dei dati personali** www.garanteprivacy.it

8. Security

We implement technical and organizational measures (e.g. SSL/TLS encryption) to protect your data.

9. Changes

We reserve the right to update this Privacy Policy if necessary. The current version will always be available on our website.