If you only read, you leave nothing with us beyond what every web server logs anyway. We have no advertising trackers, no analytics services, no social network buttons, no embedded map and no fonts from other people’s servers. Only when you sign up for a guided tour do we need details from you — and thirty days after the tour they are gone.

Villanders Culture and Museum Association, Oberland 36, 39040 Villanders (BZ), Italy.
Represented by Karl Gruber. Phone +39 345 3115661, e-mail info@bergwerk.it.

Tax number 92060520217, VAT number 03246480218. Questions about data protection are answered by the association at info@bergwerk.it.

The web server briefly records every request: IP address, date and time, page requested, browser and operating system. This serves secure operation and troubleshooting — the legal basis is our legitimate interest in a working service (Article 6(1)(f) GDPR). The full IP address is deleted after [FRIST — beim Hoster erfragen] at the latest, the remaining logs after [FRIST]. They are not combined with anything.

The registration form asks for:

• Requiredname, e-mail address, number of people, preferred date, language of the tour
• Optionalphone number

We need these details to hold your place, send you the confirmation and find you again at the adit. The phone number is optional and has exactly one purpose: if a tour is cancelled at short notice, we call instead of writing. The legal basis is the performance of pre-contractual measures and of the contract (Article 6(1)(b) GDPR).

Retention: thirty days after the tour, name, e-mail and phone number are deleted automatically. Only the figures remain — how many people were there on which date. Nobody can be identified from those, and the association still knows how many people went through the mountain over the year.

Payment is made on site. We do not collect payment data, card numbers or anything of the sort.

If a date is fully booked, you can join the waiting list. We then store the same details for the same purpose. If a place becomes free or an additional tour is arranged, we write to you. The same thirty-day deletion period applies.

After registering you receive a confirmation with your code for the entrance. About twenty hours before the tour a reminder follows with the meeting point and equipment. Both e-mails are part of the booking; we do not send a newsletter or advertising. Dispatch runs via [NAME DES E-MAIL-DIENSTES], with whom a data processing agreement under Article 28 GDPR is in place.

So that nobody can fill the form automatically, we count how many registrations come from one connection per hour. Your IP address is not stored for this — it is converted with a secret key into a numeric value from which the address cannot be recovered. This value is deleted after 48 hours. The legal basis is our legitimate interest in a form free of misuse (Article 6(1)(f) GDPR).

The volunteer guides sign up for dates via a personal link. For this we store name, phone number and — if given — e-mail address. The basis is participation in the association (Article 6(1)(b) and (f) GDPR).

If someone switches on notifications on their phone, their browser reports a device address to the association. This address comes from the push service of the respective browser maker (Google for Chrome, Mozilla for Firefox) and is sent back there to deliver the message. The content of the message does not travel through it: the push merely wakes the app, which then fetches the text directly from the association. No guest name and no tour date therefore passes through the push service. If someone switches the notifications off, their device address is deleted.

Guest lists with names and contact details are seen only by the guides who have to call back in an emergency. The others see only figures and the language of the group.

• Fontssit on our own server, not at Google
• Mapis only a link — nothing is embedded, and only when you tap it do you leave this page
• QR codeis drawn on our server, not fetched from an outside service
• Analyticsdo not take place: no statistics, no reach measurement, no profiles
• Advertisingthere is none here, so no ad networks either
• Social networksno embedded buttons, no tracking pixels

You can request access to your data at any time, have it corrected or deleted, restrict the processing, object to it and take your data with you in a common format (Articles 15 to 21 GDPR). You can also withdraw a registration yourself at any time — the link for this is in your confirmation e-mail.

An informal e-mail to info@bergwerk.it is enough.

If you believe something here is not in order, you can lodge a complaint with the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, garanteprivacy.it — or with the supervisory authority where you live.

This policy applies from [DATUM]. If anything changes on the site or in the booking system, we change it accordingly.

See also: Legal notice and Cookies.