Privacy at a glance.

Protecting your personal data is important to us. This privacy policy explains which personal data are processed when you visit and use this website, for which purposes, and which rights you have. Processing is based on Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR"), the Italian Data Protection Code (Legislative Decree 196/2003 as amended by Legislative Decree 101/2018) and the applicable ePrivacy rules.

1. Controller

The controller responsible for data processing on this website is:

Leonard Schrott
Ländweg 5 INT 1
39043 Klausen (BZ), South Tyrol, Italy
Phone: +39 351 467 5438
Email: info@krone1895.com
VAT number / Partita IVA: IT03346310216

2. Overview of processing activities

The following processing activities essentially take place on this website and are explained in detail in the sections below:

• Provision of the website and server log files (hosting)
• Cookies and consent management (consent banner)
• Audience measurement with Google Analytics 4, loaded via the Google tag
• Marketing and conversion measurement with the Meta pixel (Facebook/Instagram)
• Newsletter dispatch
• Contact, enquiry and longstay forms as well as contact by email, phone and WhatsApp
• Booking via an external booking system
• Embedded third-party content: fonts, script libraries, interactive map

3. Hosting and server log files

This website is hosted on servers of Hetzner Online GmbH (Industriestraße 25, 91710 Gunzenhausen, Germany) within the European Union. When you access the website, the web server automatically processes technical access data (server log files): IP address, date and time of access, requested page or file, amount of data transferred, browser type and version, operating system and the previously visited page (referrer).

These data are technically necessary to deliver the website and to ensure its stability and security (e.g. defence against attacks and error analysis) and are not combined with other data sources. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the website). Log files are automatically deleted after a short period.

Technical maintenance of the website is provided by darwin's GmbH (Brixen, South Tyrol). Where required, data processing agreements pursuant to Art. 28 GDPR are in place with our technical service providers.

4. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. Data you transmit via this website (e.g. enquiries via a form) cannot be read by third parties. You can recognise the encrypted connection by the lock symbol in your browser's address bar and by the address beginning with "https://".

5. Cookies and consent management

When you first visit this website, a consent banner ("Cookies & privacy") appears. Cookies and comparable technologies (e.g. localStorage entries, tracking pixels) that are not technically necessary are only used after you have expressly consented. We distinguish three categories:

• Technically necessary: required for the operation of the website, for example to store your cookie choice and your language selection. Legal basis: Art. 6(1)(f) GDPR.
• Statistics: audience measurement with Google Analytics 4 (see section 7). Legal basis: your consent, Art. 6(1)(a) GDPR.
• Marketing: Meta pixel for advertising and conversion measurement (see section 8). Legal basis: your consent, Art. 6(1)(a) GDPR.

Your choice is stored locally in your browser. You can adjust or withdraw your consent at any time with effect for the future via the "Cookie settings" link in the footer of every page. In addition, we use Google Consent Mode v2: without your consent, no statistics or marketing identifiers are transmitted to Google.

6. Google tag / Google Tag Manager

To load and control the Google services described below, we use the Google tag or Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The tag itself does not set its own analytics cookies; it serves to load downstream services (in particular Google Analytics) and to pass your decision made in the consent banner on to those services (Consent Mode v2). The services themselves are only loaded after you have given your consent. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.

7. Google Analytics 4

If you have consented to the "Statistics" category, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited. Google Analytics uses cookies or comparable identifiers that enable a pseudonymised analysis of your usage: pages visited, time spent, approximate origin (region), device used and interactions (e.g. submitting a form or opening the booking dialog).

In Google Analytics 4, IP addresses are not logged or stored; they are only used for coarse geolocation and are truncated or discarded before storage. Data collected via Google Analytics may be transferred to servers of Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework; in addition, EU standard contractual clauses apply.

Analytics data are automatically deleted after 14 months at the latest. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR; you can withdraw it at any time via the "Cookie settings" in the footer. Further information can be found in Google's privacy policyis sufficient to exercise these rights.

8. Meta pixel (Facebook)

If you have consented to the "Marketing" category, we use the Meta pixel provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland ("Meta"). The pixel enables us to display targeted ads on Facebook and Instagram, measure their effectiveness, build audiences (Custom Audiences, Lookalike Audiences) and re-address visitors of our website there (retargeting).

For this purpose, your browser establishes a connection to Meta; Meta receives, among other things, your IP address, information about your browser as well as the pages you visited and the events triggered. If you have a Facebook or Instagram account, Meta may link these data to your account. For the collection and transmission of data via the pixel, we are jointly responsible with Meta (Art. 26 GDPR); Meta is solely responsible for the subsequent processing. Data may be transferred to Meta Platforms, Inc. in the USA; Meta is certified under the EU-US Data Privacy Framework.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR, which you can withdraw at any time via the "Cookie settings". Further information: Meta's privacy policy and ad preferencesis sufficient to exercise these rights.

9. Newsletter

If you subscribe to our newsletter, we process your email address and, where provided, your name in order to regularly send you information about Krone 1895 — such as news about the house, offers and exclusive holiday packages. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.

Dispatch is handled by the service provider Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France) as a processor; the data are processed on servers in the EU. To improve our newsletter, open and click rates may be analysed in aggregated form.

You can unsubscribe from the newsletter at any time — via the unsubscribe link in every email or informally by writing to info@krone1895.com. After unsubscribing, your data are removed from the mailing list.

10. Contact, enquiry and longstay forms

Via the forms on this website (contact, apartment enquiry, longstay/corporate enquiry) we process the data you enter — depending on the form e.g. salutation, name, email address, phone number, travel dates, number of guests, desired apartment, company name and your message — exclusively to process and answer your enquiry.

Transmission is encrypted. Your enquiry is delivered to us by email and additionally stored in the website's internal enquiry system. To protect against spam, the forms use technical checks (e.g. an additional field invisible to humans and a timing check); no tracking takes place.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures at your request) or Art. 6(1)(f) GDPR (legitimate interest in answering general enquiries). Form enquiries are deleted no later than 12 months after processing has been completed, unless a booking results from them or statutory retention obligations apply.

If you contact us via WhatsApp (link on our website), the privacy information of WhatsApp Ireland Limited additionally applies; use is voluntary — you can also reach us by email or phone.

11. Booking via our booking portal

For binding bookings, we redirect you to an external booking system (CiaoBooking). The data entered there (e.g. name, contact details, stay dates, payment data) are processed by the provider of the booking system and by us as the accommodation provider in order to handle your booking. The legal basis is Art. 6(1)(b) GDPR (performance of a contract).

In addition, we process guest data to fulfil the statutory obligations of an accommodation business in Italy (e.g. guest registration with the competent authorities, tourist tax, tax retention obligations); in this respect, the legal basis is Art. 6(1)(c) GDPR. Please also refer to the privacy policy of the booking provider.

12. Embedded third-party content: fonts, scripts, map

To display the website, we embed content from third-party providers. When this content is loaded, the respective provider technically receives your IP address:

• Google Fonts: fonts are loaded from servers of Google Ireland Limited to display the website consistently and attractively.
• Script libraries (CDN): individual functional libraries (e.g. for smooth scrolling) are loaded via the content delivery network unpkg.com.
• Interactive map: the area map is based on the open-source library Leaflet; the map tiles are obtained from CARTO. The map is only loaded when you reach the corresponding section of the page.

The legal basis is our legitimate interest in a technically flawless and attractive presentation of the website (Art. 6(1)(f) GDPR).

13. Recipients and transfers to third countries

We only pass on your data to the extent described in this policy, where necessary for the performance of a contract or where required by law. Categories of recipients are: hosting and IT service providers, email and newsletter service providers, Google (analytics), Meta (marketing), the provider of the booking system and — where required by law — authorities and tax advisors.

Where data are transferred to the USA (Google LLC, Meta Platforms, Inc.), the transfer is based on the EU Commission's adequacy decision on the EU-US Data Privacy Framework and, in addition, on standard contractual clauses pursuant to Art. 46 GDPR.

14. Storage periods

• Server log files: automatic deletion after a short period
• Form enquiries: no later than 12 months after processing has been completed, unless a booking results
• Google Analytics data: no longer than 14 months
• Newsletter data: until you unsubscribe
• Booking and invoicing data: in accordance with statutory retention periods (in Italy generally 10 years)

15. Your rights

With regard to your personal data, you have the following rights: access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and the right to withdraw any consent given at any time with effect for the future (Art. 7(3) GDPR). An informal message to info@krone1895.comis sufficient to exercise these rights.

Right to object (Art. 21 GDPR): you may object at any time, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR; you may object to processing for direct marketing purposes at any time without stating reasons.

You also have the right to lodge a complaint with a data protection supervisory authority — in Italy with the Garante per la Protezione dei Dati Personali, Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it, or with the supervisory authority of your country of residence.

16. No automated decision-making; obligation to provide data

No automated decision-making, including profiling with legal effect, takes place on this website. You are neither legally nor contractually obliged to provide your data; however, without the information required in each case we cannot process an enquiry or booking.

17. Changes to this privacy policy

We will adapt this privacy policy as soon as the legal situation or the services used change. The version published on this page applies in each case.

Last updated: August 2026