Check availabilityCheck availability
+39 351 467 5438 DEITEN
Enquire Book

Legal

Privacy policy at a glance.

Protecting your personal data is important to us. This privacy policy explains which personal data are processed when you visit and use this website, for what purposes this happens and what rights you have. It is based on Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”), the Italian Personal Data Protection Code (Legislative Decree 196/2003 as amended by Legislative Decree 101/2018) and the applicable ePrivacy provisions.

1. Controller

The controller responsible for data processing on this website is:

Leonard Schrott
Bahnhofstraße 21
39043 Klausen (BZ), South Tyrol, Italy
Phone: +39 351 467 5438
Email: info@krone1895.com
VAT no. / Partita IVA: IT03346310216

2. Overview of processing

The main processing activities on this website are as follows; each is explained in detail in the sections below:

  • Provision of the website and server log files (hosting)
  • Cookies and consent management (consent banner)
  • Audience measurement with Google Analytics 4, loaded via the Google Tag
  • Marketing and performance measurement with the Meta Pixel (Facebook/Instagram)
  • Newsletter mailings
  • Contact, enquiry and Longstay forms, and contact by email, phone and WhatsApp
  • Booking via an external booking system
  • Embedded third-party content: fonts, script libraries, interactive map

3. Hosting and server log files

This website is hosted on servers operated by Hetzner Online GmbH (Industriestraße 25, 91710 Gunzenhausen, Germany) within the European Union. When you access the website, the web server automatically processes technical access data (server log files): IP address, date and time of access, page or file requested, amount of data transferred, browser type and version, operating system and the previously visited page (referrer).

These data are technically necessary to deliver the website and keep it stable and secure (for example to fend off attacks and analyse errors) and are not combined with other data sources. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the website). Log files are deleted automatically after a short period.

Technical support for the website is provided by darwin's GmbH (Brixen, South Tyrol). Where required, we have concluded data processing agreements with our technical service providers in accordance with Art. 28 GDPR.

4. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. This means that data you transmit via this website (e.g. enquiries sent through a form) cannot be read by third parties. You can recognise an encrypted connection by the padlock icon in your browser's address bar and by the address beginning with “https://”.

5. Cookies and consent management

When you first visit this website, a consent banner (“Cookies & Privacy”) appears. We only use cookies and similar technologies (e.g. localStorage entries, tracking pixels) that are not technically necessary once you have given your express consent. We distinguish between three categories:

  • Technically necessary: required for the website to function, for example to store your cookie choices and language preference. Legal basis: Art. 6(1)(f) GDPR.
  • Statistics: audience measurement with Google Analytics 4 (see section 7). Legal basis: your consent, Art. 6(1)(a) GDPR.
  • Marketing: Meta Pixel for advertising and performance measurement (see section 8). Legal basis: your consent, Art. 6(1)(a) GDPR.

Your choices are stored locally in your browser. You can change or withdraw your consent at any time with effect for the future via the “Cookie settings” link in the footer of every page. We also use Google Consent Mode v2: without your consent, no statistics or marketing identifiers are sent to Google.

6. Google Tag / Google Tag Manager

To load and control the Google services described below, we use the Google Tag or Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The tag itself does not set any analytics cookies of its own; it is used to load downstream services (in particular Google Analytics) and to pass on the choice you made in the consent banner to these services (Consent Mode v2). The services themselves are only loaded once you have given your consent. The legal basis is your consent under Art. 6(1)(a) GDPR.

7. Google Analytics 4

If you have consented to the “Statistics” category, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited. Google Analytics uses cookies or similar identifiers that enable a pseudonymised analysis of how you use the website: pages viewed, time spent, approximate origin (region), device used and interactions (e.g. submitting a form or opening the booking dialogue).

Google Analytics 4 does not log or store IP addresses; they are only used to determine approximate location and are truncated or discarded before storage. The data collected through Google Analytics may be transferred to servers of Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework; standard contractual clauses of the European Commission are also in place.

Analytics data are deleted automatically after no more than 14 months. The legal basis is your consent under Art. 6(1)(a) GDPR; you can withdraw it at any time via “Cookie settings” in the footer. For more information, please see Google's privacy policy.

8. Meta Pixel (Facebook)

If you have consented to the “Marketing” category, we use the Meta Pixel provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland (“Meta”). The pixel allows us to target adverts on Facebook and Instagram, measure their success, create audiences (Custom Audiences, Lookalike Audiences) and reach visitors to our website again on those platforms (retargeting).

To do this, your browser connects to Meta; in the process, Meta receives, among other things, your IP address, information about your browser and about the pages you visit and the events you trigger. If you have a Facebook or Instagram account, Meta may link this data to your account. We are jointly responsible with Meta for the collection and transmission of data via the pixel (Art. 26 GDPR); Meta is solely responsible for any subsequent processing. Data may be transferred to Meta Platforms, Inc. in the USA; Meta is certified under the EU-US Data Privacy Framework.

The legal basis is your consent under Art. 6(1)(a) GDPR; you can withdraw it at any time via “Cookie settings”. More information: Meta's privacy policy and ad preferences.

9. Newsletter

If you sign up for our newsletter, we process your email address and, where provided, your name in order to send you regular information about Krone 1895 — such as news about the house, offers and exclusive holiday packages. The legal basis is your consent under Art. 6(1)(a) GDPR.

The newsletter is sent via the service provider Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France) acting as processor; the data are processed on servers in the EU. To improve our newsletter, open and click rates may be analysed in aggregated form.

You can unsubscribe at any time — via the unsubscribe link in every email or simply by sending a message to info@krone1895.com. Once you unsubscribe, your data will be removed from the mailing list.

10. Contact, enquiry and Longstay forms

Via the forms on this website (contact, apartment enquiry, Longstay/corporate enquiry), we process the data you enter — depending on the form, e.g. title, name, email address, phone number, travel dates, number of guests, preferred apartment, company name and your message — solely to process and respond to your enquiry.

Data are transmitted in encrypted form. Your enquiry is sent to us by email and also stored in the website's internal enquiry system. To protect against spam, the forms use technical checks (e.g. an additional field invisible to humans and a time check); no tracking takes place.

The legal basis is Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract) or Art. 6(1)(f) GDPR (legitimate interest in responding to general enquiries). Form enquiries are deleted after 12 months at the latest, unless they result in a booking or statutory retention obligations apply.

If you contact us via WhatsApp (link on our website), the privacy notice of WhatsApp Ireland Limited also applies; using it is voluntary, and you can equally reach us by email or phone.

11. Booking via our booking portal

For binding bookings, we redirect you to an external booking system (CiaoBooking). The data you enter there (e.g. name, contact details, stay details, payment details) are processed by the booking system provider and by us as the accommodation provider in order to handle your booking. The legal basis is Art. 6(1)(b) GDPR (performance of a contract).

We also process guest data to comply with the legal obligations of accommodation providers in Italy (e.g. guest registration with the competent authorities, local tourist tax, tax retention obligations); the legal basis for this is Art. 6(1)(c) GDPR. Please also refer to the booking provider's privacy notice.

12. Embedded third-party content: fonts, scripts, map

To display the website, we embed content from third-party providers. When this content is loaded, the respective provider receives your IP address for technical reasons:

  • Google Fonts: fonts are loaded from servers of Google Ireland Limited to display the website consistently and attractively.
  • Script libraries (CDN): individual function libraries (e.g. for smooth scrolling) are loaded via the unpkg.com content delivery network.
  • Interactive map: the area map is based on the open-source library Leaflet; the map tiles are provided by CARTO. The map is only loaded when you reach the relevant section of the page.

The legal basis is our legitimate interest in a technically flawless and attractive presentation of the website (Art. 6(1)(f) GDPR).

13. Recipients and transfers to third countries

We only share your data where described in this policy, where necessary to perform a contract or where required by law. Categories of recipients are: hosting and IT service providers, email and newsletter service providers, Google (analytics), Meta (marketing), the booking system provider and — where required by law — authorities and tax advisers.

Where data are transferred to the USA (Google LLC, Meta Platforms, Inc.), the transfer is based on the European Commission's adequacy decision on the EU-US Data Privacy Framework and additionally on standard contractual clauses under Art. 46 GDPR.

14. Retention periods

  • Server log files: deleted automatically after a short period
  • Form enquiries: no later than 12 months after processing is complete, unless they result in a booking
  • Google Analytics data: no more than 14 months
  • Newsletter data: until you unsubscribe
  • Booking and invoice data: in accordance with statutory retention periods (generally 10 years in Italy)

15. Your rights

With regard to your personal data, you have the following rights: access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and the right to withdraw any consent given at any time with effect for the future (Art. 7(3) GDPR). To exercise these rights, simply send an informal message to info@krone1895.com.

Right to object (Art. 21 GDPR): you may object at any time, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR; you may object to processing for direct marketing purposes at any time without giving reasons.

You also have the right to lodge a complaint with a data protection supervisory authority — in Italy with the Garante per la Protezione dei Dati Personali, Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it, or with the supervisory authority in your country of residence.

16. No automated decision-making; obligation to provide data

No automated decision-making, including profiling, with legal effect takes place on this website. You are not required by law or contract to provide your data; however, without the information required in each case, we cannot process an enquiry or booking.

17. Changes to this privacy policy

We will update this privacy policy whenever the legal situation or the services we use change. The version published on this page applies.

Last updated: August 2026