Legal notice & privacy
Last updated: 8 September 2026. Applicable law: Italy and the European Union (GDPR).
A. Legal notice
Information pursuant to Article 7 of Italian Legislative Decree No. 70/2003 (e-commerce) and Italian rules on identifying tourist accommodation.
Operator and controller
Blaas Sabine
Chalet Passeier
Passeiererstrasse 14, 39010 Saltaus (BZ), Italy
Email: info@chalet-passeier.it
Phone: +39 342 3539710
WhatsApp: +393423539710
CIN (Codice Identificativo Nazionale): IT021083B496AO8LI6
The operator is a natural person established in Italy and runs the holiday homes ZOLL and RIVER in Saltaus/Saltusio, Municipality of St. Leonhard in Passeier / San Leonardo in Passiria (South Tyrol).
Blaas Sabine is responsible for the content of this website under Italian and EU rules.
Tourist accommodation
The accommodation is offered in Italy. The national identification code (CIN) is displayed on this website as required by Italian rules on identifying tourist rentals and lodging. The local tourist tax (imposta di soggiorno) of the Municipality of San Leonardo in Passiria is payable under the current municipal rules (currently in cash on arrival, from age 14).
On check-in, guest identification data required by law must be collected and transmitted via the Alloggiati Web portal to the competent police authority (Polizia di Stato) pursuant to Article 109 TULPS (Royal Decree 773/1931).
Consumer contracts and withdrawal
Contracts for accommodation for a specific period are governed by the Italian Consumer Code (Legislative Decree 206/2005). The right of withdrawal from distance contracts generally does not apply to contracts for accommodation services for a specific date, under Article 59(1)(n) of the Consumer Code.
The European Commission provides an online dispute resolution (ODR) platform: https://ec.europa.eu/consumers/odr. We are not obliged to take part in alternative dispute resolution before a consumer arbitration body and currently do not do so.
Liability for content and links
The content of this website is prepared with care. No warranty is given as to completeness, accuracy or currency. Operators of third-party websites are solely responsible for their content. Links will be removed if we become aware of unlawful content.
Copyright
Texts, photographs, graphics and the layout of this website are protected by copyright. Use beyond what the law allows requires the operator’s consent. Third-party trade marks remain the property of their respective owners.
B. Privacy notice
This notice is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and the Italian Privacy Code (Legislative Decree 196/2003, as amended by Legislative Decree 101/2018).
1. Controller
The controller is Blaas Sabine, Passeiererstrasse 14, 39010 Saltaus (BZ), Italy, email info@chalet-passeier.it, phone +39 342 3539710.
No data protection officer has been appointed, as the legal conditions for doing so are not met.
2. Categories of personal data
- Identity and contact data: first name, last name, email, phone, address if provided
- Stay data: requested chalet, arrival and departure dates, number of adults and children, dogs, message, language
- On booking and check-in: identification data required for guest registration and tourist tax (e.g. ID document, date of birth, nationality), as required by law
- Technical data: IP address on enquiries, date/time, browser type, pages visited, cookie consent
- Admin area: username, password hash, last login
3. Purposes and legal bases
Processing takes place only as far as needed for each purpose:
- Website operation, security, language, form protection (CSRF): legitimate interest, Art. 6(1)(f) GDPR, and ePrivacy rules for strictly necessary cookies.
- Enquiry form and pre-contract correspondence (quote, availability, booking): Art. 6(1)(b) GDPR (steps at your request before entering a contract). Name, email and stay data are required; otherwise the enquiry cannot be handled. Phone and message are optional.
- Guest registration (Alloggiati Web) and tourist tax: legal obligation, Art. 6(1)(c) GDPR together with Article 109 TULPS and municipal tourist-tax rules.
- Tax and record-keeping duties under Italian law: Art. 6(1)(c) GDPR.
- Cookie consent and optional analytics: Art. 6(1)(a) GDPR. Analytics cookies are set only if you choose “Accept all” and an analytics ID is configured. No analytics ID is configured at present.
- Internal notice of new enquiries by email and Telegram: legitimate interest in handling requests promptly, Art. 6(1)(f) GDPR.
- Fonts (Google Fonts): currently loaded from Google servers for a consistent layout (legitimate interest, Art. 6(1)(f) GDPR). Your IP address may be sent to Google.
- Map on the directions page (OpenStreetMap) and Google Maps link: legitimate interest in showing the location, Art. 6(1)(f) GDPR. Loading the map may send data to the respective provider.
There is no automated decision-making, including profiling, under Art. 22 GDPR. Data are not sold or shared with third parties for marketing.
4. Recipients
- The operator and persons instructed by him to handle enquiries and bookings
- Hosting and IT providers established in the European Union (Italy)
- Email delivery to mailboxes used by the operator
- Telegram Messenger (internal alert to the operator when a new enquiry arrives)
- Google (fonts; and Google Maps if you follow the maps link)
- OpenStreetMap Foundation (embedded map on the directions page)
- Authorities: Polizia di Stato / Alloggiati Web, the municipality for tourist tax, other bodies only where required by law
- WhatsApp/Meta only if you contact us via WhatsApp yourself
5. Transfers outside the EEA
Some of the services above may transfer data to countries outside the EEA, in particular the United States (Google, Meta/WhatsApp) or other locations (Telegram). Where there is no EU adequacy decision (e.g. the EU-US Data Privacy Framework for certified US organisations), the transfer may rely on standard contractual clauses or Art. 49 GDPR (necessary to handle your enquiry or, for WhatsApp, at your initiative). Telegram servers may be located outside the EU; the message usually contains name, contact details and key dates of the requested stay.
6. Retention
- Enquiries without a booking: normally up to 24 months after the last contact, then deletion or anonymisation unless a longer period is required.
- Bookings, invoices and tax records: under Italian tax and civil law, normally 10 years.
- Guest-registration and tourist-tax data: for as long as the applicable rule requires, and no longer.
- IP address linked to an enquiry: normally up to 12 months (security, abuse prevention).
- Cookie
cp_consent: 180 days. - Session cookie
cp_session: until the browser is closed or the session expires. - Admin accounts: until the user account is deleted.
C. Cookies
The ePrivacy Directive 2002/58/EC and the cookie guidelines of the Italian Data Protection Authority (Garante) apply. Strictly necessary cookies are used without consent. Other cookies only after your choice in the banner.
| Name | Purpose | Duration | Type |
|---|---|---|---|
| cp_consent | Stores your cookie choice (necessary / all) | 180 days | necessary |
| cp_session | Session: application language, form protection, admin login | session | necessary |
| Analytics cookies | Only if an analytics ID is set and you accept all cookies | per provider | optional, consent |
Third parties (Google Fonts, OpenStreetMap, and Google Maps or WhatsApp if used) may set their own cookies or similar tools. You can delete or block cookies in your browser; necessary features (enquiry, login) may then be limited. To renew consent, delete the cp_consent cookie and reload the page.
D. Your rights
Under the GDPR you have, in particular, the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection to processing based on Art. 6(1)(f) (Art. 21). You may withdraw consent at any time with effect for the future. Processing carried out before withdrawal remains lawful.
To exercise your rights, email info@chalet-passeier.it. You also have the right to lodge a complaint with the Italian supervisory authority:
Garante per la protezione dei dati personali
Piazza Venezia 11, 00187 Rome, Italy
www.garanteprivacy.it
EU residents may also contact the supervisory authority of their Member State of habitual residence.
Minors
The enquiry form is intended for people who can book a stay. For information-society services in Italy the minimum age is generally 14 (Article 2-quinquies of Legislative Decree 196/2003). Persons under 18 should use the form only with the consent of a parent or guardian unless they have capacity to contract themselves.
Changes
We update this notice if the website, the processing or the law changes. The version published on this page applies.