Privacy Policy

Data Controller

The data controller is Rifugio Monti Pallidi, Strada del Sella 2, 38032 Canazei (TN), Italy. Email: rifugio@montipallidi.it, Phone: +39 0462 602288.

What Data We Collect

We collect the following personal data:

• Contact form: your name, email address, and message. This data is collected only when you voluntarily submit the contact form.
• Cookie consent preference: we use your browser's localStorage to remember whether you accepted or rejected third-party cookies. This data stays on your device.
• Cloudflare Turnstile (for spam protection on the contact form) runs without setting tracking cookies and does not require your consent under GDPR; it may process your IP address for fraud prevention. Google Maps (to show our location) is only loaded with your consent and may collect data such as your IP address and browser information.

Legal Basis for Processing

• Consent (Art. 6(1)(a) GDPR): for loading the Google Maps embed. You can withdraw your consent at any time via the "Cookie Settings" link in the footer.
• Legitimate interest (Art. 6(1)(f) GDPR): for processing contact form submissions to respond to your inquiries, and for spam/bot protection via Cloudflare Turnstile.
• Pre-contractual measures (Art. 6(1)(b) GDPR): for processing booking-related inquiries submitted via the contact form.

Data Processors and Third Parties

• Amazon Web Services (AWS): we use AWS services (CloudFront, Lambda, SES) to host the website and deliver contact form emails. Data is processed within the EU (Frankfurt, Germany).
• Google LLC: Google Maps is used to display our location. This service is loaded only with your consent. Google's privacy policy: https://policies.google.com/privacy
• Iperbooking: the "Book now" button links to an external booking platform. Their own privacy policy applies once you leave our website.

Data Retention

Contact form data is sent as an email to our inbox and is not stored in any database. We retain emails only as long as necessary to handle your inquiry. Your cookie consent preference is stored in your browser's localStorage indefinitely, or until you clear your browser data or change your preference.

Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): you may request a copy of any personal data we hold about you.
• Right to rectification (Art. 16 GDPR): you may request correction of inaccurate personal data.
• Right to erasure (Art. 17 GDPR): you may request deletion of your personal data.
• Right to restriction of processing (Art. 18 GDPR): you may request restriction of processing under certain conditions.
• Right to data portability (Art. 20 GDPR): you may request your personal data in a portable, machine-readable format.
• Right to object (Art. 21 GDPR): you may object to processing based on legitimate interest.
• Right to withdraw consent: you may withdraw your cookie consent at any time by clicking "Cookie Settings" in the footer.
• Right to lodge a complaint: you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).

To exercise any of these rights, please contact us at: rifugio@montipallidi.it

International Data Transfers

Google services may transfer data to the United States. Google participates in the EU-U.S. Data Privacy Framework. AWS services used by this website are located in the EU (Frankfurt, Germany).

Changes to This Policy

We may update this privacy policy from time to time. The most current version is always available on this page.