1. Data Controller

Benediktinerkloster Muri-Gries
Krippenmuseum
Grieserplatz 21
39100 Bozen
MwSt. Nr. 00133100214

E-Mail: info@krippenmuseum.it
Website: https://www.krippenmuseum.it

The Data Controller determines the purposes and means of the processing of personal data pursuant to Art. 4(7) of Regulation (EU) 2016/679 (GDPR).

2. General Information on Data Processing

The protection of your personal data is very important to us. Personal data is processed in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Italian data protection legislation.

This privacy policy explains the methods, purposes, and scope of the processing of personal data collected through this website.

3. Hosting

This website is hosted by:

Aruba S.p.A.
Via San Clemente 53
24036 Ponte San Pietro (BG), Italy

When accessing the website, the hosting provider automatically collects technical data in so-called server log files, including:

• IP address

• Date and time of the request

• Requested page/file

• Browser type and version

• Operating system

• Referrer URL

These data are processed to ensure the proper functioning of the website and system security.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

4. Contact and Inquiry Form

If you contact the Data Controller via email or contact form, the data you provide (e.g. name, email address, phone number, and message content) will be processed in order to respond to your request and manage any follow-up communication.

Legal bases:

• Art. 6(1)(b) GDPR (pre-contractual measures)

• Art. 6(1)(f) GDPR (legitimate interest in handling inquiries)

The data will be stored only as long as necessary to process the request and in compliance with legal obligations.

5. Cookies and Consent Management (Cookiebot)

This website uses cookies.

Consent management is handled through:

Usercentrics A/S (Cookiebot)
Havnegade 39
1058 Copenhagen, Denmark

Cookiebot stores users’ consent preferences regarding cookie usage. For this purpose, the following data may be processed:

• anonymized IP address

• consent status

• date and time of consent

• browser information

Legal basis:

• Art. 6(1)(c) GDPR (legal obligation)

• Art. 6(1)(a) GDPR (consent)

Users may modify or withdraw their consent at any time via the cookie settings.

6. Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by:

Google Ireland Limited
Gordon House, Barrow Street
Dublin 4, Ireland

Google Analytics uses cookies that enable analysis of user behavior on the website.

Processing takes place only after the user has given consent via the cookie banner.

Legal basis: Art. 6(1)(a) GDPR (consent).

Purpose of processing

• statistical analysis of website usage

• improvement of website content and services

Data transfer to third countries

Personal data may be transferred to the United States. Google participates in the EU-US Data Privacy Framework and applies Standard Contractual Clauses approved by the European Commission.

Data retention period

Data collected via Google Analytics are stored for a maximum period of 14 months.

Further information:
https://policies.google.com/privacy

Opt-out browser plugin:
https://tools.google.com/dlpage/gaoptout

7. Google Fonts

This website uses external fonts (“Google Fonts”) provided by:

Google Ireland Limited, Dublin, Ireland.

When pages are viewed, the user’s browser loads fonts from Google servers, which may result in the transmission of the user’s IP address to Google.

Integration takes place only after the user has provided consent.

Legal basis: Art. 6(1)(a) GDPR (consent).

Further information:
https://developers.google.com/fonts/faq
https://policies.google.com/privacy

8. Google Maps

This website uses the Google Maps service provided by:

Google Ireland Limited, Dublin, Ireland.

To use Google Maps features, it is necessary to transmit the user’s IP address.

The service is activated only after user consent via the cookie banner.

Legal basis: Art. 6(1)(a) GDPR (consent).

Further information:
https://policies.google.com/privacy

9. Disclosure of Data to Third Parties

Personal data may be disclosed to third parties only in the following cases:

• with the data subject’s explicit consent

• for the performance of contractual obligations

• to comply with legal obligations

• based on legitimate interest pursuant to Art. 6(1)(f) GDPR

10. Data Retention

Personal data are stored only for as long as necessary to fulfill the purposes for which they were collected or as required by law.

11. Data Subject Rights

Users have the right to:

• access their data (Art. 15 GDPR)

• rectification (Art. 16 GDPR)

• erasure (Art. 17 GDPR)

• restriction of processing (Art. 18 GDPR)

• data portability (Art. 20 GDPR)

• object to processing (Art. 21 GDPR)

• withdraw consent (Art. 7 GDPR)

Requests may be sent to:
[Controller’s E-mail]

Users also have the right to lodge a complaint with the competent supervisory authority:

Italian Data Protection Authority (Garante per la Protezione dei Dati Personali)
https://www.garanteprivacy.it

12. Data Security

This website uses SSL/TLS encryption to protect transmitted data.

The Data Controller implements appropriate technical and organizational measures to protect data against unauthorized access, loss, or alteration.

13. Changes to this Privacy Policy

This privacy policy may be updated to reflect legal or technical changes.

Users are encouraged to review this page periodically.