Last updated: September 2026
1. Controller
The controller responsible for the processing of personal data on this website under the General Data Protection Regulation (GDPR) is:
Ivan Soratroi, Hauptstrasse 173, 39026 Prad am Stilfserjoch (BZ), Italy
Email: info@venostis.it · Phone: +39 345 849 2166
For any question about data protection or to exercise your rights, simply send an email to the address above.
2. Overview
We process personal data only to the extent necessary to operate this website, to answer your enquiries and to handle bookings. We do not use analytics, tracking or advertising tools.
3. Hosting and server log files
This website is hosted by Aruba S.p.A. (Italy). When you visit the pages, the server automatically processes technical data sent by your browser: IP address, date and time, requested page, browser type and operating system. This serves the secure and stable operation of the website (legitimate interest, Art. 6(1)(f) GDPR). The data is kept only for as long as necessary for that purpose.
4. Availability and booking requests
When you send a request through the calendar, we process the data you enter:
- first and last name
- email address
- phone number (optional)
- number of guests and your message (optional)
- requested travel dates
The request is stored in this website’s database and delivered to us by email. We use the data solely to answer your request and to prepare or carry out a booking (Art. 6(1)(b) GDPR). To protect against automated requests, the form uses a simple security code that does not rely on any third party.
We keep your data only for as long as needed to process the request. If a contract is concluded, we retain the data in line with statutory retention obligations (under Italian law generally up to 10 years). Statutory reporting duties towards authorities (for example the registration of guests) remain unaffected (Art. 6(1)(c) GDPR).
5. Contact form, email and phone
If you write to us through the contact form, we process your name, email address and message and, if provided, your phone number and subject. The message is delivered to us by email and is not stored in this website’s database. If you contact us by email or phone, we likewise process your details to handle your enquiry and any follow-up questions (Art. 6(1)(b) or (f) GDPR). We do not pass the data on to third parties unless we are legally obliged to do so or it is necessary to carry out the booking.
6. Self check-in form
For self check-in we offer a form on this website. Your entries (e.g. name, date and place of birth, sex, nationality, ID data, period of stay, details of further guests) are sent to us by e-mail; they are not passed on to third parties other than our hosting and e-mail provider.
Under Italian law (Art. 109 TULPS) we are obliged to record our guests’ details and report them to the police authority through the “Alloggiati Web” portal (Art. 6(1)(c) GDPR); otherwise the processing serves to carry out your stay (Art. 6(1)(b) GDPR). We delete the details as soon as they are no longer needed for these purposes. Please provide details of further guests only with their knowledge.
7. Automatic language selection
On your first visit we suggest the matching language: your browser asks a service (Cloudflare, Inc., USA; alternatively GeoJS or country.is) for the country your IP address is located in and, if necessary, forwards you to the German, English or Italian version. Your IP address is transferred to that service, including to third countries (e.g. the USA). We ourselves only store your language choice in your browser (local storage, “vgeo” and “vlang”); your location is not evaluated. The legal basis is our legitimate interest in a user-friendly website (Art. 6(1)(f) GDPR). You can change the language at any time in the language menu; your choice is then respected.
8. Guest reviews (Elfsight)
On the home page and on the “Reviews” page we display guest reviews from Booking.com, Airbnb and Google using a widget from Elfsight (elfsight.com). When the page loads, the widget is retrieved from Elfsight’s servers. As a technical necessity, Elfsight receives your IP address and browser information; a transfer to countries outside the EU (for example the USA) is possible. The legal basis is our legitimate interest in presenting guest reviews transparently (Art. 6(1)(f) GDPR). For more information see Elfsight’s privacy policy: elfsight.com/privacy-policy.
9. Fonts (Google Fonts)
For a consistent appearance, this website uses the fonts “Marcellus” and “Figtree” from Google Fonts. Your browser retrieves the fonts from Google’s servers, which transmits your IP address to Google (Google Ireland Limited or Google LLC, USA). The legal basis is our legitimate interest in an attractive and consistent presentation (Art. 6(1)(f) GDPR). More information: policies.google.com/privacy.
10. Cookies and browser storage
We do not use cookies for analytics or advertising. Where technically necessary cookies or browser-storage entries are used (for example the selected language), they serve solely to operate the website. Embedded third-party services (see sections 8 and 9) may store their own data in your browser; please refer to their privacy notices for details.
11. Your rights
Within the limits of the law you have the right to:
- access the data we hold about you (Art. 15 GDPR)
- have inaccurate data corrected (Art. 16 GDPR)
- erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- object to processing based on legitimate interests (Art. 21 GDPR)
You may also lodge a complaint with a supervisory authority. The authority responsible for us is the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it); you can also contact the authority in your country of residence.
12. Changes
We update this privacy policy when the website or the legal requirements change. The version published here applies.