Privacy
1. Controller
Alpine Bike Guide – Marc TheinerTörlweg 2
39021 Latsch
Phone: +39 344 491 5832
Email: info@ride-alpine.com
VAT no.: 03342300211
Tax code: THNMRC98R22I729Z
Privacy requests may be sent directly to the contact details above.
2. Processing principles and purposes
We process personal data only to operate the website securely, answer enquiries, prepare or perform bike tours, riding-skills courses and related services, comply with legal obligations or, for optional services, on the basis of your consent. The controller does not carry out automated decision-making or profiling.
3. Website delivery and server logs
When you access the website, the server processes connection data required for technical delivery: IP address, date and time, requested address, amount of data, referrer, browser, operating system and status code. The purposes are website delivery, troubleshooting and protection against attacks and abuse.
Legal basis: Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website. Logs are normally deleted after no more than 3 days. Where a specific security incident occurs, relevant entries may be retained until investigation or legal enforcement is complete.
The hosting provider and technical IT providers may receive the data as processors. A transfer outside the European Economic Area is not intended for hosting.
4. Contact and booking enquiries
Depending on the language version used, the enquiry form processes your name, email address, telephone number, requested date and service, number of participants and message. These details are used to check availability, scope and price and to answer your enquiry. Without the required fields, the enquiry cannot be processed through the form.
Legal basis: Article 6(1)(b) GDPR for steps prior to entering into a contract and contract performance; Article 6(1)(c) GDPR where statutory retention duties apply. The form checkbox merely confirms that you have read this notice and is not consent to processing required for the enquiry.
Enquiries are sent to the business mailbox using an encrypted SMTP connection; no additional plaintext copy is created in the website data area. Recipient categories are the controller and the necessary hosting, email and IT providers. Enquiries that do not result in a booking are deleted within 12 months unless legal claims require longer retention. Contractual, accounting and tax-relevant booking data is retained for up to 10 years where required by law. You may alternatively contact us by email or telephone.
We use the locally operated CAP system to protect the form against automated spam enquiries. Your browser solves a small cryptographic proof-of-work and the server then validates a short-lived security token. No data is transmitted to Google or another captcha provider, and no captcha cookies are set. The legal basis is our legitimate interest in the security and proper operation of the form under Article 6(1)(f) GDPR.
5. Necessary cookies and consent management
Technically necessary cookies provide the session, security functions and storage of your privacy choice. They are not used for advertising and do not require consent. Optional services are disabled by default.
The legal basis for optional services is consent under Articles 6(1)(a) and 7 GDPR and, where terminal access is involved, Article 122 of the Italian Privacy Code. Your choice is retained for no more than 6 months and can be changed at any time:
Cookie overview
| Name | Provider/purpose | Duration | Category |
|---|---|---|---|
grav-… | This website; technical session and form protection | Session | Necessary |
dsgvo_consent | This website; version, date and selected services | 6 months | Necessary |
provider-dependent, e.g. NID | Google Maps; maps, security and preferences | as set by Google | External media, with consent |
Google Maps
The map provided by Google Ireland Limited loads only after your express permission. Loading transfers at least your IP address, browser details, time and requested map location to Google; if you are signed into Google, the data may be linked to your account. The purpose is to display our location and provide route planning. Legal basis: Article 6(1)(a) GDPR. Without consent, only a local placeholder is shown.
Recipients and international transfers
Where necessary, data may be disclosed to hosting, email and IT providers, tax advisers, payment providers or authorities. Processors are bound under Article 28 GDPR. Transfers to third countries take place only on the basis of an adequacy decision under Article 45 GDPR or appropriate safeguards under Article 46 GDPR, in particular standard contractual clauses and supplementary safeguards.
Your rights
Subject to the statutory conditions, you have rights of access (Article 15), rectification (Article 16), erasure (Article 17), restriction (Article 18), portability (Article 20) and objection to processing based on legitimate interests (Article 21 GDPR). You may withdraw consent at any time for the future without affecting the lawfulness of processing before withdrawal.
To exercise your rights, contact info@ride-alpine.com. You may also lodge a complaint with the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, or another competent supervisory authority.
Security and updates
We use TLS encryption, access restrictions, updates and other technical and organisational measures appropriate to the risk. We update this notice when services, law or processing activities change; material changes to optional services trigger a new consent request.