The use of the internet pages of Villa-Smile B&B o Kanot is generally possible without any indication of personal data. However, if a data subject wants to use special enterprise services via our website, processing of personal data could become necessary. If the processing of personal data is necessary and there is no statutory basis for such processing, we generally obtain consent from the data subject. The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (GDPR), and in accordance with the country-specific data protection regulations applicable to Villa-Smile B&B o Kanot.
1. Definitions The data protection declaration of Villa-Smile B&B o Kanot is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR).
a) Personal data: Any information relating to an identified or identifiable natural person.
b) Data subject: Any identified or identifiable natural person, whose personal data is processed.
c) Processing: Any operation or set of operations which is performed on personal data.
d) Restriction of processing: The marking of stored personal data with the aim of limiting their processing in the future.
e) Profiling: Any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person.
f) Controller: The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
g) Processor: A natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
h) Third party: A natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
i) Consent: Any freely given, specific, informed and unambiguous indication of the data subject's wishes.
2. Name and Address of the Controller Controller for the purposes of the GDPR is:
Villa-Smile B&B o Kanot
Mike Doubrawsky
Nössemark Näs 171
SE-66891 Dals Ed Sweden
Phone: +46 76 7714623
E-Mail: info@villa-smile.com
Website: https://www.villa-smile.com/
3. Cookies The internet pages of Villa-Smile B&B o Kanot use cookies.
Cookies are text files that are stored in a computer system via an Internet browser. Use of a Consent Manager (Cookie Banner): We use a cookie consent banner on our website to obtain and document the user's consent to the storage of certain cookies that are not strictly technically necessary (e.g., analysis or marketing cookies). Technically necessary cookies (such as our session shopping cart for booking processing) are essential for the functioning of the website and are set even without explicit consent. The data subject may, at any time, prevent the setting of cookies through our website by means of a corresponding setting of the Internet browser used, or revoke consents granted via our cookie banner with effect for the future.
4. Collection of general data and information The website of Villa-Smile B&B o Kanot collects a series of general data and information when a data subject or automated system calls up the website. This general data and information are stored in the server log files (e.g. browser types, operating system, referrer URL, IP address, date and time). We do not draw any conclusions about the data subject. This information is needed to deliver the content correctly and ensure the viability of our IT systems.
5. Contact possibility via the website If a data subject contacts the controller by e-mail or via a contact form, the personal data transmitted by the data subject are automatically stored for the purpose of processing or contacting the data subject. There is no transfer of this personal data to third parties.
6. Routine erasure and blocking of personal data The data controller shall process and store the personal data of the data subject only for the period necessary to achieve the purpose of storage, or as far as this is granted by the European legislator or other legislators.
7. Rights of the data subject Every data subject has the right granted by the European legislator to obtain confirmation, access, rectification, erasure (right to be forgotten), restriction of processing, and data portability of their personal data. The data subject also has the right to object to the processing of their personal data and to withdraw data protection consent at any time. To exercise these rights, the data subject may contact the controller at any time.
8. Data protection provisions about Social Media (Facebook & Instagram) We maintain online presences within social networks to communicate with active customers and users. The operating company is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. When you visit our social media profiles, personal data may be processed by the platform operator (e.g., via cookies). The legal basis is our legitimate interest in communicating with our guests (Art. 6(1)(f) GDPR) or your consent (Art. 6(1)(a) GDPR). Privacy policies: Facebook: https://www.facebook.com/about/privacy/ Instagram: https://privacycenter.instagram.com/policy/
9. Communication via WhatsApp Business If you contact us via WhatsApp or explicitly consent to being contacted via WhatsApp as part of a booking, we use the "WhatsApp Business" version of WhatsApp Ireland Limited, Dublin 2, Ireland. We use this for smooth communication (Art. 6(1)(f) GDPR) or contract processing (Art. 6(1)(b) GDPR). WhatsApp uses end-to-end encryption, but collects metadata (e.g., phone numbers, time) which may be transferred to the USA. Privacy policy: https://www.whatsapp.com/legal/privacy-policy.
10. Hosting and Data Processing (Wix & IONOS)
-
Wix.com: Our website is hosted on the Wix.com Ltd. platform (Tel Aviv, Israel). A Data Processing Agreement (DPA) has been concluded with Wix. For Israel, there is an adequacy decision by the European Commission guaranteeing a level of data protection equivalent to the EU.
-
IONOS / PHP Backend: For the secure processing and storage of our booking data (MySQL database), we use servers provided by 1&1 IONOS SE (Montabaur, Germany). Data transmission is encrypted. This processing is based on a DPA according to Art. 28 GDPR.
11. Legal basis for the processing Art. 6(1) lit. a GDPR serves as the legal basis for processing operations for which we obtain consent. If processing is necessary for the performance of a contract, it is based on Art. 6(1) lit. b GDPR. If subject to a legal obligation, it is based on Art. 6(1) lit. c GDPR. In rare cases, it may be based on vital interests (Art. 6(1) lit. d GDPR) or legitimate interests (Art. 6(1) lit. f GDPR).
12. The legitimate interests pursued by the controller Our legitimate interest is to carry out our business in favor of the well-being of all our employees and the shareholders.
13. Period for which the personal data will be stored The criteria used to determine the period of storage of personal data is the respective statutory retention period. After expiration, corresponding data is routinely deleted.
14. Provision of personal data as statutory or contractual requirement We clarify that the provision of personal data is partly required by law (e.g., tax regulations) or can result from contractual provisions. Non-provision would result in the contract not being concluded.
15. Existence of automated decision-making As a responsible company, we do not use automatic decision-making or profiling.