Responsable for data processing
Hotel Bemelmans Post**** - Family Senn
Via del Paese 8 - 39054 Collalbo, Ritten - Alto Adige - Italy
+39 0471 356 127 - info@bemelmans.com

Type of data collection and purpose of processing
Pursuant to Art. 13 of the European General Data Protection Regulation, we process the following data:
- your basic data (first name, surname, address, telephone, email, date of birth, place of birth, language etc.)
- data contained in your travel documents and identity cards
- data on payments you have made, EC cards, credit cards and bank cards you hold
- the period of stay you have requested as well as your preferences associated with your stay
The data are saved, processed and, inasfar as prescribed by law, passed on to third parties (e.g. public authorities, tourist boards) for the purpose of providing our services. Your data are not passed on to third countries.
Should you refuse to release basic data, travel document data and bank data, it will not be possible to fulfil the contractual obligations and accommodate you at our establishment. We do not apply profiling and automated decisions.

The legal basis for data processing is the following:
- the fulfillment of our pre-contractual and contractual duties towards you
- your provided consent
- legal, contractual or other legitimate duties on our part (e.g. documentation regulations and duties concerning accounting, tax and customs law, contracts, registration, or legal disputes)
- our authorised interests (e.g. improving our customer service, also when it comes to direct marketing or our perceived legal interests).
The duration that data are saved is calculated according to the duration of our business relationhip, the consent provided by you, as well as our duties regarding data storage and legal requirements.

Your rights:
You can ask for your personal data saved by us to be disclosed free of charge at any time. As the party concerned, you can also exercise the right to withdrawal, disclosure, deletion, rectification, restriction and transfer of your personal data, as long as no obligation to store them on our part opposes that right. On exercising your right to withdrawal, all of your data will be irreversibly deleted, as long as no overriding legal requirements are breached.

For further information on your rights as the concerned party, please contact us at the email adress above.
We will be happy to help you. The supervisory authority “Garante per la protezione dei dati personali“ is responsible for complaints: Piazza di Monte Citorio n. 121 00186 ROMA, fax: (+39) 06.69677.3785, telephone: (+39) 06.696771, email: garante@gpdp.it.

The reproduction of use of images and/or text from this website in other electronic or printed publications is prohibited unless express permission has been granted. We accept no liability for the currency, accuracy and completeness of the information provided on this website. This also applies to the content of all external websites to which we provide a link.
Enquiry and availability check form
Using the form on this website, you can check availability and send us a non-binding enquiry. For this purpose, we process:
  • First and last name
  • Title
  • Email address
  • Phone number
  • Desired period of stay, number of persons, desired room and board
  • Your message
  • Your choice regarding the newsletter and advertising measurement (see below)
We use this data to respond to your enquiry and prepare an offer for you. The legal basis is the performance of pre-contractual measures taken at your request (Art. 6(1)(b) GDPR).
The form and the availability check are technically operated by our provider 99tales GmbH (Advertos), Via Vittorio Veneto 67, 39042 Bressanone (BZ), Italy, which receives the enquiry on our behalf and forwards it to us (Art. 28 GDPR).
Newsletter: you will only receive news and offers if you expressly select this in the form (Art. 6(1)(a) GDPR). You can withdraw your consent at any time, for example via the unsubscribe link in every message or by sending us an email.
Advertising measurement of the enquiry: only if you also consent to advertising measurement in the form, we transmit data from your enquiry to our advertising partners (Google, Meta) in order to measure the success of our ads: your contact details exclusively in pseudonymised form as irreversible check values (hash values), IP address and browser identifier unchanged. The legal basis is your consent (Art. 6(1)(a) GDPR). Without this consent, no transmission takes place; your enquiry will still be handled as usual.

Direct booking via the booking engine
On this website you can make a direct, binding booking via a booking engine.
The booking engine is operated by HGV-Service Genossenschaft, Via Macello 59, 39100 Bolzano (BZ), Italy (VAT no. 00576540215), under the name “Booking Südtirol”. When the page loads, the content of the booking engine is loaded from the operator’s servers, which thereby receives your IP address and technical information about your browser.
The data you enter there – period of stay, number of persons, choice of room and board, name and contact details and, if applicable, payment details – is processed by HGV-Service Genossenschaft and transmitted to us as the accommodation you have booked. The operator acts as an independent controller and not as our processor; for this processing, its privacy policy applies: https://www.bookingsuedtirol.com/it/privacy. The legal basis for the integration on this website is the performance of the contract requested by you or of pre-contractual measures (Art. 6(1)(b) GDPR); the booking engine therefore does not depend on your consent.
One part of the booking engine, however, requires consent: it sets the cookie bs_widget_promotion (duration 30 days), which it uses to remember which campaign you came from. This cookie is written only if you have consented to the “Booking Südtirol” service in the cookie banner (Art. 6(1)(a) GDPR). Without consent it is not set, and booking works just the same.
The booking engine also reports the steps of a booking to this website so that – with your consent – we can measure the success of our ads. Which of this data is transmitted to third parties is stated in the section “Services we use only with your consent”; without consent, none of it is transmitted to third parties.
Independently of this, we ourselves count whether a booking or an enquiry was made via the booking engine – without name, contact or payment details; details in the section “Our own campaign and availability measurement”.

Cookie banner and consent management
On your first visit, we use a banner to ask which of the services described below you consent to. Everything that is not technically necessary remains deactivated until you give your consent. You can reject everything with a single click, and the website remains fully usable.
For this purpose we use the software “CCM19”, operated by our provider 99tales GmbH (Advertos), Via Vittorio Veneto 67, 39042 Bressanone (BZ), Italy on its own infrastructure; no data is transmitted to the software manufacturer. A record of consent is stored: a random identifier, the time, the services you have consented to or rejected, the version of the banner text, as well as the language and technical information about your browser. Your choice is also stored in your browser.
The legal basis is our legal obligation to be able to prove the consents given (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR). More information: https://advertos.it/consent-manager-privacy.
You can change or withdraw your choice at any time: Cookie settings. The link is also at the bottom of every page.

Our own campaign and availability measurement
To understand which of our ads lead to enquiries and which periods of stay are in demand, we carry out our own measurement together with our provider 99tales GmbH (Advertos). It takes place entirely via this website; no data is passed on to advertising networks for this purpose.
Without consent (shown in the cookie banner as “Advertos Marketing Essentials”):
  • If you reach this website via a campaign, we store for the duration of the visit the general campaign data contained in the address called up (source, medium, campaign name and number) and the host name of the referring page – no click identifiers. This data remains in your browser and is only transmitted together with an enquiry submitted by you, or with a booking or enquiry via the booking engine.
  • If you complete a booking or submit an enquiry via the booking engine, this website notifies us: whether it is a booking or an enquiry, the booking number, the booking value and currency, as well as the page on which it took place – together with the campaign data mentioned above, if present. Name, contact and payment details are not included, and nothing is stored in your browser for this purpose. This way we see how many direct bookings our advertising generates.
  • We statistically evaluate availability checks (requested period, number of persons, result) – without an identifier and without storing your IP address.
The legal basis is our legitimate interest in evaluating the success of our advertising and demand in aggregated form (Art. 6(1)(f) GDPR).
Only with your consent (Art. 6(1)(a) GDPR):
  • “Verfügbarkeits-Analyse”: your browser receives a random identifier with which we can attribute several availability checks to the same browser. It contains neither your name nor your email address.
  • “Advertos Marketing Extended”: we additionally store the ad click identifier (e.g. gclid, fbclid), the exact ad parameters and the full address of the referring page, and we count visits even when no enquiry is submitted.
If you submit an enquiry or book via the booking engine, this data is linked to it. If you withdraw your consent, the identifiers in your browser are deleted.

Services we use only with your consent
The following services remain deactivated until you give your consent in the cookie banner. In each case, the legal basis is your consent (Art. 6(1)(a) GDPR). You can activate and deactivate them individually and withdraw your consent at any time: Cookie settings.
For users in the European Economic Area, the provider of the Google services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information: https://policies.google.com/privacy.

Google Tag Manager
With Google Tag Manager, we manage the Google and advertising services listed below. It does not set cookies or create profiles itself, but loads the other services. It is only loaded after your consent.

Google Analytics 4
Google Analytics shows us how the website is used: which pages are visited, where visitors come from, and whether they check availability, submit an enquiry or book directly. For this purpose, the cookies _ga and _ga_* (duration 2 years) with a random identifier are set. According to Google, IP addresses are not stored in Google Analytics 4.

Google Ads – conversion measurement
We place ads on Google. If you click on one of these ads, the “Conversion Linker” stores the click identifier in the cookies _gcl_aw and _gcl_au (duration 90 days). If you subsequently submit an enquiry, Google learns that the ad generated it. If you complete a booking via the booking engine, the booking value, the currency and the booking number are additionally transmitted to Google – no name and no contact details. From Google we only receive aggregated analyses, no data on individual persons.

Google Ads – enhanced conversions
So that enquiries can be attributed to an ad even when cookies are not sufficient, when the enquiry form is submitted, your email address, phone number and name are converted in your browser into irreversible check values (SHA-256 hashes) and transmitted to Google in this form. Google compares them with the check values of registered Google accounts. This data is not transmitted to Google in plain text.

Google Ads – remarketing
With remarketing, we can show ads again, on other websites and in Google Search, to people who have visited this website. For this purpose, Google recognises your browser via cookies; if you are signed in to Google, Google can link the visit to your account.

Meta Pixel (Facebook, Instagram)
The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. The Meta Pixel informs Meta about page views and enquiries submitted, so that we can measure the success of our ads on Facebook and Instagram and show ads again to visitors of this website there. For this purpose, the cookie _fbp (duration 90 days) is set; after a click on an ad, also _fbc. If you are signed in to Facebook or Instagram, Meta can link the visit to your account. Further information: https://www.facebook.com/privacy/policy/.

What this website stores in your browser
The following overview lists everything that this website saves directly in your browser. The cookies of the third-party providers mentioned above are described under the respective service; the complete and constantly updated list can be found in the Cookie settings under “Details”.
Name Type Duration Purpose Consent required
ccm_consent Local Storage 1 year Stores your choice in the cookie banner, so that we do not have to ask you on every visit. no
bw_tracking_params Session Storage until the browser tab is closed Remembers, for the duration of the visit, which campaign you came from, so that an enquiry can be attributed to the correct campaign. Without consent only general data (source, medium, campaign, host name of the referring page); click identifiers only after consent. no
bw_visitor_id Cookie 90 days Random identifier with which we recognise availability checks made from the same browser. The duration is renewed on every visit. yes – “Verfügbarkeits-Analyse”
bw_session Cookie 30 minutes Random identifier for a continuous visit, so that it is counted only once. yes – “Advertos Marketing Extended”
bw_touch Cookie 30 minutes Check value of the campaign parameters of the current visit, so that the same ad click is not counted more than once. Contains no click identifier. yes – “Advertos Marketing Extended”

Transfer to countries outside the EU
For the following recipients, processing in the United States cannot be ruled out:
  • Google LLC, USA (parent company of Google Ireland Limited)
  • Meta Platforms, Inc., USA (parent company of Meta Platforms Ireland Limited)
These companies are certified under the EU-US Data Privacy Framework. For certified companies, the European Commission has found an adequate level of data protection (adequacy decision of 10 July 2023, Art. 45 GDPR). The current list of certified companies is available at https://www.dataprivacyframework.gov/list. In addition, the providers have included the European Commission’s standard contractual clauses in their contracts.

Retention period
We retain the data of your enquiry for as long as necessary to handle the enquiry and any resulting booking. If a booking is made, the retention periods under civil and tax law also apply. Data based on your consent is processed until you withdraw your consent. The retention period of individual cookies and browser entries is stated in the section “What this website stores in your browser”.

Your rights
You have the following rights against us with regard to your personal data:
  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing based on our legitimate interest (Art. 21 GDPR)
  • Withdrawal of a consent given, with effect for the future (Art. 7(3) GDPR)
A simple message to info@bemelmans.com is sufficient. The provision of data is voluntary; however, without the data requested in the enquiry form we cannot respond to your enquiry. No automated decision-making within the meaning of Art. 22 GDPR takes place.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence. The authority responsible for us is: Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome, Italy, https://www.garanteprivacy.it.

Updates and changes
We update this privacy notice when the services used or the legal framework change. The version published on this page from time to time applies. Last updated: 29/09/2026.
On this page, CCM19 hides the banner automatically because it is set as the privacy or legal notice link. You can still open it via “Cookie settings”.
The reproduction of use of images and/or text from this website in other electronic or printed publications is prohibited unless express permission has been granted. We accept no liability for the currency, accuracy and completeness of the information provided on this website. This also applies to the content of all external websites to which we provide a link.