Name: Rautner 1808
Address: Rautner 1808, Rentscher Straße 74, Bozen, Südtirol, 39100, IT
Telephone: +39 0471 279000

This Privacy Policy describes which personal data is processed on the website Rautner 1808, for what purpose, and on which legal basis. It applies to the website as well as to the associated communication channels (contact form, e-mail, newsletter, WhatsApp). Processing takes place in accordance with the GDPR (EU 2016/679) and the Italian data protection law (D.Lgs. 196/2003 as amended by D.Lgs. 101/2018).

1. Data Controller

Data Controller within the meaning of the GDPR (Titolare del trattamento):

Rautner 1808 ??

Rautner 1808
Rentscher Straße 74
I-39100 Bozen, Südtirol

E-mail: info@rautner1808.com

Phone: +39 0471 279000

Contact for data protection matters: ??

2. Which data is processed

2.1 Server log files

When the website is accessed, the hosting provider automatically processes the following data: IP address (shortened), date and time of access, requested page, browser and operating system information, referrer URL, HTTP status code.

Purpose: stable and secure operation, detection and defence against attacks, technical error analysis

Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

Storage period: only for the period strictly necessary for technical error analysis

2.2 Contact requests

When you contact us via the contact form or by e-mail, the following data is processed: first and last name, e-mail address, phone number if applicable, content of the message, time of the request. To prevent spam, a pseudonymised cryptographic hash value of the IP address is generated; the IP address itself is not stored. If transmitted, we store general attribution data on the origin of the request (campaign parameters).

Purpose: processing the request and communication; evaluating the effectiveness of our own marketing measures

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measure) or Art. 6(1)(f) GDPR (legitimate interest)

Storage period: until the request has been conclusively resolved, unless statutory retention obligations apply

When you subscribe to the newsletter, the following data is processed: e-mail address (mandatory), first and last name (optional), time of subscription and confirmation (Double-Opt-In), IP address at the time of subscription, click and open statistics.

Procedure: entry of the e-mail address → confirmation e-mail with opt-in link → only after the click are you added to the distribution list.

Purpose: sending information, offers and news

Legal basis: Art. 6(1)(a) GDPR (consent)

Storage period: until consent is withdrawn; after unsubscribing, the e-mail address may be kept on a block list to prevent further mailings

Unsubscribe: via the unsubscribe link in every e-mail or by message to info@rautner1808.com

2.4 Communication via WhatsApp

When you contact us via WhatsApp (https://wa.me/390471279000?text=PRUEFEN), the following data is processed: phone number, WhatsApp profile name and possibly profile picture, message content, timestamp, status information.

Provider: WhatsApp Ireland Limited (part of the Meta group), Ireland

Purpose: direct communication, responding to requests, providing information

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measure) or Art. 6(1)(a) GDPR (consent when actively contacting us)

Transfer outside the EU: Meta may transfer metadata to the USA. Message content is end-to-end encrypted; metadata (phone numbers, timestamps, device information) is not.

Storage period: until the request has been conclusively resolved.

Alternative contact: e-mail at info@rautner1808.com or phone at +39 0471 279000. The transmission of sensitive data (health, payment information) via WhatsApp is not recommended.

WhatsApp privacy: whatsapp.com/legal/privacy-policy

2.5 Reach measurement

For the statistical analysis of reach, we operate privacy-friendly open-source analytics software on our own servers (Self-Hosting). The software works cookieless, without tracking cookies and without browser fingerprinting. No personal profiles are created, no cross-site tracking and no re-identification on the next visit takes place.

The following is processed: requested path, referrer, browser/device class, country code (no location), outbound clicks, defined custom events. The IP address is not stored; for session detection within one day the software generates a daily rotating hash.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest). As no personal data is processed, no consent is required.

Storage period: unlimited (aggregated, non-personal statistics)

2.6 Cookies

This website uses only technically necessary cookies. Anonymous visitors generally do not receive any cookies. Only when logging into the editorial area is a single, technically necessary session cookie set in order to ensure the secure authentication of the editorial team. This cookie is stored only for the duration of the respective session and is automatically deleted after logout or when the browser is closed.

No tracking, marketing or analytics cookies are used. A cookie banner is therefore not required (Provvedimento Garante 10 June 2021).

3. Data Processors

The following external service providers process data exclusively on behalf of the Data Controller on the basis of contracts pursuant to Art. 28 GDPR:

Hosting: Hosting provider with data centres in the EU

Transactional e-mail (confirmations, newsletter): ??

File storage (images, documents): Storage and delivery providers (object storage, CDN) in the EU

AI-assisted content processing (internal): AI language models from various providers, connected via an intermediary service. Only site content released by the editorial team is processed, no visitor data. Which models and providers are used depends on the task and may change.

4. Transfer outside the EU

A transfer to countries outside the EEA only takes place where an adequacy decision of the EU Commission exists, EU standard contractual clauses pursuant to Art. 46(2)(c) GDPR have been concluded, or another suitable safeguard pursuant to Chapter V GDPR is in place.

This affects the providers listed under point 3 insofar as they process data outside the EEA (in particular WhatsApp and AI services; depending on the chosen mail and storage provider, possibly others). Third countries may not offer a level of data protection equivalent to that of the EEA; in particular, local authorities may access data.

5. Storage periods at a glance

Personal data is stored only for as long as is necessary to fulfil the respective purpose of processing. Thereafter it is deleted, unless statutory retention obligations apply:

Server log files: only for the period strictly necessary for technical error analysis and to ensure system security.

Communication data (e-mail, form, WhatsApp): until the request has been conclusively resolved.

Newsletter data: until consent is withdrawn.

Contract and invoicing data: in accordance with the statutory retention periods (in particular under tax and commercial law).

6. Rights of the data subject

Pursuant to Art. 15–22 GDPR, data subjects have the following rights:

Access to the data being processed (Art. 15)

Rectification of inaccurate or incomplete data (Art. 16)

Erasure of data, unless statutory retention obligations apply (Art. 17)

Restriction of processing (Art. 18)

Data portability in a structured, machine-readable format (Art. 20)

Objection to processing on grounds relating to a particular situation (Art. 21); for direct marketing at any time without giving reasons

Withdrawal of consent given with effect for the future (Art. 7(3))

These rights can be exercised informally at: info@rautner1808.com

7. Right to lodge a complaint

There is a right to lodge a complaint with a data protection supervisory authority. In Italy the competent authority is:

Garante per la protezione dei dati personali Piazza Venezia 11, 00187 Roma garanteprivacy.it

8. Data security

Appropriate technical and organisational measures protect the data being processed: encrypted data transmission (HTTPS/TLS), access restricted to authorised persons, regular security updates, backups, pseudonymisation and anonymisation procedures.

9. Obligation to provide data

The provision of personal data is neither required by law nor by contract. However, without the data listed in the respective sections, certain functions (e.g. responding to enquiries, sending the newsletter) cannot be offered.

10. Automated decision-making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.

11. Minors

The services are not directed at persons under the age of 16. Data of minors is not knowingly collected without the consent of their guardians. Notifications of any transmission to the contrary are accepted at info@rautner1808.com; in that case the data will be deleted promptly.

12. Changes

This Privacy Policy is adapted in the event of a changed legal situation or changed services. The version published on this page from time to time applies.

Last updated: October 14, 2026

Privacy Policy