General information on the processing of personal data

Declaration made in accordance with Art. 13 of EU Regulation 2016/679 issued by theEuropean Parliament and Council on 27 April, 2016 concerning the protection of naturalpersons as regards the processing of their personal data, as well as the free circulation of suchdata, and which abrogates Directive 95/46/EC (General Regulations for the protection of data).

In accordance with the EU General Regulations for the protection of data (Regulation 2016/679issued by the European Parliament and Council), please be informed that:

Name and contact details of the controller

The data controller is HGV-Service Cooperativa, Via Macello 59, I-39100 Bolzano, Tel. 0471 317 840, e-mail: info@bookingsouthtyrol.com.

Personal data

The following are considered as being your personal data:

• Your contact details, in particular first name, last name, e-mail address, telephone number and booking data

Motives for the processing of personal data and legal ground for their processing

The data provided will be processed for the following purposes:

• Provision of pre-contractual and contractual services with regard to registration and participation in the prize contest;
• Marketing purposes: the prize contest and the prizes are promoted in various media and social networks; this may include the publication of personal data of the winners;
• Compliance with legal obligations;

Legal ground for the processing of your data:

• compliance with pre-contractual and contractual measures and obligations (art. 6, para. 1, lit. b of the GDPR);
• the consent you have obtained (art. 6, para. 1, lit. a of the GDPR);
• statutory or legal obligations (art. 6, para. 1, lit. c of the GDPR);

Competition

The provision of your personal data in the course of the competition is necessary in order to participate in the competition and to claim the corresponding contractual services. We need your contact information mainly to be able to contact you in the event of a win. If you do not provide us with your contact details, you will not be able to participate in the prize contest. Thelegal basis for the processing of your personal data is the fulfilment of pre-contractual and contractual measures.

The duration of storage shall be measured in accordance with the applicable statutory storage obligations and legal obligations. Your personal data, which are processed on the basis of a legal provision or contractual obligation, will be stored for the period of time strictly necessary for processing.

The data processed on the basis of your consent will be stored until you revoke your consent.

The winners

The personal data of the winners, in particular the name and the pictures, will be published in various media and social networks. This allows all participants to be informed of the outcome ofthe prize contest.

The legal basis for the processing of personal data is the consent of the winners within the meaning of art. 6, para. 1, lit. a of the GDPR.

Recipients of the personal data

In general, the personal data are processed within the HGV-Service Cooperativa taking into account the permissible purposes of use. We reveal your personal data exclusively for the purposes described above.

Rights of the data subjects

Right of access by the data subject: In accordance with art. 15 of the GDPR, you are entitled to be informed of the personal data processed, their provenance, nature, possible forwarding to third parties (in such case identifying the same) and their utilization.

Right of rectification and erasure: In accordance with art. 16 of the GDPR, you may at any time require the rectification or completion of your personal data. Similarly, in accordance with art. 17 of the GDPR, you are entitled to require the erasure of the data. In the presence of publisheddata, you also enjoy the "right to be forgotten", i.e. to request that the measures necessary to erase all the links, copies, replications and similar.

Right to object: You may at any time exercise your right to object as described in art. 21 of the GDPR and modify or entirely revoke your consent for the future.

Right of restriction (or blocking) of processing: In accordance with art. 18 of the GDPR, you mayrequire the restriction of the processing of your personal data. The relevant data may be processed only subject to specific prior consent, i.e. their processing will be effectively limited.

Right to data portability: In accordance with art. 20 of the GDPR, you are entitled to request and receive the personal data provided by yourself in a structured, commonly used and machine-readable format, and you have the right to require their transmission to another controller.

In accordance with art. 77 of the GDPR, you have the right to lodge a complaint with thesupervisory authority.