Privacy Policy

General

We, the Snow & Fun ski school (hereinafter referred to as "we" or "us"), take the protection of your personal data very seriously. We process personal data exclusively in accordance with the General Data Protection Regulation (GDPR), the Data Protection Act (DSG), and the Telecommunications Act (TKG).

This privacy policy informs you about the type, scope and purpose of the processing of personal data on our website.

Responsible body

Snow & Fun Ski School
Dorfstraße 204 | 5754 Hinterglemm
Telephone: +43 6541 7511
Email: snow-fun@skischule.com
Website: https://www.skischule.com/

Contact Privacy Policy:
Email: snow-fun@skischule.com

Processing of personal data

We only process personal data if at least one of the following legal bases applies:

Article 6 paragraph 1 letter a GDPR (consent)
Article 6 paragraph 1 letter b GDPR (contract/contractual measures, e.g. course booking)
Article 6 paragraph 1 letter c GDPR (legal obligation)
Article 6 paragraph 1 letter f GDPR (legitimate interest, e.g. IT security, abuse prevention)

Website hosting

Our website is hosted by the following provider:
[Hosting provider, address/URL]

Server log files are processed for the purpose of technical operation and security.

Server log files

When you visit our website, information transmitted by your browser is automatically collected. This data is technically necessary to provide the website and ensure system security.

Data processed:

IP address (possibly shortened/encapsulated, depending on hosting)
Date and time
accessed page/file
Browser type and version
operating system
Referrer URL
Hostname

Purpose: Operation, security, fault analysis, defense against attacks
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in secure operation)
Storage duration: typically [e.g. 14 days] (please adjust to your host)

Contact

When you contact us, we process your information to handle your request.

Data categories: Name, email address, phone number, message content, and, if applicable, course preferences.
Purpose: Processing your request, communication
Legal basis: Art. 6 para. 1 lit. b GDPR (pre-contractual/contractual) or Art. 6 para. 1 lit. f GDPR (general inquiries)
Storage period: as long as required; thereafter according to statutory retention periods or internal deletion concepts.

Course inquiries / bookings via the website

If course inquiries or bookings are possible via the website, we process data for processing purposes.

Data categories: Name, contact details, participant data (e.g. age/performance level), desired period, payment details (if applicable).
Purpose: Organization and execution of the course, billing
Legal basis: Art. 6 para. 1 lit. b GDPR; where applicable, Art. 6 para. 1 lit. c GDPR (e.g. tax obligations)
Recipient: possibly booking system provider, payment service provider
Storage period: according to legal retention requirements (e.g. tax/company law)

Cookies & Consent Management

Our website uses cookies and similar technologies.

Technically necessary cookies: required for the operation of the website
Legal basis: Art. 6 para. 1 lit. f GDPR in conjunction with § 165 TKG (legitimate interest/technical necessity)
Optional cookies (e.g., statistics/marketing): are only set with your consent.
Legal basis: Art. 6 para. 1 lit. a GDPR in conjunction with § 165 TKG

If a cookie banner/consent tool is used:
Usercenticks – this allows you to adjust or revoke your consent at any time.

Integration of third-party content

When embedding external content, your IP address may be transmitted to the third-party provider.

Purpose: Display of maps/videos/fonts etc.
Legal basis: Consent (Art. 6 para. 1 lit. a GDPR), unless technically necessary
Provider: Google Ireland Limited

Recipients of data

Your data will only be shared if necessary, e.g. to:

IT/hosting service provider (data processor)
Booking/CRM systems (if used)
Payment service provider (if used)
Tax advice/authorities (legal obligations)

We conclude data processing agreements with processors in accordance with Art. 28 GDPR.

Storage duration

We only store personal data for as long as it is necessary for the purposes for which it was collected or as required by law. After that, the data is deleted or anonymized.

Your rights

Under the GDPR, you have the following rights in particular:

Right of access (Art. 15 GDPR)
Rectification (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Right to object to processing (Art. 21 GDPR)
Withdrawal of consent (Art. 7 para. 3 GDPR) – with effect for the future

Please direct your inquiries to: snow-fun@skischule.com

Right to lodge a complaint with the data protection authority (Austria)

If you believe that the processing of your data violates data protection law, you have the right to lodge a complaint with the Austrian Data Protection Authority:

Austrian Data Protection Authority
Barichgasse 40–42, 1030 Vienna
Website: https://www.dsb.gv.at

Data security

We implement appropriate technical and organizational security measures to protect your data against loss, manipulation and unauthorized access.

Changes to this privacy policy

We reserve the right to amend this privacy policy to ensure it always complies with current legal requirements or to implement changes to our services.