Privacy Policy

1. Controller

Franz und Herbert Loitzl OG (Snow & Mountain Sports), Lichtersberg 87, 8992 Altaussee, Austria
Email: office@snow-mountain.at, Phone: +43 (0) 3622 71 310

2. Hosting and server log files

This website is hosted by Hostinger (Hostinger International Ltd., Cyprus; the servers are located in Frankfurt am Main, Germany). When you visit the site, the host automatically collects technical data (IP address, date and time of access, page requested, browser type, referrer) in server log files. These serve the technical provision and security of the website (Art. 6(1)(f) GDPR), are not merged with other data sources and are deleted after 14 days at the latest. A data processing agreement is in place with the host.

3. Cookies and consent

We use technically necessary cookies (e.g. for the language selection trp_language and to store your cookie settings cmplz_*). We only load third-party content (see items 7 to 9) once you have agreed in the cookie banner. You can change your choice at any time via the “Cookie settings” link in the footer. Consent is managed with the WordPress plugin Complianz, which does not transmit data to third parties. An overview of all cookies is available in the Cookie policy.

4. Contact form and e-mail

If you use our contact form or write to us, we process the data you provide (name, email address, optional phone number, subject, message) solely to handle your enquiry (Art. 6(1)(b) or (f) GDPR). The message is sent to us by email and is not stored on the web server. We delete enquiries once they have been dealt with, and after 12 months at the latest, unless statutory retention obligations apply.

5. Course enquiries and booking app

For course enquiries and course organisation we use the ski school's booking app (app.snow-mountain.at). The booking form is embedded on the “Ski & Snowboard Lessons” page (iframe); when it loads, your IP address is transmitted to the operator of the app.

Data: Name, e-mail address and phone number of the legal guardian or guest; for children name, age and skiing ability; requested courses, course days and times; voluntary notes about the child; payment status (payment is made on site); cancellations and attendance; optionally the consent to photos.

Purpose and legal basis: Performance of the contract and course organisation (Art. 6(1)(b) GDPR), compliance with legal obligations such as bookkeeping (point (c)), photos only with your consent (point (a), revocable at any time). Confirmation, cancellation and reminder e-mails are part of contract handling. After the course we may ask you for a short review; you can unsubscribe at any time (Art. 6(1)(f) GDPR).

Recipients: Our ski instructors only see what they need for the lesson in their group (name and age of the children, skill level, parents' phone number for emergencies). We do not pass children's data on to third parties. Technical service providers (operation of the app, database, email delivery) process data on our behalf on the basis of data processing agreements: Lovable Labs Sweden AB, Stockholm, Sweden (operation of the app; database, sign-in and email delivery via the Lovable Cloud platform, which is built on Supabase infrastructure). Further information: lovable.dev/privacy and supabase.com/privacy. Where data is processed outside the EEA in this context, the transfer is based on the EU Standard Contractual Clauses.

Retention: We store booking data for the duration of the season and the billing process; data required for accounting is kept until the statutory retention period of seven years has expired (§ 132 BAO). We then delete or anonymise children's data, or earlier on request, 24 months after the last booking.

6. Registration of instructors

Instructors can register in the app. We process their name, e-mail, phone, date of birth, social security number, address and qualification. The purpose is employment, scheduling and payroll (Art. 6(1)(b) and (c) GDPR). Only the person concerned and the ski school management can see this data. We keep it for the duration of the cooperation and afterwards for as long as statutory retention periods require.

7. Ski rental: online check-in

For the online check-in of our ski rental we use Skipline (www.skipline.me). When the page loads, your IP address is transmitted to the provider; we process the data entered there (name, contact details, body data for binding adjustment, equipment requests) to perform the contract (Art. 6(1)(b) GDPR). You can find further information on data processing in the provider's privacy policy at www.skipline.me.

8. Google Maps

On the “Contact” and “Altaussee” pages we embed map material from Google Maps, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The map is only loaded after you have given your consent in the cookie banner (Art. 6(1)(a) GDPR). Your IP address is transmitted to Google; processing may also take place in the USA (EU-US Data Privacy Framework). Further information: Google Privacy Policy.

9. Live webcam and weather data

On the home page and the “Altaussee” page we show the current image of the Loser webcam from Panomax (Panomax GmbH, Salzburg, Austria). The image is loaded directly from the provider's server; your IP address is transmitted to Panomax (Art. 6(1)(f) GDPR, interest in current snow and weather information). We link weather and snow reports to bergfex.com and lawine.steiermark.at; when you click, the privacy notices of the respective providers apply.

10. Multilingual website

The English version of the website is provided with the WordPress plugin TranslatePress. The plugin stores your language selection in a cookie (trp_language) on your device; no data is transferred to third parties.

11. External link (Facebook)

We link to our profile on Facebook (Meta Platforms Ireland Ltd.). No plugins or pixels of this service are embedded. When you click the link you leave our website; Meta’s privacy policy applies.

12. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to the processing of your personal data. You may withdraw consent at any time with effect for the future. To do so, contact us at the address given above. You also have the right to lodge a complaint with the Austrian Data Protection Authority (Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at)

13. Changes to this privacy policy

We update this privacy policy when our website or the legal requirements change. Last updated: October 2026.