Privacy policy

In short: we only process what your booking requires. This site sets no advertising or analytics cookies, loads no fonts from third-party servers and embeds no social networks. During a normal visit your browser only contacts our server.

This translation is provided for convenience. The German version is the legally binding one.

Controller

Visiting the website

When you visit, our server processes technically necessary data: IP address, time, page requested, browser type. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). These logs are deleted after 14 days and are not combined with other data.

Cart

Your selection stays exclusively in your browser (localStorage), not on our server. It is discarded automatically after seven days and can be removed at any time with “Empty the cart”. This is technically necessary storage for a function you requested.

Booking and contract

For a booking we process name, email, phone number, billing and where applicable accommodation address, plus details about the person using the equipment (age, height, weight, shoe size, skier type). We absolutely need the physical details to set the binding safely to ISO 11088; without them we are not allowed to hand over the equipment. The legal basis is performance of the contract (Art. 6(1)(b) GDPR); retention follows tax and commercial law periods (seven years, § 132 BAO).

Payment

Payment is handled by Viva Payment Services S.A. (viva.com). When paying you are taken to their page; card and payment data never reach us. We transmit name, email, phone number, country and the amount. viva.com is independently responsible for this: viva.com/de-at/privacy-policy

Ski lessons

We read the course data (names, times, prices) from book2ski.com; no data about you is transmitted in the process. The same applies to the course images: they are hosted at book2ski but fetched by our server and delivered by us. book2ski therefore only ever sees our server, never your IP address. If you book a course, we pass the details needed to run it (participant names, course, date, ability) to the Skischule Rot-Weiss-Rot Alpendorf, which teaches the lesson. The legal basis is performance of the contract.

Till system

Stock, prices and the reservation run through our own till system, operated on our server in Austria. There is no disclosure to third parties for this.

Fonts

All fonts are hosted on our server; there is no connection to Google Fonts. We do not embed maps, we only link to Google Maps.

WhatsApp

Our phone number is linked on this site as a WhatsApp contact. That is an ordinary link, not an embedded window and not a script: as long as you do not tap it, no connection to WhatsApp is made and WhatsApp learns nothing about your visit. If you do tap it, WhatsApp opens and from that point the privacy policy of WhatsApp Ireland Ltd., a Meta company, applies: whatsapp.com/legal/privacy-policy-eea . We only see what you write to us. If you would rather not, just call us or send an email.

Guest reviews from Google

Our Google reviews appear on the home page. The key point: your browser does not connect to Google. Our server in Austria fetches the reviews at most twice a day via the Google Places API and delivers them to you as finished text. Google learns neither your IP address nor that you are visiting this site.

That is the difference from an embedded review widget of the kind the previous site used: such a widget loads third-party JavaScript into your browser and inevitably transfers your data to the provider. We fetch the data ourselves instead. That is why you see the reviews without consenting; there is nothing for you to consent to. The legal basis for our own retrieval is our legitimate interest in showing customer voices (Art. 6(1)(f) GDPR); your data plays no part in it.

External content and your consent

As a rule there is none: fonts, reviews and course images all come from our server. If the business ever adds content that your browser has to fetch itself, a placeholder appears in its place first, naming the provider, the purpose and the data transferred. It is only loaded once you agree. If a page has nothing of the kind, we do not ask: no banner appears, because there is nothing to decide.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021). It is voluntary: if you decline, the site keeps working in full, including booking and payment.

Record and withdrawal. Your decision is stored in your browser with a timestamp and the text version (2) (localStorage, key sb-consent) and is valid for one year. It is not stored on our server, so we create no further file about you through your consent. If what is being consented to changes, we ask again. You can withdraw at any time; withdrawal takes effect for the future.

Open or change settingsWithdraw consent

No transfer to third countries

There is no transfer of your personal data to the USA or any other third country. Google is queried by our server with no reference to you at all; book2ski.com is in the EU; payment is handled by viva.com within the EEA. The WhatsApp link is not affected, because it only does anything once you click it yourself, and from then on our site is no longer involved. Should that ever change (through an embedded widget or a US analytics tool, say), it will be stated here and asked here beforehand.

Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection. Just get in touch at rent@snow-base.at. You can also complain to the Austrian Data Protection Authority (dsb.gv.at).

Changes

If we add new features that process data, we update this text. Last updated: September 2026.