Privacy

Protecting your personal data is an important concern for me as a self-employed mountain and ski guide. In this privacy policy, I explain which personal data I collect, how I use it, and how I protect your data.

1. Data Controller

The person responsible for the collection, processing and use of your personal data in accordance with applicable data protection laws is:

Ludwig Sandhacker
Mühlbachweg 10
6600 Lechaschau
Austria

Tel.: +43 664 75109630
Email: info@bergundskifuehrer.at

2. Collection and Processing of Personal Data

I collect and process personal data that you voluntarily provide to me, for example when submitting an enquiry through my website. This includes in particular:

  • First name
  • Last name
  • Email address
  • Telephone number
  • For tour requests: selected tour, preferred and optional alternative date and number of participants; for fixed-date bookings, also the booked date, price and processing status
  • Optional information about mountain experience, wishes and your message

3. Purpose of Data Collection and Use

I use the collected data exclusively to process your enquiries, communicate with you and provide the agreed services (e.g. bookings for guided tours). The data is therefore used for contract processing and communication with you as a customer.

4. Data Security

I place great importance on protecting your personal data. Access to stored inquiry and booking data is restricted to authorised persons. Booking changes and technical mail submission statuses are also stored for processing and notifications. I use appropriate technical and organisational security measures for this purpose.

5. Disclosure to Third Parties

I do not disclose your personal data to third parties unless this is necessary for the performance of the contract or required by law.

6. Data Retention

Your data is stored only for as long as necessary to fulfil the purposes described above or for as long as statutory retention obligations apply.

7. Your Rights

You have the right to request information about the personal data stored about you at any time. You may also request the correction, deletion or restriction of the processing of your data. In addition, you may object to the processing of your personal data.

8. Legal Bases

Enquiry and booking data are processed to take steps prior to entering into a contract and to perform the contract (Art. 6(1)(b) GDPR). Storage required by statutory retention obligations is based on Art. 6(1)(c) GDPR. The secure and stable operation of the website (server log files, protection of the forms against misuse) is based on my legitimate interest (Art. 6(1)(f) GDPR).

9. Hosting and Server Log Files

This website is hosted by Hostinger International Ltd. (Larnaca, Cyprus). When you visit the website, the web server processes technically necessary connection data such as IP address, date and time, requested page, browser type and referrer in server log files. This data is used solely for security and error analysis and is not combined with other data. Hostinger processes this data as a processor on my behalf.

10. Enquiry Forms and Email Delivery

When you submit an enquiry, contact or booking form, your details are stored in my database and both you and I receive a confirmation by email. Emails are sent through Hostinger’s email service. To protect against spam and misuse, I do not store IP addresses in plain text, only as a non-reversible hash and only for a short time to limit the number of requests.

11. Cookies and Local Storage

This website does not use analytics, tracking or advertising cookies. When you open a form, a technically necessary session cookie (FORMSESSID) is set to protect against forged form submissions; it is deleted when you close your browser. If you choose the light or dark display mode, this setting is stored locally in your browser (local storage) and is not transmitted to me.

12. Maps

For the tour map, map tiles and font data are loaded from OpenFreeMap (tiles.openfreemap.org), based on OpenStreetMap data. For technical reasons, your IP address is transmitted to the OpenFreeMap server. The map is only loaded on pages that contain a tour map.

13. Right to Lodge a Complaint

If you believe that the processing of your data violates data protection law, you can lodge a complaint with the Austrian Data Protection Authority (Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at).

14. Contact

If you have any questions regarding data protection or wish to exercise your rights, you can contact me at any time using the contact details provided above.

15. Changes to this Privacy Policy

I reserve the right to update this privacy policy when necessary in order to adapt it to changes in legal or technical requirements.

16. Google Reviews

In the “What my guests say” section, I display public reviews of my Google business listing. When this section becomes visible, my server retrieves the data through the Google Places API. The API key remains on my server. Review text, ratings and author information are not permanently stored in my database or an application content cache.

Author profile images supplied by Google are loaded from Google servers, which receive connection data including your IP address. Profile and original-review links lead to Google Maps. Google selects and orders the reviews; I do not automatically translate them.

For more information, see Google’s Privacy Policy and the Google Maps Terms of Service.

Last updated: October 2026