Data Controller Information
The data controller for processing your personal data is:

Piste to Powder | Mag. Florian Kraler
Address: Gilmstraße 12, 6700 Bludenz
Email: info(at)pistetopowder.com
Phone: +43 664 1746282

If you have questions about data protection or wish to exercise your rights, please contact us using the details above.

Cookies and Analytics
We use cookies and analytics tools to enhance website functionality and improve user experience. Detailed information about our use of cookies is provided in our Cookie Policy.

You can manage cookie preferences through your browser settings. For Google Analytics, you can disable tracking by installing the opt-out browser add-on provided by Google

This website is managed with the WordPress content management system and uses plugins tailored to its specific needs. Some plugins may also generate cookies, usually session cookies (e.g., Wordfence Security).

Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses cookies to analyze how you use the site. The information generated by the cookie is usually transmitted to a Google server in the USA and stored there.

To protect your privacy, we use IP anonymization. Within the EU or EEA, Google truncates your IP address before transmission. Only in rare cases will the full IP address be sent to Google in the USA and shortened there.

You can prevent the storage of cookies by configuring your browser settings. However, this may limit the functionality of this website. You can also prevent data collection by installing a browser add-on: Google Analytics Opt-Out or opting out on the website.

Newsletter
If you subscribe to our newsletter, you will periodically receive emails with informative or promotional content. To send the newsletter, we share your name, email address, and, if applicable, gender, with our newsletter provider, Rocket Science Group (Mailchimp). You can unsubscribe at any time by clicking the “Unsubscribe” link at the bottom of the newsletter or contacting us directly.

YouTube Integration
Our website uses plugins from YouTube, operated by Google. When you visit a page with an embedded YouTube video, a connection is established with YouTube servers, and information about your visit is transmitted. If you are logged into your YouTube account, your browsing activity may be linked to your profile. You can prevent this by logging out of your YouTube account. For more information, refer to YouTube’s Privacy Policy.

Purpose and Legal Basis of Data Processing:
We process your data for the following purposes:

– Art. 6(1)(b) DSGVO – contract fulfillment, Art. 6(1)(c) DSGVO, Art. 6(1)(a) DSGVO: To provide and improve our guiding services, to handle bookings and client communication to comply with legal obligations, for marketing purposes, where consent has been provided

We only process data necessary for these purposes and ensure appropriate safeguards are in place.

Categories of Data Processed
We collect and process the following categories of personal data:

Contact Information: Name, address, phone number, email address.
Booking Information: Details about guiding services, payment information
Payment Information: Payment data is processed securely by our payment provider, Stripe.
Technical Data: IP address, browser type, and website usage (via cookies and analytics tools).
Consent Data: For marketing communications and optional services, where explicitly given.

Payments and Stripe
All payments made through our website are processed securely by our payment provider, Stripe, Inc. Stripe handles your payment data on our behalf, ensuring a secure transaction process.

When you make a payment, Stripe processes the following data:
Payment method details (e.g., credit card number, expiration date).
Billing information (name, address, email, etc.).
Stripe complies with GDPR and maintains high security standards. For more information, please review Stripe’s privacy policy here: Stripe Privacy Policy.

Recipients of Personal Data
Your data will only be shared when necessary for the provision of our services or when required by law. Recipients include:

Guides: Necessary booking details (e.g., name, contact number, guiding enquiries) are shared with your assigned guide for the duration of your booking.To ensure the safety and quality of our guiding services, we collect and use booking information and personal details such as your name, email address, phone number, and guiding enquiries. This information may be shared with your assigned guide for the duration of your booking and will be securely deleted afterwards, unless longer retention is required by legal obligations. This communication may occur via WhatsApp, a messaging service provided by WhatsApp Ireland Limited. WhatsApp processes data as an independent data controller and is committed to maintaining compliance with GDPR. You can review WhatsApp’s privacy policy here: WhatsApp Privacy Policy. Please note that WhatsApp’s servers may process data outside the EU/EEA. WhatsApp ensures adequate safeguards are in place, such as Standard Contractual Clauses, to protect data. If you do not wish for your data to be shared via WhatsApp, please inform us during the booking process so we can arrange an alternative communication method.

Service Providers: Third-party providers (e.g., payment processors, newsletter providers) acting as data processors under strict confidentiality agreements.

Authorities: When required to comply with legal obligations (e.g., tax authorities).

All data sharing is conducted in accordance with Art. 28 DSGVO with data processing agreements in place.

Data Retention Periods:
We retain personal data only as long as necessary for the purposes outlined above or as required by Austrian law, such as: Booking and Payment Records: Retained for 7 years to comply with tax and accounting obligations (Art. 132 BAO). Marketing Data: Retained until you withdraw your consent.

Data Security
We implement technical and organizational measures to ensure the security of your data, including:

Encrypted communication (e.g., SSL/TLS on our website).
Restricted access to personal data for authorized personnel only.
Regular reviews and updates of data protection policies and IT systems.

Your Rights Under DSGVO
As a data subject, you have the following rights under DSGVO:

Right of Access (Art. 15): Obtain information about the personal data we process about you.
Right to Rectification (Art. 16): Request correction of incorrect or incomplete data.
Right to Erasure (Art. 17): Request deletion of your data, subject to legal retention obligations.
Right to Restriction of Processing (Art. 18): Request limited processing of your data.
Right to Data Portability (Art. 20): Request your data in a structured, machine-readable format.
Right to Object (Art. 21): Object to processing based on legitimate interests or direct marketing.
Right to Withdraw Consent: Withdraw previously given consent at any time.
To exercise these rights, please contact us using the contact details provided above.
Right to Lodge a Complaint If you believe your data protection rights have been violated, you can file a complaint with: Austrian Data Protection Authority (Datenschutzbehörde). For questions or concerns about this policy, please contact us at info(at)pistetopowder.com

Data Sharing Outside the EU/EEA
If we transfer personal data to countries outside the EU/EEA (e.g., through third-party providers like Google or Mailchimp), we ensure an adequate level of protection by relying on mechanisms like the EU Standard Contractual Clauses or equivalent safeguards.

Changes to the Privacy Policy
We may update this privacy policy to reflect changes in legal requirements or our services. The most recent version will always be available on our website.

Contact Information
For questions or concerns about this policy, please contact us at info(at)pistetopowder.com