1. Responsible Party

The party responsible for data processing on this website is:

2. General Information on Data Processing

We process personal data exclusively within the scope of applicable data protection regulations, in particular the General Data Protection Regulation (GDPR) and the Austrian Telecommunications Act (TKG 2021).

Personal data is only processed to the extent necessary to provide a functional website, our services (kite school, kite hotel), and communication.

3. Website Access / Server Log Files

When visiting this website, the following data is automatically recorded by the web server:

• IP address of the device
• Date and time of access
• Pages accessed
• Browser type and version
• Operating system
• Referrer URL (previously visited page)

This data is technically required to correctly display the website and ensure system security.

Processing is based on Art. 6(1)(f) GDPR (legitimate interest in technical stability and security).

Log data is not stored permanently or evaluated for personal purposes, except in case of security-relevant incidents.

4. Contact

If you contact us via email or contact form, the provided data will be used exclusively to process your inquiry.

Legal basis:

• Art. 6(1)(b) GDPR (contract / pre-contractual measures)
• Art. 6(1)(f) GDPR (legitimate interest)

Data is stored only as long as necessary for processing or as required by legal retention obligations.

Data will not be shared with third parties without your explicit consent.

5. Cookies

Our website uses cookies. Cookies are small text files stored on your device.

We distinguish between:

You can adjust your cookie settings at any time in your browser or via the cookie banner.

6. Google Maps

Our website uses the Google Maps map service.

Provider:
Google Ireland Limited
Gordon House, Barrow Street, Dublin 4, Ireland

To use Google Maps, it is necessary to store your IP address. This is usually transferred to Google servers and may also be transmitted to the USA.

Integration only occurs after your consent via the cookie/consent tool.

Legal basis:
Art. 6(1)(a) GDPR (consent)

Further information:
https://policies.google.com/privacy

7. Google Fonts

This website uses Google Fonts for uniform font display.

Integration is done either:

• locally (recommended) or
• via Google servers (only with consent)

With external integration, your IP address is transmitted to Google.

Legal basis:
Art. 6(1)(a) GDPR (consent) or Art. 6(1)(f) GDPR (for local storage without data transmission)

Further information:
https://developers.google.com/fonts/faq
https://policies.google.com/privacy

8. Hosting

Our website is operated by an external hosting provider. They process personal data (particularly server log files) exclusively on our behalf.

A data processing agreement exists with the hosting provider in accordance with Art. 28 GDPR.

9. Data Processing for Our Services

For bookings (kite school, accommodation, courses, or other services), we process personal data such as:

• Name
• Contact information
• Booking data
• Payment information (if applicable)

This data is required for contract fulfillment.

Legal basis:
Art. 6(1)(b) GDPR

10. Storage Duration

We store personal data only as long as necessary:

• Contact inquiries: up to 12 months
• Booking data: according to legal retention periods
• Server logs: short-term / maximum 30 days (technically required)

11. Your Rights

You have the right to:

• Access information about your stored data (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)

12. Right to Complain

If you believe that the processing of your data violates data protection law, you can file a complaint with the competent supervisory authority:

13. Changes to This Privacy Policy

We reserve the right to adapt this privacy policy as needed to comply with legal changes or new technical developments.