Privacy Policy

This is an English courtesy translation. The legally binding version is the German privacy policy at /datenschutz.

1. Controller

The controller responsible for data processing on this website is the person named in the imprint.

2. Provision of the website and log files

When you access this website, the hosting provider automatically collects information and stores it in so-called server log files. This data is transmitted automatically by your browser and includes:

  • IP address of the accessing device
  • Date and time of the server request
  • Name and URL of the retrieved file
  • Website from which the access originates (referrer URL)
  • Browser used and, where applicable, the operating system of your device

This data is stored for a maximum of 30 days and serves solely to ensure error-free operation and IT security. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the stability and security of the website).

3. Hosting and content delivery network (CDN)

We host our website with the development and hosting service Lovable (provider: Lovable Labs Europe AB, Stockholm, Sweden). When you visit our website, your personal data (such as IP addresses in server log files) is processed on Lovable's servers or those of its cloud infrastructure partners within the European Union.

The use of Lovable is based on Art. 6 (1) (f) GDPR. We have a legitimate interest in a technically reliable, secure and fast provision of our website.

4. Cookies and cookie consent (Klaro)

Our website uses cookies — small text files stored on your device by your browser. We distinguish two categories:

  • Technically necessary cookies: strictly required for the secure and error-free operation of the website (legal basis: § 25 (2) TDDDG).
  • Analytics and marketing cookies: used only if you have given us your explicit consent via our cookie consent banner (legal basis: Art. 6 (1) (a) GDPR, § 25 (1) TDDDG).

To manage your consent we use the consent management service "Klaro", provided by KIProtect GmbH (Bismarckstraße 10-12, 10625 Berlin, Germany). Klaro stores the status of your consent in a cookie on your device. This processing serves to fulfil our legal obligation to obtain verifiable consent for certain cookies (Art. 6 (1) (c) GDPR). You can withdraw your consent at any time via the "Privacy settings" link in the footer.

5. Google Tag Manager

We use Google Tag Manager on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

This service allows website tags to be managed through one interface. Google Tag Manager itself does not collect personal data and does not set cookies. It merely triggers other tags which may in turn collect data (e.g. Google Analytics). If you have objected to data collection via the cookie banner, this deactivation remains in place for all affected tracking tags.

The legal basis for using Google Tag Manager is your explicit consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG.

6. Google Analytics 4 (GA4)

This website uses functions of the web analytics service Google Analytics 4. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses technologies (e.g. cookies or device fingerprinting) that enable users to be recognised for the purpose of analysing anonymised user behaviour. The data collected about your use of this website is generally transferred to and stored on a Google server in the USA.

  • IP anonymisation: in Google Analytics 4, IP anonymisation is enabled by default. Your IP address is truncated by Google within EU member states before transmission.
  • Data transfer to the USA: Google Ireland Limited passes data on to Google LLC (USA). Google is certified under the EU-US Data Privacy Framework (DPF), which legally ensures an adequate level of data protection.
  • Withdrawal of consent: you can withdraw your consent to data processing at any time with effect for the future via the cookie settings (Klaro banner) on our website.

The legal basis for using Google Analytics 4 is your explicit consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG.

7. External services and links (data APIs & webcams)

To display live information we use external data sources and links:

  • Data sources (OpenHolidaysAPI, Eurostat, Google Trends, Open-Meteo): the data behind our crowd scores and snow forecasts is retrieved and processed purely server-side. No IP addresses or personal data of our visitors are passed on to these providers. OpenHolidaysAPI and Open-Meteo are licensed under CC BY 4.0; full source attributions can be found in the imprint.
  • External links to webcams: our website contains links to third-party websites (e.g. live webcams in ski resorts). When you click these links you leave our website. The operators of the linked pages are solely responsible for data processing there.

8. User account & sign-in via Google (community area)

To take part in the discussion area on the ski resort pages you can optionally sign in with your Google account. The provider of the login service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you click "Sign in" you are redirected to Google. After successful authentication, Google transmits your email address and a unique user ID to us. This data is stored in our authentication database (Lovable Cloud / Supabase, hosted in the EU) in order to manage your account and allow you to post comments.

The legal basis is Art. 6 (1) (b) GDPR (performance of a contract / use of the community function) as well as your consent under Art. 6 (1) (a) GDPR through the deliberate sign-in process. You can have your account and all associated data deleted at any time; simply contact the address given in the imprint.

9. Discussion area (comments)

Signed-in users can leave public comments (max. 300 characters) on the ski resort pages. We store the comment text, a display name of your choice, timestamps and a reference to your user ID and the respective ski resort. Your comment and display name are publicly visible to all visitors. Your email address is not displayed publicly.

For moderation purposes (preventing abuse, checking for unlawful content) the operator is notified by email about every new comment. The legal basis is Art. 6 (1) (b) and (f) GDPR (legitimate interest in a safe, spam-free community). You can request deletion of your posts at any time.

10. Hosting & data processing agreements

The website as well as the authentication and database infrastructure are operated via Lovable (cloud platform based on Supabase). The server location is in the EU. Data processing agreements pursuant to Art. 28 GDPR are in place with the providers involved.

11. Your rights

As a data subject you have the following rights under the GDPR:

  • Access to the data we process about you (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure of your data (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing (Art. 21 GDPR)

Please contact the address given in the imprint. You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data (Art. 77 GDPR).

12. Contact

For any privacy question: crowdlessslopes@gmail.com.