Privacy Policy

1. Controller

Snowflow-Reisen
Ronald Korsch
Grunewaldstr. 27
12165 Berlin-Steglitz
E-Mail: info@snowflow.de

2. Booking Inquiries

When you submit a booking inquiry through our form, we collect the following data:

• First name, last name
• Email address
• Phone number
• Date of birth
• Address (street, postal code, city)
• Number of persons
• Remarks (optional)

Legal basis: Art. 6(1)(b) GDPR (performance of pre-contractual measures).

Purpose: Processing your booking inquiry and contacting you.

Storage duration: Your data will be stored for the duration of trip planning and subsequently in accordance with statutory retention periods (up to 10 years under commercial and tax law).

3. Email Notifications

When a booking inquiry is received, a notification is sent to us via email. Email delivery is handled via our own mail server hosted at Netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany. No data is transferred to third countries.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in timely processing of inquiries).

4. Admin Area

For the internal administration area, we store access credentials (email, name, encrypted password) of our administrators. Access is protected by authentication. Sessions are stored as encrypted JWT tokens in the browser.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating the website).

5. Hosting

This website is hosted on a Virtual Private Server (VPS) at Netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany. When accessing the website, information is automatically stored in server log files transmitted by your browser (e.g. IP address, date and time of access, requested page).

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing and securing the website).

6. Cookies

This website uses only technically necessary cookies for admin session management. No tracking, analytics, or marketing cookies are used.

7. No Analytics or Tracking Tools

We do not use any analytics tools such as Google Analytics, Matomo, or similar services. There is no tracking of your browsing behaviour.

8. Your Rights

You have the following rights regarding your personal data:

• Access (Art. 15 GDPR): You can request information about your stored data.
• Rectification (Art. 16 GDPR): You can request correction of inaccurate data.
• Erasure (Art. 17 GDPR): You can request deletion of your data, provided no statutory retention obligations apply.
• Restriction (Art. 18 GDPR): You can request restriction of processing.
• Data portability (Art. 20 GDPR): You can receive your data in a common format.
• Objection (Art. 21 GDPR): You can object to data processing.

To exercise your rights, simply send an email to info@snowflow.de.

9. Right to Complain

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59-61
10555 Berlin

10. Changes

We reserve the right to update this privacy policy to ensure it always complies with current legal requirements or to reflect changes in our services.