Privacy Policy

1. Who is responsible

Winter-Skichalets, Fröhstockheimer Weg 8, 97348 Rödelsee, Germany, is the controller for the personal data processed through this website. You can reach us at booking@winter-skichalets.com or on WhatsApp at +49 177 9039361.

2. What we collect

Account details: first and last name, email address and, if you provide them, phone number and country. Your password is stored only as an encrypted value that we cannot read.

Enquiry and booking details: the chalet, dates, number of guests, your message, and the guest details you submit at online check-in.

Invoicing details: billing name and address, booking amounts and payment status.

Technical and usage data: anonymous statistics about which pages and chalets are viewed, the type of device and the country the visit came from.

3. Why we use it and on what legal basis

To create and manage your account, answer your enquiries and carry out your booking — necessary for performing our contract with you (Art. 6(1)(b) GDPR).

To issue invoices and keep accounting records — legal obligation (Art. 6(1)(c) GDPR).

To keep the website secure and to understand, in aggregate, how it is used — our legitimate interest in running and improving the service (Art. 6(1)(f) GDPR).

To send you Alpine inspiration and chalet releases — only if you tick that box, on the basis of your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time in your account settings or via the unsubscribe link.

4. Cookies and website analytics

We do not use advertising cookies and we do not track you across other websites.

Our own statistics are cookieless: a temporary identifier is kept in your browser for the length of your visit only, and the data we keep — page views, chalet views, device type, country and how the visit arrived — cannot be linked back to you as a person.

Signing in stores a secure session in your browser so that you stay logged in. This is required for the account area to work.

5. Who else sees your data

Chalet owners and local partners receive the details they need to prepare and deliver your stay.

Service providers acting on our instructions: our hosting and database provider, and the email service that sends your confirmations, invoices and reminders.

Authorities, where local law requires guest registration or where we are legally obliged to disclose information.

We never sell your personal data.

6. Transfers outside the EU

Where a provider processes data outside the European Economic Area, the transfer is covered by the European Commission's standard contractual clauses or an adequacy decision.

7. How long we keep it

Account data is kept while your account exists and deleted when you close it.

Enquiries that do not lead to a booking are kept for up to two years.

Booking, invoicing and accounting records are kept for the retention periods required by German commercial and tax law, normally up to ten years.

8. Your rights

You have the right to access your data, correct it, delete it, restrict or object to its processing, and receive it in a portable format. Where processing is based on consent, you may withdraw it at any time with effect for the future.

Write to booking@winter-skichalets.com to exercise any of these rights. You may also lodge a complaint with the data protection authority of your country or region.

9. Security

The site is served over an encrypted connection, passwords are stored hashed, and access to booking and invoicing data is restricted to our team.

10. Changes

We update this policy when our services or legal obligations change. The date below shows the current version.