Legal
Privacy Policy
As of: June 2026
The protection of your personal data is of particular importance to us. We process your data exclusively on the basis of the statutory provisions (GDPR, Data Protection Act – DSG, Telecommunications Act – TKG). In this privacy information we inform you about the most important aspects of data processing within the scope of our website.
1. Data Controller
HP-Sports OG
Tschaffinis 22, 6166 Fulpmes, Austria
Phone: +43 (0) 664 4765650
Email: office@hp-sports.at
2. Access Data & Server Log Files
When you access our website, the hosting provider automatically stores information in so-called server log files, which your browser transmits. These are in particular: IP address, date and time of access, the page accessed, browser type and operating system.
This data serves exclusively to ensure the technically error-free operation and the security of the website. The legal basis is our legitimate interest (Art. 6 para. 1 lit. f GDPR).
3. Contacting Us
If you contact us by email, telephone or via a form, your details will be stored for the purpose of processing the enquiry and in case of follow-up questions. The legal basis is the initiation or performance of a contract (Art. 6 para. 1 lit. b GDPR) or our legitimate interest in responding (Art. 6 para. 1 lit. f GDPR).
The contact form on our location page is processed technically via the service FormSubmit (formsubmit.co), which processes the data entered exclusively to deliver your message to our email address.
4. Bookings & Reservations
Online bookings and reservations (e.g. for ski and e-bike rental) are processed via the external reservation system of Wintersteiger AG („easyrent“). The data protection provisions of the respective provider apply. We recommend reading these before making a booking.
5. Cookies
As far as possible, our website does not use tracking cookies. Technically necessary cookies may be set to provide basic functions. You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases or exclude them in general.
6. Embedded Third-Party Services
For the display and functionality of the website, we embed the following external services. In doing so, your IP address may be transmitted to the respective provider:
- Google Fonts & Material Symbols – fonts are loaded from servers of Google LLC.
- Tailwind CSS (CDN) – the styling framework is loaded via a Content Delivery Network.
- Weather data – the live weather display is loaded via an external application programming interface (weather API).
- Wistia (Video) – our explainer video on the Mountainkart page is embedded via the video hosting service Wistia (Wistia, Inc., USA). When playing it, data (including IP address) may be transmitted to Wistia and cookies may be set.
- Social Media – we link to our profiles on Instagram, Facebook and TikTok. Only when you click do you reach the respective provider, whose data protection policies then apply.
The legal basis is our legitimate interest in an appealing and functional website (Art. 6 para. 1 lit. f GDPR).
7. Storage Period
We store personal data only for as long as is necessary to fulfil the respective purposes or as required by statutory retention periods. After that, the data is deleted.
8. Your Rights
In principle, you have the rights to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). If you believe that the processing of your data violates data protection law, you can contact us or the competent supervisory authority.
9. Right to Lodge a Complaint
Competent supervisory authority in Austria:
Österreichische Datenschutzbehörde
Barichgasse 40-42, 1030 Wien
Email: dsb@dsb.gv.at
www.dsb.gv.at