Privacy Policy
The protection of your personal data is of particular concern to us. We process your data exclusively on the basis of legal provisions (GDPR, Austrian TKG 2021). In this privacy policy, we inform you about the most important aspects of data processing on our website.
Data Controller
Source To Sea GmbH, Natterer See 1, A-6161 Natters, Tyrol, Austria
Phone: +43 (0) 512 546710
Email: info@s2s.at
Hosting
This website is hosted by Vercel Inc. (location: Frankfurt, Germany, EU region). When visiting our website, information is automatically stored in server log files that your browser transmits. This includes: browser type and version, operating system, referrer URL, hostname of the accessing device, time of server request, and IP address. This data is not combined with other data sources. Data processing is based on Art. 6(1)(f) GDPR (legitimate interest in a stable and secure website).
Content Management System
We use Sanity.io (Sanity AS, Norway) to manage our content. Sanity does not process personal data of website visitors. Images and media are served via the Sanity CDN (hosted on Google Cloud Platform, EU regions). No cookies are set by Sanity.
Contact Form
When you contact us via the contact form on our website, your provided data (name, email address, message) is stored for the purpose of processing your request and for any follow-up questions. We do not share this data without your consent. Processing is based on Art. 6(1)(b) GDPR (pre-contractual measures or contract performance). Contact data is deleted after complete processing of your request, unless statutory retention obligations apply.
Bookings and Course Data
When booking a course, camp, or tour, we collect the following data: name, email address, phone number, emergency contact, medical information (allergies, health conditions), and your paddling level. Processing is based on Art. 6(1)(b) GDPR (contract performance).
Retention periods: Booking and invoice data is stored for 7 years in accordance with Austrian tax retention requirements (Bundesabgabenordnung). Medical data and emergency contacts are automatically deleted 30 days after the end of the booked course/camp.
Cookies
Our website uses only technically necessary cookies required for the operation of the website (e.g., language preference). These cookies do not require consent under Art. 5(3) of the ePrivacy Directive, as they are strictly necessary for providing the service requested by the user.
We do not use tracking cookies, third-party analytics tools, or Google Analytics.
Web Analytics
We currently do not use any web analytics tools. No data is transmitted to third-party providers for analytics purposes.
Newsletter
You can subscribe to our newsletter. For this, we need your email address and your consent (Art. 6(1)(a) GDPR). You can revoke your subscription at any time via the unsubscribe link in each newsletter email or by emailing info@s2s.at. After unsubscribing, your data will be deleted immediately.
Your Rights
You have the following rights: right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and objection (Art. 21 GDPR). If you believe that the processing of your data violates data protection law, you can file a complaint with the Austrian Data Protection Authority (www.dsb.gv.at).
Data Transfer to Third Countries
Vercel Inc. is headquartered in the USA. However, our website is hosted on EU servers (Frankfurt, Germany). Vercel is certified under the EU-U.S. Data Privacy Framework. Sanity AS is headquartered in Norway (EEA) and uses Google Cloud EU regions for data processing.
Contact for Data Protection Enquiries
Source To Sea GmbH, Natterer See 1, A-6161 Natters
Email: info@s2s.at
Phone: +43 (0) 512 546710
Last updated: February 2026