Privacy Policy
As of July 2026
In this Privacy Policy, we inform you about what personal data we process when you visit this website, for what purpose we do so, and what rights you have in this regard.
════════════════════════════════════════
1. CONTROLLER
════════════════════════════════════════
The entity responsible for data processing on this website is:
S.N.O.W. Planning and Project Management GmbH
Höttinger Auffahrt 5
A-6020 Innsbruck
Managing Director: Bmst. Ing. Thomas Krämer, BSc.
FN: 512978 f | UID: ATU74457367
Phone: +43 512 239 932
Email: info@snow.at
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
════════════════════════════════════════
2. YOUR RIGHTS
════════════════════════════════════════
You have the following rights regarding your personal data:
Right of access (Art. 15 GDPR) to the data we process
Right to rectification (Art. 16 GDPR) of inaccurate data
Right to erasure (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Objection to processing (Art. 21 GDPR)
Withdrawal of consent (Art. 7(3) GDPR), at any time and with future effect
To exercise these rights, simply send an informal notice to the contact information provided above. The lawfulness of the processing carried out up until the time of revocation remains unaffected.
Right to File a Complaint: You have the right to file a complaint with a supervisory authority. The competent authority is the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, dsb@dsb.gv.at
Right to Object (Art. 21 GDPR)
─────────────────────────────────
If data processing is based on Article 6(1)(e) or (f) of the GDPR, you have the right at any time to object to the processing of your personal data on grounds relating to your particular situation; this also applies to profiling based on such processing. If you object, we will no longer process your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
If your data is processed for the purpose of direct marketing, you have the right to object to this processing at any time; this also applies to any related profiling. Once you have objected, your data will no longer be used for direct marketing.
════════════════════════════════════════
3. COOKIES AND CONSENT MANAGEMENT
════════════════════════════════════════
What are cookies?
─────────────────
Cookies are small text files that are stored on your device. They do no harm and serve to make our website functional, secure, and user-friendly. Some cookies are automatically deleted at the end of your visit (session cookies), while others remain stored until you delete them.
Our consent banner
─────────────────────────
The first time you visit our website, you'll see a consent banner that lets you decide for yourself which cookies and services to allow. You can choose from the following categories:
Required
Content: Basic website functions, language selection (Weglot), spam protection for forms (hCaptcha), storage of your cookie preferences.
Legal basis: Section 165(3) of the German Telecommunications Act (TKG) 2021 in conjunction with Article 6(1)(f) of the GDPR (legitimate interest in providing a fully functional service).
Statistics
Content: Google Analytics 4.
Legal basis: Art. 6(1)(a) of the GDPR (consent).
Marketing
Content: Google Ads, remarketing (DoubleClick).
Legal basis: Art. 6(1)(a) GDPR (consent).
Important: Statistics and marketing services are loaded only after you have given your explicit consent. Until you have given your consent, no related scripts will be executed and no data will be transmitted to the providers listed.
Google Consent Mode v2
──────────────────────
We use Google Consent Mode v2. Before consent is granted, all consent signals (analytics_storage, ad_storage, ad_user_data, ad_personalization) are set to “denied” by default. Only after you give your consent are the respective signals set to “granted.”
Withdrawal of Your Consent
───────────────────────────
You can access and change your cookie settings at any time by clicking the “Cookie Settings” link at the bottom of each page. Withdrawing your consent is just as easy as giving it.
Record of Your Consent
────────────────────────────────
To provide evidence in accordance with Article 7(1) of the GDPR, we record your consent decision. The following information is stored:
a randomly generated identifier (UUID) that is not linked to you personally
the time of the decision
the selected categories
a truncated, non-reversible checksum of your browser identifier (User-Agent hash)
No IP addresses or personally identifiable information are stored in this process. The legal basis is Article 6(1)(c) of the GDPR (legal obligation to provide proof of consent).
Your cookie preference will be stored in a cookie on your device (snow_consent) for 180 days.
════════════════════════════════════════
4. HOSTING AND SERVER LOG FILES
════════════════════════════════════════
This website is hosted on a server operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The server is located in Nuremberg (Germany). Therefore, no hosting data is transferred to a third country.
Hetzner processes the data collected through the website on our behalf based on a data processing agreement in accordance with Article 28 of the GDPR.
For more information: https://www.hetzner.com/rechtliches/datenschutz
Every time a page is accessed, the server automatically generates what are known as server log files:
Browser type and version
Operating system used
Referrer URL
Hostname of the accessing computer
Time of the server request
IP address
This data is not combined with other data sources. Data collection is based on Article 6(1)(f) of the GDPR; we have a legitimate interest in ensuring the technically flawless operation and security of our website. The log files are deleted after 30 days at the latest.
════════════════════════════════════════
5. SSL/TLS ENCRYPTION
════════════════════════════════════════
For security reasons, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser’s address bar begins with “https://” and a padlock icon is displayed. When encryption is enabled, the data you transmit cannot be read by third parties.
════════════════════════════════════════
6. CONTACT AND INQUIRY FORMS
════════════════════════════════════════
If you contact us using a form on this website, the information you provide in the form—including your contact information—will be stored so that we can process your inquiry and follow up if necessary.
Legal basis: Article 6(1)(b) of the GDPR, provided the inquiry relates to a contract or precontractual measures; otherwise, Article 6(1)(f) of the GDPR (legitimate interest in processing inquiries) or Article 6(1)(a) of the GDPR, provided consent has been obtained.
Spam Protection (hCaptcha): To protect our forms from automated submissions, we use hCaptcha, a service provided by Intuition Machines, Inc., 350 Alabama St, San Francisco, CA 94110, USA. In this process, technical data (including IP address, time spent on the page, mouse movements, and device information) is transmitted to hCaptcha and analyzed. The legal basis is Article 6(1)(f) of the GDPR (legitimate interest in protection against misuse and spam).
Further information: https://www.hcaptcha.com/privacy
We will retain the data from the form until you request that we delete it, revoke your consent, or the purpose for which it was stored no longer applies. Mandatory statutory retention periods remain unaffected.
════════════════════════════════════════
7. NEWSLETTER
════════════════════════════════════════
You can sign up for our newsletter on our website. We use Mailchimp, a service provided by Intuit Inc., 2700 Coast Avenue, Mountain View, CA 94043, USA, to send out the newsletter.
Data Processed: Your email address and, if applicable, any other information you provide (e.g., first name). In addition, Mailchimp processes technical data such as your IP address, the time of registration, and your interactions with the newsletter (e.g., open and click-through rates) to analyze the mailing statistically.
Legal basis: Article 6(1)(a) of the GDPR (consent). You may withdraw your consent at any time, for example by clicking the unsubscribe link in each newsletter or by sending a message to info@snow.at.
Retention period: Your data will remain stored with us or with Mailchimp until you unsubscribe from the newsletter, at which point it will be deleted from the mailing list.
Data Transfer to the U.S.: We have a data processing agreement in place with Mailchimp. The transfer is based on the EU-U.S. Data Privacy Framework or the Standard Contractual Clauses.
Further information: https://www.intuit.com/privacy/statement/
════════════════════════════════════════
8. GOOGLE TAG MANAGER
════════════════════════════════════════
We use Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is itself a tool for managing website tags; it does not set its own cookies or collect any personal data. Its purpose is to trigger other services (see below). Google Tag Manager is not loaded until you have given your consent via our consent banner—it is blocked until then.
════════════════════════════════════════
9. GOOGLE ANALYTICS 4
════════════════════════════════════════
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Purpose: To analyze user behavior in order to improve our services.
Data processed: including, but not limited to, pages visited, duration of visit, source of access, approximate location, device and browser used, and truncated IP address.
By default, Google Analytics 4 truncates IP addresses within the EU before they are processed further. This means it is not possible to directly link them to you personally.
Legal basis: Art. 6(1)(a) of the GDPR (consent). Google Analytics is loaded only if you have consented to the “Statistics” category in the consent banner.
Withdrawal: via the “Cookie Settings” link in the footer.
Data Processing: We have a data processing agreement with Google. Data transfers to the United States cannot be ruled out; such transfers are made in accordance with the EU-U.S. Data Privacy Framework, under which Google is certified.
For more information: https://policies.google.com/privacy
═══════════════════════════════════════════════════
10. GOOGLE ADS, CONVERSION TRACKING, AND REMARKETING
═══════════════════════════════════════════════════
We use Google Ads, including conversion tracking and remarketing (Google Marketing Platform / DoubleClick), services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Conversion Tracking: When you click on an ad we’ve placed, a cookie is set. If you then visit certain pages on our website, Google and we can tell that you came from that ad. We receive only aggregated statistics (total number of users), not any information that could be used to identify you personally.
Remarketing: Allows us to show you interest-based ads on other websites within the Google Display Network based on your visit to our website.
Legal basis: Article 6(1)(a) of the GDPR (consent). These services are loaded only if you have consented to the “Marketing” category in the consent banner.
Opt-out: via the “Cookie Settings” link in the footer. You can also disable personalized ads directly on Google: https://adssettings.google.com
Data transfer to the U.S.: See above under Google Analytics.
For more information: https://policies.google.com/privacy
════════════════════════════════════════
11. WEGLOT (LANGUAGE SWITCH)
════════════════════════════════════════
To provide a multilingual version of our website, we use Weglot, a service provided by Weglot SAS, 138 rue du Faubourg Saint-Honoré, 75008 Paris, France.
Weglot translates the content of our website and saves your language selection. This involves the processing of technically necessary data. The provider is based in the EU; no data is transferred to third countries.
Legal basis: Art. 6(1)(f) of the GDPR (legitimate interest in providing a multilingual website). The language selection feature is necessary for the operation of the website and is therefore classified as “Necessary.”
For more information: https://weglot.com/privacy
════════════════════════════════════════
12. FONTS
════════════════════════════════════════
The fonts used on this website are served locally from our own server. No connection is made to servers operated by Google Fonts or other external providers. Your IP address is not shared with third parties.
════════════════════════════════════════
13. SOCIAL MEDIA PROFILES
════════════════════════════════════════
At the bottom of our website, you will find links to our profiles on Instagram, LinkedIn, and Facebook. These are simple links, not embedded plugins. Data is not transmitted to the respective networks until you actively click on the link and thereby visit the provider’s page.
The operators of the linked platforms are solely responsible for data processing on those platforms:
Instagram / Facebook: Meta Platforms Ireland Ltd. – https://www.facebook.com/privacy/policy
LinkedIn: LinkedIn Ireland Unlimited Company – https://www.linkedin.com/legal/privacy-policy
════════════════════════════════════════
14. DATA TRANSFERS TO THIRD COUNTRIES
════════════════════════════════════════
This website is hosted exclusively within the EU (Hetzner, server location: Nuremberg). The translation service Weglot is also based in the EU (France).
However, some of the third-party services we use are based in the United States (Google, Mailchimp/Intuit, hCaptcha/Intuition Machines). When using these services, the transfer of your data to the United States cannot be ruled out. The services in the “Statistics” and “Marketing” categories are loaded only with your consent.
The transmission is based on
the EU-U.S. Data Privacy Framework (EU Commission Adequacy Decision of July 10, 2023), provided that the respective provider is certified, and/or
the EU Commission’s Standard Contractual Clauses (Art. 46(2)(c) of the GDPR).
Please note that, despite these mechanisms, access by government agencies in the United States cannot be completely ruled out, and the level of data protection there does not correspond in every respect to that of the EU.
════════════════════════════════════════
15. RETENTION PERIOD
════════════════════════════════════════
Unless a specific retention period is specified in this statement, we will retain your personal data until the purpose for which it was processed no longer applies. If you submit a request for deletion or revoke your consent, your data will be deleted unless there are other legally permissible grounds for retention (e.g., retention periods under tax or commercial law). In the latter case, the data will be deleted once these grounds no longer apply.
══════════════════════════════════════════
16. CHANGES TO THIS PRIVACY POLICY
══════════════════════════════════════════
We reserve the right to amend this Privacy Policy to ensure that it always complies with current legal requirements or to reflect changes to our services. The most recent version will then apply to your next visit.
As of July 2026