Privacy Policy
Last updated: 7 September 2026
1. Who we are
Hermann Maier Academy operates the website hermann-maier-academy.com and organises ski racing camps and training programmes in Flachau, Austria, and at partner venues in Austria, Italy, the Netherlands and elsewhere.
For the purposes of the General Data Protection Regulation (GDPR), the data controller is:
- Legal entity: Skischule Hermann Maier GmbH, trading as Hermann Maier Academy
- Registered address: Hermann Maier Straße 106, 5542 Flachau, Austria
- Company register: FN 352806 h, Landesgericht Salzburg · UID: ATU66042846
- Email: info@hermann-maier-academy.com
- Telephone: +43 676 75 83 980
- Responsible for data protection: Alexander Maier, managing director · info@hermann-maier-academy.com
No Data Protection Officer is appointed. One is required only where processing special categories of data is a core activity carried out on a large scale, which a season of camp registrations is not.
2. What we collect, and why
2.1 Camp registration
When a parent or guardian registers an athlete for a camp, we collect the following through our registration form. Fields marked required must be provided for a registration to be accepted; the rest are optional.
| Data | About whom | Why we need it |
|---|---|---|
| First and last name (required) | Athlete | To identify the athlete on camp rosters, lift passes and race entries. |
| Date of birth (required) | Athlete | To assign the correct age category and to meet race organisers’ entry rules. |
| Age group (required) | Athlete | To form training groups of comparable level. |
| Weight and height (required) | Athlete | To set ski binding release values safely, and to fit equipment. |
| Club | Athlete | To coordinate with the athlete’s home club where relevant. |
| Ski brand and boot size | Athlete | Equipment preparation and servicing during the camp. |
| Medical and allergy notes | Athlete | So coaches and, where necessary, medical personnel can respond appropriately during training, and to avoid known allergens in catering. |
| Accident insurance confirmation (required) and the name of the insurer | Athlete | To verify cover is in place before an athlete takes part. We ask for a policy number only if a claim actually has to be made. |
| Camp selection (required) | — | To allocate places and manage capacity. |
| Guardian first and last name (required) | Parent or guardian | To identify the person legally responsible for the athlete. |
| Email address (required) | Parent or guardian | To confirm the registration and send camp information and payment details. |
| Telephone number (required) | Parent or guardian | To reach you during the camp, including in an emergency. |
| Emergency contact | Nominated third party | An alternative contact if the guardian cannot be reached during a camp. |
| Billing address (required) | Parent or guardian | To issue invoices and meet accounting obligations. |
If you provide an emergency contact, please make sure that person knows their details have been given to us and why.
2.2 Contact forms
Messages sent through the contact forms on this website reach us by email and include the name, email address, and any other details you choose to write. We use them only to answer your enquiry.
2.3 Website analytics
We use Google Analytics 4 (via the Google Site Kit plugin) to understand how the website is used — which pages are visited, from which countries, and on what kind of device. This data is collected through cookies and similar technologies and does not identify you by name.
Analytics is switched off until you allow it. When you first arrive, a banner asks whether you agree; declining is one click and carries the same weight as accepting. Until you accept, Google Analytics stores nothing on your device. You can change your mind at any time through the Cookie settings link in the footer.
2.4 Sign in with Google
The website has Google’s sign-in feature enabled. If you use it, Google shares your name, email address and profile picture with us to create or access an account.
2.5 Online shop
The shop is not in operation. No products are for sale and no payment method is active, so no order or payment data is collected through this website. Camp fees are invoiced separately after a registration is confirmed.
3. Our legal basis for using your data
| Purpose | Legal basis (GDPR) |
|---|---|
| Organising and delivering a camp you have booked | Article 6(1)(b) — performance of a contract |
| Medical and allergy information | Article 9(2)(a) — your explicit consent, given by ticking the data-processing consent box on the registration form |
| Invoicing, accounting and tax records | Article 6(1)(c) — compliance with a legal obligation |
| Website analytics | Article 6(1)(a) — consent |
| Photographs and video of athletes used for promotion | Article 6(1)(a) — consent, given separately and optionally on the registration form |
| Responding to enquiries | Article 6(1)(f) — our legitimate interest in answering people who contact us |
4. Health data and data about children
Medical and allergy notes are special category data under Article 9 GDPR and receive particular care. We collect them only because coaches need to be able to respond safely on the mountain, we share them only with the people described in section 5, and we process them on the basis of your explicit consent.
Most of the people our camps are organised for are children. Registrations must be submitted by a parent or legal guardian, who provides consent on the child’s behalf. Where a child is old enough to understand, we encourage guardians to discuss with them what information is being shared and why.
Registrations are accepted only from a parent or legal guardian, whatever the athlete’s age. An athlete cannot register themselves.
5. Who we share your data with
- Coaches and camp staff — the roster for their camp, including medical notes relevant to athletes in their care.
- Accommodation, lift companies and race organisers — the names, dates of birth and age categories needed for bookings, lift passes and race entries.
- Insurers — only if an accident or claim occurs.
- Our web host and IT service providers — who store the website and its database on our behalf, under contract and on our instructions.
- Google — through Google Analytics and Sign in with Google, as described above.
- Our accountant and tax authorities — invoicing records, as legally required.
We do not sell personal data, and we do not share it for third-party marketing.
6. Transfers outside the EU
Google may process analytics data on servers in the United States. These transfers rely on the EU–US Data Privacy Framework and on the standard contractual clauses in Google’s terms.
No other transfer outside the EU or EEA takes place. Registration data is held on the website’s own database and is not sent to any service outside Europe.
7. How long we keep your data
| Data | Retention period |
|---|---|
| Registration and athlete records | The current season and the one that follows it, so returning families need not enter everything again. Deleted after that. |
| Medical and allergy notes | Deleted within 30 days of the camp ending. They exist so coaches can respond safely during the camp, and have no purpose afterwards. |
| Invoices and accounting records | 7 years, as required by Austrian tax law (§ 132 BAO) |
| Contact form enquiries | 2 years |
| Analytics data | 14 months, and only for visitors who allowed analytics |
8. Your rights
Under the GDPR you have the right to:
- ask what personal data we hold about you or your child, and receive a copy;
- have inaccurate data corrected;
- have data deleted, where we have no continuing legal reason to keep it;
- ask us to restrict how we use it, or to object to a particular use;
- receive data you gave us in a portable, machine-readable format;
- withdraw any consent you have given, at any time.
To exercise any of these, write to info@hermann-maier-academy.com. We will respond within one month.
Withdrawing consent does not affect processing that already took place, and some data may still be kept where the law requires it — invoices, for example. If you withdraw consent for medical information, we may not be able to accept the athlete on a camp, because we would not be able to respond safely to a known condition.
9. Complaints
If you believe we have handled your data improperly, please contact us first so we can put it right. You also have the right to complain to the Austrian data protection authority:
Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, Austria — dsb.gv.at
10. Cookies
This website uses cookies that are necessary for it to function, and analytics cookies as described in section 2.3.
The cookies this site can set:
hma_consent— remembers your cookie choice for six months. Strictly necessary: without it we would have to ask again on every page, including after you decline._gaand_ga_…— Google Analytics. Set only after you allow analytics, and never before.- WordPress session cookies — only if you log in to the site, which visitors do not need to do.
To change your choice, use the Cookie settings link in the footer.
11. Changes to this policy
We will update this page when our practices change, and will revise the date at the top. If a change materially affects how we use data you have already given us, we will contact you directly.