This Privacy Policy explains how Vanilla Odyssey DE UG collects, uses, and protects your personal data when you visit or use the AlpTrip platform.
The AlpTrip platform is operated by Vanilla Odyssey DE UG, Baumpieperweg 8, 21149 Hamburg, Germany. We are committed to protecting your privacy and handling your personal data transparently and securely.
Vanilla Odyssey DE UG acts as the controller for the processing activities described in this Privacy Policy.
Guides and instructors who offer experiences through the AlpTrip platform generally act as independent controllers for the data necessary to fulfill their services.
Payment providers (e.g., Stripe) act as independent controllers for processing payments and complying with financial regulations.
We collect and process the following categories of personal data:
We process your personal data for the following purposes:
We rely on the following legal bases for processing personal data:
We may share your data with the following categories of recipients:
We do not share personal data with third parties unless required by law or necessary to provide our services.
If personal data is transferred to countries outside the European Economic Area (EEA), we ensure appropriate safeguards, such as adequacy decisions or Standard Contractual Clauses (SCCs) approved by the European Commission. Copies can be requested at any time.
We store your data only as long as necessary to fulfill the purposes outlined or to comply with legal retention periods.
Booking and invoicing data: up to 10 years (statutory retention).
Customer support messages: up to 3 years after last contact.
Technical logs: 14–90 days, depending on security requirements.
Marketing data: until consent is withdrawn or you unsubscribe.
Under the GDPR, you have the following rights regarding your personal data:
AlpTrip is intended for adult users. We do not knowingly allow registration by minors under 16 without verifiable parental consent.
AlpTrip does not use automated decision-making or profiling that produces legal or similarly significant effects.
We apply strict technical and organizational measures to protect your data from unauthorized access, loss, or misuse. This includes encryption, access controls, routine security audits, and restricted access based on necessity.
We may update this Privacy Policy from time to time. You will be informed of significant changes via the platform or by email. The latest version applies from the date of publication.
If you have questions about this Privacy Policy or your personal data, please contact us at:
