Last updated: March 2026
FlowSt8 Kayaking is a whitewater kayak coaching service operated by Peter Garrett, Frau-Holle-Str. 15a, 81739 München, Germany. If you have questions about this policy, contact us at [email protected].
When you use our contact form, we collect your name, email address, phone number (optional), and the content of your message.
When you book a coaching session, we collect your name, email address, phone number, WhatsApp number (optional), and payment details (processed by Stripe — we never see your full card details). Your booking details are stored securely in our booking system.
We use your data to respond to enquiries, process bookings, send booking confirmations, and communicate course details (including WhatsApp group invites where you have provided your WhatsApp number). The legal basis for processing is Article 6(1)(b) GDPR (performance of a contract) and Article 6(1)(f) GDPR (legitimate interest in responding to enquiries). We do not sell, rent, or share your data with third parties for marketing purposes.
Vercel — Our website is hosted by Vercel Inc. (USA). Basic server logs (IP address, browser type, pages visited) may be retained as part of normal hosting operations. See Vercel's Privacy Policy.
Stripe — Payments are processed by Stripe Payments Europe Ltd. Your payment details are handled directly by Stripe and are not stored on our servers. See Stripe's Privacy Policy.
Sanity — Booking data (name, email, phone number, course details) is stored in Sanity, a content platform operated by Sanity.io Inc. (USA). Data is stored in a private, access-controlled dataset. See Sanity's Privacy Policy.
WhatsApp (Meta) — If you provide your WhatsApp number at booking, we will send you a booking confirmation and course group invite via WhatsApp, operated by Meta Platforms Ireland Ltd. See WhatsApp's Privacy Policy.
Resend — Confirmation emails are sent via Resend (Resend Inc., USA). See Resend's Privacy Policy.
Telegram — Internal booking notifications are sent to us via Telegram (Telegram Messenger Inc.). Only the information you submit in the form is transmitted.
Google Fonts — This site loads fonts from Google's servers (Google LLC, USA). Your IP address is transmitted to Google when fonts load. See Google's Privacy Policy.
We retain booking records for as long as necessary for legal and business purposes (typically up to 7 years for financial records as required by German law). Contact enquiries are retained for a reasonable period to handle follow-up communications. You may request deletion of your data at any time by emailing [email protected].
Under the GDPR, you have the right to access, correct, or delete your personal data, to object to or restrict processing, and to data portability. To exercise any of these rights, contact us at [email protected].
You also have the right to lodge a complaint with a supervisory authority. In Bavaria, the competent authority is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA).
We may update this policy from time to time. Any changes will be posted on this page with an updated date.