[legal · privacy]
Privacy Policy
Last updated: 31 May 2026
[1. data controller]
Pick-a-Ski is operated by Nimmasoft. For privacy questions or to exercise your rights, contact remco@nimmasoft.nl or use the contact form.
[2. what we collect]
We process the following categories of personal data:
- Technical data: IP address (anonymised), browser type, device type, operating system, referrer, pages visited, timestamps.
- Behavioural data (only with consent): anonymised mouse movements, clicks, scrolls and page interactions recorded by Contentsquare to help us improve usability.
- Newsletter data: email address and preferred language if you subscribe to the newsletter.
- Contact form data: any details you choose to submit through the contact form.
- Consent record: the choices you made in the cookie banner and the date they were given.
[3. purposes & legal basis]
- Operating the site: based on our legitimate interest in providing the service (Art. 6(1)(f) GDPR).
- Analytics & session recording: only with your consent (Art. 6(1)(a) GDPR).
- Newsletter: based on your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time.
- Contact form: to respond to your enquiry (Art. 6(1)(b) and 6(1)(f) GDPR).
[4. who we share data with]
We use the following processors who may access personal data on our behalf:
- Google Ireland Ltd. — Google Analytics and Google Tag Manager (analytics).
- Contentsquare SAS — session recording.
- Google Firebase (Google LLC) — hosting, Firestore database, file storage for ski images and form submissions.
We do not sell personal data. Some processors may transfer data outside the EEA; in those cases the transfer relies on the EU Standard Contractual Clauses and any additional safeguards the processor has in place.
[5. how long we keep it]
- Consent record: 6 months (then we re-ask).
- Analytics data in Google Analytics: 14 months.
- Session recordings in Contentsquare: 13 months.
- Newsletter email: until you unsubscribe.
- Contact form messages: 24 months after our last reply.
[6. your rights]
Under the GDPR you have the right to:
- access the personal data we hold about you;
- request correction of inaccurate data;
- request erasure of your data;
- restrict or object to processing;
- data portability;
- withdraw consent at any time (without affecting prior processing);
- lodge a complaint with your supervisory authority — in the Netherlands the Autoriteit Persoonsgegevens.
To exercise any of these rights, email remco@nimmasoft.nl.
[8. changes to this policy]
We may update this policy. When we make material changes we will refresh the “Last updated” date at the top and, where appropriate, re-ask for consent.