[legal · privacy]

Privacy Policy

Last updated: 31 May 2026

[1. data controller]

Pick-a-Ski is operated by Nimmasoft. For privacy questions or to exercise your rights, contact remco@nimmasoft.nl or use the contact form.

[2. what we collect]

We process the following categories of personal data:

  • Technical data: IP address (anonymised), browser type, device type, operating system, referrer, pages visited, timestamps.
  • Behavioural data (only with consent): anonymised mouse movements, clicks, scrolls and page interactions recorded by Contentsquare to help us improve usability.
  • Newsletter data: email address and preferred language if you subscribe to the newsletter.
  • Contact form data: any details you choose to submit through the contact form.
  • Consent record: the choices you made in the cookie banner and the date they were given.
[3. purposes & legal basis]
  • Operating the site: based on our legitimate interest in providing the service (Art. 6(1)(f) GDPR).
  • Analytics & session recording: only with your consent (Art. 6(1)(a) GDPR).
  • Newsletter: based on your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time.
  • Contact form: to respond to your enquiry (Art. 6(1)(b) and 6(1)(f) GDPR).
[4. who we share data with]

We use the following processors who may access personal data on our behalf:

  • Google Ireland Ltd. — Google Analytics and Google Tag Manager (analytics).
  • Contentsquare SAS — session recording.
  • Google Firebase (Google LLC) — hosting, Firestore database, file storage for ski images and form submissions.

We do not sell personal data. Some processors may transfer data outside the EEA; in those cases the transfer relies on the EU Standard Contractual Clauses and any additional safeguards the processor has in place.

[5. how long we keep it]
  • Consent record: 6 months (then we re-ask).
  • Analytics data in Google Analytics: 14 months.
  • Session recordings in Contentsquare: 13 months.
  • Newsletter email: until you unsubscribe.
  • Contact form messages: 24 months after our last reply.
[6. your rights]

Under the GDPR you have the right to:

  • access the personal data we hold about you;
  • request correction of inaccurate data;
  • request erasure of your data;
  • restrict or object to processing;
  • data portability;
  • withdraw consent at any time (without affecting prior processing);
  • lodge a complaint with your supervisory authority — in the Netherlands the Autoriteit Persoonsgegevens.

To exercise any of these rights, email remco@nimmasoft.nl.

[7. cookies]

For details about the cookies and similar technologies we use — including which categories you can accept or reject — please see our cookie policy. You can change your preferences any time via the “Manage cookies” link in the footer.

[8. changes to this policy]

We may update this policy. When we make material changes we will refresh the “Last updated” date at the top and, where appropriate, re-ask for consent.