legal · privacy

Privacy Policy

Last updated: 5 October 2026

1. data controller

Pick-a-Ski is operated by Nimmasoft (Dutch Chamber of Commerce / KvK no. 93621884, Lent, The Netherlands). For privacy questions or to exercise your rights, contact remco@nimmasoft.nl or use the contact form.

2. what we collect

We process the following categories of personal data:

  • Technical data: IP address (anonymised), browser type, device type, operating system, referrer, pages visited, timestamps.
  • Newsletter data: email address and preferred language if you subscribe to the newsletter.
  • Contact form data: any details you choose to submit through the contact form.
  • Consent record: the choices you made in the cookie banner and the date they were given.
  • Shop-link click data: when you click a link in the “where to buy” section we record the product, the shop, the page, your country, your language, the referrer, a shortened browser user-agent string and a timestamp. We do not store your IP address or any account identifier with this record.
3. purposes & legal basis
  • Operating the site: based on our legitimate interest in providing the service (Art. 6(1)(f) GDPR).
  • Analytics: only with your consent (Art. 6(1)(a) GDPR).
  • Newsletter: based on your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time.
  • Contact form: to respond to your enquiry (Art. 6(1)(b) and 6(1)(f) GDPR).
  • Affiliate links: to count clicks on shop links and to settle commissions with shops and affiliate networks, based on our legitimate interest in funding the site (Art. 6(1)(f) GDPR). Shop links are marked as affiliate links on the page.
4. who we share data with

We use the following processors who may access personal data on our behalf:

  • Google Ireland Ltd. — Google Analytics and Google Tag Manager (analytics).
  • Google Firebase (Google LLC) — hosting, Firestore database, file storage for ski images and form submissions.

We do not sell personal data. Some processors may transfer data outside the EEA; in those cases the transfer relies on the EU Standard Contractual Clauses and any additional safeguards the processor has in place.

Shops and affiliate networks. The links in the “where to buy” section are affiliate links: if you buy after clicking one, the shop pays us a commission. When you click such a link your browser leaves Pick-a-Ski and connects to the shop or to the affiliate network that runs its programme (for example Awin, Daisycon, TradeTracker or Webgains). The shop or network then receives your IP address, the time of the click and a click identifier, and may set a cookie on its own domain to attribute a later purchase to Pick-a-Ski. These parties act as independent data controllers under their own privacy policies; we receive only aggregated sales and commission reports without your name or contact details.

5. how long we keep it
  • Consent record: 6 months (then we re-ask).
  • Analytics data in Google Analytics: 14 months.
  • Newsletter email: until you unsubscribe.
  • Contact form messages: 24 months after our last reply.
  • Shop-link click data: 24 months, then deleted or reduced to monthly totals.
6. your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you;
  • request correction of inaccurate data;
  • request erasure of your data;
  • restrict or object to processing;
  • data portability;
  • withdraw consent at any time (without affecting prior processing);
  • lodge a complaint with your supervisory authority — in the Netherlands the Autoriteit Persoonsgegevens.

To exercise any of these rights, email remco@nimmasoft.nl.

7. cookies

For details about the cookies and similar technologies we use — including which categories you can accept or reject — please see our cookie policy. You can change your preferences any time via the “Manage cookies” link in the footer.

8. changes to this policy

We may update this policy. When we make material changes we will refresh the “Last updated” date at the top and, where appropriate, re-ask for consent.