Privacy Policy
European Ski Resorts Database
Last updated: March 9, 2026
1. Overview
Welcome to the European Ski Resorts Database ("Euro Ski DB", "we", "us", or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website skidb.info and use our services.
We are committed to protecting your privacy and ensuring transparency about our data practices. This policy complies with the General Data Protection Regulation (GDPR) and other applicable privacy laws.
Data Controller: Euro Ski DB
Location: Portugal
Contact: contact@skidb.info
2. Information We Collect
2.1 Information You Provide Directly
Currently, our website does not require user registration or account creation. We may collect information you provide when:
- Contacting us via email or contact forms
- Providing feedback or suggestions
- Reporting issues or problems
2.2 Information Collected Automatically
| Data Type | Purpose | Storage Method | Retention Period |
|---|---|---|---|
| Language Preference | Display content in your preferred language | Browser Local Storage | Until browser data is cleared |
| Search Queries | Provide search functionality | Session Memory Only | Current session only |
| Cookie Preferences | Remember your consent choices | Browser Cookies | 12 months |
| Analytics Data | Improve website performance | Google Analytics (with consent) | 26 months |
2.3 Technical Information
When you visit our website, we may automatically collect certain technical information, including:
- IP address (anonymized for analytics)
- Browser type and version
- Operating system
- Referring website
- Pages viewed and time spent
- Device information (screen size, device type)
3. How We Use Your Information
We use the information we collect for the following purposes:
Essential Functions
- Provide and maintain the website
- Enable core functionality (search, navigation)
- Remember language preferences
- Ensure website security
Improvements (With Consent)
- Analyze website usage patterns
- Improve user experience
- Optimize performance
- Develop new features
Important: We do not use your data for advertising, marketing, or selling to third parties.
4. Legal Basis for Processing
Under GDPR, we must have a legal basis for processing your personal data. Our legal bases are:
| Data Processing Activity | Legal Basis | Explanation |
|---|---|---|
| Essential website functionality | Legitimate Interest | Necessary for website operation and user experience |
| Language preferences | Legitimate Interest | Improves user experience and accessibility |
| Analytics and performance | Consent | Only with your explicit consent via cookie banner |
| Cookie consent management | Legal Obligation | Required by GDPR and ePrivacy Directive |
5. Data Sharing and Disclosure
We are committed to not selling, renting, or trading your personal information. We may share information only in the following limited circumstances:
5.1 Third-Party Services
Google Analytics
Purpose: Website analytics and performance monitoring
Data Shared: Anonymized usage data
Legal Basis: Consent
Privacy Policy: Google Privacy Policy
Mapbox
Purpose: Interactive map functionality
Data Shared: Map usage data
Legal Basis: Legitimate Interest
Privacy Policy: Mapbox Privacy Policy
5.2 Legal Requirements
We may disclose information if required by law, court order, or government authority, or to protect our rights, safety, or the safety of others.
6. Data Retention
We retain personal data only as long as necessary for the purposes outlined in this policy:
- Language Preferences: Stored locally until you clear your browser data
- Search Queries: Not stored beyond the current session
- Cookie Consent: 12 months from your last visit
- Analytics Data: 26 months (Google Analytics standard retention)
- Contact Communications: 3 years from last communication
Your Control: You can delete most data immediately by clearing your browser's local storage and cookies.
7. Your Rights
Under GDPR and other privacy laws, you have the following rights regarding your personal data:
Access and Portability
- Right of Access: Request information about data we hold
- Data Portability: Receive your data in a structured format
Control and Correction
- Rectification: Correct inaccurate information
- Erasure: Request deletion of your data
- Restrict Processing: Limit how we use your data
Consent and Objection
- Withdraw Consent: Change your cookie preferences anytime
- Object to Processing: Object to data processing
Complaints
- Supervisory Authority: File complaints with data protection authorities
- Portugal DPA: CNPD (cnpd.pt)
How to Exercise Your Rights
To exercise any of these rights, please contact us at contact@skidb.info. We will respond within 30 days of receiving your request.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data:
Technical Measures
- HTTPS encryption (TLS 1.3)
- Secure hosting infrastructure
- Regular security updates
- Access controls and authentication
- Data backup and recovery procedures
Organizational Measures
- Privacy-by-design principles
- Regular security assessments
- Data minimization practices
- Staff privacy training
- Incident response procedures
Data Breach Notification: In the unlikely event of a data breach, we will notify you and relevant authorities within 72 hours as required by GDPR.
10. International Data Transfers
Our website is hosted in the European Union, ensuring GDPR compliance. However, some third-party services may process data outside the EU:
Google Analytics
Transfer Mechanism: Google's EU-US Data Privacy Framework certification
Safeguards: Standard Contractual Clauses (SCCs) and adequacy decisions
Your Control: You can opt out of analytics cookies entirely
All international transfers are conducted with appropriate safeguards to ensure your data receives adequate protection.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
How we notify you of changes:
- Update the "Last updated" date at the top of this policy
- For significant changes, display a notice on our website
- If required by law, obtain your renewed consent
We encourage you to review this policy periodically to stay informed about how we protect your information.
12. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Data Controller Contact
Organization: Euro Ski DB
Email: contact@skidb.info
Subject Line: Privacy Policy Inquiry
Response Time: We aim to respond within 30 days
Supervisory Authority
You have the right to lodge a complaint with the Portuguese Data Protection Authority:
CNPD - Comissão Nacional de Proteção de Dados
Website: cnpd.pt
Phone: +351 213 928 400
Email: geral@cnpd.pt
This Privacy Policy is effective as of March 9, 2026 and applies to all users of the European Ski Resorts Database website.