Privacy Policy

Last Updated: January 2026

This Privacy Policy of eSki Rental ("we", "us" or "our") describes how and why we may access, collect, store, use and/or share ("process") your personal information when you use our services ("Services"). This includes situations in which:

  • You visit our website or any of our linked websites that are connected to this Privacy Statement.
  • You interact with us through various channels, including sales, marketing, or events.

Data Controller

The controller of personal data collected and processed through the eSki platform is eSki, which determines the purposes and means of processing personal data, in accordance with the General Data Protection Regulation (EU 2016/679 – GDPR).

For any matter concerning the processing of personal data or the exercise of your rights, you may contact the Data Protection Officer (DPO) at the following email address: dpo@eskirental.com

TABLE OF CONTENTS

  1. What data do we collect?
  2. How do we use your data?
  3. Legal basis for processing personal data
  4. When and how do we share your data?
  5. Do we use cookies and other tracking technologies?
  6. How long do we retain your data?
  7. How do we protect your data?
  8. Do we collect data from individuals under 18?
  9. What are your privacy rights?
  10. Controls for Do-Not-Track features
  11. Will we update this notice?
  12. How can you access, update, or delete your data?

1. What data do we collect?

summary-label We collect only the information you choose to give us, in order to recommend the appropriate equipment for you.

We collect personal information that you provide to us during registration, equipment booking, or when contacting us:

  • Booking details: First name, Last name, Email, Age, Gender.
  • Fit data: Height, Weight, Experience level (3 options), Foot characteristics (4 options), Shoe size, Head circumference, Hand size, Dominant foot (Right/Left).
  • Technical data: Cookie identifiers.
  • Support data: Content of support requests.

We do not collect 'sensitive data' (e.g. health, religion) nor data from third parties.

2. How do we use your data?

summary-label We use your data to complete your bookings and personalize your experience.

We use your information for the following purposes:

  • Booking management & service delivery: To process your booking, communicate with you regarding confirmation or any changes, and prepare your equipment in a timely manner.
  • Payments and billing: To complete transactions through Viva Wallet, with full transaction security.
  • Personalization: To recommend the appropriate equipment based on the details you provide (height, weight, experience level, etc.).
  • Customer service & support: To respond to requests and improve your experience with the platform.
  • Updates and communication: To inform you of important changes to our policy or new features.
  • Analytics & service improvement (with consent): To understand how you use the platform and improve our services (via cookies/analytics).
  • Marketing (with consent): To send you newsletters, offers, and news, with the ability to unsubscribe at any time.
  • Legal compliance & security: To fulfill legal obligations (tax/accounting) and protect the system from fraud or malicious third-party actions.

3. Legal basis for processing personal data

eSki processes your personal data only when a lawful basis exists, in accordance with Article 6 of the General Data Protection Regulation (GDPR).

Specifically, processing takes place in the following cases:

  • Performance of a contract: When processing is necessary for the completion and management of your booking and the provision of our services.
  • Consent: When you explicitly provide us with your consent, particularly for marketing purposes, sending newsletters, and the use of non-essential cookies.
  • Legal obligation: When processing is required for our compliance with tax, accounting, or other legal obligations.
  • Legitimate interest: When processing is necessary for the security of our systems, fraud prevention, and improvement of our services, provided that your rights and freedoms do not override this.

In all cases, we process only the strictly necessary data in a transparent and proportionate manner.

4. When and how do we share your data?

We share data only with:

  • Data processors: Viva Wallet (payments), Render (hosting), Mailersend (email), Google Ads/Analytics, Microsoft Clarity, support tools.
  • Ski equipment stores: They receive only the strictly necessary data to prepare the equipment (name, email, age, height, weight, gender, level, shoe size, foot characteristics, etc.).
  • Legal authorities: Where required by law.

With all partners we ensure that they apply the necessary security measures.

5. Do we use cookies and other tracking technologies?

summary-label Yes

We use essential cookies for the operation of the platform (e.g. maintaining login sessions, language selection, payment functionality via Viva Wallet).

With your consent, we also use analytics and advertising cookies (e.g. Google Ads conversion & remarketing) to evaluate the performance of our campaigns and improve our services.

You may accept or reject non-essential cookies via the consent banner on your first visit, or disable them through your browser settings.

6. How long do we retain your data?

We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. Specifically:

  • Booking and payment data: retained for the period required by tax and accounting legislation (up to 10 years).
  • User profile and fit data: retained for as long as you remain registered and for up to 24 months after account deletion, unless you request earlier deletion.
  • Communication/support records: up to 24 months from the closure of the request.
  • Marketing data (e.g. newsletter emails): until you withdraw your consent or choose to unsubscribe.
  • Cookies and online technologies: in accordance with the periods defined in the Cookie Policy (typically session-based or up to 24 months).

After the expiry of the above periods, data is deleted or anonymized in a secure manner, unless retention is required by law or for the establishment, exercise, or defense of legal claims.

7. How do we protect your data?

summary-label We endeavor to protect your data using a combination of organizational and technical security measures.

eSki places great importance on the security of your personal information and is committed to protecting the data we collect. We implement appropriate administrative, technical, and physical measures to protect the Personal Data you provide or that we collect, ensuring it is secure against accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, or misuse.

However, no method of transmission over the Internet or electronic storage is completely secure, so we cannot guarantee absolute security. You should access our Services in a secure environment.

8. Do we collect data from individuals under 18?

summary-label Bookings for minors must be made by a parent/guardian.

Our Services may be used by individuals under the age of 18, provided that the booking is made by a parent/guardian.

9. What are your privacy rights?

summary-label You may review, modify, or restrict the processing of your data.

You have the right to clear, transparent, and accessible information about how we process your data and your rights under the GDPR (Article 13 et seq.):

  • You have the right to access and receive a copy of your data (Article 15 GDPR).
  • If your data is inaccurate or outdated, you have the right to request correction (Article 16 GDPR).
  • You may request the deletion of your data ("right to be forgotten") (Article 17 GDPR).
  • You may opt out of marketing communications at any time (Article 21(2) GDPR).
  • You may withdraw your consent for future processing, where processing is based on your consent (Article 7 GDPR).
  • You have the right to data portability, which allows you to receive your data in a commonly used, machine-readable format, applicable to data provided under a contract or consent and processed by automated means (Article 20 GDPR).
  • You may request restriction of data processing (Article 18 GDPR) under the following conditions:
    • You contest the accuracy of the data while we verify its accuracy,
    • The processing is unlawful, but you request restricted use rather than deletion,
    • We no longer need the data for processing purposes, but you need it for legal claims,
    • You object to processing based on legitimate interests, pending verification of whether our legitimate grounds override yours.
  • You have the right not to be subject to automated decision-making, including profiling, if it significantly affects you (Article 22 GDPR).
  • Finally, if you believe that the processing of your data has been carried out in violation of applicable data protection legislation, you have the right to lodge a complaint with the competent data protection authority (Article 77 GDPR).

To manage your preferences, request removal from mailing lists, or exercise your rights, please contact us at dpo@eskirental.com

10. Controls for Do-Not-Track features

Most browsers and mobile devices offer a Do-Not-Track ("DNT") option to express your privacy preference. At present, we do not respond to DNT signals, but if standards are adopted in the future, we will update this notice accordingly.

11. Will we update this notice?

summary-label Yes, we may update this notice as necessary to comply with relevant laws.

We may periodically revise this Privacy Statement, with the update date displayed at the top. If we make significant changes, we will notify you by posting an announcement or by contacting you directly. We encourage you to review this Privacy Statement regularly.

12. How can you access, update, or delete your data?

Depending on applicable law, you may have the right to request access to your personal data, understand how we process it, correct inaccuracies, or delete your data. To exercise these rights, please send us an email at dpo@eskirental.com