ski-legs.com

Privacy Policy

Effective date: 12 October 2025
Last updated: 12 October 2025Ski-Legs (“we”, “us”, “our”) provides ski-specific training programs and educational content.1) Who is the data controller?Until incorporation, Ski-Legs is the trading name of David Salomoni (sole proprietor).
Data controller: David Salomoni
Address: Via Assietta 16, Sauze d'Oulx, Italy
Email: [email protected]
2) What data we collectAccount & purchase data: name, email, order details, items purchased, payment status (no full card numbers).Communications: emails, messages, support requests.Usage data: pages viewed, clicks, device/browser info, IP address, timestamps.Downloads/access: product delivery logs (e.g., link opened, file downloaded).[Optional] Newsletter data: email, subscription status, open/click rates.[Optional] Analytics & cookies: see Section 10.We do not collect special-category data (health, religion, etc.).3) Why we process your data (purposes) & legal basesProvide and deliver products (create account, fulfill orders, send downloads/access): Contract (Art. 6(1)(b) GDPR).Payments & tax compliance (via Gumroad or other processors): Legal obligation and Contract.Customer support & service notices (e.g., file fixes, updates, security issues): Legitimate interests and/or Contract.Prevent abuse, secure our services, enforce terms: Legitimate interests.[Optional] Email newsletter/marketing: Consent (you can withdraw any time).[Optional] Analytics & performance measurement: Consent via cookie banner (see Section 10).4) Where your data comes fromDirectly from you (checkout, forms, email).From our payment/commerce provider (e.g., Gumroad) to confirm orders and delivery.From our site/app via cookies and similar technologies (with consent where required).5) Payments and commerceWe use Gumroad (and possibly other platforms) to process payments and deliver digital goods. Gumroad acts as an independent controller/processor for payment data and may collect personal data to comply with tax/anti-fraud laws. Your payment card data is handled by Gumroad and its payment partners—we do not receive or store full card numbers.
See Gumroad’s privacy information on their website for details.6) Sharing your dataWe share data only with trusted service providers who help us run Ski-Legs, under contracts that protect your privacy:Payment/commerce: Gumroad (orders, VAT, delivery).Hosting & infrastructure: [e.g., Vercel/Netlify/Cloudflare, name yours].Email & support: [e.g., Gmail/Help Scout], used for communications.[Optional] Email marketing: [e.g., MailerLite/Beehiiv/Substack].[Optional] Analytics: [e.g., Plausible/Google Analytics].Legal/Compliance: auditors, authorities, or advisors when required by law.We do not sell your personal data.7) International transfersIf data is transferred outside the EEA/UK, we rely on an adequacy decision or approved safeguards (e.g., EU Standard Contractual Clauses and UK Addendum). You can request a copy of relevant safeguards at [email protected]
.8) How long we keep dataWe keep personal data only as long as needed:Order records: up to 10 years where required for tax/accounting.Account & delivery logs: while your account is active and for a reasonable period thereafter for security and audit.Support emails: typically 24 months after resolution.[Optional] Marketing lists: until you unsubscribe or your consent is withdrawn.Analytics cookies/events: per tool’s retention setting, see Section 10.We then delete or anonymize data.9) Your rights (EEA/UK)You can access, correct, delete, or restrict processing of your data; object to processing based on legitimate interests; and port your data.
Where we rely on consent, you can withdraw it at any time (this won’t affect prior processing).
To exercise rights, email [email protected]
.
You also have the right to lodge a complaint with your local data protection authority (e.g., BfDI in Germany, Garante in Italy, ICO in the UK).10) Cookies, tracking & similar technologiesWe use essential cookies to operate the site and deliver purchases. With your consent via our cookie banner, we may also use optional cookies/tools for analytics and (if enabled) marketing.Essential (always on)Session and security cookies; product delivery and fraud prevention.[Optional] Analytics (consent)Choose one (edit accordingly):Plausible (privacy-friendly, cookieless): aggregate usage stats; no cross-site tracking.Google Analytics 4: usage metrics (pages, events, device, IP). We use IP masking and data retention controls.[Optional] Marketing/ads (consent)Only if you actually use them: e.g., Meta Pixel, Google Ads tags, etc.Manage cookies: You can change or withdraw your consent at any time via the cookie banner/settings on our site. You can also block cookies in your browser, but essential features may break.11) CommunicationsTransactional emails: order confirmations, downloads, critical updates (you cannot opt out of strictly necessary messages).Marketing emails (if enabled): sent only with your consent. Unsubscribe links are included in every message.12) SecurityWe use reasonable technical and organizational measures to protect personal data (e.g., HTTPS, access controls, least-privilege accounts, regular updates). No system is 100% secure; please use a strong, unique password and keep it confidential.13) ChildrenOur services are not directed to children under 16 (or the age required by local law). We do not knowingly collect data from children. If you believe a child has provided data, contact us to delete it.14) Third-party linksOur site may link to third-party websites or platforms (e.g., Gumroad). Their privacy practices are their own; please review their policies.15) Changes to this policyWe may update this policy to reflect legal or operational changes. We’ll post the new version with a new “Last updated” date. Material changes may also be announced by email or site notice.16) ContactFor questions or to exercise your rights:
Email: [email protected]