Privacy policy

The Skipedia website (skipedia.org) and the Skipedia mobile app are owned by Bons Websistemes SL, a company registered in Andorra at Carrera Mas de Ribafeta 3B, Arinsal, AD400, Andorra.

The contact person for data protection matters is Ana Pujal. Any enquiry about your data is welcome at [email protected].

Data you give us yourself.

• A resort review: name, email address, review text, category scores, trip dates.
• A listing in the Ski buddies section: name, email address, resort and trip dates, age group, departure city, listing text and the messages you exchange with other members.
• An enquiry through the contact form: name, email address, subject and message.

Data collected automatically.

• Your IP address and browser string at the moment a form is submitted - stored with the entry, they help us tell people from bots and settle disputes.
• Usage statistics: the pages you opened, the referring source, device type, browser and approximate region derived from the IP address.
• A notification subscription identifier if you subscribed: the browser push endpoint or the device token in the app.

We do not collect special categories of data - health, origin, opinions or beliefs - and ask you not to put them into free-text fields.

• Publishing reviews and listings and carrying messages between members of the Ski buddies section. Basis: performance of a contract with you - you send material so that we publish it.
• Service emails: confirmations, edit and delete links, account sign-in, notices about new messages. Basis: performance of a contract.
• Replying to enquiries from the contact form. Basis: our legitimate interest in answering people who write to us.
• Protection from bots and abuse and the handling of disputes. Basis: legitimate interest in the security of the service.
• Usage statistics, so that we know which sections are useful and can develop them. Basis: your consent, given through the cookie notice.
• Notifications about news and snowfall. Basis: your consent, given when you subscribe and withdrawable in your browser or app settings.

We do not sell personal data and do not pass it to advertising networks for personalised advertising.

Data reaches only those services without which the site would not work. All of them act as processors on our instructions and under data processing agreements.

• Mailjet (Sinch, France) - sending email; receives the recipient address and the message text.
• Cloudflare (USA, Europe) - site delivery and the Turnstile check on forms; processes the IP address and technical request data.
• Google Analytics (Google Ireland Ltd.) - usage statistics; receives a pseudonymous visitor identifier, device details and the pages viewed.
• Google Firebase Cloud Messaging and Apple Push Notification service - notification delivery; receive the device token and the notification text.
• The hosting provider of the server that runs the site and holds the database.

OpenStreetMap tiles, MET Norway forecasts, Open-Meteo climate series and YouTube videos load in your browser directly from their servers, which means your IP address becomes known to them. We do not pass them any lists of our users.

We disclose data to public authorities only where the law requires it, and only to the extent the law prescribes.

Hotel cards lead to the booking service Vio.com. If you follow such a link and book, we earn a commission. The link carries our partner identifier and the search parameters - dates, city, number of guests - but not your personal data. These links are marked with the sponsored attribute.

From the moment you follow the link, the Vio.com privacy policy applies; we are not responsible for what happens on their site.

• sk_session - keeps your account session if you signed in through an email link. Lives two months.
• Google Analytics cookies - a pseudonymous visitor identifier used to count visits. Live up to two years.
• In your browser’s local storage we note that you have closed the cookie notice and that you have rated a resort, so as not to show the same thing twice. These notes never reach our server.

You can refuse analytics cookies in your browser settings or with the Google Analytics Opt-out add-on. Refusing them does not prevent you from using the site.

• A published review or listing - until you delete it.
• A sign-in link - 30 minutes; an edit link - three months; an account session - two months.
• Contact form enquiries - one year.
• Usage statistics in Google Analytics - 14 months.
• A notification subscription - until you cancel it or the delivery service reports the address as invalid.

The server is located in the European Union. Some services - Cloudflare, Google and Apple above all - may process data outside the European Economic Area. Such transfers rely on the European Commission’s standard contractual clauses or on an adequacy decision.

In respect of your data you have the right to:

• obtain a copy of it and learn what exactly we hold;
• have inaccurate data corrected;
• have it erased;
• restrict processing or object to it;
• receive the data in a machine-readable form and transfer it to another controller;
• withdraw consent where processing rests on it - this does not affect the lawfulness of processing before withdrawal.

You can view, edit or delete a review and a listing yourself - through the link in the email or in your account. To erase all data at once, write to [email protected] from the same address you used to submit the material: we will delete the records and confirm by reply within 30 days.

If our answer does not satisfy you, you may lodge a complaint with a supervisory authority - in Andorra this is the Agència Andorrana de Protecció de Dades, and residents of the EEA may approach the data protection authority of their own country.

The site runs over HTTPS, access to the database is restricted and password protected, email is sent through a provider with channel encryption, and forms are protected by the Turnstile check. No transmission over the internet is completely secure, which is why we collect the minimum and keep nothing we do not need.

The site is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has sent us their data, write to [email protected] and we will delete it.

We update this page whenever the way the site works changes. The date of the last update is shown at the top. Material changes will be noted on the page itself; if a change requires your consent, we will ask for it separately.

Bons Websistemes SL, Carrera Mas de Ribafeta 3B, Arinsal, AD400, Andorra. Contact person: Ana Pujal. Email: [email protected]. You can also write through the contact form.