Privacy Policy

Who is responsible for your data?

The controller of personal data processed through skitest.eu is Snow & More Michał Szypliński, ul. Namysłowska 6C/15, 03-455 Warszawa, Poland. You can contact us about privacy and your rights at info@skitest.eu.

Browsing and protecting the website

You can read the public ski-test catalogue without creating a customer account. Serving a page involves technical information such as your IP address, the requested address, the time of the request and information supplied by your browser. Hosting and security services may process request and security records to deliver the website, prevent abuse and investigate incidents. The legal basis is our legitimate interest in operating and protecting the website, under Article 6(1)(f) GDPR.

We use hosting and website-security service providers, including UnixStorm and Wordfence/Defiant. These providers may process technical or security information to perform their services. Security information is not the same as optional audience measurement and is not switched off by rejecting analytics.

Contacting us

For general enquiries and privacy matters, contact info@skitest.eu. For order-related correspondence, contact orders@skitest.eu.

If you email us, we process the information you choose to send, your email address and the correspondence needed to answer you. The legal basis is our legitimate interest in handling correspondence, under Article 6(1)(f) GDPR. If your request concerns entering into a contract, Article 6(1)(b) GDPR may also apply. Please do not send sensitive information unless it is necessary for your request.

Correspondence is kept while we handle the matter and, where records are needed for related legal obligations or claims, for the applicable statutory period. Information that is no longer needed for those purposes should be deleted.

Optional Google Analytics

Optional audience measurement uses Google Analytics 4, provided in the EEA by Google Ireland Limited. Its purpose is to understand use of public catalogue pages, not to personalise advertisements. When you consent, Google may process browser/device information, viewed public page addresses and identifiers stored in analytics cookies.

Optional analytics is based on your consent under Article 6(1)(a) GDPR. You can reject it without losing access to the public catalogue. The analytics controls offer Accept analytics and Reject optional, with a Cookie settings entry for later changes. The Google Analytics tag is not loaded before you give permission. You can withdraw permission through Cookie settings; withdrawal does not affect the lawfulness of processing that happened before withdrawal.

This notice covers optional Google Analytics only. Meta Pixel is not enabled. Any future addition of advertising measurement requires a separate update to this notice and the relevant consent controls.

Storage and retention

Your versioned analytics choice is kept in sessionStorage for the browser-tab session, as managed by your browser. This is separate from analytics cookies and from Google's own data-retention settings.

The integration requests browser-session analytics cookies rather than Google's default two-year lifespan. Browser-session cookies and tab-session consent are separate mechanisms, and browser session restoration can affect their lifetime.

The Google Analytics retention settings are 14 months for user data and 2 months for event data. These are separate settings and do not describe the lifetime of cookies or the retention of aggregated reports.

Technical data and security logs are retained for the time necessary to operate the website and investigate security incidents.

Wordfence Live Traffic is configured to retain records for 30 days, subject to its scheduled cleanup. This specific setting does not establish the retention period of all hosting logs, backups or other security records.

Recipients and international processing

Our authorised hosting, technical-security and communication providers may receive information needed for their tasks. If you consent to optional analytics, Google will also process analytics information. Some providers may process information outside the EEA. Such transfers are subject to the applicable basis and safeguards under Chapter V GDPR. Contact info@skitest.eu for information about the safeguards applicable to your data. The location of the hosting server does not determine the location of all processing by other providers.

Your rights

Subject to the conditions in the GDPR, you may request access to your personal data, correction, erasure, restriction of processing or data portability. You may object to processing based on legitimate interests and withdraw consent where processing relies on consent. Contact info@skitest.eu to make a request. You may also lodge a complaint with a supervisory authority, including the President of the Personal Data Protection Office in Poland (UODO).

Providing information in an email is voluntary, but we may need contact details and the substance of your request to answer it. No optional analytics consent is required to read the public catalogue. This notice does not open online sales or replace the separate terms and information required before PDF sales are launched.