Privacy Policy

DRAFT - to be reviewed and approved by SKIERS before go-live.

1. Data controller

SKIERS.dk ApS
Nørre Allé 86, DK-8000 Aarhus C, Denmark
Danish company registration number (CVR): 39203367
Email: [email protected] · Phone: +45 27 14 34 75

SKIERS.dk ApS is the data controller for the personal data you provide to us through this website.

2. What data do we collect?

We only collect the data we need to answer your enquiry and carry out your trip:

• When you contact us: name, email, phone number and your message.
• When you sign up for a trip: name, address, date of birth, email, phone number, the chosen trip and extras, and any comments you add yourself.
• Contact person: name, phone number and email of the contact person you give when signing up. The contact person receives a copy of receipts and important emails about the trip. Please let them know that you have given us their details.
• When you pay: the payment is handled by our payment provider Stripe. SKIERS never sees or stores your card details.
• When you use the chat: the questions you type and the answers you receive. Please do not type your name, contact details or other personal information in the chat.

Please do not write information about your health in the comments field. If you have, for example, an injury or an illness that matters for your trip, contact us directly.

When you visit the website, your IP address is processed for technical reasons to show the pages and protect them against attacks. To stop spam, we store an encoded version (a hash) of your IP address for no more than 24 hours when you submit a form. We do not store the IP address itself.

We count visits with Cloudflare Web Analytics, which does not use cookies and cannot recognise you from one visit to the next. We do not use tracking cookies or marketing cookies. The chat remembers your conversation while you move between pages in your browser’s temporary storage (sessionStorage), which is cleared when you close the tab.

3. Purpose and legal basis

• Answering enquiries and questions in the chat: legitimate interest (Article 6(1)(f) of the General Data Protection Regulation). Our legitimate interest is being able to answer you and improve our information.
• Carrying out your booking and trip: performance of a contract (Article 6(1)(b)). Without the data we cannot complete your booking.
• Bookkeeping and accounts: legal obligation under the Danish Bookkeeping Act (Article 6(1)(c)).
• Security and protection against spam and misuse: legitimate interest (Article 6(1)(f)).

We do not make decisions about you based solely on automated processing.

4. Who do we share data with?

We only share your data with parties needed to deliver our services. These data processors process the data on our behalf and on our instructions:

• Cloudflare, which hosts the website and stores bookings and backups in the EU.
• Resend, which sends confirmations, receipts and messages about your trip.
• Stripe, which handles payment of the deposit and instalments.
• e-conomic, our accounting system for invoicing and bookkeeping.
• Microsoft 365, our email system, where messages from the contact form and emails to [email protected] are received.
• Anthropic, which provides the AI model (Claude) that answers questions in the chat. Anthropic does not use the conversations to train its models.

We also share data with partners to the extent needed to carry out your trip. They are data controllers for their own processing:

• ski schools and ski instructor associations, for example for your employment and training,
• airlines and transport companies, when transport is part of the trip,
• authorities, when a visa or work permit has to be applied for.

We never pass your data on to third parties for marketing purposes.

5. Transfers to countries outside the EU

Some of our data processors are US companies (Cloudflare, Stripe, Resend, Microsoft and Anthropic), so data may be processed in the United States. These transfers are based on the EU-US Data Privacy Framework where the company is certified under it, and otherwise on the European Commission’s standard contractual clauses. You can get a copy of the safeguards by writing to us.

When your trip goes to a country outside the EU, such as Canada or Japan, we transfer the data needed to carry out the trip to the ski school and other partners in that country. This is necessary to perform our contract with you (Article 49(1)(b)).

6. Storage and deletion

• Messages from the contact form are received as email and deleted from our email system no later than 12 months after the enquiry is closed.
• Questions and answers from the chat are deleted automatically after no more than 90 days.
• Data used only to carry out the trip, such as date of birth, contact person and comments, is deleted or anonymised no later than 12 months after the trip has ended.
• Data that forms part of our bookkeeping, such as name, address, invoices and payments, is kept for 5 years from the end of the financial year it relates to, as required by the Danish Bookkeeping Act. It is then deleted.
• Backups of the database are deleted automatically after 90 days.

7. Your rights

Under the General Data Protection Regulation you have the right:

• to access the data we process about you,
• to have incorrect data corrected,
• to have data deleted when it is no longer needed,
• to have the processing restricted,
• to object to processing based on legitimate interest,
• to receive your data in a commonly used format (data portability).

Requests about your rights should be sent to [email protected]. We reply as quickly as possible and no later than within one month.

8. Complaints

If you are unhappy with how we process your personal data, you can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, www.datatilsynet.dk. You can also contact the data protection authority in the country where you live.

Last updated 10 November 2026.