Privacy Policy

Scuola Italiana di Sci Cermis Cavalese, Via Cermis 1, 38033 Cavalese (TN), Italy. VAT no. 01234690228.

For any question about this policy or your data, write to [email protected] or to our certified email [email protected], or call +39 0462 341303.

When you email us, message us on WhatsApp, call us or use the forms on this website, we process the data you give us (name, contact details and message) only to reply to you. The website forms send your message to our mailbox through Brevo (Sendinblue SAS, France), acting as our data processor: the message is not stored on the website.

Legal basis: pre-contractual steps taken at your request. We keep the correspondence for as long as needed to handle your request and, if it leads to a business relationship, for up to 10 years as required by law.

Online course bookings take place on the external platforms Skiwork (skiwork.shop) and JotForm (jotform.com), which this website links to. The data you enter there is processed to organise and deliver the course and to meet tax and accounting obligations.

Legal basis: performance of the contract and legal obligations. Retention: up to 10 years. The privacy policies of Skiwork and JotForm also apply to processing on their platforms.

To organise lessons and look after students safely, we process the data needed for the course: personal and contact details, home address and local accommodation, technical level and previous skiing experience and, where needed, health data such as allergies, physical limitations or injuries suffered during lessons.

Children's courses and end-of-course races may use bibs showing the student's name or a parent's phone number, and photos and videos of the activities may be taken.

In the event of an accident, data is shared with the insurance company, including through the Sicur Ski Web School platform used to report claims.

Legal basis: performance of the contract and legal obligations; for health data, fulfilment of contractual and insurance obligations and the establishment or defence of legal claims (art. 9 GDPR). Without this data we cannot run the course.

If you subscribe to our newsletter, we use your email address only to send you news and offers from the school. You subscribe by ticking the consent box in the form, and the list is managed by Brevo (Sendinblue SAS, France), which processes the data on our behalf and records email opens and clicks. Legal basis: your consent, which you can withdraw at any time by writing to [email protected]. We keep your address until you withdraw consent.

If you send us your CV on your own initiative, we use it only to consider a possible collaboration and keep it for a maximum of 2 years.

Only if you accept it in the cookie banner, we use Google Analytics 4 (Google Ireland Limited) to understand how the website is used: pages visited, buttons clicked (for example booking, WhatsApp or PDF downloads), device type and approximate location. We do not use this data for advertising and do not link it to your identity.

Without consent no Analytics cookies are set and Google receives at most anonymous signals without identifiers. With consent, the cookies _ga and _ga_78LGHKJSCC are used, lasting up to 2 years. Legal basis: your consent, which you can withdraw at any time with the button below or via the “Cookie preferences” link at the bottom of every page.

Google may also process data in the United States: the transfer is covered by the EU-U.S. Data Privacy Framework, in which Google participates.

Only if you accept marketing cookies in the banner, we use the Meta Pixel and the Meta Conversions API (Meta Platforms Ireland Limited) to measure the results of our ads on Facebook and Instagram and show them to interested people. We send Meta the pages you visit and some actions on the site: clicks on phone, email, WhatsApp or booking, form submissions and newsletter sign-ups.

Along with these events Meta receives your IP address, browser type, the _fbp and _fbc cookies (lasting up to 90 days) and, when you submit a form, your email address encrypted with an irreversible hash (SHA-256), which Meta only uses to recognise one of its users. For the collection and transmission of this data the school and Meta are joint controllers; what Meta does afterwards is governed by its own policy (facebook.com/privacy/policy).

Without consent the Pixel is not loaded and nothing reaches Meta's servers. Legal basis: your consent, which you can withdraw at any time with the button below or via the “Cookie preferences” link at the bottom of every page. Meta may also process data in the United States, under the safeguards of the EU-U.S. Data Privacy Framework.

The Contact page shows a Google Maps map. To display it, your browser connects to Google servers, which receive your IP address and process it under their own privacy policy (policies.google.com/privacy).

Legal basis: legitimate interest in presenting the website clearly and showing how to reach us.

The website stores some essential technical information in your browser, which is never sent to anyone: your cookie choice and the visit count used to show promotional offers. No consent is required for this data.

The Facebook, Instagram and WhatsApp buttons are plain links: opening them sends no data to these services, apart from what is described for Meta if you accepted marketing cookies. From that moment, the privacy policy of the service you visit applies.

We do not sell your data. It may be processed by:

• technical providers that run the website and services: Cloudflare (website hosting and security), Brevo (sending form emails and managing the newsletter), Google (statistics with consent and map), Meta (ad measurement, with consent), Skiwork and JotForm (bookings);
• insurance companies, in the event of a claim, and banks, for payments and refunds;
• consultants and professionals for administrative, tax and legal obligations;
• public authorities, where required by law.

Some providers may process data outside the European Union. In these cases the transfer takes place with the safeguards provided by the GDPR, such as adequacy decisions or standard contractual clauses.

At any time you can ask us to access, correct or delete your data, restrict or object to its processing, or receive it in a portable format (articles 15-22 GDPR), and withdraw any consent given, without affecting processing already carried out. We reply within 30 days. Write to [email protected].

If you believe your data is being processed incorrectly, you can lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or the authority of your country.

Providing data is optional, but without the necessary data we cannot reply to requests, handle bookings or run courses. Consent to statistics, marketing and the newsletter is never mandatory.