Privacy and cookies

Controller

The controller of personal data processed on this website and in the booking system is GOLD SPORT s.r.o., Nový Svět 535, 512 46 Harrachov, Czech Republic, company ID 01596497, registered at the Regional Court in Hradec Králové, section C, file 32112. See the contact page.

What we process and why

Contact form. Your name, email address and message are emailed to the school office so that we can reply. The website does not store them; they stay only in our mailbox for as long as needed to deal with your enquiry. The legal basis is our legitimate interest in answering you.
Server logs. For every request the server records the IP address, the browser (user agent), the page address and the time. They keep the site running and secure and give us overall visitor statistics; we do not use them to profile individuals.
Google Analytics (only with your consent). If you choose “Accept” in the cookie bar, Google Analytics 4 by Google Ireland Ltd. is loaded and measures visits using the cookies _ga and _ga_*. Without consent nothing is loaded. You can withdraw consent at any time with “Cookie settings” in the footer.
Embedded third-party services. The Weather page shows a forecast by meteoblue AG, the Webcams page the Harrachov ski resort’s webcam map (sah.x3w.cz), and the Contact page an OpenStreetMap map (OpenStreetMap Foundation). They load directly with the page, before any choice in the cookie bar. The forecast’s and the webcam map’s providers may set their own cookies and record your IP address under their own privacy policies; the OpenStreetMap map sets no cookies, but it sees your IP address when it loads the map tiles.
Bookings. How we handle data in the booking system is described in the Bookings section below.

Bookings

Lessons are booked in the school’s booking system. It is run by the same controller, GOLD SPORT s.r.o., and this section applies to it. For questions about a booking and the data in it, write to booking@classicskischool.cz.

What a booking contains. Your name, email address and phone number, your lesson choices (skis, snowboard or cross-country, age group, type of lesson, number of people and days, start date, equipment rental, any voucher code) and any note you add. Providing your contact details is necessary to make a booking (a contractual requirement): without them we cannot accept the booking or agree the details with you. The legal basis is the performance of a contract and the steps we take at your request before entering into it.
Your unfinished booking, in your browser. While you fill it in, the page keeps your choices and contact details in your browser’s storage (localStorage, key ski_school_booking_data) so that you do not lose them if the page reloads. Nothing is sent to our server by this. They stay in your browser until you send the booking or start a new one, or until you clear the site’s data in your browser.
Where you came from. If you reached the booking page through a link with campaign tags (utm_source, utm_medium, utm_campaign, utm_content) or with a Facebook click identifier (fbclid), they are stored with the booking.
IP address and browser. With the booking we store the IP address it was sent from and your browser (user agent). The booking system also records the IP address and browser of every request in its server logs. These, and the source tags, serve to keep the system secure and to give us overall statistics on where bookings come from; the legal basis is our legitimate interest.
A copy for the office. Every booking is written to a Google spreadsheet (Google Sheets) that the school office works from; Google (Google Ireland Ltd.) processes this data on our behalf and may also process it outside the EU; such transfers rely on the EU-US Data Privacy Framework or on standard contractual clauses. The spreadsheet receives the booking details and contact details, not the IP address, browser or source tags.
Emails. Emails about a booking (the booking confirmation and an offer from the office) are sent through Amazon SES (Amazon Web Services) in the eu-central-1 region in Frankfurt; the school office receives a blind copy. The text of the email sent is stored with the booking. The emails contain no open or click tracking.
Where the data is kept. Bookings, server logs and email records are kept with Amazon Web Services in the eu-central-1 region (Frankfurt am Main, Germany).
Automated decisions. No automated decision-making or profiling takes place.
How long. We keep data for these fixed periods. You can ask us to erase your data at any time at booking@classicskischool.cz.
- Bookings, including the IP address, browser and source tags stored with them, and their copy in the office’s spreadsheet are kept until 31 December of the third year after the end of the season in which the lesson took place. That is the general limitation period for claims under the Czech Civil Code (§ 629). They are then deleted, unless the law requires accounting or tax documents to be kept longer; those are kept separately for the period the law sets.
- The booking system’s server logs and the booking page’s access logs (IP address, browser) are kept for 13 months and then deleted automatically.
- Records of sent emails are kept for about 13 months.
- Your unfinished booking in your browser is deleted when you complete the booking or start a new one; you can also clear it yourself.

Cookies

Cookie	Purpose	Lifetime
`wc_lang`	remembers the language you chose	1 year
`wc_consent`	remembers your cookie choice	1 year
`_ga`, `_ga_*`	Google Analytics, only with consent	up to 2 years
cookies of meteoblue and the Harrachov ski resort	the embedded forecast and webcam map on the Weather and Webcams pages	as set by their providers

Your rights

You have the right of access, rectification, erasure, restriction, data portability and objection, and the right to complain to the Czech Office for Personal Data Protection (www.uoou.cz). Write to us via the contact page.