GDPR and Privacy
Privacy Policy
This policy explains what personal data we collect, why we process it, how long we keep it, and how you can exercise your rights under EU GDPR.
1. Data Controller
Grenoble Ski acts as data controller for personal data processed through this platform for account management, security, communication, and service delivery.
2. Data We Process
Depending on your usage, we process profile data (name, email, account identifiers), transaction/listing data, messages metadata, technical logs (IP, device, browser), and preference data such as language and cookie consent choices.
3. Legal Bases (GDPR Art. 6)
We process personal data based on contractual necessity (account and service features), legitimate interests (security, fraud prevention, platform integrity), legal obligations, and consent when required (for optional cookies or communications).
4. Why We Use Data
Data is used to run the platform, personalize language and core experience, moderate abusive behavior, respond to support requests, and comply with legal obligations. We do not sell personal data.
5. Retention
We retain data only as long as needed for the purpose collected, legal compliance, dispute handling, or fraud prevention. Retention periods vary by data type and legal context.
6. Sharing and Processors
We may share limited data with trusted processors (hosting, infrastructure, email, analytics/security tooling) under contractual safeguards and confidentiality obligations.
7. Your GDPR Rights
- Access your data and obtain a copy.
- Rectify inaccurate or incomplete data.
- Request erasure where applicable.
- Restrict processing in specific cases.
- Object to processing based on legitimate interests.
- Receive data portability where technically feasible.
- Withdraw consent at any time for consent-based processing.
- Lodge a complaint with your supervisory authority.
8. Cookies, Ads and Consent Preferences
We store your cookie preference using a consent cookie. On the website, advertising scripts are loaded only after you accept optional cookies. If you reject optional cookies, non-essential advertising is not loaded.
In the Android app, ad consent is requested before initializing AppLovin ads. You can reopen ad preferences any time from the in-app menu.
9. Security
We use technical and organizational measures appropriate to the risk, including access controls, secure transport, and monitoring to protect data integrity.
10. Contact and Requests
For data access, deletion, correction, or objection requests, contact the platform administrators through available contact channels and include enough detail to identify your account.