Privacy Policy
Information on the processing of personal data by SNOWSPORTS companies
This English version is provided for information purposes only. In the event of any discrepancy or inconsistency, the Slovak version shall prevail.
CONTENTS
I. Basic Information and Data Controllers
II. Categories and Sources of Personal Data
III. Purposes, Legal Bases and Retention Periods
IV. Recipients and Transfers of Personal Data
V. Children’s Data, Health Data and Photographs
VI. Rights of Data Subjects
VII. Security and Final Provisions
I. BASIC INFORMATION AND DATA CONTROLLERS
1. Purpose of this Privacy Policy
1.1. This Privacy Policy explains how the companies operating under the SNOWSPORTS brand collect, use, retain and protect personal data.
1.2. It applies in particular to the personal data of:
a) customers and persons interested in our services,
b) participants in lessons, courses and other sports activities,
c) legal guardians of minor participants,
d) contact persons of schools, kindergartens and other organisations,
e) visitors to the website and users of contact, booking and order forms,
f) persons whose contact details have been obtained through campaigns and forms on social media,
g) applicants for employment, cooperation or instructor positions,
h) other persons communicating with SNOWSPORTS companies.
1.3. We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”), Act No. 18/2018 Coll. on Personal Data Protection and other applicable legislation.
1.4. The data controller is the SNOWSPORTS company that determines the purposes and means of the relevant processing. The controller is determined primarily according to the service ordered, the place where it is provided and the company identified in the order, confirmation, receipt or invoice.
2. Data Controllers
2.1. Depending on the particular service or purpose of processing, the controller may be one of the following companies:
Registered office: Račianska 24H, 831 02 Bratislava – mestská časť Nové Mesto
Company ID No.: 44 480 911
Tax ID No.: 2022720139
VAT ID No.: SK2022720139
Registered in the Commercial Register of the Municipal Court Bratislava III, Section Sro, File No. 133791/B
SNOWSPORTS Krahule s.r.o.
Registered office: Pri vinohradoch 19a, 831 06 Bratislava – mestská časť Rača
Company ID No.: 55 055 923
Tax ID No.: 2121864052
Registered in the Commercial Register of the Municipal Court Bratislava III, Section Sro, File No. 165428/B
SNOWSPORTS Salamandra s.r.o.
Registered office: Pri vinohradoch 19a, 831 06 Bratislava – mestská časť Rača
Company ID No.: 52 047 202
Tax ID No.: 2120889397
Registered in the Commercial Register of the Municipal Court Bratislava III, Section Sro, File No. 133234/B
SNOWSPORTS Skalka s.r.o.
Registered office: Pri vinohradoch 19a, 831 06 Bratislava – mestská časť Rača
Company ID No.: 55 058 876
Tax ID No.: 2121863942
Registered in the Commercial Register of the Municipal Court Bratislava III, Section Sro, File No. 165449/B
SNOWSPORTS s.r.o.
2.2. The shared contact details for questions and the exercise of rights relating to personal data protection are:
Website: www.snowsports.sk
Email: office@snowsports.sk
Central telephone number: +421 945 503 274
2.3. The SNOWSPORTS companies have not appointed a data protection officer pursuant to Article 37 GDPR. Questions and requests concerning the processing of personal data may be sent to the shared email address stated in Clause 2.2.
3. Determining the Controller According to the Service
3.1. For individual and group skiing or snowboarding lessons, the controller is the company operating at the relevant resort:
a) Krahule – SNOWSPORTS Krahule s.r.o.,
b) Salamandra Resort – SNOWSPORTS Salamandra s.r.o.,
c) Skalka Ski Resort – SNOWSPORTS Skalka s.r.o.
3.2. For school winter courses in Slovakia, one-day school courses at Wexl Arena, inline skating courses and separately ordered instructor services in Austria, the controller is generally SNOWSPORTS Skalka s.r.o., unless otherwise specified in the relevant offer or order confirmation.
3.3. When residential school courses and trips to Austria are arranged, SNOWSPORTS s.r.o. is the controller of the data processed for the preparation of the offer and the arrangement of the services. The relevant tour operator is an independent controller of the personal data it processes for the preparation and performance of the package travel contract.
3.4. For the operation of the website, the handling of general enquiries, central communications, marketing campaigns and the administration of SNOWSPORTS social media profiles, the controller is generally SNOWSPORTS s.r.o.
3.5. For recruitment and selection procedures, the controller is the company for which the applicant is applying or which is identified in the job advertisement. If a specific company has not yet been determined, the data are initially processed by SNOWSPORTS s.r.o. and may subsequently be transferred to the relevant SNOWSPORTS company.
3.6. If more than one SNOWSPORTS company participates in providing a service or handling a request, personal data are shared between them only to the extent necessary to process the order, communicate with the customer, provide the service or comply with a legal obligation.
3.7. A data subject may submit a request to any SNOWSPORTS company using the shared contact details. The request will be forwarded to the company responsible for the relevant processing.
II. CATEGORIES AND SOURCES OF PERSONAL DATA
4. Categories of Personal Data Processed
4.1. Depending on the service ordered, the method of communication and the relationship with the data subject, the SNOWSPORTS companies may process the following categories of personal data in particular:
a) identification data, particularly first name, surname, age or date of birth,
b) contact details, particularly telephone number, email address and correspondence address,
c) details of the child’s legal guardian and information required to match the child with their legal guardian,
d) details concerning a school, educational establishment or other organisation, particularly the name of the organisation, class or group and the contact details of the responsible person,
e) data relating to the order and provision of the service, particularly the type of service, date, location, sporting discipline, age category, skill level, assignment to a group, participation in a course or lesson, preferences and organisational requirements,
f) data required for the selection or rental of equipment, particularly height, weight, shoe size and any other necessary body measurements,
g) billing and payment information, particularly the customer’s billing details, information concerning completed payments, payment reference and information required to issue an accounting document,
h) information concerning health or special requirements that is necessary for the safe provision of the service, particularly information about health restrictions, allergies, injuries or other circumstances relevant to participation in the activity,
i) information contained in communications, orders, forms, requests, complaints, claims and related documents,
j) photographs, images, video recordings or audio recordings, where they have been made in accordance with the conditions set out in this Privacy Policy,
k) technical data relating to the use of the website, particularly the IP address, device and browser information, operational logs and data obtained through cookies or similar technologies,
l) data obtained through social media and advertising campaigns, particularly name, contact details, answers provided in a form, campaign source and communication or marketing preferences,
m) data relating to applicants for employment or cooperation, particularly information provided in a CV, information about education, qualifications, licences, professional experience, language skills, availability, references and other information provided by the applicant.
4.2. The scope of personal data processed is always adapted to the specific purpose and type of service provided. The SNOWSPORTS companies do not process personal data that they do not need for the relevant purpose.
4.3. Where payment is made through an external payment service provider, the SNOWSPORTS companies generally do not have access to complete payment card details. Such data are processed by the relevant payment service provider in accordance with its own privacy policy.
5. Sources of Personal Data
5.1. The SNOWSPORTS companies obtain personal data primarily:
a) directly from the data subject,
b) from the customer ordering the service, a legal guardian or another person authorised to act on behalf of the participant,
c) from a school, kindergarten, educational establishment, employer or other organisation ordering or arranging participation in a course,
d) through online booking, contact, order or advertising forms,
e) through social media and its lead-generation tools,
f) from a tour operator, business partner, ski resort or another entity involved in providing the service ordered,
g) automatically when the website is used, particularly through essential technical logs, cookies and similar technologies,
h) from publicly available sources, particularly in connection with a selection procedure, where the use of such data is appropriate and relates to the applicant’s professional activities.
5.2. If a customer, school, legal guardian or another person provides SNOWSPORTS with the personal data of other individuals, that person must provide only data they are authorised to disclose and must, to an appropriate extent, inform those individuals that their data have been transferred.
5.3. Where personal data have not been obtained directly from the data subject, the relevant SNOWSPORTS company will provide the necessary information in accordance with applicable legislation, unless a statutory exemption applies.
6. Requirement to Provide Personal Data
6.1. The provision of personal data required to conclude or perform a contract, process an order, organise a service, ensure the safety of participants, issue an invoice or comply with a legal obligation is a contractual or statutory requirement.
6.2. Without the necessary information, it may not be possible to process the order, assign the participant appropriately, provide the service safely, issue an accounting document or handle a request or complaint.
6.3. The provision of data for marketing purposes, the sending of offers or the publication of photographs and video recordings for promotional purposes is voluntary. Refusing or withdrawing consent does not affect the ability to use the service ordered.
6.4. Information concerning health and special requirements should be provided only to the extent necessary for safe participation in the relevant activity. There is no need to provide diagnoses or details that are not relevant to the service provided.
6.5. The provision of personal data by an applicant for employment or cooperation is voluntary. However, without the information necessary to assess the applicant, it may not be possible to include them in the selection procedure.
III. PURPOSES, LEGAL BASES AND RETENTION PERIODS
7. Orders and Provision of Services
7.1. We process personal data for the following purposes:
a) receiving and processing an order or non-binding enquiry,
b) communicating with the customer, participant, legal guardian, school or other organisation,
c) organising and providing a lesson, course or another service ordered,
d) assigning participants according to their age, skill level and other requirements,
e) arranging instructors, equipment, transport or other agreed components of the service,
f) recording attendance and managing organisational changes,
g) processing payments, complaints, requests and claims relating to the service provided.
7.2. The legal basis for processing is the performance of a contract or taking steps at the request of the data subject prior to entering into a contract. If the contract is entered into by a school, legal guardian or another person, the processing of participants’ data may also be based on the legitimate interest in properly arranging and providing the service ordered.
7.3. Data relating to an order and the provision of a service are retained for the duration of the contractual relationship and generally for four years after its termination. If longer retention is necessary for the establishment, exercise or defence of legal claims, the data are retained until the final conclusion of the relevant proceedings or the expiry of the related claim.
8. Invoicing, Accounting and Legal Obligations
8.1. We process identification, billing and payment information for the purposes of issuing accounting documents, maintaining accounting records, complying with tax obligations and fulfilling other obligations imposed by law.
8.2. The legal basis for processing is compliance with a legal obligation applicable to the relevant SNOWSPORTS company.
8.3. Accounting and tax documents are retained for the period prescribed by applicable legislation, generally for ten years following the year to which they relate.
9. Participant Safety and Health Data
9.1. We process information concerning health restrictions, allergies, injuries or special requirements only to the extent necessary to assess whether participation is safe, adapt the instruction, prevent risks to health and provide necessary assistance.
9.2. The legal basis for processing ordinary personal data is the performance of a contract or the legitimate interest in protecting the health and safety of participants.
9.3. Where information concerning health constitutes a special category of personal data, we process it on the basis of the explicit consent of the data subject or their legal guardian. In an emergency, we may also process such data where this is necessary to protect the vital interests of the data subject or another person and the data subject is physically or legally incapable of giving consent.
9.4. Health data are retained only for the period necessary to arrange the relevant activity, generally until the end of the relevant course or season. They are retained for longer only where necessary to address an injury, insurance event, complaint or legal claim.
10. Protection of Rights and Handling of Claims
10.1. We may process personal data for the purpose of recording and handling complaints, damage and insurance events, injuries, disputes and other legal claims.
10.2. The legal basis is compliance with a legal obligation or the legitimate interest of the relevant SNOWSPORTS company in protecting its rights, demonstrating how the service was provided and establishing, exercising or defending legal claims.
10.3. Data are retained while the relevant matter is being handled and subsequently until the applicable limitation periods expire. If administrative, judicial, insurance or other proceedings are initiated, the data may be retained until the proceedings have been finally concluded and any related claims have been settled.
11. Responding to Questions and General Communications
11.1. Data provided in a contact form, email, telephone conversation or social media message are processed for the purpose of handling the relevant question, request or enquiry.
11.2. If the communication is directed towards ordering a service, the legal basis is taking steps prior to entering into a contract. In other cases, the legal basis is the legitimate interest in handling communications and providing information about our services.
11.3. General communications that do not result in an order or legal claim are generally retained for no longer than one year after they have been dealt with.
12. Marketing Communications
12.1. We may process contact details for the purpose of sending news, offers and information about SNOWSPORTS courses, lessons, events and other services.
12.2. We send marketing communications on the basis of the data subject’s voluntary consent, unless applicable legislation permits communications concerning our own similar services to be sent to existing customers on the basis of a legitimate interest.
12.3. Consent to marketing is not a condition for ordering or using a service. The data subject may withdraw consent at any time by using the unsubscribe option included in the message or by contacting SNOWSPORTS.
12.4. We process data for marketing purposes until consent is withdrawn or a valid objection is raised, but for no longer than five years from the data subject’s last active contact with SNOWSPORTS, unless the consent has been renewed.
12.5. Information concerning the granting or withdrawal of consent and the exercise of an objection may continue to be retained to the extent necessary to demonstrate compliance with our obligations and prevent further unwanted contact.
13. Photographs and Audiovisual Recordings
13.1. Photographs and video recordings in which a specific person can be identified and which are intended for the promotion of SNOWSPORTS may be created and published particularly on our website, social media, in printed materials and in online campaigns.
13.2. The legal basis for processing identifiable recordings intended for marketing and promotional purposes is generally the voluntary consent of the data subject or the child’s legal guardian.
13.3. Refusing or subsequently withdrawing consent does not affect the ability to participate in a lesson or course.
13.4. Recordings are processed for the period specified in the consent, until the consent is withdrawn or for as long as they remain reasonably suitable for the purpose for which they were created, but no longer than five years from the date on which they were made, unless a different period has been agreed.
13.5. The withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal. In the case of printed materials that have already been distributed or posts that have become part of previous communications, we will take reasonable steps to discontinue any further use of the recording. However, it may not always be possible to remove all copies that have already been distributed.
14. Website and Cookies
14.1. When the website is used, we may process technical data required for its secure and proper functioning, protection against misuse, error diagnostics and maintaining the availability of services.
14.2. Essential technical data and cookies are processed on the basis of our legitimate interest in the secure and functional operation of the website or to the extent required by applicable legislation.
14.3. Analytical, preference and marketing cookies or similar technologies are used only on the basis of the visitor’s consent where such consent is required. Consent may be changed or withdrawn at any time through the cookie settings available on the website.
14.4. Details of the cookies used, their providers, purposes and duration will be set out in a separate Cookie Policy and in the cookie banner settings.
14.5. Technical website logs are retained only for the period necessary to ensure the security and operation of the website. The storage period of individual cookies depends on their type and is specified in the cookie settings.
15. Social Media and Advertising Forms
15.1. If a person contacts us through social media, responds to our advertisement or submits a form provided by a social media platform, we process the data for the purpose of handling the enquiry, providing the requested information or preparing an offer.
15.2. The legal basis is taking steps prior to entering into a contract where the person has expressed an interest in a specific service. For general communications, the legal basis is the legitimate interest in handling the enquiry.
15.3. Data obtained through an advertising form may be used to send further marketing offers beyond the original enquiry only where a separate legal basis exists, particularly where consent has been granted.
15.4. Data from a non-binding enquiry that does not result in an order are generally retained for no longer than one year after the enquiry has been handled. If a service is ordered, the data are subsequently retained in accordance with the rules applicable to the relevant order.
16. Recruitment and Cooperation
16.1. We process applicants’ personal data for the purpose of assessing their suitability for employment or cooperation, communicating with them, verifying their qualifications and conducting the selection procedure.
16.2. The legal basis is taking steps at the applicant’s request prior to entering into an employment, commercial or other contract.
16.3. Data relating to an unsuccessful applicant are generally deleted within six months of the end of the selection procedure, unless longer retention is necessary for the protection of legal claims.
16.4. If an applicant is to be included in a database for future employment opportunities or subsequent seasons, their data are processed on the basis of separate consent for the period specified in that consent, but no longer than two years.
16.5. The processing of personal data after an employment or other contractual relationship has been established is governed by separate information provided to employees and contractors.
17. Legitimate Interests
17.1. Where personal data are processed on the basis of a legitimate interest, these interests include in particular:
a) the safe and proper provision of services ordered,
b) the protection of the health, property and rights of participants and SNOWSPORTS companies,
c) handling general communications, complaints and enquiries,
d) demonstrating how a service was provided and protecting legal claims,
e) ensuring the security and technical operation of the website,
f) necessary internal administration between the companies operating under the SNOWSPORTS brand.
17.2. Before processing personal data on the basis of a legitimate interest, we assess whether the rights and freedoms of the data subject override that interest, particularly where the data subject is a child.
17.3. The data subject has the right to object to processing based on a legitimate interest in accordance with Section VI of this Privacy Policy.
IV. RECIPIENTS AND TRANSFERS OF PERSONAL DATA
18. Recipients of Personal Data
18.1. We provide or make personal data available only to the extent necessary to fulfil a specific purpose. Recipients may include in particular:
a) instructors, employees and contractors involved in providing the service ordered,
b) other companies operating under the SNOWSPORTS brand where this is necessary to process an order, arrange a service, communicate with the customer or perform internal administration,
c) schools, kindergartens, educational establishments, legal guardians and other organisations involved in ordering or organising a course,
d) operators of ski resorts, sports facilities, accommodation establishments and rental providers, carriers and other partners where their involvement is necessary to provide the service ordered,
e) tour operators and their suppliers in connection with arranging school courses or trips to Austria,
f) providers of website, hosting, email, cloud, booking, form, communication and technical services,
g) providers of payment, accounting, invoicing and banking services,
h) operators of social media platforms, advertising systems and analytical tools, where the relevant services are used and an appropriate legal basis exists,
i) providers of marketing, graphic design, photography and printing services where they participate in preparing or distributing content,
j) insurance companies, legal representatives, auditors, tax advisers, accountants and other professional advisers,
k) public authorities, courts, law enforcement authorities and other authorised bodies where the disclosure of data is required or permitted by law.
18.2. We do not provide personal data to third parties for their own marketing purposes without the consent of the data subject.
18.3. Persons processing data on behalf of the relevant SNOWSPORTS company act as processors and are bound by a contract, confidentiality obligations and appropriate personal data protection requirements.
18.4. Some recipients process personal data as independent controllers in accordance with their own privacy policies. These include, in particular, banks, insurance companies, public authorities, tour operators, operators of social media platforms and other entities that independently determine the purposes and means of their processing.
19. Sharing Data Within SNOWSPORTS
19.1. Companies operating under the SNOWSPORTS brand may share personal data with one another where this is necessary to:
a) identify the company responsible for handling an order or enquiry,
b) arrange a service at a particular resort or as part of a particular course,
c) coordinate instructors, capacities, dates and participants,
d) provide central communications and customer support,
e) handle a complaint, insurance event or legal claim,
f) fulfil administrative and legal obligations.
19.2. Each SNOWSPORTS company processes data only to the extent necessary to perform its role. The use of a shared brand, website or contact details does not mean that all companies automatically process all personal data.
19.3. If one company receives an enquiry or request falling within the responsibility of another SNOWSPORTS company, it may forward the necessary personal data to that company so that the request can be handled correctly.
20. Tour Operators and Courses in Austria
20.1. When arranging a school course or trip to Austria, SNOWSPORTS s.r.o. may provide the tour operator with data required to prepare an offer, enter into the package travel contract and arrange the services ordered.
20.2. The tour operator processes the personal data received as an independent controller in accordance with its own privacy policy. Details of its processing are provided in the package travel contract, terms and conditions or privacy information of the relevant tour operator.
20.3. If the customer separately orders instruction or instructor services from SNOWSPORTS Skalka s.r.o., the data required to provide that service are processed by SNOWSPORTS Skalka s.r.o. as an independent controller.
20.4. Only data necessary for the performance of the relevant task or service ordered are transferred between a SNOWSPORTS company, the tour operator and other partners.
21. Transfers of Personal Data to Third Countries
21.1. When certain technological, cloud, analytical, advertising or communication services are used, personal data may be processed outside the European Union or the European Economic Area.
21.2. We transfer personal data to a third country only where the conditions laid down by personal data protection legislation have been met, particularly where:
a) the European Commission has decided that the relevant country ensures an adequate level of protection,
b) the recipient participates in a recognised mechanism ensuring an adequate level of personal data protection,
c) standard contractual clauses approved by the European Commission have been adopted together with any necessary supplementary measures, or
d) another exemption permitted by law applies.
21.3. Depending on the services currently in use, providers involved in cross-border data processing may include operators of the website platform, cloud tools, social media platforms and advertising or analytical systems.
21.4. The relevant SNOWSPORTS company will provide information about specific service providers and the safeguards used upon request. Details of the technologies used on the website will also be provided in the Cookie Policy.
V. CHILDREN’S DATA, HEALTH DATA AND PHOTOGRAPHS
22. Processing Children’s Personal Data
22.1. As a significant proportion of SNOWSPORTS services are used by children, we provide increased protection for their personal data and process them only to the extent necessary to organise, safely provide and evaluate the relevant service.
22.2. A child’s data may be provided to us in particular by their legal guardian, school, kindergarten, educational establishment or another organisation arranging their participation.
22.3. Where a service is ordered individually, the child is represented by their legal guardian or another authorised person.
22.4. Where a course is ordered by a school or another organisation, the relevant SNOWSPORTS company may process the participants’ data required to arrange the course on the basis of its contractual relationship with the customer and its legitimate interest in properly and safely providing the service.
22.5. The school or other organisation is responsible for ensuring that it is authorised to provide the participants’ personal data, that it provides only an appropriate amount of data and that it has provided the data subjects or their legal guardians with the necessary information concerning the transfer of their data.
22.6. We do not process children’s data for direct marketing purposes without an appropriate legal basis. Marketing communications concerning services for children are generally directed to the legal guardian or the organisation ordering the service.
22.7. When assessing a legitimate interest, we pay particular attention to the child’s age, the nature of the data, the purpose of the processing and its potential consequences for the child.
23. Health Data and Participant Safety
23.1. We request health data only where they may be relevant to the safe conduct of a lesson or course, the appropriate adaptation of instruction or the provision of assistance in an emergency.
23.2. The data subject, legal guardian, school or another authorised person should provide only information relevant to the particular activity. There is no need to provide complete medical records or information unrelated to the safe provision of the service.
23.3. Access to health data is limited to persons who need the information to protect the participant’s safety, particularly authorised organisers and the relevant instructors.
23.4. Persons to whom health data are disclosed are required to maintain confidentiality and must not use the data for any other purpose.
23.5. In the event of an injury or sudden deterioration in a participant’s health, the necessary information may be provided to healthcare professionals, the mountain rescue service, emergency services, an insurance company or the participant’s legal guardian.
23.6. Health data will not be retained for longer than necessary in accordance with Section 9 of this Privacy Policy.
24. Photographs and Audiovisual Recordings of Children
24.1. We generally create and publish identifiable photographs and video recordings of children intended for marketing or promotional purposes only on the basis of the legal guardian’s prior consent.
24.2. Consent must be voluntary, specific and separate from the order for the service. Refusing or withdrawing consent must not be a reason to refuse the child’s participation in a lesson or course.
24.3. Where a course is ordered by a school or another organisation, that organisation will obtain the necessary consent from legal guardians or inform SNOWSPORTS which children must not be captured in or included in promotional recordings.
24.4. The consent of a school or member of teaching staff does not in itself replace the consent of a legal guardian where such consent is required by law.
24.5. When creating and publishing recordings, we respect the dignity, privacy and safety of children. Without a specific reason, we do not publish a child’s full name, contact details, health information or information enabling their inappropriate identification or location.
24.6. If a legal guardian withdraws consent, we will discontinue any further use of the relevant recording and take reasonable steps to remove it from channels under our control. Withdrawal of consent does not affect the lawfulness of the previous use of the recording.
24.7. Recordings made exclusively for the internal documentation of an injury, damage event or another serious incident must not be used for marketing purposes. Their legal basis and retention period are determined according to the purpose for which they were made.
VI. RIGHTS OF DATA SUBJECTS
25. Rights of the Data Subject
25.1. Subject to the conditions laid down by applicable legislation, the data subject has the right to:
a) obtain confirmation as to whether their personal data are being processed and obtain access to those data,
b) request the correction of inaccurate personal data or the completion of incomplete personal data,
c) request the erasure of personal data,
d) request the restriction of the processing of personal data,
e) receive the personal data they have provided in a structured, commonly used and machine-readable format and transmit those data to another controller, where the conditions for data portability are met,
f) object to processing based on a legitimate interest,
g) object at any time to the processing of personal data for direct marketing purposes,
h) withdraw their consent at any time,
i) lodge a complaint or submit a proposal to initiate personal data protection proceedings with the supervisory authority,
j) not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.
25.2. The withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
25.3. The rights to erasure, restriction of processing, data portability and other rights are not absolute. Their exercise may be restricted where further processing is necessary, particularly for compliance with a legal obligation, the establishment, exercise or defence of legal claims or for another reason provided by law.
25.4. The SNOWSPORTS companies do not carry out decision-making based solely on automated processing, including profiling, which would produce legal effects concerning a data subject or similarly significantly affect them.
26. Exercising Data Subject Rights
26.1. The data subject may exercise their rights:
a) by email at office@snowsports.sk,
b) by post at SNOWSPORTS s.r.o., Račianska 24H, 831 02 Bratislava – Nové Mesto, Slovakia,
c) using the contact details of the relevant SNOWSPORTS company.
26.2. We recommend that the request include the data subject’s name, contact details, a description of the right being exercised and the service or SNOWSPORTS company to which the request relates. If the request is addressed to the wrong SNOWSPORTS company, we will arrange for it to be forwarded to the relevant controller.
26.3. If we have reasonable doubts concerning the identity of the person making the request, we may request additional information necessary to verify their identity. We will not request more information than is necessary for this verification.
26.4. We will respond to the request without undue delay and no later than one month after receiving it. Taking into account the complexity and number of requests, this period may be extended by a further two months. We will inform the data subject of the extension and the reasons for it within one month of receiving the request.
26.5. The exercise of data subject rights is free of charge. If a request is manifestly unfounded or excessive, particularly because of its repetitive nature, we may charge a reasonable fee reflecting the administrative costs or refuse to act on the request. We must be able to demonstrate that such action is justified.
26.6. If we do not act on a request, we will inform the data subject without delay and no later than one month after receiving the request of the reasons for not taking action and of the possibility of lodging a complaint with a supervisory authority or seeking a judicial remedy.
27. Right to Lodge a Complaint
27.1. If the data subject believes that we process their personal data in breach of applicable legislation, they may contact us first so that we can investigate their concerns and remedy any deficiencies.
27.2. The data subject also has the right to lodge a complaint or submit a proposal to initiate personal data protection proceedings with the supervisory authority:
Office for Personal Data Protection of the Slovak Republic
Galvaniho Business Centrum II
Galvaniho 7/B
821 04 Bratislava
Slovak Republic
Email: statny.dozor@pdp.gov.sk
Website: www.dataprotection.gov.sk
27.3. The right to contact the competent supervisory authority or a court is not conditional upon first contacting a SNOWSPORTS company.
VII. SECURITY AND FINAL PROVISIONS
28. Security of Personal Data
28.1. The SNOWSPORTS companies implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration, disclosure or other misuse.
28.2. The scope of the security measures is adapted to the nature of the data processed, the purposes of processing, the available technical options and reasonably foreseeable risks.
28.3. Access to personal data is limited to persons who require it to perform their employment or contractual duties. These persons are bound by confidentiality obligations or another appropriate duty to maintain confidentiality.
28.4. The measures used may include, in particular, the management of access permissions, protection of user accounts, appropriate security of devices and storage systems, regular backups, updates of the systems used and limitation of the scope of data processed.
28.5. If a personal data breach occurs, the relevant SNOWSPORTS company will assess the incident and implement the necessary corrective measures. Where required by law, it will notify the supervisory authority and inform the affected data subjects.
29. Updates and Amendments
29.1. We may update this Privacy Policy as appropriate, particularly in the event of changes to applicable legislation, technologies used, services provided, companies involved or methods of processing personal data.
29.2. The current version will always be published on the website www.snowsports.sk together with its effective date.
29.3. If an amendment materially affects the rights of data subjects or the manner in which their personal data are processed, we will provide appropriate information about the amendment by other suitable means where this is necessary in the circumstances.
29.4. An amendment to this Privacy Policy does not in itself change the legal basis of processing already in progress or replace new consent where such consent is required for further processing.
30. Final Provisions
30.1. This Privacy Policy applies to the processing of personal data relating to customers, participants, legal guardians, contact persons of schools and organisations, website visitors, persons interested in our services, social media users and applicants for employment or cooperation.
30.2. The processing of personal data relating to employees and contractors after an employment or other contractual relationship has been established is governed by separate internal information and rules of the relevant SNOWSPORTS company.
30.3. Details concerning the use of cookies and similar technologies will be set out in a separate Cookie Policy available on the website.
30.4. Questions concerning personal data protection and requests from data subjects may be sent to office@snowsports.sk.
30.5. This Privacy Policy takes effect on 1 November 2026.