Privacy policy

Working draft — to be completed (DPO details, final list of sub-processors) and reviewed before going live.

1. Data controller

The data controller is ALTITUDE SERVICES S.R.L. (Societate cu răspundere limitată (SRL) — société de droit roumain, NIF 50212336), whose registered office is at Drumul Fermei n° 117G, Camera 1, Popești-Leordeni, Județ Ilfov, Roumanie. For any question about your data: privacy@yourskiinstructor.com or +40 726 153 012.

2. Data collected

• Account: name, email address, password (hashed), role (client or instructor), phone where applicable.
• Instructor profile: photo/avatar, bio, diploma, languages, resort, rate, availability.
• Bookings: date, slot, discipline, level, participants, amount, status, any message.
• Payment: handled by Stripe. We keep a transaction identifier and the payment status, but never your card number.
• Reviews: rating and comment published after a lesson.
• Technical: connection logs, strictly necessary cookies (session).

3. Purposes and legal bases

• Create and manage your account, enable booking — performance of the contract.
• Process payments and payouts — performance of the contract and legal obligation (accounting).
• Ensure the security of the service and prevent fraud — legitimate interest.
• Send you emails related to your bookings — performance of the contract.
• Publish client reviews — legitimate interest (trust on the platform).

4. Recipients

• The Instructor receives the information needed for the lesson (name, contact details, booking details) and vice versa.
• Stripe (payment provider) for collection and payouts.
• Our host OVH SAS (2 rue Kellermann, 59100 Roubaix, France) and our technical providers (email sending, etc.).
• Authorities, only upon legal request.

No data is sold to third parties.

5. Retention periods

• Account: for the entire period of use, then deletion or anonymisation.
• Bookings and accounting records: up to 10 years (legal obligation).
• Connection logs: up to 12 months.

6. Your rights

In accordance with the GDPR, you have the right of access, rectification, erasure, restriction, objection and portability. Exercise them at privacy@yourskiinstructor.com. You may also lodge a complaint with the competent supervisory authority: the ANSPDCP in Romania (www.dataprotection.ro) or the one in your country of residence (the CNIL in France, www.cnil.fr).

7. Cookies

The Platform uses only cookies strictly necessary for its operation (keeping the login session). No third-party advertising or analytics cookie is placed without your consent.

8. Security

Passwords are hashed, payments are delegated to a PCI-DSS certified provider, and access to data is restricted to authorised personnel.