Privacy Policy

Website: neva.ski

Last updated: 10/06/26

Preamble

Protecting your personal data is a priority for the companies R2S and RetE, trading under the commercial name Neva Ski School.

This privacy policy is intended to inform you, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (“GDPR”) and French Act No. 78-17 of 6 January 1978 as amended (“Data Protection Act”), about how the personal data you entrust to us is collected, processed and stored when you use the website neva.ski.

By browsing our website and using our services, you acknowledge that you have read this policy and accept the terms described herein.

1. Data Controllers

Two separate legal entities act as data controllers, depending on the nature of the services purchased:

For ski school activities (group lessons, private lessons, lesson packs)

• R2S, a limited liability company (SARL) with share capital of €3,000
• Chambéry Trade and Companies Register 852 684 372 — SIRET 852 684 372 00034 — VAT FR71 852 684 372
• Registered office: les Jardins de Val, 99 Route de la Balme, 73150 Val-d’Isère
• Represented by its manager, Mr Raphaël EVIN

For equipment rental, accessory sales and storage activities

• RetE, a limited liability company (SARL) with share capital of €20,000
• Chambéry Trade and Companies Register 879 130 219 — SIRET 879 130 219 00030 — VAT FR51 879 130 219
• Registered office: Les Jardins de Val, 99 Route de la Balme, 73150 Val-d’Isère
• Represented by its manager, Mr Raphaël EVIN

For any question, request to exercise your rights, or complaint regarding your personal data, a single point of contact has been set up:

• Email: info@neva.ski
• Phone: +33 (0)4 79 01 00 12
• Post: Neva Ski School, 26 Place des Dolomites, 73150 Val-d’Isère

2. Personal Data Collected

We collect and process the following categories of personal data:

2.1 Data collected via the contact form

• First name, last name
• Email address
• Phone number
• Message content
• Date and time of submission

2.2 Data collected when making a booking (lessons, rental, pack)

• Identity (title, last name, first name, date of birth for children)
• Contact details (email, phone, postal address)
• Stay details (dates, level, discipline, height, weight, shoe size for equipment rental)
• Payment data (handled by our secure provider Stripe — see section 6)
• Any preferences (instructor language, specific requests)
• History of your orders and interactions with our teams

2.3 Data collected automatically during browsing

• IP address
• Browser type and version
• Operating system
• Pages visited, visit duration, navigation path on the site
• Date and time of connection
• Approximate geolocation data (country, region)

This data is collected via cookies and similar technologies — see section 8.

3. Purposes of Processing

Your personal data is collected and processed for the following purposes:

We do not carry out any solely automated decision-making within the meaning of Article 22 of the GDPR.

4. Retention Periods

Your data is kept for the following periods:

At the end of these periods, your data is securely deleted or anonymised for statistical purposes.

5. Data Recipients

Your personal data may be shared with the following recipients:

5.1 Authorised staff of R2S and RetE

Only authorised employees (sales team, relevant instructors, ski technicians, administrative and accounting team) access your data, strictly within the scope of their duties.

5.2 Technical providers and processors

• Yoplanning — booking and scheduling management solution. The data required for your booking is stored in this solution. Processor within the meaning of the GDPR.
• Stripe — secure payment provider (see section 6).
• Google Workspace — email (info@neva.ski) and productivity services.
• Website host — see Legal Notice for its identity.

All these providers are required to ensure the security and confidentiality of your data, in accordance with the GDPR.

5.3 Administrative and judicial authorities

Where required by law, your data may be disclosed to the competent authorities (tax administration, judicial authorities, etc.).

5.4 No transfer or sale to third parties

We do not sell, rent or exchange your personal data to third parties for commercial purposes.

6. Secure Payment via Stripe

Payments made on the website neva.ski are handled by Stripe Payments Europe, Ltd, a PCI-DSS Level 1 certified payment provider, which acts as a data controller for the banking data you provide to it.

We never store your banking data (card number, security code, expiry date) on our servers. Stripe processes this data in accordance with its own privacy policy, available at: https://stripe.com/en/privacy

7. Transfers Outside the European Union

Some of our providers (in particular Google Workspace and Stripe) may host or process your data in countries outside the European Union, in particular the United States.

These transfers are governed by legal mechanisms compliant with the GDPR:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions (for example the EU-US Data Privacy Framework)

You can ask us for further information about these safeguards by writing to info@neva.ski.

8. Cookies and Trackers

8.1 What is a cookie?

A cookie is a small file placed on your device (computer, tablet, smartphone) when you visit a website. It stores information about your browsing.

8.2 Cookies used on neva.ski

We use the following categories of cookies:

8.3 How to manage your preferences

On your first visit, a banner allows you to accept, refuse or configure your preferences for cookies that are not strictly necessary.

You can change your choices at any time via the “Cookie preferences” link at the bottom of each page of the site, or by configuring your browser to block or delete cookies already placed.

Refusing non-essential cookies does not affect the proper functioning of the site.

9. Your Rights

In accordance with the GDPR and the Data Protection Act, you have the following rights over your personal data:

• Right of access — obtain confirmation that your data is being processed and obtain a copy of it
• Right to rectification — correct inaccurate or incomplete data
• Right to erasure (“right to be forgotten”) — request the deletion of your data under certain conditions
• Right to restriction of processing — temporarily freeze the use of your data
• Right to portability — retrieve your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interest, or for prospecting purposes
• Right to withdraw your consent — at any time, without affecting the lawfulness of prior processing
• Right to set directives — regarding the fate of your data after your death

10. How to Exercise Your Rights

To exercise one or more of these rights, you can contact us:

• By email: info@neva.ski
• By post: Neva Ski School, 26 Place des Dolomites, 73150 Val-d’Isère
• By phone: +33 (0)4 79 01 00 12

To guarantee the confidentiality of your data, we may ask you to provide proof of your identity before acting on your request.

We undertake to respond within one month of receiving your request, which may be extended by two months for complex requests.

11. Complaint to the CNIL

If, after contacting us, you believe that your rights are not being respected or that the processing of your data does not comply with the GDPR, you may lodge a complaint with the French Data Protection Authority (CNIL):

• Website: https://www.cnil.fr/
• Postal address: CNIL, 3 Place de Fontenoy — TSA 80715, 75334 Paris Cedex 07

12. Data Security

R2S and RetE implement appropriate technical and organisational measures to protect your personal data against any unauthorised access, loss, alteration or disclosure, in accordance with Article 32 of the GDPR:

• Hosting on secure servers within the European Union
• Encrypted connections (HTTPS / TLS) across the entire site
• Data access restricted to authorised persons by profile
• Strengthened authentication for internal tools (Yoplanning, email)
• Regular backups
• Awareness training for our teams on data protection

In the event of a data breach likely to result in a high risk to your rights and freedoms, you will be informed as soon as possible in accordance with Article 34 of the GDPR.

13. Changes to the Privacy Policy

This privacy policy may be amended at any time to adapt to changes in our services, the regulatory framework or our practices. The applicable version is the one available online at the time of your consultation.

In the event of a substantial change, you will be informed by a visible notification on the site, or even by email for significant changes concerning registered users.

This policy was drafted on 10/06/2026. For any questions: info@neva.ski.