Workshop Privacy Policy

The data controller is Skidemy Srl, with registered office at Via Tuscolana 299, 00181 Rome (RM), tax code and VAT no. 18478051008, e-mail skidemyoffice@gmail.com.

This policy concerns the data collected for registration and management of the “Skidemy in Pista” workshop. For use of the online video-course platform, the policy published at skidemy.org/privacy remains applicable.

For any question about the processing of your data you may write to the e-mail address above or to the Data Protection Officer (DPO): Gianluca Ginepreti, gianluca.ginepreti@gmail.com.

We collect the data you provide by completing the registration form and during the subsequent management of your participation:

• Identity and contact data: first name, last name, date of birth, e-mail, phone, home address, nationality.
• Tax data: tax code and, if you request an invoice, VAT number.
• Emergency contact: name and phone number of the person to notify in case of need.
• Sport and logistics data: declared technical level, equipment, size for Skidemy material, room and roommate preferences, any dietary needs.
• Health data: the medical certificate of fitness for non-competitive sport and any information you provide about allergies, intolerances or conditions relevant to safety (see art. 4).
• Payment data: the bank transfer details and the related receipt. We do not collect or store your credit card details.
• Images: photographs and video footage taken during the event (see art. 5).

Data of a roommate or emergency contact. If you provide us with another person's data, we ask you to inform them of this policy: we process it solely for the organisational and safety purposes set out here.

Providing the data necessary for registration is mandatory: without it we cannot complete the contract and guarantee your participation. Providing data for the newsletter is instead optional and its absence has no consequence for registration.

The medical certificate and information about allergies, food intolerances or conditions relevant to safety are special categories of data under art. 9 GDPR.

We process them solely to verify your fitness for sport, to protect safety during the Workshop and to communicate to the hotel only the necessary dietary needs. The legal basis is your explicit consent (art. 9.2.a), which you give by sending us the certificate and completing the relevant fields, and which you may withdraw at any time — it being understood that withdrawal makes participation in the on-snow activities impossible.

Access to this data is limited to the people in the organisation who strictly need to know it and, where indispensable, to the instructors and medical staff in an emergency.

The medical certificate is stored at the registered office of Skidemy Srl, in a restricted-access archive, and in the dedicated e-mail inbox. It is deleted — including from e-mail — within 30 days of the end of the event, except where needed for legal defence. Beyond that period we keep only a record of the verification performed (participant's name, date of the check and expiry date of the certificate), without a copy of the document, in order to document compliance with organisational obligations.

During the Workshop we take photographs and video footage. There are two uses, with distinct legal bases.

a) Technical video analysis — performance of the contract. The footage used in the video-analysis sessions is part of the service you purchased. Legal basis: performance of the contract (art. 6.1.b GDPR). This material is not published and is kept for the time needed to provide you with the service and the related technical guidance.

b) Communication and promotion of the event — legitimate interest. Photographs and videos intended to tell the story of and promote the Workshop may be published on the channels of Skidemy and of the event's sponsors and partners. Legal basis: the legitimate interest (art. 6.1.f GDPR) of Skidemy Srl and its sponsors in documenting and communicating a sporting event that is also, by its nature, an opportunity to communicate the project.

We do not use consent as the legal basis for this purpose: because documentation is inherent to the event, consent requested as a condition for registering would not be considered freely given and therefore valid (art. 7.4 GDPR). Since this is legitimate interest, you instead have a full and effective right to object, described below. The right to one's image in the civil-law sense (arts. 10 of the Civil Code and 96–97 of Law 633/1941) is instead authorised on a contractual basis, by accepting the Terms & Conditions.

Balancing assessment (summary). We have considered that: participation in a group sporting event entails a reasonable expectation of being photographed; the information is provided clearly before purchase; the material concerns the sporting activity and the context of the event and not aspects of private life; we do not process special categories of data through the images; we do not sell the material to third parties for unrelated purposes; and we guarantee a simple right to object with no consequences for participation.

Limits we impose on ourselves

• no use harmful to honour, reputation or dignity;
• no transfer to third parties for purposes unrelated to the communication of the Workshop and of Skidemy;
• no use for profiling, facial recognition or training of automated systems;
• no filming or publication relating to changing rooms, SPA areas or hotel rooms.

How to object. You may object at any time, even only for the future, by writing to skidemyoffice@gmail.com or to the DPO. Objecting does not in any way affect your participation and entails no cost. If you object: we will not film you in close-ups or shots in which you are the main subject, we will exclude you from the material selected for publication and we will remove, on request, content already published on our channels, within the technical limits of third-party platforms. In group shots full exclusion may not be technically guaranteed: for this reason it is useful to let us know before the start of the Workshop.

Your data may be shared, to the extent strictly necessary, with:

• The hotel in Livigno, for booking and services (including only the dietary needs);
• The lift operator and ski-pass provider;
• The ski instructors and technical staff of the Workshop;
• The photo and video service provider tasked with filming;
• The event's sponsors and partners, limited to photographic and video material;
• Consultants, the accountant and IT providers (registration-form platform, e-mail, storage), appointed as processors under art. 28 GDPR;
• The insurance company and, if necessary, medical staff, in the event of a claim or emergency;
• Authorities, where required by law.

Named providers. As of the date of this policy, the main providers that process data on our behalf or receive data are:

The up-to-date list is available at any time by writing to skidemyoffice@gmail.com. Your data is not subject to indiscriminate disclosure, nor to automated decision-making or profiling.

Some of the IT providers we use (for example the e-mail service, the registration-form platform or the social networks on which we publish content) may be based or have servers outside the European Economic Area, in particular in the United States. In such cases the transfer takes place on the basis of the safeguards provided for by Chapter V of the GDPR:

You may request a copy of the safeguards adopted by writing to skidemyoffice@gmail.com.

In relation to your personal data you may exercise, at any time, the rights provided for by arts. 15–22 GDPR:

• Access: know what data we process and obtain a copy;
• Rectification: correct inaccurate data or complete it;
• Erasure: obtain removal of the data, in the cases provided for by law;
• Restriction: ask for processing to be suspended in certain circumstances;
• Objection: object to processing based on our legitimate interest;
• Portability: receive the data in a structured, machine-readable format, or have it transmitted to another controller;
• Withdrawal of consent: at any time, for processing based on consent (health data, newsletter), without affecting the lawfulness of processing and publications carried out before the withdrawal.

To exercise your rights, write to skidemyoffice@gmail.com. We will reply without undue delay and in any case within one month of the request.

If you believe that the processing of your data breaches the law, you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome — www.garanteprivacy.it), or take the matter to court.

The registration-form page does not install profiling cookies and does not use statistical-analysis tools or advertising pixels. Only the technologies technically necessary to display the page and submit the form are used, for which the law does not require consent.

The page does not make any request to third-party servers: the fonts are embedded directly in the page, so your visit does not entail disclosure of your IP address to anyone other than Skidemy Srl and its hosting provider.

If analytics or marketing tools are introduced in the future, their use will be subject to your prior consent, collected via a dedicated banner, and will be described in a dedicated cookie policy.

Skidemy Srl
Via Tuscolana 299 — 00181 Rome (RM)
Tax code and VAT no. 18478051008
E-mail: skidemyoffice@gmail.com
Website: www.skidemy.org

Data Protection Officer (DPO)
Gianluca Ginepreti — gianluca.ginepreti@gmail.com