Skip to content
sk8project
sk8project

Privacy policy

Controller

The controller for the personal data collected through this site is ASV Skateboard Project, Viale Druso 161, 39100 Bolzano (BZ), tax code 94070720217. For any question about privacy, write to info.skateproject@gmail.com.

In short

We collect only the data needed to show you the site, for membership and for the members’ area. We use no profiling cookies, no analytics, no advertising, and we never sell your data.

Visiting the site

The site is hosted by Vercel Inc. (USA). When you open a page, the server records technical data such as IP address, date and time, the page requested and the browser type. They are needed to deliver the pages and to protect the site from abuse, and are kept only briefly, according to the provider’s settings. Legal basis: our legitimate interest in a secure, working site (art. 6(1)(f) GDPR).

The site and our CMS run together on Vercel. Texts, images and the members’ data are stored in a database at Neon (Databricks, Inc., USA) on servers in Frankfurt; uploaded files in Vercel’s storage. Transfers to the USA rest on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses. Policies: Vercel vercel.com/legal/privacy-policy, Neon/Databricks databricks.com/legal/privacynotice.

Membership

At the moment sign-up still happens on sk8project-tesseramento.top, where its own policy applies. What follows applies to the sign-up form on this site.

When you sign up with the form on this site we collect:

  • first name, last name, e-mail, date of birth and address;
  • optionally, your reason for joining;
  • a photo of you (selfie) for your personal membership card;
  • your confirmations of the liability declaration and the ski pass information;
  • the payment status (amount, date, Stripe reference codes).

We use these data to manage your membership of the association, keep the members’ register, make your digital membership card and send you the confirmation mail, which you can show in Obereggen for the ski pass discount. We do not pass your data on to Obereggen. Legal basis: the membership relationship (art. 6(1)(b) GDPR) and, for accounting, legal obligations (art. 6(1)(c) GDPR). Without these data we cannot make you a member.

Your browser shrinks the photo before sending it and normally strips its metadata (e.g. the location). The data are stored in our CMS and seen only by the board members who handle membership. The photo is not linked to any public page and we do not use it for anything else.

How long we keep them:

  • if the payment is not completed, we delete the sign-up and the photo after 7 days;
  • the photo, at the latest at the end of the membership year;
  • the other data, for the duration of the membership and then for as long as legal obligations require (e.g. 10 years for accounting records).

Payment with Stripe

Payments take place on a page of Stripe Payments Europe, Ltd. (Ireland). Your card details go straight to Stripe: we never see or store them. We pass your e-mail and the amount to Stripe; Stripe processes payment data partly on our behalf and partly as an independent controller (e.g. to prevent fraud and to meet legal obligations). Stripe’s policy: stripe.com/privacy.

Newsletter

If you subscribe to the newsletter – with the box on the membership form or at /newsletter – we store your e-mail address, your language and the time of your consent. For a sign-up from the site we first send you a mail with a confirmation link: only after the click is the address active, and an unused link expires after 48 hours. We send a few mails a year about events, sessions and videos, through our mail server at Serverprofis GmbH (Germany). Legal basis: your consent (art. 6(1)(a) GDPR), which you can withdraw at any time at /newsletter/unsubscribe or with the link in every newsletter – your address is then deleted.

Confirmation e-mails

The membership confirmation mails and the links to set your password are sent from our mail server at Serverprofis GmbH (Germany), which receives your e-mail address and the text of the mail only to deliver it.

Member accounts

When you pay for a membership we create an account for the members’ area with your e-mail; there is no open registration. You choose the password through a link we send by mail (valid for 14 days; for “forgot password” 2 hours). We store your e-mail, user name and the password only in encrypted form (hash). They serve only for access to the members’ area (art. 6(1)(b) GDPR) and are deleted with the account.

Contact by e-mail

If you write to us, we use your address and the content of your message only to reply, and delete them once they are no longer needed.

Cookies and browser storage

We use no profiling or analytics cookies, so there is no cookie banner. On your device we store only what the site needs to work:

  • NEXT_LOCALE (cookie, 1 year): the language you chose with IT / DE / EN.
  • sk8_session (cookie, 30 days): keeps you logged in to the members’ area. It is created only after login, cannot be read by scripts and is deleted at logout.
  • Intro video (session storage): remembers that you have already seen the popup, so it does not reappear on every page. It disappears when the tab is closed.
  • Sign-up form draft (session storage): if you abandon the payment, what you entered (without the photo) stays in this tab so you need not type it again. It is deleted after payment or when the tab is closed.

YouTube videos

The intro popup and the Videos page (the TV set) can show videos from YouTube (Google Ireland Limited). The video is not loaded automatically: until you click “load video” or “switch on”, YouTube receives nothing. After the click, YouTube receives your IP address and browser data and may store data on your device; we use the youtube-nocookie.com domain to limit this. Legal basis: your consent through the click (art. 6(1)(a) GDPR). Google’s policy: policies.google.com/privacy.

External links

The site links to external services such as Instagram and YouTube. Simply viewing our pages sends nothing to these services; if you follow a link, the policy of that site applies.

Your rights

You can ask us at any time for access to your data, rectification, erasure, restriction of processing and data portability, and object to processing based on legitimate interest (art. 15–21 GDPR). A consent you have given can be withdrawn at any time. A mail to info.skateproject@gmail.com is enough.

You also have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali, garanteprivacy.it) or with the authority in your own country. We make no automated decisions and do no profiling.

Changes

We update this policy when the way we handle data changes. Last updated: October 2026.