Privacy policy
Example document for a fictional company, written for a portfolio demo. It is not legal advice and binds no one.
1. Controller
The controller of your personal data is Crystal Ski Rental s.r.o., Demänovská dolina 72, 031 01 Liptovský Mikuláš, Slovakia. For anything about your data, write to privacy@crystalskirental.test.
2. What we keep
Account: your name, e-mail address and a scrambled form of your password that cannot be turned back into it.
Addresses: your mailing address and, if you give one, an invoice address with a company number and VAT number.
Bookings: the stores, skis, dates, prices, notes you write to the store, the addresses at the time of booking, and who handled the pickup and return.
Ratings: your scores, notes and comments.
Technical data: a session cookie that keeps you signed in, a cookie with your colour theme, and short-lived records of sign-in attempts used to stop password guessing.
3. Why, and on what basis
To take and manage your bookings, and to run your account (performance of a contract, Art. 6(1)(b) GDPR).
To issue invoices and keep accounting records (legal obligation, Art. 6(1)(c) GDPR).
To keep the service secure and prevent abuse, and to improve our fleet from ratings (legitimate interests, Art. 6(1)(f) GDPR).
We do not sell your data, and we do not use it for advertising.
4. Who sees it
Our store staff and managers, who need it to serve you. Our hosting and database providers, who process it on our behalf in the European Union under data processing agreements. Authorities, only when the law requires it.
5. How long we keep it
Account data while your account exists. Bookings and invoices for ten years, as Slovak accounting law requires. Records of sign-in attempts for up to a day. Ratings until you ask us to remove them, or your account is closed.
6. Your rights
You can ask us for a copy of your data, to correct it, to erase it where the law allows, to restrict or object to its use, and to receive it in a portable form.
You can also complain to the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR).
7. Cookies
We use only the cookies the service needs to work: the session cookie and the colour theme cookie. There are no analytics or advertising cookies.