Privacy Policy

Privacy Notice

This notice explains how we use your personal data, describes the categories of personal data we process and for what purposes when you use this website. We are committed to collecting and using personal data fairly and in accordance with the requirements of the General Data Protection Regulation (GDPR).

Who we are

Skifest is a UK based ski club that arranges ski holidays and events for our membership through tour operators, agents and Third Parties. You can get in touch with us by emailing:

ian.shaw@ski-fest.com

What kind of personal information we use

We use many different kinds of personal information to facilitate your holiday booking with tour operators and agents. For all holiday services we need to use the following personal data: full name, address, email address, telephone number, date of birth, contact details, special dietary requirements, height & shoe size (for ski pack requirements).

We might also need health information to help us support our members who have a vulnerability.

How we collect your personal data

We collect personal data:

• directly from you, for example when you fill out a holiday booking form on our website;
• from your profile data and usage data which relates to the profile you create to identify yourself when you connect to our internet or mobile services and how you use those services;
• from organisations to which you have given your consent (or there is an alternative legal basis) to share your personal data with us for specific purposes, such as for facilitating your holiday booking;
• from other individuals who know you;

How we use your personal data

Data protection law says that we can only use personal data if we have a proper reason to do so. For example, these reasons include arranging your holiday booking, when we have a legal duty, when it is in our legitimate interest or when you consent to its use. When data protection law allows us to process your personal data for our own legitimate interests, it is only allowed provided those interests do not override your own interests and/or your fundamental rights and freedoms.

An example of where we would process your personal data for our legitimate interests would be where you believe you are the victim of fraud and in order to investigate your claim we may have to share your name and account number, payment and other details of the case with any other bank involved. Sharing personal data in these circumstances would not only be in our legitimate interest but also yours. An example of us using your personal data when we have a legal duty, is where we must do so in order to comply with anti-money laundering obligations.

Our purposes for processing your personal data

We will only ask you for your personal data where it is necessary to fulfil your holiday booking. Where providing us with your personal data is optional, we will inform you of this.

Arranging your holiday booking

• To consider and process bookings made by our members for group holidays.
• To deliver the services we provide, including:
  • Making and accepting payments, and receiving deposits on your behalf;
  • Providing you with information on the group holidays we arrange;
  • To address enquiries or complaints we may receive from you or a representative appointed by you.

Fulfilling our legal obligations

• Detecting, investigating and reporting financial crime, and taking measures to prevent this;
• Maintaining records of our service, as required by law
• Complying with laws which require us to provide information, directly or indirectly to any national authority
• To otherwise meet our obligations under all laws and regulations based on law which apply to our activities;
• Responding to enquiries and requests for information;
• Creating and submitting reports required by Regulators;
• Identifying and managing risks to our organisation; and
• Where we have a duty to protect vulnerable members.

For our legitimate interests

• As a ski club:
  • Understanding how our members use our services, so we can improve these.
  • Introducing new services and identifying which may be of interest to you – this may involve profiling;
  • Where we have the relevant permissions, contacting you to make you aware of these services – note: we may contact you for a reasonable period after you cease your relationship with us;
  • Improving our systems and processes, which may include using your personal data to test the accuracy of these, but only where it is essential to do so;
  • To recover money owed to us;
  • To otherwise exercise our rights for the provision of the services we provide;
  • To invite you to participate in market research and member surveys;

Please see the section headed 'Your Privacy Rights' for information on your right to object to processing of your personal data based on our legitimate interests.

Where we require your consent / explicit consent

• To process about you, where necessary, ‘special categories of personal data’ – this includes data about your:
  • Health;
  • Race or ethnicity;
• We may process personal data about your health or medical conditions, where we need to understand this to provide you with support.
• Sharing your personal data with other organisations to facilitate your holiday arrangements.

Retaining your personal data

We will retain your personal data for as long as we are obliged, under relevant legislation and regulation, or where no such rules apply, for no longer than it is necessary for our lawful purposes.

Using data processors and transferring your personal data overseas.

We may use service providers, agents and subcontractors to provide services on our behalf. This may require these organisations to access and process your personal data.

Your Privacy Rights

You have the right to object to how we process your personal data. You also have the right to see what personal data we hold about you. You can ask us to correct inaccuracies, delete or restrict personal data or ask for some of your personal data to be provided to someone else. These rights are explained in more detail below.

Requests to exercise your rights to your personal data can be made by:

• Email: ian.shaw@ski-fest.com

Our Data Protection Officer can be contacted at the email address above.

Your data protection rights are subject to certain restrictions and conditions. We will assess your request and where we decide not to act upon this, we will notify you of our reasons for this. We will not make a charge for handing your rights request unless we consider this to be manifestly unfounded or excessive (particularly if this is repetitive).

You have the right to complain to us and to the data protection regulator, the Information Commissioner’s Office, whose address is: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. Telephone: 0303 123 1113. You can find out how to report a concern on their website at: https://ico.org.uk/reportaconcern

Your rights are:

To be informed: You have the right to be provided with clear, transparent and easily understandable information about how we use your personal data and your rights. We fulfil this right by giving you this notice.

Access to your personal data: You can request access to a copy of your personal data that we process as a data controller, together with details of why we use it, who we share it with, how long we keep it for and whether it has been used for any automated decision making.

Right to withdraw consent: If you have given us your consent, you can withdraw that consent at any time. Please contact us if you want to do so. If you withdraw your consent, we may not be able to provide certain products or services to you. If this is the case, we will tell you.

Right to object: You may object to our processing of your personal data by us, where this processing is based on our legitimate interests or in the public interest. We will assess whether our interest in continuing to process your personal data overrides your rights and freedoms. If not, we will stop processing your personal data. Either way, we will inform you of the outcome.

You have the right to object to direct marketing and if you do so, we must stop these types of activities. (See "Marketing" below.)

Rectification: You can ask us to change or complete any inaccurate or incomplete personal data held about you.

Erasure: This is also known as “the right to be forgotten” and this means that you can ask us to delete your personal data where it is no longer necessary for us to use it, you have withdrawn consent (where applicable), or where we have no lawful basis for keeping it or otherwise using it. There are limited exceptions, for example where we need to use the information to bring or defend a legal claim.

Portability: You can ask us to provide you or a third party with some of the personal data that we hold about you in a structured, commonly used, electronic form, so it can be easily transferred.

Restriction: You can ask us to restrict the personal data we use about you where:

• it is inaccurate;
• you have asked for it to be erased;
• you have objected to our use of it; or
• where you need this for the bringing or defending of legal claims.

When you have asked us to restrict the use of your personal data we may still store your information but will not use it further without your consent, unless we need to process it:

• to bring or defend legal claims;
• to protect the rights and freedoms of other individuals; or
• for other important public interest reasons.

Marketing

We may use your personal data to tell you about relevant offers that we and selected partners think you may find interesting. We can only use your personal data to send you marketing messages if you have given your consent or it is for a legitimate interest.

You can ask us to stop sending you marketing messages by contacting us at any time.

Where you have provided your informed consent, we may share your personal data with other organisations, who may contact your with offers of products and services which may interest you.

Photo Consent

Skifest endeavours to display photos from its organised trips and events so that it can be viewed by all members.  The photos we take may be posted on one or more Skifest websites.  The photos will be used in accordance with this Privacy Policy. We will not post any inappropriate photos.

You can change your mind and update your choices at any time by using the “unsubscribe” or “opt out” option in any marketing communication you receive from us or by contacting us in the following ways:

• By email: ian.shaw@ski-fest.com