NEU Ski — Website Privacy Policy

1. Who is responsible

This policy explains how personal data is processed on the website www.neuski.xyz (the “Site”), including the trip planner and the NEU Ski newsletter. It does not cover the NEU iOS app or NEU’s integrations in ChatGPT and Claude, which have their own policies.

Controller: Guillem Bruix Barcelo, a self-employed professional established in Spain, trading as NEU Ski (“NEU”, “we”).
NIF: 46981809P
Address: Carrer Irena Sendler 4, 08018 Barcelona, Spain
Privacy contact: [email protected]

2. What we process and why

Browsing and technical data. When you visit the Site, our hosting and network providers (Vercel and Cloudflare) receive technical data about each request, such as IP address, date and time, the page requested and browser type. We use it to serve the Site, keep it secure and fix errors. Legal basis: our legitimate interest in a reliable and secure website.

Trip planner answers. While you fill in the planner, your answers are kept only in this browser tab (session storage). They are not sent to our servers until you ask to receive the prompt by email.

Emailing your prompt. If you enter your email and press “Email me my prompt”, we send your email, your answers and the language to our server. The server builds the prompt and emails it to you through Brevo. NEU keeps no copy of your answers or your email for this, and does not add you to any list. Legal basis: providing the service you ask for.

Don’t enter health data, information about children, passwords, payment details or other sensitive information in the special requirements field.

NEU Ski newsletter. Only if you tick the newsletter box, which is unticked by default, Brevo sends you an email to confirm your subscription (double opt-in). We add you to the newsletter list only once you confirm. We keep your email, language, where you signed up and the date, and Brevo records the confirmation. Brevo may also measure opens and clicks of newsletter emails. Legal basis: your consent, which you can withdraw at any time with the unsubscribe link in every email or by writing to us. Withdrawing doesn’t affect earlier processing.

Bot protection. To prevent abuse, the email form uses Cloudflare Turnstile, which analyses technical browser signals to check you’re not a robot. Legal basis: our legitimate interest in protecting the Site and preventing unwanted emails.

Analytics. We use Google Analytics to understand, in aggregate, how the Site is used. Analytics cookies are set only if you accept them in the cookie notice. If you don’t, we tell Google not to store analytics cookies; Google may still receive basic cookieless signals (for example, that a page was loaded). Legal basis: your consent for cookies, and our legitimate interest for basic cookieless measurement. More in the cookie policy: https://www.neuski.xyz/en/cookies

Contact and support. If you write to us, we process your email, your message and anything you choose to tell us in order to reply. Legal basis: handling your request.

3. Third-party content on the Site

Some parts of the Site load directly from other providers, so your browser connects to them and sends them its IP address and technical data:

• libraries and fonts: unpkg.com (React, Leaflet), Google Fonts and Google (model-viewer);
• resort maps: CARTO (tiles based on OpenStreetMap);
• 3D models: Cloudflare R2;
• webcams on resort pages, only when shown: Windy, Feratel and YouTube, which may apply their own cookies and policies.

External links (Trip.com hotels, InterMundial insurance, the App Store, official resort websites) open only when you click them. Some are affiliate links and include an identifier that attributes the visit to NEU.

4. Recipients and processors

• Vercel Inc. (US): hosting of the Site and of the server that sends the emails.
• Cloudflare, Inc. (US): DNS, content delivery, security and Turnstile.
• Brevo (Sendinblue SAS) (France, EU): sending the prompt email and managing the newsletter.
• Google (US and Ireland): Google Analytics and Google Fonts.
• iCloud Mail (Apple): the [email protected] mailbox where we receive your messages.

Providers that process data on our behalf do so under their data processing terms. We don’t sell your data or use it to build advertising profiles.

5. International transfers

Some providers process data outside the European Economic Area, mainly in the US. Vercel, Cloudflare and Google are certified under the EU–U.S. Data Privacy Framework, which these transfers rely on. Brevo processes data in the EU.

6. How long we keep data

• Planner answers: in your browser until you close the tab.
• Emailed prompt: NEU keeps neither your email nor your answers. Brevo keeps a technical log of the sending (recipient, date and delivery status) under its own periods, and Vercel’s technical logs are deleted shortly.
• Newsletter: while you stay subscribed. If you unsubscribe, we keep only what’s needed to respect that choice and prove consent where the law requires.
• Support messages: up to 12 months after the enquiry is closed, unless the law requires longer.

7. Your rights

You can ask for access, rectification, erasure, restriction or portability of your data, and object to processing based on legitimate interest, by writing to [email protected]. To leave the newsletter, use the link in any email. You can also complain to the Spanish Data Protection Agency (AEPD): https://www.aepd.es/

8. Children

The Site is not directed to children under 14. If you plan a family trip, don’t include details that identify children.

9. Security and changes

We use reasonable measures to protect data, such as encrypted connections (HTTPS), bot checks and restricted access to provider accounts. No system is completely secure.

We will update this policy when features or processing change and revise the effective date. We will flag significant changes on the Site.