Controller and scope
TS2 Space sp. z o.o., Aleje Jerozolimskie 65/79, lokal 15.03, 00-697 Warszawa, Poland, KRS 0000635058, NIP 7010612151, is the controller for index.ski. Privacy requests may be sent to hello@index.ski or by post to this address. This policy covers the catalogue, contact form, maps, optional nearby sorting and consent settings.
Technical information
The hosting server and Cloudflare process IP addresses, request times, requested URLs, browser information and diagnostic logs to deliver and protect the service. This processing serves the legitimate interests of operating and securing the website under Article 6(1)(f) GDPR. We do not use these logs to build advertising profiles.
Security and diagnostic logs are retained only as long as needed for service operation, investigation and applicable legal duties; access is restricted. Relevant records may be retained longer while a specific complaint or security incident is resolved.
Location and maps
Precise browser location is optional and requested only when you choose nearby sorting. It is used in the current browser tab to calculate distances. index.ski does not store your coordinates in a visitor database. You can refuse or withdraw browser permission and continue browsing.
Interactive maps load Leaflet and OpenStreetMap tiles. Loading map tiles sends the IP address and technical request details to the tile provider. External directions, ticket and operator links have their own privacy policies. Map information is a planning aid, not an avalanche or route-safety assessment.
Cookies and consent
The consent panel saves necessary consent choices and their timestamp in local storage and a first-party cookie for up to 12 months. Optional preference, analytics and advertising measurement, and personalised advertising choices start disabled. Necessary-only and optional choices are available without restricting access to the catalogue.
Optional location preferences may be remembered only when preference storage is enabled. You can reopen Cookie settings in the footer to change or withdraw a choice. No Google Analytics or Google Ads tag loads before consent to analytics and advertising measurement. Previous consent choices made before these services were introduced do not enable them; a new choice is requested.
With analytics and advertising measurement consent, index.ski loads Google Analytics 4 (G-R13683QVHJ) and Google Ads (AW-1055997306). The website itself counts eligible page views in session storage and sends a conversion directly to Google Ads on the third page view, once per browser-tab session with a 30-minute inactivity limit. Pages need not be different; privacy, error and technical pages do not count. A separate conversion is sent after the contact server confirms a successful submission, using a submission identifier to prevent duplicate reporting. Message contents, names and email addresses are not included in these conversion events. This engagement conversion does not depend on a Google Analytics conversion import.
Personalised advertising and remarketing require a separate optional choice together with measurement consent. This permits Google advertising user data and personalisation for index.ski visitor audiences: all consenting visitors for 30 days and visitors with at least three page views in one session for 90 days. These audiences are separate from other websites and are additional Performance Max audience signals, not a restriction to previous visitors. Refusing or withdrawing this choice keeps advertising personalisation denied. Google services may use cookies and process technical identifiers and page interactions under the selected consent settings. You can withdraw consent in Cookie settings.
Messages and email
The contact form sends your name, email address, selected topic and message to hello@index.ski, hosted in Google Workspace. We use these details to handle your enquiry under Article 6(1)(f) GDPR, or Article 6(1)(b) where the enquiry concerns requested contractual steps. The required checkbox acknowledges this notice and requests handling of the message; it is not marketing consent. Do not include sensitive data. No attachment upload is provided. Messages are retained for the enquiry and necessary follow-up, normally no longer than 24 months after closure unless a legal duty or claim requires longer retention. Rate-limit records contain a hash of the network address and sending counters, not message contents. We do not subscribe correspondents to a newsletter or send automatic receipt acknowledgements. Cloudflare Turnstile protects the form from automated submissions by processing technical browser and network information. We send its verification token to Cloudflare for validation, not your message text.
Editorial correspondence from hello@index.ski includes checking published profiles with official operators and organisers, requesting current manufacturer dossiers or missing catalogue materials and rights, replying to factual enquiries, and notifying contributors after verified publication. A voluntary link request may follow a completed exchange; a link is never a condition of publication. Official public contact details and message history are used to address relevant editorial enquiries and prevent repeated contact. You may object to further contact by replying; refusals, opt-outs and delivery failures are respected. Public availability of an address is not treated as permission for unrelated advertising.
Providers and transfers
Hosting infrastructure, Cloudflare, Google Workspace, consented Google Analytics and Google Ads, OpenAI-assisted editorial tools and map providers receive the data necessary for their services. Assisted tools help review relevant correspondence and prepare factual replies; private messages and contact submissions are excluded from the separate public-content translation API and are not published as correspondence. Where a provider processes personal data outside the EEA, the applicable lawful transfer mechanism and contractual safeguards are required. We do not sell visitor data. Provider details are available at https://www.cloudflare.com/privacypolicy/ and https://osmfoundation.org/wiki/Privacy_Policy and https://workspace.google.com/terms/dpa_terms.html and https://policies.google.com/privacy .
Your rights
Subject to the applicable GDPR conditions, you may request access, rectification, erasure, restriction, portability or object to processing based on legitimate interests. You may withdraw optional consent at any time without affecting earlier lawful processing. You may complain to the President of the Polish Personal Data Protection Office, https://uodo.gov.pl/ .
This policy was updated on 4 November 2026 to introduce optional Google Analytics, Google Ads conversion measurement and remarketing. Material changes to data processing will be reflected here. The website does not require an account, payment details or a marketing subscription.