Privacy and cookies

Last updated: 14 August 2026

Controller and privacy contact

The controller is FREDERIC PENZ SPORTS, a French simplified joint-stock company (SAS) with share capital of €149,550, registered with the Annecy Trade and Companies Register under number 322 884 388. Its registered office is in Saint-Nicolas-de-Véroce, 74170 Saint-Gervais-les-Bains, France.

For any question concerning personal data, contact confidentialite@pierrepenz-sports.com.

Data, purposes and legal bases

We process identity and contact details, account identifiers, booking dates and store, skier age, height, weight, shoe size and ability, selected equipment, booking history, consent choices, payment status and technical security information. A billing address and optional company or VAT details are collected only when an invoice is requested or the customer chooses to save them in an account.

Bookings, equipment preparation, customer accounts and transactional messages: performance of the contract or steps requested before entering into it.
Invoices, accounting records and legally required evidence: compliance with legal obligations.
Contact requests and customer support: the request itself, contract performance where applicable, and our legitimate interest in answering and following up enquiries.
Fraud prevention, service security and incident investigation: our legitimate interest in protecting customers, staff and the service.
Marketing messages: consent, which may be withdrawn at any time.

Children’s skier information must be supplied by a parent, guardian or responsible adult and is used only to select and prepare suitable equipment.

Payments and recipients

Authorised Frédéric Penz Sports staff can access information required for their role. Google Cloud, Firebase and Google Workspace host the service, authentication, database and transactional email. Stripe processes online payments; card details are entered directly into Stripe and are not stored by Frédéric Penz Sports. Cloudflare Turnstile processes technical anti-abuse signals when protected forms are used.

These providers may use approved sub-processors outside the European Economic Area. Transfers are governed, as applicable, by an adequacy decision, the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses. Further information may be requested from the privacy contact.

Retention

Unsubmitted booking information stored in the browser: up to seven days after the latest change, or until payment is completed.
Contact requests: up to three years after the latest exchange.
Customer account and skier profiles: while the account is active, then up to three years after the latest activity or earlier deletion request, subject to legal retention duties.
Bookings and contractual evidence: for the relationship, then up to five years after it ends; electronic contracts meeting the statutory amount threshold are archived and made accessible for ten years.
Invoices and accounting records: ten years where required by law.
Payment status and transaction references: for the contractual and accounting periods; Frédéric Penz Sports does not store card numbers.
Security and technical logs: normally no longer than twelve months unless needed to investigate an incident.
Marketing consent evidence: for the consent period and the time required to establish compliance.

Cookies and local storage

The site uses storage strictly necessary for language preference, booking continuity, authentication and security. These functions do not require advertising consent.

Audience measurement through Google Analytics and Google Tag Manager is currently disabled. No Google Analytics tag or analytics cookie is loaded by this website.

Your rights

You may request access, correction, deletion, restriction or portability of your data, object to processing based on legitimate interests, and withdraw consent at any time. Some information may need to be retained to meet legal obligations or establish legal claims.