PRIVACY POLICY

1. Who is responsible

The controller of personal data is 24/7 Freeride, based in Aveiro, Portugal, operating in Davos, Switzerland. This policy follows the General Data Protection Regulation (GDPR) and applicable Portuguese law.

For any question about personal data: 247freeride@gmail.com · +351 912 427 914.

2. What data we handle

• Booking request (form): first name, surname, email, preferred hotel, level, number of people, preferred date, transfer and message. The site does not store this data. With “Send via WhatsApp” we open WhatsApp with the message filled in, and it only reaches us if you send it. With “Send via Email” the request is sent straight to our email through the FormSubmit service (formsubmit.co), which receives it and forwards it to us. If sending fails, we open your email program with the message filled in.
• Direct contact by WhatsApp, phone, email or social media: whatever you tell us (name, contact, message content).
• Confirmed booking: the data needed to organise accommodation, ski pass, transfers and activities (name, dates, level, needs) and, where partners require it, other identification data.
• Shop orders: name, item and size, delivery address where applicable and the data needed for payment by MB Way or bank transfer. We do not receive or store card details.
• Photo and video taken during the camps (see section 4).
• Technical data: this site uses Vercel Web Analytics to count visits and page views in an aggregated, anonymous way, without cookies and without identifying people (visitors are told apart only by a code generated from the request, which resets every day). It does not use advertising tools. The site’s hosting service may log the IP address and technical details of each request for security and operation.

3. What we use it for and on what basis

• Answering information and booking requests: pre-contractual steps at your request (Art. 6(1)(b) GDPR).
• Carrying out bookings and orders, and contacting you about changes: performance of a contract (point (b)).
• Invoicing and tax obligations: legal obligation (point (c)).
• Participant safety and risk management during activities: legitimate interest (point (f)) and performance of a contract.
• Publishing photos and videos in which you appear: consent (point (a)).
• Letting you know about new trips, for example the Japan – Georgia interest list: consent (point (a)), which you can withdraw at any time.

4. Photo and video

Our camps include photo and video as part of the service: we take photos and edit the camp video for participants. We use these images to deliver your gallery and video.

We only publish images in which you are recognisable (website, Instagram, Facebook, YouTube) with your consent. You can refuse or withdraw it at any time, and ask us to remove an image, using the contacts above. For minors, the legal guardian’s authorisation is required.

5. Who we share it with

• Partners needed to deliver the service: hotels and guest houses, ski pass and lift operators, transport and transfer providers, coaches and instructors, and equipment rental partners. They only receive the data they need.
• Service providers: WhatsApp (Meta) and Gmail (Google) for communications, FormSubmit to deliver requests sent by email, YouTube (Google) for videos, Google Fonts for typefaces, the site’s hosting service and our accountant.
• Authorities, where the law requires it.

We do not sell personal data.

6. Transfers outside the European Union

Part of our activity takes place in Switzerland, a country with a European Commission adequacy decision. Some providers (for example Meta, Google and FormSubmit) may process data outside the European Economic Area, with appropriate safeguards such as standard contractual clauses or the EU-US Data Privacy Framework.

7. How long we keep it

• Information or booking requests that do not go ahead: up to 24 months after the last contact, or until you ask for deletion.
• Completed bookings and orders: for the duration of the contract and then for the legal periods (invoicing records, generally 10 years).
• Photos and videos: until consent is withdrawn.
• Interest list and news: until you withdraw consent.

8. Your rights

You can ask for access to your data, rectification, erasure, restriction of processing and portability, and object to processing. You can withdraw consent at any time, without affecting processing already carried out.

To exercise any right, write to 247freeride@gmail.com. We reply within one month at most.

You also have the right to lodge a complaint with the supervisory authority in Portugal, the National Data Protection Commission (CNPD): www.cnpd.pt.

9. Third-party content and links

The site links to Instagram, Facebook, YouTube, WhatsApp and the Davos webcam (Feratel). These services have their own privacy policies. YouTube videos only load when you press to watch them, and we use enhanced privacy mode (youtube-nocookie.com).

10. Minors

Our services are for adults. Minors can only take part through their legal guardian, who provides the necessary data and authorisations.

11. Security

We take reasonable technical and organisational measures to protect data. No internet transmission is completely secure: requests sent by email or WhatsApp pass through those providers’ services.

12. Changes to this policy

We may update this policy. The date of the last update is always shown at the top and bottom of the page.

Last updated: 6 October 2026.