privacy policy

the data controller for this site is alex, operating as a sole snowboard instructor in bansko, bulgaria, under the brand ridewithalex. you can reach me at alex@ridewithalex.org or +359 88 513 7471.

this policy covers the ridewithalex.org website and any communication you have with alex by email, phone, whatsapp, or instagram in the context of booking or taking a snowboard lesson.

for bookings i collect your name, phone number, and email address. optionally: the size and skill level of your group, any medical notes you volunteer, and your preferred meeting time.

the website itself runs on vercel and uses standard server logs (ip address, user agent, timestamps) for security and uptime. i do not use behavioral tracking, ad cookies, or third-party analytics.

your contact details are used only to coordinate your lesson: confirmations, reschedules, meeting-point updates, and follow-up questions. the legal basis is the performance of the service you booked (gdpr art. 6(1)(b)).

server logs are retained for security and legal compliance under gdpr art. 6(1)(f) — legitimate interest in keeping the service running and protecting it from abuse.

booking records (name, phone, email, date of lesson) are kept for 3 years after your last lesson, mainly for bookkeeping and in case you return for another session. after that they are deleted.

server logs are kept for up to 90 days and then rotated out. photos or videos from lessons, if used on the website or instagram, are kept until you request removal.

your personal data is not sold, rented, or shared with advertisers. it stays with alex. the only third parties that technically process data on my behalf are: vercel (site hosting, eu region) and google workspace (email). both are gdpr-compliant processors.

in rare cases i may share minimal information with a medical professional or emergency services if an incident occurs during a lesson. this is only when necessary to protect vital interests (gdpr art. 6(1)(d)).

under gdpr you have the right to: access a copy of your data, correct inaccuracies, request deletion, restrict processing, port your data to another service, and object to processing. to exercise any of these, email alex@ridewithalex.org — i reply within 30 days.

if you believe your rights have been violated, you can lodge a complaint with the bulgarian commission for personal data protection (kzld) at cpdp.bg. i would appreciate a heads-up first so i can try to resolve it directly.

the site uses only essential cookies — specifically, a language preference cookie so the site remembers if you chose english or bulgarian. no tracking, no advertising, no third-party scripts.

if analytics are ever added (to see which pages people actually read), it will be a privacy-first, cookieless option like plausible or vercel analytics — and this page will be updated before that happens.

booking data is kept in access-controlled systems (google workspace and, in the future, a managed database). passwords use industry-standard hashing. the site is served over https only.

no system is perfectly secure. in the unlikely event of a breach affecting your personal data, i will notify you within 72 hours and report to kzld as required by gdpr art. 33.

this policy may be updated to reflect changes in how the service operates. the date at the top shows the latest revision. material changes will be announced via email to active clients.

for any privacy-related question, concern, or request, email alex@ridewithalex.org. i treat these seriously and reply personally.