Last updated: 21 October 2026
Data controller: David Molina Rubio.
Contact: Carrer de Lepant, 389, 08025 Barcelona, España – legal [at] localsnow [dot] org
Telephone: +34 611 35 41 89
This policy explains how LocalSnow uses personal data under the GDPR and Spanish Organic Law 3/2018.
Required fields are necessary to handle the relevant service; without them we may be unable to create an account, answer a request or arrange a lesson. Optional fields can be left blank. Site language and the language requested for teaching are different preferences.
Accessibility preferences and free text can reveal health information, which has additional protection under Article 9 GDPR. Do not submit diagnoses, medical records or unnecessary sensitive information in general notes. A contractual legal basis alone is not sufficient for health data; any necessary collection requires an applicable special-category condition, such as separately obtained explicit consent, and appropriate safeguards.
Adults should arrange lessons for children and provide only the participant information needed. Do not send a child’s unnecessary identifying or health information.
Authorised LocalSnow operators access requests for coordination and support. For a Free inquiry, we share relevant lesson requirements with the chosen professional and release your contact details when they accept. For paid bookings we share the information necessary to organise and deliver the lesson with the relevant instructor or school. Those professionals may be independent controllers for their teaching, safety, legal and billing responsibilities. We do not publish client requests as public profiles.
Service providers support hosting and databases, email delivery, media storage (Cloudflare R2), monitoring (Sentry), optional Google authentication and payments (Stripe). Hosting and email providers depend on the deployed configuration. We may also disclose necessary records to authorities where legally required and to advisers for legal or accounting work. We do not sell personal data.
Stripe receives payment information directly and processes it for payment, fraud prevention and regulatory purposes, including purposes for which it acts as an independent controller. See Stripe’s privacy policy. LocalSnow does not receive your full card number or card security code from hosted checkout.
Some service providers and lesson professionals may process data outside the European Economic Area. Where required, transfers need an applicable adequacy decision or appropriate safeguards, such as the European Commission’s standard contractual clauses, with any necessary supplementary measures. Contact us for information about recipients and applicable safeguards. A provider’s EU storage location alone does not exclude overseas access.
We retain information for as long as needed for the stated purpose, including ongoing accounts and requests, and then delete or anonymise it unless a legal retention requirement or a dispute requires restricted retention. Payment and accounting records may need to remain after an account is closed. Retention depends on record type, applicable jurisdiction and limitation periods. Backups and third-party systems have separate retention cycles.
Closing an account does not automatically erase all transactional records. You may request deletion or ask which retention periods apply to your records at our contact email.
LocalSnow uses authentication and security cookies, a site-language preference cookie, provider onboarding draft cookies where needed and browser storage for interface preferences where enabled. Authentication can use more than one cookie. Durations depend on the cookie and configuration; they are not all limited to a browser session.
Stripe and Google may use their own cookies or similar technologies when you use checkout or sign-in. Umami is intended for audience measurement without conventional tracking cookies, but absence of cookies does not by itself establish anonymity or an exemption from consent. Non-essential storage or tracking requires consent unless a valid legal exemption applies.
You can remove cookies and browser storage through your browser. Removing authentication or draft storage can sign you out or interrupt onboarding. A browser setting is not a substitute for any consent control the service is legally required to provide.
We use access controls and password hashing and limit access to personal data to relevant tasks. No internet service can guarantee absolute security. Payment providers may apply automated fraud checks under their own policies. LocalSnow’s lesson coordination is reviewed by people; we do not use solely automated decisions with legal or similarly significant effects to select your instructor.
You may request access, correction, erasure, restriction and, where applicable, portability. You may object to processing based on legitimate interests and withdraw consent at any time without affecting earlier lawful processing. Some rights have statutory conditions and exceptions.
Email legal [at] localsnow [dot] org. We may request proportionate identity verification. We normally respond within one month; where the GDPR permits an extension of up to two further months, we will explain it within the first month. You may complain to the Agencia Española de Protección de Datos or the competent supervisory authority in your country, without first contacting us.
We will update this notice when processing changes and communicate material changes as appropriate. A policy update does not itself constitute consent to a new purpose.