Privacy Policy

Who is responsible

Tomas Mical, ski coach based in Aspen, Colorado, USA, runs this website and is responsible for your personal data. You can reach me at ski@tomasmical.com.

Contact form

When you send a message through the form, I receive your name, email address, what you are interested in, your message and, if you add one, a link to a video of your skiing. The form is processed by Supabase and the message is delivered to my mailbox by Resend. Messages are not stored on the website, only in my email. To protect the form against spam, the number of messages from one IP address per hour is limited; the IP address is checked briefly and not saved.

I use your message only to reply to you and, if we agree on coaching, to arrange and deliver it. I keep our correspondence while we are in contact and for as long as I need it for the coaching we did together. After that I delete it.

Email and WhatsApp

If you write to ski@tomasmical.com or message me on WhatsApp, I receive what you send, including your email address or phone number. Email sent to ski@tomasmical.com is forwarded by Cloudflare to my mailbox at Google (Gmail). WhatsApp is run by Meta under its own privacy policy.

Client accounts

If you create a client account, I store your name, your email address, the status of your account, the date and time you agreed to the Terms of Use and this Privacy Policy, and the versions you agreed to. Passwords are handled by Supabase, the login service, and I never see them. Personal video analyses in the library are linked to your account so that only you can see them. Emails about your account, such as confirming your address, resetting your password or approving your account, are sent by Resend.

You can delete your account yourself in your account settings. Your name, email address and login are removed, and a record without them remains to show that an account existed. Personal video analyses I prepared for you stay in the library until I remove them; write to me and I will delete them. Emails we exchanged stay in my mailbox until I delete them.

Legal basis

If you are in the European Union, I process your data on these grounds under the GDPR: to reply to your message and to arrange and deliver coaching you ask for (steps before and performance of an agreement, Article 6(1)(b)); to run your client account under the Terms of Use (Article 6(1)(b)); to keep a record of when you agreed to the terms, and to protect the form against spam (my legitimate interest, Article 6(1)(f)).

Cookies and local storage

The site stores your choice of light or dark mode in your browser. If you log in to the client library, the login service keeps you logged in using your browser's storage. There are no advertising cookies and no analytics tracking. If that changes, this page will be updated.

Videos, Instagram and fonts

Some pages show videos from YouTube or Instagram. When you open such a page, the player loads from YouTube (in its privacy-enhanced mode) or from Instagram, and these services receive your IP address and information about your browser. Instagram, and YouTube once you play a video, may store their own cookies under the privacy policies of Meta and Google.

The Instagram section shows my latest posts through Behold, so those pictures load from Behold's servers, which receive your IP address. The fonts are stored on this website, so no request goes to Google Fonts.

Services that process data for this site

Cloudflare (hosting of the website and forwarding of email), Supabase (website content, client accounts, login and the contact form, with servers in Frankfurt, Germany), Resend (sending emails), Google (my mailbox), Behold (Instagram posts), and YouTube and Instagram (videos). Each of them processes data only to provide its service.

I am based in the United States, and some of these services process data in the United States or elsewhere outside the European Union. Where EU law requires it, they rely on the safeguards it recognises, such as standard contractual clauses or the EU-U.S. Data Privacy Framework.

Your rights

You can ask me what data I hold about you, ask me to correct or delete it, ask for a copy, or ask me to restrict or stop using it. Write to ski@tomasmical.com and I will reply within one month. If you are in the European Union, you can also complain to your national data protection authority, for example the Office for Personal Data Protection (ÚOOÚ) in the Czech Republic.

Children

This site is not meant for children under 16. If you are arranging coaching for a child, please contact me as a parent or guardian.

Changes

The version and the date of this policy are shown at the top of the page. If something important changes for client accounts, I will let you know by email.