Privacy Policy

1. Data controller

Eskotin, established in Spain. Privacy contact: partnerships@eskotin.com.

2. Data we process

• Account data: email, name, hashed password.
• Profile data: photo, location, climbing level, interests, social links (optional).
• Usage data: courses viewed, deals clicked, participation in challenges and giveaways.
• Technical data: IP address, device type, browser, timestamps.

3. Purposes and legal basis

• Providing the service and managing your account — performance of a contract (art. 6.1.b GDPR).
• Essential communications (verification, recovery, material changes) — contractual obligation.
• Community marketing (newsletter, news, giveaways) — consent (art. 6.1.a), withdrawable at any time.
• Fraud prevention and legal compliance — legitimate interest (art. 6.1.f).

4. Processors and transfers

We use providers in the EU and the US with appropriate safeguards (Standard Contractual Clauses): backend and authentication, hosting/CDN, transactional email and development platform. We do not sell data to third parties.

5. Retention

We keep your data while your account is active. On deletion, we erase or anonymise it within a maximum of 30 days, except where the law requires retention (invoicing, judicial requests).

6. Your rights

You can exercise your rights of access, rectification, erasure, portability, objection and restriction by emailing partnerships@eskotin.com. You may also lodge a complaint with the Spanish Data Protection Agency (aepd.es).

7. Cookies

We use strictly necessary cookies to run the service and, with your consent, analytics cookies to improve the experience. You can manage your preferences at any time.

8. Minors

Eskotin is intended for people aged 16 and over. We do not knowingly collect data from anyone younger.

9. Changes

We will publish any material change on this page at least 15 days in advance where legally required.