Privacy Policy

Last updated: 2026-07-18. This Privacy Policy explains how Daniel Ensminger, trading as x70 (“we”, “us”, “our”), processes personal data when you use https://skirack.x70.one and related Skirack product marketing services, in line with the EU General Data Protection Regulation (GDPR) and applicable German data protection law (BDSG).

1. Controller

The controller responsible for processing is:

Daniel Ensminger
x70
Altheimer Eck 15
80331 München
Germany
Email: contact@x70.one

2. Categories of personal data

Depending on how you interact with us, we may process:

Contact & inquiry data: name, email address, message content, inquiry type, and related details submitted via the contact form (product questions, availability, partnerships).
Newsletter data: email address and subscription status if you opt in to Skirack updates.
Technical data: IP address, browser type, device information, pages visited, referrer, and approximate location derived from IP, when analytics or security tooling is active.
Communications: emails and messages exchanged with us about the Skirack product.

3. Purposes and legal bases

We process personal data for the following purposes:

Responding to product inquiries (Art. 6(1)(b) GDPR — steps prior to a contract; Art. 6(1)(f) — legitimate interest in answering questions about Skirack).
Sending newsletters and product updates only with your consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time.
Providing product information on this marketing site (Art. 6(1)(f) GDPR — legitimate interest in presenting the Skirack product).
Security, abuse prevention, and rate limiting (Art. 6(1)(f) GDPR — legitimate interest in protecting our services).
Analytics and site improvement (PostHog, Vercel Analytics) only after you consent via our cookie banner (Art. 6(1)(a) GDPR). Session recording, where enabled, masks form inputs.
Legal obligations such as responding to lawful requests (Art. 6(1)(c) GDPR).

4. Cookies and similar technologies

We use strictly necessary cookies and local storage for security and remembering your cookie preferences. Optional analytics cookies and similar technologies (including PostHog and Vercel Analytics) are used only if you click “Accept all” on our consent banner. You can change your choice at any time via “Cookie settings” in the site footer.

Theme preference may be stored locally on your device and is not used for tracking.

5. Recipients and processors

We use carefully selected service providers who process data on our behalf under Art. 28 GDPR agreements where applicable:

Vercel Inc. — website hosting and edge delivery
Resend, Inc. — transactional and newsletter email
PostHog, Inc. — product analytics (consent-based)
Upstash, Inc. — rate limiting / Redis where configured

We do not sell your personal data. We share data only with processors needed to operate the site, or where required by law.

6. International transfers

Some providers are based in the United States or other countries outside the EEA. Where transfers occur, we rely on appropriate safeguards such as the EU–US Data Privacy Framework (where the provider is certified) and/or Standard Contractual Clauses (SCCs), plus supplementary measures as required.

7. Retention

Contact / product inquiries: typically up to 24 months after the last meaningful contact, unless a purchase or longer retention is required.
Newsletter: until you unsubscribe or we delete the list entry.
Analytics data: according to the configured retention in the analytics tools, and only while consent remains valid.
Server logs / security: for short periods needed for security and troubleshooting, unless a longer period is needed to investigate an incident.

8. Your rights

Under the GDPR you may have the right to:

Access your personal data (Art. 15)
Rectification (Art. 16)
Erasure (Art. 17)
Restriction of processing (Art. 18)
Data portability (Art. 20)
Object to processing based on legitimate interests (Art. 21)
Withdraw consent at any time without affecting the lawfulness of processing before withdrawal (Art. 7(3))
Lodge a complaint with a supervisory authority (Art. 77), in particular Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), or the authority where you live or work

To exercise these rights, email contact@x70.one.

9. No automated decision-making

We do not use personal data for automated decision-making producing legal or similarly significant effects under Art. 22 GDPR.

10. Children

This site is directed at adults interested in the Skirack product. We do not knowingly collect personal data from children under 16.

11. Changes

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes may be communicated via the website or email where appropriate.

12. Contact

Questions about privacy: contact@x70.one. Related documents: Terms of Service and Imprint.