Privacy policy
The French version prevails. This English version is provided for convenience.
Last updated: 2 October 2026
1. Data controller
ESDI SAS, whose registered office is at Hameaux d'Herbefin, 73480 Lanslebourg-Mont-Cenis, France, is the controller of the personal data collected on locski.com.
DPO contact: kevin@esdi.pro
2. Data collected
We collect the following categories of data:
| Category | Data | Legal basis |
|---|---|---|
| Customer account | First name, last name, email, password (hashed) | Performance of the contract |
| Group & avatars | First name, gender, age, discipline, level, height, weight, shoe size, head circumference | Performance of the contract |
| Booking | Dates, shop, items, amounts, booking token | Performance of the contract |
| Payment | No card data stored (Stripe PCI DSS) | Performance of the contract |
| Browsing | Technical cookies (session, display language), analytics cookies (with consent) | Legitimate interest / Consent |
3. Purposes of processing
- Managing your account and your rental groups
- Processing and following up your bookings
- Body-profile matching to recommend suitable equipment
- Transactional communication (confirmations, reminders)
- Improving the service (aggregated analytics, with consent)
4. Retention periods
| Data | Period |
|---|---|
| Active customer account | Length of the business relationship + 3 years |
| Booking data | 10 years (accounting obligations) |
| Groups / avatars (anonymous) | Deleted after 24 months of inactivity |
| Analytics cookies | 13 months maximum (CNIL) |
5. Recipients of the data
- Partner rental shops: body-profile data only after a confirmed booking
- Stripe: payment processing (PCI DSS certified)
- OVHcloud: hosting (servers in France)
- Google: SSO sign-in (Google OAuth)
No data is transferred outside the European Union.
6. Your rights
Under the GDPR, you have the following rights:
- Access — view your data from your customer account
- Rectification — update your information from your account
- Erasure — request the deletion of your account and associated data
- Portability — obtain your data in a structured format
- Objection — object to the processing of your data
- Restriction — request the restriction of processing
To exercise your rights: kevin@esdi.pro or from your customer account.
You can also lodge a complaint with the CNIL (French data protection authority).
7. Cookies
We only use technical cookies required for the website to work (user session, display language). No tracking, analytics or marketing cookies are used. If this changes, a consent banner will be introduced in accordance with the regulations.