PRIVACY AND COOKIES POLICY
1. Data Controller
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), and Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD), users are informed of the following:
- Full name: José David González Camacho
- Trade name: SKYLANZ
- Tax ID (NIF): 78.543.922-A
- Address: Camino El Callao I, nº 28, 35571, Tías, Las Palmas (Canary Islands)
- Email: skylanzparagliding@gmail.com
- Phone: +34 627 886 301
2. Data We Collect
SKYLANZ collects the personal data that users voluntarily provide through the Website forms:
- Booking form: first and last name, email address, phone number, date of birth, approximate weight, and any relevant medical information the user chooses to share.
- Contact form: first and last name, email address, and phone number.
- Browsing data: via technical and analytics cookies, as described in section 12 of this policy.
3. Purpose of Processing
Users’ personal data will be processed for the following purposes:
- Manage the booking of the tandem paragliding recreational flight and provide the contracted service.
- Send confirmations, reminders, and communications related to the booking.
- Ensure the safety of the activity, especially regarding the passenger’s weight and physical condition data.
- Comply with applicable legal and tax obligations.
- Handle queries and requests submitted through the contact form.
- Send marketing communications about SKYLANZ services, only with the user’s explicit consent.
4. Legal Basis for Processing
- Performance of a contract (Art. 6(1)(b) GDPR): booking management and service provision.
- Compliance with legal obligations (Art. 6(1)(c) GDPR): tax and accounting obligations.
- Explicit consent (Art. 6(1)(a) GDPR): marketing communications and processing of health data voluntarily provided.
- Legitimate interest (Art. 6(1)(f) GDPR): service improvement and ensuring the safety of activities.
- Substantial public interest in the area of safety (Art. 9(2)(b) GDPR): processing of the passenger’s health data solely for safety purposes during the activity.
5. Special Processing of Health Data
Before the activity takes place, the user must inform SKYLANZ of any relevant medical condition that may affect their safety during the flight, including pregnancy, cardiovascular disease, anxiety, vertigo, or recent injuries. The user also expressly declares that they are not under the influence of alcohol, drugs, or any medication that may affect their physical or psychomotor abilities at the time of the activity.
This information constitutes health data within the meaning of Art. 9 of the GDPR and is subject to special protection. It is processed exclusively on the basis of the data subject’s explicit consent and for safety reasons related to the sporting activity, in accordance with Art. 9(2)(a) and 9(2)(b) of the GDPR. It will not be used for any other purpose or shared with third parties, except where expressly required by law.
6. Data Retention Period
- Booking and contract data: for the duration of the service and then for five years in accordance with tax regulations, plus the time needed to address any potential civil liability.
- Health data: only for the time strictly necessary to carry out the activity and the time needed to handle any claims arising from it.
- Contact data: up to two years from the last communication or until the user requests deletion.
- Marketing communications data: until the user withdraws consent.
7. Recipients and Data Sharing
Users’ personal data will not be shared with third parties except in the following cases:
- Payment providers: Stripe and Redsys process payment data as data processors under their own security policies. SKYLANZ does not store banking or card details in its own systems.
- Booking system: BookingPress acts as a data processor for managing bookings and customer data, under SKYLANZ’s instructions and with the safeguards required by the GDPR.
- Web analytics: Google Analytics 4 processes browsing data in aggregated form for statistical purposes, which may involve transfers outside the European Economic Area with appropriate safeguards established by the European Commission.
- Legal obligation: when required by applicable law.
8. Users’ Rights
Users may exercise the following rights at any time: access, rectification, erasure, objection, restriction of processing, data portability, and withdrawal of consent, without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise these rights, users must contact skylanzparagliding@gmail.com, stating the right they wish to exercise and attaching a copy of their identity document. SKYLANZ will respond within a maximum of one month.
9. Complaints to the AEPD
If users consider that the processing of their data does not comply with current regulations, they may file a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan, 6, 28001 Madrid, or via www.aepd.es.
10. Security Measures
SKYLANZ has implemented the following technical and organisational measures to ensure the security of personal data:
- Encryption of data in transit via the HTTPS protocol.
- Restricted access to personal data exclusively for authorised staff.
- Regular backups of stored information.
- Internal procedures for managing and reporting security incidents.
- Data processing agreements signed with all providers who access personal data.
11. Marketing Communications
SKYLANZ will only send marketing communications to users who have given their explicit consent by voluntarily ticking the relevant box. Users may withdraw this consent at any time via the unsubscribe link included in each communication or by contacting skylanzparagliding@gmail.com. Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal.
12. Cookies Policy
12.1 What are cookies?
Cookies are small text files stored on the user’s device when visiting a website, allowing information about the visit to be remembered to make browsing easier and improve the user experience.
12.2 Types of cookies used by this Website
Technical or essential cookies: These are strictly necessary for the Website to function and cannot be disabled. They include session cookies for the booking process and those generated by BookingPress. They do not require user consent.
Analytics cookies: SKYLANZ uses Google Analytics 4 (GA4) to obtain aggregated and anonymous statistical information about Website use, in order to improve its content and services. They require the user’s prior consent.
Communication cookies: Direct access to WhatsApp as a customer support channel may generate cookies from the WhatsApp/Meta platform, subject to its privacy policy, available at www.whatsapp.com/legal/privacy-policy.
12.3 Consent and cookie management
When accessing the Website for the first time, users will see a banner allowing them to accept all cookies, reject them, or configure their preferences individually. No non-essential cookies will be installed without prior consent. Users can change their preferences at any time from the Website settings panel or via their browser:
- Google Chrome: Settings → Privacy and security → Cookies
- Mozilla Firefox: Options → Privacy Security
- Safari: Preferences → Privacy
- Microsoft Edge: Settings → Privacy, search, and services
12.4 International transfers associated with cookies
Google Analytics 4 may involve transfers of data outside the European Economic Area, carried out with appropriate safeguards established by the European Commission through standard contractual clauses. For more information: www.google.com/policies/privacy.
13. Applicable Regulations
This policy is governed by the following regulations:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
- Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights (LOPDGDD).
- Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE).
- Guide on the use of cookies by the Spanish Data Protection Agency (AEPD), in its current version.
14. Policy Updates
SKYLANZ reserves the right to amend this policy to adapt it to legislative changes or changes to the services offered. The current version will always be the one published on the Website at the time of access.
15. Contact
- Email: skylanzparagliding@gmail.com
- Phone: +34 627 886 301