Protection of personal data

We treat our customers' personal data as confidential. We pass it to nobody for commercial use and we process it under Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll., on personal data processing.

What you are ordering from us and on what terms is covered by our Terms and Conditions.

What we know about you

• The name, e-mail address and phone number you fill in on the form. Every field is required and the form will not send without them — we need the phone number so that we can call you two days before the jump and agree the time according to the forecast.
• For a booking, the date that suits you and the number of people. For a gift voucher, the name of the person it is for and the message that should appear on it.
• Whatever you write in the note or the message yourself. We process it only in order to answer it.
• The IP address the order came from. It is stored with the order so that a real order can be told apart from misuse of the form.
• The variable symbol of the payment is your phone number without the country code. It therefore appears with the payment on the bank statement, as does your name when you pay by transfer.
• We find out nothing else. We know only what you tell us yourself.

Health declaration

• Before the jump you sign a declaration that you are fit to make it: that you do not suffer from diabetes, epilepsy or a cardiovascular condition, and that you are not under the influence of alcohol, addictive substances or medication that would reduce your alertness and ability to react.
• This is data concerning health, a special category under Article 9 GDPR. We process it with your explicit consent, which you give by signing the declaration (Article 9(2)(a) GDPR), and further so that we are able to prove what you signed should liability for harm ever be in question (Article 9(2)(f) GDPR).
• Without a signed declaration we cannot take you on the jump. We ask for no other health details and we pass them to nobody.

Video and photos of the jump

• We process the video and photos of your jump for you — it is a service some of our customers pay extra for. We also keep a backup copy so that we can send them to you again if you lose them.
• We publish them only with your consent. You give it on the same form as the health declaration and it is consent under Article 6(1)(a) GDPR.
• You can withdraw the consent at any time — get in touch using the contacts below and we will take the footage down. Withdrawal does not affect what was published before it.

Why we process it

• So that we can deliver what you ordered: book a date, issue a voucher, answer a question. This is performance of a contract under Article 6(1)(b) GDPR and it cannot be done without those details.
• Because the law requires it for tax documents. That is processing under Article 6(1)(c) GDPR and we cannot stop it even at your request.
• To keep the form working. We limit how many times it can be sent from one address, which is our legitimate interest under Article 6(1)(f) GDPR. For that the website keeps only a hashed form of the address and the times it was sent, not the address itself.

How long we keep it

• An order or a booking for three years after it has been handled. That is how long the limitation period runs under Section 629 of the Czech Civil Code, so that is how long both you and we can exercise rights under the contract.
• Tax documents for ten years from the end of the tax period in which the payment was made. This is required by Section 35(2) of the Czech VAT Act.
• The record of how often the form was sent from one address for ten minutes. After that it overwrites itself.
• A signed health declaration for ten years. A claim for damages can be made for that long (Section 636(1) of the Czech Civil Code), so for that long we must be able to prove what you signed.
• We send you the video and photos and keep them for ten years, so that we can send them to you again even years later. It is the same statutory period as for the rest of the jump documentation (Section 636(1) of the Czech Civil Code).

Who we pass it to

• To nobody for commercial use and to nobody who could bother you with an offer.
• The processor is WEDOS Internet, a.s., company ID 28115708, Masarykova 1230, 373 41 Hluboká nad Vltavou, Czech Republic. The website runs on their server, the order is created there and the confirmation e-mail leaves from there.
• The website is maintained for us by D&S Mike; the anonymous visitor statistics also run on its server.
• Payment is made by bank transfer or at the airfield in cash or by card. The website uses no payment gateway, so your card details never reach us.
• We pass nothing to experience agencies. It works the other way round: when a customer buys a voucher from them, they pass us the contact details and we work with them just as with an order from our own website.

Visitor statistics

• We measure them with our own tool on our own server, not with a service that would also collect the data for someone else.
• It uses no cookies, stores no IP address and builds no profile. Individual visits cannot be linked to a particular person.
• That is why you will find no consent banner on the website. The details are on the page about cookies.

Your rights

• You have the right of access to your data, to its correction or erasure, to restriction of processing, to portability and to object to processing. Just get in touch using the contacts below.
• For data we keep under a legal obligation we cannot carry out erasure until the statutory period ends. For everything else we can.
• You may also lodge a complaint with the supervisory authority: Úřad pro ochranu osobních údajů (the Czech Data Protection Authority), Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz.

Controller of personal data

• Jindřich Kantor, a self-employed person, company ID 62892258, registered office Slunečnicová 2978/9, Záběhlice, 106 00 Praha 10, Czech Republic.
• Phone +420 603 456 227, e-mail info@padaky.cz. Operator of the skydive-kantor.com website.