Privacy policy

Data controller

The controller of your personal data is Sergio Anibal Toro Castaño, with tax ID (NIF) 45129727R and address at Ronda de Queralt 11, 2-2, Avià (Barcelona), Spain. You can contact us at sergio.toro.castano@gmail.com or on 697286134.

What data we process and where it comes from

We only process the data you give us yourself, depending on how you interact with the school. Card details are handled exclusively by the payment gateway: this site never sees or stores them. We only process minors' data when they take part in an activity, with authorisation and through their parent or guardian.

• Contact form: name, email and message.
• Purchase or booking: email, phone, name, activity and date.
• Account and sign-in: email; if you sign in with Google, the name and email from your Google profile.
• WhatsApp or email: the data you include when you write to us.
• Billing: the details needed to issue an invoice when you buy.

What we use it for and on what legal basis

We use your data only for the following purposes. There is no profiling and no automated decision-making. The data linked to a purchase or booking is required to conclude the contract: without it we cannot process the booking.

• Managing bookings, purchases and your account: performance of a contract.
• Answering your enquiries: consent or pre-contractual measures.
• Issuing invoices and meeting tax obligations: legal obligation.
• Sending you operational messages about your booking, such as confirmations or weather-related changes: performance of a contract.
• Sharing the photos and videos of your flight with you, and giving access to anyone you invite: performance of a contract.
• Sending you news and offers from the school: legitimate interest in telling you about services similar to the ones you have already used. You can object at any time, from your account or from the link in every message.

Recipients

For the service to work, some data passes through the providers that support it. We never sell or share your data with third parties for commercial purposes.

• Stripe: payment gateway.
• PAYCOMET S.L.U.: payment gateway.
• Cloudflare, Inc.: web hosting, database, transactional email delivery, and hosting and playback of flight photos and videos.
• Google: sign-in with Google.
• Shipping companies, when you buy equipment with delivery.
• Accounting and tax advisers.
• Public authorities or banks, where the law requires it.

International transfers

Some providers (Cloudflare, Google, Stripe) are US companies. Data transfers rely on the EU-U.S. Data Privacy Framework and, as a fallback, on standard contractual clauses approved by the European Commission.

Flight photos and videos

When you fly with us, the pilot may put together a gallery with the photos and videos of your flight. The gallery is private: it opens only for someone signed in with an email that has been given access, and anyone with access can invite others.

The content is kept for twelve months and then deleted automatically. You can download all of it at any time while the gallery is live, and we write to you before it expires. If you would rather we deleted it sooner, write to sergio.toro.castano@gmail.com.

How long we keep your data

We keep each category of data only as long as needed:

• Contract and billing data: for the periods required by tax and commercial law.
• Enquiries: for as long as it takes to deal with them.
• Your account: for as long as you keep it open.
• Consents: until you withdraw them.

Your rights

You have the right to access your data, rectify it, erase it, object to its processing, restrict it, request its portability and withdraw your consent at any time.

To exercise these rights, write to us at sergio.toro.castano@gmail.com with proof of your identity. We will reply within one month at most.

If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

Cookies

This site only uses technical cookies, needed for it to work: your account session cookie, interface hints that you are signed in, the basket summary and your language preference when signing in. The cookie notice also stores your dismissal preference in your browser's local storage.

These cookies are exempt from consent (article 22.2 of Spanish Law 34/2002, LSSI). There are no analytics, advertising or third-party cookies. If any are ever added, we will ask for your prior consent with a banner.