Privacy Policy

This Privacy Policy explains how DTS Strategies & Solutions S.R.L., operating as Paragliding Brasov, collects, uses, stores, and protects your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Romanian legislation.

1. What Data We Collect

We collect only the data strictly necessary to provide our services, in accordance with GDPR:

• First and last name
• Email address
• Phone number (including WhatsApp)
• Preferred flight date and location
• Number of passengers
• Any additional information you voluntarily provide in the message field

We do not collect or store any banking information, card numbers, or payment account details. Any online payments are processed exclusively through certified third-party payment platforms.

We also collect standard technical data when you visit our website: IP address, browser type, device information, and usage data via analytics tools (Google Analytics).

2. How We Collect Data

Personal data is collected when you:

• Submit a flight reservation or voucher request form
• Contact us by email or WhatsApp
• Browse our website (via cookies and analytics tools)

3. How We Use Your Data

3.1 Service Delivery

• Processing and confirming flight reservations
• Issuing gift vouchers and payment confirmations
• Communicating weather updates and flight scheduling
• Sending HD photo and video footage after your flight

3.2 Legal & Administrative

• Issuing invoices and meeting accounting obligations
• Responding to legal requests from competent authorities

3.3 Marketing (with your consent only)

If you have explicitly opted in, we may send occasional updates, promotions, or news about our services. You can withdraw this consent at any time by contacting us.

4. Legal Basis for Processing

We process your data on the following GDPR legal bases:

• Art. 6(1)(b) — performance of a contract (reservations, vouchers)
• Art. 6(1)(c) — compliance with legal obligations (accounting)
• Art. 6(1)(a) — your consent (marketing communications)
• Art. 6(1)(f) — legitimate interest (website security and operations)

5. Data Retention

• Reservation and booking data: maximum 12 months
• Voucher data: maximum 360 days from date of issue
• Invoicing and accounting data: up to 10 years as required by Romanian law
• Marketing data: maximum 3 years, only with your explicit consent
• Flight footage (photos/video): maximum 30 days, then permanently deleted

At your explicit request, data can be deleted earlier than the periods stated above.

6. Data Security

We are committed to protecting your personal data through appropriate technical and organisational measures:

• Secure HTTPS connection across the entire website
• Protected servers hosted in secure locations
• Regular backups
• Access strictly limited to authorised personnel
• Internal confidentiality policies applied to all staff and collaborators

7. Sharing with Third Parties

Your data is never sold, rented, or transferred to third parties, except:

• Payment processors, for the purpose of processing online transactions
• IT and hosting service providers, acting under our instructions
• Competent public authorities, only when required by law

All third parties are GDPR-compliant and process data solely based on our instructions.

8. Cookies

Our website uses cookies to ensure proper functionality and improve your browsing experience. We use Google Analytics to understand how visitors use our site. You can manage or disable cookies through your browser settings.

By continuing to use this website, you consent to our use of cookies as described in this policy.

9. Your Rights Under GDPR

In accordance with Regulation (EU) 2016/679, you have the following rights:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP) at www.dataprotection.ro

To exercise any of these rights, contact us at: contact@paraglidingbrasov.ro

10. Data Transfers Outside the EU

We do not transfer personal data outside the European Union. If such a transfer becomes necessary in the future, it will be carried out in full compliance with GDPR safeguards.

11. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Any changes will be published on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

Questions about your data? Contact us at contact@paraglidingbrasov.ro