“SKYDIVE” Ltd. strictly monitors the security and integrity of all personal data collected from our clients. We pay utmost attention to the lawful, fair and transparent processing of personal data. We collect and process the data provided only for specific, explicit and legitimate purposes and do not process it further in a manner incompatible with those purposes. The data we collect and store is kept to a minimum and is related to and limited only to what is necessary to fulfill the purposes for which we collected it. We make every effort within our organization to ensure that your personal data is always accurate and up-to-date, and we also rely on you if you discover an inaccuracy in the data, to promptly remove it. We never store your data for a period longer than necessary for the purposes for which it is processed. We provide you with the opportunity at any time and without giving reasons to withdraw your consent to process your data, as well as to delete it if you notify us of your wish. At the same time, it is a priority for us to process your personal data in a manner that ensures an appropriate level of security for your personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage. We have taken the necessary technical and organizational measures prescribed in applicable legislation to ensure the protection and security of our customers’ personal data.
“SKYDIVE” Ltd. is a personal data administrator and in this capacity complies with the provisions of the applicable legislation (General Data Protection Regulation – Regulation (EU) 2016/679, Personal Data Protection Act, etc.)
DEFINITIONS
“PERSONAL DATA” is any information relating to an identified natural person or an individual who can be identified. Personal data includes name, personal identification number (PIN), email address, telephone number, postal address, etc.
“Processing” means any operation or set of operations performed on personal data or a set of personal data, whether by automated or other means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making the data accessible, alignment or combination, restriction, erasure, or destruction.
“Controller” means any natural or legal person, public authority, agency, or other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by EU law or the law of a Member State, the controller or the specific criteria for its designation may be laid down in Union law or in the law of a Member State.
Our privacy policy also outlines the options we provide for you to access, update, or otherwise control your personal data that we process. If you have any questions regarding our practices or any of your rights described below, you can contact our team at [email protected]. This inbox is actively monitored and managed.

WHAT INFORMATION DO WE COLLECT – PERSONAL DATA, PURPOSES AND BASES ON WHICH SKYDIVE LTD PROCESSES IT

“SKYDIVE” Ltd. collects and processes personal data in connection with the use of the skydiving service we provide. Specifically, we process the following personal data of our customers for the purposes set out below:
1. Registration and voucher receipt details – three names, email and contact phone number.
Purpose for Data Collection – To establish contact with the client and send a voucher along with additional information.
Grounds for processing this personal data – Explicit consent received from you as a client; taking steps to conclude a contract – with your registration on the website www.skydivesofia.com, a contractual relationship is created, on the basis of which we process your personal data;
2. Data filled in by the client in a Declaration before making the jump, and for concluding a contract – three names, date of birth, telephone number, email, address.
Purpose for Data Collection: To fulfill the administrator’s obligations under the service contract for a parachute jump and to ensure the health and safety of the client during the jump.
Legal Basis for Processing These Personal Data – Fulfillment of the administrator’s obligation to provide the service.
3. Data for issuing an invoice – three names, personal identification number, address, email;
Purpose for which the data is collected: we process this personal data to fulfill obligations arising from accounting and tax legislation – tax and accounting legislation in the Republic of Bulgaria requires the compilation of certain accounting and commercial information, including the storage of this information for a certain period, as well as any other information and documents relevant to taxation. In fulfilling this obligation, the relevant information and documents, which also contain personal data, are stored for periods provided for in the relevant laws.
Ground for processing this personal data – compliance with a legal obligation that applies to the company;
4. Data from video and photo shooting during the jump – such data is collected upon the express request and consent of the client and against an additional payment for the filming service.
Purpose for Data Collection: To fulfill the administrator’s obligations under the service contract for photo and video recording of the parachute jump.
Legal Basis for Processing These Personal Data – Fulfillment of the administrator’s obligation to provide the service.
With the client’s explicit consent, the video and photo data of the jump can:
-to be published on social networks and/or on the Skydive Sofia website;
-to be used for advertising purposes to promote skydiving on social networks, media and/or on the Skydive Sofia website.

“SKYDIVE” Ltd. also collects and processes personal data of professional skydivers who perform parachute jumps, namely:
1. Data filled in by skydivers in the Declaration for the performance of parachute jumps – three names, personal identification number, date of birth, email, telephone, address, physical data – height, weight, blood type, allergies, three names, telephone and email of a contact person in case of need.
Purpose for Data Collection: To fulfill the administrator’s obligations under the contract for performing parachute jumps; ensuring the health and safety of the skydiver during the jump.
Legal Basis for Processing These Personal Data – Fulfillment of the administrator’s obligation under the contract for performing parachute jumps.

Data of minors is processed upon application and with the explicit consent of their parents or legal guardians.

Sharing/Disclosure of Personal Data

“SKYDIVE” Ltd. does not share, sell, rent, trade or transfer personal information collected from customers.
There are exceptions where your personal information may be disclosed to third parties in the following ways:
It may be transferred as an asset in connection with a merger or sale of the business or as part of our business or as part of a corporate reorganization or other changes in corporate governance.
It may be provided to service providers who assist us in delivering our goods – couriers, accountants, system administrator. No supplier may have access to personal data stored by “SKYDIVE” Ltd. without a prior data confidentiality agreement, which entitles “SKYDIVE” Ltd. to verify compliance with the obligations assumed under the agreement. We transfer the collected personal information only to our trusted partners, together with whom we organize and provide the services we offer. Before any such data transfer, we check whether these providers provide sufficient guarantees that they implement appropriate technical and organizational measures, in such a way that the processing meets the requirements of the General Data Protection Regulation (Regulation (EU) 2016/679), the Personal Data Protection Act, the implementing regulations, as well as our privacy policy and ensures the protection of the rights of the data subject. In accordance with the principle of data minimization, these providers only receive the personal information they need to perform their functions.
Service providers are not allowed to retain personal data for their own or independent use, nor to keep it longer than necessary to perform the specified service.
We share personal data with the service provider when we have your explicit consent for this, or when there is another legal basis for doing so.
Lastly, personal data may be provided to state authorities (e.g., regulatory bodies and their subdivisions, authorities for crime detection and prevention), only when provided by law and under the conditions specified therein.
“SKYDIVE” Ltd. does not transfer/share your personal data with administrators and processors in countries outside the EU.

IV. PERIOD AND DURATION OF PROCESSING OF PERSONAL DATA BY “SKYDIVE” LTD

“SKYDIVE” Ltd. stores your personal data for no longer than necessary to fulfill the purposes for which they were collected, or until you withdraw your consent to processing. After deleting your account or withdrawing your consent, “SKYDIVE” Ltd. takes the necessary care to delete and destroy all your data without unnecessary delay, anonymize or pseudonymize it. “SKYDIVE” Ltd. may pseudonymize personal data for the purpose of preserving them for statistical purposes, subject to compliance with all technical and organizational measures provided for in the General Regulation on the Protection of Personal Data – Regulation (EU) 2016/679, the Personal Data Protection Act, etc. and in compliance with the principle of data minimization. After pseudonymization, the processing of personal data in the registers maintained by “SKYDIVE” Ltd. does not allow for the further linking of personal data with a specific data subject and the identification of a data subject, which is why the rights of individuals provided for in Art. 15, 16, 18, 21 of the Regulation do not apply, namely: right of access, right of rectification; right to restriction of processing; right to object.
“SKYDIVE” Ltd. stores your personal data provided in connection with the use of the service we offer for a period of 5 years for the purposes of protecting the legal interests of “SKYDIVE” Ltd. in legal or administrative disputes, and accounting documents are stored for the relevant statutory period.
“SKYDIVE” Ltd. notifies you in the event that the data storage period needs to be extended in order to fulfill a regulatory obligation or in order to pursue legitimate interests of the Administrator or otherwise.

V. YOUR RIGHTS IN RELATION TO THE PERSONAL DATA PROVIDED
1. Right to information
You have the right at any time to request information about whether your personal data is being stored, the purposes for which it is processed, what categories of personal data are being processed, the recipients to whom the personal data have been disclosed, the intended period for which it will be stored, and whether automated decision-making and profiling of the data exist.
2. Right of withdrawal
If you have given consent to the use of your data, you can withdraw it at any time with future effect, without having to give reasons.
You can send us your request to withdraw your consent to the following email:
[email protected]
3. Right to rectification
If you find that your data held by us is inaccurate, you can contact us to correct it.
4. Right to erasure of data
You have the right to request that we delete your data without undue delay. We will delete them within a reasonable time, as soon as we are sure that there are no other grounds that require their processing/storage.
After deleting your data, it is no longer possible to provide information.
5. Right to restriction of processing
In certain cases – for example, if you dispute the accuracy of the data, if you verify the grounds for its storage, etc., you have the right to request that we restrict the processing of your personal data. During the restriction, we can only store personal data, and other processing activities are only possible with your consent.
6. Right to data portability
In the event of a request from you, we will transmit or transfer the data to you or another controller in a structured, commonly used and machine-readable format. Direct data transfer only takes place if this is technically feasible.
7. Right to object
You may object at any time and without giving any reason to the processing of your personal data for direct marketing purposes, including profiling, as well as in cases where your data is processed on the basis of the performance of a task carried out in the public interest or the processing is necessary for the purposes of our legitimate interests.
8. Right not to be subject to a decision based solely on automated data processing, including profiling – “Skydive” does not carry out such data processing.
9. Right to appeal
You have the right to file a complaint against the processing of your personal data with the competent supervisory authority (in Bulgaria – the Personal Data Protection Commission or the court) if you believe that your personal data protection rights have been violated.
Personal Data Protection Commission
Sofia – 1592, Blvd. “Prof Tsvetan Lazarov” No. 2
Information and Contact Center – tel. 02/91-53-518
Mai: [email protected]
Web page: www.cpdp.bg

Contacts:
SKYDIVE ltd.
Tax address and address for written correspondence:
Sofia, Triaditsa district, 3 Emilian Stanev Street
Mobile phone: 0887520960
Mail: [email protected]
Web page: https://skydivesofia.com