Privacy Policy

This Privacy Policy explains how Time to Jump Dolomites โ€” Associazione Sportiva Dilettantistica (A.S.D.) ("we", "the Data Controller") processes personal data of visitors and customers of timetojumpdolomites.com, in accordance with Regulation (EU) 2016/679 (GDPR) and the Italian Privacy Code (D.Lgs. 196/2003 as amended by D.Lgs. 101/2018).

1. Data Controller

Time to Jump Dolomites A.S.D. โ€” David Prato
Registered office: Via Europa 21/11, 39052 Caldaro sulla Strada del Vino (BZ), Italy
Codice Fiscale: 94164870217
๐Ÿ“ง info@timetojumpdolomites.com ยท ๐Ÿ“ฑ +39 342 763 5478

We have not appointed a Data Protection Officer (DPO). For all data protection matters, please contact us at the address above.

2. What We Collect, Why, and on What Legal Basis

We only process the data you actively provide. We do not run a generic newsletter or marketing-profiling system.

2.1 Booking a jump (the main process)

When you reserve a seat, we collect โ€” across the booking form and the registration-completion step โ€” the following data:

  • Identity & contact: first name, last name, nickname, email address, phone number.
  • Registration details: date of birth, place of birth, postal address, emergency contact, skydiving licence country and number, insurance status.
  • Booking metadata: selected jump/event, group size, videographer option, deposit and payment status.

Purpose: to process and fulfil your booking, verify eligibility (licence/insurance are safety- and regulatory requirements), coordinate the load, and contact you about your jump.
Legal basis: performance of a contract โ€” Art. 6(1)(b) GDPR (and Art. 6(1)(c) for licence/insurance verification where required by aviation/sport regulations).

Public display of nickname: the nickname you choose is shown publicly on the flight card of your jump, so other skydivers can see who is on their load. Do not use your real name as a nickname if you do not want it shown. Legal basis: Art. 6(1)(b)/(f) GDPR (group coordination).

2.2 Payment

To take the deposit, your email is transmitted to our payment provider (Nexi); your name is entered by you directly on Nexi's page when you pay. Card data is entered directly on Nexi's secure hosted payment page and never reaches our servers. We store only the payment status and an order reference โ€” no card details are stored on our side. Any remaining balance and cancellation charges are settled on site.
Legal basis: Art. 6(1)(b) GDPR (contract) and Art. 6(1)(c) GDPR (tax/accounting obligations).

2.3 Optional account ("save my details")

If you tick "save my details for next time", we create an account using your email and a password (stored only in hashed form) so your data can be pre-filled at the next booking.
Legal basis: consent โ€” Art. 6(1)(a) GDPR; you can delete the account at any time.

2.4 Group bookings & friend invitations

If you book for a group, you may enter the first name and email of the friends you invite, so we can email each of them a personal link to complete their own registration. You are responsible for having your friends' agreement to share their email with us.
Legal basis: legitimate interest in facilitating the group booking you requested โ€” Art. 6(1)(f) GDPR.

2.5 Contacting us

If you write to us by email, WhatsApp or phone (via the links on the site), we process the data you provide in that message to answer you. We do not operate a web contact form that stores data on this site.
Legal basis: Art. 6(1)(b)/(f) GDPR.

2.6 Server logs

Our hosting provider automatically processes technical access data (IP address, browser/OS, time of request) in server logs, as is technically necessary to deliver the website securely.
Legal basis: legitimate interest in secure operation โ€” Art. 6(1)(f) GDPR.

3. Recipients & Processors

We use the following service providers, who process personal data on our behalf as processors (Art. 28 GDPR) strictly for the purposes above. We do not sell your data or use it for advertising.

  • Cloudflare, Inc. โ€” website hosting (Cloudflare Pages) and CDN. Processes access/log data. Transfer to the USA possible; covered by Standard Contractual Clauses / EU-US Data Privacy Framework.
  • Supabase, Inc. โ€” database and backend that stores your booking and registration data. Hosting region: EU (Frankfurt, Germany).
  • Resend (Plus Five Five, Inc.) โ€” sends transactional emails (booking confirmation, registration links, reminders). Receives recipient name, email and booking details. USA โ€” Standard Contractual Clauses.
  • Nexi S.p.A. (XPay) โ€” payment processing. Receives cardholder name, email and the card data you enter on its page. Italy / EU.
  • Google Ireland Ltd. / Google LLC โ€” Google Maps (location maps, loaded only after you consent โ€” see Section 6). When a map is loaded, your IP address is transmitted to Google. Transfer to the USA possible; SCC / EU-US Data Privacy Framework.

Beyond these, data may be disclosed to public authorities where required by law, and to our tax/legal advisors bound by confidentiality.

4. Transfers Outside the EU/EEA

Some of the processors above (Cloudflare, Resend and Google) are based in or may process data in the United States. Such transfers are safeguarded by the EU Standard Contractual Clauses and/or certification under the EU-US Data Privacy Framework. Our booking database (Supabase) is hosted in the EU (Frankfurt, Germany). A copy of the relevant safeguards can be requested at the contact address above.

5. Retention

Booking and registration data is kept for as long as necessary to perform the contract and thereafter for the periods required by Italian tax and accounting law (generally up to 10 years for accounting records, Art. 2220 Codice Civile). Account data is kept until you delete your account. Server logs are kept only for a short period for security purposes.

6. Cookies & Embedded Content

This website is intentionally lean. It sets no advertising or profiling cookies and uses no Google Analytics or comparable tracking.

Strictly necessary storage

This website itself sets no cookies. We store small values in your browser's local storage and session storage that are strictly necessary for the site to function โ€” your language choice (ttjd_lang), your choice in the consent banner on the home page (ttjd_cookie_consent), whether you have closed an information notice during the current visit (ttjd_notice_โ€ฆ, session storage only), and, if you log in, your session. These do not require consent.

Google Maps (consent required)

The location maps on our home page are embedded from Google Maps. To avoid transmitting your data to Google without your agreement, the maps are not loaded automatically: they appear as a placeholder and load only when you click "Load map" on a map, or when you choose "Allow maps" in the banner shown on your first visit to the home page ("Essential only" keeps the maps blocked). Loading a map transmits your IP address to Google and may set Google cookies. Google's privacy policy: policies.google.com/privacy. You can withdraw this consent at any time by clearing the ttjd_cookie_consent value or your browser storage; the banner will then be shown again.

Fonts

All fonts used on this website are hosted on our own web server. No connection to Google or any other font provider is made when you load the pages.

7. Your Rights

Under Articles 15โ€“22 GDPR you have the right to: access your data; rectify inaccurate data; erase data ("right to be forgotten"); restrict or object to processing; data portability; and, where processing is based on consent, to withdraw that consent at any time without affecting prior processing. To exercise these rights, contact info@timetojumpdolomites.com. We will respond within the legal deadline (generally one month).

8. Right to Lodge a Complaint

If you believe your data is processed unlawfully, you may lodge a complaint with the competent supervisory authority โ€” in Italy the Garante per la protezione dei dati personali (www.garanteprivacy.it) โ€” or with the authority of your EU country of residence.

9. Technical Service Provider

This website was conceived, designed and implemented by Solum Invest GmbH, Innsbruck, Austria (office@soluminvest.at). Solum Invest GmbH acts solely as technical service provider and is not a Data Controller for the personal data processed through this website.

Last updated: September 2026