1. Introduction
This Privacy Policy (hereinafter referred to as the "Policy") describes how we collect, use, store, and protect your personal data when you use the xparagliding.com website and its services (hereinafter referred to as the "Platform").
We are committed to the security of your personal data and act in accordance with Georgian legislation and international data protection standards, including the General Data Protection Regulation (GDPR).
2. What Information We Collect
The Platform serves users with different roles: standard users (passengers), pilots, and companies. The scope of information collected varies for each:
a) For All Registered Users
- Contact and identification data: First name, last name, email address, phone number, and profile picture (avatar).
- Authentication data: User password (stored in encrypted/hashed form using Supabase standards).
b) For Standard Users (Passengers)
- Booking details: Preferred flight location, date, time, and number of passengers.
- Physical parameters: Weight (required due to flight safety regulations).
- Financial information: Payment details (processed by Stripe or another integrated payment system; we do not store your full credit card information in our databases).
- Additional services and media: Videos, photos, and certificates (Tandem Certificates) captured during the flight, automatically generated on the Platform and stored in your profile.
- User activity: Ratings, comments, and messages left on the Platform.
c) For Pilots
- Professional information: Pilot license details, flight hours, qualification documents, achievements, and certification status.
- Commercial affiliations: Information about which organization or paragliding company the pilot is associated with.
d) For Companies
- Legal information: Official company name, identification code, address, legal documents from the registry, and a list of services provided.
e) Technical and Automatically Collected Data
- IP address, web browser type and version, operating system, information about your interactions and behavior on the Platform (including through the use of cookies and other local storage technologies such as LocalStorage).
3. How We Use Your Data
We use the collected data strictly for the following defined purposes:
- Service delivery: To manage bookings, organize flights, generate certificates, and ensure compliance with safety rules on the Platform.
- Transaction processing: To carry out secure payments and manage related financial operations.
- Platform operation: To create user profiles, manage authentication, and control system access.
- Communication: To provide feedback to users — sending booking confirmations, cancellations, safety instructions, promotional codes, and system notifications.
- Platform improvement: Internal data analysis to fix system bugs and improve service quality based on statistics and user feedback.
- Automation: To simplify processes for your subsequent visits to the Platform.
4. Who We Share Your Data With
We never sell your personal data and do not transfer it to third parties for commercial purposes. Data sharing is strictly limited and occurs only in the following cases:
- Service providers (pilots and companies): Specific data of the standard user necessary for the safe execution of the flight (name, weight, booking time) is sent directly to the assigned pilot and company.
- Technology and financial partners: Secure data storage for development infrastructure (Supabase) and payment systems (Stripe). These partners are obligated to comply with the highest international confidentiality standards.
- Legal requirements: We may share information with public or law enforcement authorities only when required by law, or when necessary to protect our rights and the rights and safety of other users.
5. Data Storage and Security
We employ modern technological security measures, such as data encryption in transit (SSL/TLS), to prevent unauthorized access, destruction, alteration, or disclosure of your information.
Passwords are stored in the system (Supabase) in cryptographically hashed and encrypted form. Our employees have limited access to your personal data and only to the extent necessary for their duties.
6. Your Rights
In accordance with Georgian legislation (the Law of Georgia on Personal Data Protection) and international regulations (GDPR), you have the right to:
- Request access: Review the information we hold about you.
- Update/correct: Correct inaccurate or incomplete data in your profile.
- Deletion ("right to be forgotten"): Request complete deletion of your account and associated personal information (including bookings, photos/video materials) from the database. Note: Upon account deletion, all associated information is removed via the CASCADE method, except for data whose retention is required by law for financial and tax purposes.
- Restriction of processing: Request temporary or permanent restriction on the use of your data.
- Data portability: Request that your data be provided in an electronic format.
To exercise your rights, please contact us at the email address provided below.
7. Cookies
Our Platform uses cookies for the technical functioning of the site, seamless operation of authorized sessions, and user behavior analytics. For a detailed description of cookie usage, please refer to our Cookie Policy, which provides instructions on how to manage them fully or partially.
8. Minors
Our services (specifically, paragliding flights) are regulated by safety standards and are subject to certain age restrictions. Booking services and entering/sharing personal data on the Platform by minors must be carried out only with the consent and direct supervision of a parent or legal guardian. We do not intentionally collect data from persons under the age of 18 without the confirmation of their authorized representative.
9. Changes and Amendments
We reserve the right to update this Policy at any time (due to changes in legislation, services, or technical specifications). In the event of material changes, we will notify you by email or by posting a special notification on the Platform. The new version of the Policy takes effect immediately upon official publication on the website.
10. Contact Information
If you have questions or comments regarding this Privacy Policy, or wish to exercise your data protection rights, please contact us:
- Email: info@xparagliding.com
- Website: xparagliding.com
- Country: Georgia
