Privacy policy

The data controller is Tenerife Paragliding S.L., trading as FlyTenerife. We operate tandem paragliding in Tenerife, Spain.

Address: Av. de Ayyo, 38678 Adeje, Santa Cruz de Tenerife, Spain (Meeting Point).

NIF/CIF: B76723071

Email: info@flytenerife.com. Phone: (+34) 609 261 796.

For any privacy request, write to info@flytenerife.com with the subject “Data protection”.

When you book online we collect:

• Name, email, phone number, and country
• Pickup hotel or meeting address, date, time slot, passenger count, and flight types
• Payment confirmation from Stripe (amount, status, and Stripe session ID — we do not store your full card number)

If you contact us by phone, WhatsApp, or email, we keep the details you send so we can reply and operate your flight.

Agency portal users: we also store your login email, agency name, and the bookings you create for your office.

When you browse the site, Vercel Analytics records page views (which page, the referring site, country, and device type). It does not use cookies and does not identify you as a person.

We process personal data only where EU/Spanish law allows it:

• Contract (Art. 6(1)(b) GDPR) — to take your booking, take payment, confirm the flight, arrange pickup, and contact you about the day.
• Legal obligation (Art. 6(1)(c)) — Spanish tax, accounting, and tourism records (including IGIC).
• Legitimate interests (Art. 6(1)(f)) — to prevent fraud, keep the site secure, see which pages people use (privacy-friendly analytics, no advertising profiles), and improve a booking that has already started. You can object where the law allows.

We do not sell your data. We do not send marketing newsletters unless you have asked us to.

Card payments are processed by Stripe. When you pay, you enter card details on Stripe’s secure Checkout pages — not on our website. Stripe is the payment service provider and an independent controller/processor for payment data under its own terms.

We receive confirmation that you paid, the amount, and a Stripe session reference so we can create your booking. We never see or store your full card number, CVC, or expiry.

Stripe may process data in the United States and other countries. Stripe uses Standard Contractual Clauses and participates in the EU–US Data Privacy Framework where it applies. Read Stripe’s privacy policy and data processing addendum.

We share data only as needed to run the flight:

• Our pilots, drivers, and office team — name, phone, pickup, and flight details
• Stripe — payment
• Our database host (Supabase) — to store bookings securely. See Supabase privacy
• Vercel — hosting and privacy-friendly page-view analytics. See Vercel privacy

We may disclose data if Spanish law or a court requires it, or to protect safety on the day of the flight.

The public website and booking form do not use advertising or analytics cookies. Page views are measured with Vercel Analytics, which does not set a cookie. Stripe Checkout may set its own cookies on Stripe’s domain when you pay.

The agency portal uses essential cookies so you stay signed in. Those are strictly necessary for the service (Spanish LSSI-CE / ePrivacy). There is no cookie banner because we do not set non-essential tracking cookies.

Booking and payment records are kept for as long as Spanish commercial and tax law requires — generally up to six years after the flight year — then deleted or anonymised.

Messages you send us are kept only as long as needed to handle your request and the related booking.

Agency login accounts stay until the agency or we close the account.

You can ask us to access, correct, delete, or restrict your data, object to certain processing, or receive a copy (data portability), as GDPR allows. Email info@flytenerife.com. We may need to confirm who you are before we act.

You can also complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos (AEPD)).

Children from 5 years old may fly with a parent or guardian’s consent. We do not knowingly collect data from children for their own online account. A parent or guardian must book and provide contact details.

Bookings are stored in a database with access limited to our team. Payments go through Stripe. No system is perfectly secure — if you think there has been a misuse of your data, contact us immediately.