DSGVO

Privacy Policy

1. Controller

The controller of your personal data under Regulation (EU) 2016/679 (GDPR) is:
Cloud Adventures s. r. o., Strojnícka 16559/92, 821 05 Bratislava – Ružinov, Slovakia
Company ID (IČO): 57 831 599, registered in the Commercial Register of the District Court Žilina, section Sro, file no. 92212/L
Managing director: Ing. Kristián Voigt · Email: info@cloudadventures.sk · Phone: +421 902 615 880

2. Data we process

  • Identification and contact data – name, email, phone, address where needed.
  • Order and flight data – flight type, airfield, date, order and voucher number, recipient's name, passenger weight (only where needed for weight and balance).
  • Payment data – processed by our payment provider; we do not store full card details.
  • Communication – emails, messages, complaints.
  • Technical data – IP address, device and browser type, cookie data.

3. Purposes and legal bases

  • Performance of contract (Art. 6(1)(b) GDPR) – processing orders, vouchers, payments and flights.
  • Legal obligations (Art. 6(1)(c) GDPR) – accounting, tax, aviation records.
  • Legitimate interests (Art. 6(1)(f) GDPR) – flight safety, fraud prevention, legal claims, service improvement.
  • Consent (Art. 6(1)(a) GDPR) – newsletter, marketing and analytics/marketing cookies. You can withdraw consent at any time.

4. Recipients

  • Pilots and air operators performing the flight – only the data needed (name, contact, weight). For flights in Germany e.g. GASS General Aviation Services GmbH, Krefeld.
  • Shopify (Shopify International Limited, Ireland) – shop system and hosting.
  • Stripe (Stripe Technology Europe, Limited, Ireland) – payment processing.
  • f-poho – only for employee-benefit payments in Slovakia.
  • Email, analytics and advertising providers (e.g. Google, Meta) – for cookies only with consent.
  • Public authorities – where required by law.

Where data is transferred outside the EU/EEA (e.g. through Shopify, Stripe, Google or Meta), this is based on an adequacy decision or standard contractual clauses under Chapter V GDPR.

5. Retention

  • orders and accounting records: 10 years
  • flight and passenger data: 5 years
  • complaints: 3 years
  • marketing: until consent is withdrawn
  • technical logs: 6–24 months

6. Security

We use appropriate technical and organisational measures: encrypted transmission, restricted access, processor agreements under Art. 28 GDPR and regular backups.

7. Your rights

You have the right of access, rectification, erasure, restriction, data portability, objection and withdrawal of consent (Art. 15–22 and Art. 7(3) GDPR). Contact info@cloudadventures.sk or our postal address.

8. Supervisory authority

Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk. You may also complain to the data protection authority in your country of residence.

9. Changes

The current version is available at www.cloudadventures.sk/policies/privacy-policy. Effective 15 October 2026.