Last updated: 2026-05-27
Skydive Luxembourg a.s.b.l. ("we", "us") respects your privacy. This policy explains what personal data we collect through our website skydive.lu, why we collect it, how long we keep it, and what rights you have under the EU General Data Protection Regulation (GDPR) and Luxembourg data protection law.
1. Data controller
Skydive Luxembourg a.s.b.l.
32 Op der Louh, L-9676 Noertrange, Luxembourg
Email: mail@skydive.lu
2. What data we collect
We only collect data that you actively give us, plus a minimal amount of technical data needed to deliver the site.
- Contact form submissions. When you fill in our contact or booking form we receive the name, email address, phone number (optional) and any other details you choose to enter (e.g. age, weight for a tandem booking, your question).
- Server logs. Our hosting provider records standard request logs (IP address, user agent, timestamp, URL requested) for security and to detect abuse.
- Email correspondence. When you write to us, we keep the resulting email thread.
We do not use marketing trackers, analytics pixels, advertising cookies, or third-party social media trackers on this site.
3. Why we use this data - legal basis
The legal basis for processing is set out in Article 6(1) GDPR:
- To answer your enquiry and, if applicable, prepare and perform a contract for a tandem jump, AFF course or other service - Article 6(1)(b).
- To run and secure the website (server logs, abuse detection) - Article 6(1)(f), our legitimate interest.
- To comply with our legal obligations as an aviation operator and as an association - Article 6(1)(c).
4. How long we keep your data
- Contact-form submissions and email correspondence: up to 24 months after the last contact, unless a booking or membership requires longer retention.
- Booking and membership records: as required by accounting and aviation regulations (typically 10 years for accounting documents).
- Server logs: 30 days as a rule.
5. Sharing your data
We do not sell your personal data. We share it only with processors strictly necessary to run our services: our hosting provider (Netlify, Inc., USA - under standard contractual clauses), our email provider, and where legally required, the competent Luxembourg authorities (e.g. aviation regulator). Members of our board and instructional staff may also access your booking information for the purpose of organising your jump.
6. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you (Art. 15);
- Rectify inaccurate data (Art. 16);
- Erase your data, where applicable (Art. 17);
- Restrict or object to processing (Arts. 18 and 21);
- Data portability (Art. 20);
- Withdraw any consent you gave, at any time.
To exercise any of these rights, please email mail@skydive.lu. You also have the right to lodge a complaint with the Luxembourg supervisory authority, the Commission nationale pour la protection des données (CNPD), 15 Boulevard du Jazz, L-4370 Belvaux.
7. Cookies
See our separate cookies page for details. In short: we do not use tracking cookies. Essential cookies may be set by our hosting infrastructure to deliver the site, and embedded Google Maps on the contact page may set its own cookies under Google's terms.
8. Changes to this policy
We may update this policy from time to time. The latest version is always published on this page with the "Last updated" date.