Privacy Policy

PRIVACY POLICY

Hello!

We care about your privacy. In this policy, we explain simply and clearly how we process your personal data when you use our services—flights in the Flyspot wind tunnel, diving at Deepspot, and our online store.

Last updated: October 29, 2025

  1. This Privacy Policy describes the rules governing the processing of data, in particular personal data, by Flyspot Group Sp. z o.o., with its registered office in Warsaw, 00-090, Al. Solidarności 75/26, entered in the National Court Register maintained by the District Court for the Capital City of Warsaw in Warsaw, 12th Commercial Division of the National Court Register, under KRS number 0000821632, Tax Identification Number (NIP): 5252533508, with share capital of 19,000,000 PLN (hereinafter: “Flyspot Group” or “Controller”).
  2. The Privacy Policy describes the rules governing data processing in connection with the services offered by the FlySpot Group, in particular those available at the wind tunnel facilities operated under the name FlySpot and at the facility featuring a deep-diving pool, operating under the name DeepSpot. The rules described in this document also apply to additional services or features related to the operations of FlySpot and DeepSpot, such as, in particular, services and content made available through the Administrator’s websites, including www.flyspot.com and www.deepspot.com, as well as processes related to the sale of products and services in brick-and-mortar and online stores. (All of the above services and activities will hereinafter be collectively referred to as the “Services,” and individuals who use or express an intention to purchase or use such Services will be referred to as “Users.”)
  3. You may contact the Data Controller regarding any matters related to data processing, including the processing of personal data, at the following email address: [email protected]
  4. Flyspot Group will process, including collect and store, personal data in accordance with applicable laws, in particular the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”), as well as in accordance with this Privacy Policy.
  5. We collect only the data necessary to provide our services. Depending on the services you use, we may ask for:
    1. Basic Information:
      1. First and Last Name
      2. Email address
      3. Phone number
      4. Date of birth (for certain services)
    2. Invoice Information
      1. Address
      2. Tax ID or PESEL
      3. Company name (optional)
    3. Health-Related Data (only with your consent)
      1. Some of our services (e.g., scuba diving) involve risks. To ensure your safety, we may ask about your health or any medical conditions that could prevent you from participating. You provide this information voluntarily, after giving your consent.
    4. d. Technical specifications:
      1. IP Address
      2. Browser information
      3. Cookies (more below)
  6. Video: While you’re flying in the wind tunnel or diving, we’ll record a video of you so you can have a keepsake.
  7. We use your data to:
    1. Process a service—reservation, flight, diving, voucher shipment
    2. Issue an invoice
    3. Ensure safety—check for medical contraindications
    4. Contact you—confirm your reservation, answer your questions
    5. Send marketing information—about our services (only if you give your consent)
    6. Improve our website – through traffic analysis (using cookies)
  8. We process your data based on:
    1. Contracts – to provide the service you have requested (Article 6(1)(b) of the GDPR)
    2. Your consent – for marketing, cookies, and health data (Article 6(1)(a) of the GDPR)
    3. Legal obligation – e.g., issuing an invoice (Article 6(1)(c) of the GDPR)
    4. Legitimate interest – e.g., contacting you regarding a complaint, marketing our own services (Article 6(1)(f) of the GDPR)
  9. How long do we retain data?
    1. Contract data—up to 5 years after the invoice is issued (accounting requirement)
    2. Marketing—until consent is withdrawn
    3. Complaints—until claims become time-barred
    4. Health data – for the duration of service provision + the complaint period
    5. Surveillance – up to 3 months
    6. Flight/diving recordings—30 days (after which we delete them)
  10. We share data only when necessary with the following entities:
    1. Shoper S.A. – the platform for our online voucher store, https://www.shoper.pl/polityka-cookies
    2. Couriers – when we send a voucher by mail
    3. Instructors – those conducting training sessions
    4. Google and Meta – analytics and advertising tools (only if you consent to cookies)
    5. SalesManago – the Customer Engagement platform used by Flyspot Group https://www.salesmanago.pl/info/obowiazek-informacyjny.htm
    6. SalesMore – a marketing agency supporting Flyspot Group in the areas of promotion and advertising https://salesmore.pl/polityka-prywatnosci
    7. Government agencies – when required by law
  11. The user’s personal data may be shared with advertising or marketing service providers for the purposes of analyzing website traffic sources, settling advertising campaigns, and displaying personalized product and service offers to the user.
  12. In connection with the processing of personal data by Flyspot Group, the User has the rights set forth in the GDPR.
  13. The user has the right to:
    1. Access to your data – you can ask what information we have about you
    2. Correcting your data – if something has changed or is incorrect
    3. Deletion of data – in certain situations (“right to be forgotten”)
    4. Restriction of processing – e.g., when you dispute the accuracy of the data
    5. Data portability – you will receive your data in a format that allows for transfer
    6. Objection – to marketing or profiling
    7. Withdrawal of consent – at any time (does not affect prior processing)
    8. Complaints to the UODO – if you believe we are violating your rights
  14. Cookies are small files stored in your browser. They help remember your preferences (e.g., language), track visitor statistics, and display ads tailored to your interests. We use the following categories of cookies:
    1. Essential (you cannot disable them) – required for the store to function: login, shopping cart, payments. Operational cookies – used to analyze traffic sources on the website, maintain high quality and continuity of service, protect against abuse and fraudulent traffic, track advertising campaigns, and process user requests. Legal basis: legitimate interest (website operation).
    2. Functional (you can disable them) – These cookies remember your settings—language, appearance. Legal basis: Your consent
    3. Analytical (you can disable them) – Google Analytics – they count visits and show how you navigate the site. Legal basis: your consent.
    4. Marketing (you can disable these) – Facebook Pixel, Google Ads – help us show you ads that may interest you. Basis: Your consent . Note: Disabling essential cookies may prevent the store from functioning properly.
  15. Data Transfer to the U.S. – Google and Facebook are headquartered in the U.S. Data is transferred on the following basis:
    1. Standard Contractual Clauses (SCC) approved by the European Commission
    2. Additional security measures provided by these providers. For more information:
      1. Google: https://privacy.google.com/businesses/compliance/
      2. Meta: https://www.facebook.com/privacy/policies/cookies
  16. Video Surveillance – Video surveillance is in operation at Flyspot and Deepspot facilities. Its purpose is to ensure the safety of people and property and to prevent theft. We store the recordings for up to 3 months; after that, they are automatically deleted (unless they are evidence in a legal proceeding).
  17. Marketing and Profiling
    1. Newsletter – You can subscribe to our newsletter—we’ll send you information about promotions and new products. You can unsubscribe at any time (link in the email footer).
    2. Profiling – We analyze your behavior on the website (what you view, how much time you spend there) to show you more interesting offers and tailor content to your interests. This does not affect your rights.
  18. Is the User’s data secure? Yes! We use appropriate technical and organizational security measures:
    1. Connection Encryption (SSL)
    2. Data access restricted to authorized individuals
    3. Regular backups
    4. Security procedures
  19. Changes to the Privacy Policy – We may update this policy. Changes will be posted on this page, and we will provide additional notice of significant changes (e.g., via a banner or email).
  20. To the extent not covered by this Privacy Policy, the processing of personal data is governed by applicable laws, in particular the GDPR.

Thank you for your trust!

Part of FlySpot Group