1. Data Controller

The Data Controller of flywithandi.com is Andrea Cappello (Email: [email protected]).

2. Types of Data Collected

We only collect personal data that you voluntarily provide to us when contacting us, alongside basic technical parameters:

  • Contact Form & Inquiries: Name, Email Address, Interest (Tour, Training, Other), and your Message text.
  • Server Logs: For security, debugging, and system maintenance, our web server automatically records interactions, including your IP address, browser type, referral URL, and timestamp.
  • Cookies & Local Storage: We do not use third-party tracking, analytical, or advertising cookies. We only use local browser storage (preferredLang) to remember your preferred language selection (EN or IT) for a better user experience. Additionally, the FlappyBoards standalone tool (at /board) uses browser storage (flappyboards-settings, flappyboards-music) to store your volume, layout settings, and preferred radio station configurations locally.

3. Legal Basis & Purposes of Processing

We process your personal data for the following purposes:

  • Consent & Contract Initiation (Art. 6.1.a & 6.1.b GDPR): To respond to your flight tour inquiries or training requests, provide quotes, and coordinate bookings.
  • Legitimate Interest (Art. 6.1.f GDPR): To monitor and maintain the security, stability, and proper operation of our website and server.

4. Data Sharing & Third-Party Processors

Your data is treated confidentially. We only share data with trusted technical partners necessary to operate our website and services:

  • FormSubmit.co: Our contact form submissions are processed securely through FormSubmit.co to deliver your message directly to our inbox.
  • Local Server & Web Hosting: Server logs and backup data of contact requests are stored securely in our hosting environment.
  • Aviation Partners: If your flight is operated in cooperation with Eurotech Helicopter Services, necessary passenger details (names, weights, IDs) will be shared to comply with flight manifests and civil aviation safety requirements.

We do not sell, lease, or distribute your personal data to third parties for marketing purposes.

5. Data Retention

Personal data from contact requests is kept only as long as necessary to answer your inquiry or fulfill our service agreement, in compliance with the legal retention periods required by Italian commercial or fiscal law. Server logs are kept for a short period (typically under 30 days) and then deleted automatically, unless needed to investigate security incidents.

6. Your Rights under GDPR

As an EU resident, you have the following rights regarding your personal data under the General Data Protection Regulation:

  • Right of access, rectification, or deletion of your data.
  • Right to restrict or object to processing.
  • Right to data portability.
  • Right to withdraw your consent at any time.

To exercise any of these rights, please contact us at [email protected]. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).