Privacy Policy

Data controller

The data controller for personal data collected on the BerryParachutisme.fr website is Nicolas ALEMANY, Managing Director of SAS Flyingmany (Berry Parachutisme), address: ZA de l'aéroport, rue Pierre Latécoère, 18000 Bourges — Email: berryparachutisme@gmail.com — Phone: 06 67 47 92 29.

Data collected

• Identity information: surname, first name, date of birth
• Contact details: email address, phone number, postal address
• Declarative health data: weight, height, medical non-contraindication statement
• Emergency contact: name and phone number of a relative, and their address if you provide it
• Booking and order data: chosen service or gift card, requested date or month, amounts, payment references (no card details)
• Gift pool and credit data: for the organiser, first name, email, message and goal; for the recipient, first name and email provided by the organiser; for each contributor, displayed first name or nickname, email, optional message, amount, 'hidden amount' and 'anonymous' choices, contribution status, payment and refund references (no bank card data); for the credit, code (stored as a non-reversible fingerprint), amount, balance, expiry date and usage history (orders paid, amounts put back, reductions after withdrawal)
• Prize draw data: for each entrant (buyer of a tandem skydive or tandem gift voucher paid in full during the draw period), surname, first name, email, phone, postal code, references, dates and payment status, already collected at purchase
• Briefing attestation: signer's name, postal code and signature date
• Contact data: name, email, phone and message submitted via the contact and quote forms
• Technical data: hashed IP address and browser type when a briefing is viewed; hashed IP address, or its prefix for IPv6 addresses, in abuse-limiting counters (forms, payments, gift code and credit checks); security logs
• Consent-based browsing data: audience measurement, presence counter and booking and payment journey steps
• Advertising measurement data, only if you accept it: identifier of a click on a Google ad (gclid, gbraid or wbraid), click date and, if you make a purchase, order number, date, amount paid online and currency

Processing purposes

• Processing and managing booking requests (tracking, confirmation, follow-up)
• Checking the medical and physical eligibility of participants before the jump
• Confirmation and tracking of parachute jumps and gift cards
• Managing gift pools: creation, sharing, payment of contributions, follow-up by the organiser, follow-up emails, closing, issuing and sending the credit to the recipient, expiry reminder, refunds after withdrawal or late payment
• Managing the credit: checking the code, deducting it from orders, tracking the balance, putting amounts back after cancellation, fraud prevention
• Displaying, on the pool page reachable through its link, the first name or nickname, message and amount of contributors, according to their anonymity and hidden-amount choices, so that everyone can follow the joint gift
• Running prize draws: selecting entries, drawing lots, contacting the winner, handing over the prize, proving that the draw was run properly and, with the winner's express consent, publishing the winner's first name, surname initial and département on the site and on Berry Parachutisme's Facebook and Instagram pages
• Sending invoices or documents related to the service
• Compliance with legal obligations (accounting, safety, insurance, aviation regulations)
• Contact in case of emergency or weather cancellation
• Processing and responding to messages sent via the contact form
• Commercial follow-up after a group quote request
• Audience measurement, presence counting and payment journey tracking, only with your consent
• Measuring the effectiveness of our Google Ads ads: finding out whether a purchase paid online follows a click on one of our ads, only with your consent
• Site security and abuse prevention

Legal basis

The processing of your data is based on: (a) performance of the service contract you have entered into with Berry Parachutisme or pre-contractual steps taken at your request; (b) compliance with legal obligations applicable to skydiving activities and accounting; (c) your consent for declarative data relating to your state of health and for audience measurement, the presence counter, checkout journey tracking and measuring the effectiveness of our Google Ads ads; (d) Berry Parachutisme's legitimate interest in securing its site and preventing abuse. For gift pools, processing the data of the organiser, the contributors and, once the credit is issued, the recipient is based on performance of the contract (a). Keeping a record of credit transactions is also based on our accounting obligations (b). Processing the recipient's first name and email, provided by the organiser, and displaying contributions on the pool page are based on the legitimate interest of Berry Parachutisme and the contributors in organising and following a joint gift (d). Each contributor can contribute anonymously or hide their amount, and can object to the display of their contribution at any time (§8). For prize draws, selecting entries, drawing lots, contacting the winner, handing over the prize and proving that the draw was run properly are based on performance of the draw rules (a). Publishing the winner's first name, surname initial and département is based on the winner's express consent (c), requested by email. The winner may refuse or withdraw it at any time (§8) without affecting the award of the prize.

Retention period

• Customer and booking data (identity, contact details, gift cards): 3 years after the service date, or after the order for a gift card, then pseudonymised
• Accounting records and data (amounts, dates, payment references, invoices): 10 years (article L123-22 of the French Commercial Code), without the pseudonymised identity data
• Weight, height, emergency-contact details and medical-document indicators: deleted within 30 days after the service is completed or cancelled
• Gift pools: first names, emails and messages of the organiser, recipient and contributors pseudonymised 3 years after the pool closes, or 3 years after the credit expires or is used up if later; pools closed with no contribution: deleted 30 days after closing; amounts, dates, payment references and credit history kept for 10 years for accounting purposes
• Prize draws: list of entries and draw result kept until the prize expiry date (25 December 2027 for the "Gagnez votre deuxième saut en parachute" draw), then archived for 5 years as evidence before being deleted automatically
• Briefing attestations (signer's name, postal code): 3 years after signature, then pseudonymised
• Technical briefing access logs (hashed IP, browser) and administration logs: 1 year
• Abandoned or failed payments and the related unpaid bookings: 30 days
• Notification emails queued or sent by the server: 30 days
• Contact and quote requests: 12 months from receipt
• Technical anti-abuse counters: 2 days
• Google Ads advertising measurement: click identifier kept in your browser for no more than 90 days after the click, then deleted; on our servers, the link between the click and your order is deleted 90 days after it is created, and the conversion sent to Google is deleted 120 days after the purchase
• Consent choices (audience measurement and advertising measurement): renewed no later than 13 months

Recipients and processors

Your personal data is intended for Berry Parachutisme (SAS Flyingmany) and is not sold or passed to third parties for commercial purposes. For a gift pool, anyone with the share link sees the recipient's first name, the organiser's first name and message and, for each paid contribution, the contributor's first name or nickname, message and amount, unless they chose to be anonymous or to hide their amount. This link is not indexed by search engines. The organiser receives an email for each contribution, with the same information and respecting the same choices. The recipient receives the credit code and amount. Neither the organiser nor the recipient receives a contributor's email or surname. The first name, surname initial and département of residence of a prize draw winner may be published on the site and on Berry Parachutisme's Facebook and Instagram pages, only with the winner's express consent. Your data may be shared with partner skydiving centres and competent authorities in case of legal obligation. Berry Parachutisme uses the following providers, each for its own task only:

• OVH SAS (France): hosting of the server and database in France, domain name and email
• Stripe Payments Europe Ltd (Ireland): online payment on Stripe's secure page; Berry Parachutisme neither receives nor stores card details
• Klarna Bank AB (Sweden): only if you choose instalment payment
• Google Ireland Ltd / Google LLC: Google Analytics audience measurement (after consent), Berry Parachutisme's Gmail inbox, to which messages sent to the site are forwarded, and, if you accept it, measuring the effectiveness of our Google Ads ads. For this measurement, Berry Parachutisme sends Google only the click identifier, the date, the amount paid online and an order number. We never send it your name, email or phone number. Google uses this data as an independent controller under its own rules (policies.google.com/privacy).
• Meta Platforms Ireland Ltd (Facebook, Instagram), TikTok Technology Ltd (Ireland) and Google (YouTube): publication, on an administrator's action, of Social Studio content, which may show participants

Transfers outside the European Union

Some of the providers above (Google, Stripe, Meta, TikTok) may process data from countries outside the European Union, in particular the United States. These transfers are covered by the European Commission's adequacy decision on the EU–US Data Privacy Framework for certified companies (including Google LLC, Meta Platforms, Inc. and Stripe, Inc.) or, failing that, by the standard contractual clauses adopted by the European Commission, supplemented where necessary by additional measures. You can obtain information about these safeguards by writing to the address below.

Your rights

In accordance with the GDPR and the French Data Protection Act, you have the following rights:

• Right of access to your personal data
• Right of rectification in case of inaccuracy
• Right to erasure ('right to be forgotten')
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw your consent at any time, without affecting processing already carried out ("Cookie Management" link in the footer for audience measurement and advertising measurement)
• Right to set instructions on the retention, erasure and disclosure of your data after your death (article 85 of the French Data Protection Act)

To exercise these rights, send a request by email to berryparachutisme@gmail.com or by post to ZA de l'aéroport, rue Pierre Latécoère, 18000 Bourges. If you are not satisfied with the response, you may lodge a complaint with the CNIL (www.cnil.fr) or the relevant data protection authority.

Cookies and browser storage

The site uses technical cookies and local storage for its operation, including recording your consent choices (audience measurement, advertising measurement), renewed no later than 13 months. With your consent, Google Analytics measures traffic and an internal counter measures presence on public pages. If you accept advertising measurement, when you arrive on the site from a Google ad, the click identifier in the page address (gclid, gbraid or wbraid) is stored in your browser's local storage for no more than 90 days. It is attached to your order if you pay online, so that the purchase can be reported to Google Ads. Without your consent, this identifier is neither stored nor sent. The site places no Google advertising cookies. If you withdraw your consent, the identifier is immediately deleted from your browser. The internal counter uses a random identifier shared between your tabs in a 60-second cookie, renewed during your visit. The server keeps only this identifier and the last signal time in memory and removes them after 30 seconds without a signal at the next cleanup (within 10 seconds). The presence counter stores no browsing history. With the same consent, checkout journey tracking sends only public page paths and form step codes, never field contents. A temporary per-tab identifier allows the administration to follow payment requests. This history of up to 30 transitions is kept in memory and deleted after 30 minutes without a signal (cleanup every minute), or on restart. It includes no card details or form field values. When a booking is paid, the ticket details (code, identity, contact details and emergency contact) are kept only in your tab's session storage (sessionStorage) to display your ticket when you return from the payment page; they are deleted once displayed, when the tab is closed, or after 2 hours at the latest. When you start a payment (booking, gift card, gift pool contribution or gift card redemption), the site stores in your browser's local storage (localStorage) only the technical references of that attempt: random attempt identifiers, booking or order code, payment type, link to the Stripe payment page and expiry date. They let you resume, check or cancel the same payment, even after closing the tab, without risking paying twice. They contain no identity, contact, health or card data. These references are deleted as soon as the payment is confirmed, cancelled or expired. They become unusable no later than 2 hours after being stored and are erased from your browser on your next visit to the site. This storage is strictly necessary for the payment you requested and therefore does not require your consent. You can delete cookies in your browser settings and change your choice at any time from the footer.

Policy amendments

Berry Parachutisme reserves the right to modify this privacy policy at any time. The applicable version is the one published on the site at the time of your visit.