1. Data controller
The data controller is S.C. FINIST Sp. z o.o. spółka komandytowa, ul. Rubinowa 2A, 44-121 Gliwice, Polska, KRS 0000633566, NIP 6312649647, REGON 243277970. Data enquiries: info@skyluma.pl.
1a. Cookies, browser storage and visit statistics
The only things we put on your device without asking are the ones the site needs to work: a cookie holding the palette you picked (night or day), your basket in the browser's local storage, and — for staff — an admin session cookie.
The game “Freefall” keeps your best scores for each difficulty, your flight-school stars and progress, your best on the jump of the day, your run of days played and whether the sound is on in the browser's local storage. For the reward challenge we also store an anonymous session (a one-year cookie), results, progress, an issued discount code and sharing actions on our server. Controls are sent to verify a flight and are not retained. Sharing makes your result and course visible to recipients, without your discount code. Clearing browser data removes local saves and disconnects access to your reward, but does not delete server records. You may request deletion of server records by providing your discount code.
One thing we ask about separately: the Meta pixel, which measures whether our ads on Facebook and Instagram work. It stores a _fbp cookie on your device and tells Meta Platforms Ireland that our site was opened, a product viewed, a basket filled or an order placed, along with the order total — not your name, your address or anything you typed into a form. Without your consent the pixel does not load at all and none of this is sent.
Your answer is kept in a separate cookie for six months. A refusal lasts just as long, and the site looks and behaves identically after one. You can change your mind at any time through the “Advertising cookies” link in the footer.
Visit statistics run on Vercel Web Analytics. It stores no cookies and nothing else on your device, and it does not recognise you on other sites. It records the page you opened, the referring page, country, region and city, device type, operating system and browser, and the time of the visit. A visitor is identified only by a hash computed from the request itself, which is discarded after 24 hours.
Because nothing is written to your device, these statistics need no consent. We process the data on the basis of our legitimate interest in knowing which pages are useful — GDPR Art. 6(1)(f). You can object by writing to info@skyluma.pl, or block the statistics script in your browser; the shop and cart work exactly the same either way.
2. What we process and why
We process the details given at checkout in order to:
- fulfil the order and issue the voucher — GDPR Art. 6(1)(b),
- handle payment and accounting — GDPR Art. 6(1)(c),
- deal with complaints and correspondence — GDPR Art. 6(1)(f),
- arrange the jump date and confirm safety limits — GDPR Art. 6(1)(b).
3. Recipients
Data may be shared with our e-mail provider (Brevo), hosting and infrastructure providers (Vercel), and our accountants — only as far as needed to deliver the service. If you consent to the advertising pixel, Meta Platforms Ireland Limited also receives data about your visit; without that consent it receives nothing.
The site is hosted by Vercel Inc. in the United States, which also runs the visit statistics. Data may therefore be transferred outside the EEA, under the European Commission's standard contractual clauses.
Online payments are handled by mElements S.A., the operator of the Paynow gateway: the data needed to settle the transaction goes to it directly, as an independent controller, under its own terms. Your card number and your bank login never reach us and are never stored. With an ordinary transfer it is our own bank that processes your payment data, likewise as an independent controller.
Date booking runs on manifest.plstrefa.pl, embedded on the “Book your date” page. Anything you enter there goes straight to that system.
4. Retention
Order data is kept for as long as tax and accounting law requires; voucher data until the voucher expires and related claims are time-barred.
5. Your rights
You have the right to access, rectify, erase or restrict processing of your data, to data portability, to object, and to lodge a complaint with the Polish data protection authority (UODO).