Skip to content

Privacy

This text is a template and must be reviewed and completed by the operator.

Controller

Tandem Flights Sarntal, Reinswald 31/B, 39058 Sarntal, Italy
info@tandem.flights

In short

  • No tracking, no analytics, no advertising.
  • No cookies for visitors. Only the admin area uses a technically necessary login cookie.
  • We do not store full IP addresses.
  • We check your location only at the summit and do not store it.

Logbook entries

When you sign in, we store your name, optional home town, message, optional photo, and date and time. With your consent these details are shown publicly in the logbook (Art. 6(1)(a) GDPR). Photos are resized on your device before upload; embedded metadata such as GPS coordinates is removed.

You may withdraw consent and request deletion of your entry at any time. Contact us at info@tandem.flights.

Summit requests

If you suggest a new summit using the form, we store the summit details, your name, your email address and your message and any photos to process the request and reply to you (Art. 6(1)(a) GDPR). Photos are downscaled in your browser and stripped of metadata such as GPS position. They are stored privately in Cloudflare R2 and only visible to us in the admin area. The request, including photos, is also forwarded to us by email via Cloudflare Email Routing. None of it is published. Requests that are done or rejected are deleted automatically, including their photos, after at most 180 days.

Location check

Logbooks with a location check can be read and signed only at the summit. Your browser asks permission to use your location. When reading and submitting an entry, your position is sent to our server and compared with the summit coordinates only. It is not stored, logged or published with your entry. If you write offline, the position stays on your device with the entry until it is sent. Without location permission, reading and signing are not possible for these summits (Art. 6(1)(a) GDPR).

Abuse protection

We use Cloudflare Turnstile against spam. Turnstile checks on submit whether a human is using the form and processes technical browser signals. Turnstile loads only when you open the entry or request form. We also store a salted, non-reversible hash of your IP address to limit too many entries in a short time. It is deleted automatically after at most 30 days (Art. 6(1)(f) GDPR).

Offline storage on your device

Without signal, your entry is stored temporarily on your device (IndexedDB) and sent automatically when you are back online. The app also caches visited pages for offline use. This data leaves your device only when it is transmitted.

Hosting

The application runs on Cloudflare, Inc. (Cloudflare Workers, D1, R2). When you open the site, Cloudflare processes connection data that is technically required. See Cloudflare’s privacy policy.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to lodge a complaint with a supervisory authority.