In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act No. 18/2018 Coll. on Personal Data Protection, we provide you with information on the processing of your personal data and your rights.
The company L29 Delfin s.r.o. operates the website www.l29delfin.sk, which serves to present the company’s service offerings, including information on experiential flights and aerial work. This site also informs visitors and clients about the rules for processing personal data that the company collects when ordering services, communicating via the contact form, or based on legal obligations.
The protection of your personal data is important to us. We process your data exclusively in accordance with applicable legislation – especially with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act No. 18/2018 Coll. on Personal Data Protection . Personal data processing takes place only on a legal basis – either for the purpose of fulfilling a contract, complying with a legal obligation, or based on your explicit consent.
L29 Delfin s.r.o. declares that it handles personal data in accordance with the principles of fairness, legality, and transparency, and takes appropriate technical and organizational measures to protect data from loss, misuse, unauthorized access, or damage.
1. Controller
Business Name: L29 Delfin s.r.o.
Registered Office: Kollárova 259/7, 962 31 Sliač
Company ID: 54683785
Tax ID: 2121754547
VAT ID: SK2121754547
Email: l29delfin@l29delfin.sk
Phone: +421 915 057 075
Website: www.l29delfin.sk
The Controller has not appointed a data protection officer (DPO) according to Art. 37 GDPR, as this obligation does not arise for them by law.
2. Purposes of Processing and Legal Bases
The company L29 Delfin s.r.o. processes personal data only to the extent necessary to ensure the proper provision of its services, fulfill legal obligations, and maintain correct communication with clients. We process personal data in accordance with the principle of minimization and only for pre-defined, lawful, and clear purposes. Each processing is based on a legal basis according to GDPR – either the fulfillment of a contract, a legal obligation, legitimate interest, or the explicit consent of the data subject.
| Purpose of Processing | Legal Basis according to GDPR |
| Processing experiential flight orders | Art. 6(1)(b) – fulfillment of contract |
| Provision of services to contractual partners | Art. 6(1)(b) – fulfillment of contract |
| Processing of accounting documents | Art. 6(1)(c) – legal obligation |
| Registration of attendance for the Transport Authority | Art. 6(1)(c) – legal obligation under aviation law |
| Registration of persons on board for Customs Office purposes | Art. 6(1)(c) – legal obligation under tax regulations |
| Responding to contact form inquiries | Art. 6(1)(f) – legitimate interest (communication) |
| Handling complaints Creation of camera/video recording of the flight upon client’s order | Art. 6(1)(b) or (c), depending on the nature of the case Art. 6(1)(b) – fulfillment of contract |
2a. Video Recording Production
Based on the client’s order, a camera or video recording may be made during the flight. The purpose of processing is to provide a service – a souvenir from the flight. The legal basis is the fulfillment of a contract according to Art. 6(1)(b) GDPR and Art. 6(1)(a) – consent of the data subject.
The recording is processed exclusively by L29 Delfin s.r.o. and handed over to the client. The company retains a copy of the recording only for the period necessary for handover and potential complaint resolution (maximum 30 days), after which the recording is deleted, unless otherwise agreed with the client. The creation of the recording is voluntary and subject to ordering this additional service. In the event of an image and sound recording of the flight, the person on board may grant consent for its retention for a specified period, namely 1 year from the date of the flight, to allow for its subsequent retrieval (e.g., in case of damage, loss, etc.).
3. Recipients of Personal Data
Your personal data may be disclosed to the following categories of recipients:
- external accounting company,
- web hosting and email service provider,
- IT administration company (website management and maintenance),
- Slovak Post, a.s. (for physical mailing of documentation),
- Transport Authority of the Slovak Republic (in case of legal reporting obligation),
- Customs Office of the Slovak Republic (in cases required by tax regulations),
- other public authorities, if required by law.
4. Retention of Personal Data
We retain data:
– for the duration of the contractual relationship,
– subsequently for 10 years for accounting and legal obligations,
– contact form data for a maximum of 1 year,
– data sent for communication purposes are retained until the request is processed.
5. Rights of Data Subjects
You have the right:
– to access your data,
– to rectification of inaccurate or incomplete data,
– to erasure of data (“right to be forgotten”) – if there is no legal reason for further processing,
– to restriction of processing,
– to data portability to another controller,
– to object to processing based on legitimate interest,
– to withdraw consent (if consent is the legal basis),
– to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27 (www.dataprotection.gov.sk).
6. Is Data Provision Mandatory or Voluntary?
The provision of data is necessary for the conclusion and fulfillment of the contract (flight booking, registration for authorities). Without providing them, the service cannot be ensured. Providing data via the contact form is voluntary, but without it, we cannot respond to your inquiry.
7. Data Transfer outside EU / EEA
The Controller does not transfer personal data to third countries or international organizations.
8. Automated Decision-Making and Profiling
The Controller does not carry out automated decision-making or profiling according to Art. 22 GDPR.
9. Data Security
We use appropriate technical and organizational measures to protect your data from loss, misuse, unauthorized access, or disclosure.
10. Cookies
The website of L29 Delfin s.r.o. may use cookies, which are small text files stored on your device to improve user experience, ensure basic site functions, analyze traffic, or provide personalized content.
These files may be essential for the proper functioning of the website (so-called “technical cookies”), or optional – for example, for analytical or marketing purposes. The user has the option to accept or reject the use of optional cookies through their browser settings or a special notification (cookie banner). Only technical cookies are used by default on the website. Optional cookies can only be activated after the user’s consent.
If certain types of cookies are rejected, the functionality of the website may be limited.
11. Links to other Websites
The website of L29 Delfin s.r.o. may contain links to third-party websites – for example, partners, collaborating organizations, or other entities. Please note that these sites are not under the control of L29 Delfin s.r.o., and therefore we are not responsible for their content, security, or the manner in which personal data is processed.
We recommend that you familiarize yourself with their own privacy policies when visiting these sites. L29 Delfin s.r.o. is not responsible for the processing of personal data that takes place outside its own website.
12. Changes to the Privacy Policy
These policies may be updated occasionally. The new version will always be published on the website and will be effective from the date of its publication.
Effective from: August 1, 2025