Legal

Privacy
Policy

Last updated: June 2026

This policy is provided for convenience. The French version is the legally binding reference, as Mont Blanc Skydive operates under French and EU law.

Mont Blanc Skydive is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679).

1. Data Controller

2. Data Collected

We only collect data strictly necessary to process your booking or gift card order:

• Booking: first name, last name, email address, phone number, each participant's weight and age, preferred date, chosen package.
• Gift card: giver's first and last name, giver's email, recipient(s) first and last name, personalised message.
• Payment: card data is processed directly by Stripe and never passes through our servers.
• Browsing: language preference (stored in your browser's localStorage only).

We do not collect browsing data, advertising cookies, or third-party trackers.

3. Purposes and Legal Basis

• Processing the booking — performance of a contract (GDPR art. 6.1.b)
• Sending the confirmation email and gift PDF — performance of a contract (art. 6.1.b)
• Admin copy (BCC) — legitimate interest in business management (art. 6.1.f)
• Retention of accounting records — legal obligation (art. 6.1.c) — 10 years

4. Retention Periods

• Booking and payment data: 10 years from the transaction (French accounting obligation).
• Order JSON files on the server: deleted manually or after 2 years.
• Language preference: stored in your browser only, cleared when you clear site data.

5. Data Recipients

Your data is shared only with strictly necessary processors:

• Stripe Inc. (online payments) — US-based, covered by standard contractual clauses. Stripe Privacy Policy.
• Infomaniak Network SA, Rue Eugène-Marziano 25, 1227 Les Acacias, Geneva, Switzerland — website hosting and transactional email delivery. Servers located in Switzerland. Infomaniak Privacy Policy.

We do not sell or rent your data to third parties for commercial purposes.

6. International Transfers

Stripe Inc. is based in the United States. The transfer is covered by standard contractual clauses approved by the European Commission under GDPR article 46.

Infomaniak Network SA is based in Switzerland. Switzerland benefits from an adequacy decision by the European Commission (GDPR art. 45), recognising that it provides a level of data protection equivalent to that of the European Union. No additional safeguards are required.

7. Your Rights

Under the GDPR, you have the following rights:

• Right of access — obtain a copy of your personal data.
• Right to rectification — correct inaccurate or incomplete data.
• Right to erasure — request deletion of your data (subject to legal retention obligations).
• Right to restriction — temporarily restrict processing of your data.
• Right to object — object to processing based on legitimate interest.
• Right to portability — receive your data in a structured, machine-readable format.

To exercise these rights, contact us at: contact@montblancskydive.com. We respond within 30 days.

If you are unsatisfied with our response, you may lodge a complaint with the French data protection authority: CNIL at www.cnil.fr.

8. Cookies and Local Storage

This site uses no tracking or advertising cookies. The only data stored in your browser is your language preference (mbs-lang in localStorage), which stays on your device and is never transmitted to a server.

Some forms use sessionStorage to temporarily save form data in case you navigate back. This data is cleared when the tab is closed.

9. Security

All communications between your browser and our server are encrypted via HTTPS/TLS. Payment data flows exclusively through Stripe's secure servers (PCI DSS Level 1 certified).

10. Changes

This policy may be updated to reflect legal or technical changes. The date of last update appears at the top of this page. In case of material changes, a notice will be displayed on the site.