Your Data

Privacy Policy

Last updated 11 September 2026 · Paragliding Atlas, Oslo, Norway

1. Introduction

Paragliding Atlas is committed to protecting your personal data and respecting your privacy. This policy explains what we collect when you visit this site or book a trip with us, why we collect it, and what you can do about it.

It follows the EU General Data Protection Regulation and applicable Norwegian law. Paragliding Atlas is the data controller, based in Oslo, Norway.

2. What we collect

Almost nothing, when you are only reading. This site has no analytics, no advertising tools and no tracking pixels. We do not build a profile of you, and we cannot tell who you are from a visit.

We collect personal data in three situations:

  • When you contact us or enquire about a trip. Your name, email address, and whatever you choose to tell us about your flying experience and what you are looking for.
  • When you book a trip. The information needed to run the booking and keep you safe: contact details, passport name, licence and experience, emergency contact, insurance details, and any medical information you tell us is relevant to flying.
  • When you sign up for the newsletter. Your name and email address.

Our hosting provider and the content networks listed below record technical information such as your IP address in their server logs, as every web server does. We do not have access to those logs as an identifiable record of you.

3. Why we use it, and our legal basis

PurposeDataLegal basis
Replying to your enquiryContact details, what you told usSteps taken at your request before a contract
Running your bookingBooking and travel dataPerformance of a contract
Keeping you safe on the trip, including in an emergencyEmergency contact, insurance, relevant medical informationYour explicit consent, and protection of vital interests in an emergency
Meeting accounting and tax obligationsTransaction recordsLegal obligation under Norwegian law
Sending the newsletterName, emailConsent, withdrawable at any time

Health information is a special category of data under the GDPR. We ask for it only where it genuinely affects your safety in the air or a rescue, we keep it to the people who need it, and we delete it after the trip unless you ask us to keep it for a future booking.

4. Who else is involved

These are the third parties whose infrastructure this site actually uses. We have checked this list against the site's own code rather than assuming it.

ServiceWhat it doesWhat reaches them
GitHub Pages (Microsoft)Hosts the siteIP address and request details, in server logs
YouTube, in privacy enhanced modeEpisode video playersIP address for the thumbnail. Nothing further unless you press play
Cloudflare WorkersFetches the podcast feed so the episode library can show durationsIP address of the request
Google Calendar and WhatsAppOnly if you click "Book a Call" or the WhatsApp linkWhatever those services collect once you arrive there
TypeformRuns the correction report form, and only if you click "Report it here" on the Corrections pageWhatever you type into that form, plus your IP address and request details

The correction form is not part of this site. It is hosted by Typeform, which contracts through TYPEFORM, S.L. in Barcelona, Spain. Its data processing terms also name affiliated companies in the United States, the United Kingdom and Germany, so we will not tell you that a correction you submit stays inside the EEA, because we have not verified that it does. If you would rather not use it, email the correction to us instead and it reaches the same person.

We do not use Google Analytics, an advertising network, a payment processor on this site, or a customer database that follows you around. The typefaces and the animation libraries are served from our own site rather than from a content network, so no third party sees you arrive.

5. How long we keep it

  • Enquiries that do not become bookings: up to 24 months, then deleted.
  • Booking records: five years after the trip, because Norwegian accounting law requires it.
  • Medical and emergency contact information: deleted after the trip ends, unless you ask us to hold it for a future booking.
  • Newsletter: until you unsubscribe.

6. Transfers outside the EEA

Some of the providers above are based in the United States. Where personal data is transferred outside the EEA, we rely on the European Commission's Standard Contractual Clauses and, where it applies, the EU-US Data Privacy Framework.

7. Your rights

Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or send it to you in a portable format. You can object to processing based on legitimate interests, and you can withdraw consent at any time without affecting what we did before you withdrew it.

Email aninder@paraglidingatlas.com and we will respond within one month. If you are not satisfied, you can complain to the Norwegian Data Protection Authority, Datatilsynet, or to the supervisory authority in the EEA country where you live.

8. Security

The site is served over HTTPS. Booking correspondence is held in business email and cloud storage accounts protected by two factor authentication, and is shared only with the people running your trip.

9. Children

This site is not aimed at children, and we do not knowingly collect data from anyone under 16. Participants under 18 need the consent of a parent or guardian, who must also provide the emergency contact and medical information.

10. Changes

If we change this policy we will publish the new version here and update the date at the top of the page.

Contact for privacy matters

Paragliding Atlas, Olav Troviks Vei M 46, Oslo, Norway. Email aninder@paraglidingatlas.com.