Privacy Policy

About this policy

This policy explains how K.A.S.T.A. handles information through this website. It describes the website as implemented, not a claim of privacy certification. Updated 15 November 2026.

The organization is ΚΥΠΡΙΑΚΟ ΑΕΡΑΘΛΗΤΙΚΟ ΣΩΜΑΤΕΙΟ ΥΠΕΡΕΛΑΦΡΩΝ ΑΕΡΟΣΚΑΦΩΝ Κ.Α.Σ.Τ.Α. Registration reference: MOI: ΛΕΜΣ2400. Contact: contact@larnacashooting.org; +905338604448; Üççakırlar Cd, Gazimağusa 99450 Cyprus.

Information you provide

The contact form collects your name, email address, subject, inquiry category, message, and your privacy consent. Each submitted inquiry includes a submission timestamp. Please do not include sensitive personal information, identification documents, or details about other people without an appropriate reason.

Your inquiry is saved privately in Lovable Cloud. Authorized administrators can read it to respond and manage correspondence. Automatic forwarding to the contact email is not currently enabled; you may also email the association directly.

Administrator accounts use Lovable Cloud authentication. Email/password sign-in and optional Google or Lovable sign-in process account identifiers and authentication information. The website does not receive your Google or Lovable password. Signing in does not confer administrator access.

Why information is processed

Inquiries are processed to handle correspondence, answer questions, and manage relevant organizational matters. Your form consent records your agreement to this processing; you can withdraw it by contacting the association. Where applicable, steps requested by you, legitimate interests in communication and security, or legal obligations may also provide a lawful basis.

Privacy law, including the GDPR, applies according to the processing activity and relevant jurisdiction. The supplied address and registration reference alone do not determine the governing law. No particular legal status or exemption is inferred here.

Visitor analytics and your choices

Optional clicks are measured after analytics acceptance for visitors in the EU/EEA, the UK, Switzerland and Canada, and where a visitor’s country cannot be determined. Elsewhere clicks may be measured unless analytics is rejected. Clicks are never measured when your browser sends Global Privacy Control, even after acceptance. Your choice is saved in your browser for up to 12 months; a refusal can be requested again after about six months.

Page visits, time on page, page speed and errors are recorded for every visitor, without cookies and without identifying anyone. Lovable’s analytics stores nothing on the visitor’s device, does not keep IP addresses and cannot recognize returning visitors.

Recorded information includes pages visited, referral sources, country, browser, operating system, device type, time on page, page load speed, errors and, when permitted, clicks. This website does not send custom app events. Detailed data is kept for 90 days and daily summaries for one year.

Lovable collects this data for us. Lovable’s privacy policy at https://lovable.dev/privacy explains how it handles it.

Hosting, security and service providers

Lovable provides website hosting, authentication and private inquiry storage. Its infrastructure providers process information needed to deliver these services. Authentication providers receive information when you choose their sign-in service. Direct email correspondence is handled by the association’s email provider and your own provider.

The inquiry service uses a one-way hash of the request network address to limit repeated submissions. The original address is not stored in the inquiry table. Rate-limit records contain a hashed key, time window and request count and are used for abuse prevention. Hosting infrastructure may also process technical request information for security and operation.

The map link opens Google Maps only when selected; no map is embedded. External sites receive connection and request information when you visit them and follow their own privacy policies.

Sharing and international transfers

Inquiries are not published or sold through this website. Access is restricted to authorized administrators and necessary service providers. Information may be disclosed when legally required or necessary to address security or legal matters.

Service providers may process information in countries other than your own. Where applicable law requires it, transfers must rely on appropriate safeguards. Contact the association for information relevant to your request; this policy does not promise a particular hosting location.

Security and retention

The website uses encrypted connections, authenticated administrator access, and access policies that prevent visitors from reading inquiries. No online system can guarantee complete security.

Inquiries are retained as needed for correspondence and legitimate administrative or legal purposes. A fixed organizational retention period has not been supplied; request deletion or further information through the listed contact details. Administrator authentication records remain while an account is required or applicable retention obligations continue. Rate-limit records support security monitoring; no automatic expiry schedule has been configured.

Your rights and concerns

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or objection to processing. You may withdraw consent without changing the lawfulness of earlier processing. Contact contact@larnacashooting.org and describe your request; identity verification may be needed to protect your information.

You may raise concerns with the association or a competent data protection supervisory authority where applicable. No data protection officer is identified by this website.

Children, photography and policy updates

This website provides general information and does not advertise authorized children’s flight training. A parent or guardian should handle inquiries involving children, and sensitive information about minors should not be submitted unnecessarily.

Photographs are supplied by the organization. Contact the association about privacy or image-consent concerns. No names, roles, dates, or locations of photographed individuals are asserted.

This policy may change when website features or processing practices change. Review the current version before submitting information.