Privacy Policy

Last updated: 14 October 2026

This page explains what personal data this website handles, why, for how long, and what you can do about it. We have tried to write it in plain words.

Who we are

This website, flyingkarlis.com, is run by Flying Karlis SIA, registered in Latvia, reg. no. LV40203558447, Latgales iela 273, 3, 3. LV-1063 Riga, Latvia. Flying Karlis SIA decides how and why the data described here is used (in data protection terms, we are the controller). Questions about your data: letsdothis@flyingkarlis.com.

Counting visits

We count visits to learn which pages and trips people read, and from which countries, so we can improve the site and plan courses. We do not use Google Analytics, and counting sets no cookie (the opt-out cookie described below is set only if you ask for it). We keep only daily totals, never a record of a single visit.

We count three things:

  • Page views. Our host Cloudflare keeps a record of the requests it serves, as it must in order to run the site; the part we can read covers the last 31 days. Once a day we take from it only the number of views of each page of this site per country, and save those daily numbers. Requests for addresses that do not exist are counted per address and day only, without a country (the address only, without anything after a “?”).
  • Clicks on contact and outside links. Links such as WhatsApp, email, booking and social media pass through a short address on this site (for example /go/whatsapp) on their way. We add 1 to the count for that link, on that page, from your country, that day.
  • Clicks on some buttons on our pages. When you click one of these buttons, a small script of ours sends one message to this site with only the page and the name of the button. Nothing is sent when a page loads. We add your country and add 1 to that day’s count.

Your country comes from Cloudflare, which works it out from your connection. We never save your IP address, your browser or device details, your language, the website you came from, campaign codes, the time of your visit, or any identifier that could recognise you again. We cannot tell who you are, and we cannot tell whether you have been here before.

Why we are allowed to do this

The legal basis is our legitimate interest in knowing which pages are useful, which countries our visitors come from and which links and buttons they use, so we can run and improve a small business (GDPR Article 6(1)(f)). The button script runs on your device, so we have kept it as small as we can: it carries no identifier and sends only the page and the name of the button. We have written down why we think this counting does not harm your interests; you can ask us for that assessment. If you disagree, you can object at any time (see below).

Your right to say no

You can object to being counted at any time, and you do not need to give a reason. Either way works:

  • Turn on “Do Not Track” or “Global Privacy Control” in your browser. We then count none of your link or button clicks.
  • Or use this link: Do not count my visits. It puts one small cookie called fk_optout on your device. Its only job is to remember your choice, and it lasts 13 months. Delete it, or use the “Count my visits again” button on the confirmation page, and we count your clicks again.

One honest limit: the daily page-view numbers come from Cloudflare’s own log, which cannot see these browser settings or the cookie. Your views of a page still add to that page’s daily total for your country. That total is only a number per page, country and day, with nothing in it that points to you.

How long we keep it

  • We store only daily totals: views per page and country, clicks per page, country and link or button, and requests for addresses that do not exist. These totals say nothing about any person, so we keep them with no time limit.
  • Click totals older than 25 months are kept without the country.
  • Reports show small numbers (under 10) only as “under 10”.

Who else handles data

Cloudflare hosts this website and processes the request for us (as our processor). It handles your IP address and browser details to serve each page and to keep the site secure. When Cloudflare shows a security check, it may set a cookie called cf_clearance that records that your browser passed the check (see the cookie policy). Cloudflare’s privacy policy. Cloudflare may process data outside the EU, under its own safeguards. The daily totals described above are stored in Cloudflare’s database service, also on our behalf.

Some pages contain content from other companies. They are listed below, and the cookie policy says which cookies they may set.

Content from other services

  • Google Maps (on the Laragne page) and Instagram (on the Laragne page and the X-Alps 2021 page) load only after you tap the button that names the company. Until you tap, nothing is sent to them. After you tap, they receive your IP address and browser details and may set their own cookies. Google’s privacy policy. Instagram’s privacy policy.
  • YouTube (on the Researching Valley Winds page) video thumbnails are served from our own site. The video player loads from youtube-nocookie.com only after you tap play. Google’s privacy policy.
  • Sender.net provides our newsletter sign-up form (on the newsletter and Chabre Challenge pages). Its form loads with the page, so Sender.net receives your IP address and browser details when you open those pages, and its script sets a cookie called sender_country (about 30 days; see the cookie policy). Sender.net handles the details you enter in the form on our behalf (as our processor). Sender.net’s privacy policy. To show the form, it also loads files and a spam check from other services (jsDelivr, cdnjs, Google Fonts, Google and Cloudflare), which also receive your IP address and browser details.
  • NoteForms provides the registration form on the Register page. The form loads with the page, so NoteForms receives your IP address and browser details when you open that page. NoteForms also uses an analytics service (Amplitude) and an error-reporting service (Sentry) inside its form. NoteForms handles what you enter in the form on our behalf (as our processor). NoteForms’ privacy policy.
  • Trustpilot is a plain link. Nothing is sent to Trustpilot unless you click it, and then its own policy applies.

Forms: newsletter, registration and email

If you sign up for the newsletter, register for a course or write to us, we receive what you type, such as your name and email address. We use it to answer you, to send what you asked for and to run the course or event you registered for. The legal basis is your consent for the newsletter (Article 6(1)(a), and you can unsubscribe at any time), and taking steps at your request, or a contract with you, for registrations and replies (Article 6(1)(b)). We keep it for as long as we need it for that purpose: newsletter data until you unsubscribe; course registration data for the duration of the booking, and afterwards for as long as accounting and other legal duties require. We do not sell your data. You do not have to give us your data, but without it we cannot sign you up or answer you. We do not make decisions about you by automated means.

Possible later change

We may later add a more detailed, optional kind of statistics (for example how far down a page people read, and whether a visitor returns). If we do, it will be switched on only if you say yes in a clear choice with an equal “No thanks” button, it will be described here and in the cookie policy before it starts, and you will be able to change your mind at any time. It does not exist today.

Your rights

Under the GDPR you can ask us to show you the personal data we hold about you, correct it, delete it, restrict how we use it, give it to you in a portable form, or stop using it (object). Where we rely on your consent, you can withdraw it at any time. To use any of these rights, email letsdothis@flyingkarlis.com. We will reply within one month.

You can complain to the supervisory authority in Latvia: the Data State Inspectorate (Datu valsts inspekcija, DVI). Complaints can be submitted through its website, www.dvi.gov.lv. You can also complain to the data protection authority in the country where you live or work.

Security

The site is served over HTTPS. We keep the data we hold in services that require a login, and we give access only to people who need it.

Changes to this policy

If we change what we collect or why, we will update this page and the date at the top before the change starts.