Data Protection

1. Data Controller

2. Data Protection Officer

We have appointed a Data Protection Officer (DPO) who is responsible for overseeing our data protection strategy and ensuring compliance with GDPR and other data protection regulations.

3. Lawful Basis for Processing

We process personal data based on the following lawful bases under GDPR:

3.1 Contract Performance (Article 6(1)(b))

Processing necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract.

3.2 Legitimate Interests (Article 6(1)(f))

Processing necessary for our legitimate interests, provided these are not overridden by your rights and interests.

3.3 Legal Obligation (Article 6(1)(c))

Processing necessary to comply with legal obligations, particularly aviation safety and regulatory requirements.

3.4 Consent (Article 6(1)(a))

Processing based on your explicit consent, which can be withdrawn at any time.

4. Categories of Personal Data

4.1 User Data

• Name, email address, phone number
• Company information and business details
• Login credentials and access logs
• Communication preferences

4.2 Aviation Data

• Aircraft registration and specification data
• Flight schedules and operational records
• Crew member information and certifications
• Maintenance and safety records

4.3 Technical Data

• IP addresses and device information
• Usage patterns and system interactions
• Error logs and performance metrics
• Cookies and tracking data

5. Data Subject Rights

Under GDPR, you have the following rights regarding your personal data:

6. Data Retention

We retain personal data only as long as necessary for the purposes outlined in our Privacy Policy:

• Account Data: Retained during active account period and for 3 years after account closure
• Transaction Data: Retained for 7 years for tax and legal compliance
• Aviation Records: Retained according to aviation regulatory requirements
• Marketing Data: Retained until consent is withdrawn or account is closed

7. Data Security Measures

We implement comprehensive security measures to protect your data:

8. International Data Transfers

When we transfer personal data outside the EEA, we ensure appropriate safeguards:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules (BCRs)
• Approved certification mechanisms

9. Data Breach Notification

In the event of a personal data breach, we will:

• Notify the relevant supervisory authority within 72 hours
• Inform affected individuals without undue delay
• Document the breach and our response measures
• Implement corrective actions to prevent future breaches

10. Data Protection Impact Assessment

We conduct Data Protection Impact Assessments (DPIAs) for high-risk processing activities, particularly those involving:

• Large-scale processing of sensitive aviation data
• Automated decision-making systems
• Systematic monitoring of individuals
• Processing of special categories of personal data

11. Exercising Your Rights

To exercise any of your data protection rights, please contact us:

12. Complaints

If you are not satisfied with our response to your data protection concerns, you have the right to lodge a complaint with:

13. Updates to This Notice

We may update this Data Protection Notice from time to time. We will notify you of any significant changes via email or through our service. The latest version will always be available on this page.

Last updated: January 13, 2026