Privacy Policy

This policy explains how European Private Jets handles personal data when you visit jets.flights, ask for a quote, book a flight or contact us by phone, e-mail or WhatsApp. It is issued under Articles 13 and 14 of the General Data Protection Regulation, Regulation (EU) 2016/679 (GDPR), and the Cyprus Law 125(I)/2018 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

 

Who is responsible for your data

The controller is European Private Jets Ltd, Larnaca International Airport, P.O. Box 43012, CY 6650 Larnaca, Cyprus. The company is a business aviation broker with its head office in Cyprus and offices in Nice, Hamburg and Geneva. Staff in all four offices work with client data under the same rules. The company has appointed a Data Protection Officer, Henry Richter, who is your contact for every question about personal data and for requests to exercise your rights.

• Data Protection Officer: Henry Richter, privacy@jets.flights
• Phone: +357 96407410
• Postal address: European Private Jets Ltd, Larnaca International Airport, P.O. Box 43012, CY 6650 Larnaca, Cyprus

Office addresses are listed on the Contacts page.

 

Our role as a broker

We do not operate aircraft. Every flight we arrange is carried out by a licensed air operator holding an Air Operator Certificate (AOC). To organise the flight we pass the necessary passenger data to that operator, to the handling agents and terminals at the departure and arrival airports and, where the law requires it, to border, customs and police authorities. The operator processes these data as a separate controller under its own privacy policy and its legal duties as an air carrier.

 

What data we collect

• Contact and request details: name, phone number, e-mail address, company name, route, dates, number of passengers, baggage, catering wishes, pets on board and any other details you enter in the forms on the site or give us by phone, e-mail or WhatsApp.
• Passenger data: full name, date of birth, nationality, passport or identity card details and, for some countries, visa or residence permit details. Operators and authorities need these data for the passenger manifest and border formalities.
• Billing and payment data: name or company name, invoicing address, VAT or tax number and payment records. Full card details are handled by the bank or payment provider, not stored by us.
• Health and mobility information: for example a medical condition on an air ambulance flight, reduced mobility or a food allergy. We process such data only when you give them to us and only to arrange the flight.
• Correspondence: e-mails, messages and short written notes that our staff make of phone calls about your request. Phone calls are not recorded.
• Reviews: if you leave a review on the site, your name and the text of the review are published with it.
• Job applications: CV and other details sent through the Jobs page or by e-mail. We use them only to answer the candidate and then delete them; CVs are not kept on file.
• Technical data: IP address, browser and device type, pages visited, referring page, date and time of access. Our server records these data automatically in its logs and visit statistics.

If you give us data about other people, for example the passengers travelling with you, please make sure they know about this policy. Requests often come from assistants, travel agencies or companies booking for their staff: in that case we receive passenger data from the person who places the request.

 

Purposes, legal bases and retention periods

 

Purpose	Legal basis	How long we keep the data
Answering requests, preparing quotes and aircraft options	Steps taken at your request before a contract, Art. 6(1)(b) GDPR	Up to 24 months after the last contact if no booking follows
Booking and organising the flight and related services, contract, payments and support during the trip	Performance of a contract, Art. 6(1)(b) GDPR	6 years after the end of the contract
Passing passenger data to operators, handling agents and authorities as required for the flight	Performance of a contract and legal obligation, Art. 6(1)(b) and (c) GDPR	As for the booking
Accounting, tax and other legal obligations	Legal obligation, Art. 6(1)(c) GDPR	As long as Cyprus law requires, as a rule 6 years for accounting and tax records
Medical flights and health or mobility needs of passengers	Explicit consent, Art. 9(2)(a) GDPR; in an emergency, vital interests, Art. 9(2)(c) GDPR	Only as long as needed to arrange and complete the flight
Empty Legs offers and other news by e-mail	Consent, Art. 6(1)(a) GDPR, and the rules on electronic communications	Until you withdraw consent, and no longer than 24 months after the last contact
Site security, prevention of spam, fraud and misuse, defence of legal claims	Legitimate interest, Art. 6(1)(f) GDPR	For the time needed; in case of a dispute, until it is settled
Publishing reviews	Consent, Art. 6(1)(a) GDPR	While the review is on the site, or until you ask us to remove it
Assessing job applications	Steps taken at your request before a contract, Art. 6(1)(b) GDPR	Only until we have answered the candidate, then deleted; CVs are not kept on file

Giving us the data needed for a quote or a booking is voluntary, but without them we cannot arrange the flight. Consent to marketing e-mails is always optional.

 

Who receives your data

Only employees who need the data for their work have access to them, and they are bound by confidentiality. Outside the company, we share data only as far as needed with:

• the air operator that carries out the flight;
• handling agents, business aviation terminals (FBO) and airport operators;
• border, immigration, customs and police authorities where the law requires advance passenger information, for example APIS for flights to the United States, the General Aviation Report (GAR) for flights to and from the United Kingdom, and passenger lists for border checks at the airports of departure and arrival;
• providers of services you order with the flight, such as ground transfers, helicopter connections, catering and hotels;
• banks and payment providers;
• providers of hosting, e-mail and other IT services, accountants and legal advisers, who act on our instructions under Article 28 GDPR or as separate controllers;
• courts and public authorities, when we are legally obliged to disclose data or need to defend our rights.

We do not sell personal data and do not pass them to third parties for their own marketing.

 

Transfers outside the European Economic Area

The servers that host jets.flights and our e-mail are located outside the European Union. Data you send through the site or by e-mail are therefore stored and processed outside the EU. For these transfers we rely on the safeguards of Chapter V GDPR: an adequacy decision of the European Commission where one exists for the country concerned, and otherwise the standard contractual clauses approved by the European Commission or an equivalent safeguard under Article 46 GDPR. You can ask for information about these safeguards at privacy@jets.flights.

When a flight departs from, lands in or stops in a country outside the European Economic Area, passenger data must go to the operator, handling agent and authorities of that country. Such transfers are necessary to perform the contract with you (Art. 49(1)(b) GDPR). Switzerland, where our Geneva office is located, and the United Kingdom are covered by adequacy decisions of the European Commission, so data can go there without additional safeguards.

 

Phone, WhatsApp and e-mail

Phone calls with our team are not recorded; if details of a call matter for your flight, the broker confirms them to you in writing. Many clients contact us through WhatsApp. Messages sent this way are also processed by WhatsApp under its own terms and privacy policy. If you prefer, write to private@jets.flights or call +357 96407410.

We send Empty Legs offers and other marketing e-mails only to people who have agreed to receive them. Each such e-mail explains how to unsubscribe, and you can also write to privacy@jets.flights. Messages about an existing request or booking are part of the service and are sent regardless of this choice.

 

Your rights

Under Articles 15 to 22 GDPR you can:

• find out whether we process your data and receive a copy;
• have inaccurate data corrected and incomplete data completed;
• have your data erased, unless we must keep them by law or need them for a legal claim;
• ask us to restrict processing;
• receive the data you gave us in a structured, machine-readable format and have them sent to another controller;
• object to processing based on our legitimate interest and, at any time, to direct marketing;
• withdraw your consent; processing carried out before the withdrawal remains lawful.

Send your request to our Data Protection Officer at privacy@jets.flights. We answer within one month of receipt. For complex or numerous requests this period can be extended by two more months, and we will tell you why. We may ask for information to confirm your identity before we disclose any data. Requests are free of charge unless they are clearly unfounded or excessive.

 

Complaints to a supervisory authority

If you believe that we process your data unlawfully, you can lodge a complaint with the supervisory authority in the EU country where you live or work or where the alleged infringement took place. In Cyprus, where European Private Jets Ltd has its head office, this is the Office of the Commissioner for Personal Data Protection:

• Postal address: P.O. Box 23378, 1682 Nicosia, Cyprus
• Phone: +357 22 818456
• E-mail: commissioner@dataprotection.gov.cy
• Website: www.dataprotection.gov.cy

We would appreciate the chance to deal with your concern first, so please contact us before going to the authority.

 

Children

The site is not intended for children. In Cyprus a child can consent to online services from the age of 14; below that age the consent of a parent or guardian is needed. Data of children who travel as passengers are provided by their parents or accompanying adults and are used only to arrange the flight.

 

No automated decisions

We do not make decisions based solely on automated processing, including profiling, that have legal or similarly significant effects on you. The price calculator on the site gives an estimate; every quote is prepared by a member of our team.

 

Security

We use technical and organisational measures to protect personal data against unauthorised access, loss, alteration and disclosure: the site uses an encrypted HTTPS connection, access to client data is limited to the staff who need it, and passport details are shared only with the parties that need them for the flight. If a data breach is likely to put your rights at high risk, we will inform you without undue delay.

 

Cookies

The site uses cookies and similar technologies. Which ones, why, and how to control them is described in the Cookies Policy. Contractual terms for bookings are in the Terms and Conditions.

 

Changes to this policy

We update this policy when the law or our services change. The version in force is always published on this page.