Privacy Policy

Private Aviation Care
As of October 21, 2026

1. General Information on Data Protection

The protection of your personal data is very important to us. Private Aviation Care processes personal data in compliance with applicable data protection regulations, in particular the General Data Protection Regulation (GDPR).

This Privacy Policy provides information about the processing of personal data when you visit our website, submit contact or quote requests, and in connection with our services. It explains the purposes, legal bases, recipients, retention periods, and your rights.

2. Data Controller

3. Categories of Personal Data

Depending on the nature of our interaction and your use of our services, we process the following information in particular:

• First and last name, as well as company name, if applicable
• Email address and phone number
• Preferred airport or service location
• Aircraft Registration (Tail Number)
• Requested services, planned flight date, and departure time
• Messages and other information provided voluntarily
• Quotation, Contract, and Invoice Data
• Technical data such as IP address, browser type, device type, and time of access

We process data only to the extent that there is a specific purpose and a legal basis for doing so.

4. Contact Form and Requests for Quotes

When you contact us via the contact form, by email, or by phone, we use your information to respond to your inquiry, to prepare a customized quote, and, if applicable, to plan and provide our services.

A request submitted through our website does not constitute a binding reservation. We generally prepare a customized quote for each service.

The legal basis is Article 6(1)(b) of the GDPR, to the extent that the processing is necessary for precontractual measures or the performance of a contract with the data subject.

For general inquiries and communication with contacts at business customers, processing may be based on our legitimate interest in handling business inquiries in accordance with Article 6(1)(f) of the GDPR.

5. Hosting and website operation by Squarespace

Our website is hosted on Squarespace.

The provider is Squarespace, Inc., 225 Varick Street, New York, NY 10014, USA.

When you visit the website, certain technical data may be processed, including, in particular, your IP address, browser and device information, the pages you visit, and the time of your visit.

This ensures the secure and proper operation of our website. Where applicable, the legal basis is Article 6(1)(f) of the GDPR.

Technologies that require consent are used only on the basis of such consent in accordance with Article 6(1)(a) of the GDPR.

For more information:

Squarespace Privacy Policy

Squarespace Data Processing Addendum

6. Multilingualism through Weglot

We use Weglot (Weglot SAS, France) to provide multilingual content on our website.

In doing so, website content and technically necessary information may be processed to the extent necessary for the translation and delivery of the selected language version.

To the extent that personal data is involved, the processing is based, where applicable, on our legitimate interest in maintaining a multilingual website in accordance with Article 6(1)(f) of the GDPR.

For more information:

Weglot Privacy Policy

7. Cookies and Similar Technologies

Our website uses cookies and similar technologies to ensure the functionality, security, and user-friendliness of our website.

7.1 Technically Necessary Cookies

Technically necessary cookies enable basic functions of our website. These may include, in particular, security features, the storage of cookie settings, and technically necessary website functions.

To the extent that personal data is processed in this context, such processing is based on our legitimate interest in ensuring the secure and proper operation of the website pursuant to Article 6(1)(f) of the GDPR, to the extent that this legal basis is applicable.

7.2 Optional Cookies and Analytics Features

Depending on the website features that are enabled, cookies and similar technologies may be used to analyze website usage or to improve our online offerings.

To the extent that consent is required for this purpose, these technologies will be used only after you have given your express consent.

In these cases, the processing of personal data is based on Article 6(1)(a) of the GDPR.

7.3 Cookie Settings

When you visit our website, you can use the cookie banner to choose whether to accept or reject optional cookies.

You may revoke or change your consent at any time, effective for the future, using the cookie settings provided on our website.

7.4 Additional Information

The type, purpose, and retention period of the cookies used depend on the website features and service providers actually used.

For more information about the cookie technologies used by our website providers, please visit:

Squarespace Cookie Policy

Weglot Privacy Policy

8. Data Processing in Connection with Our Services

To prepare for and perform cleaning and maintenance services on private and business aircraft, we process the necessary contact, quote, order, location, and billing information.

This includes, in particular, scheduling appointments, coordinating with contacts, and, if necessary, arranging access permissions.

Depending on the specific case, the legal bases are Article 6(1)(b) of the GDPR (contract and precontractual measures), Article 6(1)(f) of the GDPR (legitimate interests, in particular communication with business contacts), and Article 6(1)(c) of the GDPR (legal obligations).

9. Photo and Video Documentation

As part of an assignment, photos or videos may be taken to document the aircraft's initial condition, any prior damage, and the work performed.

To the extent that the recordings contain personal data, such data is processed on the relevant legal basis in each case, in particular Article 6(1)(b) or (f) of the GDPR.

When collecting and using this information, we comply with applicable data protection, confidentiality, and airport security regulations.

Publication for advertising purposes will only take place if the necessary approvals have been obtained and there is an appropriate legal basis under data protection law.

10. Recipients of Personal Data

Personal data will only be disclosed to the extent that it is necessary for the provision of our services, required by law, or otherwise permitted.

Recipients may include, in particular, providers of hosting, translation, email, communications, accounting, and administrative services, as well as, if necessary, airport operators or relevant authorities.

To the extent that service providers process personal data on our behalf, data processing agreements pursuant to Article 28 of the GDPR will be entered into as necessary.

We do not sell personal data.

11. International Data Transfer

11.1 Squarespace

When using Squarespace, personal data may be processed in the United States and, where applicable, in other countries where Squarespace or its subprocessors operate.

In its privacy policy, Squarespace describes data transfer mechanisms, including the EU-U.S. Data Privacy Framework, where applicable, as well as standard contractual clauses.

For more information:

Squarespace DPA

11.2 Weglot

According to Weglot, its servers are located within the European Union.

However, for certain services, subcontractors located outside the European Economic Area may be used.

Weglot describes appropriate safeguards for this purpose, including—where applicable—the EU-U.S. Data Privacy Framework or standard contractual clauses.

For more information:

Weglot Privacy Policy

Weglot GDPR Information

11.3 Protection of Personal Data

When transferring data to third countries, we comply with the requirements of Articles 44 et seq. of the GDPR.

The specific mechanisms that apply depend on the services actually used and the recipients.

12. Retention Period

We retain personal data only for as long as is necessary for the respective purpose of processing or as required by statutory retention obligations.

12.1 General Contact Inquiries

General contact inquiries that do not result in an order are generally deleted within six months after they have been fully processed, unless longer retention is required.

12.2 Rejected Offers

Rejected offers and the associated personal data are generally deleted twelve months after the offer is rejected or expires, provided that there are no legal retention requirements or other legitimate reasons to the contrary.

12.3 Contract and Billing Documents

Contract documents, invoices, and tax-related business records are generally retained for seven years in accordance with applicable Dutch statutory retention requirements, calculated in accordance with the applicable legal provisions.

Where specific retention periods apply, they will be taken into account.

12.4 Customer Communication and Documentation

Customer communications, as well as photo and video documentation, are stored only for as long as necessary for contract fulfillment, documentation, compliance with legal obligations, or to assert, exercise, or defend legal claims.

12.5 Deletion

Once the applicable retention period has expired, personal data will be deleted or anonymized, provided there is no other legal basis for its storage.

13. Data Security

We take appropriate technical and organizational measures to protect personal data from unauthorized access, loss, alteration, and unlawful disclosure.

Business documents, quotes, and customer information are stored on business-use computer systems, among other places.

Access is restricted to authorized individuals.

Our website uses an encrypted HTTPS connection.

14. Your Rights Under the GDPR

Subject to the statutory requirements, you have the following rights in particular:

• Information Pursuant to Article 15 of the GDPR
• Correction pursuant to Article 16 of the GDPR
• Erasure pursuant to Article 17 of the GDPR
• Restriction of Processing Pursuant to Article 18 of the GDPR
• Data Portability Pursuant to Article 20 of the GDPR
• Objection pursuant to Article 21 of the GDPR
• Withdrawal of consent with future effect pursuant to Article 7(3) of the GDPR

The lawfulness of the processing carried out up to the time of revocation remains unaffected.

To the extent that we process data based on legitimate interests, you may object to such processing under the conditions set forth by law, based on your specific circumstances.

To exercise your rights, please write to contact@privateaviationcare.com.

15. Right to File a Complaint with a Supervisory Authority

You have the right to file a complaint with a competent data protection supervisory authority.

The Autoriteit Persoonsgegevens is generally responsible for our company, which is based in the Netherlands.

https://autoriteitpersoonsgegevens.nl

The right to file a complaint with another competent supervisory authority remains unaffected.

16. Automated Decision-Making

The processing described here does not involve any fully automated decision-making that would have legal effects on you or similarly significantly affect you.

17. Changes to This Privacy Policy

We update this Privacy Policy when legal requirements, our services, or the technical features of our website change.

The most recent version is available on our website.

18. Contact Information for Data Protection Inquiries