1. Controller
AeroSelect UG (haftungsbeschränkt), Mühlenstraße 20, 10243 Berlin, Germany. Managing Director: Christoph Lombard. Contact: [email protected].
2. Data we process
When you request a charter, we process identity and contact details, route, timing, passenger count, preferences and correspondence. The Trip Room also records proposal acceptance, invoice and payment status. Technical security records may include IP address, device and access timestamps.
3. Why we process it
Request and booking data is processed to take pre-contractual steps and perform a contract under Art. 6(1)(b) GDPR. Fraud prevention and platform security rely on our legitimate interests under Art. 6(1)(f). Statutory invoice retention relies on Art. 6(1)(c). Marketing is sent only with consent under Art. 6(1)(a), which may be withdrawn at any time.
4. Operators and suppliers
We share the minimum mission detail required to source and perform a flight with selected licensed air carriers, handling agents and trip suppliers. Passenger names and operational requirements are shared only when needed for a quotation, confirmation or flight.
5. Processors
Our processors include infrastructure providers in Germany or the EU, Mailgun for transactional email, Stripe for eligible card payments, and Cloudflare for DNS, security and protected staff access. Transfers outside the EEA are protected through applicable adequacy decisions or standard contractual clauses.
6. Retention
Unconverted enquiries are retained only as long as required for follow-up, documentation and legal defence. Booking and invoice records are retained for statutory commercial and tax periods. Security logs are retained for a limited period. Marketing data is kept until consent is withdrawn or the purpose ends.
7. Your rights
You may request access, rectification, erasure, restriction, data portability or object to processing. You may withdraw consent at any time. You also have the right to complain to the Berliner Beauftragte für Datenschutz und Informationsfreiheit.
8. No advertising trackers at launch
The public site does not require advertising cookies to submit a charter request. If optional analytics or advertising services are introduced, they will be disabled until the required consent has been obtained.