PRIVACY
Privacy Policy
This policy explains what personal data GoldenSkyJets handles when you enquire about or book a private flight, why we handle it, and the rights you have over it.
Last updated
- 01
Who is responsible for your data
GoldenSkyJets is the controller of the personal data described in this policy. The company details available are set out at the end of this page.
- 02
Information we collect
We collect what is needed to answer an enquiry and, where it goes further, to arrange a flight. Depending on how far the journey progresses, that may include your name and contact details; company details where you are booking in a professional capacity; the itinerary — route, dates, times and airports; the number of passengers and, once a booking is being arranged, passenger names; passenger and travel-document data where an operator, an airport or an authority requires it; baggage details, pets and other special requests; billing information; our correspondence with you; your booking history; source, referral and campaign details supplied with your request; and technical data such as IP addresses, request logs and IP/email fingerprints used for security and abuse prevention.
Without the required information, we may be unable to respond to your request or arrange the flight.
- 03
Why we use it
To respond to charter enquiries; to prepare proposals; to arrange and administer bookings; to coordinate with aircraft operators and other service providers; to administer passengers for a flight; for billing and accounting; for customer service and the handling of any incident; for security and the prevention of fraud; to meet legal obligations; and for marketing where we are legally permitted to do so.
- 04
Legal bases
We handle your data to respond to your request and take the precontractual steps you ask for, and to perform our intermediation service where applicable.
Some processing is required to comply with a legal obligation, such as accounting and tax record-keeping, or requirements imposed in connection with a flight.
We rely on our legitimate interests for the ordinary running and security of the business — keeping records of enquiries, protecting the website, and improving the service — where those interests are not overridden by your rights.
Where consent is required, we ask for it, and you can withdraw it at any time without affecting the lawfulness of what was done before you did.
- 05
Flight enquiries and bookings
An enquiry creates a record of the journey you asked about and the way to reach you about it. If the enquiry becomes a booking, that record grows to hold what the booking and the operator require.
Submitting an enquiry does not sign you up to marketing. It is a request for a quotation, and we treat it as one.
- 06
Passenger information
Arranging a flight usually requires information about the passengers travelling, and sometimes their travel-document details, because operators, airports and authorities require it before a flight may be carried out.
If you provide other passengers' data, please ensure they are informed that it will be used to arrange and manage the requested flight, and share this policy with them.
- 07
Sharing information
We share personal data only where it is needed to provide the service, to run the business or to meet a legal requirement.
GoldenSkyJets does not sell personal information.
- 08
Aircraft operators and service providers
Because the flight is performed by an independent operator, arranging it requires passing the necessary information to that operator.
Depending on the journey, information may also go to airports, FBOs and handling agents; ground transport, catering or other providers you have asked us to arrange; payment providers; our IT, hosting, database and email providers; our professional advisers; and public authorities where the law requires it.
If you choose to contact us through WhatsApp, your correspondence is handled by GoldenSkyJets and through that service under its privacy terms.
- 09
International transfers
Private aviation is international. Arranging a journey outside the European Economic Area may require sending information to operators, handling agents or authorities in the destination country, and some of our service providers may process data outside the EEA.
- 10
Data retention
For enquiries that do not lead to a contracted flight, our target retention period is 12 months from the last meaningful interaction. Longer retention requires a documented ongoing relationship, legal claim or other legitimate reason.
For contracted flights, contractual, commercial, accounting and supporting records are retained for the applicable statutory periods. Passenger data no longer needed for operational or legal purposes should not be retained merely because the commercial file remains archived.
- 11
Security
Access to client and booking data is restricted to the people who need it, access is controlled by individual account, and data is held on services that apply recognised security measures.
No system is absolutely secure, but we take the protection of this data seriously and keep our measures under review.
- 12
Marketing communications
We send commercial communications only where we are legally permitted to do so, and every one of them carries a way to stop receiving them.
Asking us for a quotation does not add you to a marketing list, and you can object to marketing at any time.
- 14
Your rights
You have the right to ask for access to your personal data, to have it corrected, to have it erased, to restrict how we use it, to object to our use of it, and to receive it in a portable form where that right applies. Where processing relies on consent, you can withdraw that consent.
We answer requests within the period the law allows. We may need to confirm your identity first, so that we do not disclose someone's data to the wrong person.
- 15
Complaints
If you are not satisfied with how we have handled your data, please tell us first so we can put it right.
You also have the right to complain to the Spanish supervisory authority, the Agencia Española de Protección de Datos (AEPD, www.aepd.es), or to the supervisory authority of the country where you live or work.
- 16
Changes to this policy
We update this policy when the service or the law changes. The date of the last substantive change is shown at the top of this page.
- 17
Contact
For any question about this policy, or to exercise any of the rights described above, use the details below.
Company details
- Legal entity
- GOLDEN SKY JETS SL
- Trading name
- GoldenSkyJets
- Registered office
- C/ del Pilar 12, 2º D, 28300 Aranjuez, Spain
Privacy & data rights: privacy@goldenskyjets.es