Data Protection

Your Rights Under GDPR & International Data Protection Laws

Our Commitment to Your Privacy

WingIt Jets is committed to protecting your personal data and respecting your privacy rights. Under the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other international data protection laws, you have specific rights regarding your personal information.

Your Data Protection Rights

👁️ Right to Access

You can request a copy of all personal data we hold about you. We'll provide this information in a commonly used, machine-readable format.

How: Email privacy@wingitjets.com or use account settings

✏️ Right to Rectification

You can correct any inaccurate or incomplete personal data we have about you at any time.

How: Go to Profile → Edit Profile to update your information

🗑️ Right to Erasure ('Right to be Forgotten')

You can request deletion of your personal data when it's no longer necessary, you withdraw consent, or you object to processing.

How: Go to Settings → Delete Account (this is permanent and cannot be undone)

🛑 Right to Restrict Processing

You can ask us to limit how we use your personal data in certain circumstances, such as while we verify accuracy.

How: Contact privacy@wingitjets.com with your request

📦 Right to Data Portability

You can receive your personal data in a structured, commonly used format and transmit it to another service.

How: Go to Settings → Download My Data to export your information

❌ Right to Object

You can object to our processing of your data for direct marketing, profiling, or legitimate interests.

How: Go to Settings → Notification Preferences to opt-out of marketing

🤖 Right to Not be Subject to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that significantly affects you.

Note: We don't make automated decisions that significantly affect you without human review

Legal Basis for Processing Your Data

We process your personal data based on the following legal grounds:

Consent - You've given explicit permission
Contract - Processing is necessary to provide our services
Legal Obligation - Required by law (e.g., tax, aviation regulations)
Legitimate Interests - Necessary for fraud prevention, security, and business operations

You can withdraw consent at any time without affecting previous processing.

What Personal Data We Collect

Identity Data: Name, passport details, date of birth, nationality
Contact Data: Email address, phone number, home address
Financial Data: Payment card details (securely processed by Stripe)
Transaction Data: Flight bookings, payment history, preferences
Technical Data: IP address, device type, browser, usage data
Marketing Data: Communication preferences, opt-in/opt-out status

How We Use Your Personal Data

We use your personal data to:

Process flight bookings and provide services
Verify your identity for aviation security
Communicate about your bookings
Send service updates and support
Improve our services
Comply with legal obligations
Prevent fraud and ensure security
Send marketing (with your consent)

We never sell your personal data to third parties.

Who We Share Your Data With

Charter Operators - To fulfill your flight bookings
Payment Processors (Stripe) - To process payments securely
Aviation Authorities - For regulatory compliance and security
Service Providers - For app hosting, analytics, and customer support
Legal Authorities - When required by law or court order

✅ All third parties are contractually required to keep your data secure and confidential.

How Long We Keep Your Data

Account Data: Until account deletion + 30 days
Booking Records: 7 years (legal requirement)
Financial Records: 7 years (tax law)
Marketing Data: Until you opt-out + 3 months
Technical Logs: 90 days

We review data retention regularly and delete data when no longer needed.

International Data Transfers

Your data may be transferred to and stored in countries outside your country of residence, including the United States. We ensure adequate protection through:

Standard Contractual Clauses (SCCs) approved by the EU
Adequacy decisions by relevant authorities
Privacy Shield frameworks (where applicable)
Encryption and security measures

All transfers comply with GDPR and applicable data protection laws.

How We Protect Your Data

We implement industry-standard security measures:

End-to-end encryption for sensitive data
Secure servers with firewalls
Regular security audits and penetration testing
Employee training on data protection
Access controls and authentication
Data backup and disaster recovery

However, no system is 100% secure. Please use strong passwords and keep your account credentials confidential.

Children's Privacy

Our services are not intended for children under 18. We do not knowingly collect data from children. If you believe we've collected data from a child, please contact us immediately at privacy@wingitjets.com and we'll delete it promptly.

Right to Lodge a Complaint

If you're unhappy with how we handle your data, you have the right to complain to your local data protection authority:

EU: Your national Data Protection Authority
UK: Information Commissioner's Office (ICO)
US: Federal Trade Commission (FTC)
Norway: Datatilsynet

We'd appreciate the chance to address your concerns first. Please contact privacy@wingitjets.com before filing a formal complaint.

How to Exercise Your Rights

To exercise any of your data protection rights:

In-App: Use Settings → Privacy & Security
Email: privacy@wingitjets.com
Phone: +47 984 36 850
Post: WingIt Jets, Data Protection Officer, Oslo, Norway

⏱️ We'll respond to your request within 30 days (or as required by local law).

Contact Our Data Protection Officer

For any data protection questions or concerns:

📧 Email:dpo@wingitjets.com

📞 Phone:+47 984 36 850

📍 Address: WingIt Jets, Data Protection Officer, Oslo, Norway

← Back to Home