Privacy policy
What data we process, why, for how long, and how to exercise your rights.
Data controller
The controller of your personal data is:
Processing activities
Every piece of data serves an identified purpose, rests on a specific legal basis, and is kept only as long as that purpose requires.
| Purpose | Legal basis | Data | Retention |
|---|---|---|---|
| Création et gestion du compte utilisateur | Exécution du contrat (art. 6.1.b) | Nom, e-mail, téléphone, mot de passe chiffré | Durée du compte, puis 3 ans d’inactivité |
| Vérification de l’aptitude des pilotes et de la conformité des aéronefs | Intérêt légitime : sécurité des vols proposés (art. 6.1.f) | Licence, certificat médical, pièce d’identité, attestations d’assurance et de navigabilité | Fichiers détruits 12 mois après contrôle ; seules la date d’échéance et la trace du contrôle sont conservées |
| Réservations, locations, facturation et versements | Exécution du contrat (art. 6.1.b) et obligation légale (art. 6.1.c) | Historique des vols et locations, montants, identifiants de paiement | 10 ans (C. com., art. L123-22) |
| Déclaration annuelle des revenus des vendeurs | Obligation légale (art. 6.1.c) — directive (UE) 2021/514 | Adresse, numéro fiscal, date de naissance ou numéro d’immatriculation | 10 ans |
| Traitement des signalements de contenu | Obligation légale (art. 6.1.c) — règlement (UE) 2022/2065 | Contenu signalé, motif, adresse du déclarant si fournie | 1 an après décision |
| Alerter avant l’expiration d’un titre ou d’une assurance | Intérêt légitime : continuité de service et sécurité (art. 6.1.f) | Adresse e-mail, date d’échéance concernée | Durée du compte |
Health data
The expiry date of your medical certificate is health-related data. We collect that DATE only, never its medical content, and solely because it conditions the exercise of a pilot licence. The file submitted for verification is destroyed twelve months after the check: only the expiry date and the record of the check remain.
Recipients
Your data is neither sold nor transferred. It is accessible to authorised Volara staff, and shared only with the service providers required to operate the service and with the tax authorities under our reporting obligations. No transfer outside the European Union takes place.
Your rights
You have the following rights over your data at any time:
- Access — obtain a copy of the data concerning you.
- Rectification — correct inaccurate data from your account.
- Erasure — request deletion of your account.
- Objection — object to processing based on our legitimate interest.
- Portability — retrieve your data in a reusable format.
Access, portability and erasure can be exercised directly from your account: My account
What happens when you delete your account
If your account involved no transaction, it is simply deleted. If it did, the law requires us to keep the corresponding accounting records for ten years: your account is then anonymised — name, email, phone and tax details erased, supporting documents destroyed. What remains is accounting data, and no longer identifies you.
Complaints
If you believe your rights are not being respected, you may lodge a complaint with the French data protection authority: cnil.fr
This policy is updated whenever the processing described above changes.