Privacy statement

SkyConnect BV is the controller of the personal data processed on Rightseat. Write to hello@rightseat.eu with any question about it.

• Your name, email address and language, so that you have an account and hear from us in a language you read.
• Your home airfield and what you write about yourself, which is your profile.
• Verification documents, to establish that you are who you say you are and hold what you say you hold.
• Aircraft details, including registration and insurance, for the same reason.
• Flights, seat requests, route requests and messages.
• Reviews you write and reviews written about you.
• What you bought, what it cost, and the name and address you gave for the invoice.
• Your country, and your VAT number if you gave one, because those two decide which VAT applies.
• Technical records of your visit, kept short, to keep the platform working and secure.

Most of it because we cannot provide the platform without it. Verification rests on our legitimate interest, and yours, in a platform where people can trust who they are flying with. Anything optional is asked for separately and can be refused without losing your account.

A stranger sees a flight’s field, date, part of the day, aircraft type, seats and rate indication. The exact time, the aircraft registration and the pilot’s name appear only after signing in. Your surname is never shown publicly, and neither is any registration.

Verification documents are seen by the administrator reviewing them and by nobody else.

Your public profile exists only if you asked for one, carries no surname, and is marked so that search engines leave it alone.

We do not read what you write to another member, and there is no screen in our administration that lists conversations.

A report is the exception. If you report a message or a review, an administrator can read the conversation it belongs to, because one message cannot be judged without the ones around it. That one conversation, and nothing else.

The administrator gives a reason first, and who opened which conversation and why is logged. Reporting something does not remove it: an administrator decides.

An administrator can sign in as your account, which is how a question about a screen gets answered from that screen. They write down why first, the session closes itself after 30 minutes, and you get an email saying it happened and what reason was given. Who signed in as whom, when and why is logged.

Our hosting provider, our email provider, our payment provider and the service that tells us when something here has broken. Each processes data on our instructions under a processing agreement and passes it to nobody else. Where one of them processes data outside the European Economic Area, that rests on the standard contractual clauses adopted by the European Commission. We do not sell data and do not use it for advertising.

Paying happens at Stripe. Your card details are entered there and never reach us: what comes back to Rightseat is whether the payment succeeded, and the name and address you gave for the invoice.

When something goes wrong on a page we record what happened: which page, how long it took, the error itself, and your account number if you were signed in. Not your name, not your email address, and not what you had typed.

• Your account and profile: as long as the account exists.
• Verification documents: until they expire or are replaced, and no longer than needed after that.
• Flights, requests and reviews: kept after an account closes, but stripped of anything identifying the person.
• Messages: as long as both conversations exist.
• Invoices and what they are about: seven years, as tax law requires.
• Records of an administrator signing in as you: as long as the account exists.
• Technical records: months rather than years.

You can close your account yourself. What was said and agreed between members stays, but it stops pointing at a person: the name goes, the email address goes, and what is left cannot be traced back to you.

Invoices are the exception. One already issued keeps the name and address on it: the law that makes us keep it for seven years is the same law that forbids us to change it.

You can ask to see what we hold, to have it corrected, to have it deleted, to receive a copy, or to object to a particular use. Write to hello@rightseat.eu. You can also complain to the Dutch Data Protection Authority.

Cookie policy