Einleitung

European Air Charter (EAC) ist dem Schutz der Privatsphäre und der personenbezogenen Daten von Website-Besuchern, Kunden, Partnern und Stellenbewerbern verpflichtet. Diese Datenschutzerklärung erläutert, wie wir Ihre Daten erfassen, nutzen, speichern und schützen, wenn Sie unsere Website besuchen, uns kontaktieren oder unsere Dienste nutzen.
Wir verarbeiten personenbezogene Daten gemäß den geltenden Datenschutzgesetzen, einschließlich der Datenschutz-Grundverordnung (DSGVO), und ergreifen geeignete Maßnahmen, um die Sicherheit und Vertraulichkeit Ihrer Daten zu gewährleisten.

Processing activities described herein are carried out in accordance with Regulation (EU) 2016/679 (the "General Data Protection Regulation" or "GDPR"), the Bulgarian Personal Data Protection Act, and the supervisory guidance issued by the Commission for Personal Data Protection of the Republic of Bulgaria. For any question concerning the protection of your data, or to exercise the rights described below, you may contact the Company at office@euaircharter.com.

1. Von uns erfasste Informationen

The provisions set out below apply to all Personal Data processed in connection with the Website, irrespective of whether the data is transmitted through a contact form, an enquiry form, a job application, a direct electronic mail message, or whether it is collected automatically through technical means while you browse. Where the Website links to external resources operated by third parties, the present Policy does not extend to those resources, each of which is governed by its own privacy arrangements. Read in conjunction with the Cookie Policy and the Terms and Conditions of Use, the Policy forms part of the contractual framework regulating your relationship with the Company.

3. Categories of Personal Data We Collect

The nature and volume of the data processed depend upon the manner in which you choose to interact with us. We endeavour to limit collection to what is adequate, relevant, and restricted to what is necessary, consistently with the principle of data minimisation enshrined in Article 5(1)(c) of the GDPR.

• Identification and contact details: Your name, surname, electronic mail address, telephone number, and any further particulars you elect to disclose when completing a form or writing to us directly.

• Enquiry content: The subject and substance of any request, message, or correspondence you address to the Company, including information relating to a prospective charter or to the Services in which you express interest.

• Recruitment data: Information contained in a curriculum vitae, cover letter, or supporting document submitted through the careers section, encompassing professional experience, qualifications, certifications, and other particulars voluntarily provided by a candidate.

• Technical and navigational data: Information generated automatically by your device and browser, such as an internet-protocol address, browser type, operating system, and data derived from strictly necessary cookies, together with analytics data where you consent to the relevant cookies.

We do not knowingly seek to collect special categories of data within the meaning of Article 9 of the GDPR. Where a candidate or correspondent voluntarily includes such information, it will be processed solely to the extent strictly required and erased where it is not pertinent.

4. Datensicherheit

European Air Charter nimmt den Datenschutz ernst und implementiert geeignete technische, administrative und organisatorische Schutzmaßnahmen, um personenbezogene Daten vor unbefugtem Zugriff, Offenlegung, Missbrauch, Verlust, Änderung oder Zerstörung zu schützen. Unsere Sicherheitsmaßnahmen werden regelmäßig überprüft und aktualisiert, um sich entwickelnden technologischen und operativen Risiken zu begegnen. Obwohl keine Methode der elektronischen Übertragung oder Speicherung absolute Sicherheit garantieren kann, bemühen wir uns, branchenübliche Schutzmaßnahmen aufrechtzuerhalten und unsere Sicherheitspraktiken kontinuierlich zu verbessern. Der Zugang zu personenbezogenen Daten ist auf autorisiertes Personal beschränkt, das diese Informationen zur Erfüllung seiner Aufgaben und Verantwortlichkeiten benötigt.

When you transmit data on behalf of a third party, you warrant that you are entitled to do so and that the individual concerned has been duly informed of the processing described in this Policy.

5. Cookies & Tracking-Technologien

Unsere Website kann Cookies und ähnliche Tracking-Technologien verwenden, um die Funktionalität zu verbessern, die Website-Leistung zu optimieren und besser zu verstehen, wie Besucher mit unseren Inhalten interagieren. Cookies helfen uns, Benutzereinstellungen zu speichern, Verkehrsmuster zu analysieren, die Website-Leistung zu überwachen und ein effizienteres Surferlebnis zu bieten. Diese Technologien können Informationen über die Website-Nutzung, den Gerätetyp, die Browsereinstellungen und Benutzerinteraktionen sammeln. Sie können Cookies über Ihre Browsereinstellungen deaktivieren oder verwalten; dies kann jedoch bestimmte Funktionen und Merkmale der Website beeinträchtigen.

• Responding to enquiries: To receive, assess, and reply to the requests you submit through a form or by electronic mail, the processing is grounded upon the taking of steps at your request prior to a possible engagement, pursuant to Article 6(1)(b), and, where pertinent, upon our legitimate interest in attending to communications addressed to us, pursuant to Article 6(1)(f).

• Managing commercial relations: To evaluate prospective charter requirements and to prepare any subsequent offer, the processing relies upon Article 6(1)(b), since it is undertaken with a view to the conclusion or performance of an agreement to which you may become a party.

• Handling job applications: To examine the suitability of candidates for current vacancies, the processing rests upon the pre-contractual basis under Article 6(1)(b); where a candidate consents to the retention of an application for the assessment of future opportunities, the further processing is founded upon consent within the meaning of Article 6(1)(a).

• Operating and securing the Website: To ensure the proper functioning, stability, and security of the Website through strictly necessary cookies, the processing is justified by our legitimate interest under Article 6(1)(f), read together with the applicable ePrivacy rules.

• Measuring audience through analytics: Google Analytics is deployed on the Website to measure audience; the associated non-essential cookies, and the related processing of usage data, are carried out exclusively upon your prior consent, pursuant to Article 6(1)(a).

• Complying with legal obligations: To satisfy obligations imposed by accounting, tax, aviation, or other legislation, and to respond to legitimate requests from public authorities, the processing is grounded upon Article 6(1)(c).

Where consent constitutes the legal basis, you may withdraw it at any moment, without affecting the lawfulness of processing carried out prior to such withdrawal.

6. Weitergabe von Informationen

European Air Charter verkauft, handelt oder vermietet keine personenbezogenen Daten zu Marketingzwecken an Dritte. Informationen können an vertrauenswürdige Dienstleister, Technologiepartner, Aufsichtsbehörden, Rechtsberater oder andere autorisierte Stellen weitergegeben werden, sofern dies zur Erbringung von Dienstleistungen, zur Aufrechterhaltung des Website-Betriebs, zur Einhaltung gesetzlicher Verpflichtungen oder zum Schutz unserer berechtigten Geschäftsinteressen erforderlich ist. Von allen Dritten, die Zugang zu personenbezogenen Daten haben, wird erwartet, dass sie angemessene Vertraulichkeits- und Sicherheitsstandards einhalten, die den geltenden Datenschutzanforderungen entsprechen.

Where analytics data is transferred to Google, such transfer is governed by the safeguards described in Section 8 below.

7. Ihre Rechte

Je nach den an Ihrem Standort geltenden Gesetzen haben Sie möglicherweise bestimmte Rechte bezüglich Ihrer personenbezogenen Daten. Diese Rechte können das Recht auf Zugang zu Ihren personenbezogenen Daten, die Berichtigung unrichtiger Informationen, die Löschung personenbezogener Daten, die Einschränkung bestimmter Verarbeitungstätigkeiten, den Widerspruch gegen bestimmte Verwendungen Ihrer Daten und den Widerruf der Einwilligung umfassen, wenn die Verarbeitung auf einer Einwilligung beruht. Anfragen bezüglich der Rechte an personenbezogenen Daten werden gemäß den geltenden gesetzlichen Bestimmungen und regulatorischen Verpflichtungen geprüft und bearbeitet.

• Hosting and form provider: The Website is built and hosted on the Webflow platform, which acts as a processor and may store form submissions and related data on its infrastructure. Webflow processes such data on documented instructions, under a data-processing addendum incorporating the contractual safeguards required by Article 28 of the GDPR.

• Analytics provider: Subject to your consent, Google acts as a processor in respect of the usage data generated by the analytics cookies set through Google Analytics.

• Professional advisers and service providers: Information-technology contractors, legal counsel, and accounting professionals may access data strictly to the extent necessary for the performance of their respective mandates.

• Public authorities: Competent administrative, judicial, or supervisory bodies may receive data where disclosure is mandated by law or required for the establishment, exercise, or defence of legal claims.

We do not sell Personal Data, and we do not disclose it for the purposes of newsletters, email marketing, advertising campaigns, remarketing, or tracking pixels, none of which is employed on the Website.

8. International Transfers of Personal Data

Certain processors engaged by the Company are established outside the European Economic Area, in particular in the United States. Webflow, our hosting and form provider, stores data on infrastructure located in the United States. Transfers of that nature are lawful because Webflow is certified under the EU-U.S. Data Privacy Framework, in respect of which the European Commission adopted an adequacy decision on 10 July 2023, subsequently extended to the European Economic Area. As an additional safeguard, the Webflow data-processing addendum incorporates the Standard Contractual Clauses approved by the European Commission, which apply where reliance upon the adequacy decision is not available.

Transfers to Google in the United States, arising from the use of Google Analytics, are likewise supported by Google's certification under the EU-U.S. Data Privacy Framework and, as a complementary measure, by the Standard Contractual Clauses. By such means, the Company ensures that any data leaving the European Economic Area benefits from a level of protection essentially equivalent to that guaranteed within the Union, in accordance with Chapter V of the GDPR. Upon written request addressed to office@euaircharter.com, you may obtain further particulars concerning the safeguards applied to a specific transfer.

9. Retention of Data

Personal Data is retained only for so long as is necessary to fulfil the purposes for which it was collected, after which it is erased or irreversibly anonymised. The applicable periods reflect both operational requirements and statutory obligations.

• Enquiry and contact data: Data relating to a request that does not result in a contractual relationship is kept for the time required to respond and for a reasonable subsequent period, not normally exceeding twelve (12) months, after which it is deleted unless a longer retention is justified by a legitimate interest or a legal duty.

• Recruitment data: Applications are retained for the duration of the relevant selection procedure and, where the candidate has expressly consented, for a further period not exceeding six (6) months for the assessment of future vacancies, following which they are erased.

• Contractual and accounting data: Where a charter or commercial relationship is concluded, the associated records are retained for the periods prescribed by Bulgarian tax and accounting legislation.

• Technical data: Cookie-related data is retained for the durations specified in the Cookie Policy.

10. Your Rights as a Data Subject

Within the limits and conditions established by Articles 15 to 22 of the GDPR, you are entitled to exercise the rights described below.

• Right of access: You may obtain confirmation as to whether your data is being processed and, where it is, a copy of that data together with the relevant information.

• Right to rectification: You may request the correction of inaccurate data and the completion of incomplete data.

• Right to erasure: You may request the deletion of your data where one of the grounds set out in Article 17 applies.

• Right to restriction: You may request that processing be limited in the circumstances enumerated in Article 18.

• Right to data portability: You may receive the data you have provided in a structured, commonly used, and machine-readable format, and request its transmission to another controller where technically feasible.

• Right to object: You may object, on grounds relating to your particular situation, to processing founded upon legitimate interest.

• Right to withdraw consent: Where processing rests upon consent, you may withdraw it at any time, without prejudice to the lawfulness of prior processing.

To exercise any of these rights, kindly write to office@euaircharter.com. We shall respond without undue delay and, in any event, within one month of receipt of the request, a period that may be extended where the complexity or number of requests so requires. Should you consider that the processing of your data infringes the law, you are entitled to lodge a complaint with the Commission for Personal Data Protection of the Republic of Bulgaria, whose resources are accessible at https://www.cpdp.bg, or with the supervisory authority of your country of residence, without prejudice to any judicial remedy.

11. Security of Processing

In compliance with Article 32 of the GDPR, the Company implements appropriate technical and organisational measures designed to ensure a level of security commensurate with the risk presented by the processing. Such measures include the encryption of communications through transport-layer security, restricted access to data on a need-to-know basis, and contractual obligations imposed upon processors. Notwithstanding the diligence applied, transmission of information over the internet cannot be guaranteed to be entirely secure, and you are accordingly encouraged to exercise caution when communicating sensitive details by unencrypted electronic mail.

12. Children's Data

The Website is directed at a professional, adult audience and is not intended for minors. We do not knowingly collect Personal Data relating to children. Where it comes to our attention that data concerning a minor has been transmitted without an appropriate legal basis, that data will be erased without undue delay.

13. Automated Decision-Making

The Company does not carry out automated decision-making producing legal effects, or similarly significant effects, in respect of data subjects within the meaning of Article 22 of the GDPR. Should such processing be introduced in the future, you will be informed beforehand and provided with the safeguards prescribed by law.

14. Amendments to This Policy

Revision of the present Policy may become necessary to reflect developments in the Company's activities, in the technologies deployed on the Website, or in the applicable legal framework. Any updated version will be published on this page, bearing the date of its most recent revision. Where a change materially affects your rights, reasonable efforts will be made to bring it to your attention. Continued use of the Website following publication of an amended version constitutes acknowledgement of the revised text.

15. Contact

For any request, clarification, or concern relating to the processing of your Personal Data, or to exercise any of the rights described above, please contact the Controller at office@euaircharter.com or by post at 35 Pavel Krasov Street, Gorublyane Residential Area, Mladost District, 1138 Sofia, Bulgaria.