Privacy Policy

Last updated: 2 June 2026

1. Introduction and Identity of the Controller

European Air Charter EAD, a joint-stock company established under the laws of the Republic of Bulgaria, with its registered seat at 35 Pavel Krasov Street, Gorublyane Residential Area, Mladost District, 1138 Sofia, Bulgaria (hereinafter the "Controller," "Company," "we," "us," or "our"), attaches considerable importance to the protection of personal data and to the lawful, transparent handling of every item of information entrusted to it. The present Privacy Policy explains how Personal Data is collected, used, disclosed, retained, and safeguarded when you visit or interact with the website accessible at https://euaircharter.com (the "Website").

Processing activities described herein are carried out in accordance with Regulation (EU) 2016/679 (the "General Data Protection Regulation" or "GDPR"), the Bulgarian Personal Data Protection Act, and the supervisory guidance issued by the Commission for Personal Data Protection of the Republic of Bulgaria. For any question concerning the protection of your data, or to exercise the rights described below, you may contact the Company at office@euaircharter.com.

2. Scope of This Policy

The provisions set out below apply to all Personal Data processed in connection with the Website, irrespective of whether the data is transmitted through a contact form, an enquiry form, a job application, a direct electronic mail message, or whether it is collected automatically through technical means while you browse. Where the Website links to external resources operated by third parties, the present Policy does not extend to those resources, each of which is governed by its own privacy arrangements. Read in conjunction with the Cookie Policy and the Terms and Conditions of Use, the Policy forms part of the contractual framework regulating your relationship with the Company.

3. Categories of Personal Data We Collect

The nature and volume of the data processed depend upon the manner in which you choose to interact with us. We endeavour to limit collection to what is adequate, relevant, and restricted to what is necessary, consistently with the principle of data minimisation enshrined in Article 5(1)(c) of the GDPR.

  • Identification and contact details: Your name, surname, electronic mail address, telephone number, and any further particulars you elect to disclose when completing a form or writing to us directly.

  • Enquiry content: The subject and substance of any request, message, or correspondence you address to the Company, including information relating to a prospective charter or to the Services in which you express interest.

  • Recruitment data: Information contained in a curriculum vitae, cover letter, or supporting document submitted through the careers section, encompassing professional experience, qualifications, certifications, and other particulars voluntarily provided by a candidate.

  • Technical and navigational data: Information generated automatically by your device and browser, such as an internet-protocol address, browser type, operating system, and data derived from strictly necessary cookies, together with analytics data where you consent to the relevant cookies.

We do not knowingly seek to collect special categories of data within the meaning of Article 9 of the GDPR. Where a candidate or correspondent voluntarily includes such information, it will be processed solely to the extent strictly required and erased where it is not pertinent.

4. Sources and Methods of Collection

Personal Data reaches the Company through three principal channels. First, you may furnish it directly by completing an enquiry or contact form hosted on the Website. Second, a substantial number of buttons function as electronic mail links; activating such a button opens the mail application installed on your own device, with the Company address pre-populated, after which any data contained in the message you compose is transmitted to us by ordinary correspondence. Third, certain technical data is gathered automatically as you navigate, by means of cookies and comparable technologies described in the Cookie Policy.

When you transmit data on behalf of a third party, you warrant that you are entitled to do so and that the individual concerned has been duly informed of the processing described in this Policy.

5. Purposes of Processing and Legal Bases

Every processing operation rests upon one of the legal bases enumerated in Article 6 of the GDPR. The purposes pursued, together with their corresponding legal grounds, are detailed below.

  • Responding to enquiries: To receive, assess, and reply to the requests you submit through a form or by electronic mail, the processing is grounded upon the taking of steps at your request prior to a possible engagement, pursuant to Article 6(1)(b), and, where pertinent, upon our legitimate interest in attending to communications addressed to us, pursuant to Article 6(1)(f).

  • Managing commercial relations: To evaluate prospective charter requirements and to prepare any subsequent offer, the processing relies upon Article 6(1)(b), since it is undertaken with a view to the conclusion or performance of an agreement to which you may become a party.

  • Handling job applications: To examine the suitability of candidates for current vacancies, the processing rests upon the pre-contractual basis under Article 6(1)(b); where a candidate consents to the retention of an application for the assessment of future opportunities, the further processing is founded upon consent within the meaning of Article 6(1)(a).

  • Operating and securing the Website: To ensure the proper functioning, stability, and security of the Website through strictly necessary cookies, the processing is justified by our legitimate interest under Article 6(1)(f), read together with the applicable ePrivacy rules.

  • Measuring audience through analytics: Google Analytics is deployed on the Website to measure audience; the associated non-essential cookies, and the related processing of usage data, are carried out exclusively upon your prior consent, pursuant to Article 6(1)(a).

  • Complying with legal obligations: To satisfy obligations imposed by accounting, tax, aviation, or other legislation, and to respond to legitimate requests from public authorities, the processing is grounded upon Article 6(1)(c).

Where consent constitutes the legal basis, you may withdraw it at any moment, without affecting the lawfulness of processing carried out prior to such withdrawal.

6. Cookies, Analytics, and Use of Google Analytics

The Website employs cookies that are strictly necessary for its technical operation together with analytics cookies associated with Google Analytics, which the Company has implemented to measure audience. Analytics cookies, which do not qualify as strictly necessary, are set only after you have given your free, specific, informed, and unambiguous consent through a compliant consent mechanism, with equally prominent options to accept or to refuse and without any pre-ticked boxes. Until valid consent has been obtained, non-essential cookies remain inactive.

Where analytics data is transferred to Google, such transfer is governed by the safeguards described in Section 8 below.

7. Recipients and Processors

Personal Data is treated as confidential and is disclosed solely to the recipients enumerated below, each of which is bound by appropriate confidentiality and data-protection obligations.

  • Hosting and form provider: The Website is built and hosted on the Webflow platform, which acts as a processor and may store form submissions and related data on its infrastructure. Webflow processes such data on documented instructions, under a data-processing addendum incorporating the contractual safeguards required by Article 28 of the GDPR.

  • Analytics provider: Subject to your consent, Google acts as a processor in respect of the usage data generated by the analytics cookies set through Google Analytics.

  • Professional advisers and service providers: Information-technology contractors, legal counsel, and accounting professionals may access data strictly to the extent necessary for the performance of their respective mandates.

  • Public authorities: Competent administrative, judicial, or supervisory bodies may receive data where disclosure is mandated by law or required for the establishment, exercise, or defence of legal claims.

We do not sell Personal Data, and we do not disclose it for the purposes of newsletters, email marketing, advertising campaigns, remarketing, or tracking pixels, none of which is employed on the Website.

8. International Transfers of Personal Data

Certain processors engaged by the Company are established outside the European Economic Area, in particular in the United States. Webflow, our hosting and form provider, stores data on infrastructure located in the United States. Transfers of that nature are lawful because Webflow is certified under the EU-U.S. Data Privacy Framework, in respect of which the European Commission adopted an adequacy decision on 10 July 2023, subsequently extended to the European Economic Area. As an additional safeguard, the Webflow data-processing addendum incorporates the Standard Contractual Clauses approved by the European Commission, which apply where reliance upon the adequacy decision is not available.

Transfers to Google in the United States, arising from the use of Google Analytics, are likewise supported by Google's certification under the EU-U.S. Data Privacy Framework and, as a complementary measure, by the Standard Contractual Clauses. By such means, the Company ensures that any data leaving the European Economic Area benefits from a level of protection essentially equivalent to that guaranteed within the Union, in accordance with Chapter V of the GDPR. Upon written request addressed to office@euaircharter.com, you may obtain further particulars concerning the safeguards applied to a specific transfer.

9. Retention of Data

Personal Data is retained only for so long as is necessary to fulfil the purposes for which it was collected, after which it is erased or irreversibly anonymised. The applicable periods reflect both operational requirements and statutory obligations.

  • Enquiry and contact data: Data relating to a request that does not result in a contractual relationship is kept for the time required to respond and for a reasonable subsequent period, not normally exceeding twelve (12) months, after which it is deleted unless a longer retention is justified by a legitimate interest or a legal duty.

  • Recruitment data: Applications are retained for the duration of the relevant selection procedure and, where the candidate has expressly consented, for a further period not exceeding six (6) months for the assessment of future vacancies, following which they are erased.

  • Contractual and accounting data: Where a charter or commercial relationship is concluded, the associated records are retained for the periods prescribed by Bulgarian tax and accounting legislation.

  • Technical data: Cookie-related data is retained for the durations specified in the Cookie Policy.

10. Your Rights as a Data Subject

Within the limits and conditions established by Articles 15 to 22 of the GDPR, you are entitled to exercise the rights described below.

  • Right of access: You may obtain confirmation as to whether your data is being processed and, where it is, a copy of that data together with the relevant information.

  • Right to rectification: You may request the correction of inaccurate data and the completion of incomplete data.

  • Right to erasure: You may request the deletion of your data where one of the grounds set out in Article 17 applies.

  • Right to restriction: You may request that processing be limited in the circumstances enumerated in Article 18.

  • Right to data portability: You may receive the data you have provided in a structured, commonly used, and machine-readable format, and request its transmission to another controller where technically feasible.

  • Right to object: You may object, on grounds relating to your particular situation, to processing founded upon legitimate interest.

  • Right to withdraw consent: Where processing rests upon consent, you may withdraw it at any time, without prejudice to the lawfulness of prior processing.

To exercise any of these rights, kindly write to office@euaircharter.com. We shall respond without undue delay and, in any event, within one month of receipt of the request, a period that may be extended where the complexity or number of requests so requires. Should you consider that the processing of your data infringes the law, you are entitled to lodge a complaint with the Commission for Personal Data Protection of the Republic of Bulgaria, whose resources are accessible at https://www.cpdp.bg, or with the supervisory authority of your country of residence, without prejudice to any judicial remedy.

11. Security of Processing

In compliance with Article 32 of the GDPR, the Company implements appropriate technical and organisational measures designed to ensure a level of security commensurate with the risk presented by the processing. Such measures include the encryption of communications through transport-layer security, restricted access to data on a need-to-know basis, and contractual obligations imposed upon processors. Notwithstanding the diligence applied, transmission of information over the internet cannot be guaranteed to be entirely secure, and you are accordingly encouraged to exercise caution when communicating sensitive details by unencrypted electronic mail.

12. Children's Data

The Website is directed at a professional, adult audience and is not intended for minors. We do not knowingly collect Personal Data relating to children. Where it comes to our attention that data concerning a minor has been transmitted without an appropriate legal basis, that data will be erased without undue delay.

13. Automated Decision-Making

The Company does not carry out automated decision-making producing legal effects, or similarly significant effects, in respect of data subjects within the meaning of Article 22 of the GDPR. Should such processing be introduced in the future, you will be informed beforehand and provided with the safeguards prescribed by law.

14. Amendments to This Policy

Revision of the present Policy may become necessary to reflect developments in the Company's activities, in the technologies deployed on the Website, or in the applicable legal framework. Any updated version will be published on this page, bearing the date of its most recent revision. Where a change materially affects your rights, reasonable efforts will be made to bring it to your attention. Continued use of the Website following publication of an amended version constitutes acknowledgement of the revised text.

15. Contact

For any request, clarification, or concern relating to the processing of your Personal Data, or to exercise any of the rights described above, please contact the Controller at office@euaircharter.com or by post at 35 Pavel Krasov Street, Gorublyane Residential Area, Mladost District, 1138 Sofia, Bulgaria.

Considering a Long-Term Partnership With Us?

Whether you are an airline seeking ACMI capacity or a tour operator planning seasonal routes, European Air Charter is here to support your operation.

Email Our Team