LEGAL
Privacy Policy
Last updated: 4 August 2026
TerraFly GmbH respects your privacy and is committed to protecting the personal data you share with us. This policy explains what we collect, why we collect it, how it is handled, and the rights available to you.
1. Information We Collect
We collect only the information needed to respond to your enquiry and to deliver the services you ask for. It is provided directly by you through our contact and enquiry forms.
- Name, and company or organisation where given
- Email address, and telephone or WhatsApp number
- Enquiry type and the details of your request, including departure and destination cities, travel dates, crew requirements or consulting areas where relevant
- Any additional information you choose to include in your message
We do not knowingly collect special categories of personal data, and we ask that you do not submit such information through our forms.
2. How We Use Your Information
Your information is used to respond to enquiries and provide the quotations, charter arrangements, crew support or consulting services you request; to communicate with you about an ongoing request or engagement; to maintain internal records of enquiries and agreements; and to meet the legal, regulatory and accounting obligations that apply to us.
We do not use your data for automated decision-making or profiling.
3. Legal Basis for Processing
Where the GDPR applies, we process personal data on the basis of your consent when you submit an enquiry, our legitimate interest in responding to prospective and existing clients, the necessity of processing in order to perform a contract with you, and compliance with our legal obligations.
4. We Never Sell Your Data
TerraFly does not sell, rent or trade personal data. We do not share your information with third parties for their own marketing purposes. Data is disclosed only to the service providers described below, or where we are required to disclose it by law.
5. Third-Party Service Providers
Enquiries submitted through this website are transmitted and processed using trusted third-party infrastructure and email delivery providers acting on our instructions. These providers process data solely to deliver the service to us, and are bound by contractual confidentiality and data protection obligations.
Our website may also use analytics services to understand how the site is used. Further detail is set out in our Cookie Policy.
6. International Data Transfers
Some of our service providers operate outside Switzerland and the European Economic Area. Where personal data is transferred internationally, we ensure an adequate level of protection through recognised safeguards such as adequacy decisions or standard contractual clauses.
7. Data Security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or loss. Enquiry data is transmitted over encrypted connections, and access is limited to personnel who need it to carry out their work.
No method of transmission over the internet is entirely secure, and we cannot guarantee absolute security.
8. Data Retention
We retain enquiry data for as long as is necessary to respond to your request and to maintain a record of our correspondence. Where an engagement proceeds, records are kept for the duration of the relationship and for the retention periods required under Swiss commercial and accounting law. Data that is no longer required is deleted or anonymised.
9. Your Rights
Subject to applicable law, you have the right to:
- Request access to the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request deletion of your data where no overriding legal basis for retaining it applies
- Object to processing, or request that it be restricted
- Request a copy of your data in a portable format
- Withdraw consent at any time, without affecting processing carried out beforehand
You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner, or with your local supervisory authority where the GDPR applies.
10. Regulatory Compliance
This policy is aligned with the Swiss Federal Act on Data Protection (FADP), the EU General Data Protection Regulation (GDPR) where applicable, and other privacy legislation relevant to our operations.
11. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or in legal requirements. The current version is always available on this page.
12. Contact
To exercise any of the rights described above, or to ask a question about how your data is handled, please get in touch through our Contact page.
