Data Protection Policy

The aim of this document is to explain how Elysium Jet (hereafter also referred to as “we” or “us”) collects, processes, and protects personal data that you provide when communicating with us through any media, including but not limited to Elysium Jet’s online flight request forms, website chat, phone calls, emails, and text messages.

This information is provided pursuant to the General Data Protection Regulation (Article 13; Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016) and applicable United States data protection laws, including the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

Please note that Elysium Jet does not carry out any automated decision-making or profiling.

1. Identity and contact details of the controller

The data controller is Elysium Jet LLC, a company registered in the State of Delaware, United States of America. Elysium Jet provides international private aviation brokerage services to clients worldwide.

For any data protection or privacy-related concern, please contact us at the following address:
Email: it@elysiumjet.com

2. Purposes and legal basis for the processing

We collect personal data for the following purposes:

a. To provide our services to you

This is the primary reason why we collect personal data. We require information about you in order to respond to flight requests (submitted via online forms, phone, email, or any other communication channel), prepare charter quotations, draft and conclude aircraft charter service contracts, issue invoices, organise flights, and ensure proper operational follow-up. In this regard, the collection of personal data is a contractual requirement, not a statutory one. It is a condition for entering into any contract with Elysium Jet. Failure to provide the required data may result in the impossibility of concluding a contract and providing the requested services.

For this purpose, the legal basis for processing personal data is the necessity to process personal data in order to enter into or perform a contract with you (GDPR Article 6(1)(b)) and legitimate business purposes under applicable United States law.

b. To improve your customer experience

We process personal data in order to improve our services. This includes tailoring our services to your needs and preferences, facilitating the use of our website by analysing user browsing behaviour, and sending promotional or informational content by email or online advertising. If you have requested or used our services and provided personal data to Elysium Jet in this context, we may use your contact details to send you marketing communications relating to similar services, unless you have opted out.

You may opt out at any time by clicking on the “unsubscribe” link in promotional emails or by contacting us using the contact details provided above.

For this purpose, the legal basis for processing is Elysium Jet’s legitimate interest in improving its services (GDPR Article 6(1)(f)) and legitimate business interests under United States data protection laws.

c. To comply with the law

In certain cases, we are legally required to collect and process personal data. This may occur, for example, when financial institutions carry out anti-fraud or compliance checks, or in the event of a lawful request by a governmental, judicial, or regulatory authority.

For this purpose, the legal basis for processing personal data is compliance with a legal obligation under GDPR (Article 6(1)(c)) and applicable United States law.

3. Type of information collected

The personal data collected may include:

  • Contact details, such as name, surname, phone number, email address, and postal address;
  • Personal details, such as accompanying persons, personal preferences, and pets;
  • Travel information, such as passport details (where required), aircraft and catering preferences, departure and destination locations, and flight dates and times;
  • Usage data, including information relating to your use of Elysium Jet’s services and website.

4. Recipients of the personal data

Personal data is processed internally by employees and authorised representatives of Elysium Jet. Access to personal data is strictly limited to individuals whose involvement is necessary for the intended purpose. In addition, under the circumstances listed below, personal data may be shared with third parties:

  • Aircraft charter services: aircraft operators, airport terminals, handling agents, and other aviation service providers necessary for the performance of the contract;
  • Data storage: cloud hosting providers and server infrastructure providers;
  • Communications: email and messaging service providers;
  • Website use: analytics providers and website IT developers;
  • Payments and fraud prevention: banks, payment service providers, and e-payment platforms.

All third parties are required to implement appropriate data protection and confidentiality measures.

5. Personal data transfer to a third country

Depending on the services requested, personal data may be transferred to countries outside the European Union or European Economic Area (“third countries”), including the United States. Such transfers may occur when flights are operated to or from third countries, when aircraft operators are based outside the EU, or when technical infrastructure is located outside the EU. In all such cases, transfers are based on the necessity to process personal data in order to enter into or perform a contract, and appropriate safeguards are implemented in accordance with GDPR and applicable United States data protection laws.

6. Storage period of the personal data

Personal data is stored only for as long as necessary to fulfil the purposes described above. This generally means that personal data is retained for the duration of the contractual relationship and for possible future contracts with Elysium Jet. Certain personal data may be retained for a longer period where required to comply with legal, accounting, or tax obligations.

7. Confidentiality and security measures

Personal data is stored securely using appropriate technical and organisational measures designed to prevent unauthorised access, disclosure, alteration, or loss. Access to internal systems is restricted and secured through authentication mechanisms, and personnel handling personal data receive training on data protection and confidentiality obligations.

8. Your rights

a. Rights under the General Data Protection Regulation (EU)

Under the GDPR, you have the following rights:

  • Right of access (Article 15): request confirmation as to whether we process your personal data and obtain access to such data;
  • Right to rectification (Article 16): request correction of inaccurate or incomplete personal data;
  • Right to erasure (“right to be forgotten”) (Article 17);
  • Right to restriction of processing (Article 18);
  • Right to object (Article 21), particularly for direct marketing purposes;
  • Right to data portability (Article 20);
  • Right to lodge a complaint with a competent supervisory authority in your country of residence.

b. Rights under United States data protection laws

If you are a United States resident, including a California resident, you also have the right to:

  • Request access to the personal data we collect about you;
  • Request correction or deletion of your personal data;
  • Opt out of the sale or sharing of personal data (note: Elysium Jet does not sell personal data);
  • Not be discriminated against for exercising your privacy rights.

9. Exercising your rights

If you wish to exercise any of the rights listed above or have any enquiry regarding data protection or privacy, please send your request to:
Email: it@elysiumjet.com