Privacy Policy & Data Protection Compliance
Privacy Policy & Data Protection Compliance
CARION Aviation Services is committed to protecting the privacy and personal data of its clients, crew members, passengers, and business contacts. This policy explains how we collect, use, and protect personal information in accordance with the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 on Data Protection (LOPDGDD).
| Company | CARION Aviation Services |
| CIF | B75532069 |
| Registered Address | Serrano 110, 28006 Madrid, Spain |
| Data Protection Contact | operations@carionaviation.com |
| Supervisory Authority | Agencia Española de Protección de Datos (AEPD) — www.aepd.es |
Name, position, company, email address, phone number and business address of clients, operators, FBO contacts and commercial partners.
Flight details, aircraft registration, arrival and departure times, service requests and handling instructions provided for the execution of contracted services.
Where required for the delivery of VIP concierge or cabin services: passenger names, special requirements and preferences, handled under strict confidentiality and NDA.
Identity, contact details, qualifications and employment data of CARION staff and contracted personnel, processed for HR and operational compliance purposes.
Processing necessary for the performance of a contract or pre-contractual steps at the request of the data subject. (Art. 6.1.b GDPR)
Processing required to comply with applicable Spanish and EU law, including labor, tax, aviation safety and anti-corruption obligations. (Art. 6.1.c GDPR)
Commercial communications, service improvement and operational security, where our legitimate interests are not overridden by individual rights. (Art. 6.1.f GDPR)
Where no other legal basis applies, CARION will request explicit consent prior to processing, which may be withdrawn at any time without detriment. (Art. 6.1.a GDPR)
Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law:
- Client and operational data: 5 years from the end of the service relationship, in accordance with Spanish commercial law (Código de Comercio, Art. 30).
- Tax and invoicing records: 4 years, as required by the Spanish General Tax Law (Ley 58/2003).
- VIP and passenger data: Deleted within 30 days of service completion unless retention is required by law or explicitly agreed with the client.
- Personnel records: Retained for the duration of the employment relationship plus 4 years, in accordance with the Estatuto de los Trabajadores.
Under the GDPR and LOPDGDD, all data subjects have the following rights, exercisable at any time by contacting operations@carionaviation.com:
For any query or request relating to the exercise of your data protection rights, please contact CARION Aviation Services directly. If you believe your rights have not been adequately addressed, you have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD).