Privacy Notice

Privacy Notice

Last updated: 24 September 2026

Bornholm.Aero ApS, CVR 44395258, Søndre Landevej 2, 3700 Rønne, Denmark, is the controller of the personal data described in this notice. Questions and privacy requests can be sent to info@bornholm.aero or +45 91 54 75 30.

What we use your data for

  • Website operation and security: technical request and security data, based on our legitimate interest in providing and protecting the service (GDPR Art. 6(1)(f)).
  • Flight enquiries and bookings: contact details, passengers, selected flight, departure time, customer notes and correspondence, to take steps at your request and perform the booking contract (Art. 6(1)(b)).
  • Payment and accounting: order, amount, payment status and transaction references, to perform the contract and meet legal accounting obligations (Art. 6(1)(b) and (c)). We do not store full payment-card details.
  • Operational planning: necessary booking details may be placed in our restricted operational calendar, based on contract performance and our legitimate interest in safely operating booked flights.
  • AI flight assistant: questions, answers, session identifier and technical/security information may be processed to answer enquiries and improve support. Do not provide payment-card, identity-document, health or other sensitive information. Quality logs are currently kept for up to 90 days.
  • Marketing and attribution: Meta Pixel, Meta Conversions API and WooCommerce order attribution operate only where you have given marketing consent. Product information is synchronized separately with our Facebook/Instagram commerce catalog.

Data we collect

Depending on your use of the site, this can include name, postal address, country, telephone number, email address, order and booking numbers, passenger count, flight choice, departure time, notes, correspondence, payment status and reference, IP address, browser/device information, language, page URL and security logs. Required checkout fields are needed to complete the booking, payment or accounting process unless marked optional.

Recipients and international transfers

We use service providers only as necessary, including our website/email host, WordPress and WooCommerce, Revolut for payments, Google Workspace/Calendar for restricted operational planning, and OpenAI for the flight assistant. Apple services may be used for wallet passes or staff-app notifications. Product data is synchronized with Meta for our Facebook/Instagram catalog. If you give marketing consent, Meta may also receive website and purchase-event information through Pixel and Conversions API. Some providers may process data outside the EEA under an adequacy decision or approved contractual safeguards.

How long we keep data

Accounting records are normally retained for five years from the end of the relevant financial year. Temporary booking holds are removed after expiry; failed or cancelled operational records are deleted or anonymised when no longer needed. Confirmed booking information is kept for service, safety and claims purposes and then minimised or anonymised when those purposes end. Security logs are normally retained for up to 90 days unless needed for an incident. AI quality logs are retained for up to 90 days. Backups expire according to the hosting backup cycle.

Your rights

You may request access, correction, deletion, restriction or portability of your data and object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it at any time without affecting earlier processing. Legal duties, payment disputes or safety obligations can limit deletion. Contact us at info@bornholm.aero. You may also complain to Datatilsynet.

Cookies

See our Cookie Policy. Non-essential cookies and tracking require your prior choice in the consent banner.