Privacy Policy & Cookie Disclosures

Effective Date: October 29, 2026 | Last Updated: October 29, 2026

1. Identity and Contact Details of the Data Controller

The entity responsible for processing your personal data (the "Data Controller") is:

• Company Name: KAZAWEB, S.L.U.
• Tax Identification Number (NIF): B42761254
• Registered Address: Lugar Rebordelo 35, Planta 2, 15930 Boiro, A Coruña, Spain
• Data Protection Contact: info@jetbooking.online
• Website: https://jetbooking.online
• Supervisory Authority: Agencia Española de Protección de Datos (AEPD), Jorge Juan 6, 28001 Madrid, Spain (www.aepd.es).

2. What Personal Data We Collect

We may collect and process the following categories of data:

• Charter, Helicopter, and Sales Enquiry Information: Origin, destination, dates, departure times, passenger count, preferred aircraft category, full name, email address, telephone number, and optional bespoke travel preferences submitted through our enquiry forms or interactive widgets.
• Corporate Jet Card and Acquisition Mandates: Annual flight hours, fleet category requirements, corporate entity names, and confidential mandate parameters submitted under Mutual Non-Disclosure Agreements (M-NDA).
• Technical and Usage Data: Internet Protocol (IP) address, browser type and version, device identifier, operating system, referral source, pages visited, time spent on pages, and standard server log metrics.
• Communication Preferences: Optional consent records for receiving email updates, curated empty-leg alerts, or market intelligence bulletins.

3. Legal Basis and Purposes of Processing (GDPR Article 6)

We process your personal information only when there is a lawful legal basis:

• Pre-Contractual Measures (Art. 6.1.b GDPR): To process your flight, helicopter, jet card, or aircraft acquisition enquiry, coordinate aircraft availability with our network partner (Villiers Jets Ltd), and present confirmed pricing and itineraries.
• Legitimate Interests (Art. 6.1.f GDPR): To maintain platform security, prevent fraudulent enquiries, optimize technical performance, and conduct anonymous statistical analysis of private aviation search trends.
• Consent (Art. 6.1.a GDPR): To send marketing communications, newsletters, or empty-leg notifications via MailerLite, and to store or read non-essential advertising and analytics cookies. Consent can be withdrawn at any time.
• Legal Compliance (Art. 6.1.c GDPR): To comply with tax, commercial, and accounting obligations under Spanish and European Union law.

4. Google AdSense, Third-Party Advertising & Cookie Disclosures

Please review how cookies and advertising technologies operate on our website:

• Third-Party Vendor Cookies: Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to JetBooking or other websites across the Internet.
• Personalized Advertising: Google's use of advertising cookies (such as DoubleClick or DART cookies) enables it and its partners to serve ads to users based on their visits to this site and/or other sites on the Internet.
• Cookie Consent: When you access our website from the European Economic Area (EEA), the United Kingdom, or Switzerland, analytics and advertising cookies are disabled by default (Google Consent Mode v2) and you are shown a notice to accept or reject them, with both options equally available. Your choice is stored on your device for up to 12 months and you can change it at any time through the "Cookie settings" link in the footer. If personalised advertising is served in these regions, an IAB Europe TCF v2.2 certified Consent Management Platform will be used.
• How to Opt Out of Personalized Advertising:
  • You can opt out of personalized advertising by visiting Google Ads Settings.
  • Alternatively, you can opt out of third-party vendor use of cookies for personalized advertising by visiting the Digital Advertising Alliance Consumer Choice page (AboutAds) or the Network Advertising Initiative (NAI) opt-out page.
  • Users located in Europe can manage behavioural advertising preferences via Your Online Choices (EDAA).

5. Affiliate Disclosure & Data Transfers to Villiers Jets

JetBooking is an independent marketing portal and an affiliate partner of Villiers (Villiers Jets Ltd, Partner ID: 6825). JetBooking is not a direct air carrier, air broker of record, or aircraft operator.

When you complete a flight charter enquiry or request confirmed pricing on our platform, the flight parameters and contact information you provide are securely transmitted via encrypted API or direct referral to Villiers Jets Ltd so their 24/7 flight operations desk can source available aircraft from licensed AOC operators and provide confirmed quotes. Villiers processes personal data according to their independent privacy policy, accessible on their official platform.

6. International Data Transfers

Where personal data is transferred to service providers or partners located outside the European Economic Area (EEA)—such as cloud hosting, analytics, or global aviation operations—such transfers are executed in accordance with Chapter V of the GDPR, relying on:

• Adequacy decisions issued by the European Commission (e.g., EU-US Data Privacy Framework); or
• Standard Contractual Clauses (SCCs) approved by the European Commission, combined with technical safeguards such as TLS 1.3 encryption in transit and AES-256 encryption at rest.

7. Data Retention

We retain your personal information only for the period necessary to fulfill the purposes outlined in this policy:

• Charter Enquiries: Retained for the duration of the enquiry and subsequent booking follow-up, and archived for up to 3 years to defend against potential legal claims or demonstrate regulatory compliance.
• Newsletter / Email Subscriptions: Maintained until you unsubscribe or withdraw consent via the "Unsubscribe" link included in every communication.
• Web Server Logs and Analytics: Aggregated and anonymized within standard retention windows (14 months in Google Analytics 4).

8. Your Rights Under GDPR (EEA & UK Visitors)

Under Regulation (EU) 2016/679 (GDPR) and the UK Data Protection Act 2018, you possess the following enforceable rights:

• Right of Access (Art. 15): Obtain confirmation as to whether your personal data is being processed and receive a copy of that data.
• Right to Rectification (Art. 16): Request correction of inaccurate or incomplete personal information.
• Right to Erasure / Right to be Forgotten (Art. 17): Request deletion of your personal data when it is no longer required for the purposes collected.
• Right to Restriction of Processing (Art. 18): Restrict the processing of your data under specific statutory circumstances.
• Right to Data Portability (Art. 20): Receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object (Art. 21): Object at any time to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Revoke any previously granted consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our Data Protection desk at info@jetbooking.online specifying your request and proof of identity. If you believe your rights have not been respected, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es or your national supervisory authority.

9. Notice to California and US Residents (CCPA / CPRA)

This section applies exclusively to California residents and consumers under applicable US State Privacy Laws (including California, Virginia, Colorado, Connecticut, and Utah):

• Categories of Personal Information Collected: Identifiers (name, email, IP address), commercial information (flight search history, aircraft inquiries), and Internet/electronic network activity.
• Sources: Directly from you when submitting forms, and automatically via cookies and device telemetry.
• No Sale of Personal Information: JetBooking does NOT sell personal information to third parties in exchange for monetary payment.
• Sharing for Cross-Context Behavioral Advertising: We may share pseudonymous browsing data with advertising networks (such as Google AdSense) for targeted advertising. You have the right to opt out of such sharing through the "Cookie settings" link in the footer or by sending an opt-out signal (Global Privacy Control - GPC), which our website honours automatically by disabling advertising storage and personalisation.
• Consumer Rights: You have the right to know what personal data is collected, request deletion, request correction of inaccurate data, and not receive discriminatory treatment for exercising your privacy rights.

10. Security Measures

JetBooking implements technical, organizational, and physical security measures to safeguard your personal data against accidental loss, unauthorized access, disclosure, or destruction. All data transmissions between your browser and our servers are encrypted using modern Transport Layer Security (TLS 1.3) protocols.

11. Amendments to this Privacy Policy

We reserve the right to modify or update this Privacy Policy to reflect regulatory changes or platform enhancements. Significant amendments will be notified via prominent notice on our website or through updated effective dates.

12. Contact Information

If you have any questions, inquiries, or requests regarding this Privacy Policy or our data handling practices, please write to:

KAZAWEB, S.L.U.
Attention: Data Protection Office
Lugar Rebordelo 35, Planta 2, 15930 Boiro, A Coruña, Spain
Email: info@jetbooking.online