Privacy Policy — Lazare Airlines VA

Contact

For privacy enquiries or to exercise your rights, contact cptlazare@lazare-airlines.eu (preferred) or contact@lazare-airlines.eu.

Data we collect

• Account: display name, email, password (hashed), callsign, VA rank, aircraft assignments.
• Operational: flight plans, PIREPs, ACARS logs, performance metrics, timestamps.
• Technical: IP address, device/browser info, server logs, security events.
• Cookies: session (auth/CSRF) and optional preferences.
• Third-party identity (optional): when you link services (VATSIM Connect, Discord, SayIntentions…), we may receive a unique ID and minimal profile data.

Why we process your data (legal bases)

• Provide and administer the VA (contract): accounts, authentication, flight records, ranks & awards.
• Security & abuse prevention (legitimate interests): protect accounts/infrastructure, detect misuse.
• Compliance (legal obligation/legitimate interests): respond to lawful requests, enforce VA rules.
• Optional integrations (consent/contract): VATSIM Connect SSO, ACARS, SayIntentions, etc.
• Communications (legitimate interests/consent): VA service emails; marketing only if opt-in.

Sharing with third parties

We do not sell your data. We may share minimal data with:

• Infrastructure providers (hosting, CDN, email) strictly to operate the Services.
• Integrations you enable: VATSIM Connect, vmsACARS/phpVMS, SayIntentions, Discord (only necessary identifiers/metadata).
• Moderation & compliance: where needed for investigations or legal obligations.

International transfers

Some providers may operate globally. We rely on appropriate safeguards (e.g., Standard Contractual Clauses) and data minimization where applicable.

Retention

• Account: while the account is active. Upon deletion request, we delete/anonymize unless retention is required for legitimate reasons.
• Operational logs: kept for VA operations and statistics; anonymized after account deletion by removing direct identifiers.
• Security logs: typically up to 12 months (longer if required for investigations).

Your rights

Depending on your location (e.g., EEA/UK), you may have rights to access, rectify, erase, restrict, port your personal data, and object to certain processing. You can withdraw consent at any time where processing is based on consent.

Cookies

We use essential cookies for authentication and security. Any optional preferences/analytics cookies will be disclosed via a banner or settings. You can manage cookies in your browser.

Security

We apply reasonable technical and organizational measures (encryption in transit, hashed passwords, role-based access). No Internet service is 100% secure.

Children

The Services are intended for users aged 16+ (or your local legal age for online consent). If we learn we collected data from a younger user, we will delete it.

Changes to this policy

We may update this policy. The “Last updated” date reflects the current version. If changes are material, we may provide additional notice.