ONE Aero Solutions (“ONE”, “we”, “us”) operates a B2B crew positioning platform. This policy explains what personal data we collect, why we collect it, and your rights under the General Data Protection Regulation (GDPR).
We collect the following personal data when you register and use ONE: • Name (first and last) • Work email address • Company name and IATA code • Crew positioning search history (departure/destination cities, dates, crew count) • Account credentials (password stored as a one-way bcrypt hash — we never store plaintext passwords) We do not collect payment information directly. We do not collect sensitive personal data.
We process your data under the following legal bases (GDPR Art. 6): • Contract performance — to deliver the crew positioning service you signed up for • Legitimate interest — to improve routing accuracy and detect abuse • Legal obligation — to maintain audit logs required under applicable aviation regulations We do not use your data for advertising or sell it to third parties.
Active account data is retained for the duration of your subscription. Positioning history is retained for 24 months to support audit and compliance requirements. You may request earlier deletion (see Section 6).
We share data only with the following sub-processors, all bound by GDPR-compliant data processing agreements: • Supabase Inc. — database and authentication hosting (EU region) • Duffel Technologies Ltd. — flight offer search API • Google LLC — ground transport distance and duration estimates (anonymised origin/destination pairs only)
ONE uses only strictly necessary session cookies to maintain your authenticated session. No tracking or advertising cookies are used. No cookie consent banner is required.
As a data subject you have the right to: • Access the personal data we hold about you • Correct inaccurate data • Request deletion of your data ("right to be forgotten") • Restrict or object to processing • Data portability To exercise any of these rights, contact us at privacy@one.aero. We will respond within 30 days.
Data Controller: ONE Aero Solutions Email: privacy@one.aero If you believe we have not handled your data correctly, you have the right to lodge a complaint with your national data protection authority.