Privacy Policy

Last updated: March 2026

Skyconseil SARL (“Skyconseil”, “We”, “Us”, “Our”) considers the protection of personal data one of its core values. We are committed to safeguarding Your privacy rights and ensuring that Your experience on Our website (the “Site”) is both transparent and secure.

This Privacy Policy explains how We collect, use, share and store personal data when You interact with the Site. Our processing complies with the EU General Data Protection Regulation (GDPR). If You have any questions, please contact Us at privacy@skyconseil.fr.

Table of contents

  1. 1. Data Controller and Contact
  2. 2. Requirements to Provide Your Data
  3. 3. Processing of Your Personal Data
  4. 4. Recipients of Personal Data
  5. 5. International Transfers
  6. 6. Your Data-Protection Rights
  7. 7. Automated Decision-Making
  8. 8. Protection of Your Personal Information
  9. 9. Amendments to This Policy

1. Data Controller and Contact

Your personal data are processed by Skyconseil SARL, as Data Controller, a company with registered office at 1 Rue du Professeur Pierre Vellas, Bâtiment B08, 31300 Toulouse, France; Company registration number: 535 382 568.

  • Email: privacy@skyconseil.fr
  • Address: 1 Rue du Professeur Pierre Vellas, Bâtiment B08, 31300 Toulouse, France
  • Data Protection contact: Information Security Manager (ISM)

2. Requirements to Provide Your Personal Data

2.1. Minimum age

You must be at least 18 years old and have sufficient legal capacity to use this Site in order to provide Us with Your personal data. This Site is directed at aviation industry professionals. It is not directed to minors, nor does Skyconseil knowingly collect data from them.

2.2. Accuracy

When You provide Us with Your data, You must provide real, accurate and up-to-date information. You are responsible for informing Us of any changes and for the accuracy of the data provided at all times.

3. Processing of Your Personal Data

3.1  Contact Forms and Communications
How we collect
Contact form; emails to contact@skyconseil.fr or other Skyconseil addresses
Data collected
  • Name (first name; last name optional), email address
  • If contacting on behalf of a company: company name, contact person name
  • Any information voluntarily included in the message body
Purpose
  • To respond to your requests and follow up as needed
  • To improve our customer service quality (data anonymised at end of retention period for statistical analysis)
Legal basis
  • Consent (Art.6(1)(a)) — for responding to your enquiry
  • Legitimate interest (Art.6(1)(f)) — for anonymised statistical analysis of support interactions to improve service quality. To exercise your right to object, contact privacy@skyconseil.fr
Retention period
3 years from last contact (in line with CNIL guidance for B2B contact data). After this period, data is anonymised or deleted. Blocked data may be retained for the additional period required by applicable law to respond to legal claims.
Sharing
Not shared beyond the recipients listed in Section 4.
3.2  Newsletter and Commercial Communications
How we collect
Newsletter registration checkbox on the contact form
Data collected
Name and email address
Purpose
Sending newsletters and commercial communications related to Guidor and Skyconseil services
Legal basis
Consent (Art.6(1)(a)) — given by ticking the registration checkbox. You may withdraw consent at any time by clicking the unsubscribe link in any communication, or by emailing privacy@skyconseil.fr. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
Retention period
For as long as you remain subscribed. After unsubscribing, data is blocked for the legally required period to respond to any claims, then deleted.
Sharing
Not shared beyond the recipients listed in Section 4.
3.3  Browsing the Site (Cookies)
How we collect
Cookies and tracking technologies when you visit the Site
Purpose
Site functionality, analytics, spam and abuse prevention (Google reCAPTCHA)
Legal basis
Consent for non-essential cookies; legitimate interest for strictly necessary technical cookies
More information
Please refer to our Cookie Policy for full details of the cookies used, their duration and how to manage your preferences. We use Google reCAPTCHA to protect the Site from spam and abuse; its use is subject to the Google Privacy Policy and Terms of Service.

4. Recipients of Personal Data

We may share your personal data with the following categories of recipients:

  • Service providers essential to the Site: We share data with hosting, email and analytics providers that process data on our behalf under data processing agreements. They may only process your data according to our instructions and not for their own purposes.
  • Public authorities: We may disclose data to competent authorities when required by law, to prevent fraud or abuse, or in response to a valid legal request.
  • Corporate transactions: In the event of a merger, acquisition or sale of assets, user data may be transferred to the successor entity.
  • Third parties after anonymisation: We may disclose aggregated or anonymised data (which cannot identify you) for any purpose.
  • Other third parties: We will only share data with third parties outside the scope of this Policy with your consent or on another lawful basis.

Third-party links: This Policy applies only to data collected through this Site. Third-party sites accessible via links on this Site have their own privacy policies, which We recommend you review before providing any personal data.

5. Transfer of Personal Data to Third Countries

Some of our service providers are located outside the European Economic Area (EEA), in particular the United States. We have implemented appropriate safeguards to ensure that any such transfers provide a level of protection equivalent to that required under GDPR.

The safeguards we rely on are:

  • Standard Contractual Clauses (SCCs) approved by the European Commission under Art.46(2)(c) GDPR — our primary transfer mechanism
  • EU–US Data Privacy Framework (DPF) adequacy decision — where applicable as a supplementary safeguard for certified US companies

The following international transfers apply to this Site:

Provider Country Service Transfer mechanism
HubSpot, Inc. USA CRM / marketing communications SCCs + DPF
Google LLC USA reCAPTCHA, analytics, hosting SCCs + DPF

You can review the Standard Contractual Clauses and the EU–US Data Privacy Framework adequacy decision at:

  • Standard Contractual Clauses (European Commission)
  • EU–US Data Privacy Framework adequacy decision

6. Your Data-Protection Rights

You may exercise the rights below by contacting Us at privacy@skyconseil.fr. We will respond within one month. In some cases We may request proof of identity.

Right to withdraw consent

You may withdraw consent for any consent-based processing at any time. Withdrawal does not affect the lawfulness of prior processing.

Right of access (Art.15)

Obtain confirmation of whether We process your data and a copy of it, including information on its origin, recipients, purposes and retention period.

Right to rectification (Art.16)

Request correction of inaccurate or completion of incomplete personal data.

Right to erasure (Art.17)

Request deletion of your data where it is no longer necessary or where We are no longer authorised to process it.

Right to restriction (Art.18)

Request that We limit processing of your data in certain circumstances, for example while accuracy is being verified.

Right to portability (Art.20)

Where processing is based on consent or contract and carried out by automated means, receive your data in a structured, machine-readable format, or have it transferred to another controller where technically feasible.

Right to object (Art.21)

Object at any time to processing based on Our legitimate interest, including profiling. We will cease processing unless We can demonstrate compelling legitimate grounds that override your interests.

Right to lodge a complaint

You may contact the supervisory authority in your country of residence. Our lead authority is CNIL (France): www.cnil.fr. A directory of all EU supervisory authorities is available at edpb.europa.eu.

To unsubscribe from commercial communications, click the unsubscribe link in any email or contact contact@skyconseil.fr.

7. Automated Decision-Making

We do not use automated decision-making or profiling, as described in Art.22 GDPR, in relation to visitors to this Site. No decisions producing legal or similarly significant effects are made about you solely by automated means.

8. Protection of Your Personal Information

The security of your personal data is a priority for Us. We have implemented appropriate technical and organisational measures to protect personal data against alteration, loss, unauthorised access and processing, in accordance with the state of technology. These include encryption in transit (TLS), access controls, multi-factor authentication and incident response procedures.

However, no transmission over the internet can be fully guaranteed. We will act promptly in the event that data security is compromised and will inform you where relevant.

9. Amendments to This Policy

We may update this Privacy Policy when there are changes to how We process personal data through this Site. If the revised version includes a material change affecting the processing of your data, We will notify you in advance by posting a notice on the Site or by email. We recommend that you review this Policy periodically.