Draft for review by the airport. Text [in brackets] still has to be decided.

Privacy statement

Version [date]

LARSA is the runway slot booking tool of [Lelystad Airport]. This statement explains which personal data LARSA keeps, why, who can see it and what you can do about it.

Who is responsible

[Name, address and Chamber of Commerce number of the controller: Lelystad Airport, or Airport Creators on its behalf] is responsible for the personal data in LARSA. Questions or requests: [privacy@…].

What LARSA keeps

• Your account: email address, name, phone number (optional), preferred language, and how you sign in: a password (stored only as an irreversible hash), passkeys (only their public part), or the secret of an authenticator app.
• Your aircraft: the registrations you save or book with, and a type or name if you add one, so you can pick them when booking.
• Your bookings: landing area, type of operation, date and times, number of touch-and-goes, aircraft registration, status, and the reason if the airport cancelled a booking.
• Emails to you: a copy of each email LARSA sends you (confirmations, reminders, cancellations, messages from the airport) and whether it was delivered.
• Notifications on your devices, only if you turn them on: for each device, the address its browser's push service gave LARSA, the keys that encrypt the notifications, and the browser and device type. Turning notifications off or signing out on that device removes it.
• Where you are signed in: for each sign-in, the time, the IP address and the browser, so you can see your signed-in devices under Account and sign out of the others.
• Technical data: IP address and browser information in server logs and in the limits on sign-in attempts.

LARSA does not use analytics, advertising or tracking of any kind.

Why, and on what basis

• To provide the booking service you signed up for: your bookings, the expected busyness, confirmations and reminders (performance of a contract, GDPR article 6(1)(b)).
• So airport operations know who to expect and can reach you about your flight, for example when the runway closes (performance of a contract, and the airport's legitimate interest in safe and orderly operations, article 6(1)(f)).
• To protect accounts and the service against misuse (legitimate interest, article 6(1)(f)).

Who can see it

• Airport operations staff of the airport where you book see your name, email address, phone number, aircraft registration and your bookings there.
• Other pilots never see your details. They only see how busy the runway is expected to be.
• Amazon Web Services hosts LARSA, its database and its email sending, in the European Union ([region]), as our processor.
• Your browser's push service (Google for Chrome and Android, Apple for Safari and iPhone, Mozilla for Firefox, Microsoft for Edge), only if you turn on notifications: it delivers them to your device. The contents are encrypted so that only your device can read them.

LARSA does not sell or share your data for any other purpose.

How long

• Your account and bookings: until you delete your account. [Bookings are deleted … months after their date; accounts without sign-in for … years are deleted.]
• Where you are signed in: until that session ends, by signing out or expiring, and at most an hour longer.
• Copies of emails: [… months].
• Server logs: [… days].

Cookies and offline storage

LARSA only uses cookies it needs to work, so it does not ask for consent:

• sessionid: keeps you signed in, for up to 30 days (12 hours for airport staff).
• csrftoken: protects forms against misuse from other websites.
• django_language: remembers the language you picked, only if you pick one.

When you install LARSA on your phone, it keeps its pages and styles on the device so it can show a message when you are offline.

Your rights

• See and correct your details on the Account page.
• Delete your account and all your bookings yourself, under Account → Delete account.
• Ask for a copy of your data, or object to how it is used, at [privacy@…]. We answer within one month.
• Complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Security

LARSA is only reachable over an encrypted connection. Passwords are stored as hashes, staff accounts need a second factor, and data stays in the European Union.

Changes

If this statement changes, the new version appears here with its date. Important changes are also sent to you by email.