Privacy policy

1. Introduction

FlyingServices ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. We comply with the General Data Protection Regulation (GDPR) and Austrian data protection laws.

2. Data Controller

The data controller responsible for your personal data is i-factory, owner Michael D. Garrigosa, Laudongasse 4/1/12, 1080 Vienna, Austria (operator of the FlyingServices platform). For full contact information, please see our Imprint.

3. Data We Collect

We collect the following types of information:

Personal Information

Name and contact details (email, phone)
Account credentials
Address and location data
Profile information and photos
Payment information (processed by secure payment providers)

Usage Data

Booking history and preferences
Communications with providers/clients
Reviews and ratings
Device and browser information
IP address and location data

4. Legal Basis for Processing

We process your data based on:

Contract: To provide our services and fulfill bookings
Consent: For marketing communications (which you can withdraw at any time)
Legitimate Interest: For fraud prevention, security, and platform improvement
Legal Obligation: To comply with applicable laws

5. How We Use Your Data

To create and manage your account
To facilitate bookings between clients and providers
To process payments
To send service-related communications
To improve our platform and services
To prevent fraud and ensure security
To comply with legal obligations

6. Data Sharing

We may share your data with:

Service Providers/Clients: To facilitate bookings
Payment Processors: Stripe (Stripe Payments Europe, Ltd., Ireland) — to process payments, payouts and deposits securely. Card details are entered directly with Stripe; we never store full card numbers.
Technical Service Providers: For hosting and platform operation, and — with your consent — Google Analytics (Google Ireland Ltd.) for usage statistics.
Legal Authorities: When required by law

We do not sell your personal data to third parties.

7. Your Rights (GDPR)

Under GDPR, you have the right to:

Access: Request a copy of your personal data
Rectification: Correct inaccurate data
Erasure: Request deletion of your data ("right to be forgotten")
Restriction: Limit how we use your data
Portability: Receive your data in a portable format
Objection: Object to processing based on legitimate interest
Withdraw Consent: Withdraw previously given consent

To exercise these rights, contact us at privacy@flyingservices.eu.

8. Cookies

We use essential cookies required for the platform to function (session cookies). With your consent we additionally use Google Analytics 4, which sets analytics cookies (_ga, _ga_*) to measure usage; without consent no analytics cookies are set (Analytics then runs in cookieless consent mode). You can grant or withdraw this consent at any time via the cookie banner. We do not use third-party advertising cookies. Our maps are provided by OpenStreetMap: when a map is shown, your IP address is transmitted to the OpenStreetMap Foundation (United Kingdom) to load the map tiles, which is necessary to display the map (Art. 6(1)(f) GDPR). OpenStreetMap does not set advertising or tracking cookies.

9. Data Retention

We retain your data for as long as your account is active or as needed to provide services. After account deletion, we may retain certain data for legal compliance, fraud prevention, and dispute resolution for up to 7 years.

10. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption, secure hosting, and access controls. However, no method of transmission over the internet is 100% secure.

11. International Transfers

Your data is primarily stored within the European Union. Some payment data is transferred to Stripe, Inc. in the United States; this transfer is safeguarded by the EU Standard Contractual Clauses and Stripe's certification under the EU–U.S. Data Privacy Framework. If you consent to analytics, Google Analytics data is processed by Google Ireland Ltd. and may be transferred to Google LLC (USA) under the EU Standard Contractual Clauses and Google's EU–U.S. Data Privacy Framework certification. Any other transfer outside the EU is likewise subject to appropriate safeguards as required by the GDPR.

12. Using Our Apps (iOS and Android)

Our iOS and Android apps present the platform inside an app shell; the same processing as on the website applies. In addition, the apps process:

Push tokens: if you allow notifications, we store the device token issued by Apple (APNs) or Google (FCM) to deliver notifications to you. The token is removed when you disable notifications, sign out on the device or delete your account; tokens that become invalid are deleted automatically.
Session overview: for every signed-in session we store the device type, browser or app, IP address, the approximate location derived from it (city/country) and timestamps, so that you can spot and end unknown sessions under Settings → Sessions. The IP location lookup runs on our own servers without sharing data with third parties.
Location: we use your precise location only when you grant it in the app – to pre-fill the address for bookings and, for providers, for live tracking during an ongoing trip to the customer. You can revoke the permission at any time in your device settings.
Payments in the apps run through our payment provider Stripe, just like on the website; card details never reach our servers.
Google reCAPTCHA protects sign-in and form submissions in the apps as well; device and usage characteristics are transmitted to Google for this purpose.
We collect usage statistics (Google Analytics) in the apps only with your consent. We ask once per device; you can change your decision at any time.
The apps use no advertising identifiers (IDFA/GAID) and no cross-app or cross-device tracking. Ads on the platform are served without profiling.

You can delete your account in the apps exactly as on the website (Profile → Delete account); uninstalling the app does not delete your account. Steps and retention periods: Delete your account.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or platform notification. Continued use after changes constitutes acceptance.

14. Contact & Complaints

For privacy-related inquiries: privacy@flyingservices.eu

You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde) at www.dsb.gv.at.