Who is responsible
The controller of your personal data is Llorenç Palliser Gomila, a private individual in Spain who runs World Wide Aircraft Market as an independent, non-profit project. Write about anything on this page to palliser@worldwideaircraftmarket.com.
The short version
- Visiting the website does not identify you. There are no advertising trackers, no analytics, and no cookies that follow you.
- What you type into the advert form stays in your browser: it is never sent to us.
- If you write to us, we use your message only to answer it.
- If you list an aircraft, the advert — with the contact details you choose to show — is public, so that buyers can reach you.
- We never sell personal data, never use it for advertising, and never take automated decisions about you.
What we process, and why
When you visit the website
The website is served by Cloudflare. To deliver the pages and protect the site against attacks, Cloudflare processes technical data about each request: your IP address, the page requested, the date and time, and your browser's identification. We do not use this data to identify you, build profiles or measure the audience.
- Legal basis: our legitimate interest in running a website that works and is secure (GDPR, art. 6(1)(f)).
- How long: only as long as Cloudflare needs it for these purposes, under its own retention rules.
When a map is shown
The maps in the showroom are drawn from images that your browser loads directly from OpenStreetMap (street map) and Esri (satellite imagery), only while a map is on the screen. Those providers receive your IP address and the part of the map requested, under their own privacy policies.
- Legal basis: our legitimate interest in showing where an aircraft is based (art. 6(1)(f)).
What the showroom keeps in your browser
Your choice of language, the capabilities of your graphics card (to pick the right image quality) and any advert you write in the advert form, photographs included, are kept in your own browser and never sent to us. You can delete them at any time by clearing this site's data in your browser. The cookies page lists each one.
When you write to us
We use your e-mail address, your name if you give it, and what you write, only to answer you and to deal with what you ask — for example, to set up your advert.
- Legal basis: taking the steps you ask for (art. 6(1)(b)), or our legitimate interest in answering the messages we receive (art. 6(1)(f)).
- How long: while we deal with your request, and afterwards for up to two years, in case you write again about the same matter — longer only if the law requires it.
When you list an aircraft
To publish your advert we use what you give us for it: the aircraft's details and photographs, where it is based, the asking price, and the contact details for enquiries — an e-mail address and, only if you choose, a name and a telephone number. An advert is public: anyone in the world can read it, including the contact details you choose to show on it.
- Legal basis: the agreement to publish your advert (art. 6(1)(b)).
- How long: while the advert is online. When it comes down, it is removed from the website; the correspondence about it is kept for up to two years.
When you report a listing
We use your report and your contact details to review it, to act on it and to tell you what we decided.
- Legal basis: the legal obligation to handle notices about illegal content (art. 6(1)(c), in relation to the EU Digital Services Act), or our legitimate interest in keeping the market free of misleading and fraudulent adverts (art. 6(1)(f)).
- How long: up to two years after the matter is closed.
Who else sees your data
We share personal data only with the providers that the website needs in order to work, and only for that purpose:
- Cloudflare, Inc. — hosting, content delivery and security.
- Our e-mail service provider — to receive and answer your messages.
- OpenStreetMap Foundation and Esri — the map images, as described above.
And, when the law requires it, with the authorities entitled to request it. Nothing else, and nothing is ever sold.
Transfers outside Europe
Some of these providers are established, or process data, outside the European Economic Area — in the United States, for example. When they do, the transfer is based on an adequacy decision of the European Commission (such as the EU–US Data Privacy Framework, for companies certified under it) or on the standard contractual clauses approved by the Commission.
Your rights
You can ask at any time to access the personal data we hold about you, to correct it, to delete it, to restrict its use, to object to it being used, and to receive it in a portable format. Where we rely on your consent, you can withdraw it whenever you want.
Write to palliser@worldwideaircraftmarket.com from the address the request concerns, or tell us how to confirm that the data is yours. We answer within one month.
If you believe your data has not been handled properly, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es), or to the authority of the country where you live.
Children
The website is not directed at children under 14, and we do not knowingly process their data.
Security
The website is served only over encrypted connections (HTTPS, with HSTS), with a strict content security policy and no third-party scripts. Access to the data we hold is limited to the person responsible for the website.
Changes to this policy
If this policy changes, the new version will be published here with its date. If the change is significant, we will say so on the website.