Legal

Privacy Policy

Last updated: 3 June 2026

At DAVAviation Kft. (“DAVAviation”, “we”, “us”, “our”), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what personal data we collect, why we collect it, how we use and store it, who we share it with, and what rights you have. It applies to our website, our registration (“Join”) form, our company request form, and any communication you have with us.

“Personal data” under the EU General Data Protection Regulation (GDPR) means any information relating to an identified or identifiable natural person.

1. Who is responsible for your data (Data Controller)

We are the data controller for the personal data described in this policy.

2. What personal data we collect

a) When you register through our “Join” form (aircraft engineers / candidates):

• Identity data: first name, last name
• Contact data: email address
• Location data: your current country of residence
• Professional / qualification data: licence type (e.g. B1 / B2 / B3 / Cat. A / unlicensed), aircraft type experience, area of interest (type rating, contract opportunities, OJT), aircraft type(s) you are interested in, preferred contract type, preferred rotation, availability
• Optional documents you choose to upload: CV / résumé and LinkedIn profile link (if these fields are enabled)

b) When you submit our company / partner request form: company name, contact person’s name, business email and (where provided) phone number, and the details of your requirement (roles, licence level, location, timeline).

c) When you contact us by email: the content of your message and your contact details.

d) Automatically, when you visit the website: limited technical data such as IP address, browser type, device information and server log data, generated by our hosting provider for security and operational purposes.

We do not intentionally collect special categories of data (e.g. health, biometric or political data). Please do not include such information in free-text fields or your CV.

3. Why we use your data and our legal bases

Purpose	Legal basis (GDPR Art. 6)
To register you in our network and match you with relevant training, contract or employment opportunities, and to share your details with relevant partners for that purpose	Consent — Art. 6(1)(a)
To respond to your enquiries and manage a business relationship with partner companies	Contract / pre-contractual steps — Art. 6(1)(b)
To operate, secure and improve our website (server logs, abuse prevention)	Legitimate interests — Art. 6(1)(f)
To send marketing/updates where you have opted in	Consent — Art. 6(1)(a)
To meet accounting, tax and other legal obligations	Legal obligation — Art. 6(1)(c)

You can withdraw your consent at any time (see Section 8). Withdrawal does not affect processing carried out before withdrawal.

4. Who we share your data with

a) Partners we introduce you to (independent controllers). If you give consent through the registration form, we may share your registration details with relevant partners so they can contact you about opportunities. These partners may include:

• aviation recruitment and staffing agencies,
• EASA Part-147 approved training organisations,
• EASA Part-145 maintenance organisations,
• first-type rating and on-the-job-training (OJT) providers.

These partners act as independent data controllers once they receive your data and are responsible for their own use of it under their own privacy policies.

b) Service providers who process data on our behalf (processors). We use the following providers, who process personal data on our behalf under data processing agreements:

• Namecheap, Inc. — website hosting and domain services (registration data submitted through our forms is stored in the website database hosted here)
• Google LLC — Google Sheets / Google Workspace, used to receive and organise form submissions
• Make.com (Celonis s.r.o.) — automation and workflow processing
• Microsoft Corporation — email and communication services (Microsoft 365 / Outlook)

We do not sell your personal data.

5. International transfers

Some of the providers above (e.g. Google, Microsoft, Namecheap) may process personal data outside the European Economic Area, including in the United States. Where this happens, we rely on appropriate safeguards such as the EU Standard Contractual Clauses (SCCs) and/or the EU–US Data Privacy Framework, to ensure your data receives an adequate level of protection.

6. How long we keep your data

Data	Retention period
Candidate registration data	Until you withdraw consent or ask us to delete it, or up to 24 months after our last meaningful contact — whichever comes first
CV / résumé and uploaded documents	Same as registration data, or sooner on request
Company / partner contact data	For the duration of the business relationship and a reasonable period afterwards
Invoicing and accounting records	8 years, as required by Hungarian Act C of 2000 on Accounting
Website server logs	A short period for security purposes (typically up to 12 months)

When data is no longer needed, we delete or anonymise it.

7. Cookies and analytics

Our website currently uses only essential cookies required for its proper functioning and security. We do not currently use analytics, advertising or tracking cookies. Some page elements (e.g. icon fonts) may load from a third-party content delivery network, which receives your IP address as a technical necessity to deliver that content. If we introduce analytics or marketing cookies in the future, we will update this policy and, where required, ask for your consent first.

8. Your rights

Under the GDPR you have the right to:

• access your personal data,
• correct inaccurate data,
• request erasure of your data,
• restrict or object to processing,
• receive your data in a portable format (where applicable),
• withdraw consent at any time where processing is based on consent.

To exercise any of these rights, or to withdraw consent, contact us at info@davaviation.com. We will respond within the time limits set by the GDPR (normally one month).

9. Complaints

If you believe your data has been handled unlawfully, you can lodge a complaint with the Hungarian supervisory authority:

If you are in another EU/EEA country or the UK, you may also contact your local data protection authority.

10. Data security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

11. Third-party links

Our website may contain links to third-party websites (for example, in the Flight Finder tool). We are not responsible for the privacy practices of those external sites and encourage you to read their privacy notices.

12. Children

Our website and services are not intended for children, and we do not knowingly collect personal data from children under 16.

13. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with the updated date shown above.

Contact

DAVAviation Kft.
Email: info@davaviation.com
Registered seat: 2360 Gyál, Gábor Áron utca 13, Hungary