Privacy policy
This policy explains which personal data SoaringMarket processes, for what purpose and on which legal basis, and what rights you have under the General Data Protection Regulation (GDPR).
Visiting the website
When you open a page, your browser transmits technical data such as IP address, time, requested address and browser type. Our hosting provider processes this data to deliver the website and keeps it in server logs for a short time to detect faults and attacks. Legal basis: our legitimate interest in a secure, working website (Art. 6 (1) (f) GDPR). We do not use analytics, advertising or tracking tools.
Your account
To register we need your email address, a password (stored only as a secure hash) and your country of residence; first name, last name and a display name are optional. We use this data to provide your account, to send confirmation, password-reset and notification emails and to show your name to people you exchange messages with: your display name, or your first name and the initial of your last name. Your email address is never shown to other users. Legal basis: performance of the user agreement (Art. 6 (1) (b) GDPR).
Listings and photos
Published listings, including photos, location and price, are visible to everyone. Uploaded photos are re-encoded and embedded metadata such as GPS positions is removed; an uncropped copy is kept privately so you can change the crop later. Legal basis: Art. 6 (1) (b) GDPR.
Messages
Messages and photos you send are stored and visible to both participants of the conversation. We record when messages were sent and read to show read receipts and to send email notifications. Moderators read a conversation only after it has been reported. Legal basis: Art. 6 (1) (b) GDPR; for checking reports, our legitimate interest in a safe marketplace (Art. 6 (1) (f) GDPR).
Favourites
Listings you add to your favourites are stored for you only; if one of them gets cheaper, we email you. You can switch each kind of notification email off in your account settings. Legal basis: Art. 6 (1) (b) GDPR.
Reports and contact form
For reports we store the reason, your description, who reported and what was reported. For the contact form we store your name (optional), email address, topic and message, and use them only to answer you. Legal basis: Art. 6 (1) (b) and (f) GDPR.
Protection against abuse
To protect accounts and the marketplace we briefly store counters per account or IP address, for example for failed sign-ins and the number of messages sent. To count listing views, we keep a pseudonymous key derived from IP address and browser for six hours; only the total number of views is stored. Legal basis: Art. 6 (1) (f) GDPR.
Change history and sales statistics
To trace changes, settle disputes and prevent abuse, we record what is changed in accounts and listings (for example listing details, photos and settings, and that a message was sent, without its text), with time and account. Only the operator can see this history; it is deleted after 24 months. When a listing is taken offline as sold, we ask for the selling price. It is stored without name, account or listing, only with category, aircraft type, year and asking price, and is used solely for anonymous market statistics. Legal basis: our legitimate interest in a safe, transparent marketplace (Art. 6 (1) (f) GDPR).
Service providers
We use processors bound by data processing agreements: Render Services, Inc. for hosting and the database (EU region Frankfurt), Cloudflare, Inc. for storing photos (stored in the EU) and Resend for sending emails. Some of these companies are based in the USA. Where personal data may be transferred there, it is protected by the EU-U.S. Data Privacy Framework if the provider is certified, otherwise by the EU standard contractual clauses (Art. 46 GDPR).
How long we keep data
Account data is kept as long as your account exists. When your account is deleted, we remove your name, email address, country and favourites, delete listings without conversations and take the others offline; messages you sent stay with the recipient without your name. A conversation is erased once both participants have deleted it. Reports and contact messages are kept as long as needed to handle them and document decisions. Statutory retention obligations remain unaffected.
Your rights
You have the right to access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interests. Most account details can be changed on your account page, where you can also delete your account; for everything else, use the contact form or the email address above. You also have the right to lodge a complaint with a supervisory authority; in Austria this is the Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at.
Cookies, obligations and automated decisions
We only use technically necessary cookies (see Cookies & language). You can browse without an account; to publish listings or send messages, the account details marked as required are necessary. No automated decision-making or profiling takes place.
Controller
Philip HeinrichGussenbauergasse 5-7/3/8
1090 Wien
Österreich
Email: admin@soaringmarket.eu
Contact form: Write to us