Privacy Policy (GDPR)

1. Data Controller

The data controller is BLABLAJET, S.L., with CIF B21883095, and headquartered in Bilbao, Vizcaya, Spain. Contact email: info@blajet.com.

2. Purpose of Processing

We process the information provided by interested parties for the following purposes: managing user registration in the Beta/Sandbox phase, processing subscription payments via Stripe, performing KYC (know your customer) checks for air operators, and sending notifications regarding simulated marketplace auctions.

3. Data Storage and Security

Personal data collected is securely stored on Supabase servers located in the European Union (Frankfurt, Germany), encrypted at rest (AES-256) and in transit (TLS 1.3). We will keep your data as long as the commercial relationship is maintained or for the years necessary to comply with legal obligations.

4. Lawful Basis

The legal basis for processing your data is the execution of the Beta membership contract (Beta Terms) and the user's explicit consent when registering or submitting contact forms.

5. User Rights

Anyone has the right to obtain confirmation on whether we are processing personal data concerning them. You have the right to access your personal data, request the rectification of inaccurate data, request its deletion (right to be forgotten), object to processing, or request data portability by sending an email to info@blajet.com along with a copy of an identity document.