Privacy Policy

1. Controller and scope

CabAvia acts as the controller for personal data collected through this site. This policy explains how we process personal data when you visit our website, submit the waitlist form, or contact us directly.

2. Information we collect

We collect information you provide directly, such as your name, email address, company, and any details you send when you contact us or request early access.

3. Processing purposes and legal bases

We process personal data for the following purposes and legal bases:

• Waitlist and contact handling: consent and, where relevant, legitimate interest.
• Service reliability, abuse prevention, and security monitoring: legitimate interest.
• Compliance and legal record-keeping: legal obligation and legitimate interest.

4. Retention periods

We retain personal data only as long as required for the purposes above. Typical periods are:

• Waitlist and contact records: up to 24 months from last meaningful interaction.
• Operational security logs: generally 30 to 180 days unless needed longer for incident handling.
• Records needed for legal compliance: as required by applicable law.

5. Data sharing

We do not sell personal data. We may share limited data with trusted service providers that support infrastructure, communications, analytics, and security under appropriate contractual safeguards.

6. Processors and subprocessors

We use third-party processors to operate CabAvia services. Current operational processors include Cloudflare (site hosting and delivery) and Formspree (waitlist form processing). We review processors for security and contractual data protection terms.

7. International transfers

Depending on where providers process data, your information may be transferred outside the EEA. Where required, we use contractual and organizational safeguards, including standard contractual protections.

8. Cookies and similar technologies

We use strictly necessary technical functionality for site operation. If optional analytics or marketing technologies are enabled later, we will request consent where required and update this policy accordingly.

9. Security

We use technical and organizational measures designed to protect personal information. No method of transmission or storage is guaranteed to be fully secure.

10. Your rights

Depending on applicable law, you may have rights to access, rectify, erase, restrict processing, object, and request portability of your personal data, and to withdraw consent where processing relies on consent. To exercise rights, contact us at [email protected]. You also have the right to lodge a complaint with your local supervisory authority. In Finland, this is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).

11. Contact

If you have questions about this policy, contact us at [email protected].