{"id":5833,"date":"2026-01-12T16:22:04","date_gmt":"2026-01-12T13:22:04","guid":{"rendered":"https:\/\/northfly.aero\/?p=5833"},"modified":"2026-01-12T16:22:04","modified_gmt":"2026-01-12T13:22:04","slug":"privacy-policy","status":"publish","type":"post","link":"https:\/\/northfly.aero\/en\/blog\/privacy-policy\/","title":{"rendered":"PRIVACY POLICY"},"content":{"rendered":"<h2 data-start=\"386\" data-end=\"411\"><span class=\"ez-toc-section\" id=\"1_Purpose_and_Scope\"><\/span>1. Purpose and Scope<span class=\"ez-toc-section-end\"><\/span><\/h2><div id=\"ez-toc-container\" class=\"ez-toc-v2_0_81 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">\u0130\u00e7indekiler<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/northfly.aero\/en\/blog\/privacy-policy\/#1_Purpose_and_Scope\" >1. Purpose and Scope<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/northfly.aero\/en\/blog\/privacy-policy\/#2_Personal_Data_Collected\" >2. Personal Data Collected<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/northfly.aero\/en\/blog\/privacy-policy\/#3_Purposes_of_Processing\" >3. Purposes of Processing<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/northfly.aero\/en\/blog\/privacy-policy\/#4_Legal_Basis_for_Processing\" >4. Legal Basis for Processing<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/northfly.aero\/en\/blog\/privacy-policy\/#5_Data_Transfers\" >5. Data Transfers<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/northfly.aero\/en\/blog\/privacy-policy\/#6_Data_Retention\" >6. Data Retention<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/northfly.aero\/en\/blog\/privacy-policy\/#7_Data_Security\" >7. Data Security<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/northfly.aero\/en\/blog\/privacy-policy\/#8_Rights_of_Data_Subjects\" >8. Rights of Data Subjects<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/northfly.aero\/en\/blog\/privacy-policy\/#9_Cookies\" >9. Cookies<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/northfly.aero\/en\/blog\/privacy-policy\/#10_Policy_Updates\" >10. Policy Updates<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/northfly.aero\/en\/blog\/privacy-policy\/#11_Contact\" >11. Contact<\/a><\/li><\/ul><\/nav><\/div>\n\n<p data-start=\"412\" data-end=\"721\">This Privacy Policy has been prepared to explain how <strong data-start=\"465\" data-end=\"532\"><span class=\"hover:entity-accent entity-underline inline cursor-pointer align-baseline\"><span class=\"whitespace-normal\">NorthFLY Flight Academy<\/span><\/span> \/ 19 May\u0131s Havac\u0131l\u0131k A.\u015e.<\/strong> (\u201cNorthFLY\u201d) collects, processes, stores, and protects personal data in accordance with the <strong data-start=\"625\" data-end=\"684\">General Data Protection Regulation (EU) 2016\/679 (GDPR)<\/strong> and applicable national legislation.<\/p>\n<p data-start=\"723\" data-end=\"838\">This Policy applies to all individuals whose personal data are processed by NorthFLY, including but not limited to:<\/p>\n<ul data-start=\"839\" data-end=\"959\">\n<li data-start=\"839\" data-end=\"860\">\n<p data-start=\"841\" data-end=\"860\">website visitors,<\/p>\n<\/li>\n<li data-start=\"861\" data-end=\"891\">\n<p data-start=\"863\" data-end=\"891\">pilot training applicants,<\/p>\n<\/li>\n<li data-start=\"892\" data-end=\"919\">\n<p data-start=\"894\" data-end=\"919\">students and graduates,<\/p>\n<\/li>\n<li data-start=\"920\" data-end=\"946\">\n<p data-start=\"922\" data-end=\"946\">business partners, and<\/p>\n<\/li>\n<li data-start=\"947\" data-end=\"959\">\n<p data-start=\"949\" data-end=\"959\">suppliers.<\/p>\n<\/li>\n<\/ul>\n<hr data-start=\"961\" data-end=\"964\" \/>\n<h2 data-start=\"966\" data-end=\"997\"><span class=\"ez-toc-section\" id=\"2_Personal_Data_Collected\"><\/span>2. Personal Data Collected<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p data-start=\"998\" data-end=\"1109\">NorthFLY may process the following categories of personal data, limited to what is necessary and proportionate:<\/p>\n<ul data-start=\"1111\" data-end=\"1538\">\n<li data-start=\"1111\" data-end=\"1178\">\n<p data-start=\"1113\" data-end=\"1178\">Identification data (name, surname, date of birth, nationality)<\/p>\n<\/li>\n<li data-start=\"1179\" data-end=\"1247\">\n<p data-start=\"1181\" data-end=\"1247\">Contact data (phone number, email address, country of residence)<\/p>\n<\/li>\n<li data-start=\"1248\" data-end=\"1325\">\n<p data-start=\"1250\" data-end=\"1325\">Education and licensing data (pilot licenses, flight hours, certificates)<\/p>\n<\/li>\n<li data-start=\"1326\" data-end=\"1381\">\n<p data-start=\"1328\" data-end=\"1381\">Passport and visa data (for international students)<\/p>\n<\/li>\n<li data-start=\"1382\" data-end=\"1440\">\n<p data-start=\"1384\" data-end=\"1440\">Financial data (contract amounts, payment information)<\/p>\n<\/li>\n<li data-start=\"1441\" data-end=\"1501\">\n<p data-start=\"1443\" data-end=\"1501\">Digital data (IP address, cookies, form submission data)<\/p>\n<\/li>\n<li data-start=\"1502\" data-end=\"1538\">\n<p data-start=\"1504\" data-end=\"1538\">Legal and administrative records<\/p>\n<\/li>\n<\/ul>\n<hr data-start=\"1540\" data-end=\"1543\" \/>\n<h2 data-start=\"1545\" data-end=\"1575\"><span class=\"ez-toc-section\" id=\"3_Purposes_of_Processing\"><\/span>3. Purposes of Processing<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p data-start=\"1576\" data-end=\"1631\">Personal data are processed for the following purposes:<\/p>\n<ul data-start=\"1633\" data-end=\"2049\">\n<li data-start=\"1633\" data-end=\"1690\">\n<p data-start=\"1635\" data-end=\"1690\">Conducting flight and theoretical training activities<\/p>\n<\/li>\n<li data-start=\"1691\" data-end=\"1727\">\n<p data-start=\"1693\" data-end=\"1727\">Evaluating training applications<\/p>\n<\/li>\n<li data-start=\"1728\" data-end=\"1778\">\n<p data-start=\"1730\" data-end=\"1778\">Establishing and performing training contracts<\/p>\n<\/li>\n<li data-start=\"1779\" data-end=\"1840\">\n<p data-start=\"1781\" data-end=\"1840\">Fulfilling legal obligations towards aviation authorities<\/p>\n<\/li>\n<li data-start=\"1841\" data-end=\"1898\">\n<p data-start=\"1843\" data-end=\"1898\">Managing financial, accounting, and payment processes<\/p>\n<\/li>\n<li data-start=\"1899\" data-end=\"1945\">\n<p data-start=\"1901\" data-end=\"1945\">Operational planning and flight scheduling<\/p>\n<\/li>\n<li data-start=\"1946\" data-end=\"1999\">\n<p data-start=\"1948\" data-end=\"1999\">Compliance with legal and regulatory requirements<\/p>\n<\/li>\n<li data-start=\"2000\" data-end=\"2049\">\n<p data-start=\"2002\" data-end=\"2049\">Institutional communication and notifications<\/p>\n<\/li>\n<\/ul>\n<hr data-start=\"2051\" data-end=\"2054\" \/>\n<h2 data-start=\"2056\" data-end=\"2090\"><span class=\"ez-toc-section\" id=\"4_Legal_Basis_for_Processing\"><\/span>4. Legal Basis for Processing<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p data-start=\"2091\" data-end=\"2199\">Personal data are processed based on one or more of the following legal grounds under Article 6 of the GDPR:<\/p>\n<ul data-start=\"2201\" data-end=\"2440\">\n<li data-start=\"2201\" data-end=\"2242\">\n<p data-start=\"2203\" data-end=\"2242\">explicit consent of the data subject,<\/p>\n<\/li>\n<li data-start=\"2243\" data-end=\"2291\">\n<p data-start=\"2245\" data-end=\"2291\">necessity for the performance of a contract,<\/p>\n<\/li>\n<li data-start=\"2292\" data-end=\"2331\">\n<p data-start=\"2294\" data-end=\"2331\">compliance with a legal obligation,<\/p>\n<\/li>\n<li data-start=\"2332\" data-end=\"2440\">\n<p data-start=\"2334\" data-end=\"2440\">legitimate interests of NorthFLY, provided such interests do not override fundamental rights and freedoms.<\/p>\n<\/li>\n<\/ul>\n<hr data-start=\"2442\" data-end=\"2445\" \/>\n<h2 data-start=\"2447\" data-end=\"2469\"><span class=\"ez-toc-section\" id=\"5_Data_Transfers\"><\/span>5. Data Transfers<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p data-start=\"2470\" data-end=\"2554\">Personal data may be transferred, in compliance with Articles 44\u201349 of the GDPR, to:<\/p>\n<ul data-start=\"2556\" data-end=\"2783\">\n<li data-start=\"2556\" data-end=\"2609\">\n<p data-start=\"2558\" data-end=\"2609\">civil aviation authorities and regulatory bodies,<\/p>\n<\/li>\n<li data-start=\"2610\" data-end=\"2686\">\n<p data-start=\"2612\" data-end=\"2686\">domestic and international training, simulator, and examination centers,<\/p>\n<\/li>\n<li data-start=\"2687\" data-end=\"2737\">\n<p data-start=\"2689\" data-end=\"2737\">legal, financial, and audit service providers,<\/p>\n<\/li>\n<li data-start=\"2738\" data-end=\"2783\">\n<p data-start=\"2740\" data-end=\"2783\">IT service providers and hosting companies.<\/p>\n<\/li>\n<\/ul>\n<p data-start=\"2785\" data-end=\"2886\">Such transfers are limited to what is strictly necessary and carried out with appropriate safeguards.<\/p>\n<hr data-start=\"2888\" data-end=\"2891\" \/>\n<h2 data-start=\"2893\" data-end=\"2915\"><span class=\"ez-toc-section\" id=\"6_Data_Retention\"><\/span>6. Data Retention<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p data-start=\"2916\" data-end=\"2952\">Personal data are retained only for:<\/p>\n<ul data-start=\"2954\" data-end=\"3125\">\n<li data-start=\"2954\" data-end=\"3006\">\n<p data-start=\"2956\" data-end=\"3006\">the duration required by applicable legislation,<\/p>\n<\/li>\n<li data-start=\"3007\" data-end=\"3067\">\n<p data-start=\"3009\" data-end=\"3067\">the period necessary to fulfill contractual obligations,<\/p>\n<\/li>\n<li data-start=\"3068\" data-end=\"3125\">\n<p data-start=\"3070\" data-end=\"3125\">limitation periods relevant for potential legal claims.<\/p>\n<\/li>\n<\/ul>\n<p data-start=\"3127\" data-end=\"3229\">Upon expiration of the retention period, personal data are securely deleted, destroyed, or anonymized.<\/p>\n<hr data-start=\"3231\" data-end=\"3234\" \/>\n<h2 data-start=\"3236\" data-end=\"3257\"><span class=\"ez-toc-section\" id=\"7_Data_Security\"><\/span>7. Data Security<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p data-start=\"3258\" data-end=\"3402\">NorthFLY implements appropriate <strong data-start=\"3290\" data-end=\"3331\">technical and organizational measures<\/strong> to ensure the security of personal data, including but not limited to:<\/p>\n<ul data-start=\"3404\" data-end=\"3600\">\n<li data-start=\"3404\" data-end=\"3435\">\n<p data-start=\"3406\" data-end=\"3435\">restricted access controls,<\/p>\n<\/li>\n<li data-start=\"3436\" data-end=\"3484\">\n<p data-start=\"3438\" data-end=\"3484\">secure digital and physical storage systems,<\/p>\n<\/li>\n<li data-start=\"3485\" data-end=\"3549\">\n<p data-start=\"3487\" data-end=\"3549\">protection against unauthorized access, loss, or disclosure,<\/p>\n<\/li>\n<li data-start=\"3550\" data-end=\"3600\">\n<p data-start=\"3552\" data-end=\"3600\">access limited strictly to authorized personnel.<\/p>\n<\/li>\n<\/ul>\n<p data-start=\"3602\" data-end=\"3691\">In aviation, discipline is non-negotiable; the same principle applies to data protection.<\/p>\n<hr data-start=\"3693\" data-end=\"3696\" \/>\n<h2 data-start=\"3698\" data-end=\"3729\"><span class=\"ez-toc-section\" id=\"8_Rights_of_Data_Subjects\"><\/span>8. Rights of Data Subjects<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p data-start=\"3730\" data-end=\"3796\">Under Articles 15\u201322 of the GDPR, data subjects have the right to:<\/p>\n<ul data-start=\"3798\" data-end=\"4101\">\n<li data-start=\"3798\" data-end=\"3829\">\n<p data-start=\"3800\" data-end=\"3829\">access their personal data,<\/p>\n<\/li>\n<li data-start=\"3830\" data-end=\"3889\">\n<p data-start=\"3832\" data-end=\"3889\">request rectification of inaccurate or incomplete data,<\/p>\n<\/li>\n<li data-start=\"3890\" data-end=\"3936\">\n<p data-start=\"3892\" data-end=\"3936\">request erasure (\u201cright to be forgotten\u201d),<\/p>\n<\/li>\n<li data-start=\"3937\" data-end=\"3975\">\n<p data-start=\"3939\" data-end=\"3975\">request restriction of processing,<\/p>\n<\/li>\n<li data-start=\"3976\" data-end=\"4001\">\n<p data-start=\"3978\" data-end=\"4001\">object to processing,<\/p>\n<\/li>\n<li data-start=\"4002\" data-end=\"4031\">\n<p data-start=\"4004\" data-end=\"4031\">request data portability,<\/p>\n<\/li>\n<li data-start=\"4032\" data-end=\"4101\">\n<p data-start=\"4034\" data-end=\"4101\">withdraw consent at any time, where processing is based on consent.<\/p>\n<\/li>\n<\/ul>\n<p data-start=\"4103\" data-end=\"4191\">Requests may be submitted in writing through NorthFLY\u2019s official communication channels.<\/p>\n<hr data-start=\"4193\" data-end=\"4196\" \/>\n<h2 data-start=\"4198\" data-end=\"4213\"><span class=\"ez-toc-section\" id=\"9_Cookies\"><\/span>9. Cookies<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p data-start=\"4214\" data-end=\"4406\">NorthFLY\u2019s website may use cookies to improve user experience and analyze website performance. Cookies do not collect information that directly identifies individuals unless explicitly stated.<\/p>\n<p data-start=\"4408\" data-end=\"4476\">Users may control or disable cookies through their browser settings.<\/p>\n<hr data-start=\"4478\" data-end=\"4481\" \/>\n<h2 data-start=\"4483\" data-end=\"4506\"><span class=\"ez-toc-section\" id=\"10_Policy_Updates\"><\/span>10. Policy Updates<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p data-start=\"4507\" data-end=\"4688\">NorthFLY reserves the right to update this Privacy Policy in line with legal or operational requirements. Updated versions become effective upon publication on the official website.<\/p>\n<hr data-start=\"4690\" data-end=\"4693\" \/>\n<h2 data-start=\"4695\" data-end=\"4711\"><span class=\"ez-toc-section\" id=\"11_Contact\"><\/span>11. Contact<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p data-start=\"4712\" data-end=\"4834\">For questions, requests, or concerns regarding this Privacy Policy or personal data processing, data subjects may contact:<\/p>\n<p data-start=\"4836\" data-end=\"4928\"><strong data-start=\"4836\" data-end=\"4889\">NorthFLY Flight Academy \u2013 19 May\u0131s Havac\u0131l\u0131k A.\u015e.<\/strong><br data-start=\"4889\" data-end=\"4892\" \/>via official communication channels.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>1. Purpose and Scope This Privacy Policy has been prepared to explain how NorthFLY Flight Academy \/ 19 May\u0131s Havac\u0131l\u0131k A.\u015e. (\u201cNorthFLY\u201d) collects, processes, stores, and protects personal data in accordance with the General Data Protection Regulation (EU) 2016\/679 (GDPR) and applicable national legislation. This Policy applies to all individuals whose personal data are processed<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5],"tags":[],"class_list":["post-5833","post","type-post","status-publish","format-standard","hentry","category-blog"],"_links":{"self":[{"href":"https:\/\/northfly.aero\/en\/wp-json\/wp\/v2\/posts\/5833","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/northfly.aero\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/northfly.aero\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/northfly.aero\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/northfly.aero\/en\/wp-json\/wp\/v2\/comments?post=5833"}],"version-history":[{"count":1,"href":"https:\/\/northfly.aero\/en\/wp-json\/wp\/v2\/posts\/5833\/revisions"}],"predecessor-version":[{"id":5834,"href":"https:\/\/northfly.aero\/en\/wp-json\/wp\/v2\/posts\/5833\/revisions\/5834"}],"wp:attachment":[{"href":"https:\/\/northfly.aero\/en\/wp-json\/wp\/v2\/media?parent=5833"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/northfly.aero\/en\/wp-json\/wp\/v2\/categories?post=5833"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/northfly.aero\/en\/wp-json\/wp\/v2\/tags?post=5833"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}