Privacy and Cookie Policy
Information provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR), Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018, and the cookie guidelines issued by the Italian Data Protection Authority on 10 June 2021.
1. Data controller
The data controller is Bianca Cicerale, trading as Bianca Jet Charter, established in Italy.
No Data Protection Officer has been appointed, as the conditions set out in Article 37 GDPR do not apply. Any request concerning personal data should be sent to the contacts above.
2. Data collected
Only the data needed to answer a request and, if the flight is confirmed, to arrange it, is processed.
-
Contact and identification data
Name and surname, email address, telephone number, company name where relevant.
-
Travel data
Departure and arrival airport or city, dates and times, number of passengers, unusual luggage, notes and preferences entered in the request form.
-
Data required for flight operations
Only for confirmed flights: passenger and travel document details required by the air operator, by border authorities and by aviation security rules.
-
Technical browsing data
IP address, browser and device type, pages visited. Collected in the hosting provider's logs for security and service continuity.
-
Direct communications
The content of emails, WhatsApp messages and messages sent through Instagram. On those channels the platform operator processes data as an independent controller, under its own privacy notice.
3. Purposes and legal bases
| Purpose | Legal basis | Provision |
|---|---|---|
| Answering a quote request and preparing the flight proposal | Art. 6(1)(b) GDPR: pre-contractual steps taken at your request | Required |
| Arranging the flight with the air operator and ground suppliers | Art. 6(1)(b) GDPR: performance of the contract | Required |
| Tax and accounting obligations, aviation and border requirements | Art. 6(1)(c) GDPR: legal obligation | Required |
| Website security, abuse prevention and legal defence | Art. 6(1)(f) GDPR: legitimate interest of the controller | No action needed |
| Unsolicited commercial messages or travel proposals | Art. 6(1)(a) GDPR: consent, withdrawable at any time | Optional |
| Statistics and advertising campaign measurement | Art. 6(1)(a) GDPR and Art. 122 of Legislative Decree 196/2003: consent collected through the banner | Optional |
Without the data marked as required, a quote cannot be prepared and the flight cannot be arranged. No automated decision-making or profiling within the meaning of Article 22 GDPR takes place.
4. Special categories of data
Some requests may involve information about health or religious beliefs: a mobility need on board, a food allergy, a religious dietary preference, an assistance animal. Such data falls under the special categories of Article 9 GDPR and is processed only on the basis of explicit consent, given by voluntarily communicating the information, and only for the purpose for which it was communicated. A diagnosis is never required: describing the practical need is enough.
5. Recipients
Data is never disclosed publicly or sold. It is shared only with those needed to deliver the requested service:
- certified air operators and aircraft management companies, as independent controllers for the obligations imposed on them by aviation law;
- airport handling companies, private terminals and ground service suppliers (drivers, catering, security), limited to what each service requires;
- border, customs and security authorities, where the law of the departure or destination country requires it;
- IT, hosting and email providers, appointed as processors under Article 28 GDPR;
- accounting, tax and legal advisers, within the scope of their engagement.
6. Transfers outside the European Economic Area
A flight departing from or arriving outside the European Union necessarily involves sharing passenger data with operators, handlers and authorities in the country concerned. Such transfers take place under Article 49(1)(b) GDPR, as necessary for the performance of the contract requested by the data subject.
For technology providers established outside the European Economic Area, transfers rely on an adequacy decision of the European Commission, including the EU‑US Data Privacy Framework for certified US providers, or on the standard contractual clauses adopted by the Commission under Article 46 GDPR, together with a transfer impact assessment. A copy of the safeguards in place can be requested at the contacts in section 1.
7. Retention periods
| Quote requests not followed by a flight | 24 months from the last contact |
| Charter contracts, accounting and tax records | 10 years, as required by Article 2220 of the Italian Civil Code |
| Data processed on the basis of consent for commercial purposes | Until consent is withdrawn, and in any case no longer than 24 months from the last contact |
| Technical server logs | No longer than 12 months |
8. Your rights
You may at any time exercise the rights set out in Articles 15 to 22 GDPR: access to your data, rectification, erasure, restriction of processing, portability, objection to processing based on legitimate interest, and withdrawal of consent, which does not affect the lawfulness of processing already carried out.
An email to biancajetcharter@gmail.com is enough. A reply follows without undue delay and in any case within one month of the request, extendable by two months for particularly complex requests, with reasons given.
You also have the right to lodge a complaint with the Italian Data Protection Authority, Piazza Venezia 11, 00187 Rome, garanteprivacy.it, with the supervisory authority of your country of residence, or to bring the matter before a court.
9. Security and minors
Appropriate technical and organisational measures are in place under Article 32 GDPR: encrypted connection, protected access, confidentiality of itineraries, and sharing with suppliers strictly limited to what each service requires.
The service is not directed at minors. Data concerning underage passengers is processed only when provided by a person holding parental responsibility, as part of arranging the flight. For information society services, Italian law recognises a minor's consent as valid from the age of 14, under Article 2-quinquies of Legislative Decree 196/2003.
11. Changes to this notice
This notice may be updated to reflect changes in law or in the service offered. The version in force is always the one published at this address, bearing the date shown at the top. Material updates are communicated by email to anyone with a request in progress.
1.0, effective 5 August 2026. This notice was drafted in Italian; the English text is a courtesy translation and, in case of discrepancy, the Italian version prevails.