Last updated: 24 September 2026
1. Controller
NorthFLY Flight Academy (data controller). Address: Samsun International Carsamba Airport, Türkiye. Email: info@northfly.aero · Phone: +90 850 532 1919 · Web: https://northfly.aero
As controller we determine the purposes and means of processing and are responsible for data security.
2. Scope
Website visits, cookie preferences, contact/callback forms, WhatsApp and email, career applications and Data Subject Request forms.
3. Data categories
We may process identity, contact, application content, security logs and cookie data (analytics/marketing only with consent).
4. Collection methods and legal bases
Data is collected via electronic forms, email, phone, WhatsApp and logs—fully or partly automated.
Legal bases: KVKK Art. 5/1 consent; Art. 5/2 (c)(ç)(f); GDPR Art. 6(1)(a)(b)(c)(f).
5. Purposes
Training information, answering enquiries, recruitment, security, legal records, analytics/marketing with consent, and handling rights requests.
6. Recipients
Hosting and email providers, public authorities where required, advisors, and analytics/marketing vendors only with consent. Cross-border transfers follow KVKK and GDPR.
7. Retention
Kept only as long as needed for the purpose and legal periods, then deleted, destroyed or anonymised. See the Privacy Policy for indicative timelines.
8. Your rights under KVKK Art. 11
You may:
- Learn whether your data is processed
- Request information about processing
- Learn the purpose and whether it is used accordingly
- Know domestic or international recipients
- Request correction of incomplete or inaccurate data
- Request erasure/destruction under KVKK Art. 7
- Ask that corrections/erasures are notified to recipients
- Object to adverse outcomes of solely automated analysis
- Seek compensation for unlawful processing
9. Additional GDPR rights (EU/EEA)
Restriction (Art. 18), portability (Art. 20), objection (Art. 21) and withdrawal of consent (Art. 7(3)).
10. How to apply — what you should do
To exercise your rights:
- Use the Data Subject Request form or email info@northfly.aero
- State your name, contact details and request type clearly
- Describe which data or processing the request concerns
- Provide proportionate ID if asked (and proof of authority if applying for someone else)
- Monitor your inbox (including spam) and reply if we need more information
11. Response time
Under KVKK we respond within 30 days, free of charge in principle. Under the GDPR within one month (extendable with notice).
12. Complaints
You may complain to Türkiye’s Personal Data Protection Authority (https://www.kvkk.gov.tr) or your EU/EEA supervisory authority.