Privacy Notice

1. Data Controller

Bon Air Havacılık Sanayi ve Ticaret A.Ş. ("Bon Air") acts as the data controller for personal data processed through BonAcademy. You may contact us at kvkk@bonair.com.tr.

2. Personal Data We Process

• Identity: first name, last name, date of birth, place of birth
• Contact: corporate email address
• Employment information: department, manager, role
• Training and exam records: SCORM progress data (CMI), exam answers, scores, certificates
• Audit records: sign-in and sign-out times, administrator action logs (audit log), IP address

3. Purposes and Legal Basis of Processing

We process your personal data to (a) plan and track mandatory training and to meet regulatory compliance obligations (such as DGCA, EASA and other aviation regulations), (b) issue and verify certificates, and (c) maintain information security and audit records. The legal bases include compliance with legal obligations, performance of the employment relationship, and our legitimate interests in operating a compliant training programme.

4. Data Transfers

Personal data is processed on hosting infrastructure provided by Vercel Inc. (USA) and Neon Inc. (USA), with email delivery through Microsoft 365 (Microsoft Ireland Operations Ltd.) and bot protection through Google LLC (reCAPTCHA). Cross-border transfers are carried out under applicable safeguards.

5. Retention Period

Training and certificate records are retained for the period required by applicable aviation regulations (typically the duration of employment plus 10 years). Audit logs are retained for at least 1 year in line with information-security standards. At the end of the retention period, data is deleted, destroyed, or anonymised.

6. Your Rights

You have the right to learn whether your personal data is being processed, request information about such processing, request correction or deletion, learn the third parties to which it has been transferred, object to processing, and request compensation if you suffer harm from unlawful processing. You may submit requests to kvkk@bonair.com.tr.

7. Cookies

Only strictly necessary cookies are used for authentication sessions and security verification (Google reCAPTCHA). No advertising or marketing tracking cookies are used.