Privacy Policy
Last updated: 29 October 2026
1. Data Controller
The controller of your personal data is:
Oleksandr Pereklo, trading as Skybound Bridge
NIP: 5223337650 · REGON: 541961545
Kościelna Droga 8A/1, 05-092 Łomianki Dolne, Mazowieckie Voivodeship, Poland
Email: info@skyboundbridge.com
We have not appointed a Data Protection Officer, as we are not required to. For any data protection question, write to info@skyboundbridge.com.
2. What Data We Collect
2.1. Data you give us through our qualification form, our website forms, email or messaging:
- Contact details: first name, last name, email address, phone number, messaging handle.
- Training profile: aviation goals, preferred training route (integrated / modular), preferred countries, intended start date, current licences, ratings and flight hours, English language proficiency.
- Funding information: your indicated budget range and how you intend to finance training. We do not collect and do not want your bank account numbers, card numbers or bank statements.
- Eligibility information: citizenship and visa or right-to-study status.
- Medical certificate status: whether you hold or can readily obtain an EASA Class 1 or Class 2 medical certificate, have not yet applied for one, or are unsure whether you meet the requirements.
2.2. Data collected automatically when you visit our website: IP address, device and browser information, pages viewed and referral source. See section 10.
2.3. Special categories of data. Information about your medical certificate status is treated as data concerning health under Article 9 GDPR and receives the additional protection described in section 3.
We ask you not to send us medical diagnoses, conditions, medication details or examination reports. We do not need them and we do not want them. Our form asks only about the status of your certificate, and that is all our service requires.
2.4. Applicants aged 16 or 17. Our service is available from age 16. In Poland, where we are established, a person aged 16 or over gives their own consent to the processing of their personal data, and Article 8 GDPR sets 16 as the highest digital-consent age any Member State may apply — a Member State may lower it, but not raise it. No parental consent is therefore required for any of the processing described in this Policy, anywhere in the European Union.
A parent or legal guardian may of course be involved in the conversation, and a school will normally require one to sign the training contract, but that is a matter of contract law between you and the school, not a condition of our processing your data.
2.5. Data you give us through our contract review form. If you are already enrolled somewhere and use the form on our "stuck in training" page, we collect: your name and email address; the name and country of your flight school; the course you are on; the date you started and the date the course was estimated to end; the hours you have flown and the hours your course requires; your account of what has gone wrong; and any training contract, amendment or related document you choose to upload. Uploading a document is optional — the form can be submitted without one.
Those documents are received and stored through Tally (section 4.2) and are read only by us. We do not send them to your school, to a partner academy or to anyone else without asking you first and getting your agreement. If a document you upload happens to contain another person's data — the name or signature of a school employee, for example — we process it only so far as is necessary to answer your question, and it is deleted with the rest of the file when you ask us to delete it.
There is no fixed deletion date for these documents. People come back to these conversations months later, and we would rather still have your contract than make you find it again. Write to info@skyboundbridge.com at any time and we delete the documents and the rest of your submission without undue delay, and confirm when it is done. You do not have to give a reason.
We are not a law firm and this review is not legal advice. It is our reading of how agreements of this kind are normally written, applied to yours.
3. Why We Process Your Data, and on What Legal Basis
| Purpose | Data | Legal basis |
|---|---|---|
| Assessing your eligibility and matching you with suitable flight schools | contact, training profile, funding, eligibility | Consent — Art. 6(1)(a) GDPR |
| Processing your medical certificate status as part of that assessment | medical certificate status | Explicit consent — Art. 9(2)(a) GDPR |
| Sharing your profile with a partner flight school so it can evaluate and enrol you | contact, training profile, eligibility, and medical certificate status | Consent — Art. 6(1)(a) and Art. 9(2)(a) GDPR |
| Communicating with you about your enquiry | contact details | Consent — Art. 6(1)(a) GDPR |
| Reviewing a training contract you send us and replying to you about it | contact details, training history, the documents you upload | Consent — Art. 6(1)(a) GDPR |
| Issuing invoices and keeping accounting records | commercial and contact data | Legal obligation — Art. 6(1)(c) GDPR (Polish accounting and tax law) |
| Establishing, exercising or defending legal claims | as relevant | Legitimate interest — Art. 6(1)(f) GDPR |
3.1. How your consent is collected. Our qualification form asks for two separate consents, each with its own tick box and neither pre-ticked:
- consent to our processing the information you provide in order to assess your eligibility for EASA flight training;
- consent to our sharing your profile with partner EASA flight schools so that they can evaluate your application and contact you.
Both are required in order to submit the form. This is because the service we offer is a matching and introduction service: if we may not assess your profile, and may not pass it to a school, there is nothing we are able to do for you. If you would prefer to talk to us without your profile being shared, do not submit the form — write to info@skyboundbridge.com instead and we will handle your enquiry by email on that basis.
Providing your data is voluntary, and you may withdraw either consent at any time under section 8.
3.2. The contract review form. That form carries one tick box, confirming you understand the review is not legal advice and that an academy may pay us a commission if you later enrol through us. Submitting the form is your consent to our reading what you send and writing back to you about it. It is not consent to show it to anyone else: if an introduction to another school turns out to be what you want, we ask you separately before we share anything.
4. Who We Share Your Data With
4.1. Partner flight schools, aero clubs and instructors. Where you consent, we share your profile with one or more partner organisations so they can evaluate your application, contact you and enrol you. We share your data only with organisations we have actually identified as a match for you — not with our whole partner network.
4.2. Service providers (processors) who process data on our behalf:
| Provider | Role |
|---|---|
| Tally | forms, data intake, and storage of documents you upload |
| HubSpot | customer relationship management |
| Make (Celonis) | automation between our systems |
| Google (Workspace, Drive, Calendar, Analytics) | email, storage, scheduling, website analytics |
| Netlify | website hosting and content delivery |
Each of these acts under a data processing agreement: either directly with us, or, where the table above shows a provider engaged by another provider, as that provider's sub-processor under its agreement. Where any of them processes data outside the European Economic Area, section 5 applies.
4.3. We do not sell, rent or licence your personal data to anyone, and we do not share it with third-party advertising or data brokerage companies.
4.4. We may disclose data where required by law or to establish or defend legal claims.
5. International Transfers
Our partner flight schools are located in the European Economic Area. Where a school, club or instructor you are matched with is located outside the EEA, we transfer your data only on the basis of an adequacy decision of the European Commission or appropriate safeguards under Articles 46–49 GDPR, and we will tell you before doing so.
Some of our service providers may process data outside the EEA. Where that happens, transfers are covered by an adequacy decision or by Standard Contractual Clauses. You may request a copy of the relevant safeguards by writing to info@skyboundbridge.com.
6. How Long We Keep Your Data
| Data | Retention |
|---|---|
| Enquiry and profile data where no enrolment follows | 24 months from your last contact with us, then deleted |
| Documents you upload for contract review | kept until you ask us to delete them, then deleted without undue delay |
| Data relating to a completed introduction or enrolment | 6 years from the end of the relationship, to cover accounting obligations and the limitation period for claims |
| Accounting and tax records | 5 years from the end of the tax year, as required by Polish law |
| Data where you withdraw consent | deleted without undue delay, except where we must retain it under the two rows above |
7. Security
Your data is stored in access-controlled, encrypted systems operated by the providers listed in section 4.2. Access is limited to those who need it to deliver the service. No system is perfectly secure, and we cannot guarantee absolute security, but we will notify you and the supervisory authority where required by law in the event of a breach affecting your data.
8. Your Rights
Under the GDPR you have the right to:
- access your personal data and receive a copy of it;
- rectify inaccurate or incomplete data;
- erase your data ("right to be forgotten");
- restrict processing in certain circumstances;
- data portability — receive your data in a structured, commonly used, machine-readable format;
- object to processing based on legitimate interest;
- withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these, write to info@skyboundbridge.com. We will respond within one month.
Important on withdrawal of consent: if you withdraw consent after we have already passed your profile to a flight school, we will stop processing your data and will ask the school to do the same — but from that point the school is an independent controller of the copy it holds, and you will need to exercise your rights directly with it as well. We will tell you which school holds your data so you can do this.
9. Right to Lodge a Complaint
If you believe we have handled your personal data unlawfully, you have the right to lodge a complaint with the Polish supervisory authority:
Prezes Urzędu Ochrony Danych Osobowych (UODO)
ul. Stawki 2, 00-193 Warszawa, Poland
uodo.gov.pl
You may also lodge a complaint with the supervisory authority in your own EU country of residence.
10. Cookies and Analytics
Our website uses:
- Essential cookies, required for the site to function. These do not require your consent.
- Analytics cookies — Google Analytics. These help us understand how the site is used. They are set only after you accept them in the consent banner shown when you first visit the site.
The Google Analytics script itself loads on every page, but until you accept it runs in Google Consent Mode with analytics and advertising storage denied: it stores nothing on your device and assigns you no identifier. In that state it sends only cookieless signals that a page was viewed, without identifying you. Accepting switches it to normal operation; declining leaves it restricted. Your choice is remembered in your browser's local storage so that we do not ask again on every page.
If you decline, analytics cookies are not set. You can change your mind at any time with the Cookie settings link in the footer of this site, which brings the banner back, or by writing to info@skyboundbridge.com and asking us to exclude you from analytics.
Web fonts. The typefaces on this site are loaded from Google Fonts. Your browser therefore requests the font files from Google, and your IP address is visible to Google as part of that request. No cookie is set by it and we receive no data from it, but it happens while the page is being displayed, before any cookie choice, because the fonts are part of rendering the page.
11. Automated Decision-Making
We use automated rules to route and prioritise enquiries. We do not make decisions producing legal or similarly significant effects concerning you based solely on automated processing. Every recommendation and every introduction to a school is reviewed by a human before it is made.
12. Changes to This Policy
We may update this Policy. The "Last updated" date above shows when it last changed. Where a change materially affects how we use data you have already given us, we will contact you.
13. Contact
Oleksandr Pereklo, trading as Skybound Bridge
Kościelna Droga 8A/1, 05-092 Łomianki Dolne, Mazowieckie Voivodeship, Poland
info@skyboundbridge.com
Terms of Service · Privacy Policy · Back to skyboundbridge.com