This policy describes the personal data eFlight Training collects through the website and during training, why we do so, how long we keep it and what rights you have under the General Data Protection Regulation (GDPR).
Data controller
eFlight Training AB, Trollhättan-Vänersborg Airport, Malöga 101, 461 93 Västra Tunhem, Sweden, is the data controller. Send questions about personal data to tommy@eflight.se.
What data we collect
- Contact form: name, email, phone number if you provide it, which base and topic your enquiry concerns, and your message.
- Application form: name, date of birth, email, phone, town, preferred course, base and start date, current licences, number of flight hours and whether you hold a medical certificate.
- During training: the data needed to carry out and document the training, for example personal identity number, licences and ratings, medical certificate, flight time, exam results and training records.
- Technical information: IP address and time when you submit a form, and the logs created by the web server.
Why we process the data and on what legal basis
- Answering questions that you send us. Legal basis: legitimate interest.
- Handling your application and planning course start, base and aircraft. Legal basis: steps prior to entering into a contract, at your request.
- Information about your medical certificate is health data. We only process it with your explicit consent, which you give in the application form, and use it to assess when you can start flying solo.
- Delivering the training and issuing certificates. Legal basis: contract.
- Meeting our requirements as a flight school (ATO) under EASA regulations and the Swedish Transport Agency's oversight, for example keeping training records. Legal basis: legal obligation.
- Protecting the website against spam and abuse. Legal basis: legitimate interest.
We do not send newsletters or marketing unless you have asked us to first.
How long we keep the data
- Messages and applications sent through the website are deleted automatically after 12 months. Copies in our email are cleared in the same way.
- IP addresses in submitted forms are anonymised after 30 days.
- If you start training with us, your training record is kept for at least three years after you complete the training, in line with EASA requirements for approved training organisations (ORA.ATO.120). Accounting records, such as invoices, are kept for seven years under the Swedish Bookkeeping Act.
Who we share the data with
We never sell personal data. We only disclose it when needed for your training or when required by law:
- The Swedish Transport Agency, when registering for theoretical examinations and applying for licences and ratings.
- Examiners who conduct your skill test or proficiency check.
- Flygcert.com, which provides the online theory course. They receive your name and email address to create your account.
- IT suppliers for the website, email and storage. They process the data on our behalf under data processing agreements.
The data is processed within the EU/EEA. If a supplier needs to transfer data outside the EU/EEA, this only happens on the basis of a European Commission decision or standard contractual clauses.
Cookies and browser storage
The website does not use any cookies for statistics or marketing. The base you choose, and whether you have paused the animation in the footer, is saved in your browser's local storage (localStorage) so that it also applies the next time you visit. This information never leaves your device, and you can clear it in your browser settings. Anyone who logs in to edit the website receives the necessary login cookies.
On the home page you can choose to show your nearest base. Your browser will first ask whether you allow your location to be used. The location is only used in your browser to calculate the distance to our bases. It is not sent to us or anyone else and is not stored. You can withdraw permission at any time in your browser settings.
The Get directions button opens Google Maps, and links to other websites lead to services with their own privacy terms. No information is sent to them until you click.
English version of the website
The website is available in Swedish and English. The English version has been translated by us. Text added later may be translated automatically with Google Translate. In that case only the website's own texts are sent for translation, from our server. What you write in the forms and information about you as a visitor, such as your IP address, is never sent to Google. The language you are reading in is shown by the web address (/en/ for English) and is not stored in any cookie.
Your rights
You have the right to:
- find out what data we hold about you and receive a copy of it
- have inaccurate data corrected
- have data erased, unless we are required by law to keep it
- request that processing be restricted, or object to processing based on legitimate interest
- receive data you have provided yourself in a machine-readable format (data portability)
- withdraw your consent at any time, without affecting processing that has already taken place
Contact us at tommy@eflight.se and we will reply within one month. If you think we are processing your data incorrectly, you can lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
Security
The website uses an encrypted connection (HTTPS). Submitted forms are only accessible to authorised staff at the flight school, and we restrict access to training records to those who need them for their work.
Changes
This policy was updated on 5 November 2026. If there are significant changes, we will inform you on the website and, if you are one of our students, by email.