Privacy policy

Last updated 6 October 2026

This policy explains which personal data CAT Aviation processes when you visit this website or contact us, why we do it, and what rights you have.

1. Data controller

CAT Aviation ApS, CVR 82599711, Lufthavnsvej 34, 4000 Roskilde, Denmark.
Contact: phone 46 19 11 14.

2. What data we process

  • When you contact us through the form, by email or by phone: your name, email address, phone number and what you write to us, for example aircraft type, registration or what kind of hangar or office space you need.
  • When you visit the website: the web server records your IP address, the time of the visit and your browser type in a technical log. Our spam filter uses the IP address for up to one hour to limit the number of form submissions.
  • Statistics: only if you consent, Google Analytics collects information about how you use the site. See the cookie policy.
  • If you become a customer or tenant: the information needed to enter into and manage the agreement and to invoice you.

We do not ask for sensitive personal data or national identity numbers, and we ask you not to send such information through the form.

3. Purposes and legal basis

  • Answering enquiries and making offers: our legitimate interest in replying to you (GDPR Article 6(1)(f)) and, where relevant, steps taken at your request before entering into a contract (Article 6(1)(b)).
  • Agreements and invoicing: performance of a contract (Article 6(1)(b)) and our legal obligations under the Danish Bookkeeping Act (Article 6(1)(c)).
  • Operation, security and spam protection: our legitimate interest in a secure and functioning website (Article 6(1)(f)).
  • Statistics: your consent (Article 6(1)(a)), which you can withdraw at any time.

4. Who receives the data

We do not sell personal data. We use the following suppliers, who process data on our behalf under data processing agreements:

  • Simply.com A/S, Denmark – hosting of the website.
  • Microsoft – email and office software (Microsoft 365).
  • Google Ireland Limited – Google Analytics, only if you have consented.

When we assist with the purchase or sale of an aircraft, we only pass your contact details on to the other party by agreement with you.

5. Transfers outside the EU/EEA

Microsoft and Google may process data in the United States. Such transfers take place on the basis of the EU–U.S. Data Privacy Framework and the European Commission's standard contractual clauses.

6. How long we keep the data

  • Enquiries sent through the form are deleted automatically from the website after 12 months. Emails are deleted no later than 12 months after our last contact, unless the enquiry has led to an agreement.
  • Submissions rejected by the spam filter are deleted after 30 days.
  • Agreements and accounting records are kept for five years after the end of the financial year, as required by the Danish Bookkeeping Act.
  • Statistics in Google Analytics are kept for up to 14 months.

7. Your rights

You have the right to access the data we hold about you, to have incorrect data corrected, to have data deleted or its processing restricted, to object to our processing, and to receive your data in a commonly used format. If processing is based on consent, you can withdraw it at any time. Contact us at phone 46 19 11 14 to exercise your rights.

8. Complaints

You can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, datatilsynet.dk. We would appreciate it if you contact us first so we can try to resolve the matter.

9. Changes

We update this policy when our processing changes. The date at the top shows the latest version.