Privacy Policy

brustemfly-in.eu
brustemfly-in.be
Last updated: 22 April 2026

1. Introduction

Brustem Fly-in (“we”, “us”, or “our”) operates the website brustemfly-in.eu and brustemfly-in.be and organises the Brustem Fly-in aviation event held at Brustem Airfield, Sint-Truiden, Belgium. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website or interact with our services, in accordance with the General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679.

2. Data Controller

The data controller responsible for your personal data is:

Nebulaviation vzw
Sliksteenvest 18, 3300 Tienen, Belgium
brustemflyin@gmail.com

For any questions regarding this Privacy Policy or your personal data, please contact us via the contact details provided on our website.

3. Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data:

3.1 Data You Provide Directly

  • Name and surname
  • Address
  • Email address
  • Phone number
  • Pilot licence details (if registering as a participant)
  • Aircraft registration information
  • Any other information you voluntarily submit via contact or registration forms

3.2 Data Collected Automatically

  • IP address
  • Browser type and version
  • Operating system
  • Pages visited, date and time of access
  • Referring website
  • Cookies and similar tracking technologies (see Section 8)

4. Purposes and Legal Basis for Processing

We process your personal data for the following purposes and on the indicated legal bases:

  • Event registration and administration — Legal basis: performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR)
  • Responding to enquiries and providing information about the event — Legal basis: legitimate interest (Art. 6(1)(f) GDPR)
  • Sending event updates (only with your consent) — Legal basis: consent (Art. 6(1)(a) GDPR)
  • Improving our website and user experience — Legal basis: legitimate interest (Art. 6(1)(f) GDPR)
  • Compliance with legal obligations (e.g. aviation safety regulations) — Legal basis: legal obligation (Art. 6(1)(c) GDPR)

5. Data Sharing and Third Parties

We do not sell your personal data. We may share your data with the following categories of recipients when necessary:

  • Aviation authorities or regulatory bodies, as required by Belgian and European aviation regulations
  • IT service providers and hosting companies (website hosting, email services)
  • Event partners and volunteers, only to the extent necessary for organising the fly-in
  • Legal or government authorities when required by law

Where third parties process data on our behalf, we ensure appropriate data processing agreements are in place in accordance with Article 28 GDPR.

6. International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). If any data transfer outside the EEA is required, we will ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Event registration data: retained for up to 3 years after the event for administrative and legal purposes
  • Newsletter subscription data: retained until you withdraw your consent
  • Website analytics data: retained for a maximum of 26 months
  • Contact form enquiries: retained for up to 2 years after the enquiry is resolved

8. Cookies and Tracking Technologies

Our website uses cookies to ensure proper functionality and to analyse website traffic. The types of cookies we use include:

  • Strictly necessary cookies — required for the website to function and cannot be switched off
  • Analytics cookies — help us understand how visitors interact with our website (e.g. via Google Analytics or similar tools)
  • Functional cookies — enable enhanced functionality and personalisation

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the website.

9. Your Rights Under GDPR

As a data subject, you have the following rights under the GDPR:

  • Right of access (Art. 15) — to obtain confirmation of whether your data is being processed and access to it
  • Right to rectification (Art. 16) — to correct inaccurate or incomplete data
  • Right to erasure (Art. 17) — to request deletion of your data under certain conditions
  • Right to restriction of processing (Art. 18) — to limit how we process your data
  • Right to data portability (Art. 20) — to receive your data in a structured, commonly used format
  • Right to object (Art. 21) — to object to processing based on legitimate interests or direct marketing
  • Right to withdraw consent (Art. 7(3)) — at any time, without affecting the lawfulness of processing before withdrawal

To exercise any of these rights, please contact us using the contact information provided on our website. We will respond to your request within 30 days.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for data in transit, access controls, and regular security reviews.

11. Children’s Privacy

Our website and event services are not directed at children under the age of 16. We do not knowingly collect personal data from children under 16 without parental consent. If you believe we have inadvertently collected such data, please contact us so we can take appropriate action.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

13. Complaints

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données):

Gegevensbeschermingsautoriteit
Drukpersstraat / Rue de la Presse 35, 1000 Brussels, Belgium
Website: www.dataprotectionauthority.be
Email: contact@apd-gba.be

14. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us through brustemflyin@gmail.com.

Scroll to Top