Data controller
Stellar Nebula (SASU au capital de 1 000 €), 9 rue des Colonnes, 75002 Paris, France, publisher of the MisterLanding website and apps. Contact: contact form or contact@misterlanding.com.
Data we collect
Identity and contact details (name, e-mail, phone, billing address, optional date of birth, job title for managers), aircraft data (registration, type, mass, dimensions), declared flights and parking bookings, payment history, invoice dispute messages, and the name of the devices signed in to the apps. MisterLanding never stores card details: they are entered at Stripe.
The apps use the camera only to read the QR code displayed at the aerodrome: no image is recorded or sent. They use no location, no advertising and no analytics or tracking tool.
Purposes and legal bases
Computing and collecting fees and providing the service (contract), accounting and tax duties (legal obligation), security and fraud prevention (legitimate interest).
Recipients
The aerodrome concerned by the declaration or booking, the flying club for flights made on its aircraft, Stripe for card payments and our host. Data is never sold or used for advertising.
E-mail prospecting
We write to aerodrome operators, flying clubs and flight schools to present MisterLanding (legitimate interest), using the contact details published by the French AIS (aeronautical publications, VAC charts), by the DSAC (lists of training organisations) or by these organisations themselves and their federations. Our e-mails contain no tracking pixel and no personal link: their links only name the campaign, which lets us count the visits to the website coming from it, once per browser, without knowing who clicked. To know whether a campaign was useful, we also match the sign-ups against our list (e-mail address, ICAO code of the aerodrome). Every e-mail lets you unsubscribe in one click; an unsubscribed address is kept on an opt-out list so that it never receives our campaigns again. Prospecting contact details are kept for at most 3 years after the last contact.
Protecting the forms against bots
The contact, sign-up and declaration-without-account forms are protected against automated submissions by an ALTCHA check: before sending, your browser (or the app) solves a small computation, without asking you anything. It works with no third party, no cookie and no collection of personal data. If the check cannot run (JavaScript disabled), write to us at contact@misterlanding.com.
Transfers outside the European Union
Stripe may process some payment data outside the European Union, in particular in the United States, with the safeguards provided by the GDPR (standard contractual clauses of the European Commission).
Retention
Account: while it is open; when it is deleted, its personal information is erased at once. Invoices and accounting records, with the name and address they bear: 10 years (legal obligation). Contact form messages: 3 years. Login logs: 1 year.
Your rights
Access, rectification, erasure, restriction, objection and portability of your data. You can delete your account at any time: Profile › Delete my account on the website, or Account › Delete my account in the apps. For any other request: contact form, or write to Stellar Nebula, 9 rue des Colonnes, 75002 Paris, France. You may lodge a complaint with the CNIL (cnil.fr) or your own data protection authority.
Cookies
Only strictly necessary cookies are used: login session and chosen language. No advertising or analytics cookies.