Privacy Policy

For website-related processing and general enquiries, Flyingcode acts as the controller of the personal data processed through this website. Depending on your relationship with us and the services provided, the relevant contracting entity may be Flyingcode Europe Ltd. or Flyingcode Asia Ltd.

If you have questions about which Flyingcode entity is responsible for your data, or if you want to exercise your privacy rights, you can contact us at legal@flyingcode.eu.

When you contact us or use our website, we may collect personal data that you provide directly, including your name, email address, phone number, company name, project details, and any other information you choose to share in contact forms, emails, or meetings.

We may also collect limited technical information required to operate and secure the website, such as IP address, browser type, device information, language preferences, server logs, and basic page request data. Where cookies are used, they are described in our Cookie Policy.

Where applicable under the General Data Protection Regulation (GDPR) and related EEA privacy laws, we process personal data on one or more of the following legal bases: to take steps at your request before entering into a contract, to perform a contract, to comply with legal obligations, to pursue legitimate business interests, and, where required, on the basis of your consent.

Our legitimate interests may include responding to business enquiries, maintaining website security, preventing misuse, managing client relationships, and improving our services. If we rely on consent for any non-essential processing, you may withdraw that consent at any time.

We use personal data to respond to enquiries, prepare proposals, deliver our services, manage projects, communicate with clients and prospective clients, maintain website functionality and security, comply with legal obligations, and protect our legitimate business interests.

We do not sell or rent personal data, and we do not share personal data with third parties for their own marketing purposes. Where we work with service providers, they process data only on our instructions and under appropriate contractual and confidentiality safeguards.

We may share personal data with trusted processors and suppliers who help us provide our website and services, such as hosting, infrastructure, email, communication, security, backup, and professional advisory providers. We only share the data that is necessary for the relevant purpose.

We may also disclose personal data where required by law, regulation, court order, or legitimate requests from public authorities, or where disclosure is necessary to establish, exercise, or defend legal claims.

Where possible, we store and process personal data within the European Economic Area (EEA). If personal data is transferred outside the EEA, we take appropriate safeguards to ensure that the transfer is lawful and that your data remains protected.

These safeguards may include adequacy decisions, the European Commission's Standard Contractual Clauses, or other lawful transfer mechanisms recognised under applicable data protection law.

We keep personal data only for as long as necessary for the purpose for which it was collected, for as long as required to manage our relationship with you, and for as long as needed to comply with legal, accounting, tax, or contractual obligations.

Contact form submissions and general business enquiries are typically retained for up to 24 months unless a longer retention period is justified, for example where discussions develop into a project or where the law requires a longer retention period.

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, disclosure, alteration, or destruction. These measures may include access controls, encryption, secure hosting, logging, and internal procedures for handling personal data responsibly.

Even so, no website, infrastructure, or method of transmission over the internet can be guaranteed to be completely secure. We therefore cannot guarantee absolute security.

Subject to applicable law, you may have the right to request access to your personal data, rectification of inaccurate data, deletion, restriction of processing, portability, objection to certain processing, and withdrawal of consent where processing is based on consent.

You also have the right to lodge a complaint with a competent supervisory authority. If you are in Norway, this may be Datatilsynet. If you are in Germany, this may be the competent data protection authority in your federal state. You may also contact the supervisory authority in the EEA country where you live or work.