This policy explains what personal data we collect when you visit cargocrew.aero or contact us, why we use it, and what rights you have.

1. Who is responsible

The controller for this website under the EU General Data Protection Regulation (GDPR) is:

CARGO CREW Germany GmbH
De-Saint-Exupéry-Straße 10, 60549 Frankfurt am Main, Germany
Phone: +49 69 24 753 5230 · Email: contact@cargocrew.aero

If your request is handled by another CARGOCREW company (in the United Arab Emirates, Turkey or China – see our Legal Notice), that company is also responsible for the data it processes to answer you.

For any privacy question or request, write to contact@cargocrew.aero with the subject “Privacy”.

2. Visiting the website

When you open a page, our web server automatically records technical data: IP address, date and time, the page requested, the referring page, and browser and device type. We need this data to deliver the website and keep it secure (Art. 6(1)(f) GDPR). Server logs are deleted after a short period, normally no later than 30 days, unless we need them to investigate an attack.

The website is hosted by our hosting provider on servers in the United Kingdom. The EU has recognised the UK as providing an adequate level of data protection.

3. Contact form and email

When you use our contact form, we collect your name, company, email address, phone number (optional), the type of enquiry, the route (from / to) and your message. If you email us, we receive the data you include in your email.

We use this data only to answer your enquiry and to prepare or carry out a booking or business relationship (Art. 6(1)(b) GDPR) and for our legitimate interest in business communication (Art. 6(1)(f) GDPR). Form submissions are sent by email to our mailbox, which is hosted by Microsoft (Microsoft 365).

Where needed to handle your request, we share it within the CARGOCREW group and, for bookings, with the airlines and handling agents involved. Some of them are outside the EU (for example in the UAE, Turkey or China). We transfer data to them only where this is necessary to carry out the steps you asked for (Art. 49(1)(b) GDPR) or on the basis of EU standard contractual clauses.

We delete enquiries when they are no longer needed, normally within 2 years of our last contact. If an enquiry leads to a contract, we keep the related records for the periods required by German commercial and tax law (up to 6 or 10 years).

4. Spam protection (Google reCAPTCHA)

To protect the contact form against spam, we use Google reCAPTCHA v3 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). reCAPTCHA analyses how the page is used (for example IP address, mouse movements and time on page) to tell people from bots. This is in our legitimate interest in preventing abuse of the form (Art. 6(1)(f) GDPR). Data may be transferred to Google LLC in the USA, which is certified under the EU-U.S. Data Privacy Framework. More information: Google Privacy Policy.

5. Cookies and consent

Cookies are small text files stored on your device. We use:

• Necessary cookies – needed for the website to work and to remember your cookie choice. Legal basis: § 25(2) TDDDG and Art. 6(1)(f) GDPR.
• Analytics cookies – only if you agree in our cookie banner. Legal basis: your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR).

Our cookie banner is provided by CookieYes (CookieYes Limited, United Kingdom). It stores your choice in the cookie cookieyes-consent for 1 year.

You can change or withdraw your consent at any time: Change cookie settings. You can also block or delete cookies in your browser settings.

6. Google Analytics

If you consent, we use Google Analytics 4 (Google Ireland Limited) to understand how visitors use our website, for example which pages are viewed and where visitors come from. IP addresses are not stored by Google Analytics 4. We use Google Consent Mode: without your consent, no analytics cookies are set. Data may be transferred to Google LLC in the USA, which is certified under the EU-U.S. Data Privacy Framework. Google Analytics data is deleted automatically at the end of the retention period set in our account (no longer than 14 months). Legal basis: your consent (Art. 6(1)(a) GDPR).

7. Social media links

Our website links to our profiles on LinkedIn, Instagram and TikTok. These are simple links: no data is sent to these networks until you click a link. Once you visit our profiles, the privacy policy of the network applies.

8. Your rights

You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16) or deleted (Art. 17), to restrict processing (Art. 18), to data portability (Art. 20), and to withdraw any consent at any time with effect for the future (Art. 7(3)).

Right to object (Art. 21 GDPR): where we process your data on the basis of our legitimate interests, you may object at any time for reasons arising from your particular situation.

To use your rights, email contact@cargocrew.aero. You also have the right to complain to a data protection supervisory authority, for example the authority responsible for us: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.

9. Security

The website uses encrypted connections (HTTPS). Fonts are loaded from our own server, so no data is sent to Google Fonts. We protect your data with technical and organisational measures appropriate to the risk.

10. Changes

We update this policy when our website or the law changes. The current version is always available on this page.

Last updated: 25 October 2026