Privacy policy
Version 1.1 — 11 October 2026
Controller
THOR 42 LAB, 60 rue François 1er, 75008 Paris, France (see the legal notice).
Data collected and purposes
| Processing | Data | Legal basis | Retention |
|---|---|---|---|
| Answering a demo, Proof Sprint or contact request | Name, work e-mail, company, role, operation, airport, arrival volume, message | Pre-contractual steps at your request (GDPR art. 6.1.b) | 3 years after the last contact |
| Proof of your consent to sending the request | Date and time of consent | Legitimate interest: being able to evidence the request (art. 6.1.f) | Same as the request |
| Follow-ups after a demo (four messages at most) | Name, e-mail, company, airport, course of the demo | Legitimate interest: following the demo you asked for (art. 6.1.f); unsubscribe link in every message | Until you unsubscribe, 3 years at most |
| Follow-up by the commercial associate who referred you (if you came through their link) | Company, contact name, airport, status of the request and demo (never the e-mail or message) | Legitimate interest: paying and coordinating the business introducer (art. 6.1.f) | Duration of the business relationship |
| Order, payment and invoicing | Company, address, VAT number, e-mail, payment method (processed by Stripe, never stored by THOR) | Performance of the contract (art. 6.1.b) and legal obligation (art. 6.1.c) | 10 years for accounting records |
| Service security (technical server logs) | IP address, date, page requested | Legitimate interest: protecting the service (art. 6.1.f) | 14 days at most |
No data is used for advertising, profiling or resale. The website uses no cookie, no tracker and no audience measurement (see cookies).
Recipients and processors
- Hetzner Online GmbH (Germany): hosting of the THOR platform and database.
- Netlify, Inc. (United States): website hosting and backup form. Transfers are covered by the European Commission’s standard contractual clauses and, where applicable, the EU–US Data Privacy Framework. Submissions through the backup form go through Netlify’s spam filtering (Akismet service).
- E-mail delivery provider (Brevo, France), when we answer you by e-mail.
- Stripe Payments Europe, Ltd. (Ireland): online payment and invoicing of orders.
Flight data shown
Flights shown on the website appear under masked identifiers, without callsign or registration; they are not meant to identify any person.
Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability, and the right to set instructions on what happens to your data after your death (article 85 of the French Data Protection Act). To exercise them, write to us through the form or by post to the registered office. You may also lodge a complaint with the French data protection authority (CNIL, www.cnil.fr).