Privacy & Cookie Policy

Last updated: September 2026

1. Who we are (data controller)

The data controller for this website and the services offered through it is:

G.M.S. Ground Mobility Solutions Ltd. (trading as Managed Charter)
Lykavitou 25, Office 101, Egkomi 2401, Nicosia, Republic of Cyprus
Reg. No. HE432058 · VAT No. 10432058M
Email: hello@managedcharter.com · Phone: +357 22 022 105

2. What data we collect and why

Contact & proposal forms

Name, work email, company, service interest and the program details you submit. Legal basis: pre-contractual steps at your request (Art. 6(1)(b) GDPR) and our legitimate interest in responding to B2B inquiries (Art. 6(1)(f)). Retained for up to 24 months after the last contact, or longer where a contract follows.

Client & supplier portal accounts

Account credentials, company details, booking and invoicing records. Legal basis: performance of a contract (Art. 6(1)(b)) and legal obligations such as accounting rules (Art. 6(1)(c)). Retained for the duration of the relationship plus statutory retention periods.

Program participant data

Where a client's program requires it (e.g. passenger manifests for air, vessel or rail charter), we process traveler data strictly on the client's instructions as needed to deliver the program, and share it only with the disclosed operators performing the service.

Technical logs

IP address and request metadata in standard server logs, kept for security and abuse prevention (Art. 6(1)(f)) and rotated on a short cycle.

3. Cookies

This website sets only strictly necessary cookies: a PHP session cookie used for security (CSRF protection, form flash messages) and, for portal users, authentication. These are exempt from consent under the ePrivacy rules. We do not set analytics, advertising or other tracking cookies. Your choice in the cookie banner is stored locally in your browser so we do not ask again.

4. Who we share data with

Data is shared only where necessary to deliver the service: with the disclosed operators performing your transportation program (each named to you before contracting), with our IT hosting providers, and with professional advisers or authorities where legally required. We do not sell personal data. Where a recipient is outside the EEA, transfers rely on an adequacy decision or EU Standard Contractual Clauses.

5. Your rights

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Request erasure ("right to be forgotten").
• Restrict or object to processing based on legitimate interest.
• Data portability for data you provided to us.
• Withdraw consent at any time, where processing is based on consent.

To exercise any right, email hello@managedcharter.com. We respond within one month. You also have the right to lodge a complaint with a supervisory authority — in Cyprus, the Office of the Commissioner for Personal Data Protection (dataprotection.gov.cy), or the authority of your habitual residence.

6. Security & changes

Access to personal data is restricted to staff who need it, transmitted over TLS and stored on access-controlled systems. We may update this policy as the service evolves; material changes will be flagged on this page with a new "last updated" date.