A turnaround control tool handles sensitive data: passenger data, airline customers’ data, ramp crews’ data. Ground handling data security and compliance with the GDPR are not bolted on afterwards; they shape Turnpilot’s design from the start.
This page sets out our principles. The specific arrangements, tailored to your organisation, are described in the contract and the documentation provided to each customer.
Ground handling data security: our GDPR principles
Data minimisation
Turnpilot collects only the data needed to run turnarounds and to prove what happened. What is not useful to operations is not collected. Personal data is kept to the strict minimum, and access to it is limited to those who need it to act.
Defined purposes
Data serves clear purposes: following and running turnarounds, anticipating delays, establishing facts, justifying services rendered. It is not used for purposes other than those agreed with the customer.
Limited retention
Data is not kept indefinitely. Retention periods are limited, proportionate to each purpose and set with the customer.
Your data stays yours
The data from your operations is the customer’s property. Turnpilot processes it on your behalf, within the agreed framework, and you can retrieve it under the terms set out in the contract.
In general terms, the organisation that uses Turnpilot for its operations acts as data controller; Turnpilot acts as processor within the meaning of the GDPR, on its instructions. The exact allocation of roles depends on each setup and is set out in the contract.
Strict separation between airlines
A single station often serves several competing airlines. Turnpilot keeps their data separate: each airline sees only its own flights, through the airline portal. Access is set by role and by organisation; everyone sees what they need for their job, and nothing more.
Images for operations, not surveillance
Turnpilot’s time-stamped images are used to follow operations and establish facts in case of an incident or a dispute: see cameras and evidence.
- No identification of individuals — Turnpilot does not identify people in images.
- Bounded use — Images serve the agreed purposes, not the individual assessment of agents.
- Clear ownership — Images belong to the operator that produces them.
Crews informed and involved
A ramp tool only works if the people using it trust it. Turnpilot is designed to run operations, not to monitor people.
- Informing crews — Agents are told what is collected, why and how, before go-live.
- Dialogue with staff representatives — Deployment includes engaging with the operator’s employee representative bodies, according to the rules that apply to it.
- Transparent use — Usage rules are written down and shared, so everyone knows what the tool is for and what it is not for.
Individuals’ rights
Data subjects have the rights provided by the GDPR: access, rectification, erasure, restriction and objection. As processor, Turnpilot helps the controller respond to them. The French data protection authority, the CNIL, publishes useful resources on these rights.
Security as an ongoing requirement
Data protection also relies on information security: access control, traceability of actions, protection of entrusted data. Turnpilot sits on top of existing systems without replacing them: it does not take control of your departure systems.
IT departments and data protection officers often have precise questions. We answer them in a dedicated conversation, with documentation. Answers to the most frequent questions are in the FAQ.
For the website itself, which sets no cookies, see the privacy policy.