CofA Training

Who we are

This platform, training.cofaero.eu, is operated by CofA BV, Nieuwpoortsesteenweg 943, 8400 Ostend, Belgium, VAT BE 1028.511.982 ("CofA", "we"). For anything related to your personal data, contact info@cofaero.eu.

What we store

• Account details: your name, e-mail address, preferred language and any optional profile fields you fill in yourself.
• Training records: enrolments, progress, attempts and scores on tests and exercises, course completions, and issued certificates (your name, the course, the date and a unique verification code).
• Technical logs: activity log entries with IP address and timestamps, kept for security and for evidencing training activity.

The platform uses only the functional cookies needed to keep you signed in. There are no tracking, analytics or marketing cookies.

What we use it for

• to give you access to the training that you or your employer arranged (performance of a contract);
• to issue certificates and keep the training records that you or your employer may need to demonstrate compliance to aviation authorities under EASA regulations (legitimate interest and, for your employer, legal obligations);
• to keep the platform secure and prevent abuse (legitimate interest).

We do not use your data for marketing, we do not sell it, and we make no automated decisions about you.

Who can see your data

• CofA staff who deliver the trainings and administer the platform;
• if your employer booked the training: the designated contact at your employer, who sees the progress, results and certificates of the employer's own staff only;
• aviation authorities receive training records via your employer during audits, or from us when we are legally required to provide them.

There are no other recipients.

Where your data is kept, and how it is protected

All data is stored on servers within the European Union (hosted by Hetzner in Finland). Connections are encrypted (TLS) and administrative access is restricted to a private network. Backups are made daily to a secured CofA system in Belgium and rotate automatically: no backup copy is older than about five weeks.

Service providers

We use a small number of providers that process data on our behalf, under EU data processing terms: Hetzner Online GmbH (hosting, Germany/Finland), Brevo — Sendinblue SAS (platform e-mail such as account and course notifications, France), Zoho Corporation (our mailboxes when you e-mail us, EU datacentres) and Cloudflare (DNS and web infrastructure for cofaero.eu).

How long we keep it

• Training records and certificates: five years after course completion — the audit trail that aviation regulation expects. Longer only where your employer's contract requires it.
• Account details: for as long as your account is active; removed on request (see below).
• Backups: rotate automatically; the oldest copy is about five weeks old.

Your rights

Under the GDPR you can request access to (and an export of) your data, have it corrected, object to or restrict processing, and ask for erasure. You can do this from your profile on this platform (Privacy and policies → Data requests) or by e-mailing info@cofaero.eu. Training records and certificates that form part of the regulatory audit trail may need to be retained for the period above even if you ask for erasure. You can also lodge a complaint with the Belgian Data Protection Authority (gegevensbeschermingsautoriteit.be) or the supervisory authority of your own EU country.

Changes to this notice

When this notice changes, a new version is published on the platform and you will be asked to agree again at your next sign-in. Version: 20 August 2026.