List of active policies

Full policy

Who we are

This platform, training.cofa.aero, is operated by CofA BV, Nieuwpoortsesteenweg 943, 8400 Ostend, Belgium, VAT BE 1028.511.982 ("CofA", "we"). For anything related to your personal data, contact info@cofa.aero.

What we store

• Account details: your name, e-mail address, preferred language and any optional profile fields you fill in yourself.
• Training records: enrolments, progress, attempts and scores on tests and exercises, course completions, and issued certificates (your name, the course, the date and a unique verification code).
• Technical logs: activity log entries with IP address and timestamps, kept for security and for evidencing training activity.

The platform uses only the functional cookies needed to keep you signed in. There are no tracking, analytics or marketing cookies.

What we use it for

• to give you access to the training that you or your employer arranged (performance of a contract);
• to issue certificates and keep the training records that you or your employer may need to demonstrate compliance to aviation authorities under EASA regulations (legitimate interest and, for your employer, legal obligations);
• to keep the platform secure and prevent abuse (legitimate interest).
• to remind you by e-mail when one of your certificates is about to expire, so that you can arrange recurrent training before it lapses. Such a reminder names the follow-up course that renews the qualification (legitimate interest).

We do not sell your data and we make no automated decisions about you. The only e-mails we send concern your account, your courses and expiring certificates — we send no newsletters or advertising.

Who can see your data

• CofA staff who deliver the trainings and administer the platform;
• if your employer booked the training: the designated contact at your employer, who sees the progress, results and certificates of the employer's own staff only;
• aviation authorities receive training records via your employer during audits, or from us when we are legally required to provide them.

There are no other recipients.

When your employer arranges your training

Where your employer has concluded a data processing agreement with us, your employer decides on your training record (enrolments, progress, results and certificates) and we keep it on your employer's behalf. We remain responsible for your account, the security of the platform and its technical logs.

Where your data is kept, and how it is protected

All data is stored on servers within the European Union (hosted by Hetzner in Finland). Connections are encrypted (TLS). Our administrative tools are reachable only through a private network, and our internal partner portal only after sign-in with a one-time code. Backups are made daily to a secured CofA system in Belgium and rotate automatically: no backup copy is older than about five weeks.

Access from outside the EU

Your data is stored inside the European Union, but three of our providers may access or process it from outside:

• Zoho, which provides our mailboxes, may allow its group companies in India to access data for support and debugging. This is set out in our data processing agreement with Zoho Corporation B.V. (Netherlands).
• Brevo, which sends the platform's e-mails, may use group companies outside the EU, notably in the United States and India, for support and maintenance.
• Cloudflare, Inc. (United States), which provides the sign-in and the secure connection for our internal partner portal, where CofA staff follow training progress and results, may process that data outside the EU.

These transfers take place under the safeguards in each provider's data processing terms, such as the European Commission's standard contractual clauses.

Service providers

We use a small number of providers that process data on our behalf, under EU data processing terms: Hetzner Online GmbH (hosting, Germany/Finland), Brevo — Sendinblue SAS (platform e-mail such as account and course notifications, France), Zoho Corporation (our mailboxes when you e-mail us, EU datacentres) and Cloudflare, Inc. (DNS and hosting of cofa.aero, and the sign-in and secure connection for our internal partner portal).

How long we keep it

• Training records and certificates: five years after course completion — the audit trail that aviation regulation expects. Longer only where your employer's contract requires it.
• Account details: for as long as your account is active; removed on request (see below).
• Backups: rotate automatically; the oldest copy is about five weeks old.

Your rights

Under the GDPR you can request access to (and an export of) your data, have it corrected, object to or restrict processing, and ask for erasure. You can do this from your profile on this platform (Privacy and policies → Data requests) or by e-mailing info@cofa.aero. Training records and certificates that form part of the regulatory audit trail may need to be retained for the period above even if you ask for erasure. You can also lodge a complaint with the Belgian Data Protection Authority (gegevensbeschermingsautoriteit.be) or the supervisory authority of your own EU country.

Changes to this notice

When this notice changes, a new version is published on the platform and you will be asked to agree again at your next sign-in. Version: 4 October 2026.

Full policy

1. Who we are and what these terms cover

CofA Training (training.cofa.aero) is operated by CofA BV, Nieuwpoortsesteenweg 943, 8400 Ostend, Belgium, VAT BE 1028.511.982 ("CofA", "we"). These terms of use apply to everyone who logs in to the platform: trainees, training managers and instructors. By logging in you accept them.

The commercial agreement between CofA and your organisation (prices, invoicing, cancellation, the number of trainees) is a separate document. Where that agreement and these terms differ, the agreement prevails for your organisation; these terms still apply to you as a user.

2. Your account

Your account is created for you by CofA or by the training manager of your organisation. It is personal and may not be shared, lent or transferred. You are responsible for everything that happens under your account. Keep your password to yourself and tell us at once at info@cofa.aero if you think someone else has used it.

Your name in the account must be your real name as it should appear on your certificates. Ask your training manager or CofA to correct it if it is wrong.

3. Using the training material

All course content on this platform — texts, images, diagrams, interactive exercises, questions and downloadable files — is owned by CofA or used under licence, and is protected by copyright. We grant you a personal, non-exclusive, non-transferable licence to use it for your own training on this platform, for as long as your enrolment lasts.

You may not copy, download, print, record, photograph, scrape, translate, publish, share or otherwise reproduce or distribute any part of the material, nor use it to create your own training, unless CofA has agreed to it in writing. This applies inside your organisation as well as outside it: a colleague who needs the training gets their own enrolment.

Notes you make for yourself while studying are yours.

4. Examinations and assessments

Knowledge checks and final examinations are part of a regulatory training record. You take them yourself, without help from others and without notes, books, other browser tabs or any other aid, unless the examination says otherwise. You may not share examination questions or answers with anyone, in any form, before or after your attempt.

CofA may invalidate an attempt, and any certificate based on it, if we have reason to believe these rules were broken. Where a regulator or your organisation is entitled to know, we will inform them.

5. Certificates

A certificate is issued in your name when you have met all the completion requirements of a course, including passing its examination. Every certificate carries a unique verification code. CofA confirms the holder, course and date of a certificate on request to anyone who presents that code, such as your employer, an auditor or an authority.

Some certificates have a validity period, set by the training standard the course follows (for example a recurrent training every 24 months). The validity is shown with the certificate on your dashboard. It is your responsibility, and your organisation's, to follow the recurrent training in time.

Certificates may not be altered. Editing, forging or misrepresenting a certificate is a serious matter: it leads to withdrawal of the certificate, closure of your account, and where appropriate a report to the competent authority.

We keep the training record behind your certificates for the period that aviation regulations require; see the privacy notice.

6. Your organisation

If your access is provided by your employer or another organisation, that organisation's training manager can see your enrolments, progress, results and certificates, and can create, change and close your account. Records of your training are part of your organisation's training file, as aviation regulations require. Questions about that access go to your training manager first.

7. Availability and changes

We aim to keep the platform available at all times, but we do not guarantee uninterrupted access. We carry out maintenance, usually at night in Central European time, and we may have to interrupt the service for security or technical reasons. We may change, update or withdraw course content to keep it in line with the regulations it covers; a certificate you have already earned stays valid on the terms in force when it was issued.

8. Acceptable use

You may not try to gain access you have not been given, to bypass any technical restriction, to interfere with the platform or other users, or to use automated tools to access or extract content. Anything you post on the platform (for example in a forum or an answer) must be lawful, accurate and respectful of others.

9. Liability

We take care to keep the training accurate and in line with the applicable regulations, but the training does not replace the regulations, your organisation's procedures or your own professional judgement. To the extent permitted by law, CofA is not liable for indirect or consequential loss arising from the use of the platform or the training, and our total liability towards you is limited to the amount paid for your enrolment. Nothing in these terms excludes liability that cannot be excluded by law.

10. Suspension and ending access

Your access ends when your enrolment ends or when your organisation closes your account. CofA may suspend or close an account, with notice where reasonably possible, if these terms are broken or if the account is used in a way that endangers the platform, other users or the integrity of the training records. Certificates you have validly earned remain on record.

11. Personal data

How we handle your personal data is set out in the privacy notice, which you accept separately.

12. Changes to these terms

We may update these terms, for example when the platform gains new functions or when regulations change. You will be asked to accept the new version the next time you log in, and the version history is available on the platform.

13. Applicable law and disputes

These terms are governed by Belgian law. If a dispute cannot be resolved between us, the courts of the judicial district of West Flanders, Belgium, are competent, without prejudice to any mandatory consumer protection rules that apply to you.

14. Contact

CofA BV, Nieuwpoortsesteenweg 943, 8400 Ostend, Belgium — info@cofa.aero.