Who we are, and what we do not do
Before the detail: who answers for this data, and what Planenest does not do.
Who publishes Planenest
Oonest SRL, a Belgian private limited company whose registered office is at Boulevard Saint-Michel 113-115, 1040 Etterbeek, registered with the Crossroads Bank for Enterprises under number 0783.850.070 and represented by its director Samuel Lefever. It is the data controller.
Writing to us
contact@planenest.com, for any question about your data, an access request or a deletion. We answer within a month.
No advertising
No advertising profiling, no sale or rental of data. This site does not live off your attention.
No trackers
No Google Analytics, no Facebook pixel, no third-party ad network. Our two measurements, of the audience and of the speed of the pages, are described below, and neither sets a cookie.
No aggregated seller's contact details
For the adverts we read on other sites, we store neither phone numbers nor addresses: we remove them from the text before any processing, and contact happens at the source. The contact details of a seller who places their advert here are described below.
Three cookies, and no banner
Your session, the display language and your time zone, all needed for the site to work. None of them is used to follow you, which is why no banner asks you anything. The detail, and what Google's reCAPTCHA protection sets on some forms, is in the cookie policy.
What we process, and why
Every piece of data we keep answers to something you did. Without an account or an alert, we keep nothing that identifies you.
Visiting the site
We measure the audience with Plausible Analytics, a European service that sets no cookie, does not follow you from site to site and builds no individual profile. We read totals from it: pages viewed, where visits come from, clicks to the source sites. The site goes through Cloudflare, which protects it against attacks and robots and serves it faster: every visit passes through it. Cloudflare also measures, with a script and no cookie, how fast the pages display for you: it receives the address of the page, your browser and its system, and the loading times.
Technical logs
Our servers keep the usual access logs — IP address, page requested, timestamp — for 30 days, for security and fault diagnosis, then delete them.
Protected forms
Signing in, the first message to a seller and the alert by e-mail without an account are protected against robots by reCAPTCHA, a Google service: the script, loaded when you open the sign-in page or start filling in these forms, sends Google information about your browser and how you use the page, which Google processes under its own rules.
Opening an account
The account is for writing to sellers, placing adverts, keeping adverts aside or hiding them, and saving searches with their alerts. We then keep your pseudonym, which other members see, your name, which they never see, your e-mail address, a password we store only hashed, the language of your e-mails, and what you save.
Signing in with Google or Facebook
If you choose one of these ways to sign in, Google or Facebook sends us your name, your e-mail address and an account identifier, nothing else: we have access neither to your mailbox, nor to your contacts, nor to your posts. The service learns on its side that you sign in here. The password remains available: it is a convenience, not an obligation.
E-mail alerts
A saved search can write to you when a matching advert appears, or when one of them lowers its price. These mails are sent only if you ask for them, and every message carries a link that stops that alert, or all of them, in one click and without a password. Without an account, your address travels encrypted in the confirmation link, valid seven days: we keep nothing before you open it. Once confirmed, we keep the address and the search as long as an alert is on, and erase them within 24 hours after the last one stops.
Writing, selling, speaking for a company
What we keep when you write to a seller, place an advert or act for a company.
Writing to a seller
The messaging keeps the conversation on the site: your messages, their date, and what each of you has read. Each message also goes by e-mail to the other person, under the Planenest name: your address is never shown to them. What you write in a message, on the other hand, they read. We do not read your conversations; we may open one to handle a report, a fraud or a request from one of the two parties.
Placing an advert
We keep what you write about the aircraft, your photographs, from which we remove on upload the place a phone records in them, and what you say about yourself: private seller, club or professional, the company's name and VAT number, your phone number and your country. The advert shows your pseudonym (or your first name and the initial of your surname) or your organisation's name, and your phone number only if you ask. Your description is translated by Anthropic, an artificial intelligence service, and we count the views and saves of the advert without knowing who makes them.
Selling for an organisation
To verify an organisation, we read its VAT number in VIES, the European Commission's register, and keep the name and address it gives. An administrator can invite a colleague by typing their e-mail address: we send them a link valid for two weeks, and nothing else.
Claiming a professional's page
We keep your account, the role you state in the company and whether your e-mail address is on its domain, with our decision. The page of a professional read elsewhere carries the company's name and the logo of its website, never the name or contact details of a person.
Writing to us
Messages sent to contact@planenest.com or through the contact form are kept in our support tool, to answer you and to find the exchange again if there is a follow-up, then erased two years after the request is closed.
Your rights and our undertakings
European law gives you rights, which we exercise at your request without you having to justify it.
On what legal basis
Your account, your adverts, your conversations, your lists and your searches, the verification of an organisation and the claim of a page: performing the service you asked for (article 6.1.b). Alerts: your consent, which you withdraw in one click (article 6.1.a). Audience and speed measurement, technical logs, the protection of forms and the page of a professional read elsewhere: our legitimate interest in running the site, protecting it and saying who sells an advert (article 6.1.f).
For how long
Your account, as long as it exists; its deletion is carried out within 30 days. A conversation, as long as both people's accounts exist: it goes, for both, with the first one closed. A placed advert that has left the sale stays readable with its description and photographs, without your name once the account is closed: write to us to have it removed. An alert without an account, until 24 hours after the last one stops. The photographs of an advert read elsewhere, a year after it left, then only the first one. Technical logs, 30 days; contact messages, two years after closure.
Who your data is passed to
To nobody other than technical providers acting on our instructions: OVHcloud, which hosts the site and the database in Paris and carries our e-mails; Niboo SRL, in Brussels, which runs this infrastructure on our behalf; Cloudflare, through which every visit passes and which measures the speed of the pages; Plausible Analytics, in the European Union, for audience measurement; Anthropic, in the United States, to translate the placed descriptions and to read the adverts published elsewhere, from which phone numbers and addresses are removed before sending; Google, for reCAPTCHA, and Google or Meta if you sign in with their account. Nothing is sold or rented.
Your rights
Access, rectification, erasure, restriction of processing, portability, and objection to processing based on our legitimate interest. Write to contact@planenest.com: we answer within a month.
Making a complaint
If our answer does not satisfy you, you can turn to the Data Protection Authority, Rue de la Presse 35, 1000 Brussels, contact@apd-gba.be, competent for a company established in Belgium.
The adverts we read elsewhere
The adverts read on other sites name their source and link to the original advert. If you sell an aircraft whose advert appears here and no longer want it, write to us: we remove it within 48 hours, no questions asked, with its photographs. The same goes for a source site, or for a professional who does not want their page.
Deleting your account
From My account, in its Sign-in part, at any time: you type your address and your password again. An account opened with Google or Facebook first gives itself one, through "Forgot your password". You owe us no reason.
What goes: your account and its profile, your saved and hidden adverts, your searches and their alerts, your conversations, for you as for the person you were writing to, and your place in an organisation. Your adverts still on sale are withdrawn. We carry out the deletion within 30 days.
What survives, and why: your placed adverts that have ended, without your name, until you ask us to remove them; the server logs, 30 days, for security; and our exchanges of e-mails, two years, so that we can prove what we did with a request.
We update this page when the service changes, and the date at the top shows the latest version. Last updated: 19 October 2026.
For the detail of the cookies this site sets, see the cookie policy, linked in the footer.