Erasure
GDPR Article 17 · Right to be forgotten
The short version: Any crew member — whether you have a CrewMark account or not — can request that we erase personal data we hold about you. This includes pseudonymized name records inside other crew members' archives. We verify the request via email, run the scrub job, and report back within 30 days.
Who can request erasure
- CrewMark account holders — sign in and use Settings → "Delete my account". Deletion is immediate and irreversible. Within 30 days, every CrewMark database row that references your account is purged; backups roll off within the next backup cycle (max 30 additional days).
- Non-users mentioned in someone else's archive — if you have flown with a CrewMark user, your name may appear in their roster snapshots in pseudonymized + encrypted form. You can still request erasure even without an account. Use the form below.
How the scrub job works
- You submit a request via the form below (or by emailing privacy@crewmark.tech directly).
- We email you a confirmation link to verify the request is genuine. Without verification, no data is changed.
- After verification, we run a scrub job that searches every roster snapshot in our database for matches against your name (we have to compute the hash for each user's salt to find them — your name is never stored in plaintext).
- We replace your pseudonym + encrypted name in every affected snapshot with a redacted placeholder. The structure of the snapshot is preserved; only your name is removed.
- We notify you when the job completes — typically within 30 days, as required by Article 12(3).
One narrow exception: a single audit-log line recording that the deletion happened (date, the email address that confirmed the request, the admin who ran the job) is retained for legitimate-interest accountability under GDPR Art. 6(1)(f) and Art. 5(2). This is never used for any other purpose.
Submit an erasure request
The interactive form lives on the app subdomain because it talks to the CrewMark database. Click below to open it — it takes about 60 seconds.
Your continuing rights
Even after erasure, you retain these GDPR rights:
- Art. 15 — Right of access: you may ask what (if any) data we still hold about you.
- Art. 21 — Right to object: to further processing.
- Art. 77 — Right to lodge a complaint: with the Belgian Data Protection Authority if you believe this erasure was unlawful or your rights were breached.
To exercise any of these, email privacy@crewmark.tech or write to the Belgian DPA — www.dataprotectionauthority.be.
Contact
CrewMark — Controller
privacy@crewmark.tech
Belgium