GCC Virtuals is committed to protecting your personal information and your right to digital privacy. In line with the European Union General Data Protection Regulation (GDPR) and applicable international privacy standards, this notice explains how we collect, store, and process data when you use our public website, community channels, and crew center for Kuwait Airways Virtual, Qatar Airways Virtual, Emirates Virtual, Gulf Air Virtual, Jazeera Airways Virtual, and Etihad Airways Virtual operations.
Governance
Data controller and responsibility
GCC Virtuals acts as the controller of personal data you provide when using our public website, community channels, and crew center. We are responsible for treating your information with confidentiality, integrity, and security. Only authorized staff may access personal data for legitimate operational purposes.
For privacy requests or questions about this notice, use our contact form or reach us via Discord.
Collection
Categories of personal data collected
To operate a realistic multi-airline virtual aviation community, we may collect the following categories of information:
Identification data: your name, IVAO and/or VATSIM network IDs (VID), crew center username, and identifiers needed for rank verification and flight logging.
Contact information: email address for account recovery and official communication, plus optional Discord or social identifiers used for community support.
Operational and technical data: flight logs, PIREPs, ACARS telemetry (altitude, speed, position), IP addresses for security logging, and timestamps of activity within our systems.
Website contact data: if you use the contact form, we process the name, email, subject, and message you submit solely to respond to your enquiry.
Roster policy
Public visibility and identity protection
We balance roster realism with member privacy. On public pages such as the pilots roster, live map, and leaderboards, we apply a masking policy: only the first letter of your surname is shown where possible. Your full name, email address, and private contact details are not published and remain restricted to authorized staff for administrative purposes.
Processing
Purpose and legal basis for processing
We process personal data to deliver the services you request when joining GCC Virtuals. Legitimate purposes include:
Service fulfilment: managing bookings, validating PIREPs and ACARS flights, and maintaining rank progression across our Gulf virtual airlines.
Network integration: verifying compliance with IVAO and VATSIM requirements and synchronizing operational data where applicable.
Member communication: sending operational updates, training information, event notices, and essential community announcements.
Security and integrity: preventing abuse, protecting infrastructure, and maintaining fair standards for all members.
When required for operational validation, we may process limited network-related records (for example callsign, VID, event participation, route activity, and ACARS timestamps) to support IVAO and VATSIM compliance checks and anti-abuse controls.
Website
Cookies, analytics, and website logs
Our public website may use essential cookies and session mechanisms required for security and basic functionality. Standard server logs may record technical data such as IP address, browser type, and request timestamps for troubleshooting and abuse prevention.
We do not sell personal data collected through this website. Third-party services embedded on our site (for example social links or external crew login) are governed by their own privacy policies.
Safeguards
Security measures and safeguards
GCC Virtuals applies administrative, technical, and organizational safeguards including encrypted connections (SSL/TLS), access controls for staff accounts, and restricted permissions based on role. We take reasonable steps to protect data against loss, unauthorized access, or disclosure. Staff with access to personal data are expected to maintain confidentiality.
GDPR
Your legal rights (GDPR and international privacy law)
Depending on your location, you may have rights regarding your personal data, including:
Access: to know what data we hold about you and how it is used.
Rectification: to request correction of inaccurate or incomplete data.
Erasure: to request deletion when data is no longer necessary for stated purposes.
Restriction or objection: to limit or object to certain processing in applicable cases.
Portability: to request a structured copy of data you provided, where technically feasible.
To exercise these rights, submit a request through our contact form or reach us via Discord with your name and network VID. We will respond within reasonable timeframes required by applicable law. You may also lodge a complaint with your local data protection authority.
Removal
Account termination and data removal
If you leave GCC Virtuals, you may request removal of your personal data. Use the account deletion option in the crew center profile settings where available, or submit a request through our contact form or Discord. Verified deletion requests are processed manually by administrators, who permanently remove your email, identifiers, and associated personal records from active systems within 20 business days, subject to legal retention requirements.
Aggregated or anonymized operational statistics that cannot identify you may be retained for community reporting.
Sharing
Third-party services and data sharing
We do not sell your personal data. Limited sharing may occur with:
IVAO and VATSIM when required for network operations you choose to use.
Infrastructure providers that host our website and crew platform under contractual confidentiality obligations.
Each third party operates under its own privacy terms. We encourage you to review those policies when using external services.
Network compliance
IVAO and VATSIM compliance statement
GCC Virtuals is committed to handling member data in a way that supports fair participation on IVAO and VATSIM while respecting privacy law. Network IDs are used only for operational identity checks, roster integrity, rank validation, and flight activity reconciliation where relevant.
We do not publish your full private profile, email, or sensitive account data on public roster pages.
Operational checks are limited to what is reasonably necessary to keep reporting accurate and to prevent duplicate, fraudulent, or manipulated submissions.
Any data shared with IVAO or VATSIM is limited to required operational context and remains subject to their own platform policies.
Members remain responsible for complying with IVAO and VATSIM terms, code of conduct, and privacy obligations when using those networks.
If a network-related privacy concern arises, contact staff through our contact form or Discord and include your callsign and VID so we can review the case quickly.
Updates
Amendments to this notice
GCC Virtuals may update this Privacy / GDPR notice to reflect legal requirements, IVAO or VATSIM policy changes, or operational changes. The latest version will always be published on this page. Continued use of our services after updates constitutes acceptance of the revised notice where permitted by law.
Data protection
Questions about your data?
Use our contact form or reach us on Discord to exercise your privacy rights or ask about how GCC Virtuals handles your information.
This website is not affiliated with, endorsed by, or associated with any real-world airline, aviation company, or organization. It is a non-profit, non-commercial community created exclusively for virtual aviation, flight simulation, and entertainment purposes. All airline names, logos, and trademarks remain the property of their respective owners and are used solely to enhance the flight simulation experience.