Test site This is not the live site. Its database is a separate copy, so nothing you do here reaches the live site, and it can be reset at any time.

Privacy Policy

Last updated: 12 October 2026
Data controller: Adrian Bjerke

This policy explains what personal data Adrian Bjerke collects when you use staffing-dev.adbj.no, why it is collected, and what rights you have over it. The service is operated in line with the GDPR.

What is collected, and why

When you log in via VATSIM Connect, the following is collected:

Your VATSIM ID (CID), name and settings

Used to create and manage event rosters, remember your preferences, and personalise the service. Your name is shown on events you create or manage and is visible to other users of the roster system.

Activity logs

Actions such as creating events, editing rosters and administrative changes are logged with your CID, name, the action and a timestamp. The logs are used for troubleshooting, security, keeping the service working, and as an audit trail for administrative actions.

Controller endorsements

Where a FIR on this site is set up with a VATEUD facility code, the endorsements that facility publishes are read from core.vateud.net and stored here: the CID of each holder, the position, the expiry date where there is one, and the CID of the instructor who issued it. It is used for one thing: deciding which positions a controller may be rostered on, including whether a solo endorsement still covers the event.

The list is refreshed hourly and each refresh replaces the previous one, so nothing is kept beyond what the facility currently publishes. Removing the facility code from a FIR stops the refresh; ask the operator to clear the stored copy as well.

The lawful basis for this processing is your consent, given when you log in, together with the operator's legitimate interest in running a secure and reliable service.

Beyond what VATSIM Connect provides, the only personal information collected is described above and comes from the VATSIM systems this site reads: your endorsements, and your published controlling hours where an event manager has that column switched on. Your data is not shared with third parties and is never used for marketing. A FIR can also keep a short internal note about a controller, linked to their CID.

How your data is used

Your VATSIM ID, name and settings are only used to:

  • Create and manage event rosters
  • Check that you're allowed into the system
  • Show your name as the event organizer or co-manager
  • Remember your preferences
  • Keep the website secure
  • Let administrators manage access and see what happens in the system

Retention and security

Your profile and event data are kept as long as you use the service. You can ask for them to be deleted at any time.

So that data isn't kept longer than needed, profiles that aren't linked to any events or FIRs may be deleted.

Activity and administrative logs containing your CID and name are deleted automatically after 30 days. An event's activity log is kept until 30 days after the event, if that's later. Deleting your profile doesn't delete these logs straight away, but they still disappear after that period. Saved copies of rosters are deleted 30 days after the event.

Events you create stay in the system until you or an administrator deletes them. If your account is deleted, the events you created stay, without an owner. Only administrators can delete accounts.

Your rights

Under the GDPR you have the following rights over the data held about you. To use any of them, get in touch using the contact details at the bottom of this page.

Access

Ask to see your stored VATSIM ID, name, events and settings.

Erasure

Ask for your VATSIM ID, name and settings to be deleted. Events you created need to be handled separately, either handed to another user or deleted.

Withdrawing consent

You can withdraw your consent at any time. The service needs your CID and name to work, so withdrawing consent means your profile and settings are deleted, the same as erasure.

Requests are normally answered within a week, and always within a month.

Who can see your data

Your name and CID are visible to other users when:

  • You create an event (as the event owner)
  • You're added as a co-manager
  • Your name is on a published roster as a controller

The roster system can't work without this. No other personal data is shared publicly or with third parties.

Contact

Questions about this policy, or about how your data is handled, go to:

adrian.bjerke@vatsim-scandinavia.org