[COMPANY LEGAL NAME]
Last updated: [LAST UPDATED DATE]
Table of contents
- Article 1 – Who is responsible for your data
- Article 2 – Data we collect
- Article 3 – Why we use your data
- Article 4 – Who receives your data
- Article 5 – Transfers outside your country
- Article 6 – How long we keep your data
- Article 7 – Your rights
- Article 8 – Security
- Article 9 – Cookies
- Article 10 – Changes to this policy
- Article 11 – Contact
Article 1 – Who is responsible for your data
[COMPANY LEGAL NAME], [REGISTERED ADDRESS], is the controller of the personal data described in this policy. You can contact us at [PRIVACY CONTACT EMAIL].
Article 2 – Data we collect
- Contact and request data: name, company, job title, email, telephone and the content of your messages, quotation requests, AOG requests, training requests and audit requests.
- Order and payment data: billing and delivery addresses, order details, invoices and payment status. Card details are handled by our payment provider and are not stored by us.
- Compliance data: information on the consignee, end user, aircraft and intended use, where export-control or sanctions checks require it.
- Technical data: IP address, browser type, pages visited and security logs.
- Training data: for simulator training requests, the identity, licence details and contact of the pilots concerned, as provided by you.
Article 3 – Why we use your data
| Purpose | Legal basis |
|---|---|
| Answering requests and preparing quotations | Steps taken at your request before a contract; our legitimate interest |
| Processing orders, payments, shipping and customs | Performance of a contract |
| Export-control, sanctions and anti-fraud checks | Legal obligation; our legitimate interest |
| Invoicing, accounting and tax | Legal obligation |
| Organising training sessions and audits | Performance of a contract |
| Website security and statistics | Our legitimate interest; your consent for optional cookies |
Article 4 – Who receives your data
Your data is accessible only to the people who need it. It may be shared with carriers and customs brokers, payment providers, partner training organisations and simulator operators (for training requests), accounting and legal advisers, hosting and IT service providers, and the authorities where the law requires it. These recipients process data on our instructions or under their own legal obligations.
We do not sell personal data.
Article 5 – Transfers outside your country
Because our activity is international, some recipients, such as carriers, customs authorities and partners, may be located outside your country or outside the European Economic Area. Where required, we rely on a recognised transfer mechanism, such as an adequacy decision or standard contractual clauses.
Article 6 – How long we keep your data
- Requests that do not lead to an order: [RETENTION PERIOD FOR REQUESTS]
- Customer and order records: for the contract period, then for the legal limitation and accounting periods (invoices: [ACCOUNTING RETENTION PERIOD])
- Traceability records of parts: [RECORD RETENTION PERIOD]
- Security logs: [LOG RETENTION PERIOD]
Article 7 – Your rights
You may ask for access to your data, its correction or erasure, restriction of its use, its portability, and you may object to processing based on our legitimate interest. Where processing is based on consent, you may withdraw it at any time. To exercise your rights, write to [PRIVACY CONTACT EMAIL]; we may ask for proof of identity.
You may also lodge a complaint with [SUPERVISORY AUTHORITY].
Article 8 – Security
We use technical and organisational measures to protect your data against loss, misuse and unauthorised access, including access controls, secure connections and the choice of reliable service providers.
Article 9 – Cookies
Information about cookies is in our Cookie Policy.
Article 10 – Changes to this policy
We may update this policy. The date of the latest version is shown at the top of this page.
Article 11 – Contact
[COMPANY LEGAL NAME]
[REGISTERED ADDRESS]
Email: [PRIVACY CONTACT EMAIL]
