empowering global aviation careers

Policy on the Collection and Processing of Personal Data

1. GENERAL PROVISIONS

AVIATION TRAINING ACADEMY S.R.L. is a Personal Data Controller and exercises this capacity in accordance with Regulation (EU) 679/2016 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).

This privacy statement explains how AVIATION TRAINING ACADEMY S.R.L. processes personal data, how it carries out such processing, and for what purposes.

AVIATION TRAINING ACADEMY S.R.L. is committed to respecting the confidentiality of your personal data. We will treat all personal data provided by you as confidential and will process only the information permitted by applicable legislation. This privacy notice describes the company’s policies and practices regarding the collection and use of your personal data and establishes your privacy rights.

Information confidentiality is an ongoing responsibility, and therefore we will update this privacy notice promptly and as we undertake new personal data practices or adopt new privacy policies. Regarding the processing of data based on consent (as described below), we will notify you of any changes and request your additional consent.

2. LEGISLATIVE CONTEXT

In accordance with the requirements of Regulation (EU) 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR Regulation”), applicable from 25 May 2018, we are obligated to manage in safe conditions and only for the specified purposes the personal data that you provide to us through the use of our website, in accordance with the provisions of the GDPR Regulation.

3. DATA PROTECTION OFFICER

A Data Protection Officer (DPO) has been designated at the level of AVIATION TRAINING ACADEMY S.R.L., who will fulfill the obligations established by the applicable legislation in the field of personal data protection. You may contact the Data Protection Officer regarding all aspects related to the processing of your data and the exercise of your rights under the applicable legal provisions, especially if you have questions or concerns about the way we process your personal data.

4. HOW WE COLLECT AND USE (PROCESS) YOUR PERSONAL INFORMATION

4.1. Personal information you provide to us:
We may collect, store, and use the following types of personal data:

• information about your computer and about your visits to and use of this website (including your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views, and website navigation paths);
• information contained in or relating to any communication that you send to us in printed format or through the website (including correspondence with us, the content of the communication, and the data associated with the communication);
• any other personal data that you have chosen to send us or personal data completed in applications, forms, etc.

4.3. Purposes of using your personal data
The personal data we have collected from you, from third parties, or from public sources will be used for the purposes specified in this Privacy Policy. Depending on the relationships we have or wish to have with you, we may use your personal data for the following purposes:

• Provision of AVIATION TRAINING ACADEMY S.R.L. services
• Statistics
• Marketing

5. LAWFULNESS OF PERSONAL DATA PROCESSING

Processing is lawful, in accordance with the provisions of Article 6 of Regulation No. 679/2016, only if and to the extent that at least one of the following conditions applies:

• the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
• processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
• processing is necessary for compliance with a legal obligation to which the controller is subject;
• processing is necessary in order to protect the vital interests of the data subject or of another natural person;
• processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

6. DISCLOSURE AND TRANSFER OF PERSONAL DATA

AVIATION TRAINING ACADEMY S.R.L. strives to apply appropriate safeguards to protect the confidentiality and security of your personal data and to use them only in accordance with your relationship with our company and with the practices described in this Privacy Policy.

To the extent permitted by applicable data protection laws, we may disclose your personal data to partners, auditors, agencies, supervisory authorities, or other external service providers in order to fulfill our contractual obligations. We will clearly indicate each data recipient to you if they are well known at the time of initiating processing.

We may also disclose your personal data:

• to the extent that we are required to do so by law;
• in connection with any ongoing or potential legal proceedings;
• in order to establish, exercise, or defend legal rights (including providing information to others for the purpose of fraud prevention).

7. YOUR RIGHTS

In relation to the processing of personal data and based on the provisions of Regulation No. 679/2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, you may exercise any of the following rights:

• Right to information – you may request information regarding the processing activities of your personal data;
• Right to rectification – you may rectify inaccurate personal data or complete them;
• Right to erasure (“right to be forgotten”) – you may obtain the erasure of data where their processing has not been lawful or in other cases provided by law;
• Right to restriction of processing – you may request the restriction of processing where you contest the accuracy of the data, as well as in other cases provided by law;
• Right to data portability – you may receive, under certain conditions, the personal data you have provided to us in a machine-readable format, or you may request that such data be transmitted to another controller;
• Right to lodge a complaint – you may lodge a complaint regarding the processing of personal data with the National Supervisory Authority for Personal Data Processing.

To exercise these rights, you may submit a written, dated, and signed request to the Data Protection Officer. The request may be submitted at the company’s headquarters at the address Bucharest, Bd. Decebal 12, Sc. 1, Et. 5, Ap. 15, Sector 3, or may be sent to the email address ____________@______________.

You also have the recognized right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (A.N.S.P.D.C.P.) as well as the right to an effective judicial remedy. Contact address for A.N.S.P.D.C.P.:

Bucharest, B-dul G-ral. Gheorghe Magheru No. 28-30, Sector 1, Postal Code 010336
Website: http://www.dataprotection.ro
Email: anspdcp@dataprotection.ro
Telephone: +40.318.059.211; +40.318.059.212
Fax: +40.318.059.602

WARNING! Please exercise your rights wisely and note that any abuse may result in liability.

8. RETENTION OF PERSONAL DATA

Your personal data is stored by AVIATION TRAINING ACADEMY S.R.L. on its own equipment.

The personal data we process based on your consent will be retained for an unlimited period of time (or until consent is revoked), unless applicable legal requirements provide otherwise and this is necessary for the purpose of processing.

If you have not provided us with your consent for data processing or have revoked your consent, we will store only minimal data about you (full name, contact details, references, and notes) for statistical and reporting purposes or to the extent justified on the basis of another legal ground, such as our legitimate interest.

Without prejudice to the other provisions of this section, we will retain information and documents (including electronic documents) containing personal data:

• to the extent that we are required to do so by law;
• where the information/documents are relevant to any ongoing or potential legal proceedings;
• in order to establish, exercise, or defend our legal rights (including providing information to others for the purpose of fraud prevention).

9. SECURITY OF PERSONAL DATA

In order to protect the confidentiality of your data and personal information that you transmit, we will maintain physical, technical, and administrative safeguards. We continuously update and test our security technology. We allow access to your personal data only to those employees who need to know such information in order to provide you with benefits or services. In addition, we train our employees on the importance of confidentiality and maintaining the confidentiality and security of your information.

If a personal data breach occurs, we will do everything possible to eliminate it and to assess the level of risk associated with the breach in accordance with our personal data breach policy. Where it is determined that the breach may result in physical, material, or non-material harm to you (for example, discrimination, identity theft, fraud, or financial loss), we will contact you without undue delay, unless the law provides otherwise. All our efforts will be undertaken in full cooperation with the competent supervisory authority.

10. CHANGES TO THE PRIVACY POLICY

We may periodically update this information document by publishing a new version on the company’s website.

Given that personal data protection laws, interpretations by state bodies, and recommendations of supervisory authorities change and improve periodically, this privacy notice and terms of use are expected to change as well. We reserve the right to modify this information document at any time, for any reason, and without notice. Any changes to our privacy policy will be posted on the company’s website so that you are aware of our policies. The provisions contained in this document replace all previous announcements or statements regarding our privacy practices.

11. THIRD-PARTY WEBSITES

The company’s website may include hyperlinks and details about third-party websites. We have no control over and are not responsible for the privacy policies and practices of third parties.

12. COLLECTION AND STORAGE OF CERTAIN INFORMATION ON THE WEBSITE

As is the case with most websites, the company’s website automatically collects certain information and stores it in log files. This includes Internet Protocol (IP) addresses, the geographical location of the computer or device, browser type, operating system, and other information about visiting the website, such as pages viewed. This information is used to improve the company’s website and, through this continuous improvement, to better serve our users. Your IP address may also be used to diagnose problems with our server, to administer the company’s website, to analyze trends, to track user navigation on the site, and to collect demographic information to help us understand visitor preferences and needs.

13. WEBSITE SECURITY

We cannot guarantee that data transmissions over the Internet can be 100% secure. Consequently, we cannot ensure or guarantee the security of the information you transmit, and you understand that any information you transfer to our company is done at your own risk. Nevertheless, AVIATION TRAINING ACADEMY S.R.L. uses website security measures in accordance with best practices to protect the website, emails, and mailing lists. These measures include technical, procedural, monitoring, and tracking measures designed to protect data from misuse, unauthorized access or disclosure, loss, alteration, or destruction.

We are aware that incidents of misuse or unauthorized program intrusions may occur, as almost every website, service, or user intersects. In these situations, our objective is to mobilize and act quickly to isolate the problem, to ensure or restore proper functionality, and to minimize inconvenience to our users. If necessary, AVIATION TRAINING ACADEMY S.R.L. will notify the competent authorities about these incidents of misuse or unauthorized intrusion into the company’s website.

14. QUESTIONS, CONCERNS, COMPLAINTS

If you have questions or concerns about the confidentiality of your data and personal information, or if you wish to exercise your rights or file a report regarding a possible breach of privacy regulations, please contact us by sending an email to the Data Protection Officer.