AviationEU Group GDPR

AviationEU Group of Companies (AviationEU Group) includes AviationEU Supplies & Services and AviationEU Training Systems & Services, both based in Athens, Greece. Main activities of the Group companies are aviation and industrial supplies as well as products and services to EU and international customers in the Training, Consulting and I.T. fields.

In the context of our Group efforts to comply with provisions of the EU Regulation 2016/679 for General Data Protection (GDPR) on data protection and privacy for all individuals, also referred to as data subjects (*), AviationEU Group in its capacity as Data Controller and Data Processor aims to:

- always show transparency, fairness in the collection and ensure the safety of data collected from individuals for the use of our websites and electronic platforms or any other means of voice or other means of communications with us such as emails, letters or faxes, in the context of their transactions with our Group companies for the supply and/or the receipt of products or services, leting them know also for what purpose their data shall be held and used,

- Any and all collected data of individuals shall always be:

i) specific and the minimum required for our Group operations and the provision of our Group services and for which we believe there is a legitimate interest,
ii) collected and used ONLY after the respective consent of the individual,
iii) treated as STRICTLY CONFIDENTIAL and used exclusively for the purpose they are intended and for which permission has been granted, 
iv) NOT BE DISSEMINATED in part or in total and in any form to third parties without the prior consent of the individual,
v) possible to be corrected, updated and/or removed at the request of the individual who also retains the right to require information about his/her data being held and processed,
vi) stored and processed by AviationEU Group in a way to safeguard and secure collected data by the Group presonnel trained to understand their obligations as well as suitable physical, electronic and managerial procedures,
vii) held for a given period. If such data are not used for any transaction or activity, they shall be deleted after a maximum period of 5 years.
viii) reported to the Competent National Authority within undue delay and not later than 72 hours in case of personal data breaches that pose a risk to data subjects.

- This policy is under regular review and may be adapted pending legislative changes.

(*) The term individual or data subject used throughout this site relates to an identified or identifiable natural person whose personal data need to be protected and get processed in the context of the GDPR and is directly involved or to be involed in AviationEU Group operations and services including but not limited to Group personnel, representatives of product or service suppliers and/or customers, students and candidates for employment who are residing in an European Union (EU) or European Economic Area (EEA) country. 

Submitted by aveuadmin on Tue, 12/28/2021 - 14:00