Privacy Notice

This website does not use cookies or similar technologies. It uses no analytics or advertising tools, it does not track you, and it loads nothing from other websites: its pages, fonts, images and film are all served by this website itself.

If this ever changes, we will update this notice first and, where the law requires it, ask for your consent.

Enquiries. The training enquiry form does not store or send anything itself: it prepares an email in your own mail program, and nothing reaches us until you send it. When you email us, through the form or directly, we receive what you write, usually your name, your company, your business email address and the training you are interested in.

We use this information to answer your enquiry and to prepare the training you request. If you become our client, it may also be used for related purposes, such as sending notifications about legislative amendments which may affect the services offered to you.

Technical data. When you visit the website, our hosting provider processes the technical data needed to deliver the pages and to protect them from abuse, such as your IP address, your browser type and the pages requested. We do not use it to identify or profile visitors.

Giving us your details is voluntary, but without them we cannot answer your enquiry. We do not sell personal data or use it for advertising, and we make no automated decisions about you.

• Enquiries: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
• Notifications to clients about regulatory changes: our legitimate interest in keeping our clients informed (Article 6(1)(f) GDPR).
• Technical data: our legitimate interest in running a secure and reliable website (Article 6(1)(f) GDPR).

This information will be solely used for the reasons detailed above. However, there may be cases where personal information is shared with the following third parties:

• Any authority (e.g. the Cyprus Department of Civil Aviation and other civil aviation authorities), and any law enforcement body that may have a reasonable requirement to access your personal information;
• Third-party entities that we entrust to process part or all of the data on our behalf. For this website, these are Vercel Inc., which hosts it, and Google, which provides our email service (Google Workspace).

Vercel and Google are based in the United States, and data may be processed there. Such transfers are protected by the European Commission’s Standard Contractual Clauses in their data processing terms, and Vercel is also certified under the EU–U.S. Data Privacy Framework.

With respect to your privacy rights, AAA Cyprus is obliged to provide you with reasonable access to the personal data that you have provided to us. Your other principal rights under data protection law are:

• the right to be informed;
• the right of access;
• the right to rectification;
• the right to erasure;
• the right to restrict processing;
• the right to object to processing;
• the right to data portability;
• the right to complain to a supervisory authority; and
• the right to withdraw consent, where processing is based on consent.

If you wish to access or amend any personal data we hold about you, or to request that we delete any information about you, you may contact us by sending a request to keza@aaaeasa.com. We will acknowledge your request within seventy-two (72) hours and will do our utmost to handle it promptly. We will respond within one month, with a possibility to extend this period for particularly complex requests in accordance with applicable law.

At any time, you may object to the processing of your personal data on legitimate grounds, except if otherwise permitted by applicable law.

In accordance with applicable law, we reserve the right to withhold personal data if disclosing it would adversely affect the rights and freedoms of others. Moreover, we reserve the right to charge a fee for complying with requests that are manifestly unfounded or excessive.

You may also lodge a complaint with the supervisory authority in Cyprus, the Commissioner for Personal Data Protection (www.dataprotection.gov.cy).

• Enquiries that do not lead to training are kept for not more than 6 months from the date of the enquiry.
• Once the training you requested is provided, we retain your information for as long as needed to provide you with our service, to comply with our legal obligations and EASA regulations, and to enforce our agreements.
• Technical data is kept by our hosting provider only for a short period, for the purposes described above.

We take appropriate security measures to protect against loss, misuse and unauthorised access, alteration, disclosure or destruction of your information. Additionally, steps are taken to ensure the ongoing confidentiality, integrity, availability and resilience of the systems and services processing personal information, and to restore the availability of and access to information in a timely manner in the event of a physical or technical incident. All information gathered is kept confidential and is used solely for the service requested. This website is served only over an encrypted (HTTPS) connection.

If we learn of a security breach, we will inform you of the occurrence of the breach in accordance with applicable law.

All personal data is processed in accordance with the General Data Protection Regulation (EU) 2016/679 and the Cyprus Law 125(I)/2018 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

The Accountable Manager of AAA Cyprus is the appointed Data Protection Officer (“DPO”), who is responsible for matters relating to privacy and data protection. The DPO can be reached at the address above or by email at keza@aaaeasa.com.