In compliance with the GDPR (General Data Protection Regulation) and Spanish Organic Law 3/2018, AIR JET SA informs users that any personal data provided when using the forms on this website or in connection with contract requests will be processed by AIR JET SA in its capacity as data controller for the purpose of providing information about the services and/or products offered by AIR JET SA. By submitting any form, you confirm that the information provided is accurate and relates to you.

Who is the controller of your personal data?

Data Controller: AIR JET SA

Pau Claris 138, 5th floor, Apt. 4th – 08009 Barcelona (Spain)

Email: tecnica@airjet.es

For what purposes do we process your personal data?

We process personal data relating to employees, contacts, customers and suppliers for the following purposes:

• Employment management and working-time control of hired staff.
• Administrative, accounting, tax and commercial management of customers and suppliers.
• Managing the business relationship with our organisation and, in particular, contractual matters.
• Sending information about our organisation and the sector, organising activities, campaigns or events, and sending informational and commercial communications (including by electronic means).
• Managing our presence on social media (Facebook, Instagram, LinkedIn) for informational and promotional purposes.

How long will we keep your personal data?

Personal data will be retained for a period of six (6) years, in accordance with applicable accounting regulations and, where applicable, for ten (10) years pursuant to anti-money laundering regulations.

• Employment and working-time control data: for the duration of the employment relationship and for the legally required periods.
• Customer and supplier data: for the duration of the contractual relationship and for the legally required tax and accounting retention periods.
• CCTV images: maximum 30 days, unless they must be kept for legal reasons.
• Social media data: until the data subject withdraws their consent.

In any event, AIR JET SA will keep your personal data for as long as necessary to perform our contractual relationship, unless you request their deletion. AIR JET SA will also keep them for the time necessary to comply with the legal obligations applicable in each case depending on the type of data.

What is the lawful basis for processing your personal data?

The legal bases for the processing of personal data are:

• Processing necessary for the implementation of pre-contractual measures at the request of the data subject. Your personal data will be processed on the basis of pre-contractual measures initiated at your request and confirmed by selecting the relevant checkbox when submitting the form.
• Performance of a contract (employment, commercial or service provision relationship).
• Compliance with legal obligations applicable to the activity, arising from commercial and tax legislation in relation to customers and suppliers (employment, tax, accounting regulations).
• Consent of the data subject for the use of social media and commercial communications.

To whom will your personal data be disclosed?

Personal data may be disclosed to third parties affiliated with AIR JET SA in the context of managing its products and/or services for the same purposes referred to above, as well as to the competent public authorities where required by applicable legislation. No international transfers are carried out.

AIR JET SA employees who have authorised access rights in accordance with AIR JET SA’s internal security structure may access your personal data for the objectives and purposes described in this Privacy Policy. All AIR JET SA employees have been trained and informed of their responsibilities in this regard and sign the corresponding confidentiality agreement. Likewise, third-party organisations whose involvement is required and/or necessary for the proper management of the service provision may access your data.

AIR JET SA has entered into contracts or contractual arrangements and implemented security measures with third parties to ensure an adequate level of security and protection of personal data throughout the related chain.

What are your rights in relation to your personal data?

You may request access, rectification, erasure, restriction of processing, data portability and object to the processing of your personal data at any time.

You may withdraw your consent to receive commercial communications and exercise the aforementioned rights by sending an email to tecnica@airjet.es together with documentary proof of your identity, except where you have already indicated this previously by using the unsubscribe option at the bottom of electronic mailings, in which case we already have such information.

If you do not receive a satisfactory response and wish to lodge a complaint or obtain further information about any of these rights, you may contact the Spanish Data Protection Agency (www.aepd.es).

What personal information is stored?

We store basic identification and relationship data for sending proposals and commercial information, and for issuing invoices, such as name, shipping address, tax identification number (NIF/CIF), and bank account number if the customer wishes to set up direct debit.

How is your personal data stored and protected?

Personal data will not be erased unless a valid request for erasure is submitted and such erasure is applicable. Information remains available, although it may be blocked for marketing/commercial mailings if the user exercises the rights of erasure, restriction of processing or objection.

Backups of the servers that contain data are carried out, duly controlled and safeguarded.

What is the privacy and information security policy and access to information?

Access to the database is protected by username and password.
Where remote access is permitted, it is carried out via VPN connection and SSL protocol.

How do we manage personal data breaches and risk assessments?

AIR JET SA has adopted appropriate technical and organisational protection measures and these measures have been applied to the personal data affected by any potential personal data breach. There is no access to customer/user data by persons who are not authorised to access it.

AIR JET SA has carried out and keeps up to date a risk analysis of personal data vulnerabilities and their impact on the security and privacy of customers/users.

What is the information deletion policy when the service is terminated?

AIR JET SA deactivates the accounts of customers/users who decide to unsubscribe and who have exercised their right to erasure. In this case, the customer/user’s data will be blocked and retained for the period required by law, exclusively to comply with legal obligations that justify the past relationship between the parties.

Who is our Security Officer for Data Protection?

AIR JET SA is not legally required to appoint a DPO (Data Protection Officer) under current legislation.
Notwithstanding the above, AIR JET SA has appointed a Data Security Officer in order to ensure the proper operation of this Privacy Policy and to ensure that its requirements are preserved in relation to the personal data of internal and external users of the organisation. You may contact our Data Security Officer at tecnica@airjet.es

If AIR JET SA identifies a personal data security breach, users will be notified as soon as possible and, where the breach presents a high risk, the competent authority will also be notified.

Registered users always retain the possibility to exercise their rights of access, rectification, objection, erasure, restriction of processing and data portability. Likewise, in accordance with Law 34/2002 of 1 July on information society services and electronic commerce, you may withdraw at any time the consent given to receive commercial communications. If you have any questions or wish to exercise the aforementioned rights, you may contact AIR JET SA by email at tecnica@airjet.es or by post at: AIR JET SA, Pau Claris 138, 5th floor, Apt. 4th – 08009 Barcelona (Spain).