Legal
Privacy policy
How we process your personal data
This is a translation. The German version is legally binding.
1. Controller
The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Philosophenweg 31–33
47051 Duisburg
Germany
Represented by the managing director Chaudhry Muhammad Shahbaz
Phone: +49 176 30321194
Email: info@aerocompliance.de
No data protection officer has been appointed, as the legal requirements under Section 38 of the German Federal Data Protection Act (BDSG) are not met.
2. Overview
This privacy policy informs you in accordance with Art. 13 GDPR about how personal data is processed on this website. It is based on the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).
We process personal data only to the extent necessary to operate this website, answer your enquiries or comply with legal obligations. We use no analytics, advertising or tracking tools and no social media plugins. Fonts and images are loaded exclusively from our own server. Google Maps is only loaded with your consent.
3. Legal bases
- Art. 6 (1) (b) GDPR, where processing is necessary to take pre-contractual steps or to perform a contract,
- Art. 6 (1) (c) GDPR, where we are subject to a legal obligation, such as retention duties under commercial and tax law,
- Art. 6 (1) (f) GDPR, where processing is necessary for our legitimate interests, such as the secure operation of the website or answering general enquiries.
4. Hosting and server log files
This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. We have concluded a data processing agreement with the provider in accordance with Art. 28 GDPR. Hostinger processes the data solely on our behalf and according to our instructions.
Each time the website is accessed, the server automatically records the following data transmitted by your browser:
- IP address of the requesting device,
- date and time of access,
- page or file requested and amount of data transferred,
- whether the request was successful,
- browser type and version, operating system and the previously visited page (referrer).
This processing is necessary to deliver the website and ensure its security and stability. The legal basis is Art. 6 (1) (f) GDPR. Log files are deleted automatically after a short period unless further retention is needed to investigate a specific security incident.
5. SSL/TLS encryption
This website uses SSL or TLS encryption. Data you send to us, for example through the contact form, cannot be read by third parties. You can recognise an encrypted connection by “https://” and the padlock symbol in your browser’s address bar.
6. Contact form
When you send us an enquiry via the contact form, we process the following details: name, company, email address, optionally your phone number, the selected topic and your message. The details are sent by email to our mailbox and used solely to handle your enquiry.
The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to concluding a contract, and otherwise Art. 6 (1) (f) GDPR. Our legitimate interest is answering your enquiry.
To prevent repeated abusive submissions, we briefly store a non-reversible hash of your IP address on the server when you submit the form. A hidden check field helps us recognise automated spam. No cookies are set.
7. Contact by email or phone
If you contact us by email or phone, we process your details, including contact data, to handle your request. The legal bases are Art. 6 (1) (b) and (f) GDPR. Our email mailboxes are also operated by Hostinger as a processor.
8. Storage period
We delete your enquiry once it has been fully handled and no further communication is expected. If a contract is concluded or documents are subject to statutory retention obligations, for example under Section 257 of the German Commercial Code (HGB) or Section 147 of the German Fiscal Code (AO), we store them for the legally required period of up to ten years.
9. Recipients and transfers to third countries
Recipients of your data are, apart from us, our hosting provider acting as a processor, where necessary our tax advisers in the context of legal obligations and, only with your consent, Google (see section 12). A transfer to countries outside the EU or EEA can only occur in connection with Google Maps.
10. Consent management, cookies and local storage
On your first visit we show a cookie banner that lets you decide whether external media may be loaded. We store your choice in your browser’s local storage (localStorage, entry “acp_consent_v1”) for up to twelve months. This storage is strictly necessary to respect your decision. The legal basis is Section 25 (2) No. 2 TDDDG in conjunction with Art. 6 (1) (c) GDPR.
We do not set our own cookies for analytics or advertising. Cookies can only be set by Google if you have consented to Google Maps (see section 12). You can change or withdraw your choice at any time via the “Cookie settings” link in the footer.
11. Fonts and images
The “Manrope” font and all images and illustrations are stored locally on our server. No connection to Google Fonts or other external providers is made when you visit the website.
12. Google Maps
In the contact section you can display a Google Maps map. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The map is only loaded if you choose “Accept all cookies” in the cookie banner, enable “External media cookies” or click “Accept cookies and load map”. In this case, your IP address and information about your browser are transmitted to Google, and Google may set cookies.
The legal basis is your consent under Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. You can withdraw it at any time with effect for the future via “Cookie settings” in the footer.
Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision under Art. 45 GDPR. More information: policies.google.com/privacy.
Without your consent, no data is transferred to Google. You can instead open the address directly in Google Maps via a link.
13. Your rights
You have the following rights regarding your personal data at any time:
- right of access (Art. 15 GDPR),
- right to rectification (Art. 16 GDPR),
- right to erasure (Art. 17 GDPR),
- right to restriction of processing (Art. 18 GDPR),
- right to data portability (Art. 20 GDPR),
- right to withdraw consent with effect for the future (Art. 7 (3) GDPR).
To exercise your rights, an informal message to the contact details above is sufficient.
Right to object under Art. 21 GDPR
Where we process your data on the basis of Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves to establish, exercise or defend legal claims.
14. Right to lodge a complaint
Under Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.
15. Obligation to provide data and automated decisions
Providing your data is not required by law or contract and is voluntary. However, we cannot process your enquiry without the required fields of the contact form. No automated decision-making, including profiling under Art. 22 GDPR, takes place.
16. Changes
We update this privacy policy when the legal situation, our services or our data processing change. The version published here applies.
Back to home