Privacy policy

AEROITALIA AVIATION ACADEMY S.r.l. - Privacy Policy pursuant to Articles 13 and 14 of Regulation (EU) No. 679/2016 for the processing of data of users visiting the website www.aezaviationacademy.com.

Aeroitalia Aviation Academy S.r.l, in its capacity as Data Controller (‘Aeroitalia Aviation Academy’ or ‘Data Controller’), pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (‘GDPR’ or ‘Regulations’) - describes the methods of processing of personal data of users visiting the website of Aeroitalia Aviation Academy S.r.l. The purpose of this Privacy Policy is to inform, in accordance with Articles 13 and 14 of the GDPR, those who interact with the website www.aezaviationacademy.com (‘Website’), either through simple consultation or through the use of specific services made available through the Website, about the manner in which personal data will be processed during the use of the same.

This privacy notice, which does not apply to other websites that may be accessed via links contained on this Site, is also provided pursuant to Article 14 of the GDPR for the processing of the personal data of additional students and the information they provide for the use of the educational courses through the Site, as well as for the use of specific services made available on this Site, including any minors or legally incapacitated persons for whom you exercise parental responsibility or legal representation. The processing of personal data shall be based on the principles of fairness, lawfulness, transparency, purpose limitation and storage, minimisation and accuracy, integrity and confidentiality, as well as on the principle of accountability pursuant to Article 5 of the GDPR.

‘Processing of personal data’ stands for any operation or set of operations carried out with or without the help of automated processes and applied to personal data or sets of personal data, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, comparison or interconnection, restriction, erasure or destruction.

1. DATA CONTROLLER AND DATA PROTECTION OFFICER

The Data Controller is Aeroitalia Aviation Academy S.r.l, in the person of its legal representative pro tempore, with registered office in via Andrea Mantegna, 8 00054 Fiumicino (RM) PIVA 16340701008, who can also be contacted at the following addresses: pec: [email protected]; email: [email protected].

2. PERSONAL DATA SUBJECT TO PROCESSING

We inform you that the personal data subject to processing may consist of an identifier such as a name, an identification number, location data, an online identifier or one or more characteristic elements of a person's physical, physiological, mental, economic, cultural or social identity capable of making the person concerned identified or identifiable, depending on the type of services requested.

The personal data processed through the Website are as follows:

1. Navigation data

The computer systems and software procedures used to operate the Website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the Website, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and IT environment. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the Website to check its correct functioning, to identify anomalies and/or abuses; the data is usually deleted after processing, unless it is necessary to identify those responsible in the event of hypothetical computer crimes against Aeroitalia Aviation Academy or third parties.

1. Data voluntarily provided by the user

Without prejudice to the reference to specific vertical information that may be available in the different sections of the Website, this Privacy Policy shall also apply to the processing of personal data concerning you and voluntarily provided by you in the context of specific requests for assistance and/or information to the Aeroitalia Aviation Academy assistance team through the e-mail addresses and/or call centre channels of the Data Controller available on the Website (such as, for example, e-mail address, personal data, identification data, information relating to the flight booked). With reference to these types of data, we invite you to share only the personal data strictly necessary for the management of your request, thus excluding irrelevant information and/or information that may fall within the category of special categories of personal data pursuant to art. 9 of the GDPR ([...]personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade-union membership, genetic data, biometric data capable of uniquely identifying a natural person, data concerning a person's health or sex life or sexual orientation), unless the provision of special data is necessary for the handling of your request for assistance (e.g. in the case of a request for support and assistance in the management of special flight requirements related to conditions of reduced mobility and/or disability; for reporting special meals for medical or religious needs, etc.). In the event of the transmission of personal data that is neither pertinent nor strictly necessary to the management of the request, the Data Controller will refrain from processing such data and will immediately delete it.

Pursuant to Article 14 of the GDPR, the Data Controller hereby informs that the personal data indicated above may also refer to other passengers on the flight, including any passengers who are minors and/or incapacitated, provided in the context of the request for assistance/information.

1. Data processed by reason of the services rendered online

Without prejudice to the reference to specific information that may be available in the various sections of the Website, this Privacy Policy shall also apply to the processing of data provided by you for the purposes of the services rendered through the Website, with particular reference to the following services:

- Online flight ticket purchase service, including the performance of related administrative activities, including the sending of service notices containing details and updates on flights purchased to the e-mail address you indicate, in the context of which personal data may be processed (name, surname, place and date of birth, CF, nationality, passport details and residence), contact details (e-mail and mobile phone number), information relating to the purchased flight (departure and destination, date and time of departure/arrival, number of seats, number of baggage, identification codes), information on whether you have signed up for particular discounts and/or agreements, payment details (credit/debit card data; voucher; bank details for transfers; etc.), including information on the transaction carried out using the payment method selected by you (credit/debit card, bank transfer and/or PayPal). Pursuant to Article 14 of the GDPR, the bank or PayPal, as autonomous data controllers, will communicate to Aeroitalia Aviation Academy the information relating to the completed payment. Subject to consent pursuant to Article 9.2(a) of the GDPR, special categories of data may also be processed, specifically health data related to special needs of you and/or other passengers (e.g. reduced mobility, food allergies/intolerances, life-saving medications, medical devices), necessary for booking and/or managing the purchased flight. Pursuant to Article 14 of the GDPR, such data may refer to third parties, including credit card holders, if provided in the booking process. Please ensure that such third parties have read and understood this Privacy Policy.

- Online Check-in, Change and Refund, and Upgrade services, including the sending of related service e-mails (boarding passes, change and refund information, upgrade confirmations); processed data may include booking code, ticket number, passenger personal data and contact details.

- Complaints and reporting service: you may provide personal data, contact information, flight details (booking code, flight number, carrier number, date/time, departure/destination), lost baggage data (P.I.R. code), irregularities or service failures, supporting documentation. Please do not attach third-party data unless necessary; otherwise, the Data Controller will delete it.

Personal data may originate directly from you or from third parties involved in your travel plans (code-share airlines, customs and immigration authorities) and business partners to whom you have consented to transmit such data.

1. Personal data of third parties
   When using Website services, do not provide third-party data not required for the requested services. If provided, you act as an autonomous Data Controller, assuming all legal responsibilities and indemnifying Aeroitalia Aviation Academy from any claims.
2. Cookies and other tracking technologies
   Information on cookies served by the Website is available in the Cookie Policy (here) along with preference management instructions. The aforementioned data will be collectively referred to as “Personal Data”.

3. PURPOSE, LEGAL BASIS OF THE PROCESSING AND NATURE OF THE CONFERMENT

Personal Data will be processed, with consent where necessary, for the following purposes:

1. Navigation and security of the Website (“Website Navigation Purposes”);
2. Provision of website services: delivery of online courses, educational materials, and management of enrolled students;
3. Management of contractual relationships: enrollments and partnerships (“Purpose of delivering educational services”);
4. Management of reports and complaints (“Complaint Management Purposes”);
5. Compliance with legal and accounting obligations (“Compliance Purposes”);
6. Fraud prevention (“Anti-Fraud Purposes”);
7. Defense of legal rights (“Defensive Purposes”);
8. Commercial/promotional communications (“Art.130 Privacy Code & Art.6(f) GDPR”);
9. Abandoned cart recovery;
10. Newsletter subscription, subject to consent.

The legal basis is Articles 6 and 9 of the GDPR as appropriate. Provision of data is optional but may affect service provision if withheld.

4. RECIPIENTS OF PERSONAL DATA

Personal Data may be shared with:

• Authorized internal personnel;
• External processors (consultants, service providers, marketing agencies, payment partners, code-share carriers, authorities, etc.);
• Independent controllers (insurers, third-party partners);
• Public authorities, where legally required.

5. TRANSFER OF PERSONAL DATA OUTSIDE THE EU

Data is processed and stored on servers within the European Economic Area. For transfers outside the EEA, EU Standard Contractual Clauses or other GDPR-compliant safeguards apply.

6. RETENTION OF PERSONAL DATA

Personal Data will be retained as necessary and in line with legal requirements, then deleted or anonymized:

• Navigation data: up to 2 years;
• Booking and payment data: up to 10 years;
• Soft-spam/newsletter: until consent withdrawn;
• Other data: as required by law.

7. RIGHTS OF THE DATA SUBJECT

You may exercise rights of access, rectification, erasure, restriction, objection, portability, consent withdrawal, and lodge complaints at:

Aeroitalia Aviation Academy S.r.l. – via Andrea Mantegna, 8 – 00054 Fiumicino (RM) – pec: [email protected] – email: [email protected].

8. CHANGES

The Data Controller may update this policy at any time; please review it periodically.

9. CONSENT OF MINORS FOR INFORMATION SOCIETY SERVICES

Use of Website services requires users to be over fourteen years old; data processing for minors under fourteen is lawful only if performed by a parent or legal guardian.

10. VIRTUAL ASSISTANCE CHAT

The Website offers a virtual assistance chat that does not process Personal Data. Do not provide Personal Data in the chat; for advanced assistance, contact an operator.