SERVICE REQUEST
Privacy  Policy

Last updated: 2 February 2026

Vector Aero GmbH (“Vector Aero”, “we”, “us”, “our”) is committed to protecting your personal data and your privacy. This Privacy Policy explains how we collect, use, store, and share personal data when you visit our website https://vectoraero.de/ (the “Website”) or contact us regarding training, consulting, technical or logistics services.

If you do not agree with this Privacy Policy, please do not use the Website.

1. Controller and contact
Controller: Vector Aero GmbH
Email (privacy requests): info@vectoraero.de

If you contact us about privacy matters, please describe your request and include enough information for us to identify you.

2. What personal data we collect
We may collect the following categories of personal data:

2.1 Data you provide to us
- Contact details: name, email address, phone number, company name, job title (if provided).
- Request details: your message, training/service request, preferred dates/locations, aircraft type or course interest, and any other information you include.
- Attachments: files you send via email or forms (if applicable).

2.2 Data collected automatically when you use the Website
- Technical data: IP address (usually in shortened/anonymized form where possible), browser type and version, device information, operating system, language, referring URL, and similar technical identifiers.
- Usage data: pages visited, time spent, clicks and interactions, and similar analytics information.

2.3 Cookies and similar technologies
We use cookies and similar technologies. Details are described in the Cookies Policy.

3. Why we use your data (purposes) and legal bases
We process personal data only when we have a lawful basis to do so under applicable data protection laws (including GDPR, where applicable).

3.1 Responding to enquiries and providing information
Purpose: respond to your messages, requests for training/services, quotes, scheduling and course information, and general communication.
Legal basis: legitimate interests (Art. 6(1)(f) GDPR) to respond to enquiries and manage business communications; in some cases, steps prior to entering into a contract (Art. 6(1)(b) GDPR).

3.2 Delivery of services and contract management
Purpose: planning and delivering training and consulting services, administration, invoicing, and related communications.
Legal basis: performance of a contract or steps prior to entering into a contract (Art. 6(1)(b) GDPR).

3.3 Website security and abuse prevention
Purpose: protect the Website and forms from spam, fraud, and abuse; ensure availability and security.
Legal basis: legitimate interests (Art. 6(1)(f) GDPR).

3.4 Analytics (only with your consent)
Purpose: understand how the Website is used and improve content and performance (e.g., which pages are visited).
Legal basis: consent (Art. 6(1)(a) GDPR).
Analytics is activated only after you accept analytics cookies in our cookie banner.

4. How we share your data
We do not sell your personal data. We may share personal data with:

4.1 Internal recipients
Authorized employees and contractors within Vector Aero GmbH who need access to perform their duties (e.g., training administration, customer communication, IT).

4.2 Service providers (processors)
We may use trusted service providers that process personal data on our behalf, such as:
- website hosting and infrastructure providers,
- website analytics tools (with consent),
- email and communication tools,
- spam and abuse prevention services (e.g., reCAPTCHA),
- IT/security service providers.

We require service providers to protect personal data and use it only for the services they provide to us.

4.3 Legal and compliance disclosures
We may disclose personal data where required by law, regulation, legal process, or to protect our rights, property, safety, or those of others.

5. International transfers
Some of our service providers may process data outside the European Economic Area (EEA). Where required, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms, and we take additional measures where appropriate.

6. Retention
We keep personal data only as long as necessary for the purposes described above:
- Enquiries and correspondence: typically retained for a reasonable period to handle follow-up and business needs (often up to 24 months), unless a longer retention is required (e.g., contractual or legal obligations).
- Contract-related data: retained as required for contractual and legal purposes (e.g., accounting/tax obligations).
- Analytics data: retained according to our analytics settings and only where consent has been provided.

7. Cookies and consent (analytics cookies)
7.1 Essential cookies
Essential cookies are required for the Website to function properly (e.g., security, basic functionality). These cookies are used by default.

7.2 Analytics cookies (optional)
We use analytics cookies to understand Website usage and improve our content. Analytics cookies are used only if you accept analytics cookies via our cookie banner.

7.3 Withdrawing consent / changing your choice
You can withdraw your consent at any time by clearing cookies in your browser and revisiting the Website (the cookie banner will be shown again). You can also use your browser settings to block or delete cookies.

8. Google Analytics and Google Tag Manager (consent-based)
If you accept analytics cookies, we use Google Analytics 4 (GA4) and Google Tag Manager (GTM) to collect information about Website usage (e.g., pages visited, approximate location, device and browser information). This information helps us improve the Website and understand which content is most relevant.

GA4 and GTM are activated only after your consent to analytics cookies.

9. Spam and abuse protection (Google reCAPTCHA)
To protect our Website and forms from spam and abuse, we may use Google reCAPTCHA. reCAPTCHA may collect technical and interaction data (such as IP address, browser/device data, and user interaction signals) to determine whether an interaction is legitimate.

For more information about Google’s data processing, please refer to Google’s privacy policy and terms.

10. Your rights
Depending on your location and applicable law (including GDPR where applicable), you may have the right to:
- access your personal data,
- request correction of inaccurate or incomplete data,
- request deletion of your data,
- request restriction of processing,
- object to processing based on legitimate interests,
- withdraw consent at any time (where processing is based on consent),
- request data portability (in certain cases),
- lodge a complaint with a supervisory authority.

To exercise your rights, contact us at info@vectoraero.de.

11. Links to other websites
The Website may contain links to third-party websites. We are not responsible for the privacy practices or content of third-party sites. Please review their privacy policies.

12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top indicates when this Privacy Policy was last revised. We encourage you to review this page periodically.