Privacy Policy

Welcome to the International Aviation Group (IAG) Global Website Privacy and Data Protection Statement (the “Privacy Statement”).

We at IAG respect your privacy and is committed to protecting your personal data. This Privacy Statement will inform you as to how we collect and look after your personal data when you visit our website. You may also wish to read our cookie policy which addresses in further detail our use of cookies on and off our website. You may find a link to our cookie policy at the bottom of our home page at www.theaviationgroup.eu.

You may contact us at info@theaviationgroup.eu for any questions, concerns or complaints you have regarding your privacy and the use of your personal data. You may also contact us at info@theaviationgroup.eu in order to request that we delete your personal data from our records.

Information to keep in mind about IAG and its website:

• IAG does not enter into contracts or commercial transactions via its website.
• IAG is a B-2-B (business-to-business) and B-2-G (business-to-government) enterprise, and therefore we are aiming to do business with other companies or with governmental agencies. We do not sell to individuals, unless specifically agreed in writing.

1. Important information and who we are:

Purpose of this Privacy Statement: This Privacy Statement is provided to give you information on how IAG collects and processes your personal data primarily through your interaction with this website, including any data you may provide through this website when you sign up to our newsletter or ask us to contact you and/or meet with you at a mutually agreed location/exhibition.

This website is not intended for children and we do not knowingly collect data relating to children. It is important that you read this Privacy Statement together with any other privacy notices or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This Privacy Statement supplements the other notices and is not intended to override them.

Controller: IAG is made up of two different legal elements, The International Aviation Group Ltd. and International Helicopter Solutions. both UK based companies. The details of both companies can be found below. The International Aviation Group Ltd. is the controller and responsible for this website. The personal data collected by us is held in the UK. If you have any questions about this Privacy Statement or you wish to make any request or complaint regarding your personal data held by IAG, please contact us at info@theaviationgroup.eu

Contact Details:

Full name of legal entity: The International Aviation Group Ltd.
Email address: info@theaviationgroup.eu
Postal address: Aviation House, C/o Harper Sheldon Accountants, Staverton Technology Park, Near
Staverton Airport, Gloucestershire, GL51 6TQ, U.K.

Changes to this Privacy Statement

This website is global in nature. As international norms and laws change, we are reviewing our policies regularly and may modify this Privacy Statement from time-to-time.

Third-party links: Our website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their Privacy Statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.

2. The data we collect about you on our website:

Personal data, or personal information, means any information about an individual or company from which that person or company can be identified. It does not include data where the identity has been removed (anonymous data). We may collect, use, store and transfer different kinds of personal data about you which we have grouped together follows:

• Identity Data includes your full name, job and personal titles, date of birth and gender.
• Contact Data includes work or home address, email address and telephone numbers.
• Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
• Usage Data includes information about how you use our website.
• Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences including your responsibilities in your job.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes. We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.

3. How is your personal data collected on our website?

We use different methods to collect data from and about you including through:

• Direct interactions. You may give us your identity and contact details by filling in forms or by corresponding with us via the contact details appearing in our website.
• Automated technologies or interactions (Cookies). As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns.

We collect this personal data by using cookies, server logs and other similar technologies. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of this website may become inaccessible or not function properly. Please see our cookie policy for further details. You may find a link to our cookie policy at the bottom of our home page www.theaviationgroup.eu

4. How we use your personal data?

Most commonly, we use personal data in the following circumstances:

• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal or regulatory obligation.
• You have requested that we contact you in order to arrange a meeting or other form of contact.
• In connection with the performance of an agreement for the provision by IAG of goods or services. If we hold your personal data in such case you are typically working with us on behalf of your employer in order to support the performance of the agreement by IAG.

Purposes for which we will use your personal data

We have set out below, in a table format, a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate. Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us at info@theaviationgroup.eu if you need details about the reason for our processing of your personal data where more than one reason has been set out in the table below.

Purpose/Activity Type of data Lawful basis for processing including basis of legitimate interest

To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) (a) Identity (b) Contact (c) Technical (i) Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise) (ii) Necessary to comply with a legal obligation.

To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you (a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and Communications (f) Technical Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy).

To use data analytics to improve our website, products/services, marketing, customer relationships and experiences (a) Technical (b) Usage Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy).

To make suggestions and recommendations to you about goods or services that may be of interest to you or to contact you for a purpose requested by you (a) Identity (b) Contact (c) Technical (d) Usage (e) Profile Necessary for our legitimate interests (to develop our products/services and grow our business).

Marketing information from us

We may use your Identity, Contact, Technical, Usage and Profile Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers that we market to you. You may receive email or similar marketing communications from us if you have requested information from us or provided us with your address in connection with our marketing activities or to arrange a meeting (for example at an exhibition) or other form of contact.

Third-party marketing

We will get your express opt-in consent before we share your personal data with any company outside the IAG Group of companies for marketing purposes.

Opting out

You can ask us to stop sending you marketing messages (and delete your personal data) by contacting us at any time at info@theaviationgroup.eu. Once we have received the information necessary from you, your request will be handled promptly, usually within thirty days.

Change of purpose

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to get an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us at info@theaviationgroup.eu. Please note that we may process your personal data without your knowledge or consent, in compliance with the above rules, where this is required or permitted by law.

5. Disclosures of your personal data

We will share your personal data with our wholly-owned subsidiary International Helicopter Solutions which also acts in accordance with this Privacy Statement. In case we were to sell, transfer, or merge parts of our business or our assets then your personal data may be part of such business or assets, and we will notify you before your personal data is transferred. We do not currently use third-party service providers to process your data. If this change, we will update this Privacy Statement.

6. Data Security

We have put in place appropriate security measures to protect our databases from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.

7. Data Retention

How long will you use my personal data for?

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. In some circumstances, we may anonymize your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.

8. Your Requests Regarding Our Website:

Upon your request to info@theaviationgroup.eu, we will act to delete your personal data gathered via our website.

What we may need from you:

We may need to request specific information from you to help us confirm your identity and ensure your right to request deletion of personal data. This is a security measure. We will also contact you to ask you for further information in relation to your request to enable us to carry-out your request.

Response time for requests

We will try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Compliance

IAG is a UK registered company that engages in commercial activities while complying with local and international and the laws of the countries in which IAG operates.

IAG has a declared policy with regards to preventing corruption, generally, and particularly in respect of international transactions. IAG demands total compliance with applicable laws relating to the prohibition of bribing foreign public officials and transmits this message to its managers and workers, as well as to third parties with whom it engages in business.

As part of its policy IAG has established a comprehensive Anti-Bribery Compliance Program which reflects the UKs adherence to the OECD’s convention (on Combating Bribery of Foreign Public Officials in International Transactions) and IAG’s values.

IAG is committed to conduct its business with integrity, fairly, equitably and professionally, while maintaining the highest standards of administration. IAG believes that compliance with the law, ethical conduct, avoidance of corruption and observing fair and appropriate competition standards are key building blocks towards gaining the trust of our customers, partners, suppliers and employees, and are pivotal to IAG’s long term success and survival.

IAG acts to ensure that its managers, employees and representatives, as well as its subsidiaries, will act in accordance with the law and IAG’s policies in every aspect, including those relating to preventing corruption and avoidance of bribery. IAG shall have zero tolerance to any violation of laws and/or its polices or procedures and any violation in this regard will be cause for material and legal sanction.

Data Controller

The International Aviation Group is fully committed to compliance with the requirements of the General Data Protection Regulation and all other data protection legislation currently in force. The General Data Protection Regulation defines Personal Data as information which directly or indirectly identifies an individual. Examples of Personal Data include a name, address, membership number, national insurance number, email address, telephone number, date of birth, a photograph, video or voice recording.

The International Aviation Group controls and processes Personal Data and is registered with the Information Commissioner’s Office (ICO) as a Data Controller for the processing of Personal Data. The International Aviation Group lawful basis for controlling and processing personal data is the fulfilment of our performance of contract and to meet legal obligations.

The International Aviation Group has a Data Protection Compliance Co-ordinator to ensure its compliance with the General Data Protection Regulation. In addition, The Data Protection Compliance Co-ordinator will act as The International Aviation Group contact point for all individuals and can be contacted:

By Writing To:

The International Aviation Group
c/o Harper Sheldon Accountants
Staverton Technology Park
Herrick Way, Near Staverton Airport
Gloucestershire
GL51 6TQ. United Kingdom

By Phoning: +44 20 3303 0030
By Emailing: office@theaviationgroup.eu

Your Rights

Data Protection Laws, describe individuals who have provided their Personal Data to an organisation (either directly or indirectly) as “Data Subjects”. As a Data Subject, you have a number of rights with respect to how organisations process your Personal Data.

Right to be Informed

As a Data Subject, you have the right to be informed of the use/s that your Personal Data will be put to. Where you provide your Personal Data directly to The International Aviation Group, these details will be made available at the time your data is obtained. Where The International Aviation Group obtains your Personal Data from a third party, these details will be made available within a reasonable period of having obtained the data. If your Personal Data is to be used to communicate with you, these details will be provided at the latest, when the first communication takes place. If disclosure to another recipient is envisaged, these details will be provided at the latest, before the data is disclosed. In all cases, notification will take place, within one month of receipt of your Data Subject Access Request (DSAR).

Right to Access

Data Subjects have the right to access and obtain a copy of your Personal Data held and processed by The International Aviation Group, on request. You exercise this right through the submission of a formal, written Data Subject Access Request (DSAR) to:

The International Aviation Group
c/o Harper Sheldon Accountants
Staverton Technology Park
Herrick Way, Near Staverton Airport
Gloucestershire
GL51 6TQ. United Kingdom

Copy documentation to verify your identity will be required.

Right to Rectification

Data Subjects have the right to request The International Aviation Group to correct inaccurate or incomplete Personal Data.

Right to Erasure (to be Forgotten)

Data Subjects have the right to request The International Aviation Group to erase your Personal Data from its systems and records. This is not an absolute right however, and does not normally apply to purposes covered by Legal Obligation or which is necessary for the Performance of a Contract.

Right to Restrict Processing

Data Subjects have the right to request The International Aviation Group to stop or restrict the processing of your Personal Data. This could be for example, if your Personal Data is no longer necessary for the purpose of processing.

Right to Data Portability

Data Subjects have the right to request a copy of the Personal Data which you have provided directly to The International Aviation Group, which is automatically processed in a portable format.

Right to Object

Data Subjects have the right to object to the processing of your Personal Data, where The International Aviation Group relies upon Legitimate Interest as the lawful basis for processing.

Rights related to automated decision making including profiling

Data Subjects have the right not to be subject to a decision based solely on automated processing (including profiling), which may significantly affect you. The International Aviation Group personal data policy has always been and will continue to be, NOT to conduct or participate in any form of automated processing or profiling of personal data. If you wish to exercise any of your Data Subject rights, please contact: The Data Protection Compliance Co-ordinator

Complaints

If a Data Subject is unhappy with how your Personal Data is processed by The International Aviation Group, you have the right to complain to The Data Protection Compliance Co-ordinator. If a Data Subject remains unhappy, following The International Aviation Group response to your complaint, you have the right to lodge a further compliant with the Supervisory Authority.

By Writing To:

The Information Commissioners Office (ICO).
Wycliffe House, Water Lane,
Wilmslow, Cheshire.
SK9 5AF. United Kingdom.

By Phoning: +44 (0)1625 545 745
By Their Website: www.ico.org.uk

Transparency

How, For What Reason & Duration Is Your Personal Data Retained?

The International Aviation Group processes and retains personal information for 2 separate reasons, Direct Contact, & Accounting.

Direct Contact

Direct contact is when a user (Data Subject) contacts The International Aviation Group by telephone, website enquiry and/or technical support forms, email or face to face and provides personal data for a typical performance of contract.

Accounting

Accounting is a Legal Obligation and covers the information acquired in the case of any financial transaction that takes place as a consequence of performance of contract and applies to both users (Data Subject) and suppliers. The International Aviation Group only records the absolute minimum amount of personal data necessary in fulfilment of our Performance of a Contract and to meet Legal Obligations. No telephone calls are recorded and no personal data received is used for marketing or promotional purposes in any shape or form.

Typical Performance of a Contract and or Legal Obligation examples of retention periods of your Personal Data are:  1 + 5 years. Is the period of time we are legally required to hold accounting records for, to fulfil HM Revenue & Customs legislation.

What Personal Data Is Retained & Where

The International Aviation Group typically requires and retains the following personal data for Performance of a Contract and or Legal Obligation.

Name, Full Address, Country, Contact Telephone Number, Contact Email Address.

This information is retained as hard copy and/or digitally within The International Aviation Group accounting software and computer network. Hard copy is stored in secure data storage areas, digital data is held within a secure server, all located within our premises in Gloucestershire, United Kingdom.

The International Aviation Group website form submission records the following information: IP Address, Device Type, Operating System and Internet Browser Type.

The User (Data Subject) can also exercise a form of the Right to Erasure (to be Forgotten) by writing to:

The International Aviation Group
c/o Harper Sheldon Accountants
Staverton Technology Park
Herrick Way, Near Staverton Airport
Gloucestershire
GL51 6TQ. United Kingdom

By Phoning: +44 20 3303 0030
By Emailing: office@theaviationgroup.eu

Copy documentation to verify your identity will be required.

This is not an absolute right however, and does not normally apply to purposes covered by Legal Obligation or which is necessary for the Performance of a Contract.
How Does The International Aviation Group Protect Your Personal Data

Personal data is classified as confidential. The International Aviation Group recognise the importance and potential consequences arising from the failure to secure and use personal/confidential data appropriately.

In order to protect your privacy, The International Aviation Group has implemented Information Security and Personal Data Protection Policies. Employees and verified 3rd parties who come into contact with your Personal Data have obligations to adhere to our policies, and are trained in security and privacy best practice.

The International Aviation Group apply appropriate technical and organisational measures in order to protect data, computing devices and the network from accidental/malicious activities or theft. Where appropriate we encrypt our data and devices, personal/confidential information within is securely destroyed when no longer required. Additionally we are working to achieve Cyber Essentials Plus accreditation.

The International Aviation Group factory and offices are integral and protected 24/7/365, by a Glevum Security Ltd alarm system, physical access is via external door security locks, push button coded internal office door locks and CCTV is recording 24/7 in all key areas. Additional security measures are in place limiting access to our data storage area and secure server.

Online protection, both our main website and our Ecommerce store are secure sites protected by firewalls, all communication including forms, emails and transmission of data between the sites, The International Aviation Group or our secure transaction provider are delivered by a Hypertext Transfer Protocol Secure HTTPS method.

As a data processor for The International Aviation Group the above 3rd parties will only accept a Data Subject Access Request (DSAR) received from a User (Data Subjects) that has been received via The International Aviation Group Data Protection Compliance Co-ordinator.