PRIVACY POLICY
1. Controller
We, Brics Aviation (hereinafter also referred to as Brics or we, or us), would like to provide you with information on how we process your personal data when you use our website https://BricsAviation.com and https://BricsAviation.nl (website).
Should you have any further questions regarding data protection in connection with our website or the services offered on it, please contact our data protection officer:
Brics Aviation Data Protection Officer
E-mail: info@bricsaviation.com
2. Scope, Purpose, and lawful Basis of processing personal Data
We collect and use personal information directly from our users or from other sources (as described below) in the following situations:
2.1. Use of the Website and Creation of Log Files
When users visit our website, our system automatically collects data and information about the computer accessing our website each time our website is accessed. In the process, the following data (technical information) is collected:
(1) Information about the type and version of browser used
(2) The users operating system
(3) The users IP address
(4) The date and time the website was accessed
(5) Websites from which the user accessed our website
(6) Websites and files that were accessed by the users system from our website, as well the following information: the method of access and protocol
(7) The size of the file/page accessed
This data is also saved in our systems log files. This data is not stored together with any other personal data about the user.
We collect and use this technical information for purposes of (network) security (e.g. to combat cyberattacks), marketing, and to better understand the requirements of our users, as well as to continuously improve our website and enable the respective user to access the website from their computer.
This information is stored in log files to guarantee the websites functionality. In addition, we use the data to optimize our website and to ensure the security of our information technology systems. We do not process the data collected in this context for marketing purposes.
The lawful basis for the temporary storage of data and log files is article 6(1)(f) of the GDPR.
2.1.2. Tracking Tools
We use the following tracking and marketing tools (including for remarketing) on our website:
Google Tag Manager (https://policies.google.com/?hl=de, https://support.google.com/tagmanager/answer/6102821?hl=de&ref_topic=3441530)
Sizmek (https://www.sizmek.com/privacy-policy/)
AFS Analytics (https://www.afsanalytics.com/privacy.html)
Google Analytics (https://www.google.com/analytics/terms/gb.html or https://policies.google.com/?hl=en)
Google Analytics
This website uses Google Analytics, a web analysis service of Google Inc, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; “Google”). The use includes the “Universal Analytics” operating mode. This facilitates the assignment of data, sessions and interactions across several devices to a pseudonymous user ID and thus the analysis of a user’s activities across devices.
Google Analytics uses “cookies”, which are text files placed on your computer, to allow the website operator to analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, Google will reduce your IP address within Member States of the European Union or in other states party to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services related to website and Internet use. Our legitimate interest in data processing also lies in these purposes. The legal basis for the use of Google Analytics is 15 para. 3 TMG and Art. 6 para. 1 lit. f GDPR. Sessions and campaigns are terminated after a certain period of time. By default, sessions are closed after 30 minutes without activity and campaigns after six months. The time limit for campaigns may not exceed two years. For more information on terms of use and data protection, please visit https://www.google.com/analytics/terms/gb.html or https://policies.google.com/?hl=en.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the Browser Add-on. Opt-out cookies prevent the future collection of your data when you visit this website. To prevent Universal Analytics from collecting data across several devices, you must opt-out on all systems used. If you click here, the opt-out cookie will be set: Disable Google Analytics
The legal basis for the use of the aforementioned tools is our legitimate interest pursuant to article 6(1)(f) of the GDPR for the purposes of increasing the efficiency of our website and our marketing activities (including direct marketing).
Further information about the individual tools can be found in the Annex/Tracking Tool Policy.
2.2. Use of the Services offered on our Website
We offer a wide range of services on our website. In order to provide these services, we must collect and process personal data from users or our customers.
2.3. Processing personal Data on the Basis of our legitimate Interests
In the event that article 6(1)(f) of the GDPR is our legal basis for processing, in addition to the purposes listed above, our legitimate interests include:
Protecting the company from material or immaterial damage
Professionalization (of our products and services)
Cost optimization (cost control and cost minimization)
2.4. Further Obligations to process Data
Insofar as we are legally obligated to do so, we also process personal data in order to comply with our obligation to retain data as set forth in applicable commercial or tax law or to meet security requirements. Further information about retention periods can be found under Duration of Data Processing.
2.5. Obligation to provide personal Data
In order to meet statutory or contractual requirements, we have marked the respective fields in the forms on our website that must be filled out so that we can perform the requested contract or service.
3. Duration of Data Processing
Your personal data will be erased as soon as it is no longer required for the aforementioned purposes. In this context, personal data may be stored for the period of time during which legal claims can be asserted against Brics Aviation (statutory limitation period of three to thirty years). In addition, personal data is stored to the extent and for as long as Brics Aviation has a legal obligation to do so. Corresponding documentation and retention obligations result from Dutch Commercial Code, tax code, and money-laundering act, among others. Based on the aforementioned laws, data can be stored for a period of up to 10 years.
4. Right to object pursuant to Article 21 of the GDPR
You have the right to object, at any time, on grounds relating to your particular situation, to the processing of personal data concerning you, which is based on point (e) or (f) of article 6(1) of the GDPR, including profiling based on those provisions.
If you make such an objection, the controller will no longer process your personal data unless the controller can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms or for the establishment, exercise, or defense of legal claims.
Where personal data is processed for direct marketing purposes, you have the right to object, at any time, to the processing of your personal data for the purpose of such marketing; this also applies to profiling insofar as it is conducted in conjunction with such direct marketing.
If you object to the processing of your personal data for direct marketing purposes, we will cease to process your personal data for this purpose.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
Where personal data is processed for scientific or historical research purposes or statistical purposes pursuant to article 89(1) of the GDPR, you have, on grounds relating to your particular situation, the right to object to the processing of your personal data unless the processing is necessary for the performance of a task carried out for reasons of public interest.
5. Disclosure of personal Data to Third Parties
In order to be able to offer you our products and services based on our contractual obligations or in accordance with our legitimate interests, we may have to disclose your personal data to third parties within or outside Brics Aviation. These recipients can be categorized as follows:
EASA ATO Fight Academies
EU CAA (applicable)
Airline companies
o Marketing
o IT
In this context, personal data may be transferred to third countries or international organizations. For your protection and the protection of your personal data, such data transfers are subject to appropriate safeguards pursuant to and in accordance with the applicable legal requirements (in particular application of EU standard contractual clauses) or an adequacy decision adopted by the EU Commission (article 45 of the GDPR).
Information about EU standard contractual clauses can be found here: [https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32010D0087&from=DE]. The EU Commission provides information on its adequacy decisions at [https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en#dataprotectionincountriesoutsidetheeu].
You can also request a copy of the security measures we implement by sending an e-mail to info(at)BricsAviation.com.
In addition, we are legally obligated to disclose personal data to Dutch and international authorities pursuant to article 6(1)(c) of the GDPR in conjunction with local and international regulations and agreements.
6. Rights of the Data Subject
Ensuring our processing operations are fair and transparent is extremely important to Brics Aviation. For this reason, it is important to us that you, as the data subject, can exercise the following rights, in addition to the right of objection, if the respective legal requirements are met:
Right of access pursuant to article 15 of the GDPR
Right to rectification pursuant to article 16 of the GDPR
Right to erasure (right to be forgotten) pursuant to article 17 of the GDPR
Right to restriction of processing pursuant to article 18 of the GDPR
Right to data portability pursuant to article 20 of the GDPR
To exercise your rights, simply send an e-mail to info(at)BricsAviation.com. In this case, we would like to point out that in order to process your request and to identify you, we will process your personal data in accordance with article 6(1)(c) of the GDPR.
In addition, you have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for Brics Aviation.
7. Consent
If you have given us your consent to process your personal data, we hereby inform you that you have the right to withdraw this consent at any time.
If you have given your consent on this website, please visit the page where you originally gave your consent, or log in with your applicable ID to withdraw your consent in the settings.
In all other cases or if you have any difficulties withdrawing your consent on this website, you can send an e-mail to info@BricsAviation.com.
Please note that the withdrawal of consent only applies to the future and does not affect the lawfulness of processing based on consent before its withdrawal. In certain cases, we may be authorized to continue processing your personal data on another legal basis such as to fulfil a contract despite your withdrawal.
8. Disclaimer and Limits of this Privacy Policy
The information regarding data protection provided in this Privacy Policy only applies to the processing of data on the website: https://www.BricsAviation.com/ and https://www.BricsAviation.nl/. Other websites are not covered by this Privacy Policy and provide their own specific privacy policy.
European Flight Academy Applicant Data Protection
Brics Aviation process online applications and administer the screenings/aptitude tests for the Adriana Aviation ab initio courses.
Since protecting your personal data is very important to us, we would like to inform you about the following data protection principles that Brics Aviation is committed to observing as part of a transparent application process.
We process and use your personal data in our applicant management system exclusively for the purposes necessary to ensure that the application process is conducted effectively and properly.
By entering your personal data, you give us consent to store it for the above purposes. You can withdraw this consent at any time. If you withdraw consent, however, it also means that we cannot continue processing your application. The retention period for a saved application is twelve months. After twelve months, the user must renew their consent to the Privacy Policy. In the event of renewal, the account will be retained for a further twelve months.
If you submit an application yet are not accepted onto a course, we save a recognition record with your personal data. We need this record in order to recognize you if you apply again. This recognition record contains the following information: Your last name, first name, address, date of birth, place of birth, education level, and history of your participation in screenings/aptitude tests.
When your data is transferred to the applicant management system, it is automatically encrypted. In this context, the data security measures we implement always correspond to the current state of the art.