Privacy Policy
Last updated: 7 August 2026
Last updated: 7 August 2026
AEROTEST processes Users’ personal data diligently. This Privacy Policy explains what data we collect, why, the legal basis, retention periods, recipients and how to exercise your rights.
1. Controller
| Controller | AEROTEST SOLUTIONS, S.L. |
|---|---|
| Tax ID | B-88812565 |
| Address | Calle Poeta Aurora de Albornoz, 4, 5th B, 29010 Málaga, Spain |
| info@aerotestppl.es | |
| DPO | AEROTEST is not required to appoint a Data Protection Officer under article 37 GDPR and article 34 LOPDGDD. |
2. Data we process
2.1 Data you provide
- Registration: name, email, encrypted password, country and flight school.
- Billing: name or company, tax ID and billing address.
- Contact: name, email, message and optional phone number.
- Contributions: questions, proposals or corrections you submit voluntarily.
2.2 Data generated by use
- Tests, answers, results, flags, history and progress statistics.
- Subscription type, dates, amount, status and expiry. We do not store card data; payments are processed entirely by Stripe.
- IP address, access date and time, browser, device and server logs.
- Cookie data only as described in the Cookie Policy.
AEROTEST does not request or process special categories of personal data.
3. Purposes, legal bases and retention
| Purpose | Legal basis | Retention |
|---|---|---|
| Manage the account and provide free or paid services. | Contract or pre-contractual measures (art. 6.1.b GDPR). | While active; after 2 years without access to the account, we may erase or anonymise data not subject to a retention obligation without prior notice. |
| Keep history, statistics and question flags to show progress. | Contract and legitimate interest in providing and improving the service (arts. 6.1.b and 6.1.f GDPR). | While study activity continues. After 2 years without opening a test or answering test questions, we may erase history, statistics and question flags not subject to a retention obligation without prior notice. The account will remain available. |
| Process subscriptions and payments. | Contract. | Relationship period and limitation periods. |
| Issue invoices and comply with tax/accounting duties. | Legal obligation. | 6 years from the last accounting entry, without prejudice to tax periods. |
| Communicate user status or progress to a flight school. | Express, specific consent (art. 6.1.a GDPR). | Until consent is withdrawn or the relationship ends. |
| Commercial communications. | Consent or legitimate interest for similar services where permitted by law. | Until unsubscribe or objection. |
| Manage and incorporate contributions. | Contribution relationship and consent. | Content indefinitely in disassociated form; identifying data as needed to evidence rights. |
| Aggregated and anonymous statistics. | Legitimate interest in improving the service. | Indefinitely in anonymous form. |
| Website analytics. | Cookie-panel consent. | As stated in the Cookie Policy. |
| Claims and legal proceedings. | Legitimate interest and legal obligations. | Applicable limitation periods. |
4. Minors
Access and subscriptions are for people aged 16 or over. Users aged 16–17 state that they have parental or legal-representative authorisation. Accounts found to belong to a child under 16 will be cancelled and associated data deleted.
5. Recipients
We do not disclose data except as described below. Providers access data as processors under article 28 GDPR, except Stripe for payment data, which acts as an independent controller.
| Recipient | Service | Location / transfers |
|---|---|---|
| Cloudways / DigitalOcean | Hosting and database. | Servers in Madrid, Spain; possible remote support from the United States under SCCs. |
| Stripe Payments Europe, Ltd. | Card payments and fraud prevention. | Ireland; intra-group communications with Stripe, Inc. under the EU-US Data Privacy Framework. |
| Google Ireland Limited | Analytics with consent and support email. | Ireland; possible transfers to Google LLC under the EU-US DPF and SCCs. |
| Rackspace | Transactional email. | US provider; transfers under SCCs or the EU-US DPF. |
| Flight schools | Only with an agreement and express, specific, informed consent. | European Union. |
6. International transfers
Transfers involving US-linked providers rely on the European Commission’s 10 July 2023 adequacy decision for the EU-US Data Privacy Framework or Standard Contractual Clauses, with additional safeguards where appropriate. You may request further information at info@aerotestppl.es.
7. Statistics and automated decisions
The Platform analyses results to show progress statistics and suggest revision. This is an advisory service feature, has no legal or similarly significant effects and is not an automated decision under article 22 GDPR.
8. Flight-school communications
The school field is used for internal organisational and statistical purposes. Data is shared with the named school only if an agreement is in force and you have given prior express, specific and informed consent. You may withdraw consent at any time by email.
9. Security
AEROTEST applies appropriate technical and organisational measures, including HTTPS/TLS, cryptographic password storage, access controls, backups and processor agreements. High-risk breaches will be notified without undue delay and to the Spanish DPA within 72 hours where required.
10. Your rights
You may request access, rectification, erasure, objection, restriction, portability and withdrawal of consent by writing to info@aerotestppl.es. We may request identity information and will normally respond within one month, extendable by two months for complex requests. You may complain to the Spanish Data Protection Agency.
11. Accuracy
You warrant that your data is accurate and current. If you provide third-party data, you must inform them and have authorisation.
12. Changes and contact
This Policy may be updated for legal, case-law or service changes. Substantial changes will be notified individually by email where appropriate.
AEROTEST SOLUTIONS, S.L.
Calle Poeta Aurora de Albornoz, 4, 5th B, 29010 Málaga, Spain
info@aerotestppl.es