1. Data Controller

The data controller responsible for the processing of your personal data in connection with this website and our services is:

AVIACO
Société par actions simplifiée (SAS)
SIREN: 938 653 409
Registered office: Avenue Jacqueline Auriol – Boulevard Claudie Haignere, ZAC des Flo, 13700 Marignane, France
Email: rfq@aviaco.fr

2. Data We Collect

We may collect and process the following categories of personal data:

• Identity and contact data: name, email address, telephone number, company name, registration number, VAT number.
• Address data: billing and shipping addresses.
• Account data: login credentials (stored in encrypted form), account preferences, order history.
• Transaction and payment data: order details, payment method information (processed by our payment service provider; we do not store full card numbers).
• Communications: correspondence with us (e.g. contact form, support requests, career applications).
• Technical and usage data: IP address, browser type, device information, pages visited, date and time of access (including via cookies and similar technologies, as described in section 8).

3. Purposes and Legal Basis for Processing

We process your personal data for the following purposes and on the following legal bases (where relevant under the GDPR):

• Performance of a contract: to create and manage your account, process and fulfil orders, deliver Products, issue invoices, and handle returns or refunds.
• Legal obligation: to comply with tax, accounting, and regulatory obligations (e.g. retention of invoices, anti-fraud checks).
• Legitimate interests: to operate and improve our website, prevent fraud and abuse, manage disputes, and defend our rights; to send service-related communications (e.g. order confirmations, shipping updates).
• Consent (where required): for optional marketing communications, non-essential cookies, or other processing where we ask for your consent.

4. Recipients of Your Data and International Transfers

We may share your personal data with:

• Payment service providers (e.g. Stripe) to process payments securely.
• Carriers and logistics partners to deliver orders.
• IT and hosting providers who assist us in operating the website and storing data, under strict confidentiality and data processing agreements.
• Professional advisers (e.g. lawyers, accountants) where necessary for our legitimate interests or legal obligations.
• Public authorities where required by law.

Some of these recipients may be located outside the European Economic Area (EEA). In such cases we ensure appropriate safeguards are in place (e.g. standard contractual clauses approved by the European Commission or an adequacy decision) so that your data is protected in line with applicable law.

5. Retention of Your Data

We retain your personal data only for as long as necessary for the purposes described above, including:

• Account and order data: for the duration of the contractual relationship and thereafter as required by law (e.g. tax and accounting: typically 10 years in France).
• Contact and support correspondence: for the time needed to handle your request and any follow-up, then in accordance with our internal retention policy or legal obligations.
• Marketing and cookies: as specified when we collect your consent or in our cookie information.
• Logs and technical data: for a limited period necessary for security and troubleshooting.

After the retention period, we delete or anonymise your data so that it no longer identifies you.

6. Your Rights

Under the General Data Protection Regulation (GDPR) and applicable national law, you have the right to:

• Access: obtain confirmation as to whether we process your data and, where applicable, a copy of your personal data.
• Rectification: have inaccurate or incomplete data corrected.
• Erasure: request deletion of your data in certain circumstances (e.g. where it is no longer necessary, or you withdraw consent where consent was the legal basis).
• Restriction of processing: request that we restrict the processing of your data in certain situations.
• Data portability: receive your data in a structured, commonly used, machine-readable format and, where technically feasible, have it transmitted to another controller.
• Object: object to processing based on legitimate interests, including profiling. You may also object at any time to processing for direct marketing.
• Withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.
• Lodge a complaint: with a supervisory authority, in particular in the EU country of your residence, place of work, or place of the alleged infringement. In France, the competent authority is the CNIL (Commission nationale de l’informatique et des libertés): www.cnil.fr.

To exercise any of these rights, please contact us at rfq@aviaco.fr. We will respond within the time limits set by applicable law (e.g. one month under the GDPR, extendable where necessary). We may need to verify your identity before processing your request.

7. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include secure transmission (e.g. HTTPS), access controls, and careful selection of service providers. No method of transmission over the Internet or electronic storage is completely secure; we cannot guarantee absolute security but we take the protection of your data seriously.

8. Cookies and Similar Technologies

We use cookies and similar technologies (e.g. local storage) to:

• Enable essential functions (e.g. session management, authentication, cart, security).
• Remember your preferences and improve your experience on the website.
• Analyse how the website is used (e.g. traffic, performance) in order to improve our services.

Essential cookies are necessary for the operation of the website and do not require your consent under applicable law. For non-essential cookies (e.g. analytics, marketing), we will obtain your consent where required. You can manage or disable cookies through your browser settings; note that disabling certain cookies may affect the functionality of the website.

For more details on the cookies we use and how to manage them, please refer to the cookie information provided on the website or contact us.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. We will post the updated version on this page and indicate the date of the last update. We encourage you to review this policy periodically. Where required by law, we will seek your consent or notify you of material changes.

10. Contact

For any question about this Privacy Policy or about how we process your personal data, please contact us at rfq@aviaco.fr or via our contact form.