Legal
Privacy policy
Last updated: August 2026
1. Data controller
- Controller: Avionline, S.L. · Tax ID B-35946524
- Address: Villalba Hervás 9, 38002 Santa Cruz de Tenerife
- Contact email: info@avionline.es
- Data protection contact: info@avionline.es
2. Data we process and why
| Processing | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact form | Name, organisation, email, phone and message content | Answering the enquiry and, where applicable, preparing a proposal | Consent and pre-contractual measures (art. 6.1.a and 6.1.b GDPR) |
| Newsletter | Email address | Periodic sector content | Consent (art. 6.1.a GDPR) |
| Private area | Username, credentials and access log | Access control and security | Legitimate interest and contract (art. 6.1.f and 6.1.b GDPR) |
| Usage analytics | Aggregated browsing data | Measuring site performance | Consent (art. 6.1.a GDPR) |
3. Retention period
Enquiry data is kept for as long as needed to deal with the enquiry and thereafter for the limitation periods of any resulting liability. Newsletter data is kept until consent is withdrawn. Private-area access logs are kept for five years.
4. Recipients
Data is not shared with third parties except where legally required. Hosting, email and management tool providers may access it as processors under article 28 GDPR contracts. Servers are located within the European Union. No international transfers are envisaged; should any occur, they would rely on the safeguards set out in Chapter V GDPR.
5. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent, by writing to info@avionline.es with the reference "Data protection" and proof of identity.
If you believe your rights have not been properly addressed you may lodge a complaint with the Spanish Data Protection Agency (aepd.es).
6. Security
Avionline, S.L. applies appropriate technical and organisational measures: encryption in transit, named access control, two-factor authentication on accounts with access to personal data, encrypted backups and activity logging.
7. Accuracy of data
Users warrant that the data provided is accurate and undertake to notify any change. If you provide third-party data you must have informed those people of this policy beforehand.