Revision 4 of Thursday, October 16th 2025
This Privacy Policy describes how AVIET LTD (“we”, “us”, “our”), a Malta-based EASA Part-147 Aircraft Maintenance Training Organization, collects, uses, and discloses personal information collected from users (“you”, “your”) across all platforms and services under the aviet.aero domain (collectively, the “Platform”).
We are fully committed to complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws that regulate the collection, use, and processing of personal data.
By using the Platform, you consent to the collection and use of your personal information as described in this Privacy Policy. If you do not agree to the terms of this Privacy Policy, please do not use the Platform.
Collection of Information
We may collect personal information in the following ways:
- Information you provide to us: When you register for an account, enroll in a course, upload required documentation, or sign agreements, we collect personal information such as your name, email address, date of birth, passport details, proof of address, signed agreements and payment plan selections.
- Information we collect automatically: When you use the Platform, we may collect information about your device (IP address, browser type) and usage data (pages viewed, links clicked).
- Information from third parties: We may receive personal information from third-party sources such as payment processors and service providers to facilitate transactions or course enrollments.
Use of Information
We use your personal information for the following purposes:
- To provide, manage, and improve the Platform and our services.
- To track student progress, manage enrollments, certifications, and examinations.
- To process payments for courses and services.
- To communicate with you about courses, transactions, updates, and company news.
- To comply with the European Aviation Safety Administration (EASA) and other aviation regulatory requirements.
- To fulfill legal obligations and protect against fraud or security risks.
- To verify and reconcile submitted data (e.g., comparing information entered by you against uploaded official documents) using automated processing tools operated by trusted third parties.
Disclosure of Information
We may disclose your personal information to the following parties:
- Service providers: We work with third-party providers for hosting (Hetzner Online GmbH), payments (Stripe, Inc.), online course delivery (Zoom Communications, Inc.), and automated data processing to support document/data verification (OpenAI, Inc.). These providers process personal data on our behalf under their own data protection policies.
- Regulatory authorities: We may share student records with aviation authorities as required by EASA and other regulatory bodies.
- Legal obligations: If required by law, court order, or government request, we may disclose personal information.
- Debt-collection agencies and legal representatives: In cases of non-payment, we may share relevant contact and account information with authorized debt-collection agencies and/or legal counsel to recover outstanding amounts.
Automated Processing
We may use automated tools provided by trusted third parties to extract, structure, and validate information from documents you submit (e.g., passports or IDs) to improve accuracy and prevent errors. This processing does not involve solely automated decisions producing legal effects about you.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR), compliance with legal/regulatory requirements (Art. 6(1)(c)), and our legitimate interests in accuracy and fraud prevention (Art. 6(1)(f)).
You may object to processing based on legitimate interests or request human review where appropriate.
Security
We take appropriate technical and organizational measures to protect personal data from unauthorized access, use, and disclosure. However, no security measure is completely foolproof, and we cannot guarantee absolute security.
Cookies and Tracking Technologies
We may use cookies and similar technologies to improve user experience and analyze Platform usage. You can manage your cookie preferences through your browser settings.
Data Retention
We retain personal data as long as necessary to fulfill contractual, regulatory, and legal requirements. Student records related to training and certification are retained indefinitely as required by EASA regulations.
Records related to payment defaults and recovery activities are retained for as long as necessary to recover amounts due and to comply with applicable legal and limitation periods.
Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right to access: Request a copy of your personal data.
- Right to rectification: Request corrections to inaccurate or incomplete data.
- Right to erasure: Request deletion of your personal data where legally permissible.
- Right to restriction of processing: Request limited processing of your data.
- Right to data portability: Receive a copy of your data in a structured format.
- Right to object to processing based on our legitimate interests, including certain automated processing activities.
- Right not to be subject to a decision based solely on automated processing that produces legal effects or significantly affects you; we do not carry out such decisions.
To exercise these rights, contact us at . We may require identity verification before processing your request.
International Data Transfers
Your data may be processed outside the European Economic Area by some of our providers (e.g., automated processing providers such as OpenAI). Where this occurs, we implement appropriate safeguards such as EU Standard Contractual Clauses, and we assess provider practices to help ensure an adequate level of protection.
Changes to this Privacy Policy
We may update this Privacy Policy periodically. Changes will be communicated via email or Platform notifications. Continued use of the Platform after updates constitutes acceptance of the revised policy.