Privacy Policy

1. Controller

The controller responsible for the processing of personal data in connection with this website is:

Data protection contact:
Mutlu Uzun (Authorised Signatory)
Email: privacy@aviationts.ch

2. Legal Basis and Scope

Personal data is processed in accordance with the revised Swiss Federal Act on Data Protection (revFADP) and, where applicable, the General Data Protection Regulation of the European Union (GDPR).

This Policy applies to the website aviationts.ch and all related services.

3. Data We Process

3.1 Data from contact and quote forms

When you submit our contact or quote form, we collect the following data:

• Name
• Email address
• Phone number (optional)
• Company name
• Request details (e.g. part numbers, descriptions, certification requirements)
• Content of your message

Purpose: processing your enquiry, responding to you, preparing a quote and, if a contract is concluded, executing the contract.
Legal basis: performance of a contract or pre-contractual measures (Art. 31(2)(a) revFADP / Art. 6(1)(b) GDPR).

3.2 Customer data

Upon conclusion of a contract and in the course of the business relationship, we process further data, including billing and shipping address, VAT ID, contact persons, communication related to orders, and payment and transaction data. This data is stored in our internal database.

3.3 Server log files

Each time our website is accessed, technical data is automatically recorded by our hosting provider: IP address, date and time of access, page requested, browser type, operating system, and referrer URL. This data is used to ensure operational stability, analyse errors, and prevent abuse.
Legal basis: legitimate interest (Art. 31(1) revFADP / Art. 6(1)(f) GDPR).

4. Service Providers and External Services

4.1 Hosting — Vercel

Our website is hosted by Vercel Inc. (440 N Barranca Avenue #4133, Covina, CA 91723, USA). Data may be transferred to the United States. Vercel is certified under the EU-U.S. Data Privacy Framework. More information: vercel.com/legal/privacy-policy.

4.2 Email delivery — Resend

For transactional email delivery (form notifications, auto-replies) we use Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). Name, email address, and message content are transmitted to Resend and processed for the purpose of delivery. More information: resend.com/legal/privacy-policy.

4.3 Database and backend — Supabase

For internal data storage and backend functionality we use Supabase (Supabase Inc., 970 Toa Payoh North #07-04, Singapore 318992). Supabase operates data centres including in the EU. We store customer data and enquiry content there for the purpose of managing the business relationship. More information: supabase.com/privacy.

4.4 Web analytics — Vercel Analytics

We use Vercel Analytics for anonymised analysis of user behaviour. Vercel Analytics operates cookieless and aggregates data such as page views, referrer, device type, browser, and approximate geolocation (country/city). No personal profiles are created.
Legal basis: legitimate interest (Art. 31(1) revFADP / Art. 6(1)(f) GDPR). More information: vercel.com/docs/analytics.

4.5 Marketing — Google Ads

We use Google Ads (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to deliver advertising campaigns and measure their effectiveness (conversion tracking, remarketing). Google sets cookies in this context. This processing only takes place if you have given your consent via our cookie banner.
Legal basis: consent (Art. 31(1) revFADP / Art. 6(1)(a) GDPR). More information: policies.google.com/privacy.

5. Cookies and Tracking

Our website uses two categories of cookies:

• Strictly necessary cookies: required for the operation of the website (e.g. to store your cookie preferences). These are not subject to consent.
• Marketing cookies: set by Google Ads to deliver personalised advertising and measure performance. They are set only after your explicit consent.

On your first visit we inform you via our cookie banner and obtain your consent for optional cookies. You can revoke your selection at any time via the cookie banner or by deleting your browser cookies.

6. Disclosure to Third Parties

Your personal data is only disclosed to third parties if:

• this is necessary for the performance of the contract (e.g. to logistics providers);
• we are legally obliged to do so (e.g. vis-à-vis authorities);
• you have expressly consented;
• the disclosure is to processors listed in Section 4 above as part of their service provision.

7. International Data Transfers

Some of our service providers are based in the United States. Transfers take place on the basis of standard contractual clauses, certifications under the EU-U.S. Data Privacy Framework, or — where no adequate level of protection exists — on the basis of explicit consent or the necessity of performance of a contract.

8. Retention Periods

Personal data is retained only for as long as is necessary for the respective purpose:

• Form enquiries without contract: up to 12 months after last contact, unless there is a legitimate interest in longer retention.
• Customer data upon contract conclusion: for the duration of the business relationship and beyond in accordance with statutory retention obligations (generally 10 years pursuant to Art. 958f of the Swiss Code of Obligations).
• Server log files: generally up to 30 days.

9. Your Rights

You have the following rights at any time:

• Right to access (Art. 25 revFADP / Art. 15 GDPR);
• Right to rectification (Art. 32 revFADP / Art. 16 GDPR);
• Right to erasure (Art. 32 revFADP / Art. 17 GDPR);
• Right to restriction of processing (Art. 18 GDPR);
• Right to data portability (Art. 20 GDPR);
• Right to object to processing (Art. 30 revFADP / Art. 21 GDPR);
• Right to withdraw consent with effect for the future.

To exercise your rights, please contact us at privacy@aviationts.ch. You also have the right to lodge a complaint with the competent supervisory authority — in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in the EU, your local data protection authority.

10. Data Security

We implement appropriate technical and organisational measures to protect your data against loss, destruction, unauthorised access, alteration, or disclosure. Transmission via this website is encrypted using HTTPS.

11. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy to reflect changes in the legal landscape or in our services. The current version is always available on this page.