INTRODUCTION
TARMAC AEROSAVE (« Tarmac Aerosave » or « We ») is committed to conducting its business in compliance with the General Data Protection Regulation (« GDPR ») n°2016/679 of the European Parliament and of the Council of 27 April 2016, as well as all applicable Data Protection laws and regulations (« Data Protection Laws ») and in accordance with the highest standards of ethical conduct.
Your privacy matters to us, and we are committed to safeguarding it. This Data Protection Policy outlines how we handle your Personal Data when you use our Platform, contact us or place an order.
DEFINITION
The terms used in this Data Protection Policy shall have the following meaning:
“Confidentiality of Personal Data” refers to the obligation ofthe Platform Administration not to disclose Personal Data without the Data Subject’s prior consent, unless legally required.
“Data Subject” refers to an identified or identifiable natural person
“Cookies” are small text files stored on a user’s device by their web browser and are used to remember information about user’s visit.
“IP address” refers to a unique numerical identifier assigned to each device connected to a computer network using the Internet Protocol (IP), a set of rules governing how data is sent and received over the internet.
“Personal Data” means any information relating to a Data Subject
“Platform” means the website accessible at www.tarmaclegacy.com.
“Platform Administration” refers to authorized employees responsible for managing the Platform and acting on behalf of TARMAC AEROSAVE. They define the purposes and mean of data processing and execute the operations on Personal Data.
“Policy” refers to this Data Protection Policy, which outlines the principles, procedures, and responsibilities adopted by TARMAC AEROSAVE in relation to the collection, processing, and protection of Personal Data.
“Processing” means any operation or set of operations which is performed on Personal Data or on sets of personal data, whether by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
“User” means any natural person accessing and using the Platform for their own purposes.
“Users” refers collectively to all natural persons accessing and using the Platform, each of whom may be considered a Data Subject under this Policy.
DATA PROTECTION PRINCIPLES
TARMAC AEROSAVE is committed to ensuring that Personal Data is processed in accordance with the following principles, as outlined in Article 5 of the GDPR :
Lawfulness, fairness, and transparency: Data must be processed lawfully, fairly and in a transparent manner in relation to the Data Subject;
Purpose limitation: Data must be collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes. Further process for archiving, scientific or historical research purposes or statistical purposes is permitted under the GDPR;
Data minimisation: Data must be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
Accuracy: Data must be accurate and, where necessary, kept up to date. Every reasonable step must be taken to ensure that Personal Data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay;
Storage limitation : Data must be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the Personal Data are processed; Personal Data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes subject to implementation of the appropriate technical and organizational measures required by the GDPR in order to safeguard the rights and freedoms of individuals; and
Integrity and confidentiality : Data must be processed in a manner that ensures appropriate security of the Personal Data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures.
GENERAL PROVISIONS
Any use of the Platform or use of our services by the User implies full acceptance of this Policy and the conditions regarding the processing of their Personal Data.
If the User does not agree with the terms of this Policy, they must refrain from using the Platform.
This Policy applies exclusively to this Platform. TARMAC AEROSAVE is not responsible for the privacy practices or content of any third-party website that may be linked to this Platform. Users are encouraged to review the privacy policies of those external websites.
TARMAC AEROSAVE does not verify the accuracy of the Personal Data provided by Users.
WHAT DATA DO WE COLLECT?
When you visit our Platform, contact us orplace an order, we may collect certain categories of Personal Data necessary to provide our services and respond to your requests. The types of data we collect include:
Personal identification information: first name, last name, email, postal address, delivery address, phone number.
Professional identification information: job title, professional email address, business phone number (where applicable).
Company identification information: company name, company registration number, business postal address, delivery address, business phone number, general contact email (for professional clients).
Account credentials: login, password (encrypted), preferences and saved items (if you create an account).
Order and delivery information: selected products, delivery address, invoice address, delivery tracking number, order history.
Billing and payment information: method of payment, transaction reference, invoice details (note: bank data is processed by a certified third-party payment provider).
Communication content: messages sent via our contact form or customer service, reviews and responses to surveys.
We make every effort to collect only data that is relevant, adequate, and limited to what is necessary in relation to the purposes described in this Policy.
HOW DO WE COLLECT YOUR DATA?
We collect your Personal Data from you when:
You create a customer account on our Platform;
You place an order or interact with our order process (including cart, checkout and payment);
You contact our customer service;
You place an order by filling the customer form
When you subscribe to our newsletter providing your address email
You browse our Platform, in which case certain data is collected through cookies (subject to your consent where required).
HOW WILL WE USE YOUR DATA?
We collect and process your Personal Data for the following purposes:
To process and manage your orders: including order confirmation, invoicing, delivery, returns and customer service.
To create and manage your customer account: enabling you to view order history, saved preferences, and manage your personal information.
To manage and respond to any request submitted through the contact form or via customer support.
To send you newsletters if you have subscribed or consented.
To comply with legal obligations: including accounting, tax, and archiving requirements.
To prevent fraud and ensure the security of our Platform: including payment verification and access control.
To collect feedback: through surveys or reviews to improve our services and products
Where required, your data may also be shared with:
logistics providers to ensure the proper delivery of your orders.
Payment service providers: to process transactions securely.
Technical and hosting service providers: to operate the Platform.
Legal and administrative authorities: where required by applicable law.
Professional indemnity or other relevant insurers: only where necessary for the management of legal claims, complaints, or disputes, and in accordance with applicable laws.
INTERNATIONAL TRANSFER
In some cases, your Personal Data may be transferred to countries outside the European Economic Area (EEA). This may occur when our service providers or technical infrastructure are located in non-EEA countries.
Whenever such transfers occur, we ensure that:
The destination country benefits from an adequacy decision by the European Commission, or;
Standard Contractual Clauses (SCCs) approved by the European Commission are in place, or;
Other appropriate safeguards, such as Binding Corporate Rules (BCRs), have been implemented.
We take all necessary steps to ensure that the level of protection of your data is equivalent to that provided under the GDPR.
HOW DO WE STORE YOUR DATA?
TARMAC AEROSAVE takes appropriate technical and organisational measures to ensure the security and confidentiality of your Personal Data.:
Your data is stored on secure servers, protected by passwords, firewalls, access restrictions, and data encryption technologies where applicable.
We keep your data for no longer than is necessary for the purposes for which it was collected, in accordance with legal and regulatory requirements. Specifically:
Type of Data
Retention Period
General enquiries or contact requests
Until the request is answered, then deleted
Newsletter subscription
For as long as you remain subscribed (you can unsubscribe at any time)
Orders and customer account
3 years after your last order, unless legally required to keep it longer
Invoices and accounting data
5 years (legal obligation under French accounting law)
Reviews, complaints or support exchanges
Up to 3 years from the last contact
We regularly review our data retention practices to ensure compliance with applicable legal obligations and data minimisation principles.
SOCIAL MEDIA
TARMAC AEROSAVE operates official pages or accounts on third-party social media platforms such as YouTube, Instagram and LinkedIn. These platforms are governed by their own terms and privacy policies, which you are encouraged to review.
When you interact with our content on these platforms (e.g., by liking, commenting, or following), your Personal Data may be processed by the social media provider according to their own data processing practices, which are independent of our control.
TARMAC AEROSAVE does not collect or process your Personal Data directly through these platforms, unless you send us a message or interact with us through the messaging functions of these services.
We cannot be held responsible for how these platforms collect or process your Personal Data. We encourage you to read their respective privacy policies before engaging with our content on their sites.
NEWSLETTER
If you choose to subscribe our newsletter, we will collect and use your email address for the purpose of sending you news, updates, offers, or information about our products and services.
We rely on your explicit consent to send such communications. You may unsubscribe at any time by clicking on the “Unsubscribe” link provided in each email or by contacting us directly.
We do not share your email address with third parties for marketing purposes.
The data you provide for this purpose will be used solely for sending the newsletter and will be deleted immediately if you withdraw your consent or unsubscribe.
COOKIES
What are cookies?
Cookies are small text files placed on your device when you visit our Platform. They collect and store certain information about your browsing activity and preferences.
How do we use cookies?
We use cookies to :
Improve the functionality and performance of the Platform;
Understand how Users navigate our website (audience and traffic analysis);
Remember your preferences for future visits;
Secure the Platform through anti-bot verification (reCAPTCHA).
What types of cookies do we use?
Essential cookies: Required for the basic functioning of the Platform. These cookies cannot be disabled.
Analytics cookies: Help us understand how visitors interact with the Platform (e.g., Google Analytics). These cookies are only placed with your consent.
Security cookies: Used for anti-spam and bot protection (e.g., Google reCAPTCHA).
Cookie consent
We use a cookie banner to request your consent before placing non-essential cookies. You can change or withdraw your consent at any time by accessing the cookie settings on the Platform or modifying your browser preferences.
For more information about how Google uses your data, please refer to Google’s Privacy Policy: www.google.com/policies/privacy.
ABOUT reCAPTCHA
Captcha is an acronym for Completely Automated Public Turing test to tell Computers and Human Apart.
Our Platform uses Google reCAPTCHA, a security service provided by Google LLC, to protect forms from automated abuse and spam (e.g., bots).
When reCAPTCHA is used, it may collect certain information from your device (such as IP address, mouse movements, time spent on the page, or browser settings) to distinguish between human users and bots. This process is subject to Google’s privacy policy and terms of service.
We rely on a legitimate interest (Article 6.1.f GDPR) to ensure the security of our Platform and protect our services from automated misuse.
By interacting with forms protected by reCAPTCHA, you agree to the processing of data by Google under the conditions set out in their privacy policy: https://www.google.com/policies/privacy.
WHAT ARE YOUR DATA PROTECTION RIGHTS?
Under the General Data Protection Regulation (GDPR), you have the following rights concerning your Personal Data:
Right to be informed – You have the right to receive clear and transparent information about how your data is collected and used.
Right to access – You can request copies of your Personal Data that we hold.
Right to rectification – You may ask us to correct or complete inaccurate or incomplete data.
Right to erasure (“right to be forgotten”) – You may request the deletion of your data, under certain conditions.
Right to restrict processing – You may request that we limit the way we use your data, under certain conditions.
Right to object– You can object to the processing of your data for reasons related to your particular situation, especially where processing is based on legitimate interest.
Right to data portability – You can request that we transfer your data to another organisation or directly to you, where technically feasible.
Rights related to automated decision-making including profiling – You have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects.
To exercise any of these rights, please contact us at:
Email: data.protection@tarmacaerosave.aero
Postal address: TARMAC AEROSAVE Ref. Data Protection – L’Aérodrome, 65380 Azereix, France
If you believe your rights are not respected, you also have the right to lodge a complaint with the Commission Nationale de l’Informatique et des Libertés (CNIL): www.cnil.fr
REVISION OF THIS POLICY
We regularly review this Policy to ensure compliance with changes in laws, regulations, and our processing practices.
The most recent version is always available on our Platform. Substantial changes will be clearly notified on the Platform or, where appropriate, by direct communication.
This Policy is reviewed at least once a year and may be updated without prior notice.
HOW TO CONTACT US
If you have any questions regarding this Policy, your Personal Data, or if you wish to exercise your rights, you can contact us:
Email us at : data.protection@tarmacaerosave.aero
Or write us at : TARMAC AEROSAVE Ref. Data Protection – L’Aérodrome 65380 Azereix, France
