top of page

Privacy 
Policy

Effective Date: 01.01.2025.
Last Updated: 10.10.2025.
 

Company: Elite Aero Support Ltd.
Registered Address: 14–16 Nikita Street, Dali 2540, Nicosia, Cyprus
Website: www.eliteaerosupport.com
Email: Tm@eliteaerosupport.com
Phone:+30 694 912 6266
 

1. Introduction

Elite Aero Support Ltd. (“Elite Aero Support”, “we”, “our”, or “us”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, register for our training courses, or interact with us via email, social media, or other digital platforms.

We operate in full compliance with:

  • Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR),

  • The Cyprus Data Protection Law (L.125(I)/2018), and

  • EASA regulatory data handling standards (including records retention and data traceability obligations under Part-147 and Part-145).

If you do not agree with the terms of this policy, please do not access the site or use our services.
 

2. Data Controller and Contact

Elite Aero Support Ltd. is the Data Controller of your personal data.
If you have questions or concerns about this Privacy Policy or how we handle your data, please contact our Data Protection Officer (DPO):

Data Protection Officer
Email: saudiamanager@eliteaerosupport.com
Postal: 14–16 Nikita Street, Dali 2540, Cyprus
 

3. Data We Collect

We collect the following types of information:
 

A. Information You Provide Directly

  • Personal Identifiers: Name, surname, date of birth, nationality, passport or ID number.

  • Contact Information: Email, phone number, address, country of residence.

  • Professional Data: Employer, job title, license number (EASA/GACA/FAA where applicable).

  • Training Information: Course enrolments, certificates, exam results, OJT documentation.

  • Payment Information: Billing details (payment processed securely via Wix Payments or third-party processors such as Stripe or PayPal).

  • Communication Records: Emails, chat transcripts, and form submissions.

B. Information Collected Automatically

  • Technical Data: IP address, browser type, device ID, time zone, and access logs.

  • Usage Data: Pages visited, duration of visit, referral URLs.

  • Cookies and Tracking: See our Cookie Policy for more details.
     

4. Purpose and Legal Basis for Processing

We process your personal data for the following purposes:

Purpose - Legal Basis

Course enrolment and certification management
Performance of a contract (Art. 6(1)(b) GDPR)

Regulatory compliance (EASA/CAA/GACA audits)
Legal obligation (Art. 6(1)(c) GDPR)

Payment and invoicing
Performance of a contract (Art. 6(1)(b))

Course communication and updates
Legitimate interest (Art. 6(1)(f))

Marketing and promotional communications
Consent (Art. 6(1)(a))

Website analytics and security
Legitimate interest (Art. 6(1)(f))
 

5. How We Use and Store Your Data

We use your information to:

  • Manage course enrolment and certification records,

  • Verify identity for regulatory training purposes,

  • Issue EASA-compliant certificates,

  • Communicate important updates about courses or regulations,

  • Improve our services, and

  • Comply with audit and reporting requirements.

All data is stored securely on Wix-hosted servers (EU/EEA or equivalent jurisdictions) and encrypted cloud storage solutions (e.g., Google Workspace).
Data retention aligns with EASA Part-147.A.125 and Part-145.A.55 requirements—minimum 5 years for student training records and up to 10 years for certificates and compliance audits.
 

6. Data Sharing and Disclosure

We may share your data only where necessary with:

  • Regulatory authorities (EASA, CAAs, GACA) for certification verification,

  • Accredited partner organizations (e.g., Aviotrace Swiss, Dynamic Training) for joint courses,

  • Payment processors (Stripe, PayPal, Wix Payments),

  • Cloud service providers (Google Workspace, Zoom, Microsoft Teams),

  • Auditors and quality inspectors are under confidentiality agreements.

We do not sell or trade your personal data to third parties.
 

7. International Data Transfers

If your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards, such as:

  • European Commission adequacy decisions,

  • Standard Contractual Clauses (SCCs), and

  • Regulatory agreements under EASA–GACA mutual recognition frameworks.
     

8. Data Retention

Data CategoryRetention Period

Training records and certificates10 years (EASA requirement)

Invoices and payment data7 years (tax law)

Marketing dataUntil consent is withdrawn

General inquiriesUp to 2 years

After the retention period expires, data is securely deleted or anonymized.
 

9. Your Rights Under GDPR

You have the following rights:

  • Access – to know what data we hold about you.

  • Rectification – to correct inaccuracies.

  • Erasure – to request deletion (“right to be forgotten”).

  • Restriction – to limit processing in certain cases.

  • Data Portability – to receive your data in a structured format.

  • Objection – to withdraw consent for marketing at any time.

Requests can be submitted to privacy@eliteaerosupport.com. We respond within 30 days in compliance with GDPR timelines.
 

10. Data Security

We implement industry-standard technical and organizational measures, including:

  • SSL encryption (HTTPS),

  • Two-factor authentication for system access,

  • Restricted staff access to personal records,

  • Regular data protection audits,

  • Encrypted backups and secure disposal procedures.

In case of a personal data breach, affected individuals and the Office of the Commissioner for Personal Data Protection (Cyprus) will be notified within 72 hours.
 

11. Children’s Privacy

Our services are not directed to individuals under 18.
If we discover that a minor’s data was collected without parental consent, it will be deleted immediately.
 

12. Cookies

Our website uses cookies for essential functionality, analytics, and user experience optimization.
Details on categories and management of cookies are available in our Cookie Policy.
 

13. Links to Other Websites

Our website may include links to third-party pages (e.g., partner academies, payment gateways).
We are not responsible for the privacy practices or content of these sites.
 

14. Updates to This Policy

We may update this Privacy Policy from time to time to reflect legal or operational changes.
The latest version will always be available on our website.
 

15. Governing Law

This Privacy Policy is governed by:

  • European Union GDPR,

  • Cyprus Data Protection Law (L.125(I)/2018), and

  • EASA record-keeping standards.

Any disputes shall fall under the jurisdiction of the Courts of Nicosia, Cyprus.

 

Elite Aero Support Ltd.
“Empowering Aviation Excellence through EASA-Compliant Training.”

bottom of page