1. Who is the data controller?

The data controller (the entity responsible for the data) is AVINCIS AVIATION GROUP, S.A.U. (hereinafter, ‘Avincis’ or the ‘Controller’), with registered office at Aerodromo de Mutxamel, Partida la Almaina, 92, Mutxamel, Spain 03011, and with tax identification number A85989481. If you have any question in relation to your data processing, you can contact us to the postal address indicated above or by email to dpo@avincis.com.

2. From whom do we obtain personal data?

The personal data processed through www.avincis.com (the “Website”) is provided directly by the user through any means available on the Website (contact form etc). The user guarantees that the data provided is true, accurate, complete, and kept duly updated, so that it reflects their actual situation.

In the event that the user provides personal data relating to third parties, they declare that they are legally authorised to do so and undertake to inform such third parties of the content of this privacy policy.

3. For what purpose and on what legal basis does Avincis process your personal data?

• Management of the request raised through the contact form: we process your data to manage and respond to contact requests made by the user, whether through the contact forms enabled for this purpose on the Website, corporate email addresses, or other contact methods provided. The legal basis for this processing is our legitimate interest in responding to your requests.
• Management of the subscriptions to Avincis newsletter and commercial communications: we process your data to manage the Avincis newsletter which includes commercial communications and relevant updates about our company, our people, and our services, unless otherwise indicated or the user objects or withdraws consent. The legal basis for this processing is based on legitimate interest under the exception provided in the Recital 47 of the GDPR related to the legitimate interest based on conducting direct marketing to offer relevant products and services. However, the user has the right to object at any time. If the user has not previously maintained a business relationship with Avincis and there is no contractual or pre-contractual relationship, the data will be processed based on the user’s consent.
• Recruitment- related data: If the user contacts us through the email addresses detailed in the ‘Job’ section of our Website for job opportunities at Avincis, we will process your data to assess and manage the job application and, if applicable, carry out necessary actions for selection and recruitment. The legal basis for this processing is the user consent in case the application is spontaneous, and it will be based on pre-contractual measures at the user’s request, in case it responds to a specific offer.

4. Who will we share your data with?

Your data may be disclosed to Avincis Entities (the “Group”), based on Avincis’ legitimate interest in respondinging to your request for information.

Apart from the above, we will not disclose your personal data to third parties unless there is a legal obligation to do so. Your personal data may be accessed by the Controller’s data processors, that is, the service providers who need to access your personal data in order to perform their functions.

No international transfers of your data will be performed.

5. How long will we keep your data?

• In relation to the management of the request raised through the contact form personal data will be kept for the time necessary to process and respond to the request.
• In relation to the management of the subscriptions to Avincis newsletter and commercial communications data will be processed until the user objects or withdraws their consent.
• In relation to the recruitment- related data, it will be retained for the time necessary to evaluate the application.

Thereafter, data will be retained duly blocked for the timeframes established by applicable laws.

6. What are your data protection rights?

You may exercise the right of access, rectification and erasure of data, as well as request that the processing of your personal data is restricted, object to it, request the portability of your data and not be subject to automated individual decisions, through the following means: by sending an email to dpo@avincis.com indicating the right you wish to exercise and your personal particulars or by post to the following address Aerodromo de Mutxamel, Partida la Almaina, 92, Mutxamel, Spain 03011 (to the Avincis DPO attention).

You may from this moment onwards and at any time in the future, withdraw the consent given for certain processing by writing to the addresses indicated above.

If you consider that we have not adequately processed your personal data, you can contact the Data Protection Officer at  dpo@avincis.com. You may also lodge a complaint with your relevant data protection authority if you consider that data protection legislation has been breached in the processing of your personal data.

7. Mandatory or optional nature of the information provided by the user.

The data marked with an asterisk (*) on the forms provided on the Website are necessary to carry out the purpose for which the data are collected. If the user does not provide them, it will not be possible to carry out the processing. Therefore, by ticking the corresponding boxes and entering data in the fields marked with an asterisk (*) on the contact form, users expressly, freely and unequivocally accept that their data is necessary for the provider to respond to their request, with the inclusion of data in the remaining fields being voluntary.

Users are also informed that they will not be subject to automated decisions.

8. Security measures

In accordance with the provisions of current regulations on personal data protection, the Controller is complying with all the provisions of the GDPR for the processing of personal data under its responsibility, and manifestly with the principles described in Article 5 of the GDPR, by which they are processed in a lawful, fair and transparent manner in relation to the data subject and are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

Last updated: August, 2025
Copyright © Avincis 2025. All right reserved.