Privacy policy

The data controller is Mindshift SARL, Rue du Puits 31, L-2355 Bouneweg-Süd, Luxembourg, company number LU.366.726.46.

For any question about your data or to exercise your rights, write to hello@ard-aviation.com. We have not appointed a data protection officer, as our activity does not fall within the cases where such an appointment is mandatory.

We apply a simple principle: we only collect what we need to answer your request. This site carries out no profiling, no targeted advertising and no resale of data. No automated decision producing legal effects concerning you is made on the basis of your data.

When you use the contact form, we collect the information you enter:

The name, company and email fields are required to handle your request; the others are optional. Please do not include in the message field any sensitive or confidential information that is not necessary for your request.

• First and last name
• Company or organisation
• Role (optional)
• Airport or station (optional)
• Business email address
• The content of the message you write

Like any site accessible over the internet, ard-aviation.com relies on servers that technically log incoming connections: IP address, date and time of the request, page requested, browser type. These logs are produced and kept by our host for security, abuse detection and technical diagnosis.

Apart from accepted audience measurement, we use no advertising tracker and no embedded social network. We build no advertising profile.

We process your data for the following purposes:

• Answering your request and corresponding with you: performance of pre-contractual steps taken at your request, and legitimate interest in responding to business enquiries addressed to us.
• Arranging a demonstration, a simulation or a pilot project when you ask for one: pre-contractual steps.
• Keeping the site secure and working: legitimate interest in protecting our infrastructure.
• Keeping evidence of an exchange in the event of a dispute: legitimate interest and compliance with our legal obligations.

The contact form includes a confirmation checkbox, a hidden field aimed at bots and a check on submission timing. These mechanisms run on the site itself, with no third-party service, no cookie and no analysis of your browsing behaviour. No biometric data and no browser fingerprint are collected for this purpose.

Your data is accessible only to the members of the ARD team who need to handle your request.

We do not sell, rent or exchange any data. It may be passed to an adviser or an authority only where the law requires it or to establish our rights.

The site is hosted by OVH SAS, Roubaix, France, on servers located within the European Union.

Delivery of messages from the form relies on a technical email provider acting as a processor within the meaning of the GDPR, bound by a contract prohibiting any other use of the data. Business mailboxes are hosted by OVH.

No transfer of data outside the European Economic Area takes place in connection with this site. Should this change, we would put in place the appropriate safeguards provided for by the GDPR and update this page.

We keep your data for as long as needed for the purpose pursued:

• Enquiries with no commercial follow-up: three years from the last contact.
• Exchanges that led to a contractual relationship: the duration of the relationship, then retention according to the applicable statutory periods.
• Technical logs held by the host: the period defined by the host, generally a few months.
• Cookie banner choice: kept in your browser until you clear the site data.

This site uses two categories only. No advertising cookie, no embedded social network, no sharing for targeting purposes.

Strictly necessary cookies and storage. They work without your consent because the site cannot function without them. They stay on your device, are sent to no server and do not identify you:

Audience measurement cookies, subject to your consent. These belong to Google Analytics 4, described in the next section. No Google script is loaded until you accept: if you refuse, no request is sent to Google.

Your choice is stored in your browser. To change it, clear the site data from your browser settings: the banner will reappear on your next visit.

• The display language you selected
• The light or dark theme you selected
• Your answer to the consent banner, so it is not shown again

When you accept audience measurement, we use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to understand how the site is used: page views, traffic sources, country, device type, contact form submissions.

We have switched off advertising signals and ad personalisation, and switched on IP anonymisation. Your data is not used by Google for advertising purposes from this site and is not combined with other Google services.

Google acts as a processor under its data processing terms. Transfers to the United States may occur; they are covered by the European Commission's standard contractual clauses and by the EU-US Data Privacy Framework to which Google adheres. Retention is set to fourteen months.

You can withdraw your consent at any time by clearing the site data in your browser and then refusing the banner. You can also install the opt-out add-on offered by Google, which applies to every site you visit.

Exchanges between your browser and the site are encrypted over HTTPS. Access to received requests is restricted to the people concerned and protected by authentication. Our providers are established in the European Union and selected for their security guarantees.

As no system is infallible, in the event of a data breach likely to result in a high risk to your rights we undertake to notify the competent authority and to inform you in accordance with Articles 33 and 34 of the GDPR.

Under the GDPR, you have the following rights over your data:

To exercise these rights, write to hello@ard-aviation.com setting out your request. We answer within one month, extendable by two months for complex requests. We may ask for an element allowing us to verify your identity where reasonable doubt exists.

• Right of access: obtain confirmation that your data is processed and receive a copy of it.
• Right to rectification: have inaccurate or incomplete data corrected.
• Right to erasure: request deletion of your data where the conditions are met.
• Right to restriction: request a temporary freeze on processing.
• Right to object: object to processing based on our legitimate interest, in particular to any commercial solicitation.
• Right to portability: receive your data in a structured, machine-readable format.
• Right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

If you consider that the processing of your data does not comply with the rules, you may lodge a complaint with the Commission nationale pour la protection des données (CNPD), 15 boulevard du Jazz, L-4370 Belvaux, Luxembourg, or with the supervisory authority of your country of residence.

This site is aimed at air transport professionals. It does not target minors and we do not knowingly collect data concerning persons under the age of sixteen.

We may update this policy to reflect technical, organisational or regulatory changes. The applicable version is the one published on this page, with its update date shown at the top. In the event of a substantial change, we will inform the people concerned by an appropriate means.