Privacy information.

1. Who we are

This website, www.camo-one.com (the “Site”), and the CAMO One service are operated by Luxaviation E.A., S.A., with its registered address at Rua Latino Coelho, 13, Piso 5, 1050-132 Lisboa, Portugal, registered with the Portuguese Commercial Registry under NIPC 506 698 920 (“CAMO One”, “we” or “us”). We are the data controller for the personal data described in this notice.

We process personal data in line with the EU General Data Protection Regulation 2016/679 (“GDPR”) and Portuguese data protection law (Law No 58/2019).

2. The personal data we collect

Information you give us. When you send an enquiry through our contact form, we collect your name, company, email address, aircraft type (optional) and the content of your message. If you email or call us, we collect the details you choose to share, such as your name, contact details and information about your operation and aircraft.

Technical information. When you visit the Site, our hosting provider automatically records limited technical data in server logs, such as your IP address, browser type, date and time of access and the pages requested. This is needed to deliver the Site securely and to detect misuse.

Web fonts. The Site uses fonts provided by Adobe Fonts, a service of Adobe Inc. To display them, your browser connects to Adobe’s servers, which receive limited technical information, such as your IP address (needed to deliver the fonts, and which Adobe states it does not store) and the name of the website loading the fonts. Adobe Fonts does not set or use cookies to serve fonts. For more information, see Adobe’s Adobe Fonts privacy information.

3. Cookies

The Site does not currently use analytics, advertising or other tracking cookies. Only technically necessary cookies may be set, for example to protect forms against misuse. If we introduce analytics or other non-essential cookies in future, we will update this notice and ask for your consent where required.

4. How we use your personal data and our legal basis

• To respond to your enquiry and to prepare or provide our CAMO services, as steps taken at your request before entering into a contract, or to perform a contract (Article 6(1)(b) GDPR).
• To manage our business relationship with you and the organisation you represent, based on our legitimate interest in communicating with clients and prospective clients (Article 6(1)(f) GDPR).
• To operate, secure and improve the Site, based on our legitimate interest in providing a reliable and secure website (Article 6(1)(f) GDPR).
• To comply with legal and regulatory obligations, including aviation regulatory requirements, and to establish, exercise or defend legal claims (Article 6(1)(c) and (f) GDPR).

We do not use your personal data for automated decision-making, and we do not sell it. We will only send you marketing communications with your consent or where otherwise permitted by law, and you can opt out at any time.

5. Who we share your personal data with

We share personal data only on a need-to-know basis with:

• our employees and authorised personnel who handle your enquiry;
• service providers acting on our behalf, such as our website hosting, IT and email providers, who are bound by contract to protect your data and use it only on our instructions;
• maintenance organisations, aviation authorities or other parties where this is necessary to provide the services you request; and
• courts, regulators or law enforcement authorities where we are required or permitted to do so by law.

6. International transfers

Some of our service providers may process data outside the European Economic Area. Where this happens, we make sure appropriate safeguards are in place, such as an adequacy decision of the European Commission or the European Commission’s Standard Contractual Clauses.

7. How long we keep your personal data

We keep enquiry data for as long as needed to respond to you and manage any resulting business relationship, and for no longer than [retention period, e.g. 24 months] after our last contact unless a longer period is required by law or regulation. Server log data is kept for a short period, normally no longer than [log retention period, e.g. 30 days], unless needed to investigate a security incident.

8. How we protect your personal data

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or disclosure. The Site is served over an encrypted (HTTPS) connection.

9. Your rights

Under the GDPR, you have the right to request access to your personal data, and to ask us to correct, erase or restrict the processing of it. You may also object to processing based on our legitimate interests, request data portability, and withdraw any consent you have given at any time.

To exercise any of these rights, email info@camo-one.com. To protect your privacy, we may need to verify your identity before acting on your request.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work. In Portugal, the supervisory authority is the Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt.

10. Links to other websites

The Site may contain links to third-party websites. We are not responsible for their content or privacy practices, and we encourage you to read their privacy notices.

11. Changes to this notice

We may update this privacy information from time to time. The current version is always available on this page, with the date it was last updated.

12. Contact

If you have any questions about this notice or how we handle your personal data, please contact us at info@camo-one.com or write to us at the address above.

Last updated: [date of publication]