Privacy Policy

Who is responsible for your data

The data controller is DIMMA S.r.l., Via Roma 84/A, 37060 Castel d'Azzano (VR), Italia, VAT number 03650380235. For any question about your personal data write to privacy@aviofile.com.

Certified email (PEC), for formal communications only, not for questions or requests: dimma@pec.it

Data we process

This website has no accounts or private areas. It collects personal data only through the contact form and the emails you send us. The data involved is:

• Technical data: IP address, browser and device type, the page requested and the date and time of the request, recorded in the technical logs of the hosting and content delivery service.
• Emails you send us: your email address and the content of your message.
• Contact form: your name, email address, who you are (pilot, owner, club, flight school, other), an optional message and the language of the site.

Technical error reports: if a script of this website fails in your browser, the page may send a short technical report (the type of error, a cleaned message, the page address without any query string, the browser and the language) to AVIOFILE's servers in the EU (Amazon Web Services, Frankfurt). The report contains no name, email address or other data about you, is sent without cookies, is not sent if your browser signals Do Not Track or Global Privacy Control, and is kept for 90 days. Legal basis: our legitimate interest in keeping the website working (Art. 6(1)(f) GDPR). To limit abuse we keep, for no more than two days, only a hash of your IP address.

Why we use it, and the legal basis

• To deliver the website, keep it secure and prevent abuse (legitimate interest, Art. 6(1)(f) GDPR).
• To reply to the messages you send us (Art. 6(1)(b) and (f)).
• To answer the preview request you send with the contact form (Art. 6(1)(b) GDPR: request of the data subject and pre-contractual steps).
• To meet legal obligations (Art. 6(1)(c)).

We do not profile visitors, and we use no advertising and no analytics.

Service providers

The website is hosted on Amazon Web Services (AWS), with its content stored in the European Union and delivered through the Amazon CloudFront content delivery network. AWS acts as our processor and keeps the technical logs described above. To serve pages quickly, CloudFront may use servers close to the visitor; AWS does so under the safeguards required by the GDPR.

The contact form sends your data to Amazon Web Services (AWS) in the European Union (Frankfurt): Amazon SES, our processor, delivers the message to the controller’s mailbox. There are no other recipients.

The website loads no third-party services.

How long we keep it

Technical logs are kept only for the time needed for security and troubleshooting. Emails are kept for as long as needed to answer you and to meet legal obligations, then deleted. Requests sent with the form are kept for at most 12 months from the request, then deleted. To limit abuse, the form keeps, for no more than two days, only a hash of your IP address, not the address itself.

Your rights

You have the right to access your data, correct it, have it erased, restrict or object to its processing, receive it in a portable format and withdraw your consent. To use these rights write to privacy@aviofile.com; we reply within one month.

You can also lodge a complaint with your data protection authority. In Italy this is the Garante per la protezione dei dati personali (www.garanteprivacy.it).

Cookies and tracking

This website uses no cookies and no analytics or advertising trackers. The Cookie Policy describes the one preference stored in your browser.

Cookie Policy

Changes to this policy

We update this page when our practices change and show the date at the top.

Contact

Privacy questions and requests: privacy@aviofile.com.