Privacy Policy
At AXPA Systems S.L.U. we are committed to protecting the privacy and security of your personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD).
1. Data Controller
AXPA Systems S.L.U. (NIF B26941039), registered at CR. Baños de Arteixo, 33, 15008, La Coruña, Spain. Data Protection Officer: Pablo Menéndez-Ponte Alonso — info@axpagroup.com.
2. Purpose of Processing
We process the information you provide for the following purposes: (a) Management of your user account and platform access; (b) Provision of contracted services, including flight planning, fleet management, and operational viability analysis; (c) Billing and subscription management; (d) Service-related communications (updates, plan changes, security notifications); (e) Platform improvement through usage analysis (using tools that do not collect personal data); (f) Sending marketing communications about AXPA Systems products, training and offers by email, phone or instant messaging (WhatsApp), only if you have given your express consent.
3. Legal Basis
The legal basis for processing your data is: (a) Contract execution: necessary to provide the requested services; (b) Consent: given upon registration and acceptance of the Terms and Conditions. For marketing communications by phone or instant messaging we request specific, separate consent, which you may refuse without this preventing registration or use of the platform, and which you may withdraw at any time; (c) Legitimate interest: for service improvement and platform security.
4. Data Processed
We collect the following data: registration data (first and last name, email, contact phone number, country of residence and encrypted password); a record of your consents (date of acceptance of the Terms and date of your decision on marketing communications); organization and membership data; fleet data (models, registrations, technical characteristics); flight operation data (geometries, trajectories, operational parameters); technical session data (IP address, browser type, necessary for service security).
5. Recipients
Your data may be communicated to: (a) Cloud infrastructure providers (Vercel, databases) for service hosting; (b) Payment providers (Stripe) for subscription management; (c) Our CRM and marketing automation provider (GoHighLevel, with servers in the United States), to which we send your name, email, phone number, subscription plan, amount paid and the indicator of whether you have consented to marketing communications. This provider acts as a data processor, solely on our instructions, and your phone number is only used for marketing purposes if you have consented to it. This international transfer relies on the Standard Contractual Clauses approved by the European Commission; (d) Competent authorities when legally required. We do not sell your data, nor do we share it with third parties for their own commercial prospecting.
6. Data Retention
Your data will be retained as long as your user account remains active. After account cancellation, data will be kept blocked for the legally required period to address potential liabilities.
7. Data Subject Rights
You have the right to access, rectify, delete, port, restrict, and object to the processing of your personal data. You may exercise these rights by contacting our DPO at info@axpagroup.com. You may also withdraw your consent to marketing communications at any time — from the 'Account Settings' section of the platform or by writing to the DPO — without affecting the lawfulness of processing carried out beforehand. You may also file a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or destruction. Passwords are stored encrypted, communications use secure protocols (HTTPS/TLS), and we apply robust session controls.
9. Account and Data Deletion
You can permanently delete your account and all associated data at any time from the 'Account Settings' section on the platform, using the automated deletion button. Alternatively, you can request the deletion of your account by sending an email to info@axpagroup.com. Data will be permanently deleted, except for those that must be retained due to legal obligations.