Datenschutz / Privacy

Privacy Policy

Last updated: March 2026  ·  Applies to ambre-ams.eu

1. Controller

⚠ AUSFÜLLEN: Vollständiger Firmenname, Adresse, E-Mail, Telefon

For privacy-related requests, contact: privacy@ambre-ams.eu

2. Data We Collect and Why

Pilot Application Form

We collect: full name, job title, business email address, company name, aircraft types maintained, and approximate workscope volume.

Purpose: To evaluate pilot program applications and onboard accepted participants.

Legal basis: Art. 6(1)(b) GDPR — processing necessary for steps prior to entering a contract (the pilot participation agreement).

Retention: Application data is deleted within 90 days if no pilot agreement is entered. Pilot participant data is retained for the duration of the pilot and deleted within 30 days of pilot conclusion unless a commercial agreement follows.

Contact Form

We collect: name, email address, and message content.

Purpose: To respond to your inquiry.

Legal basis: Art. 6(1)(f) GDPR — legitimate interests (responding to a direct business inquiry).

Retention: Contact data is deleted within 90 days if no business relationship results.

Server Logs

When you visit this website, our hosting provider automatically records standard server log data including IP address, browser type, page requested, and timestamp. This data is used exclusively for security and operational purposes and is not linked to personal identity.

Legal basis: Art. 6(1)(f) GDPR — legitimate interests (secure operation of the website).

3. Third-Party Services

Google Fonts

This website currently loads fonts from Google's servers (fonts.googleapis.com). This causes your IP address to be transmitted to Google LLC (USA) with each page load. We are in the process of self-hosting these fonts to eliminate this transfer. Until self-hosting is complete, this constitutes a transfer to a third country under GDPR Art. 46, covered by Standard Contractual Clauses between Google and the EU.

Hosting Provider

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel processes standard server log data (IP address, browser type, requested URL, timestamp) as part of the hosting service.

Legal basis: Art. 6(1)(f) GDPR — legitimate interests (secure and reliable website operation).

Third-country transfer: Vercel is based in the USA. This website currently operates on Vercel's Hobby plan, under which no formal Data Processing Addendum (DPA) is available. Vercel's standard Terms of Service and Privacy Policy apply. A DPA will be put in place when upgrading to a paid Vercel plan prior to commercial launch.

4. International Data Transfers

Where data is transferred to processors outside the EU/EEA (e.g., US-based hosting or font services), the transfer is covered by Standard Contractual Clauses (SCCs) approved by the European Commission pursuant to Art. 46(2)(c) GDPR.

5. Your Rights

Under GDPR, you have the following rights regarding your personal data. To exercise any right, contact privacy@ambre-ams.eu.

Access (Art. 15)
Request a copy of the personal data we hold about you.
Rectification (Art. 16)
Request correction of inaccurate or incomplete data.
Erasure (Art. 17)
Request deletion of your personal data where no legal basis for retention exists.
Restriction (Art. 18)
Request that processing be restricted while a dispute is resolved.
Portability (Art. 20)
Receive your data in a structured, machine-readable format.
Objection (Art. 21)
Object to processing based on legitimate interests at any time.

6. Right to Lodge a Complaint

You have the right to lodge a complaint with the competent data protection supervisory authority.

⚠ AUSFÜLLEN: Name der zuständigen Landesbehörde (abhängig vom Bundesland des Firmensitzes, z.B. LfDI Baden-Württemberg, BayLDA Bayern, etc.)

A list of all German supervisory authorities is available at www.bfdi.bund.de.

7. Cookies & Analytics

This website uses Google Analytics (Google LLC, USA) to collect anonymised usage statistics — only if you explicitly consent via the cookie banner. No analytics data is collected before consent is given. Declining does not store any data on your device.

Data collected (only after consent): Pages visited, time on site, browser type, approximate location (country/city level), device type. IP addresses are anonymised before transmission.

Legal basis: Art. 6(1)(a) GDPR — your explicit consent.

Third-country transfer: Google LLC is based in the USA. Data transfer is covered by Standard Contractual Clauses (SCCs) under Art. 46(2)(c) GDPR. See Google's Privacy Policy.

Withdrawal: You can withdraw consent at any time by clearing your browser's localStorage or by using a browser extension such as the Google Analytics Opt-out Browser Add-on.

No other tracking cookies or third-party analytics services are in use. Only essential browser functionality is used without consent.

8. Changes to This Policy

We may update this Privacy Policy as the product develops and our data processing activities change. The date at the top of this page reflects the most recent revision. Material changes will be communicated to pilot participants directly.