Pursuant to the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), and in accordance with the provisions of the national implementing regulations, information on the following points related to the processing of personal data through this website can be found below:
In general, the personal data collected will be processed as Controller by AERTEC SOLUTIONS S.L. (hereinafter, the “Company” or “AERTEC” interchangeably); NIF: B-29869856; with registered office at Avenida Juan López de Peñalver, 17. Parque Tecnológico de Andalucía, 29590 Málaga (Spain); Telephone: (+34) 95 10 10 200; Email: governance@aertecsolutions.com; Data Protection Officer contact details: dtorres@aertecsolutions.com, as the data controller.
Notwithstanding the foregoing, in cases where the User registers for the Job Board, the personal data provided will be processed, under joint controllership as provided for in Article 26 of the GDPR, by the following companies:
AERTEC SOLUTIONS S.L., with its registered office at Avenida Juan López de Peñalver, 17. Parque Tecnológico de Andalucía, 29590 Málaga (SPAIN), NIF B-29869856; Telephone: (+34)951010200, email: info@aertecsolutions.com.
AERTEC AVIATION S.L., registered office: Avenida Juan López de Peñalver, 17. Parque Tecnológico de Andalucía, 29590 Málaga (SPAIN), N.I.F.: B-22558241; Telephone: (+34)951010200, email: info@aertecsolutions.com.
The aforementioned companies have entered into an agreement in which they undertake to jointly handle the exercise of data subject rights at the postal and electronic address provided in this legal notice, as well as to adhere to the same standards regarding privacy and data protection. To this end, the parties shall establish joint technical and organisational measures to guarantee the security, availability, integrity, confidentiality, and resilience of the personal data processed.
In the event that the User participates in a specific recruitment process, your data will be processed by the company promoting said recruitment process in order to manage your participation in it.
Depending on the different forms, services or content you access, your data may be processed for the following purposes:
Contact section:
Your data will be used for the purpose of managing and responding to queries and/or requests for information sent via the contact form, as well as for follow-up and communication related to their processing.
Recipients of marketing messages:
In cases where you have given us your express consent, we will use your contact details to send you information related to news of interest in the aeronautical industry and the services provided by AERTEC and the other companies within the group in this sector. In each communication we send you, we will give you the option to unsubscribe from receiving future communications.
Job opportunities:
In the event that you register on the employment exchange, your data will be processed, under joint responsibility, by the entities indicated in the first section of this Privacy Policy, in order to inform you about selection processes related to your profile and to manage your participation in different processes led by the company.
Selection processes
In the event that we request your participation as part of a specific selection process, your data will be processed by the group company promoting said selection process to manage your participation in it.
Testimonials / Our Team
The information of the employees featured on this website is processed for the purpose of providing information about the corporate team that forms part of our Company, as well as to facilitate employee testimonials regarding their experience and career at AERTEC.
The fields marked as required on our forms are strictly necessary to enable us to properly manage the service and filling in the remaining fields is optional.
The lawful basis for the processing of personal data collected by AERTEC stems from various legal provisions, depending on the context in which the data is collected and processed:
Contact section:
The lawful basis for processing data is the legitimate interest of AERTEC in responding to any requests and queries that may be received through the contact section.
Recipients of marketing messages:
The basis for legitimising the processing will be unambiguous consent, in accordance with Article 6.1(a) of the GDPR. The data subject may revoke this consent at any time without affecting the lawfulness of the processing prior to its withdrawal. To this end, in every communication we send you, we will provide you with the option to unsubscribe through an agile, simple, and free procedure.
Job opportunities:
The lawful basis for processing is explicit consent, in accordance with Article 6(1)(a) of the GDPR. The data subject may withdraw this consent at any time without affecting the lawfulness of processing prior to its withdrawal.
Staff Selection
The basis that legitimises the processing is the performance of the pre-contractual relationship between the parties, on the terms provided for in Article 6.1.b) of the GDPR.
Testimonials / Our Team
The lawful basis for processing is explicit consent, in accordance with Article 6(1)(a) of the GDPR. The data subject may withdraw this consent at any time without affecting the lawfulness of processing prior to its withdrawal.
No data will be transferred to third parties, unless legally required or necessary for the execution of the contractual or pre-contractual relationship. The use of Google Analytics may involve international data transfers outside the European Economic Area (EEA). In particular, certain navigation metadata (e.g., online identifiers, device/browser information, and interaction events) may be processed by Google LLC and its group entities established in the United States. When this involves a transfer to the USA, such transfer is covered by:
The retention period of the information varies depending on the type of processing:
Contact section:
The personal data will be kept for the time strictly necessary to deal with the data subject’s request or query.
Recipients of marketing messages:
The information on recipients of marketing messages will be kept indefinitely unless the User asks to stop receiving further messages, in which case we will delete their details and add them to our Robinson List to ensure that no further marketing messages are sent to them.
Job opportunities:
The data will be retained for a period not exceeding two years from the last curriculum update by the candidate.
Staff Selection
Personal data will be kept for the duration of the selection process and the information will subsequently be deleted.
Testimonials / Our Team
The testimonials from employees published on the website will be retained for the time strictly necessary to fulfil the purpose for which they were collected, which is to provide corporate and informative material about the work experience within the organisation.
This content will remain published for as long as the consent granted by the participating individuals remains valid, and whilst the material continues to be suitable, up-to-date, and relevant for the aforementioned purposes. In cases where the employee withdraws their consent, when it is no longer necessary to retain the content for the intended purposes, or when the material is found to be out of date, the testimonial will be removed and its deletion will proceed.
Similarly, the images and identifying data of the people who form part of the AERTEC team and which are published on the website will be kept for as long as the consent granted is valid and the employment relationship is maintained. In the event of withdrawal of consent, when the professional relationship that motivates the publication ceases, or when the information is no longer necessary or suitable for the established purposes, the images and identifying data will be removed from the website and will be deleted.
The Company uses state-of-the-art technologies to protect its data and personal information. As such, our website is stored on secure servers protected against the most common types of attacks. The Company has adopted technical and organisational measures that guarantee the security of personal data and prevent its alteration, loss, unauthorised processing or access, taking into account the state of the technology, the nature of the stored data and the risks to which they are exposed.
The General Data Protection Regulation recognises the different rights of the data subject with regard to the processing of their personal data. Below, we inform you of each of these rights and the channels you can use to submit any requests you may have:
Right to erasure:
You have the right to have your personal data erased when any of the following circumstances apply:
Right of access:
You have the right to obtain confirmation as to whether or not personal data concerning you is being processed and you may also be given access to the following information: the purposes of the processing; the categories of data being processed; the recipients or categories of recipients to whom they have been or will be disclosed; where possible, the envisaged period for which the personal data will be stored or, if this is not possible, the criteria used to determine this period.
Right to rectification:
You have the right to have inaccurate personal data concerning you rectified. Furthermore, depending on the purposes of the processing, you have the right to have incomplete personal data completed, including by means of a supplementary statement. To this end, in your request you must specify which data you are referring to and the correction you would like us to make. Where necessary, you must also provide supporting documentation to prove that the data being processed is inaccurate or incomplete.
Right to restrict processing:
You have the right to restrict the processing of your data when any of the following conditions apply:
Right to data portability:
You will have the right to receive the personal data concerning you which you have provided to the Company, in a structured, commonly used and machine-readable format, and to transmit the data to another data controller without hindrance from the Company, when the processing is based on consent, and is carried out by automated means. When exercising your right to data portability, you have the right to have your personal data transmitted directly from one controller to another, where technically feasible. This right to portability will not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of public powers. The right to portability will not extend to data that the Company has inferred from data obtained directly from the use of the services provided.
Right to object:
You have the right to object to the processing of data concerning you, at any time, including through profiling. If you exercise this right, the Company will no longer process your personal data, unless we can show that there are compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the filing, exercise or defence of legal claims.
Right regarding automated decision-making:
The data subject will have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.
To exercise any of the rights described in the above sections, the User may send an email to governance@aertecsolutions.com or send a letter to the following address: Avenida Juan López de Peñalver, 17. Parque Tecnológico de Andalucía, CP 29590 Málaga (Spain).
If you believe that your data protection rights have been infringed, particularly if you have not received satisfaction when exercising your rights, you may lodge a complaint with the competent supervisory authority, which in the case of Spain is the Spanish Data Protection Agency. (www.aepd.es; address: Calle Jorge Juan No. 6, 28001, Madrid; telephone: 901 100 099 / 91 266 35 17).
Furthermore, you can contact our Data Protection Officer at the email address dtorres@aertecsolutions.com.
All information provided by the User must be truthful and accurate. Consequently, the User must ensure that all data provided when completing the corresponding forms is truthful. To register and/or fill in any form, the User must provide all the information marked as required on said forms, ensuring that the information provided is accurate and truthful. Any changes to your information must be reported to AERTEC as soon as possible. In any event, the User will be solely liable for any false or inaccurate statements they make, and any damage caused to AERTEC or third parties due to the information the User provides.
AERTEC reserves the right to change this Privacy policy to bring it in line with any new laws, court rulings, and industry practices. In such cases, AERTEC will announce the changes on this website within a reasonable period before they come into effect.
Date of last update: October 2025
