Privacy Policy
Last updated: May 16, 2026
Version: 1.0
1. Introduction
The purpose of this Privacy Policy is to inform users of the Aviatorlog service (hereinafter the "Service") of the methods of collection, use, conservation and protection of their personal data.
AVIATORLOG attaches particular importance to the protection of personal data and undertakes to process this data in accordance with the applicable regulations, in particular the General Data Protection Regulation (GDPR) and the applicable French legislation.
2. Data Controller
The data controller is:
Thierry GAUTHIER
Managing Director of AVIATORLOG
La Ferté Alais Aerodrome, Plateau de l'Ardenay, 91590 Cerny – France
3. Collected Data
As part of the operation of the Service, AVIATORLOG may collect and process different categories of personal data.
3.1 Account Data
- last name and first name;
- email address;
- encrypted password;
- preferred language;
- account settings.
3.2 Technical Data
- IP address;
- connection logs;
- browser and system used;
- session data;
- security and authentication information.
3.3 Business Data
The Service may allow the storage and processing of data related to the aeronautical and technical activity of users, in particular:
- aircraft data;
- operational data;
- maintenance data;
- technical history;
- tracking information;
- documents and content transmitted by users.
Users remain responsible for the data they enter into the Service.
4. Purposes of Processing
Personal data is processed for the following purposes:
- creation and management of user accounts;
- authentication and security;
- provision of the Service;
- management of application features;
- maintenance and technical support;
- prevention of fraudulent access;
- improvement of the Service;
- management of backups and restoration;
- compliance with legal and regulatory obligations.
5. Legal Basis for Processing
The processing carried out is based in particular on:
- the execution of the contract or the Terms of Use;
- the legitimate interest of AVIATORLOG;
- compliance with legal obligations;
- consent when required.
6. Hosting and Subcontractors
The Service is hosted on an infrastructure located in France.
AVIATORLOG may use technical subcontractors for:
- hosting;
- backups;
- sending emails;
- supervision and security;
- development and maintenance tools.
The main technical service providers used may include:
- Platform.sh SAS;
- OVHcloud;
- Scaleway;
- Scaleway Transactional Email.
These providers act as technical subcontractors in compliance with applicable obligations regarding data protection.
7. Backups and Data Retention
Technical backups of the Service are carried out to ensure:
- data security;
- service continuity;
- restoration in the event of an incident.
Backups are kept according to the following methods:
- external backups on Scaleway instance are kept for a maximum of one week;
- backups copied to Scaleway Object Storage are kept for a maximum period of thirty days.
Data is deleted or anonymized when it is no longer necessary for the purposes for which it was collected, subject to applicable legal obligations.
8. Security
AVIATORLOG implements reasonable technical and organizational measures to ensure the security, integrity and confidentiality of personal data.
These measures may include in particular:
- encryption of communications;
- access control;
- logging;
- backups;
- security monitoring;
- limitation of administrator access.
However, no system can guarantee absolute security.
9. Data Recipients
Personal data is accessible only to:
- authorized users;
- authorized persons within AVIATORLOG;
- technical subcontractors acting on behalf of AVIATORLOG;
- legally authorized authorities when the law requires it.
10. User Rights
In accordance with applicable regulations, users have the following rights in particular:
- right of access;
- right of rectification;
- right to erasure;
- right to restrict processing;
- right to object;
- right to data portability;
- right to withdraw their consent when required.
Requests can be sent to privacy@aviatorlog.com
Proof of identity may be requested when necessary.
11. Cookies
The Service uses cookies or similar technologies necessary for its operation, in particular for:
- authentication;
- security;
- session management;
- user preferences.
If tools requiring prior consent are used later, an appropriate consent collection mechanism will be put in place.
12. Data Transfer
AVIATORLOG prioritizes hosting and processing data within the European Union.
In the event of a transfer to a third country, AVIATORLOG undertakes to implement appropriate guarantees in accordance with the applicable regulations.
13. Modification of the Privacy Policy
AVIATORLOG reserves the right to modify this Privacy Policy at any time in order to:
- take into account legal developments;
- technical developments;
- evolutions of the Service.
The update date at the top of the document identifies the applicable version.
14. Complaints
Users have the right to lodge a complaint with the competent supervisory authority, in particular with the CNIL in France: