Privacy Policy
Last updated: June 18, 2026
Version: 2.0
1. Introduction
This Privacy Policy aims to inform users of the Aviatorlog service (hereinafter the "Service") about the methods of collection, use, retention, and protection of their personal data.
AVIATORLOG attaches particular importance to the protection of personal data and undertakes to process such data in accordance with applicable regulations, in particular the General Data Protection Regulation (GDPR) and applicable French legislation.
2. Data Controller
The data controller is:
Thierry GAUTHIER
General Manager of AVIATORLOG
La Ferté Alais Aerodrome, Plateau de l'Ardenay, 91590 Cerny – France
3. Data Collected
In the context of operating the Service, AVIATORLOG may collect and process different categories of personal data.
3.1 Account Data
- first and last name;
- email address;
- encrypted password;
- preferred language;
- account settings.
3.2 Technical Data
- IP address;
- connection logs;
- browser and operating system used;
- session data;
- security and authentication information.
3.3 Business Data
The Service may enable the storage and processing of data related to the aeronautical and technical activity of users, including:
- aircraft data;
- operational data;
- maintenance data;
- technical history;
- tracking information;
- documents and content submitted by users.
Users remain responsible for the data they enter into the Service.
4. Purposes of Processing
Personal data is processed for the following purposes:
- creation and management of user accounts;
- authentication and security;
- provision of the Service;
- management of application features;
- maintenance and technical support;
- prevention of fraudulent access;
- improvement of the Service;
- backup management and restoration;
- compliance with legal and regulatory obligations.
5. Legal Basis for Processing
The processing carried out is based in particular on:
- the performance of the contract or Terms of Service;
- the legitimate interests of AVIATORLOG;
- compliance with legal obligations;
- consent where required.
6. Hosting and Subcontractors
The Service is hosted on infrastructure located in France.
AVIATORLOG may engage technical subcontractors for:
- hosting;
- backups;
- sending emails;
- monitoring and security;
- development and maintenance tools.
The main technical service providers used may include:
- Clever Cloud SAS (application hosting);
- Scaleway SAS (backup server and transactional email).
These providers act as technical subcontractors in compliance with applicable data protection obligations.
7. Backups and Data Retention
Technical backups of the Service are performed to ensure:
- data security;
- service continuity;
- restoration in the event of an incident.
Backups are retained as follows:
- two daily backups are performed and stored on a dedicated Scaleway virtual private server (VPS);
- backups are kept for a maximum of thirty days, then automatically deleted.
Data is deleted or anonymized when it is no longer necessary for the purposes for which it was collected, subject to applicable legal obligations.
8. Security
AVIATORLOG implements reasonable technical and organizational measures to ensure the security, integrity, and confidentiality of personal data.
These measures may include in particular:
- communication encryption;
- access control;
- logging;
- backups;
- security monitoring;
- limitation of administrative access.
However, no system can guarantee absolute security.
9. Recipients of Data
Personal data is accessible only to:
- authorized users;
- authorized persons within AVIATORLOG;
- technical subcontractors acting on behalf of AVIATORLOG;
- legally authorized authorities where required by law.
10. User Rights
In accordance with applicable regulations, users have in particular the following rights:
- right of access;
- right of rectification;
- right of erasure;
- right to restriction of processing;
- right to object;
- right to data portability;
- right to withdraw consent where required.
Requests may be sent to privacy@aviatorlog.com
Proof of identity may be requested where necessary.
11. Cookies
The Service uses cookies or similar technologies necessary for its operation, in particular for:
- authentication;
- security;
- session management;
- user preferences.
If tools requiring prior consent are used in the future, an appropriate consent mechanism will be implemented.
12. Data Transfers
AVIATORLOG favors hosting and processing data within the European Union.
In the event of a transfer to a third country, AVIATORLOG undertakes to implement appropriate safeguards in accordance with applicable regulations.
13. Changes to the Privacy Policy
AVIATORLOG reserves the right to modify this Privacy Policy at any time, in particular to:
- reflect legal developments;
- reflect technical developments;
- reflect changes to the Service.
The update date shown at the top of the document identifies the applicable version.
14. Complaints
Users have the right to lodge a complaint with the competent supervisory authority, in particular with the CNIL in France: