Aero Compliance Services
Back to site

Privacy Policy

We take the protection of your personal data seriously. This policy explains what data we process when you use this website, our Part-IS Readiness Score and checkout, and when you contact us, on what legal basis, and what rights you have under the General Data Protection Regulation (GDPR).

1. Controller

Aero Compliance Services
Furqan Ahmad
Bobinger Str. 93
86199 Augsburg, Germany
Email: furqan@aerocomplianceservices.com
Phone: +49 176 238 55733

2. Hosting & server log files

This website is hosted on infrastructure located within the European Union (Germany). When you visit the site, the hosting provider automatically collects and stores technical information in server log files that your browser transmits — IP address, date and time of the request, the page requested, browser type and operating system. This data is processed on the basis of our legitimate interest (Art. 6 (1)(f) GDPR) in the secure and stable operation of the website and is not merged with other data sources.

3. Cookies & local storage

This website uses only technically essential storage. We store your language preference and your acknowledgement of the cookie notice in your browser's local storage so the site behaves consistently on your next visit. We do not use tracking, analytics or advertising cookies, and we do not transmit this information to third parties. The legal basis is our legitimate interest in a functional website (Art. 6 (1)(f) GDPR).

4. Contact form & enquiries

When you submit the contact form or write to us by email or phone, we process the data you provide (such as your name, company, email address, phone number and the content of your message) solely to handle your enquiry and any follow-up. The legal basis is Art. 6 (1)(b) GDPR (steps prior to entering into a contract) and/or Art. 6 (1)(f) GDPR (our legitimate interest in responding to enquiries). We delete this data once your enquiry has been fully dealt with, unless statutory retention periods require otherwise. The contact form on this website is provided by our CRM platform HighLevel (LeadConnector), which we use as our processor under Art. 28 GDPR (see section 6). It is loaded from link.aerocomplianceservices.com. Your enquiry is stored as a contact record in our CRM, and we receive an email notification so we can reply. HighLevel is based in the USA, so personal data may be transferred to the USA; such transfers take place on the basis of appropriate safeguards (EU Standard Contractual Clauses). If you prefer, you can write to us directly by email instead.

5. Web fonts

This site loads typefaces via Google Fonts. When a font is requested, your browser may connect to Google servers and transmit your IP address. This is done on the basis of our legitimate interest (Art. 6 (1)(f) GDPR) in a consistent presentation of our website. Google's privacy information is available at policies.google.com/privacy.

6. Part-IS Readiness Score, checkout and emails (go.aerocomplianceservices.com)

Our Part-IS Evidence Readiness Score, our product pages and our checkout run on go.aerocomplianceservices.com. When you complete the Score, we process your answers to the statements, the approval type you select, your score and band, and the details you enter in the form (name, work email, organisation and role). We use them to show your result, to email you your result with the statements you answered “No”, and to send you up to five related emails about Part-IS. The legal basis is your consent (Art. 6 (1)(a) GDPR), given with the checkbox in the form. You can withdraw it at any time, for example with the unsubscribe link in every email.

When you buy a product, we process your name, organisation, email address, the products you ordered and the payment status in order to fulfil the contract, deliver your download or membership, and meet our accounting obligations (Art. 6 (1)(b) and (c) GDPR). Payments are processed by Stripe Payments Europe, Ltd. (Ireland). We do not receive or store your full card details. Stripe’s privacy information is available at stripe.com/privacy.

To run the Score, the checkout, the booking calendar and our emails, we use the CRM and marketing platform HighLevel (LeadConnector) as our processor under Art. 28 GDPR. HighLevel is based in the USA, so personal data may be transferred to the USA; such transfers take place on the basis of appropriate safeguards (EU Standard Contractual Clauses). The pages on go.aerocomplianceservices.com use cookies and similar technologies that are needed to run the forms and the checkout.

Pages on go.aerocomplianceservices.com load the Inter typeface from Bunny Fonts (BunnyWay d.o.o., Slovenia, EU). When the font is loaded, your browser transmits your IP address to this provider. The legal basis is our legitimate interest in a consistent presentation (Art. 6 (1)(f) GDPR).

To protect the contact form on this website and the forms and checkout on go.aerocomplianceservices.com against bots and misuse, these forms use Cloudflare Turnstile, a service of Cloudflare, Inc. (USA). Turnstile checks whether a request comes from a person. For this, your browser transmits technical data such as your IP address, browser and device information (user agent) and connection characteristics to Cloudflare. Cloudflare may also use this data to improve its bot detection. The legal basis is our legitimate interest in protecting our forms and checkout against misuse (Art. 6 (1)(f) GDPR). Data may be transferred to the USA; such transfers take place on the basis of appropriate safeguards. Cloudflare's privacy information for Turnstile is available at cloudflare.com/turnstile-privacy-policy.

We keep Score and email data until you withdraw your consent or unsubscribe. We keep order data for as long as German commercial and tax law requires.

7. Processors & data transfers

Where we engage service providers to process personal data on our behalf (for example hosting), we conclude data processing agreements in accordance with Art. 28 GDPR. We prioritise providers located within the EU. Should any transfer to a third country occur, it takes place only on the basis of appropriate safeguards (such as EU Standard Contractual Clauses).

8. Your rights

Under the GDPR you have the following rights regarding your personal data:

To exercise any of these rights, contact us using the details in section 1.

9. Withdrawal of consent

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out before withdrawal remains unaffected.

10. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your residence, place of work or the place of the alleged infringement.

11. Changes to this policy

We may update this privacy policy to reflect changes to our services or to legal requirements. The current version always applies, as published on this page.

Last updated: October 2026.