Privacy Policy

This Privacy Policy explains how we process your personal data in accordance with the EU General Data Protection Regulation (GDPR).

Effective: 2025-10-01

Controller

Trade.Aero, Flughafenstraße 123, 80335 Munich, Germany. Email: privacy@trade.aero

Scope

This policy applies to the website, marketplace features, and communication channels offered by Trade.Aero. It covers users, sellers, and visitors.

Data Protection Contact

You can contact our privacy team at privacy@trade.aero regarding any data protection questions or requests.

Data We Collect

  • Account data (e.g., name, email, password hash, role).
  • Usage data (e.g., pages viewed, searches, bookmarks, device/rough location if enabled).
  • Cookies and similar technologies for essential functions, preferences and analytics.
  • Communication data (support requests, messages, email preferences).

Where We Obtain Data

We collect data directly from you, from your use of the service (device and usage data), and in some cases from third parties where lawful (e.g., anti-fraud providers).

Purposes of Processing

  • To provide and operate the marketplace and related features.
  • To ensure security, prevent abuse and detect fraud.
  • To respond to requests and send service-related notifications.
  • To send optional marketing communications where permitted.
  • To analyze usage and improve our services.

Legal Bases

GDPR Art. 6(1)(b) contract performance, Art. 6(1)(f) legitimate interests (security, improvement), and Art. 6(1)(a) consent (marketing, non-essential cookies).

Storage and Retention

We store data only as long as necessary for the purposes above or as required by law. Backups and logs are retained for limited periods.

Recipients of Personal Data

We disclose data only to recipients necessary for the purposes described (e.g., hosting, analytics, email providers, payment and security providers) and only under appropriate safeguards.

Your GDPR Rights

  • Right of access to your personal data.
  • Right to rectification of inaccurate data.
  • Right to erasure (‘right to be forgotten’).
  • Right to restriction of processing.
  • Right to data portability.
  • Right to object to processing based on legitimate interests or direct marketing.
  • Right to lodge a complaint with a supervisory authority.

How to Exercise Your Rights

Submit a request to privacy@trade.aero. We may need to verify your identity. We respond without undue delay and within statutory deadlines.

Cookies

We use essential cookies to operate the site and, with your consent, analytics cookies. You can manage preferences via your browser and in-product settings.

  • Essential cookies for core functionality (authentication, security, preferences).
  • Analytics cookies to measure usage and improve features (only with consent).
  • Marketing cookies for personalized content (only with consent).
  • Preference cookies to remember settings such as language and locale.

Analytics

We use privacy-friendly analytics to understand feature usage and improve performance. IP addresses may be shortened or anonymized where possible.

Processors and Recipients

We engage service providers (e.g., hosting, email, analytics, databases such as Supabase) under data processing agreements in compliance with Art. 28 GDPR.

Main providers may include: hosting/CDN, database (Supabase), email delivery, logging/monitoring, and privacy-friendly analytics.

International Transfers

Where data is transferred outside the EEA, we rely on adequacy decisions or Standard Contractual Clauses and take additional safeguards where necessary.

Data Security

We implement technical and organizational measures including encryption in transit, access controls, least-privilege principles, and regular reviews of our security posture.

Automated Decision-Making

We do not engage in automated decision-making producing legal or similarly significant effects within the meaning of Art. 22 GDPR.

Children’s Data

Our services are not directed to children under 16. If you believe we have collected data from a minor, contact us to request deletion.

Contact

For privacy inquiries or to exercise your rights, contact privacy@trade.aero.

Changes to This Policy

We may update this policy from time to time. Material changes will be communicated through the service and will indicate a new effective date.