Source: https://www.kuraaviation.com/about-kura/privacy-policy/
Timestamp: 2019-04-23 22:56:43+00:00

Document:
BY USING THE SERVICES, YOU CONSENT TO THE COLLECTION, USE AND TRANSFER OF YOUR PERSONAL DATA FOR PROCESSING IN THE EUROPEAN ECONOMIC AREA (EEA).
Kura Aviation collects, uses, discloses and processes Personal Data to complete, advertise, market and improve the Services; and, collects, uses, discloses and processes Sensitive Personal Data solely for completing the services agreed between you and Us.
You may choose not to provide Kura Aviation with your Data. However, if you choose not to provide your Data, you may not be able to enjoy the full range of Services.
Kura Aviation takes steps to keep your Data accurate and up to date. If you reside in the European Economic Area, you have certain rights to the Data that we have collected about you. To exercise your rights to your Personal Data, please contact us through [email protected]. Subject to applicable law and in exceptional circumstances only, we may charge for this service and we will respond to reasonable requests as soon as practicable, and in any event, within the time limits prescribed by law.
Right of access to your Data (Art. 15 GDPR): You have the right to ask us for confirmation on whether we are processing your Data, and to access the Data and related information on that processing (e.g., the purposes of the processing, or the categories of Data involved).
Right to correction (Art. 16 GDPR): You have the right to have your Data corrected, as permitted by law.
Right to erasure (Art. 17 GDPR): You have the right to ask us to delete your Data, as permitted by law. This right may be exercised among other things: (i) when your Data is no longer necessary for the purposes for which it was collected or otherwise processed; (ii) when you withdraw consent on which processing is based according to Art. 6 (1) (a) or Art. 9 (2) (a) GDPR and where there is no other legal ground for processing; (iii) when you object to processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or when you object to the processing pursuant to Art. 21 (2) GDPR; or, (iv) when your Data has been unlawfully processed.
Right to restriction of processing (Art. 18 GDPR): You have the right to request the limiting of our processing under limited circumstances, including: when the accuracy of your Data is contested; when the processing is unlawful, and you oppose the erasure of your Data and request the restriction of the use of your Data instead; or when you have objected to processing pursuant to Art. 21 (1) GDPR pending the verification whether the legitimate grounds of Kura Aviation override your grounds.
Right to data portability (Art. 20 GDPR): You have the right to receive the Data that you have provided to us, in a structured, commonly used and machine-readable format, and you have the right to transmit that information to another controller, including to have it transmitted directly, where technically feasible.
Right to object (Art. 21 GDPR): You have the right to object to our processing of your Data, as permitted by law. This right is limited to processing based on Art. 6 (1) (e) or (f) GDPR, and includes profiling based on those provisions, and processing for direct marketing purposes. After which, we will no longer process your Data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
Where we are legally required to do so, we ask you for your prior consent before providing you with promotional materials or information. You may revoke your consent at any time (this will not affect the processing of your Data undertaken until the revocation). If you want to stop receiving promotional materials, etc., you can do so at any time as outlined in the “Managing and Withdrawing Consent” section.
When you register or interact with our Services, such processing is necessary for the performance of our Services, Art. 6 (1) (b) GDPR.
When you provide Sensitive Data within our Services, including criminal convictions and VISA restrictions, as defined in the GDPR, we process such data on the basis of your prior consent, Art. 9(2)(a) GDPR.
For Personal Data which we need in order to perform the Services,such processing is necessary for the performance of our Services, Art. 6 (1) (b) GDPR.
With regard to other Personal Data, we process such data on the basis of our legitimate interest, Art. 6 (1) (f) GDPR, and our legitimate interest is to enhance our Services.
When you participate in special activities or programs.
For Sensitive Data, we process such data on the basis of your prior consent, Art. 9(2)(a) GDPR.
For Personal Data,we process such data on the basis of our legitimate interest, Art. 6 (1) (f) GDPR, and our legitimate interest is to provide you with our promotional messages or to allow you to participate in our special activities, or programs.
For Personal Data that we need in order to perform the Services, such processing is necessary for the performance of our Services, Art. 6 (1) (b) GDPR.
With regard to other Personal Data,we process such data on the basis of our legitimate interest, Art. 6 (1) (f) GDPR, and our legitimate interest is to enhance your experience and to improve our Services.
Where we collect your consent in such case,for instance for marketing purposes, we process such data on the basis of your prior consent, Art. 6 (1) (a) GDPR.
Where we do not collect your consentin such case, we process such data on the basis of our legitimate interest, Art. 6 (1) (f) GDPR, and our legitimate interest is providing you with better Services and to enable you to use the full range of our Services (Art. 6 (1) (f) GDPR).
For Personal Data which we need in order to perform the Services, such processing is necessary for the performance of our Services, Art. 6 (1) (b) GDPR.
With regard to other Personal Data,we process such data on the basis of our legitimate interest, Art. 6 (1) (f) GDPR, and our legitimate interest is providing you with better Services and to enable you to use our Services more efficiently.
Where we do not collect your consentin such case, such processing is necessary for the performance of our Services, Art. 6 (1) (b) GDPR, or we process such data on the basis of our legitimate interest, Art. 6 (1) (f) GDPR, and our legitimate interest is to provide you with better Services and marketing.
We encourage you to contact us directly and allow us to work with you to address your concerns. Nevertheless, you have the right to lodge a complaint with a competent data protection supervisory authority, in particular in the EU Member State where you reside, work or the place of the alleged infringement. You have the right to do so if you consider that the processing of Data relating to you infringes applicable data protection laws.
You may at any time withdraw your consent with future effect and without affecting the lawfulness of processing of your Personal Data based on the consent you provided before you withdrew it.
We will retain your Data for a period of 3 years following the signature of a training agreement or as otherwise necessary to provide you the Services. We will also retain your Data as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
We implement appropriate technical and organisational safeguards to protect against unauthorized or unlawful processing of Data and against accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Data. Please be advised, however, that we cannot fully eliminate security risks associated with the storage and transmission of Data.
We do not knowingly collect Data online from children under 13 (note that the minimum age may vary based on country/region, and on local law). If you become aware that a child has provided us with Data without parental consent, please contact us through [email protected]. If we become aware that a child under 13 has provided us with Data without parental consent, we will take steps to remove the data.
If you have any questions, comments, or concerns about how we handle your Personal Data, then you may contact us through [email protected], +44 (0) 1789 298 582, or write to us at: Bruce Lodge, Bishopton Lane, Stratford-upon-Avon, Warwickshire, CV37 9QY, UK.

References: Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 21
 Art. 6
 Art. 6
 Art. 9
 Art. 6
 Art. 6
 Art. 9
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6