Privacy Policy
Last updated: 3 August 2026
This policy explains how AviaTris collects and uses your personal data when you request a quote for aircraft parts, whether you contact us through WhatsApp or through the form on this website. It is written to meet Regulation (EU) 2016/679 (GDPR).
1. Who is responsible for your data
The data controller is:
Giandomenico Simone, operating under the trade name “AviaTris”
Via Scalabrini 7, 29121 Piacenza, Italy
Email: [email protected]
AviaTris is a trade name and not a separate legal entity. For any question about your data, write to the address above.
2. What we collect
We only collect what is needed to turn your request into a quote. Depending on how you contact us, this includes:
- Identity and contact details — first name, surname, email address, telephone or WhatsApp number, customer type (private or business), and VAT number where you are ordering as a business.
- Delivery details — address, city, province, postal code, country.
- Request details — the part requested, part number, aircraft model, quantity, urgency, and any notes you provide.
- Images — any photographs of parts you send us.
- Message content — the text of your conversation with us, retained so that we can follow up on your request.
We do not ask for, and you should not send us, payment card details, identity documents, or any special category data (health, biometric, political or religious information).
3. Why we use it, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Handling your request, preparing a quote, and passing your request to the supplier able to fulfil it | Steps taken at your request prior to entering into a contract — Art. 6(1)(b) GDPR |
| Replying to you and providing assistance during and after the request | Art. 6(1)(b) GDPR |
| Keeping a record of requests to resolve disputes, and improving how the service works | Our legitimate interest in operating and defending the service — Art. 6(1)(f) GDPR |
| Complying with accounting and tax obligations, where a transaction takes place | Legal obligation — Art. 6(1)(c) GDPR |
We do not send marketing messages unless you have separately asked us to.
4. Who receives your data
Your request is only useful if it reaches someone who can supply the part. We share your data with two categories of recipient.
Suppliers and commercial partners. When you ask for a quote, the details of your request — including the contact and delivery details needed to price and ship the part — are passed to the supplier or partner able to fulfil it. Those companies decide independently how they handle your data from that point and act as separate data controllers under their own privacy policies.
Service providers acting on our instructions. These process data on our behalf as data processors:
| Provider | What it is used for | Where |
|---|---|---|
| Meta Platforms Ireland Ltd. | WhatsApp Business messaging | EU / USA |
| Google Ireland Ltd. / Google LLC | Storage of photographs (Google Drive); automated structuring of your request using the Gemini API | EU / USA |
| Notion Labs, Inc. | Record of requests and their status | USA |
| Tally BV | Web request form | EU |
| Hetzner Online GmbH | Server hosting for our automation system | EU (Germany) |
| Carrd, Inc. | Hosting of this website | USA |
We do not sell your data, and we do not share it with advertising networks or data brokers.
5. Automated processing
We use an automated assistant, built on Google’s Gemini API, to read your messages and organise them into a structured request. This helps us respond faster and reduces transcription errors. The content you send is processed to produce that structured request; it is not used to train Google’s models.
No decision producing legal effects concerning you, or similarly significantly affecting you, is taken by automated means alone. Quotes are reviewed and issued by people.
6. Transfers outside the European Economic Area
Some of the providers listed above are established in the United States. Where your data is transferred outside the EEA, the transfer is covered by the European Commission’s Standard Contractual Clauses, by the provider’s certification under the EU–U.S. Data Privacy Framework, or by another safeguard permitted under Chapter V GDPR.
7. How long we keep it
- Requests that do not lead to an order — 24 months from your last contact with us, after which they are deleted.
- Requests that lead to an order — kept for as long as needed to handle warranty, returns and any dispute, and for the period required by applicable accounting and tax law.
- Photographs — deleted together with the request they belong to.
You can ask us to delete your data sooner (see section 9).
8. Your rights
Under Articles 15 to 22 GDPR you have the right to:
- obtain confirmation of whether we hold data about you, and a copy of it;
- have inaccurate data corrected;
- have your data erased;
- restrict how we process it;
- receive your data in a portable, machine-readable format;
- object to processing carried out on the basis of our legitimate interest.
To exercise any of these, write to [email protected]. We reply within 30 days.
If you believe your data has been handled unlawfully, you may lodge a complaint with your national supervisory authority. In Italy this is the Garante per la protezione dei dati personali (www.gpdp.it).
9. Deleting your data
How to request deletion of your data
Send an email to [email protected] with the subject line “Data deletion request”, from the email address you contacted us with, or stating the WhatsApp number you used.
We will delete your personal data — including your message history and any photographs you sent — within 30 days, and confirm once it is done. We may need to retain a minimal record where accounting or tax law requires it; if so, we will tell you exactly what was kept and why.
10. Messaging on WhatsApp
If you contact us on WhatsApp, your messages also pass through Meta’s infrastructure and are subject to WhatsApp’s own privacy policy, over which we have no control. You can stop the conversation at any time by blocking our number or by asking us to stop writing to you.
11. Cookies
This site does not use profiling or advertising cookies. Only technical cookies strictly necessary to deliver the page may be set by our hosting provider; these do not require consent under Art. 122 of the Italian Privacy Code.
12. Children
This service is intended for adults purchasing aircraft parts. We do not knowingly collect data from anyone under 16. If you believe a minor has sent us data, contact us and we will delete it.
13. Changes to this policy
If we change how we handle your data, we update this page and change the date at the top. For significant changes affecting requests already in progress, we notify affected customers directly.