WEB PRIVACY POLICY
SCOPE
This Privacy Policy governs the processing of personal data of users/data subjects that MANTENIMIENTO REPARACIÓN Y OPERACIONES, S.L., hereinafter MRO, S.L., operating under the trade name BOOST AIR GROUP, obtains through its website, online forms, corporate email addresses, electronic communications, and other digital channels of the entity.
When the data subject uses the forms available on the website, contacts MRO S.L. via corporate email, or communicates through other digital channels, they agree that the personal data they provide may be processed by MRO S.L., as the data controller, to address their request, manage the corresponding relationship, and fulfill the purposes indicated in this Privacy Policy.
All legal texts are available to users and/or data subjects on the corresponding website.
Who is responsible for processing your data?
MRO S.L. is the legal entity responsible for the collection and processing of your personal data in connection with the services it provides.
MRO S.L. is committed to respecting and safeguarding your privacy and the security of your data. The identifying details of the data controller are:
Company Name:
MANTENIMIENTO REPARACION Y OPERACIONES SL, operating under the trade name BOOST AIR GROUP.
Tax ID B75853200
Address: Paseo de la Castellana 15 – 6th Floor
City: Madrid – ZIP Code: 28046
Contact the DPO: dpd@gestair.com
For what purpose(s) do we collect your data?
In accordance with current regulations, MRO S.L. only collects the data strictly necessary to provide the services related to its business and other services, procedures, and activities required by law.
The data that may be collected from the user will be processed for the following purposes:
| Purpose of processing | What do we use your data for? | Legal basis |
| To respond to general inquiries | To respond to inquiries, requests for information, or communications sent via forms, email, or other digital channels. | Consent of the data subject, expressed by voluntarily submitting the inquiry. If the inquiry relates to the potential contracting of services, the legal basis will be the implementation of pre-contractual measures. |
| Process requests related to MRO S.L. services | To analyze your request, contact you, provide you with information, and, where applicable, carry out steps prior to contracting or related to a requested service. | Implementation of pre-contractual measures requested by the data subject or execution of a contractual relationship, where applicable. |
| Manage communications with customers, potential customers, suppliers, or professional contacts | To maintain professional, administrative, non-advertising commercial, or operational communications related to requests, services, or professional relationships. | Contract performance, pre-contractual measures, or MRO S.L.’s legitimate interest in maintaining professional relationships. |
| Sending commercial communications | To send information about MRO S.L.’s services, news, or activities | Consent of the data subject when there is no prior relationship. In the case of customers, prior contractual relationship and legitimate interest, where permitted by law and always with the option to unsubscribe. |
| Managing applications | To evaluate your application and manage your participation in selection processes, if you submit your personal data and resume via a method indicated on the website. | Implementation of pre-contractual measures requested by the candidate. To retain personal data and CVs for future processes, consent of the candidate where applicable. |
| Managing corporate social media | To respond to messages, comments, or requests received through MRO S.L.’s corporate profiles and maintain its presence on social media. | MRO S.L.’s legitimate interest in managing its corporate communications and responding to interactions received. |
| Ensuring the security and proper functioning of the website | To maintain the security of the website, prevent unauthorized access, detect misuse, and ensure the proper functioning of digital services. | MRO S.L.’s legitimate interest in protecting its website and information systems. |
| Compliance with legal obligations | To comply with legal obligations, requests from authorities, the exercise of rights, claims, or liabilities applicable to MRO S.L. | Compliance with legal obligations applicable to MRO S.L. |
When processing is based on consent, you may withdraw it at any time, without this affecting the lawfulness of the processing carried out prior to its withdrawal.
Please be advised that no automated evaluations will be conducted, nor will user profiles be created.
We also inform you that the information in the databases may be used to identify users and to conduct statistical studies of registered users.
How long do we retain your personal data?
Personal data will be retained as long as the user does not indicate otherwise and for the legally established retention periods, unless, for logical and obvious reasons, it has lost its usefulness or the legitimate purpose for which it was collected.
In general:
| Processing | Retention period or criteria |
| Inquiries and requests for information | For the time necessary to respond to and process the request. Thereafter, they may be retained in a locked format for the applicable statute of limitations periods. |
| Requests related to services | For the duration of the request’s processing and, if a contractual relationship is established, for the duration of that relationship and any subsequent statutory periods. |
| Clients and professional contacts | For the duration of the professional or contractual relationship and for the applicable statutory periods. |
| Marketing communications | Until you withdraw your consent or object to receiving them. |
| Job applications | During the selection process. If the resume is retained for future processes, for the period communicated to the candidate or until consent is withdrawn. |
| Social media | For as long as necessary to manage the interaction, without prejudice to the retention practices of each social media platform in accordance with its own policies. |
| Technical or web security data | For as long as necessary to ensure the security and operation of the website and, where applicable, for the periods necessary to investigate incidents. |
When the data is no longer necessary for the purposes for which it was collected, it will be deleted or, where applicable, securely anonymized. However, when there is a legal obligation to retain the data or it is necessary to address potential liabilities arising from the processing or the relationship with the data subject, the data may be retained in a blocked format for the legally applicable periods.
To whom will your data be disclosed?
MRO S.L. does not sell or rent users’ personal data.
Generally, personal data will not be disclosed to third parties, unless there is a legal obligation to do so, it is necessary to respond to the user’s request, manage the corresponding relationship, or provide the requested service.
In particular, the data may be disclosed or made available to the following categories of recipients:
- Public administrations, competent authorities, courts, and tribunals, when there is a legal obligation.
- Group companies, when necessary for internal management, handling requests, providing services, or complying with legal obligations.
- Technology or professional service providers, such as web hosting, IT maintenance, email, technical support, document management, legal, tax, accounting, or auditing services, when necessary for the provision of their services.
- Third parties whose involvement is necessary to address the user’s request, manage professional communications, or provide the corresponding service.
When these providers process personal data on behalf of MRO S.L., they will act as data processors and must process the data in accordance with MRO S.L.’s instructions and with the safeguards required by data protection regulations.
Are international data transfers carried out?
In general, MRO S.L. will ensure that personal data processed through its website, forms, electronic communications, and other digital channels is processed within the European Economic Area.
When international data transfers occur, MRO S.L. will verify that they are carried out in accordance with the safeguards provided for in data protection regulations. In particular, these transfers may be based, as applicable, on:
- an adequacy decision by the European Commission regarding the recipient country or organization;
- the signing of standard contractual clauses approved by the European Commission;
- the application of binding corporate rules, where applicable;
- other mechanisms provided for by data protection regulations.
The data subject may request additional information regarding these safeguards by writing to dpd@gestair.com.
What are the rights of users who provide us with their data?
Data subjects may exercise their rights of access, rectification, erasure, objection, restriction of processing, and data portability. These rights allow, among other things, to know what data MRO S.L. processes, request its correction or deletion, object to certain processing activities, restrict its use, or receive the data in a structured format.
When processing is based on consent, consent may be withdrawn at any time, without affecting the lawfulness of the processing carried out previously.
The rights referred to in the preceding paragraph may be exercised by each user by means of a written and signed request, accompanied by a photocopy of their ID card or passport, addressed to the following address:
To exercise these rights, please contact dpd@gestair.com or write to
GESTAIR S.A.U.
11 Anabel Segura St. – Building C – 4th Floor
28108, Alcobendas, Madrid
Furthermore, we inform Users that they may withdraw their consent to the processing of their data at any time, and that they may file a complaint with the Supervisory Authority (Spanish Data Protection Agency) if they deem it appropriate.
Can this Privacy Policy be modified?
MRO S.L. may modify this Privacy Policy when necessary to adapt it to regulatory changes, guidelines from the supervisory authority, technical changes, or modifications to the processing carried out through the website. The updated version will be available on this website.
QUESTIONS OR ISSUES REGARDING DATA PROTECTION
If you have any questions or wish to report an issue related to the processing of your personal data, you may contact the Data Protection Officer of MRO S.L. at dpd@gestair.com or at the mailing address indicated in this Privacy Policy.