This policy explains which personal data the AMEA website collects, why, how long it is kept and how you can exercise your rights. It applies to the website and to the AMEA newsletter.
Who is responsible for your data
The data controller is Obizco SARL, 77, route d'Arlon, L-8311 Capellen, Luxembourg (RCS Luxembourg B77729), which operates this website on behalf of the AMEA consortium as leader of the project's communication activities.
For any question about your data or to exercise your rights, write to burhan.ocakoglu@obizco.com. Obizco has not appointed a Data Protection Officer.
AMEA (ATN Multilink Expansion in European Airspace) is co-funded by the European Union under the Connecting Europe Facility (CEF Transport) programme, grant agreement No 101233037, and supported by the SESAR 3 Joint Undertaking. The European Union, CINEA and the SESAR 3 Joint Undertaking only receive aggregated statistics from this website, never personal data.
Visiting the website
No cookies, no third-party trackers. The public website sets no cookie and stores nothing on your device. Fonts, maps and images are served by the website itself: your browser does not contact any other company while you read it. There are no embedded social media widgets; the “Share” buttons only open LinkedIn or X if you click them, and those services then apply their own privacy policies.
Audience measurement. To report the reach of this EU-funded project (visits, pages viewed, time spent, downloads), the website counts visits itself, without cookies. For each page viewed it records the page address, the website you came from (its domain only), the date and time and the time spent on the page. To tell visits apart, it computes a daily anonymous identifier from your IP address and browser type, scrambled with a random key that is replaced and destroyed every day. Your IP address and browser details are not stored, and you cannot be followed from one day to the next. Nothing is recorded if your browser sends a “Do Not Track” or “Global Privacy Control” signal. Legal basis: our legitimate interest in measuring and reporting the project's communication results (Article 6(1)(f) GDPR). Detailed records are deleted after 13 months; only daily totals are kept until the end of the project.
Downloads. When you download a publication, the same daily anonymous identifier is used so that a download is counted only once per day and per document.
Technical logs. Like any web server, the server hosting the website records technical logs (IP address, date and time, requested address, browser type) to keep the service secure and to diagnose failures. These logs are kept for no more than 30 days. Legal basis: our legitimate interest in the security of the website (Article 6(1)(f) GDPR).
Newsletter
If you subscribe to the quarterly AMEA newsletter, we process your e-mail address, the page where you subscribed, the date, time and wording of your consent, the date of your confirmation and, if you choose to give it, your profile (airline, air navigation service provider, industry or institution). Subscription is confirmed in two steps: nothing is sent to you until you confirm by clicking the button on the confirmation page.
Legal basis: your consent (Article 6(1)(a) GDPR). You can withdraw it at any time with the “Unsubscribe” link included in every newsletter, or by writing to us.
To measure how many newsletters are opened and how many links are clicked, each e-mail contains a random identifier that is not linked to your address: we only know totals per issue, never who opened or clicked.
Retention: your data is kept until you unsubscribe. Subscriptions that are never confirmed are deleted after 30 days, and the addresses of people who unsubscribed are deleted 30 days after unsubscription.
Review of articles by project partners
Before publication, articles may be sent for review to representatives of the AMEA partner organisations, through a personal link sent by e-mail. We then process the reviewer's e-mail address, organisation, decision, comments and the related dates. Legal basis: our legitimate interest in having communications approved by the consortium, as provided for in the project's agreements (Article 6(1)(f) GDPR). This data is kept for the duration of the project (until 30 September 2029).
Back office users
The members of the communication team who manage the website have a personal account: name, e-mail address, role, password (stored only in encrypted form) and, while they are signed in, their session (date, IP address and browser type, used for security). A strictly necessary session cookie keeps them signed in; it is only set for the back office. Sessions expire after 7 days of inactivity. Accounts are deactivated when a person leaves the project team and deleted at the end of the project.
When you contact us
If you write to us, we use your message and contact details only to answer you and keep them for no more than three years after our last exchange.
Registration for events may use external forms (for example EUSurvey); the privacy notice of the organiser of each form applies.
Who receives your data
Your data is accessible only to the members of the Obizco team who manage the website and, for their part, to the service providers acting on our instructions under a data processing agreement:
- the hosting provider of the website: [name and address of the hosting provider, to be completed at go-live];
- the e-mail delivery provider used for the newsletter and notifications: [name of the provider, to be completed at go-live].
Your data is stored and processed in the European Union. It is never sold, rented or used for advertising.
Security
The website is served only over an encrypted connection (HTTPS). Access to the back office is restricted to named team members with individual passwords, all actions require authentication, and personal links sent by e-mail are unique and signed; review and password links expire.
Your rights
Under the General Data Protection Regulation (EU) 2016/679, you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable format and, where processing is based on consent, to withdraw your consent at any time. To exercise these rights, write to burhan.ocakoglu@obizco.com. We answer within one month.
If you consider that your rights are not respected, you can lodge a complaint with the Luxembourg data protection authority: Commission nationale pour la protection des données (CNPD), 15, Boulevard du Jazz, L-4370 Belvaux, Luxembourg — cnpd.public.lu.
Changes to this policy
We will update this policy if the way we process data changes. The date of the last update is shown at the top of this page.