24/7 Operations Center – Global Aviation Support

ops@aurevo.aero

Request Trip Support

Home / Privacy Policy

Privacy Policy

AUREVO Trip Support GmbH

 

Last updated: September 2026

 

  1. Privacy at a Glance

 

General Information

 

The protection of your personal data is important to us. The following information provides an overview of what happens to your personal data when you visit the website of AUREVO Trip Support GmbH (“AUREVO”), contact us, or use our services.

 

Personal data means any information relating to an identified or identifiable natural person.

 

Detailed information regarding the processing of personal data is provided in the sections below.

 

Who is responsible for data processing?

 

The controller responsible for data processing is:

 

AUREVO Trip Support GmbH

Am Flugplatz 27

63329 Egelsbach

Germany

 

Represented by the Managing Director:

Wasim Mohamad

 

Email: ops@aurevo.aero

 

How do we collect your data?

 

Some data is collected when you provide it to us. This may occur, for example, when you contact us by email or telephone, use a contact or enquiry form, submit a Trip Support request, place an order, or provide crew, passenger, aircraft or other operational information.

 

Other data may be processed automatically by our IT systems or hosting provider when you visit our website. This includes, in particular, technical information such as your IP address, internet browser, operating system, and the date and time of access.

 

What do we use your data for?

 

Personal data is processed in particular:

 

* to ensure the secure and technically reliable operation of our website;

* to process contact and business enquiries;

* to carry out pre-contractual measures;

* to provide our Trip Support and Flight Operations services;

* to communicate with customers, prospective customers and business partners;

* to coordinate services with authorities and external service providers;

* to comply with legal and regulatory obligations; and

* to safeguard legitimate business and security interests.

 

What rights do you have regarding your data?

 

Subject to the applicable legal requirements, you have the right to obtain information about your stored personal data and to request its rectification, erasure or restriction of processing.

 

Under certain circumstances, you also have the right to data portability and the right to object to processing.

 

If you have given consent to the processing of your personal data, you may withdraw your consent at any time with effect for the future.

 

You also have the right to lodge a complaint with a competent data protection supervisory authority.

 

⸻

 

  1. Hosting and Technical Provision

 

The AUREVO website is hosted by an external hosting service provider.

 

When you visit our website, the hosting provider may process technical connection data and server log files. This may include IP addresses.

 

The processing is carried out in particular on the basis of Art. 6(1)(f) GDPR. AUREVO has a legitimate interest in ensuring the secure, stable and technically reliable operation of its website.

 

Where the hosting provider processes personal data on behalf of AUREVO, a data processing agreement pursuant to Art. 28 GDPR will be concluded where legally required.

 

Where consent is required for the use of specific technologies, such technologies will be used on the basis of Art. 6(1)(a) GDPR and, where applicable, Section 25 TDDDG (German Telecommunications Digital Services Data Protection Act).

 

⸻

 

  1. General Information and Mandatory Disclosures

 

Data Protection

 

AUREVO takes the protection of personal data seriously.

 

We treat personal data confidentially and in accordance with applicable data protection laws and this Privacy Policy.

 

Personal data may be processed when you use our website and services. This Privacy Policy explains what data we process, for what purposes, and what rights data subjects have.

 

Please note that data transmission over the internet, for example when communicating by email, may be subject to security risks. Complete protection of data against access by third parties cannot be technically guaranteed.

 

Controller

 

The controller within the meaning of the General Data Protection Regulation is:

 

AUREVO Trip Support GmbH

Am Flugplatz 27

63329 Egelsbach

Germany

 

Managing Director: Wasim Mohamad

Email: ops@aurevo.aero

 

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

 

Retention Period

 

Unless a more specific retention period is stated in this Privacy Policy, we retain personal data only for as long as necessary for the respective processing purpose.

 

If you submit a legitimate request for erasure or withdraw consent previously granted, the relevant data will be deleted unless there is another lawful basis or legal obligation requiring continued retention.

 

Statutory retention obligations under commercial, tax, aviation, sanctions or other regulatory laws remain unaffected.

 

After the applicable retention periods have expired, the data will be deleted unless another legal basis exists for its continued processing.

 

Legal Bases for Processing

 

AUREVO processes personal data in particular on the following legal bases:

 

Art. 6(1)(a) GDPR – where you have consented to the processing.

 

Art. 6(1)(b) GDPR – where processing is necessary for the performance of a contract or in order to take steps at your request prior to entering into a contract.

 

Art. 6(1)(c) GDPR – where processing is necessary for compliance with a legal obligation.

 

Art. 6(1)(f) GDPR – where processing is necessary for the purposes of the legitimate interests pursued by AUREVO or a third party and such interests are not overridden by the interests, fundamental rights or freedoms of the data subject.

 

Where special categories of personal data within the meaning of Art. 9 GDPR are processed, such processing will take place only where an appropriate legal basis exists.

 

Recipients of Personal Data

 

As part of our business activities, we work with external organizations and service providers.

 

Personal data is disclosed only where this is necessary for the performance of a contract, provision of a requested service, compliance with a legal obligation, or where another lawful basis permits the disclosure.

 

Where service providers process personal data on behalf of AUREVO, appropriate data processing agreements will be concluded where required by law.

 

⸻

 

  1. Contacting AUREVO

 

Contact Form

 

If you contact us through a contact or enquiry form, the information you provide, including your contact details, will be processed for the purpose of handling your enquiry and any follow-up questions.

 

This information may include, in particular:

 

* name;

* company;

* position or function;

* telephone number;

* email address; and

* content of your enquiry.

 

Where your enquiry relates to a contract or a potential engagement of AUREVO, processing is carried out in particular on the basis of Art. 6(1)(b) GDPR.

 

For other business enquiries, processing is based on our legitimate interest in efficiently handling enquiries addressed to us pursuant to Art. 6(1)(f) GDPR.

 

Where consent has been obtained, processing is carried out on the basis of Art. 6(1)(a) GDPR.

 

Contact by Email or Telephone

 

If you contact AUREVO by email or telephone, we process the personal data provided as part of your enquiry for the purpose of handling your request.

 

Where the enquiry relates to a contract or pre-contractual measures, processing is carried out in particular on the basis of Art. 6(1)(b) GDPR.

 

In other cases, processing is carried out in particular on the basis of Art. 6(1)(f) GDPR.

 

⸻

 

  1. Processing in Connection with Trip Support and Flight Operations

 

Due to the international nature of AUREVO’s activities, personal and operational information may be processed in connection with Trip Support, Flight Operations or other aviation-related enquiries and services.

 

Depending on the specific operation, such information may include:

 

* name and business contact details;

* company and position;

* aircraft type;

* aircraft registration;

* flight number;

* routing;

* flight times;

* departure, destination and alternate airports;

* crew information;

* passenger information;

* nationality;

* passport and visa information, where required;

* immigration and other information required by competent authorities;

* hotel information;

* transportation requirements;

* permit requirements;

* slot and PPR requirements;

* ground handling requirements;

* fuel requirements;

* catering requirements; and

* other data and documents necessary to perform the respective operation.

 

Processing is carried out in particular where necessary for pre-contractual measures or the performance of a contract pursuant to Art. 6(1)(b) GDPR.

 

Where legal or regulatory obligations apply, processing may additionally be based on Art. 6(1)(c) GDPR.

 

AUREVO generally processes only personal data that is necessary for the relevant service.

 

⸻

 

  1. Disclosure to Authorities and Operational Service Providers

 

For the performance of international flight operations, it may be necessary to disclose personal and operational information to competent authorities or external service providers.

 

These may include, in particular:

 

* civil aviation authorities;

* immigration and border authorities;

* customs authorities;

* airport operators;

* air navigation service providers;

* slot coordinators;

* ground handlers;

* FBOs;

* fuel providers;

* hotels;

* transportation and chauffeur companies;

* catering providers;

* local Trip Support and aviation service providers; and

* other organizations required for the performance of a specific flight operation.

 

Personal data will only be disclosed to the extent necessary to perform the relevant service or where disclosure is permitted or required by law.

 

⸻

 

  1. International Data Transfers

 

AUREVO provides international Trip Support services. The performance of a flight operation may therefore require personal data to be transferred to authorities or service providers outside the European Union and the European Economic Area.

 

This may include data transfers required for obtaining overflight or landing permits, complying with immigration or customs requirements, or arranging ground handling, fuel, hotels, transportation or other local services.

 

When transferring personal data to third countries, AUREVO observes the applicable requirements of Art. 44 et seq. GDPR.

 

Where necessary and applicable, appropriate safeguards pursuant to Art. 46 GDPR will be implemented.

 

Where the applicable statutory requirements are met, the derogations for specific situations under Art. 49 GDPR may also apply.

 

⸻

 

  1. Server Log Files

 

When visiting the AUREVO website, technical information may automatically be processed in server log files.

 

This may include, in particular:

 

* browser type and browser version;

* operating system used;

* referrer URL;

* hostname of the accessing device;

* date and time of the server request;

* IP address; and

* content accessed.

 

Processing is carried out in particular on the basis of Art. 6(1)(f) GDPR.

 

AUREVO has a legitimate interest in ensuring the technically reliable, secure and optimized operation of its website.

 

⸻

 

  1. Cookies and Similar Technologies

 

Our website may use cookies and similar technologies.

 

Cookies are small data packages that may be stored on your device. A distinction may be made between cookies that are technically necessary and optional cookies used, for example, for analytics or marketing purposes.

 

Technically necessary cookies are used to the extent required for the provision and functionality of our website.

 

Where consent is required for cookies or comparable technologies, they will generally only be used after you have provided your consent pursuant to Art. 6(1)(a) GDPR in conjunction with the applicable provisions of the TDDDG.

 

Consent may be withdrawn at any time with effect for the future.

 

Where a consent management system is used, you may manage and change your preferences through that system.

 

⸻

 

  1. Analytics, Marketing and Third-Party Services

 

Where AUREVO uses analytics, marketing, social media or other external services on its website, such services will be used in compliance with applicable data protection requirements.

 

Services requiring consent will generally only be activated after the required consent has been obtained.

 

This Privacy Policy will be supplemented with information about the specific services used on the AUREVO website where applicable.

 

⸻

 

  1. SSL/TLS Encryption

 

The AUREVO website uses SSL/TLS encryption for security purposes and to protect the transmission of confidential information.

 

An encrypted connection can generally be recognized by the website address beginning with “https://” and the corresponding security symbol displayed by your browser.

 

⸻

 

  1. Data Security and Confidentiality

 

AUREVO recognizes the particular sensitivity of personal and operational information processed in connection with aviation services.

 

This applies in particular to information relating to:

 

* flight movements;

* aircraft registrations;

* routing;

* crew members;

* passengers;

* travel movements;

* passport and visa documentation; and

* other operational information.

 

AUREVO implements appropriate technical and organizational measures designed to protect personal data against accidental or unlawful loss, alteration, unauthorized disclosure or unauthorized access.

 

Access to personal and operational information is restricted, where possible, to those persons and service providers who require such information to perform their respective duties.

 

⸻

 

  1. Withdrawal of Consent

 

Where the processing of personal data is based on consent, you may withdraw your consent at any time with effect for the future.

 

The lawfulness of processing carried out on the basis of your consent prior to its withdrawal remains unaffected.

 

⸻

 

  1. Right to Object Pursuant to Art. 21 GDPR

 

Where your personal data is processed on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data.

 

Following such objection, AUREVO will no longer process the personal data concerned unless AUREVO can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing is necessary for the establishment, exercise or defence of legal claims.

 

Objection to Direct Marketing

 

Where personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing.

 

Following your objection, your personal data will no longer be processed for direct marketing purposes.

 

⸻

 

  1. Right of Access, Rectification and Erasure

 

Subject to the applicable statutory requirements, you have in particular the right:

 

* pursuant to Art. 15 GDPR, to obtain access to your personal data;

* pursuant to Art. 16 GDPR, to request the rectification of inaccurate personal data;

* pursuant to Art. 17 GDPR, to request the erasure of personal data; and

* pursuant to Art. 18 GDPR, to request restriction of processing.

 

Statutory exceptions and retention obligations remain unaffected.

 

⸻

 

  1. Right to Data Portability

 

Subject to the requirements of Art. 20 GDPR, you have the right to receive personal data that you have provided to AUREVO and which is processed by automated means on the basis of your consent or a contract, in a structured, commonly used and machine-readable format.

 

Where technically feasible and legally provided for, you may also request that such data be transmitted directly to another controller.

 

⸻

 

  1. Right to Restriction of Processing

 

Subject to the statutory requirements, you have the right to request restriction of the processing of your personal data.

 

This may apply in particular where:

 

* you contest the accuracy of your personal data;

* the processing is unlawful and you request restriction instead of erasure;

* AUREVO no longer requires the data, but you require it for the establishment, exercise or defence of legal claims; or

* you have objected to processing pursuant to Art. 21(1) GDPR and the balancing of interests has not yet been completed.

 

⸻

 

  1. Right to Lodge a Complaint with a Supervisory Authority

 

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.

 

You may in particular lodge a complaint with a supervisory authority in the Member State of your habitual residence, your place of work, or the place of the alleged infringement.

 

⸻

 

  1. Amendments to this Privacy Policy

 

AUREVO reserves the right to amend this Privacy Policy where legal or regulatory requirements, our services, business processes or the technical design of our website change.

 

The current version published on our website shall apply.

 

⸻

 

AUREVO Trip Support GmbH

Am Flugplatz 27

63329 Egelsbach

Germany

 

Managing Director: Wasim Mohamad

Email: ops@aurevo.aero

 

AUREVO Trip Support