Last updated: 7 August 2026
This policy explains what personal data V1AeroSolutions LLC collects through the AirOne MRO website, why we collect it, how long we keep it, and the rights you have over it. It covers this website only. It does not cover the AirOne MRO application itself, which is governed by the agreement we sign with each customer.
Who we are
The controller of your personal data is:
- V1AeroSolutions LLC
- Fiscal identification code: RO46631786
- Trade Register number: J2022005395237
- Șos. București Nord, Loc. Voluntari, Ilfov County, Romania
- Email: partners@aironemro.com
- Telephone: +40 746 326 275
V1AeroSolutions LLC overhauls aircraft wheels and brakes and develops AirOne MRO, shop management software for wheel, brake, and component maintenance organisations. Because we are established in Romania, our processing is governed by the EU General Data Protection Regulation (GDPR) and Romanian data protection law.
We have not appointed a Data Protection Officer, as we are not required to under Article 37 GDPR. Privacy enquiries go to the address above.
What we collect and why
Information you give us through the enquiry form
The enquiry form on our home page — used to join the waitlist, apply as a Founding Shop, request custom development, or ask a question — collects the following:
| Field | Required | Why we need it |
|---|---|---|
| Reason for contact | Yes | To route your enquiry to the right person and respond appropriately. |
| Number of people who will use the system | Yes | To understand the scale of your operation before we reply. |
| Company name | Yes | To identify the organisation making the enquiry. |
| Telephone number | Yes | To contact you about your enquiry. |
| Email address | Yes | To contact you about your enquiry and to reply to it. |
| Consent confirmation | Yes | To record that you agreed to be contacted, and when. |
Please send us only what the form asks for. Do not include maintenance records, customer data, personnel data, or any other third party’s personal data in an enquiry.
Information collected automatically when you submit the form
When you submit an enquiry we also record, alongside your message:
- Your IP address — used to enforce a submission rate limit and to investigate abuse of the form.
- Your browser user agent string — used to identify automated submissions.
- The date and time of submission — used to operate a timing check that distinguishes human submissions from automated ones, and to establish when consent was given.
We collect this to keep the form usable and to stop it being used to send spam. We do not use it to build a profile of you or to track you across websites.
Information collected by our hosting provider
Our web server keeps standard access logs containing IP addresses, requested URLs, timestamps, response codes, and user agent strings. These are generated automatically by the server software, are used for security monitoring and diagnosing faults, and are held for a short period before being overwritten.
Analytics
We use Google Analytics 4, integrated through the Google Site Kit plugin, to understand how visitors find and use this site — which pages are read, how long people stay, which sources bring traffic. Google Analytics sets cookies in your browser and generates a pseudonymous identifier for your device. We do not use it to identify you personally, and we have not enabled Google Signals, advertising features, or remarketing.
Analytics runs only if you consent to it. If you decline, no analytics cookies are set and no analytics data about your visit is sent to Google.
We also use Google Search Console through the same plugin. Search Console reports how this site performs in Google Search using aggregated data Google already holds. It does not set cookies on your device and does not collect personal data about individual visitors.
Spam protection
Our enquiry form is protected by Google reCAPTCHA v3. When you open a page containing the form, reCAPTCHA loads a script from Google and analyses your interaction with the page to produce a score indicating whether you are likely to be a human or an automated system. To do this, Google collects your IP address, information about your browser and device, and your behaviour on the page, and may read and set cookies in your browser. This is subject to Google’s Privacy Policy and Google’s Terms of Service.
reCAPTCHA is necessary for the form to work — without it we cannot accept submissions safely. Alongside it we operate two checks that involve no third party and no cookies: a hidden field that automated systems tend to complete, and a minimum time between the form loading and being submitted.
If you would rather not use reCAPTCHA, email us directly at partners@aironemro.com instead of using the form.
Legal bases for processing
Under Article 6(1) GDPR we rely on the following:
| Processing | Legal basis |
|---|---|
| Responding to your enquiry, waitlist registration, and Founding Shops applications | Steps taken at your request prior to entering into a contract — Article 6(1)(b). Where no contract is in prospect, your consent — Article 6(1)(a). |
| Recording your consent tick and the time it was given | Compliance with our legal obligation to demonstrate consent — Article 6(1)(c), read with Article 7(1). |
| Spam protection, rate limiting, and server logs | Our legitimate interest in keeping the site and the form secure and available — Article 6(1)(f). |
| Google Analytics | Your consent — Article 6(1)(a). |
| Retaining enquiry records for accountability | Our legitimate interest in evidencing what was agreed and with whom — Article 6(1)(f). |
Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before you withdrew. Where we rely on legitimate interests, you have the right to object — see Your rights below.
Cookies and similar technologies
This website sets no cookies of its own for ordinary visitors. It does not run comments, visitor accounts, advertising, or social media embeds. The cookies you may encounter come from the services described above:
| Cookie | Set by | Purpose | Retention | Category |
|---|---|---|---|---|
_ga, _ga_* | Google Analytics | Distinguishes returning devices and sessions for traffic statistics. | Up to 2 years | Analytics — consent required |
_GRECAPTCHA | Google reCAPTCHA | Spam and abuse protection on the enquiry form. | Up to 6 months | Strictly necessary |
wordpress_*, wp-settings-* | This website | Keeps an administrator signed in and remembers their editor preferences. Set only after signing in to the admin area — never for public visitors. | Session to 1 year | Strictly necessary |
You can change or withdraw your cookie choices at any time using the cookie settings link in the site footer. You can also block or delete cookies through your browser settings, though blocking strictly necessary cookies may stop the enquiry form working.
Who we share your data with
We do not sell your personal data, and we do not share it for anyone else’s marketing. We disclose it only to the following categories of recipient:
- Our hosting provider, which stores the website and its database on our behalf as a processor.
- Our email relay provider, which delivers the notification email generated by your enquiry to our own inbox.
- Google Ireland Limited / Google LLC, for the analytics and spam protection services described above.
- CodeFlow, our development partner, which maintains this website and may access it in the course of technical support, under a written processing agreement.
- Professional advisers and authorities, where we are required to disclose data by law or need to establish, exercise, or defend a legal claim.
Each processor acts only on our documented instructions under a contract meeting Article 28 GDPR.
International transfers
Our website and its database are hosted within the European Union.
Google Analytics and reCAPTCHA may transfer data to Google LLC in the United States. These transfers rely on the European Commission’s Standard Contractual Clauses together with Google’s supplementary technical measures, and on Google LLC’s certification under the EU–US Data Privacy Framework. You can request a copy of the safeguards that apply by writing to us at the address above.
How long we keep your data
| Data | Retention period |
|---|---|
| Enquiry form submissions, including the IP address and user agent recorded with them | 24 months from the date of your enquiry, unless you ask us to delete it sooner or we enter into a commercial relationship with you — in which case the record is kept for the life of that relationship and for as long afterwards as the law requires. |
| Notification emails in our own inbox | Deleted or archived on the same 24-month cycle. |
| Server access logs | Short-term, then overwritten automatically. |
| Google Analytics data | 14 months, after which Google deletes it automatically. |
Access to stored submissions is limited to site administrators. When a retention period expires the record is deleted.
Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you, and receive a copy of it (Article 15).
- Rectify data that is inaccurate or incomplete (Article 16).
- Erasure of your data where one of the grounds in Article 17 applies — for example, where you withdraw consent and we have no other basis for keeping it.
- Restrict processing in the circumstances set out in Article 18.
- Data portability — receive the data you gave us in a structured, commonly used, machine-readable format, and have it sent to another controller where technically feasible (Article 20).
- Object to processing based on our legitimate interests, on grounds relating to your particular situation (Article 21). If you object to direct marketing, we will stop without exception.
- Withdraw consent at any time, where processing is based on consent (Article 7(3)).
- Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects (Article 22). We do not make such decisions. The reCAPTCHA score decides only whether a form submission is accepted, and you can always reach us by email instead.
To exercise any of these rights, email partners@aironemro.com. We will respond within one month, as required by Article 12(3). That period can be extended by two further months for complex requests, in which case we will tell you within the first month and explain why. We may ask you to confirm your identity before we act, so that we do not disclose your data to someone else.
Exercising these rights is free of charge unless a request is manifestly unfounded or excessive.
Complaints
If you are unhappy with how we have handled your personal data, please tell us first so we can put it right. You also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work, or the place of the alleged infringement (Article 77 GDPR).
Our supervisory authority is the Romanian National Supervisory Authority for Personal Data Processing:
- Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
- B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, 010336 Bucharest, Romania
- www.dataprotection.ro
How we protect your data
We take the measures required by Article 32 GDPR, appropriate to the risk. In practice, for this website, that means:
- All traffic is encrypted in transit using HTTPS.
- Enquiries are stored in a dedicated database table, readable only by signed-in administrators of the site.
- Form submissions are protected against forgery by single-use tokens, and against automated abuse by reCAPTCHA, a hidden-field check, a timing check, and a per-address rate limit.
- Any file attached to a form is stored outside the public media library, under a randomised name, and can be downloaded only by an authorised administrator through a signed link.
- Input is validated and sanitised on arrival, and output is escaped on display.
- Administrative access is limited to the people who need it.
No system is perfectly secure. If a breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the supervisory authority within 72 hours and, where the risk is high, notify you directly.
Children
This website is aimed at aviation maintenance businesses, not at consumers or children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.
Automated decision-making and profiling
We do not carry out profiling and we do not make automated decisions with legal or similarly significant effects about you.
Links to other sites
This site links to third-party websites we do not control. This policy does not apply to them, and we are not responsible for their content or their privacy practices. Read their policies before giving them your data.
Changes to this policy
We may update this policy as the site or the law changes. The date at the top shows when it was last revised. If a change materially affects how we use data you have already given us, we will contact you directly where we hold a means of doing so.
Contact us
For any question about this policy or about how we handle your personal data:
V1AeroSolutions LLC
Șos. București Nord, Loc. Voluntari, Ilfov County, Romania
Email: partners@aironemro.com
Telephone: +40 746 326 275