Privacy Policy AIRCARGOWEB Mobile App

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation - GDPR), OPERADOR DE SERVICIOS AEROPORTUARIOS SL informs users of the AirCargoWEB application (hereinafter, the Application) about the processing of personal data they voluntarily provide during the registration, access, and use of the service.

1. IDENTIFICATION OF THE DATA CONTROLLER. OPERADOR DE SERVICIOS AEROPORTUARIOS SL, with CIF/NIF No.: B66650375 and address for notification purposes at: C. Carga Aeropuerto El Prat, Building Cargoparc, Office A119 (hereinafter, the Data Controller), is the entity responsible for processing the data provided by the Application's clients (hereinafter, the User(s).

2. PURPOSE OF DATA PROCESSING. To register, access, and subsequently use the Application, the User must voluntarily provide personal data (essentially, identification and contact information). This data will be stored in automated media owned by OPERADOR DE SERVICIOS AEROPORTUARIOS SL. The collection, storage, modification, structuring, and, where appropriate, deletion of the data provided by Users will constitute processing operations carried out by the Controller, for the purpose of ensuring the proper functioning of the Application, maintaining the service provision relationship with the User, and for the management, administration, information provision, and improvement of the service.

3. LEGAL BASIS. The processing of the User's data is carried out on the following legal bases that legitimize it:
• The request for information and/or the contracting of the Application's services, the terms and conditions of which will be made available to the User in all cases, prior to their express acceptance.
•The free, specific, informed, and unequivocal consent of the User, by making this privacy policy available to the User, which must be accepted through a statement or a clear affirmative action, such as checking a box provided for this purpose. If the User does not provide their data to OPERADOR DE SERVICIOS AEROPORTUARIOS SL, or does so in an erroneous or incomplete manner, it will not be possible to proceed with the use of the Application.

4. STORAGE OF PERSONAL DATA. The personal data provided by the User will be stored in the Data Controller's systems and databases while the User continues to use the Application, and as long as the User does not request its deletion. In order to determine any potential liabilities arising from the processing, the data will be stored for a minimum period of five years.

5. RECIPIENTS. The data will not be communicated to any third party outside of OPERADOR DE SERVICIOS AEROPORTUARIOS SL, except where required by law or, in any case, upon request for the User's consent. Furthermore, OPERADOR DE SERVICIOS AEROPORTUARIOS SL may provide access to or transmit the personal data provided by the User to third-party service providers with whom it has entered into data processing agreements, and who will only access said information to provide a service for and on behalf of the Controller.

6. DATA RETENTION. OPERADOR DE SERVICIOS AEROPORTUARIOS SL informs the User that, as a data hosting service provider and pursuant to the provisions of Law 34/2002 of July 11, on Information Society Services and Electronic Commerce (LSSI), it retains for a maximum period of 12 months the essential information to identify the origin of the hosted data and the time at which the service was provided. The retention of this data does not affect the confidentiality of communications and may only be used within the framework of a criminal investigation or to safeguard public security, and is made available to judges and/or courts or the Ministry that so requests. The communication of data to the State Security Forces will be carried out.

7. PROTECTION OF HOSTED INFORMATION. The Data Controller adopts the necessary measures to guarantee the security, integrity, and confidentiality of the data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. Although the Data Controller makes backup copies of the content hosted on its servers, it is not responsible for the accidental loss or deletion of data by Users. Likewise, it does not guarantee the complete restoration of data deleted by Users, as such data may have been deleted and/or modified during the period since the last backup. The services provided or rendered through the Application, except for specific backup services, do not include the restoration of content stored in backup copies made by the Data Controller when this loss is attributable to the user; in this case, a fee will be determined according to the complexity and volume of the recovery, always subject to the user's consent. The restoration of deleted data is only included in the price of the service when the loss of content is due to causes attributable to the Data Controller.

8. EXERCISE OF RIGHTS. OPERADOR DE SERVICIOS AEROPORTUARIOS SL informs the User that they have the rights of access, rectification, restriction, erasure, objection, and portability, which they may exercise by sending a request to the following email address: info@osa.aero. Likewise, the User has the right to revoke the consent initially granted and to file claims with the Spanish Data Protection Agency (AEPD).

9. COMMERCIAL COMMUNICATIONS VIA ELECTRONIC MEANS. In accordance with the LSSI (Information Society Services Act), OPERADOR DE SERVICIOS AEROPORTUARIOS SL will not send advertising or promotional communications by email or other equivalent means of electronic communication that have not been previously requested or expressly authorized by the recipients. In the case of users with whom there is a prior contractual, legal, or service relationship, the Data Controller is authorized to send commercial communications regarding products or services of the Controller that are similar to those initially contracted with the client. If the User wishes to unsubscribe from receiving these communications, they may do so by sending their request by email to info@osa.aero.

10. PROCESSING OF GPS LOCATION INFORMATION IN THE BACKGROUND. In the case of the AirCargoWeb app and other company apps, during use of the application, they collect location and GPS positioning data from users for the company's internal management purposes, such as route optimization, logistics management, and the delivery and collection of goods, as well as supporting documentation demonstrating the management of goods deliveries and collections. The personal data provided by the User, including their location using latitude, longitude, speed, and username, will be kept in the Data Controller's systems and databases as long as the User continues to use the Application and as long as they do not request its deletion.

11. REQUEST TO DELETE THE AIRCARGOWEB APP USER ACCOUNT. In the case of the AirCargoWeb app and the company's other apps, a username and password are required to access the APP.
The user may request the deletion of the corresponding account and the user's personal data through the contact form or by emailing info@osa.aero. It is NOT possible to register as a user automatically through a form or in the AirCargoWeb APP itself. User accounts are exclusive to AirCargoWeb employees. And if an employee leaves the company, the account will be automatically deleted from the APP.