Privacy Policy

In this Privacy Policy, we explain how and why we collect, process, and use your personal data. The term “data” is synonymous with “personal data.”

In this privacy policy, you will learn, among other things:

• what personal data we collect and process;
• the purposes for which we use your personal data;
• who has access to your personal data;
• how our data processing benefits you;
• how long we process your personal data;
• what rights you have regarding your personal data; and
• How to contact us.

This Privacy Policy applies to all individuals whose data we process (hereinafter referred to as “you”), regardless of how you contact us—for example, by phone, through an online appointment booking tool, on our website, via social media, at an event, etc. It applies to the processing of both personal data we have already collected and personal data we will collect in the future. 

For information on the collection and processing of personal data when using our website and social media platforms, particularly in connection with cookies and similar technologies, please also refer to ourCookie Policy.

2. Data controller

Centaurium Vintage Aviation AG
Girardstrasse 61
CH-2540 Grenchen
Switzerland

Email:events@hangar3.ch

3. What personal data do we process?

3.1 Master Data

Master data refers to basic information about you, such as your title, name, contact information, or date of birth. We collect master data primarily when you register with us as a customer or use our products and services. We also collect master data regarding contact persons and representatives of contractual partners, organizations, and government agencies. As part of our master data processing, we may also process sensitive personal data and information about third parties.

3.2 Contract Information

Contract data refers to personal data collected in connection with the conclusion or performance of a contract, such as the type and duration of a contract entered into between you and us, or the purchase date and product description. We primarily enter into contracts with customers and business partners, but also with other contractual partners.

3.3 Communication Data

When you contact us or we contact you—for example, when you write to us or call us—we process the content of the communication as well as information regarding the type, time, and location of the communication. Data you enter via email or through the website form is transmitted unencrypted. Therefore, we cannot rule out the possibility that data may be lost in transit or accessed by third parties. The online transmission of personal data is therefore at your own risk.

3.4 Behavioral & Transaction Data

3.5 Preference Data

We want to tailor our offerings to our customers as effectively as possible. For this reason, we also process data related to your interests and preferences. To do this, we may combine behavioral and transactional data with other data and analyze this data—both personal and non-personal. This allows us to draw conclusions about your characteristics, preferences, and likely behavior, such as your preferences and affinities for certain products and services.

3.6 Technical Specifications

When you use our website or other electronic services, we collect certain technical data, such as your IP address or device ID. Technical data also includes the logs in which we record the use of our systems (log data). In some cases, we may also assign a unique identifier (an ID) to your device (tablet, PC, smartphone, etc.), e.g., using cookies or similar technologies, so that we can recognize it. For more information, please see our Cookie Policy.

3.7 Other Data

We also collect data from you in other situations. For example, in connection with administrative or legal proceedings, data may be generated (such as files, evidence, etc.) that may also pertain to you.

4. Source of personal data

You often provide us with personal data yourself, for example, when you submit data to us or communicate with us. In particular, you usually provide us with master data, contract data, and communication data yourself. You also frequently provide us with preference data yourself. We may also collect personal data about you manually or automatically. This often includes behavioral and transaction data, as well as technical data. We may also derive personal data from existing personal data, e.g., by analyzing behavioral and transaction data. Such derived personal data often consists of preference data. We may also receive personal data about you from third parties, e.g., from companies with which we collaborate, from individuals who communicate with us, or from public sources.

5. Purposes of data processing and legal basis

We process your personal data for the following purposes based on the following legal grounds, to the extent required by applicable data protection law:

• Performance of the contract;
• Compliance with legal obligations;
• Consent given to us or to third parties;
• Our legitimate interests and those of third parties, in particular:
• Offering and providing services;
• Advertising and marketing;
• Maintaining contact and communicating with you;
• User management, identity verification, logins;
• Compliance with legal and regulatory obligations, law enforcement, civil,
• Administrative and criminal proceedings, appeals, investigations, and responding to inquiries from government agencies.

6. Disclosure to Third Parties

We may share your personal data with other companies when we use their services. As a rule, these service providers process personal data on our behalf as so-called “data processors.” Our data processors are obligated to process personal data exclusively in accordance with our instructions and to implement appropriate data security measures. Certain service providers are also jointly responsible with us or act independently (e.g., collection agencies). Through our selection of service providers and appropriate contractual agreements, we ensure that data protection is maintained throughout the entire processing of your personal data.

In certain cases, we may also share personal data with other third parties for their own purposes, for example, if you have given us your consent or if we are legally required or authorized to do so. In such cases, the recipient of the data is considered a separate data controller under data protection law.

Please also review ourCookie Policyregardingindependent data collection by third-party providers whose tools we have integrated into our website.

Your personal data is primarily stored in Switzerland and the European Economic Area (EEA). In certain circumstances, it may also be located outside the EEA; in exceptional cases, it may be located in any country in the world. The countries in question may not have laws that protect your personal data to the same extent as in Switzerland or the EEA. If we transfer your personal data to such a country, we will ensure the protection of your personal data in an appropriate manner.

7. Protection of Personal Data

We implement appropriate technical and organizational security measures to protect your data against accidental or intentional tampering, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological advancements.

8. Duration of data processing

We process and store your personal data,

• for as long as necessary for the purpose of the processing or for purposes compatible with that purpose; in the case of contracts, generally at least for the duration of the contractual relationship;
• as long as we have a legitimate interest in storing the data. This may be the case, in particular, when we need personal data to assert or defend against claims, for archiving purposes, and to ensure IT security;
• as long as they are subject to a legal retention requirement. Certain data is subject to retention periods of ten years or longer. Other data is subject to shorter retention periods, such as video surveillance recordings or records of certain online activities (log data).

9. Your Rights

Under certain circumstances, applicable data protection laws grant you the right to object to the processing of your data, particularly for the purposes of direct marketing (e.g., promotional emails), profiling for direct marketing, and other legitimate interests in processing.

Provided that the applicable conditions are met and no legal exceptions apply, you also have the following rights:

• the right to request information from us regarding whether we process your data and, if so, what data we process;
• the right to have inaccurate personal data corrected;
• the right to request the deletion of your personal data;
• the right to request that we provide you with certain personal data in a commonly used electronic format or transfer it to another controller;
• the right to withdraw consent with future effect, to the extent that processing is based on consent;
• the right to present your point of view in the case of automated individual decisions (Section 12) and to request that the decision be reviewed by a natural person;
• the right to receive, upon request, additional information that is helpful for exercising these rights.

Please note that these rights may be restricted or excluded in certain cases, for example, if there is doubt regarding your identity or if it is necessary to protect others, to safeguard legitimate interests, or to comply with legal obligations.

If you wish to exercise these rights, please contact us as described in Section 2.

You are also free to filea complaintwith the relevantsupervisory authority if you have concerns about whether your personal data is being processed in compliance with the law.

10. Changes

This Privacy Policy may be updated from time to time, particularly if we change our data processing practices or if new laws come into effect. We will actively notify individuals whose contact information is on file with us of any significant changes, provided that doing so does not entail a disproportionate effort. In general, data processing is governed by the version of the Privacy Policy that was current at the time the relevant processing began.

Grenchen, August 2025