1. content
Among other things, you will learn in this privacy policy:
- which personal data we collect and process;
- the purposes for which we use your personal data;
- who has access to your personal data;
- what benefits our data processing has for you;
- how long we process your personal data;
- what rights you have in relation to your personal data; and
- how you can contact us.
This Privacy Policy applies to all persons whose data we process ("you"), regardless of how you contact us, e.g. by telephone, via an online appointment booking tool, on our website, via a social network, at an event, etc. It applies both to the processing of personal data already collected and to personal data collected in the future.
For information on the collection and processing of personal data when using our website and social media presence, in particular in connection with cookies and similar technologies, please also consult our Cookie Policy.
2. responsible for data processing
Centaurium Vintage Aviation AG
Girardstrasse 61
CH-2540 Grenchen
Switzerland
E-mail: events@hangar3.ch
3 What personal data do we process?
"Personal data" is information that can be linked to a specific person. We process various categories of such personal data. The most important categories are listed below for your guidance. However, we may also process other personal data in individual cases.
3.1 Master data
Master data is the basic data about you, such as title, name, contact details or date of birth. We collect master data in particular when you register with us as a customer or use our products and services. We also collect master data about contact persons and representatives of contractual partners, organizations and authorities. We may also process particularly sensitive data and information about third parties as part of master data.
3.2 Contract data
Contract data is personal data that arises in connection with the conclusion or execution of a contract, e.g. the type and duration of a contract concluded between you and us or the date of purchase, the product name. We conclude contracts primarily with customers and business partners, but also with other contractual partners.
3.3 Communication data
If you are in contact with us or we are in contact with you, e.g. if you write or call us, we process the exchanged communication content and information about the type, time and location of the communication. The data you enter by e-mail or via the website form is transmitted unencrypted. It can therefore not be ruled out that data may be lost in transit or viewed by third parties. The online transmission of personal data is therefore at your own risk.
3.4 Behavioral and transaction data
When you use our products or services, we often collect data about this use and about your behavior in general.
3.5 Preference data
We want to tailor our offers to our customers in the best possible way. We therefore also process data on your interests and preferences. For this purpose, we can combine behavioral and transaction data with other data and evaluate this data on a personal and non-personal basis. This allows us to draw conclusions about characteristics, preferences and expected behavior, e.g. your preferences and affinities for certain products and services.
3.6 Technical data
When you use our website or other electronic offers, we collect certain technical data such as your IP address or a device ID. The technical data also includes the logs in which we record the use of our systems (log data). In some cases, we may also assign your end device (tablet, PC, smartphone, etc.) a unique identification number (an ID), e.g. using cookies or similar technologies, so that we can recognize it. You can find further information in our cookie policy.
3.7 Other data
We also collect data from you in other situations. In connection with official or court proceedings, for example, data is collected (such as files, evidence, etc.) that may also relate to you.
4. origin of the personal data
You often provide us with personal data yourself, e.g. when you transmit data to us or communicate with us. In particular, you usually provide us with master data, contract data and communication data yourself. You also often provide us with preference data yourself. We can also collect personal data about you ourselves or automatically. This often involves behavioral and transaction data as well as technical data. We can also derive personal data from existing personal data, e.g. by evaluating behavioral and transaction data. Such derived personal data is often preference data. We may also receive personal data about you from third parties, e.g. from companies we work with, from people who communicate with us or from public sources.
5 Purposes of data processing and legal basis
We process your personal data for the following purposes on the basis of the following legal bases, insofar as this is required under the applicable data protection law:
- Contract fulfillment;
- Fulfillment of legal obligations;
- Consent given to us or third parties;
- Legitimate interests of us and third parties, in particular:
- Offering and providing services;
- Advertising and marketing;
- Maintaining contact and communication with you;
- User administration, identity checks, logins;
- Compliance with legal and regulatory obligations, law enforcement, civil and criminal law,
- Administrative and criminal proceedings, complaints, investigations and responding to inquiries from authorities.
6. disclosure to third parties
We may pass on your personal data to other companies if we use their services. As a rule, these service providers process personal data on our behalf as so-called "processors". Our processors are obliged to process personal data exclusively in accordance with our instructions and to take appropriate data security measures. Certain service providers are also jointly or independently responsible with us (e.g. debt collection companies). We ensure that data protection is guaranteed throughout the processing of your personal data by selecting the service providers and through suitable contractual agreements.
In individual cases, it is also possible that we may pass on personal data to other third parties for their own purposes, e.g. if you have given us your consent or if we are legally obliged or entitled to do so. In these cases, the recipient of the data is a separate controller under data protection law.
Please also note our cookie policy regarding independent data collection by third-party providers whose tools we have integrated on our website.
Your personal data is primarily located in Switzerland and the European Economic Area (EEA). Under certain circumstances, it may also be located outside the EEA, in exceptional cases in any country in the world. The countries concerned may not have laws that protect your personal data to the same extent as in Switzerland or the EEA. If we transfer your personal data to such a country, we will ensure the protection of your personal data in an appropriate manner.
7. protection of personal data
We use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
8. duration of data processing
We process and store your personal data,
- as long as it is necessary for the purpose of processing or compatible purposes, in the case of contracts generally at least for the duration of the contractual relationship;
- as long as we have a legitimate interest in the storage. This may be the case in particular if we need personal data to enforce or defend against claims, for archiving purposes and to ensure IT security;
- as long as they are subject to a statutory retention obligation. Ten-year or longer retention periods apply to certain data. Shorter retention periods apply to other data, e.g. for recordings from video surveillance or for recordings of certain processes on the Internet (log data).
9. your rights
Under certain circumstances, the applicable data protection law grants you the right to object to the processing of your data, in particular for the purposes of direct marketing (e.g. advertising emails), profiling for direct advertising and other legitimate interests in processing.
If the applicable requirements are met and no statutory exceptions apply, you also have the following rights:
- the right to request information from us as to whether and which of your data we process;
- the right to have incorrect personal data corrected;
- the right to request the deletion of your personal data;
- the right to obtain from us the personal data concerning you in a commonly used electronic format or to transmit those data to another controller;
- the right to withdraw consent with effect for the future, insofar as processing is based on consent;
- the right to express your point of view on automated individual decisions (point 12) and to request that the decision be reviewed by a natural person;
- the right to receive, upon request, further information that is helpful for the exercise of these rights.
Please note that these rights may be restricted or excluded in individual cases, e.g. if there are doubts about your identity or if this is necessary to protect other persons, to safeguard interests worthy of protection or to comply with legal obligations.
If you wish to exercise these rights, please contact us in accordance with section 2.
You are also free to lodge a complaint with the competent supervisory authority if you are concerned that your personal data is being processed in accordance with the law.
10. changes
This privacy policy may be amended over time, in particular if we change our data processing or if new legislation becomes applicable. We will actively inform persons whose contact details are registered with us of any significant changes if this is possible without disproportionate effort. In general, the data protection declaration in the version current at the start of the relevant processing applies to data processing.
Grenchen, august 2025