British Aerobatic Academy, (us, our, we, BAA) is committed to protecting and respecting your privacy.
It is important that you read this policy together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data. This privacy notice supplements the other notices and is not intended to override them. If, for any reason, you do not agree to the terms of this policy, please stop using this Website or App.
Please note that our Website or App are not directed at children under the age of 13 and we do not knowingly collect personal information about children.
Where this Policy refers to ‘personal data’ it is referring to data about you from which you could be identified – such as your name, your date of birth, your contact details and even your IP address.
The personal data collected depends on how you interact with us and our Website or App. You can browse the Website or App, you can fill in forms on the Website or App to request information, download blogs and other activities, and can interact with us directly via other means.
We may collect and hold the following personal data (these will not always be personal data, depending on the context in which they are collected, the actual data collected, and whether the data collected allows us to directly or indirectly identify you) from you:
We use different methods to collect data from and about you including:
when you voluntarily supply your personal data to us, for example:
if you use the Website or App to upload or send personal data (by filling out a form, subscribing to a publication or newsletter, ‘contact us’ via an online form, taking part in an online survey, posting a comment, entering competitions, or similar activities in which you volunteer data about yourself); if you contact us by post, telephone, email or SMS, if you provide us with your data in person; and if you report a problem with a Website or App; we may also collect information about you when you visit the Website or App through the use of technologies such as cookies, for example Google Analytics and HotJar; through third parties to which you provide personal data, for example Mailchimp and Google Analytics.
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
where we need to perform the contract we are about to enter into or have entered into with you;
where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests; and/or where we need to do so in order to comply with a legal or regulatory obligation.
The following table sets out how we handle your personal data, the purposes for which we use it, and our legal basis for doing so under GDPR and Data Protection Act 2018.
Our Legal Basis for Processing
Use your contact details and name to respond to a query or discussion in relation to our services or your services..
We do this on the basis that it is necessary step to take at your request in order to enter into, or discuss entering into, any agreement for our or your services.
Use your contact details and name to contact you regarding the services we provide.
We do this on the basis that it is necessary for the purposes of our legitimate interests so that we can gather more information for the provision of our services, or to deliver the services most effectively. Such legitimate interests are not overridden by your rights and freedoms, as all of our services are business-to-business in nature, and so this contact is low-risk in nature.
Use your contact details to send you our regular newsletter.
We do this on the basis that it is necessary for the purposes of our legitimate interests so that we can provide you with our newsletter. You will always have the option to opt-out of this newsletter.
Use your contact details to send you email marketing about products and services which we may provide to you.
We do this on the basis that it is necessary for the purposes of our legitimate interests so that we can provide you with relevant information as to our products and services.
You will always have the option to opt-out of these marketing emails.
Use your personal data as required to fulfil any obligations arising from any contracts entered into between us and you.
We do this on the basis that it is necessary for the performance of our contract with you.
Use your personal data, in particular data as to how you access and use our Website or App, to personalise your experience of our Website or App, to help us to respond better to your individual needs and to improve our services and customer experience.
We do this on the basis that it is necessary in our legitimate interest to ensure that our Website or App is delivered, and our services are provided, in the best possible way.
To send you periodic email or notifications about our services, technology, events and any updates or changes to them.
it is necessary in our legitimate interest to keep you up to date on our services, technology and events; and some communications with you are necessary for the performance of our contract with you under which we are obliged to provide you with services.
To create and analyse Website or App usage, data on the devices used to access our Website or App and our services generally, including to monitor and improve performance.
We do this on the basis that it is necessary in our legitimate interests to constantly monitor and seek to improve our performance.
We may review your personal data if we have reason to believe that our services or our Website or App have been used unlawfully or illegally, or if any services provided to you have resulted in an unlawful or illegal act. We do this on the bases that:
it is necessary in our legitimate interest to ensure that our services are being used appropriately and lawfully; and
where relevant, it is necessary to protect your or any third party’s vital interests – this will only be the basis where we have reason to believe that you or any third party have or may come to harm.
In some circumstances we will anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.
From time to time, we may send you information regarding that which we perceive may be of interest to you or your business. You may receive this information by letter, telephone or email.
We send this marketing on the basis that it is necessary for the purposes of our legitimate interests so that we can provide you with relevant information as to our products and services. You will always have the option to opt-out of these marketing emails by emailing us.
Depending on how and why you provide us with your personal data we may share it in the following ways:
if we were to sell or buy any business or assets, in which case we might disclose your personal information to the prospective seller or buyer of such business or assets as part of that sale;
if BAA or substantially all of its assets are acquired by a third party, in which case personal information held by us about our customers will be one of the transferred assets;
We require all third parties to respect the security of your personal data and to treat it in accordance with the law. They will not share your personal information with any organisation apart from us. They will hold it securely and retain it for the period we instruct.
Please note that some of our service providers may be based outside of the European Economic Area (the “EEA”). These service providers may work for us or for one of our suppliers and may be engaged in, among other things, the fulfilment of your order, the processing of your payment details and the provision of support services. By submitting your personal information, you agree to this transfer, storing or processing. Where we transfer your data to a service provider that is outside of the EEA we seek to ensure that appropriate safeguards are in place to make sure that your personal data is held securely and that your rights as a data subject are upheld. Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:
we will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission;
where we use certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe; or where we use providers based in the US, we may transfer data to them if they are part of the Privacy Shield which requires them to provide similar protection to personal data shared between Europe and the US.
How long do we keep your personal data?
We will hold your personal information on our systems only for as long as required to provide you with the services you have requested or to perform the purpose for which that data was collected. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
Where you sign up to receive e-mail marketing from us we will retain your e-mail address on file should you ever ‘opt-out’ of receiving e-mails from us. We will retain your e-mail address in this way in order to ensure that we continue to honour and respect that opt-out request.
In some circumstances you can ask us to delete your data: see ‘Your Rights’ below for further information.
We take the protection of your information very seriously. We use encryption (SSL) to protect your personal data when appropriate, and all the information provided to us is stored on secure servers once we receive it. We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.
We may store your personal data on secure servers either on our premises or in secure third-party data centres. If we ever give you (or where you have chosen) a password which enables you to access certain parts of this Website or App, you are responsible for keeping this password confidential. We ask you not to share a password with anyone.
You have the following rights in relation to the personal data held on you by the Group:
If you wish to learn more about these rights please contact BAA on the address below.
Last updated December 2020.
British Aerobatic Academy – Registered in England and Wales as a Limited Company under number 08268680. Registered office 16 Apley Way, Lower Cambourne, Cambridge, England, CB23 6DF.
A cookie is a small text file that is placed on a computer or other device and is used to identify the user or device and to collect information. Cookies are typically assigned to one of four categories, depending on their function and intended purpose: absolutely necessary cookies, performance cookies, functional cookies, and cookies for marketing purposes.
absolutely necessary cookies: These cookies are essential to enable you to move around a Website or App and use its features. Without these cookies particular services cannot be properly provided.
performance cookies: These cookies collect information about how you use our services and Website or App. Information collected includes, for example, the Internet browsers and operating systems used, the domain name of the website previously visited, the number of visits, average duration of visit, and pages viewed. These cookies do not collect information that personally identifies you and only collect aggregated and anonymous information. Performance cookies are used to improve the user-friendliness of a website and enhance your experience.
functionality cookies: These cookies allow the our Website or App to remember choices you make and provide enhanced, more personal features. These cookies can also be used to remember changes you have made to text size, fonts, and other customisable parts of web pages. They may also be used to provide services you have asked for. The information these cookies collect may be anonymised, and they cannot track your browsing activity on other websites.
targeting and advertising cookies: These cookies track browsing habits and are used to deliver targeted (interest-based) advertising. They are also used to limit the number of times you see an ad and to measure the effectiveness of advertising campaigns. They are usually placed by advertising networks with the website operator’s permission. They remember that you have visited a website and this information is shared with other organisations, such as advertisers.
BAA uses many cookies to make our Website, App and services work. These include cookies that customise your experience, recognise you when you return to our Website and services and generally improve your user experience.
Sometimes advertising cookies may be set on the domain of the site you’re visiting. In the case of advertising our services across the web, cookies may be set on the domain of the site you’re visiting. Unlike cookies that are set on Google’s own domains, these cookies can’t be read by Google when you’re on a site other than the one on which they were set. They serve purposes such as measuring interactions with the ads on that domain and preventing the same ads from being shown to you too many times.
Google also uses conversion cookies, whose main purpose is to help advertisers determine how many times people who click on their ads end up purchasing their products. These cookies allow Google and the advertiser to determine that you clicked the ad and later visited the advertiser’s site. Some of BAA’s other cookies may be used to measure conversion events as well. For example, DoubleClick and Google Analytics cookies may also be used for this purpose.
You can manage website cookies in your browser settings, and you always have the choice to change these settings by accepting, rejecting, or deleting cookies. If you choose to change your settings, you may find that certain functions and features will not work as intended on our Website and services. All browser settings are slightly different, so to manage cookies, you should refer to the relevant settings within your browser.
We understand that you may want to know more about cookies. Here are some useful resources that provide detailed information about types of cookies, how they are used, and how you can manage your cookie preferences: www.aboutcookies.org or www.allaboutcookies.org.