GDPR Statement | AA World

Privacy Policy

Effective Date - January 10th 2025

At AA World, your privacy is our priority. We are committed to protecting your personal data and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws worldwide. This Privacy Policy explains how we collect, use, and protect your data, as well as your rights as a data subject.

Data Collection

We may collect your personal data in the following ways:

• Information you provide directly through account registration, contact forms, or inquiries.

• Details submitted via third-party logins (e.g., Google, Facebook, LinkedIn).

• Automatically collected data through your use of our website (e.g., IP address, cookies, activity logs).

• Information from external sources such as social media, search engines, or business partners.

Types of Personal Data Collected

• Identification Data: Name, date of birth, nationality, passport details.

• Contact Information: Address, email, phone number.

• Financial Data: Payment information, transaction history.

• Technical Data: IP address, browser type, cookie ID, and website activity.

• Sensitive Data: Health information or other special categories of personal data where legally permitted and with your explicit consent.

Purpose of Data Use

Your personal data may be used for the following purposes:

• To provide, manage, and improve our products and services.

• To process payments and fulfill contractual obligations.

• To personalize your experience with our services.

• To comply with legal and regulatory requirements.

• For marketing purposes, including newsletters and promotional offers, where consent has been provided.

• To analyze usage patterns and improve website functionality.

We ensure that the use of your data is limited to what is necessary for the purpose and handled securely.

Data Sharing

We may share your data under these circumstances:

• Within the Organization: For internal purposes such as improving services.

• Service Providers: For payments, IT infrastructure, or marketing support.

• Business Partners: To fulfill services like insurance policies.

• Legal Authorities: When required by law or to protect rights and safety.

• Business Transfers: In case of mergers, acquisitions, or reorganizations.

We take measures to ensure that third parties processing your data comply with GDPR and equivalent data protection standards.

International Data Transfers

As a global company, we may transfer your data outside your country of residence. For transfers originating from the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs).

• Binding Corporate Rules (BCRs).

• Certifications or adequacy decisions by the European Commission.

You can request further information about these safeguards by contacting us.

Data Retention

We retain personal data only as long as necessary for the purposes stated in this policy or to comply with legal obligations. When no longer needed, data will be securely erased, anonymized, or destroyed.

Data Subject Rights

As a data subject, you have the following rights under GDPR:

• Access: Request details about the personal data we hold about you.

• Rectification: Update or correct inaccurate information.

• Erasure: Request the deletion of your data (“Right to be Forgotten”).

• Portability: Receive your data in a machine-readable format or transfer it to another provider.

• Restriction: Temporarily stop us from processing your data.

• Objection: Opt out of processing for direct marketing or legitimate interests.

• Consent Withdrawal: Revoke your consent at any time for data processing based on consent.

• Complaint: Lodge a complaint with your local data protection authority.

You can exercise these rights by contacting us using the details below. We will respond within 30 days, as required by law.

Data Security

We implement strict technical and organizational measures to protect your data from unauthorized access, loss, or misuse. These include encryption, secure storage systems, and regular audits of our practices.

Cookies and Tracking

We use cookies and similar technologies to enhance your experience and analyze website performance. You can manage your cookie preferences in your browser settings. For more details, refer to our Cookie Policy.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and where appropriate, notified to you. Please review this policy periodically to stay informed.