This addendum to the California Privacy Notice ("California Notice") supplements the Privacy Notice and applies solely to visitors, users and other individuals who are residents of the State of California ("consumers" or "you"). Waeckerlin SwissAvTech Aviation Consulting GmbH ("we", "us", "our") have adopted this California Notice to comply with California privacy laws, including the California Consumer Privacy Act ("CCPA"). Any terms defined in the CCPA that are not defined herein shall have the same meaning when used in this California Notice.

Californian reference.

Privacy.

1. Collection and use of personal data

We collect data that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household ("personal data"). In addition, we may collect data that is not identifiable to you or otherwise linkable to you, such as aggregated data that is not personal data. To the extent that this data is stored or associated with personal data, it will be treated as personal data; otherwise it is not covered by this notice.

Use of personal data

We collect and process your personal data for our business purposes, which include the following:

Providing information tailored to your requests, responding to inquiries and delivering services and products
operating, maintaining and improving the quality of the Services and the content, products and/or services we make available through the Services
Communicating with you by email, post, telephone, push notification and other methods of communication, in each case with your consent where such consent is required in accordance with applicable laws, about products, services, order status and other matters
Comply with applicable laws, regulations, rules and requests from appropriate law enforcement and/or other governmental agencies
To endeavor to protect the rights, property or safety of us and our partners and the rights, property and safety of our users and other third parties
For marketing purposes, including sending messages to you about us, our partners and the products and services offered by us and our partners and processing personal data collected through social media platforms and web tracking technologies to target and understand our audience
For other purposes permitted or required by law.
We will not use the personal data we collect for any other unrelated or incompatible purposes without notifying you and obtaining your consent.

Transfer of personal data

We share personal data with the following categories of third parties:

Service Providers. We share personal data with our service providers, including those that provide aircraft support services such as maintenance and scheduling, payment processors, software and web developers, customer relationship management (CRM) services, communications services, order processing and fulfillment services, commercial mail/email providers, security consultants, data hosting services and other providers we engage to enable them to provide services to you, us or on our behalf
Third parties. We will share personal data with third parties if you ask us to do so or if we believe it is required by law or necessary to comply with applicable laws.

Processing of personal data

We collect and use your personal data in the following categories:

Identifiers
Personal data categories specified in the California Customer Privacy Act (Cal. Civ. Code 1798.80(e))
Characteristics of protected classifications under California or federal law;
Commercial information
Internet or other electronic network activity information
Geolocation data
Audio, electronic, visual, thermal, olfactory or similar information
Occupational or employment-related information.

2. your privacy rights in California

California Civil Code Section 1798.83, known as the "Shine the Light" law, permits our users who are California residents to request and obtain from us a list of the personal information (if any) that we have disclosed to third parties for their own direct marketing purposes during the preceding calendar year, as well as the names and addresses of those third parties. Requests can only be made once per year per person, must be sent to info@swissavtech.ch, and are free of charge.

We do not share personally identifiable information protected by the Shine the Light Act with third parties for their own direct marketing purposes.

The CCPA grants California residents the following rights:

1. right of access: You have the right to request that we disclose to you certain information about the personal data that we have collected, used and disclosed about you in the last 12 months. This includes a request for any or all of the following:

The categories of personal data collected about you
The categories of sources from which we have collected your personal data
The categories of personal information we have sold or shared for business purposes
The categories of third parties to whom your personal information has been disclosed for business purposes
Our business or commercial purpose for collecting or selling your personal information
The specific pieces of personal information we collected about you.

2. data portability: You have the right to request a copy of the personal data we hold about you.

3. right to erasure: You have the right to request that we erase the personal data we have collected and retained about you, subject to certain exceptions. Please note that if you request the erasure of your personal data, we may refuse your request or retain certain elements of your personal data where this is necessary for us or our service providers:

Complete the transaction for which the personal information was collected, provide a good or service requested by you or reasonably anticipated as part of our ongoing business relationship with you, or otherwise fulfill a contract between our company and you.
Detect security incidents, protect against malicious, deceptive, fraudulent or illegal activities or prosecute those responsible for such activities.
Troubleshooting to identify and fix errors that affect the intended functionality
Exercising the right of free speech, ensuring the right of another consumer to exercise his or her right of free speech, or exercising other rights provided by law.
Complying with the California Electronic Communications Privacy Act pursuant to Chapter 3.6 (commencing with Section 1546) of Title 12, Part 2 of the Penal Code.
To conduct public or peer-reviewed scientific, historical, or statistical research in the public interest that complies with all other applicable ethics and privacy laws, if deletion of the information would be likely to render impossible or seriously impair the performance of that research, provided you have given informed consent.
To enable only internal uses that are reasonably consistent with your expectations based on your relationship with us.
To comply with a legal obligation.
To use the personal data internally in a lawful manner that is compatible with the context in which you provided the information.

5. right to opt-out/in: You have the right to object to the sale of your personal data. You also have the right to opt out of the sale of personal data. However, we do not and will not sell your personal data.

6. right not to be discriminated against: You have the right not to be discriminated against by us in the exercise of your CCPA privacy rights. Except as permitted by the CCPA, we will not:

Deny you goods or services
Charge you different prices or rates for goods or services, including granting discounts or other benefits or imposing penalties.
Provide you with a different level or quality of goods or services.
Suggest to you that you may receive a different price or rate for goods or services or a different level or quality of goods or services. However, some of our services may require your personal data. If you choose not to provide your personal information, you may not be able to use these services. As described in the "YOUR CHOICES" section of the Privacy Notice, it is also possible to change your browser settings to prevent the automatic collection of certain information.

3. Submission of a verified consumer application

In order to exercise your rights of access, data portability and erasure, you must provide us with sufficient information to enable us to verify your identity and describe your request in sufficient detail for us to properly understand, assess and respond to it. Once we receive the information you provide, we will review it and decide whether further information is needed to verify your identity as required by law, and we may request additional information to do so.

To exercise your California privacy rights described above, please make a verifiable request to us by:

Emailing us at info@swissavtech.ch

Only you or a person authorized by you can make a verifiable request for your personal data.

You can only make a verifiable request for access or data portability twice within a 12-month period. The verifiable consumer request must:

Provide sufficient information to allow us to reasonably verify that you are the individual about whom we have collected personal information or an authorized representative. Given the sensitive nature of the personal information we collect and store, we must verify your identity using at least two pieces of information, such as your name (first and last name) and address.
Describe your request in sufficient detail for us to properly understand, evaluate and respond to it.
We may refuse your request if we are unable to verify your identity or have reason to believe that the request is fraudulent.

Consumer application by an authorized representative

If an authorized representative submits a consumer application on your behalf, to confirm the authority of that person or entity to act on your behalf and to verify the identity of the authorized representative, we must call the toll-free number listed above or email info@swissavtech.com and provide all the information listed below:

To verify your eligibility to apply on behalf of a California resident, you must provide one or more of the following: (1) authorization from the California Secretary of State, (2) written permission from the California resident, or (3) power of attorney.
To verify your identity, provide: (1) proof of your identity, and (2) your name (first and last) and address
To verify the identity of the California resident consumer for whom the request is being made, provide the consumer's name (first and last) and address.

We may request additional information to verify your identity and/or your authority to make the request. We will not be able to respond to your request or provide you with personal data if we cannot verify your identity or your authority to make the request and confirm that the personal data relates to you. Likewise, we will only use personal data provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.

Furthermore, we will acknowledge receipt of the request within 10 days of its receipt. We will respond to a verifiable consumer request within 45 days of its receipt. If we need more time (up to 90 days), we will notify you in writing of the reason and the extension period. We will provide you with our written response by mail or electronically, at your option. Any information we provide will only relate to the 12-month period preceding the receipt of the verifiable consumer request. In our response, we may also explain the reasons why we are unable to comply with a request. For data portability requests, we will provide the relevant information in a portable and, where technically feasible, in an easily usable format that allows you to transmit the information to another entity without hindrance.

We will not charge a fee for processing or responding to your verifiable consumer request unless it is excessive, repetitive or manifestly unfounded. If we conclude that the request warrants a fee, we will tell you the reasons for that decision and provide you with a cost estimate before we process your request.

4. Sale of personal data

We never sell your personal information to third parties for money. However, the CCPA defines the term "sale" broadly, and this definition could include information that we have shared with our service providers. In the last 12 months, we have "sold" (as defined in the CCPA) the following categories of personal information listed in Section 1 "Processing of Personal Information": 1, 2, 4, 5 and 6. We have shared this personal information with our service providers so that they can provide services to you, to us or on our behalf.

We do not and will not knowingly sell the personal information of minors under the age of 16 without express permission.

Do not track: We use analytics systems and vendors that process personal data about your online activities over time and across third-party websites or online services, and these systems and vendors may provide us with some of this information. We do not currently process or comply with "Do Not Track" signals from web browsers or similar mechanisms.

However, please note that you can find information on how to disable Google Analytics and/or block or opt-out of certain tracking technologies in our Cookie Notice.

5. Changes or updates to this California Notice

This California Notice supersedes any prior disclosures we may have made to you about our information practices with respect to the Services. We reserve the right to modify, change and/or update this California Notice at any time, and such modifications, changes or updates will be effective upon posting of the revised California Notice. We will make reasonable efforts to notify you when material changes are made to our processing activities and/or this California Notice, such as by posting a notice on the applicable Services for a specified period of time or by emailing you. Your continued use of the services following the posting of a revised California Notice constitutes your acknowledgment of the revised California Notice.

Additional information

If you have any questions or concerns about this California Notice and/or our processing of personal data, please contact us at: info@swissavtech.ch