Privacy policy

01 · Data controller

The entity responsible for processing personal data on this website is surge aero GmbH. Full contact details are published in the imprint.

02 · Scope

This policy covers personal data processed through the Surge Aero website and its related portal areas. It does not cover third-party websites linked from our pages.

03 · Data we collect

We may process the following categories of personal data:

• Contact form submissions — name, email, company, message content, and additional information you provide voluntarily.
• Newsletter subscriptions — email address and subscription preferences.
• Portal accounts — name, company, email, and authentication data for authorised users.
• Technical log data — IP address, browser user agent, and timestamps for security and debugging purposes.

04 · Purposes and legal basis

We process personal data based on applicable legal grounds, including contract performance, consent, and legitimate interests such as secure operation of the website and portal.

05 · Cookies and analytics

This website should only use strictly necessary cookies unless additional consent has been obtained. If analytics or further tracking tools are introduced, this policy must be updated accordingly.

06 · Sharing and processors

We do not sell personal data. Data may be shared with service providers acting on our behalf, such as hosting, email delivery, or identity-management providers, where legally permitted and contractually required.

07 · Retention

We retain personal data only for as long as necessary for the purposes described here or as required by law.

08 · Applicant Privacy (Recruitment)

When you apply for a position through the Surge Aero careers page, your application is processed via Join Solutions GmbH. We process your personal data solely for the purpose of evaluating your application and, where applicable, preparing an employment relationship.

Personal data we collect

• Contact details, such as your name, email address and phone number.
• CV/resume and application documents.
• Professional qualifications, work experience and other information you choose to provide.

Purpose and legal basis

• To evaluate your application — Article 6(1)(b) GDPR and, where applicable, Section 26 BDSG.
• Where special categories of personal data are voluntarily provided, Article 9(2)(a) GDPR applies.
• To establish, exercise or defend legal claims where necessary — Article 6(1)(f) GDPR.

Retention

If your application is unsuccessful, your application data will be retained for the period required by applicable law or legitimate business purposes and will then be deleted, unless you have consented to being considered for future opportunities.

Third-party processors

Applications submitted through our careers page are processed via Join Solutions GmbH. Additional service providers may process personal data on our behalf where necessary to operate the recruitment process and in accordance with applicable data protection laws.

09 · Your rights

You may have rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent, depending on the applicable legal framework.

10 · Security

We implement technical and organisational measures intended to protect personal data against unauthorised access, loss, or alteration, including transport encryption and access controls.

11 · Changes to this policy

We may update this privacy policy from time to time. The latest version is always published on this page.