Privacy Policy

A legal disclaimer

Last Updated On 05 February 2025
Effective Date 05 February 2025

This Privacy Policy describes the policies of Singapore Aviation Academy (SAA), Civil Aviation Authority of Singapore 60 Airport Boulevard, Changi Airport Terminal 2, #046-027, Singapore, 819643, email: qsm@caas.gov.sg, phone: (65) 6542 1122; JAA Training Organisation, Beechavenue 1 - 19, Noord-Holland 1119RA, Netherlands (the), email: communications@jaato.com, phone: 0235679790; XXX on the collection, use and disclosure of your information that we collect when you use our website ( https://a7programme.com) (the “Service”). By accessing or using the Service, you are consenting to the collection, use and disclosure of your information in accordance with this Privacy Policy. If you do not consent to the same, please do not access or use the Service.

We may modify this Privacy Policy at any time without any prior notice to you and will post the revised Privacy Policy on the Service. The revised Policy will be effective 180 days from when the revised Policy is posted in the Service and your continued access or use of the Service after such time will constitute your acceptance of the revised Privacy Policy. We therefore recommend that you periodically review this page.

Information We Collect:
We will collect and process the following personal information about you:

Name
Email
Country
Organisation Name
Gender

How We Use Your Information:
We will use the information that we collect about you for the following purposes:

Marketing/ Promotional
Support
Administration info

If we want to use your information for any other purpose, we will ask you for consent and will use your information only on receiving your consent and then, only for the purpose(s) for which grant consent unless we are required to do otherwise by law.

How We Share Your Information:
We will not transfer your personal information to any third party without seeking your consent, except in limited circumstances as described below:

Ad service
Analytics
We require such third party’s to use the personal information we transfer to them only for the purpose for which it was transferred and not to retain it for longer than is required for fulfilling the said purpose.

We may also disclose your personal information for the following: (1) to comply with applicable law, regulation, court order or other legal process; (2) to enforce your agreements with us, including this Privacy Policy; or (3) to respond to claims that your use of the Service violates any third-party rights. If the Service or our company is merged or acquired with another company, your information will be one of the assets that is transferred to the new owner.

Retention Of Your Information:
We will retain your personal information with us for 90 days to 2 years after user accounts remain idle or for as long as we need it to fulfill the purposes for which it was collected as detailed in this Privacy Policy. We may need to retain certain information for longer periods such as record-keeping / reporting in accordance with applicable law or for other legitimate reasons like enforcement of legal rights, fraud prevention, etc. Residual anonymous information and aggregate information, neither of which identifies you (directly or indirectly), may be stored indefinitely.

Your Rights:
Depending on the law that applies, you may have a right to access and rectify or erase your personal data or receive a copy of your personal data, restrict or object to the active processing of your data, ask us to share (port) your personal information to another entity, withdraw any consent you provided to us to process your data, a right to lodge a complaint with a statutory authority and such other rights as may be relevant under applicable laws. To exercise these rights, you can write to us at communications@jaato.com. We will respond to your request in accordance with applicable law.

You may opt-out of direct marketing communications or the profiling we carry out for marketing purposes by writing to us at communications@jaato.com.
Do note that if you do not allow us to collect or process the required personal information or withdraw the consent to process the same for the required purposes, you may not be able to access or use the services for which your information was sought.

Security:
The security of your information is important to us and we will use reasonable security measures to prevent the loss, misuse or unauthorized alteration of your information under our control. However, given the inherent risks, we cannot guarantee absolute security and consequently, we cannot ensure or warrant the security of any information you transmit to us and you do so at your own risk.

Third Party Links & Use Of Your Information:
Our Service may contain links to other websites that are not operated by us. This Privacy Policy does not address the privacy policy and other practices of any third parties, including any third party operating any website or service that may be accessible via a link on the Service. We strongly advise you to review the privacy policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Grievance / Data Protection Officer:
If you have any queries or concerns about the processing of your information that is available with us, you may email qsm@caas.gov.sg. We will address your concerns in accordance with applicable law.

Data Privacy Consent

By registering for the programme, you agree that the Incheon International Airport Corporation (IIAC) may collect, use, or disclose your personal data to the Singapore Aviation Academy (SAA) and the JAA Training Organisation (JAA TO) that collaborate for this joint programme or selected third-party service providers involved in this programme for general programme administration purposes. If you provide the personal data of third parties to the above-mentioned organizations, or if you complete this form on behalf of third parties, you represent and warrant that you are authorized to do so and that you have obtained their consent for the collection, use, and disclosure of their personal data for the above-stated purposes.

Transfers of personal data to third countries or international organisations

IAAA

This is a paragraph area where you can include any information you’d like. It’s an opportunity to tell a story about the business or describe a special service or product it offers. You can use this space to share the company history or highlight a particular feature that sets it apart from competitors.

Let the writing speak for itself. Keep a consistent tone and voice throughout the website to stay true to the brand image and give visitors a taste of the company’s values and personality.

JAA TO

This clause outlines the legal frameworks governing across-border data transfers and associated rights under the General Data Protection Regulation (GDPR). The Art. 44 GDPR “General principle for transfers”[1] apply.

Data Sharing with entity in South Korea (hereafter “IAAA”)

The European Commission has recognised that South Korea ensures an adequate level of data protection, as per its adequacy decision adopted on December 17, 2021. [2]

This decision permits the transfer of personal data from the European Union to South Korea without requiring additional safeguards.

Data Sharing with entity in Singapore (hereafter “CAAS”)

Currently, Singapore does not have an adequacy decision from the European Commission. Therefore, to ensure the protection of personal data when transferred to CAAS, JAA TO has implemented appropriate safeguards in compliance with GDPR requirements. This can be assured using standard contractual clauses, for data transfers between entities through so-called Art. 47 GDPR “Binding Corporate Rules,”[3] through the commitment to comply with Art. 40 GDPR “Codes of Conduct”[4], which have been declared by the European Commission as being generally applicable which legally bind CAAS to uphold data protection standards equivalent to those within the EU.

Your Rights

In accordance with the GDPR, you retain the following rights concerning your personal data:

Access: You may request confirmation as to whether your personal data is being processed and, if so, access to that data.
Rectification: You have the right to request the correction of any inaccurate or incomplete personal data.
Erasure: You can request the deletion of your personal data under certain conditions.
Restriction of Processing: You may request limitations on the processing of your personal data under specific circumstances.
Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
Objection: You can object to the processing of your personal data on grounds relating to your particular situation.