Privacy Notice

The following definitions explain key terms used in this policy to clarify how we refer to personal data, processing activities and the services we provide through case-based coaching and director training.

We collect information necessary to deliver coaching services, manage accounts and improve learning materials. Collection is structured around real scenarios and practical cases submitted by participants, while aiming to minimize unnecessary personal identifiers.

Information you provide directly often relates to coaching intake, case materials and administrative needs. Typical items include:

• Full name and preferred contact details (email, phone) used for session scheduling and follow-up
• Professional role, organization and relevant background information to contextualize case scenarios
• Documents and case materials submitted for analysis during coaching (reports, anonymized datasets, board papers)
• Payment and billing details required to process program fees through our payment providers
• Feedback, assessments and evaluations collected after sessions to refine scenarios and training design
• Explicit consent choices and communications preferences related to marketing and research participation

Some information is collected automatically when you use our website or coaching platform to support service delivery, analytics and security.

• IP address, device type, browser and basic technical details used to optimize access to online learning materials
• Usage data such as pages visited, session duration and feature interactions to improve scenario-based content
• Cookies and similar identifiers to maintain session continuity and store consent preferences
• Log files and diagnostics collected for operational support and to detect unauthorized activity
• Analytics and aggregated engagement metrics used to evaluate the effectiveness of case studies and workshop formats
• Session recordings or transcripts when explicitly agreed for coaching quality review and trainer feedback

We may receive data about you from third parties to support payments, analytics or partner referrals. Examples include:

• Payment processors and banks for billing and fraud prevention
• Analytics and hosting providers that supply aggregated usage reports and technical hosting
• Organizational HR contacts or referrers who provide contextual details for case scenarios

We use personal data to operate and improve coaching programs, with an emphasis on learning from practical examples and scenarios. Uses include:

• Delivering coaching sessions, workshops and board simulations tailored to the participant’s cases
• Developing and refining anonymized case libraries and scenario exercises used in training
• Processing payments and managing billing for services purchased via aeronexaru
• Communicating scheduling information, session materials and follow-up actions to participants
• Conducting quality assessment and trainer review using recordings or notes where consent is provided
• Complying with legal obligations and responding to lawful requests from authorities
• Carrying out anonymized research to improve learning methodologies and scenario design
• Marketing communications when consent has been provided, focused on relevant case studies and upcoming workshops

We rely on appropriate legal bases for processing personal data in line with applicable law, including consent, contract necessity, legitimate interests and legal obligations.

• Contract performance: processing necessary to provide the coaching service you requested (scheduling, delivery, billing).
• Consent: where you explicitly agree to recordings, marketing communications or research participation.
• Legitimate interests: limited processing for security, fraud prevention and improving anonymized case materials where such interests do not override your rights.
• Legal compliance: processing required to meet regulatory duties or respond to lawful requests.

We share data only as necessary for service delivery, compliance or with service providers that help us operate. Wherever possible, we share anonymized or pseudonymized information for training and research.

• Vendors and service providers that support payments, hosting, analytics and communications
• Professional advisors and auditors engaged to support compliance or program quality reviews
• Legal authorities when required by law or in response to lawful requests
• Affiliates and partners assisting with joint programs, subject to contractual controls
• Research collaborators who receive anonymized case datasets under strict use restrictions
• Situations involving the sale or transfer of assets will follow applicable notice and contractual protections before personal data is transferred

We apply technical and organizational measures to protect personal data used in coaching and case analysis, including encryption, access controls and regular reviews. Security practices are designed to reduce risk while enabling trainers to work with practical case materials in a controlled manner.

• Encryption of data in transit and, where appropriate, at rest to protect session materials
• Role-based access controls and least-privilege principles for staff handling case submissions
• Regular security assessments, staff training and incident response procedures to address potential breaches

Depending on applicable law, you may have rights to access, correct or request deletion of your personal data. We provide mechanisms to exercise these rights and handle requests in a timely manner.

• Right to access personal data we hold about you and obtain a copy of that data
• Right to request correction of inaccurate or incomplete information
• Right to request deletion of personal data, subject to legal and contractual constraints
• Right to restrict or object to certain processing activities, including direct marketing where applicable
• Right to data portability for personal data you provided, in a structured, commonly used format where applicable
• Right to withdraw consent for processing activities that were based on consent without affecting processing done prior to withdrawal
• Right to lodge a complaint with a supervisory authority if you consider our processing of your personal data unlawful
• Right to withdraw consent: you can withdraw consent for specific processing activities at any time. Withdrawal affects future processing and does not make processing prior to withdrawal unlawful.

• Right of access: you may request a copy of personal data we hold. Example: a director requests a summary of session notes and associated documents used in leadership training.
• Right to rectification: you can ask us to correct inaccurate data. Scenario: a client updates their company role after promotion; we revise coaching records and case references.
• Right to erasure: you may request deletion of personal data where permitted by law. Case: removing a former participant's feedback from a public case study when consent is withdrawn.
• Right to restriction and portability: you can limit processing or request portable copies of your data. Practical case: exporting training progress reports to integrate with a corporate HR system.

If you believe your data rights under GDPR have been breached in relation to aeronexaru services, you may contact our data protection contact first to seek resolution. If unresolved, EU residents may file a complaint with their local supervisory authority. We provide examples of complaint steps to help directors document and present issues clearly.

Our services are designed for adults and business professionals. We do not intentionally collect personal data from individuals under 18. If we become aware that we have collected data from a minor, we will take steps to delete that information, and we will provide practical guidance for verifying and documenting any such deletion.

Materials on aeronexaru may link to partner sites, research databases, or tools used for case simulations. These third-party sites have their own privacy policies. We provide scenarios describing what data might be shared with partners (for example, anonymized case inputs for benchmarking) and how to review their terms before sharing identifiable information.

We may update this policy to reflect changes in services, legal requirements, or operational improvements. When substantial updates affect data handling for active director programs, we publish a summary of changes and practical examples of how they affect ongoing cases, with at least 30 days' notice where feasible.