Privacy Statement

Protecting the privacy of our website visitors.

AerSale^® and its affiliated companies and subsidiaries (“AerSale,” “we,” or “us”) are committed to protecting the privacy of visitors of the AerSale website(s), individuals who register to use our products and services, individuals who register to attend our corporate events, and our business partners (“Customers”). This Privacy Notice (“Privacy Notice” or “Notice”) describes our privacy practices in relation to the use of AerSale websites (including any customer portal or interactive customer website), its services, solutions, tools, and related applications, services, and programs offered by AerSale to its Customers (the “Services”).

This Privacy Notice describes how we collect, use, disclose, and otherwise process personal data related to the Services and otherwise in the course of our business activities, including the information practices of the websites that link to this Privacy Notice (“Sites”).

This Privacy Notice does not apply to information collected about AerSale employees, applicants, or other personnel.

The AerSale Sites may contain links to other websites and information practices and the content of such other websites shall be governed by the privacy statements of such other websites.

Our Commitment to GDPR

On May 25, 2018, the European Union’s General Data Protection Regulation (GDPR) went into effect. GDPR regulates the governance of personal data for EU citizens with an emphasis on data security and privacy. The GDPR does not only apply to companies that operate in the EU. This regulation also impacts companies operating outside of the EU if they have any EU customers or personal data of anyone in the EU.

AerSale has made information security and data privacy foundational principles of everything we do, and we recognize the importance of establishing policies to advance information security and data privacy for citizens of the EU. We are firmly committed to GDPR readiness.

Customer-Owned Data

As a provider of Services, we may receive, process or store certain information, including personal information, on behalf of our Customers. All such information (“Customer Data”) is owned and controlled by our Customers, who are the data controllers for such information with respect to EU data protection law. Customer Data may include information from the end points and other systems, tools or devices that Customers manage or monitor using our Services, and end user data related to individuals activities on Customer’s network and systems. It may also include event logs, end user information (such as IP address, email address and computer name), and other data where relevant to a support or service a request. AerSale is a data processor for Customer Data.

Data Relating to Our Customers and Users of Our Sites. AerSale collects information as part of its normal business operations and in the administration of its relationship with Customers, which may include personal information.

Business Contact and Customer Relationship Management. We collect and maintain information about our Customers, which may include company name, business contact name and title, phone number, email, and other contact details. We may also collect billing address, financial account, credit card information, order details, subscription and license information, and usage details. In addition, we collect user credential and profile data (name, contact, authorized users) of Customer’s authorized users and account administrators.

Data Submitted on Sites. In order to access or use certain portions of the Sites, to enjoy the full functionality of the Sites, or to conduct or seek to conduct business with us, you may be prompted to provide certain personal data to us, including in the following ways:

• By filling in forms (for example, a ‘Contact Us’ form) on our Sites or at a trade show or anywhere else we conduct business
• By downloading or accessing the AerSale Services
• By downloading documentation from our Sites
• By subscribing to newsletters or other communications or
• By corresponding with us by phone, email, or otherwise using our contact details

Typically, the personal data you give us may include name, business affiliation, business address, telephone number, and email address, and any personal details required to resolve any inquiries or complaints.

Third Parties. We may also obtain personal data about Customers from third parties, such as LinkedIn and other publicly accessible sources.

When you visit our Sites, our server automatically collects certain browser or device generated information, which may in some cases constitute personal data, including but not limited to:

• Your domain
• Your IP address
• Your date, time, and duration of your visit
• Your browser type
• Your operating system
• Your page visits
• Information from third parties
• Other information about your computer or device or
• Internet traffic

De-identified Data. We may de-identify and aggregate certain data we collect such that the data no longer identifies or can be linked to a particular customer or an individual data subject (“De-identified Data”), subject to the terms of any applicable customer agreements. We may use this data to improve our Services, analyze trends, publish market research, and for other marketing, research, or statistical purposes, and may disclose such data to third parties for these specific purposes.

Other Data. AerSale collects, uses, and maintains certain data related to its business and the Services it provides to Customers, which is not personal data. This privacy notice does not restrict our use and processing of such data, some of which we describe below.

Cookies

Our Sites use cookies. More information about our use of cookies can be found in our cookie policy at https://www.aersale.com/cookies.

Use of Personal Data

The following is an overview of our purposes for using personal data. Additional details on how we process your personal data may be provided to you in a separate notice or contract.

For individuals in the European Union, our processing (i.e. use) of your personal data is justified on the following legal bases:

• The processing is necessary to perform a contract with you or take steps to enter into a contract at your request
• The processing is necessary for us to comply with a relevant legal obligation
• The processing is in our legitimate interests, subject to your interests and fundamental rights, and notably our legitimate interest in using applicable data to conduct and develop our business activities or
• You have consented to the processing

We use the personal data we collect to:

• Conduct and develop our business with you and with others
• Operate, evaluate, maintain, improve, and develop the Sites (including by monitoring and analyzing trends, access to, and use of the Sites for advertising and marketing)
• Evaluate, improve, and develop our Services generally
• Customize our Sites to users’ needs
• Engage you about events, promotions, the Sites and AerSale’s Services
• Provide you with documentation or communications which you have requested
• Correspond with users to resolve their queries or complaints
• Provide you with any Services you request
• Send you marketing communications, where it is lawful for us to do so
• Protect and ensure safety of the Sites, AerSale confidential and proprietary information, and AerSale employees
• Manage, protect against, and investigate fraud, risk exposure, claims, and other liabilities, including but not limited to violation of our contract terms or laws or regulations

Disclosure of Personal Data

AerSale is a global group of companies, and we may share personal data with our affiliated businesses as part of our business operations and administration of the Services. We may also appoint third party service providers (who will operate under our instructions) to assist us in providing information, products, or services to you, in conducting and managing our business, or in managing and improving our Services or the Sites. AerSale may share your personal data with these affiliates and third parties to perform services that the third parties have been engaged by AerSale to perform on AerSale’s behalf, subject to appropriate contractual restrictions and security measures, or if we believe it is reasonably necessary to prevent harm or loss, or we believe that the disclosure will further an investigation of suspected or actual illegal activities.

AerSale reserves the right to share any information that is not deemed personal data or is not otherwise subject to contractual restrictions.

We contractually require agents, service providers, and affiliates who may process personal data related to the Services to provide the same level of protections for personal data as required by the GDPR. AerSale currently does not transfer personal data to a third party for the third party’s own use, but only for AerSale’s purposes as outlined above.

Other Disclosures

Law Enforcement or National Security. In accordance with our legal obligations, we may also transfer Customer Data, subject to a lawful request, to public authorities for law enforcement or national security purposes.

Additional Disclosures. We may also disclose Customer Data (including any personal data), where otherwise required by law.

Business Transfers. We may share personal data with third parties in connection with potential or actual sale of our company or any of our assets, or those of any affiliated company, in which case personal data held by us about our users may be one of the transferred assets.

Just-in-Time Disclosures. Additional disclosures or information about processing of personal information related to specific websites, mobile applications, products, services, or programs may be provided to you. These may supplement and/or clarify AerSale privacy practices in specific circumstances and provide you with additional choices as to how AerSale may process your personal information.

Children

The AerSale website is not for use by children under the age of 16 years and AerSale does not knowingly collect, store, share, or use the personal data of children under 16 years. If you are under the age of 16 years, please do not provide any personal data, even if prompted by the website to do so. If you are under the age of 16 years and you have provided personal data, please ask your parent(s) or guardian(s) to notify AerSale and AerSale will delete all such personal data.

Marketing

Where lawful to do so, and subject to your consent where required, we may communicate with Customers (and related business contacts) about our Services. If you wish to unsubscribe from receiving marketing communications, please click the “Email Preferences” link on any of our emails to request that we stop sending you communications.

Security

AerSale aims to safeguard and protect your personal data from unauthorized access, improper use or disclosure, unauthorized modification or unlawful destruction or accidental loss, and utilizes and maintains certain reasonable processes, systems, and technologies to do so. However, you acknowledge that no environment is completely secure or error-free, and that these processes, systems, and technologies utilized and maintained by AerSale are subject to compromise. Accordingly, we cannot be held responsible for unauthorized or unintended access that is beyond our control.

Retention of Your Personal Data

We apply a general rule of keeping personal data only for as long as required to fulfill the purposes for which it was collected. However, in some circumstances, we may retain personal data for other periods of time, for instance where we are required to do so in accordance with legal, tax, and accounting requirements, or if required to do so by a legal process, legal authority, or other governmental entity having authority to make the request, for so long as required. In specific circumstances, we may also retain your personal data for longer periods of time corresponding to a statute of limitation, so that we have an accurate record of your dealings with us in the event of any complaints or challenges.

External Links

The Sites may contain links to third party sites. Since AerSale does not control nor is responsible for the privacy practices of those websites, we encourage you to review the privacy policies of these third party sites. This Policy applies solely to personal data collected by our Sites or in the course of our business activities.

Your Rights

Subject to applicable law, you may have rights available to you in respect of your personal data, including:

• To obtain a copy of your personal data together with information about how and on what basis that personal data is processed
• To rectify inaccurate personal data (including the right to have incomplete personal data completed)
• To erase your personal data (in limited circumstances, such as where it is no longer necessary in relation to the purposes for which it was collected or processed)
• To restrict processing of your personal data under certain circumstances
• To port your data in machine-readable format to a third party (or to you) when we justify our processing on the basis of your consent or the performance of a contract with you
• To withdraw your consent to our processing of your personal data (where that processing is based on your consent) and
• To obtain, or see a copy of the appropriate safeguards under which your personal data is transferred to a third country or international organization

In addition to the above rights, you have the right to object, on grounds relating to your particular situation, at any time to any processing of your personal data for which we have justified on the basis of a legitimate interest, including profiling (as opposed to your consent) or to perform a contract with you. You also have the right to object at any time to any processing of your personal data for direct marketing purposes, including profiling for marketing purposes.

You also have the right to lodge a complaint with your local supervisory authority for data protection.

In relation to all of these rights, please contact us at privacy@aersale.com. Please note that we may request proof of identity, and we reserve the right to charge a fee where permitted by law, especially if your request is manifestly unfounded or excessive. We will endeavor to respond to your request within all applicable timeframes.