Aviation Support.
Done Right.

Privacy Policy

PylonasHub G.P. — Aviation Supply Chain Integrator
Personal Data Protection & Processing Notice
In accordance with EU Regulation 2016/679 (GDPR) & Greek Law 4624/2019
Last Updated: September 2026  |  Version 1.0  |  pylonashub.com

1. Data Controller
PylonasHub G.P. ("PylonasHub", "we", "us", or "our") is the Data Controller responsible for personal data collected through this website and in the course of our commercial activities. Controller address: Ermou & Lykovriseos 14, 144 52 Metamorfosi, Athens, Greece. Email: info@pylonashub.com. A Data Protection Officer (DPO) is not required under GDPR Article 37 for the scale and nature of our processing activities. All data protection inquiries should be directed to: info@pylonashub.com.

2. What Personal Data We Collect
2.1 Website Contact Form: First and last name, work email address, organization/company name, and any additional details included in your message.
2.2 Commercial Transactions & Business Relationships: Contact person name, title and business email; company name, registration number and business address; banking details (for wire transfers); transaction records, purchase orders, correspondence; customs and export/import documentation.
2.3 Website Visit Data: Our website uses strictly necessary cookies only. We do not deploy analytics tracking or advertising cookies. Technical session data may be temporarily logged by our hosting provider for security purposes. We do not collect sensitive personal data (health, political views, religion, etc.).

3. Legal Basis & Retention
Website contact form submissions: Art. 6(1)(b) & 6(1)(f) GDPR — retained 36 months from last contact unless a business relationship develops.
Commercial transaction records (invoices, POs, contracts): Art. 6(1)(b) & 6(1)(c) GDPR — retained 10 years (mandatory under Greek Tax Procedure Code, Law 5104/2024).
Business correspondence: Art. 6(1)(b) & 6(1)(f) GDPR — retained for the duration of the business relationship + 5 years.
Website technical/session data: Art. 6(1)(f) GDPR — up to 90 days (hosting provider logs).

4. Data Storage & Security
All data is stored on secure servers with access restricted to authorized personnel. We apply technical and organizational security measures per GDPR Article 32. All personnel and collaborators are contractually bound by NDAs. Electronic communications are handled through encrypted business email infrastructure.

5. Third Parties & Data Sharing
We do not sell or trade personal data. Approved data processors: IpHost (website hosting, EEA datacenter) and Microsoft 365 (corporate email). This list will be updated as processor relationships change.

6. International Data Transfers
Transfers within the EEA do not constitute a third-country transfer under GDPR Chapter V. Transfers to the UK are covered by the European Commission adequacy decision (renewed 19 December 2025, valid until 27 December 2031). Transfers to the USA and other third countries without an adequacy decision are carried out under the derogation of Article 49(1)(b) GDPR — necessary for contract performance with suppliers. Data minimization applies: only business contact information strictly necessary for the transaction is communicated.

7. Cookies
Strictly necessary cookies only (session management, security, form functionality) — session / up to 24 hours — cannot be disabled. Analytics and marketing cookies: not currently in use. If introduced in the future, this Policy will be updated and a consent banner implemented prior to any tracking.

8. Your Rights Under GDPR
You have the right to: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing (Art. 21). To exercise any right, email info@pylonashub.com — we will respond within 30 days. Note: certain rights may be limited where legal retention obligations apply (e.g., 10-year tax record retention under Greek law).

9. Supervisory Authority
If you consider that your data protection rights have not been satisfied, you may lodge a complaint with the Hellenic Data Protection Authority (HDPA): Kifissias 1–3, GR-115 23, Athens — Tel: +30 210 647 5600 — contact@dpa.gr — www.dpa.gr. We encourage you to contact us first at info@pylonashub.com so that we may attempt to resolve any concerns.

10. Policy Updates
PylonasHub reserves the right to update this Privacy Policy at any time. The "Last Updated" date and version number at the top of this document indicate the most recent revision. Continued use of our website or engagement in business communications following any update constitutes acceptance of the revised Policy.

PylonasHub G.P.  |  Privacy Policy v1.0  |  September 2026  |  Supervised by: Hellenic Data Protection Authority (HDPA) — www.dpa.gr

Confidentiality Notice

PylonasHub G.P. — Aviation Supply Chain Integrator
Effective: September 2026

Our relationships with suppliers, customers, and partners are built on trust. This Notice defines what we consider confidential and what we expect from each party — so that cooperation proceeds without misunderstandings. This is nothing more than what applies in any serious professional relationship; we simply put it in writing so it is clear to everyone. Initiating or continuing any business relationship with PylonasHub G.P. constitutes acceptance of the terms below, without requiring a separate signature — just as we would not expect to sign anything separate to respect your confidentiality.

1. What We Consider Confidential
In the course of our cooperation, we will exchange information that is not publicly available. This includes, but is not limited to:
• Commercial data: supplier details, profit margins, sourcing strategies, customer data, and contract terms.
• Operational data: purchase orders, Part Numbers/NSNs, delivery timelines, inventory levels, and internal procedures (SOPs).
• Technological & organizational data: software, databases, manuals, reports, and supplier evaluation tools.
• Customer data: requirements, orders, or operational details of any unit — military or civilian. Regardless of order value or sector, we treat every client with the highest degree of discretion. For clients within the Hellenic Armed Forces, an additional layer of discretion applies given the nature of the information involved.

2. What We Expect From a Partner
The following are standards we observe toward all third parties, and that we equally expect every partner to uphold:
• Not to share this information with third parties without our prior consent.
• To use it solely for the purpose of the specific cooperation.
• To apply reasonable and appropriate protective measures.
• To notify us as soon as possible — ideally within 24 hours — if a breach or misuse is suspected, so we can respond together.
• To return or securely delete all relevant files upon conclusion of the cooperation.

3. Ownership of Documents and Tools
All procedures, databases, manuals, and tools developed by PylonasHub G.P. remain the exclusive property of PylonasHub G.P. They may not be reproduced, distributed, or used outside the scope of our cooperation without prior written agreement.

4. Duration & Governing Law
Confidentiality obligations survive the conclusion of our cooperation — as is standard in any serious professional relationship, and no different from what any reputable company in this industry would require. Should any dispute arise, we always prefer direct dialogue and a mutually lawful resolution. If formal proceedings become necessary, Greek law applies, including the provisions on trade secret protection under Law 4679/2020.

Thank you for your trust. We look forward to every new collaboration.
Keeps U Always Airborne

For formal NDA arrangements, contact us at info@pylonashub.com