Nexon Solutions GmbH
  • Home
  • Flightnet
  • Company
  • Contact
Get in touch

Legal

Privacy Policy

This privacy policy explains how we process personal data when you use the public pages of this website, why we process it, with whom it may be shared and what rights you have.

This policy applies to the public website on which it is displayed. It does not apply to authenticated Flightnet services, including the Flightnet customer portal, web application or mobile application. Separate privacy information may apply to those services.

1. Controller

The controller responsible for processing personal data on this website is:

Nexon Solutions GmbH
Stampachgasse 52
3065 Bolligen
Switzerland
Phone: +41 31 301 40 20
Enquiries: contact form

You may also contact us by post or telephone regarding data protection matters. We may ask for information necessary to verify your identity before responding to a request concerning personal data.

2. Applicable law

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP). Where the European Union General Data Protection Regulation (GDPR) applies, we also process personal data in accordance with the GDPR.

3. Personal data we process

3.1 Server log files

When you access this website, the web server automatically records technical information transmitted by your browser or device. Depending on the request and server configuration, this may include:

  • the IP address of the requesting device;
  • the date and time of the request;
  • the page or file requested, the response status and the amount of data transferred;
  • the browser type and version and the operating system; and
  • the referring URL, where transmitted by your browser.

We process this information to make the website available, maintain its stability and security, diagnose faults and defend against misuse and attacks. Where the GDPR applies, the legal basis is Article 6(1)(f) GDPR. Our legitimate interests are the secure, reliable and efficient operation of the website.

Server log files are normally retained for no longer than 30 days and are then deleted or anonymised. Relevant records may be retained for longer where this is necessary to investigate a fault or security incident, establish or defend legal claims, or comply with a legal obligation.

Log files are not routinely combined with other data or used to profile visitors. They may be analysed and, where necessary, correlated with other technical information to investigate faults, suspected misuse or security incidents.

3.2 Contact form

When you contact us using the contact form, we process the information you provide. This may include your name, company or organisation, email address, the subject of your enquiry and your message. We also record the time of submission and the IP address from which the form was submitted in order to protect the form against misuse and investigate suspected abuse.

We use this information to process and answer your enquiry and, where your enquiry relates to a possible contract, to take steps at your request before entering into a contract. Where the GDPR applies, the legal basis is Article 6(1)(b) GDPR for pre-contractual enquiries and Article 6(1)(f) GDPR for other enquiries. Our legitimate interest is to communicate with prospective customers and other persons who contact us.

Fields marked as mandatory are required so that we can receive and respond to your enquiry. If you do not provide the mandatory information, we may be unable to process your request. All other information is voluntary. We do not use contact enquiries to send advertising unless you have separately requested or consented to receive it.

Enquiries are not stored in a website database. After submission, the information is transmitted by email to our mailbox through an email delivery provider acting on our behalf (see section 4). Temporary technical copies may be created during transmission, security filtering, backup and system operation. These copies are managed in accordance with the applicable technical retention settings.

We normally retain an enquiry for 12 months after it has been closed. We may retain it for longer where required by law, where necessary to establish or defend legal claims, or where the enquiry leads to a contractual relationship. In that case, the information is retained in accordance with the applicable statutory and contractual retention periods.

3.3 Protection against spam and misuse

We use our own technical measures to protect the contact form against automated abuse. These include:

  • a field hidden from ordinary visitors that may reveal automated submissions;
  • a check of the time between opening and submitting the form; and
  • a limit on the number of submissions from an IP address within a defined period.

For submission limiting, the IP address is temporarily held in the web server's working memory for no longer than one hour and is then discarded. Where the GDPR applies, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to protect the contact form and our systems against spam and misuse.

We do not use a third-party captcha or other third-party spam protection service, and no contact-form data is transmitted to such a service.

3.4 Cookies and local storage

This website does not set cookies and does not use browser local storage for analytics, advertising or user tracking. The contact form works without a session cookie. If we later introduce functionality that uses cookies or similar technologies, we will update this policy and, where required, request consent before activating the relevant technology.

3.5 Local web fonts

Web fonts used on this website are delivered exclusively from our own web server. When a font is loaded, no connection is made to Google Fonts or another third-party font provider.

3.6 No analytics or automated decision-making

We do not use web analytics, tracking pixels or profiling on this website. We do not make decisions based solely on automated processing that produce legal effects or similarly significantly affect visitors.

4. Recipients and service providers

We do not sell personal data. We disclose personal data only where this is necessary for the purposes described in this policy, where a service provider processes it on our behalf, or where disclosure is required or permitted by law. Recipients may include:

  • Microsoft and its subprocessors, as providers of the Microsoft Azure cloud infrastructure on which this website runs and on which server log files may be processed;
  • Mailjet (Mailjet SAS, France, part of the Sinch group) and its subprocessors, as our email delivery provider. Contact-form enquiries are transmitted through Mailjet's infrastructure, which processes the sender and recipient addresses, the subject, the content of the message and related transmission and delivery data;
  • Microsoft and its subprocessors, as providers of the Microsoft 365 mailboxes in which we receive and retain enquiries;
  • professional advisers and IT service providers, where access is necessary for support, security, legal or compliance purposes and is subject to appropriate confidentiality obligations; and
  • public authorities, courts or other bodies where disclosure is required or permitted by law.

Service providers acting on our behalf may process personal data only in accordance with our instructions, the applicable data protection agreement and the law.

5. International data transfers

Personal data is primarily processed in Switzerland and the European Economic Area (EEA). Our email delivery provider Mailjet is established in France and processes contact-form enquiries within the EEA. In connection with the operation, security and support of Microsoft Azure, Microsoft 365, Mailjet and related technical services, authorised group companies or subprocessors may also process personal data in other countries, including the United States.

Where personal data is transferred to a country that is not recognised as providing an adequate level of data protection, we use an applicable legal safeguard. Depending on the transfer, this may include the European Commission's standard contractual clauses with the adaptations required under Swiss law. We may also rely on another safeguard or statutory exception permitted by applicable data protection law.

You may contact us if you would like further information about the safeguards applicable to a particular transfer or information on how to obtain a copy of them. Copies may be provided in a redacted form where necessary to protect confidential information or the rights of others.

6. Data security

This website is delivered over an encrypted TLS connection, recognisable by https:// in the address bar. We take appropriate technical and organisational measures designed to protect personal data against accidental or unlawful loss, alteration, disclosure, access or misuse. No method of transmission or storage can, however, guarantee absolute security.

7. Your rights

Depending on the applicable law and subject to its requirements, limitations and exceptions, you may have the right to:

  • obtain information about the personal data we process about you and receive a copy of it;
  • have inaccurate or incomplete personal data corrected;
  • request the deletion of personal data;
  • request that processing be restricted;
  • object to processing based on our legitimate interests;
  • receive certain personal data you provided in a structured, commonly used and machine-readable format;
  • withdraw consent at any time, with effect for the future, where processing is based on consent; and
  • lodge a complaint with a competent data protection supervisory authority.

To exercise your rights, please contact us using the contact details in section 1. To protect personal data, we may need to verify your identity before acting on a request.

In Switzerland, the competent supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC). Where the GDPR applies, you may lodge a complaint with a supervisory authority, in particular in the EEA country of your habitual residence, your place of work or the place of the alleged infringement.

8. Changes to this policy

We may update this privacy policy to reflect changes to this website, our processing activities or legal requirements. The current version published on this page applies. We will update the date below whenever this policy is materially changed.

Last updated: 16 September 2026

Nexon Solutions

Aviation software, engineered in Switzerland since 2001. We build Flightnet — the platform that keeps general aviation operations and continuing airworthiness in one place.

Product

  • Flightnet overview
  • flightnet.aero ↗

Company

  • About
  • Partners
  • Contact

Contact

  • Nexon Solutions GmbH
  • Switzerland
  • +41 31 301 40 20
  • Contact form
© 2026 Nexon Solutions GmbH. All rights reserved. ImprintPrivacy