This agreement governs the processing of personal data. ...<\/span>through the service of Cumulus.aero acts as a Data Processor<\/strong> on behalf of the Flight School (the Data Controller<\/strong>).<\/p>\n We implement industry-standard security measures. All data is hosted on European servers by European companies\u00a0 ensuring data sovereignty and full compliance with GDPR.\u00a0 We aim for 99.5% uptime. Maintenance windows will be communicated 48 hours in advance.<\/p>\n In the event of a personal data breach,\u00a0Cumulus.aero will notify the Client without undue delay (and no later than 48 hours) after becoming aware of the breach.<\/p>\n The Client is responsible for managing access for its instructors and students. The Client must ensure that all login credentials are kept confidential.<\/p>\n Following EASA recommendations, we treat all student and instructor data as sensitive strictly confidential and do not share it with third parties unless required by aviation authorities or law. To comply with the EU Data Act 2026, Cumulus.aero guarantees that the Client owns all data entered into the platform. We provide a “One-Click Export” tool allowing the Client to retrieve all student files and flight logs in a structured, machine-readable format (JSON\/CSV) at any time. We will assist the Client in fulfilling their obligations to respond to students or employees ‘requests for exercising their rights (Right to Access, Erase, or Portability).<\/p>\n As a B2B service, Cumulus.aero is not liable for indirect damages or loss of profit. Our liability is limited to the amount paid by the Client in the 12 months preceding the claim. We are not responsible for the accuracy of flight training data entered by instructors.<\/p>\n We implement the following security measures:<\/p>\n Hosting:<\/b> All data stays in the EU.<\/p>\n<\/li>\n Encryption:<\/b> Data is encrypted at rest (AES-256) and in transit (TLS 1.3).<\/p>\n<\/li>\n Access Control:<\/b> Strict internal “need-to-know” access policies for users and our developers.<\/p>\n \u00a0<\/p>\n \u00a0<\/p>\n<\/li>\n<\/ul>\n\n\n <\/p>\n","protected":false},"excerpt":{"rendered":" 1. Scope and Roles This agreement governs the processing of personal data. through the service of Cumulus.aero acts as a Data Processor on behalf of the Flight School (the Data Controller). 2. Data Security We implement industry-standard security measures. All data is hosted on European servers by European companies\u00a0 ensuring data sovereignty and full compliance […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-63","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/cumulus.aero\/index.php?rest_route=\/wp\/v2\/pages\/63","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cumulus.aero\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/cumulus.aero\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/cumulus.aero\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cumulus.aero\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=63"}],"version-history":[{"count":1,"href":"https:\/\/cumulus.aero\/index.php?rest_route=\/wp\/v2\/pages\/63\/revisions"}],"predecessor-version":[{"id":64,"href":"https:\/\/cumulus.aero\/index.php?rest_route=\/wp\/v2\/pages\/63\/revisions\/64"}],"wp:attachment":[{"href":"https:\/\/cumulus.aero\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=63"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}2. Data Security<\/h3>\n
Data Breach Notification<\/b><\/h4>\n
Access and user roles<\/h4>\n
3. Confidentiality<\/h3>\n
4. Confidentiality<\/h3>\n
5. Technical and Organizational Measures (TOMs)<\/b><\/h3>\n
\n