PRIVACY POLICY

Last updated: 13 February 2026
This Privacy Policy explains how Merneptah Aerospace GmbH (“Merneptah”) processes personal data through its website:
www.merneptahaerospace.com

All processing activities comply with:

• Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR)
• German Federal Data Protection Act (BDSG)
• ePrivacy Directive

Personal data is processed only to the extent necessary for operating this informational website.

1. Data Controller (Article 4(7) GDPR)

Merneptah Aerospace GmbH
Untermainkai 30
60329 Frankfurt am Main
Email: [email protected]

2. General Website Use

2.1 Hosting and Infrastructure
The website is hosted by an external service provider within the European Union. Processing activities include:

• Infrastructure provision
• Server maintenance
• Storage and database services
• IT security

Legal basis:
Article 6(1)(f) GDPR (legitimate interest in secure and efficient website operation)
Article 28 GDPR (Data Processing Agreement with hosting provider)

2.2 Server Log Files

When accessing the website, the following data is automatically recorded:

• Accessed file name and URL
• Date and time of access
• Data transfer volume
• HTTP status code
• Browser type and version
• Operating system
• Referrer URL
• Accessed subpages
• Internet service provider
• IP address

Purpose:

• System security
• Technical monitoring
• Fraud prevention
• IT stability

Legal basis: Article 6(1)(f) GDPR
IP addresses are stored only for the duration necessary to ensure system integrity and security.
No profiling or automated decision-making takes place.

2.3 Cookies

This website uses only strictly necessary technical cookies.

2.3.1 Purpose

Strictly necessary cookies are used exclusively to:

• Ensure secure website operation
• Maintain technical functionality
• Store cookie consent preferences

No analytics, marketing, or tracking cookies are used.
No third-party cookies are implemented.

2.3.2 Legal Basis

Article 6(1)(f) GDPR
Technical necessity exemption under the ePrivacy Directive
Because these cookies are technically essential, prior consent is not required.

2.3.3 Retention

Strictly necessary cookies are either:

• Session-based, or
• Stored for a limited operational period

3. Data Subject Rights (Articles 12–23 GDPR)

You have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent (Art. 7(3) GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

The competent supervisory authority in Hessen is:
The Hessian Commissioner for Data Protection and Freedom of Information (HBDI)
Postfach 3163
65021 Wiesbaden
Germany

4. Automated Decision-Making

No automated decision-making or profiling pursuant to Article 22 GDPR takes place.

5. Data Security

Technical and organizational measures are implemented in accordance with Article 32 GDPR, including:

• SSL/TLS encryption
• Access control systems
• Secure hosting infrastructure
• Regular security updates
• Backup procedures

Despite these measures, complete protection against all internet-based risks cannot be guaranteed.

6. Disclosure to Third Parties

Personal data is processed internally and only disclosed where:

• Required for contractual obligations
• Legally mandated
• Necessary for IT hosting services

All external processors operate under Article 28 GDPR-compliant agreements.

7. International Data Transfers

No transfer of personal data outside the European Union or European Economic Area currently takes place.