Privacy & Cookie Policy

1. Who is responsible for personal data

A data controller is the company that decides why and how personal data is used. L6 Aviation GmbH is the controller for the Level6Aviation website and for information used to manage enquiries, accounts, commercial purchases, payments, invoices, customer support, lessons, preparation products and examiner-training applications.

L6 Aviation OÜ is the approved Language Testing Body that conducts official examinations under approval EE/LTAB/003 and is the controller for official-examination records. It uses those records to identify candidates, conduct and assess examinations, issue results and certificates, protect examination integrity, handle appeals and meet applicable oversight requirements.

When an official examination is booked, L6 Aviation GmbH provides L6 Aviation OÜ with the candidate, booking and payment-status information needed to deliver the examination. Examination records and results are then handled by L6 Aviation OÜ for the purposes described in this policy.

2. Information we handle

The information depends on the service and may include:

• name, email, telephone number and country code, account identifiers, communications and customer-support records;
• billing address, company and VAT details, purchased service, booking time, payment status, invoice data and transaction references;
• IP address, browser and device details, security logs, cookie choice and website interactions;
• aviation background, licence or competent-authority information and service-specific eligibility details;
• identity documents or verification images, examination audio or video, examiner notes, assessment forms, results, certificates and examination-integrity evidence;
• appeals, complaints, related correspondence, lesson records and examiner-training application or participation records.

Stripe processes payment-card details. Level6Aviation receives the payment outcome and transaction references needed to fulfil and account for the purchase, not the full card number or security code.

3. How we obtain information

Information is collected:

• directly when you contact us, register, apply, book or buy;
• through checkout, booking, account and support systems;
• during identity checks, official examinations and assessment;
• from cookies, similar storage and ordinary security logs;
• from an authorised school, partner or employer that arranges a service for you; and
• from competent aviation authorities where verification, oversight, an appeal or regulatory cooperation requires it.

If another organisation provides your information, it is responsible for having a lawful basis to do so and for giving you any notice it is required to provide.

4. Purposes and legal bases

Contract and pre-contract steps

We use information to answer service enquiries, confirm eligibility, create accounts, process orders, schedule appointments, provide lessons or digital access, identify candidates, conduct and assess examinations, issue certificates, handle support and administer examiner training.

Legal obligations

Information is used for accounting, invoicing, record keeping, regulatory cooperation, required examination records and other duties imposed on the relevant L6 entity.

Legitimate interests

Subject to your rights, we rely on legitimate interests to secure the website and services, prevent fraud, protect examination integrity, improve operations, maintain evidence, resolve complaints and defend or exercise legal claims. These interests are assessed against the effect on individuals.

Consent

Consent is used where required for optional cookies, analytics, advertising, direct marketing or another clearly optional activity. It is not treated as the basis for processing that is necessary to deliver a contract, comply with law or maintain examination integrity.

5. Official examination records

Official-examination processing may include identity verification, examination recordings, examiner and linguistic-expert notes, assessment forms, results, certificates, integrity reviews, appeals and communications. L6 Aviation OÜ uses these records to conduct the approved assessment, demonstrate procedural compliance, investigate suspected misconduct and respond to appeals or oversight.

Relevant records may be disclosed to the Estonian Transport Administration or another competent aviation or licensing authority when required or legally permitted. Access to sensitive identity and examination records is restricted to authorised people and systems used for examination administration.

Official examination records are retained for five years. A particular record may be kept longer where an active integrity review, appeal, authority request, legal obligation or legal claim requires it.

6. Sharing and service providers

Information is shared only as needed for the relevant purpose:

• Vercel hosts the Level6Aviation website;
• Stripe processes card payments and acts under its own legal responsibilities for payment services;
• Zoom provides online examination, lesson and course meeting functionality;
• Trustpilot supplies review content through its official widget and public profile;
• authorised examiners, linguistic experts, instructors and support or accounting personnel receive information required for their work;
• competent authorities receive records for oversight, recognition, an appeal or another lawful requirement; and
• an authorised school, training organisation, employer or partner may receive booking or outcome information within its authority and the applicable law.

Some suppliers act as processors under instructions; others, such as a payment provider or regulatory recipient, may be independent controllers for their own legal functions. Examination personnel act only within their authorised role and confidentiality duties.

7. International transfers

The service operates across Switzerland, Estonia and other countries, and some providers process information outside your country or outside the EEA or Switzerland. Where transfer law requires safeguards, the responsible entity uses an applicable adequacy decision, approved contractual clauses or another lawful mechanism and assesses additional protections where necessary. We do not promise that all information remains in one country.

8. How long information is kept

• Invoices and immutable accounting records: 10 years under the approved business retention policy.
• Customer accounts and booking records: while needed to provide account and booking functions and afterwards for legal, accounting, dispute and security requirements.
• Examination records, recordings and certificates:five years, with longer retention only where an active integrity review, appeal, authority request, legal obligation or legal claim requires it.
• Enquiries and support communications: until the matter is complete and for a proportionate period needed to record the outcome or manage a dispute.
• Security logs: for a limited period based on investigation, platform-security and incident-response needs.
• Cookie choices: the website retains the current decision for up to 12 months, after which it asks again.
• Marketing consent: until withdrawal and afterwards only as needed to evidence or respect the choice.
• Analytics information: according to the configured provider period and applicable consent; the website does not currently load optional analytics.

When an exact period is not stated, we consider the service purpose, sensitivity, legal and regulatory duties, limitation periods, security needs and whether the information can be safely deleted or anonymised.

9. Your data-protection rights

Depending on the applicable law, you may request access, correction, deletion, restriction or a portable copy of personal data, object to processing based on legitimate interests, and withdraw consent for future processing. You may also complain to the competent data protection supervisory authority.

A request may be limited where information must be retained for a legal or regulatory duty, examination integrity, another person's rights, or the establishment, exercise or defence of legal claims. We may need to verify identity before acting on a request.

10. Marketing and service messages

Booking confirmations, examination instructions, results, account notices, invoices and support replies are service communications, not marketing. Promotional email is sent only where permitted by law and, where required, with consent. You can unsubscribe through the message control or contact us. Unsubscribing from marketing does not stop communications needed to deliver an active service.

11. Security

We use proportionate organisational and technical safeguards, including access controls, restricted roles, secure provider connections, protected credentials, logging, backups where applicable and procedures for investigating incidents. No internet service is completely secure; safeguards are reviewed in light of the information and risk.

12. Minors

The service does not invent a single age threshold for every country and product. A parent, guardian or other authorised adult must be involved where the individual lacks legal capacity to purchase, consent or participate independently. Examination and licensing eligibility remains subject to the applicable authority requirements.

13. Cookies and similar storage

Strictly necessary storage

The website stores the cookie choice locally so it can be respected across the site. The free sample test also uses local storage to keep the attempt timer and prevent an expired attempt from silently restarting. Hosting, security, account and checkout providers may use strictly necessary cookies for security, routing, authentication, fraud prevention and transaction continuity. These functions do not depend on optional permission.

External review content

The website loads the official Trustpilot widget to display external review information and links to the public Level6Aviation Trustpilot profile. The optional-cookie choice does not hide this review content.

Analytics and advertising

The website does not currently load analytics or advertising tags. Exact cookies used by an optional provider may vary with its configuration and your choice, so this policy does not publish a guessed static cookie table.

Your choice

Where optional analytics or advertising technologies are enabled, they are not loaded by the website until you choose Allow optional cookies. Choosing Necessary only is presented alongside acceptance. You can revisit or withdraw the decision at any time through Cookie settings in the footer. Withdrawing permission does not affect the lawfulness of processing that occurred before withdrawal.

14. Changes, questions and requests

This policy is effective 20 August 2026. Material changes may be highlighted on the website or communicated through an appropriate service channel. Continued processing remains subject to applicable law and does not turn an optional activity into a mandatory one.

Send privacy questions or rights requests to admin@level6aviation.com. Please identify the service and responsible entity where known; we will route the request if it concerns the other L6 entity.