Lift Aviation Academy

1. Who We Are

Lift Aviation operates the Lift Aviation Learning Management System for aviation training, safety, compliance, communication, administration, and recordkeeping.

The data controller is:

Lift Aviation LAA LTD
Address: 44 Agisilaou, Aradippou, Larnaca, 7101, Cyprus
Email: info@lift.cy

Privacy contact:

Privacy Officer
Email: info@lift.cy

2. Why We Process Data

We process personal data to:

• create and manage LMS accounts;
• provide access to training and course material;
• manage enrolments, assessments, quizzes, certificates, and completion records;
• maintain aviation training, safety, compliance, audit, and regulatory records;
• support instructor, management, safety, and compliance oversight;
• communicate with users about training or LMS matters;
• protect the security and integrity of the LMS;
• comply with contractual, legal, regulatory, aviation authority, and audit requirements.

3. Legal Basis

Personal data may be processed where necessary for:

• performance of a training contract or training service;
• compliance with legal, aviation, safety, compliance, audit, or regulatory obligations;
• Lift Aviation’s legitimate interests in managing training, compliance, safety, LMS security, and administration;
• consent, where applicable.

Where sensitive data is required, such as licences, identification documents, or medical certificates, it will be handled with restricted access and appropriate safeguards.

4. Data We Process

The LMS may process:

• name, surname, email address, username, user ID, role, and course category;
• profile information uploaded by the user;
• course enrolment, access, activity, progress, and completion records;
• quiz, assessment, assignment, certificate, and acknowledgement records;
• messages, forum posts, feedback, forms, submissions, and uploaded files;
• safety, compliance, or training-related records submitted through the LMS;
• IP address, browser type, login time, session information, and system logs.

5. Access and Sharing

Personal data is accessible only to authorised persons according to role and need to know, including management, nominated persons, instructors, administrators, safety and compliance personnel, system administrators, IT support providers, and approved training partners where applicable.

Data may be shared where necessary with aviation authorities, auditors, inspectors, competent authorities, approved training partners, LMS/IT/hosting providers, external training providers, or other parties where required by law, regulation, contract, or aviation compliance obligations.

Only the minimum necessary data will be shared.

6. Retention

Personal data is retained only for as long as necessary for training, safety, compliance, audit, legal, contractual, regulatory, or dispute-resolution purposes.

Training, safety, compliance, and regulatory records may need to be retained for extended periods.

When data is no longer required, it will be deleted, anonymised, or securely archived.

7. Cookies

The LMS uses necessary cookies for login, authentication, session security, user preferences, course access, and normal platform functionality.

Examples may include:

• MoodleSession — keeps the user logged in while moving between pages and is normally deleted when the browser is closed.

• MoodleID or similar — may remember the username on the login page, depending on browser and LMS settings.

If embedded content or third-party services are used, such as Jotform, Zoom, Evionica, BGS / ATPdigital, videos, analytics, or external learning tools, those services may use their own cookies or process data. Where non-essential cookies or tracking are used, additional information or consent may be required.

Users may block cookies through their browser settings, but blocking necessary cookies may prevent the LMS from working correctly.

8. User Rights

Subject to applicable law, users may request access, correction, deletion where legally permitted, restriction, objection, data portability, or withdrawal of consent where processing is based on consent.

Some records may need to be retained for aviation training, safety, compliance, audit, legal, contractual, or regulatory reasons.

Requests may be submitted through Moodle data privacy tools, where available, or by contacting the Privacy Officer.

Users also have the right to lodge a complaint with a competent data protection authority.

9. Security and User Responsibilities

Lift Aviation applies appropriate technical and organisational measures to protect personal data, including role-based access, restricted administrator access, system logs, backups, and access control.

Users must keep login details confidential, access only authorised content, avoid uploading unnecessary personal data, respect other users’ privacy, and report suspected unauthorised access or data protection concerns.

10. Updates

This notice may be updated from time to time. Users may be required to review and accept updated versions before continuing to use the LMS.