Cookie Policy

1. Introduction

This Cookie Policy explains how Aero Leadership uses cookies and similar technologies when you visit: https://www.aeroleadership.com It describes:

• What cookies and similar technologies are;
• Which categories of cookies we use;
• Why we use them;
• Which third parties may place or access cookies;
• How long cookies may remain on your device;
• How you can accept, reject or customize cookies; and
• How you can withdraw or change your consent.

This Cookie Policy should be read together with our:

• Privacy Policy;
• Legal Notice; and
• Terms of Service.

2. Website operator

The website is operated by: Aero Leadership Legal owner: Robert Hendrik van de Hoef Carrer de Gertrude Stein 1, 2-2B 07004 Palma, Spain Email: hello@aeroleadership.com Website: https://www.aeroleadership.com In this Cookie Policy, “Aero Leadership”, “we”, “us” and “our” refer to the legal owner identified above.

3. What are cookies?

Cookies are small text files that a website stores on, or reads from, a user’s device when the user visits the website. Cookies may enable a website to:

• Remember a user’s preferences;
• Maintain a login session;
• Keep a website secure;
• Remember cookie-consent choices;
• Understand how visitors use the website;
• Measure the effectiveness of advertising; and
• Recognize a browser across visits.

Cookies may contain identifiers, settings, dates, technical information or information about interactions with a website. Cookies do not normally contain documents or files stored elsewhere on your device.

4. Similar technologies

This Cookie Policy also applies to technologies that perform functions similar to cookies, including:

• Pixels;
• Tags;
• Web beacons;
• Local storage;
• Software development kits;
• Device identifiers;
• Tracking URLs; and
• Other browser or device-storage technologies.

For simplicity, this Policy generally refers to all these technologies as “cookies”.

5. First-party and third-party cookies

5.1 First-party cookies

First-party cookies are placed from the domain you are visiting. They may be used to:

• Maintain website functionality;

• Remember consent choices;
• Support security;
• Manage sessions; and
• Measure website use.

5.2 Third-party cookies

Third-party cookies are placed or accessed by an organization other than Aero Leadership. Third parties used on or in connection with the website may include:

• Google, through Google Analytics;
• Meta, through the Meta Pixel;
• Lovable and relevant infrastructure providers;
• Stripe;
• OnlineCourseHost;
• Bunny Stream;
• SendFox; and
• Other providers necessary to operate the requested service.

Third-party services may process information according to their own privacy and cookie documentation.

6. Session and persistent cookies

6.1 Session cookies

Session cookies normally expire when you close your browser. They may be used for:

• Login sessions;
• Navigation;
• Security;
• Temporary preferences; and
• Checkout functionality.

6.2 Persistent cookies

Persistent cookies remain on your device after you close your browser until:

• Their stated expiration date;
• You delete them;
• You withdraw consent and they are removed where technically possible; or
• The provider removes them.

Persistent cookies may remember preferences or recognize a browser across visits.

7. Categories of cookies we use

The website may use the following categories.

7.1 Strictly necessary cookies

Strictly necessary cookies are required to operate the website or provide a service that you have expressly requested. They may be used for:

• Website security;
• Fraud prevention;
• Account login;
• Session management;
• Checkout functions;
• Course access;
• Load balancing;
• Network management;
• Form submission;
• Remembering cookie choices; and
• Maintaining essential website functionality.

These cookies are not used for optional analytics or advertising. Because these cookies are necessary to provide the website or requested service, they generally cannot be disabled through our cookie-preference tool. You may block them through your browser, but doing so may prevent parts of the website from functioning properly.

7.2 Preference and functionality cookies

Preference cookies may remember choices that improve the way the website works for you. They may remember:

• Language;
• Region;
• Display choices;
• Login preferences;
• Accessibility preferences; and

• Other optional website settings.

Where these cookies are not strictly necessary, they will be used only after you provide consent. Rejecting them may reduce personalization without preventing basic access to the website.

7.3 Analytics cookies

Analytics cookies help us understand how visitors use the website. With your consent, we use Google Analytics to collect information such as:

• Pages visited;
• Approximate visit duration;
• Referral source;
• Browser and device type;
• General geographic region;
• Website interactions;
• Registrations;
• Purchases or conversion events;
• Technical errors; and
• Whether a visitor has previously used the website.

We use this information to:

• Measure website traffic;
• Understand which pages are useful;
• Improve navigation;
• Identify technical problems;
• Improve the user experience;
• Evaluate campaigns; and
• Improve Aero Leadership products and services.

Analytics cookies will not be activated until you consent, where consent is legally required. Rejecting analytics cookies will not prevent you from using the basic website or accessing a course you have purchased.

7.4 Advertising and measurement cookies

With your consent, we use the Meta Pixel to measure the performance of advertising and understand actions taken after a person views or selects an advertisement.

The Meta Pixel may process information such as:

• Page visits;
• Browser and device information;
• Cookie identifiers;
• Referring URLs;
• Registration events;
• Checkout events;
• Purchase events;
• Campaign information; and
• Other website interactions configured as advertising events.

This may allow Aero Leadership and Meta to:

• Measure advertising conversions;
• Understand campaign performance;
• Build or refine advertising audiences;
• Reduce unnecessary advertising;
• Show advertisements to potentially interested audiences; and
• Produce campaign reports.

Meta may combine information received through its business tools with information associated with a person’s use of Meta services, subject to Meta’s own terms and privacy practices. Meta Pixel technologies will not be activated until you have consented, where consent is required.

8. Legal basis

The storage of or access to information on your device through non-essential cookies is based on your consent. This applies in particular to:

• Google Analytics cookies;
• Meta Pixel cookies;
• Optional functionality cookies; and
• Other non-essential measurement or advertising technologies.

Strictly necessary cookies may be used without consent where they are essential to:

• Transmit a communication;
• Maintain security;

• Store your cookie choices; or
• Provide a service expressly requested by you.

Where information obtained through cookies constitutes personal data, its subsequent processing is governed by our Privacy Policy and applicable data-protection law.

9. Your consent choices

When you first visit the website, you will be shown a cookie banner or consent- management interface. You will be able to:

• Accept all optional cookies;
• Reject all optional cookies;
• Review cookie categories;
• Select which optional categories to allow; and
• Access this Cookie Policy.

Rejecting optional cookies will be presented in a manner that is no more difficult than accepting them. No optional category will be selected in advance. Silence, inactivity, continued browsing or closing the banner will not be treated as valid consent to optional cookies.

10. Withdrawing or changing consent

You may withdraw or modify your consent at any time. You can do this by selecting: Cookie Settings This link or control should remain available in the website footer or another consistently accessible location. Withdrawing consent will:

• Prevent the relevant optional cookies from being used in the future;
• Update the consent signal communicated to relevant providers; and
• Remove relevant cookies where technically supported by the consent-management tool.

Some previously collected information may remain subject to applicable retention requirements or third-party processing already lawfully performed before withdrawal.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

11. Cookie list

The following table describes cookies that may be used on the Aero Leadership website. The live website configuration is the authoritative source. Cookie names, domains and durations can change when providers update their services or when the website configuration changes.

11.1 Essential and consent cookies

Cookie or

storage item      Provider          Purpose            Type              Typical duration
[INSERT           Aero Leadership   Stores whether     Strictly          Up to 12
CONSENT           / consent-        the user           necessary         months
COOKIE NAME]      management        accepted,
                  provider          rejected or
                                    customized
                                    cookie
                                    categories
[INSERT           Aero Leadership Maintains an         Strictly          Session or
SESSION           / hosting       essential            necessary         limited
COOKIE NAME]      provider        website or                             persistent
                                  authenticated                          period
                                  session
[INSERT           Hosting,          Security, fraud    Strictly          Session or
SECURITY          authentication    prevention and     necessary         provider-
COOKIE NAME]      or security       protection                           defined period
                  provider          against
                                    unauthorized
                                    requests
[INSERT           Stripe or         Supports           Strictly          Session or
CHECKOUT          website           secure             necessary         provider-
COOKIE NAME,      provider          checkout and                         defined period
IF APPLICABLE]                      transaction
                                    processing

The names above will be completed after the consent-management platform and website infrastructure have been selected and scanned, which will occur as soon as practical.

11.2 Google Analytics cookies

Subject to consent, Google Analytics may use cookies including:

Cookie            Provider           Purpose            Type               Typical duration
_ga               Google             Distinguishes    Analytics            Up to 2 years
                  Analytics          website users or
                                     browsers for
                                     analytics
                                     measurement
_ga_<container    Google             Maintains and      Analytics          Up to 2 years
-id>              Analytics          persists
                                     session-related
                                     analytics
                                     information for
                                     a specific
                                     Google
                                     Analytics
                                     property
_gid              Google             Distinguishes      Analytics          Approximately
                  Analytics, if      users for                             24 hours
                  used by the        analytics
                  installed          purposes
                  configuration
_gat or           Google             Helps control      Analytics          Approximately 1
_gat_<property    Analytics, if      the rate at                           minute
-id>              used               which requests
                                     are sent

Not every Google Analytics installation uses every cookie listed above. Your final published cookie table should include only cookies found in the live implementation. Google may change cookie names, purposes or retention periods.

11.3 Meta Pixel cookies

Subject to consent, Meta Pixel may use or access cookies including:

Cookie            Provider           Purpose            Type               Typical duration
_fbp              Meta               Helps deliver,     Advertising and    Approximately 3
                                     measure and        measurement        months
                                     improve
                                     advertising and
                                     distinguish
                                     browsers
_fbc              Meta               Stores             Advertising and    Approximately 3

Cookie Provider Purpose Type Typical duration information measurement months relating to a visit originating from an advertisement containing a Meta click identifier

Other Meta         Meta                Advertising      Advertising,       Provider-
cookies                                measurement,     measurement        defined
                                       browser          or provider-
                                       recognition,     specific
                                       security or
                                       service
                                       functionality,
                                       depending on
                                       whether the
                                       user also uses
                                       Meta services

The _fbc cookie will generally only be created where relevant click information is present. Meta may use both first-party and third-party cookies, depending on configuration, browser settings and the user’s relationship with Meta services. The final cookie table must be confirmed through a live website scan.

12. Google Analytics

We use Google Analytics 4, subject to consent. Google Analytics is provided by Google. Google Analytics may use cookies and tags to collect data about activity on the website and generate reports concerning website use. Information processed may include:

• Cookie or device identifiers;
• Browser information;
• Device information;
• Referrer information;
• Approximate location;
• IP-derived information;

• Page and screen interactions;
• Events;
• Session information; and
• Conversion information.

Google Analytics is configured for a data-retention period generally between 14 and 26 months, depending on the setting applied in our Google Analytics account. Some aggregated reports may be retained for longer where they no longer directly identify an individual user. Where available and appropriate, we may use:

• Consent Mode;
• IP-related privacy controls;
• Data-retention controls;
• Restricted advertising settings;
• User-deletion tools; and
• Other Google privacy configurations.

Consent Mode does not itself replace the requirement to display a consent banner or collect valid consent.

13. Meta Pixel

We use the Meta Pixel only after the user has consented to the relevant category of cookies. The Meta Pixel enables us to measure actions taken on the website after interaction with advertisements on Meta platforms. Depending on our configuration, events may include:

• Page views;
• Content views;
• Newsletter registrations;
• Checkout initiation;
• Purchases; and
• Other selected conversion events.

We should avoid sending information through the Meta Pixel that is unnecessary, sensitive or prohibited by Meta’s rules. Meta may act as an independent controller for some processing carried out through its services.

Aero Leadership does not control all subsequent processing performed independently by Meta.

14. Stripe and payment cookies

Stripe processes payments for Aero Leadership. When you enter the checkout or payment environment, Stripe may use cookies or similar technologies for purposes such as:

• Payment processing;
• Security;
• Fraud detection;
• Authentication;
• Regulatory compliance;
• Transaction completion; and
• Remembering payment-related preferences.

Cookies that are strictly necessary to complete a payment or prevent fraud may operate without optional cookie consent. Stripe may also use cookies under its own privacy and cookie documentation when you interact directly with Stripe-controlled payment elements. The exact Stripe cookies will depend on the checkout implementation and must be confirmed before this Cookie Policy is published.

15. Course-platform and video technologies

Aero Leadership courses are hosted through OnlineCourseHost, and course videos are hosted through Bunny Stream and embedded on the course platform. When you access the course platform or play a video, these providers may use cookies or similar technologies necessary to:

• Authenticate your account;
• Maintain a course session;
• Protect paid content;
• Deliver video;
• Remember playback status;
• Balance network traffic;
• Prevent misuse;
• Record technical errors; and
• Maintain service security.

Some course-platform technologies may be strictly necessary to provide content you have requested. Any optional analytics or tracking used within the course platform should be identified and controlled separately where required. Because OnlineCourseHost is hosted on a separate platform or domain, it may display its own cookie information or consent interface. Aero Leadership should confirm the exact course-platform cookies directly with OnlineCourseHost before launch.

16. Lovable and website infrastructure

The main Aero Leadership website is built or operated using Lovable and related hosting or infrastructure services. These services may use essential cookies or similar technologies for:

• Website delivery;
• Session management;
• Security;
• Authentication;
• Load balancing;
• Form functions;
• Error prevention; and
• Technical operation.

The exact infrastructure may depend on how the Lovable website is deployed. A cookie scan should therefore be carried out on the final production domain rather than relying solely on the development environment.

17. SendFox

SendFox is used to manage newsletter subscriptions and email marketing. SendFox does not necessarily place cookies merely because a newsletter form appears on the website. However, cookies or similar technologies may be used if:

• A SendFox-hosted form or page is embedded;
• Tracking is enabled;
• Email links contain tracking information;
• A SendFox page is visited; or
• The integration uses provider-controlled scripts.

Any cookies found through the final SendFox implementation must be added to the live cookie table and categorized appropriately. Newsletter data processing is explained in the Privacy Policy.

18. Zoho Mail

Zoho Mail is used to receive and respond to email. Zoho Mail does not normally place cookies on the Aero Leadership public website merely because it is used as the business email provider. Zoho may use cookies when a user visits a Zoho-operated website or service independently.

19. Browser controls

Most browsers allow users to manage cookies through their settings. Depending on your browser, you may be able to:

• View cookies;
• Delete individual cookies;
• Delete all cookies;
• Block third-party cookies;
• Block all cookies;
• Clear cookies when closing the browser;
• Restrict tracking; and
• Receive a warning before cookies are stored.

Blocking all cookies may affect:

• Login;
• Checkout;
• Course access;
• Website security;
• Stored consent choices; and
• Other essential functions.

Browser settings do not always prevent all similar technologies, such as pixels or server- side event processing. The Aero Leadership cookie-preference tool should therefore be used in addition to browser settings.

20. Global privacy and browser signals

Some browsers or devices provide privacy signals such as “Do Not Track” or Global Privacy Control. The legal effect and technical interpretation of these signals may differ by jurisdiction and provider. Where legally required and technically supported, Aero Leadership will seek to respect recognized privacy-preference signals. Users should continue to use the website’s cookie-preference interface to communicate their choices clearly.

21. International data transfers

Google, Meta and other service providers may process information in countries outside Spain or the European Economic Area. Where personal data are transferred internationally, the transfer may rely on:

• A European Commission adequacy decision;
• An applicable approved data-transfer framework;
• Standard Contractual Clauses;
• Supplementary technical and organizational measures; or
• Another transfer mechanism permitted by law.

More information about international transfers is provided in our Privacy Policy.

22. Personal data collected through cookies

Information collected through cookies may constitute personal data where it can identify or distinguish a person or device. This may include:

• IP addresses;
• Cookie identifiers;
• Advertising identifiers;
• Device information;
• Browser information;
• Website interactions;
• Referral information;
• Approximate location;
• Purchase or registration events; and

• Consent records.

The purposes, legal bases, recipients, retention periods and user rights applicable to this processing are explained in our Privacy Policy.

23. Data recipients

Information generated through cookies may be disclosed to or processed by:

• Aero Leadership;
• Website and infrastructure providers;
• Google;
• Meta;
• Stripe;
• OnlineCourseHost;
• Bunny Stream;
• Consent-management providers;
• Technical advisers; and
• Public authorities where legally required.

Aero Leadership does not sell personal data. The use of service providers to host the website, process payments, deliver courses or measure consented analytics is not a sale of personal data.

24. Retention of consent records

We may retain records showing:

• Whether consent was given;
• Which categories were accepted;
• The date and time of the decision;
• The version of the banner or policy displayed;
• The consent identifier; and
• Whether consent was later changed or withdrawn.

These records may be retained for as long as reasonably necessary to:

• Respect the user’s preferences;
• Demonstrate compliance;
• Resolve complaints; and
• Establish or defend legal claims.

The cookie banner may ask for consent again periodically, when required by law, or when our use of cookies materially changes. As a general implementation practice, cookie consent should be renewed at reasonable intervals and not treated as permanent.

25. Changes to the cookies we use

The cookies used on the website may change because:

• We add or remove website functions;
• A service provider changes its technology;
• We update Google Analytics or Meta configurations;
• We replace a provider;
• We change the consent platform;
• Browser behavior changes; or
• Legal requirements change.

We will update this Cookie Policy and the cookie-preference interface where material changes occur. Where a new cookie requires consent, it will not be used until the appropriate consent has been obtained.

26. Changes to this Cookie Policy

We may update this Cookie Policy to reflect:

• Changes to the website;
• New or removed cookies;
• Changes to providers;
• Updated retention periods;
• Legal or regulatory developments;
• Updated guidance; or
• Clarifications.

The latest version will be published on the website with a revised “Last updated” date. Where changes materially affect a consent choice, we may ask users to review their preferences again.

27. Contact

For questions about cookies, tracking technologies or your privacy choices, contact:

Aero Leadership Legal owner: Robert Hendrik van de Hoef Carrer de Gertrude Stein 1, 2-2B 07004 Palma, Spain Email: hello@aeroleadership.com Website: https://www.aeroleadership.com Privacy and data-protection rights may also be exercised as described in the Privacy Policy.