During a hangar inspection of the engine mount, mechanics found cracks and corrosion in the upper pylon skin of a Cessna 560XL Citation XLS+. Both upper pylon skins, left and right, were replaced.
The surrounding surfaces were masked and protected before work began, and the pylon opened up for access. Each replacement skin was fitted to the structure and held with clamps while the fastener pattern was matched to the existing holes, then riveted out.
Both skins were installed and primed, the pylon closed up, and the area cleaned and inspected on completion.
Legal & compliance — drafts, pending approval
Legal documents
Draft — pending approval. These documents are published in draft form so that they are visible and can be reviewed. They are not yet approved, they are not legal advice, and they are not final. They were prepared as a starting point for review by a qualified lawyer admitted in the Republic of Cyprus and, where relevant, in each country listed under “Jurisdictions”. Every field in [brackets] and every paragraph marked [under revision] must be completed or corrected before approval. Until approved, nothing here creates or limits any right or obligation. Last revised 2 September 2026.
Imprint / legal notice — draft
Site owner and operator
GRYPS.AERO is a trading name operated by Mr. D., Larnaca, Cyprus.
Represented by
Mr. D., operator and person responsible for content. Email: [office@gryps.aero]. Telephone: [+357 00 000000]. Correspondence address: [address].
Nature of the business
Aircraft sheet metal, structural and composite repair services, modifications, and support of Service Bulletin and Airworthiness Directive compliance work, performed on-site for and under the approvals of maintenance organisations, operators and owners. Approval references held or worked under: [e.g. EASA Part-145 organisation approval no. of the host organisation; own certificates: type/scope]. Personnel qualifications: [licences, authorisations, training records].
Insurance
Professional indemnity and general/product liability insurance: [insurer name, address], policy number [000000], geographical scope [worldwide excluding …], cover [amount, currency].
Regulated information
Supervisory or competent authorities, where applicable: [Department of Civil Aviation, Republic of Cyprus / EASA / national authority of the state of registry]. Chamber or professional body membership: [none / name].
Content, editorial responsibility and copyright
Responsible for editorial content within the meaning of applicable Cypriot and EU e-commerce and media rules: Mr. D., address as above. All text, drawings, photographs and layout on this website are protected by copyright and remain the property of GRYPS.AERO (Mr. D.) or its licensors. Reuse, reproduction or distribution requires prior written consent. Aircraft type designations and manufacturer names (e.g. Cessna, Citation, Beechcraft, King Air, Textron Aviation) are the trademarks of their respective owners and are used for descriptive reference only; no affiliation, endorsement or approval is implied.
Online dispute resolution
Information under the EU consumer ODR rules, if and where applicable: [platform link / statement that services are provided business-to-business only].
Privacy notice — draft (GDPR and equivalent regimes)
1. Controller
GRYPS.AERO, a trading name operated by Mr. D., [address], Larnaca, Cyprus, email [privacy@gryps.aero]. Data protection contact / DPO: [name, contact — or “no DPO appointed; the operator is the responsible contact”]. EU/EEA establishment: Cyprus. UK representative: [name/address or “not required”]. EU representative for non-EU processing: [not required].
2. This website (gryps.aero) collects no personal data from you
Browsing gryps.aero requires no account, no contact form and no personal data from you. There are no third-party analytics, no tracking pixels, no advertising and no social media embeds. Fonts, images and scripts are served from our own server, so no request is made to Google or any other third party and no data is transmitted to them. No cookies are set, and therefore no consent banner is shown.
Visitor counting. We keep a simple count of visits on our own server, so that we can see how much the site is used. It is aggregated (page views and totals), it is visible only to the administrator, it is never shared, sold or passed to a third party, and it sets no cookies and builds no visitor profile. No IP address, cookie or device identifier is stored, and nothing is written to your device. Legal basis: Art. 6(1)(f) GDPR, legitimate interest in knowing whether the site is used. Retention: [7 days for raw logs, aggregated totals kept indefinitely].
Our hosting provider [provider, country] keeps standard server log files (IP address, time, requested file, error codes) for the technical operation and security of the server. Legal basis: Art. 6(1)(f) GDPR, legitimate interest in a functioning, secure website. These logs are not combined with other data and not used to analyse visitors. Retention: [7 days].
3. Booking area (book.gryps.aero)
[Under revision — this section is known to be incomplete.] The booking area also holds job title, employing company, login history, records of conduct (strikes and account blocks, which are set manually by the administrator — nothing is decided automatically), document access logs, and booking/commercial data. A corrected inventory is with counsel and will replace this section before approval.
Name and email address — used to create and identify a client account and to correspond about a booking request. Legal basis: Art. 6(1)(b) GDPR, performance or preparation of a contract.
Content you enter with a request (location, requested dates, aircraft type and task) — needed to assess and schedule the work. Legal basis: Art. 6(1)(b) GDPR.
Login and security data strictly necessary to keep the account safe (password stored as a hash, session identifier, last-login time). Legal basis: Art. 6(1)(f) GDPR.
Documentation held in the restricted area — repair records and photographs — is supplied by or for the operator, owner or maintenance organisation and is handled only on their instruction and for the agreed purpose. Where such documents contain names or licence numbers of personnel, we act as processor for that client [confirm the processing agreement per client].
4. Recipients and international transfers
We do not sell or share data. Access is limited to the operator and to personnel who need it. Processors: cloud infrastructure and database providers for gryps.aero and book.gryps.aero, and an email delivery provider, each under an Art. 28 GDPR agreement. A complete list of processors, with their locations, is available on request to [privacy@gryps.aero]. Where processing takes place outside the EEA, it is covered by an adequacy decision or by EU Standard Contractual Clauses (Commission Decision 2021/914), and a copy of the safeguards can be obtained on request. All processing of this data takes place in the European Economic Area (Ireland).
5. Retention
Client account (name, email): for the duration of the business relationship and then [12 months], unless a longer period is required for accounting. Booking correspondence: [24 months]. Invoices and accounting records: [6 years] under Cypriot law. Server logs: [7 days]. Sign-up applications that are declined: deleted at the moment of decline. Client-supplied documentation: as instructed by the client and as required by the applicable airworthiness record-keeping rules.
6. Your rights
Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent at any time (Arts. 15–22 GDPR). Requests to [privacy@gryps.aero]; we answer within one month. You may complain to the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus, [address], or to the supervisory authority of your habitual residence. Equivalent rights exist under UK GDPR, the Swiss FADP, and the other regimes listed under “Jurisdictions”.
7. Provision, automated decisions, security
Providing enquiry data is voluntary but necessary to respond; without contract data we cannot perform the work. No automated decision-making or profiling takes place. Decisions about access to the booking area, including any strike or temporary block, are taken by a person, on stated grounds, and can be reviewed by writing to us. Technical and organisational measures: encrypted transport, access control and logging for the restricted area, role-based permissions, backups, confidentiality undertakings by personnel. Details: [security summary].
Cookies & tracking — draft
gryps.aero sets no cookies
This website uses no cookies, no local storage for tracking, no tag manager, no advertising and no social media plugins. Because no consent-requiring technology is used, no cookie banner is shown — a banner asking for consent we do not need would be misleading.
Visitor counting without cookies
The only measurement is an internal, aggregated count of visits kept on our own server. It uses no cookies and no device identifiers, it is visible to the administrator only, and nothing is passed to a third party. No IP address is stored. Since no information is stored on your device, Art. 5(3) ePrivacy consent is not triggered; the underlying processing rests on Art. 6(1)(f) GDPR and is described in the Privacy notice.
No third-party requests
Fonts, images, stylesheets and scripts are served from our own server. In particular, fonts are self-hosted and are not fetched from Google Fonts, so your IP address is never sent to Google or to any other third-party provider by this website. External addresses appear only as links you choose to click (for example book.gryps.aero).
Booking area
Where
What
Purpose
Duration
gryps.aero
None
Internal visit counting runs server-side, without cookies
—
book.gryps.aero
Session / login cookie [name]
Strictly necessary: keeps you logged in, protects the form against cross-site request forgery
Session, max [24 hours]
Strictly necessary cookies are exempt from consent under Art. 5(3) of the ePrivacy Directive as implemented in Cyprus; they carry no analytics function and are described here for transparency. Should cookie-based statistics or preference cookies ever be introduced, they will be set only after opt-in consent and this document will be updated first.
Browser controls
You can block or delete cookies in your browser at any time. Blocking the session cookie of the booking area prevents login; browsing gryps.aero is unaffected, because nothing is stored. Neither site counts visits using anything stored on your device: on both, de-duplication happens on our own servers.
Terms of service — draft (business-to-business)
1. Scope
These terms govern services provided by Mr. D., trading as GRYPS.AERO (“Contractor”), to the customer (“Client”): aircraft sheet metal, structural and composite repair, modification and compliance support work, performed at the Client’s facility or at an approved maintenance organisation nominated by the Client. Services are offered to businesses only; consumer rules do not apply. Deviating terms of the Client apply only if confirmed in writing.
2. Offer, scope of work and change orders
Quotations are based on the damage information supplied by the Client and remain valid for [30] days. The binding scope is the written work order. Hidden damage, deviating findings, missing parts or data, or a change of repair scheme require a written change order with adjusted price and schedule.
3. Approvals, data and release to service
Work is performed to type-certified data and approved repair schemes. Unless expressly agreed otherwise, the Client or the host approved maintenance organisation holds the applicable maintenance approval, provides the approved data, exercises certifying-staff functions and issues any Certificate of Release to Service. The Contractor performs the work under that organisation’s quality system and does not certify airworthiness on its own account unless a written statement says so.
4. Client duties
The Client provides safe access to the aircraft, hangar space, ground support, power, approved data and manuals, consumables and parts unless quoted otherwise, environmental conditions suitable for the process, and all information relevant to safety, hazardous materials and security screening. Delays or costs from missing prerequisites are borne by the Client.
5. Capacity, dates and AOG
Capacity figures shown on this website are indicative and non-binding until a booking is confirmed in writing. Dates are firm only when confirmed in the work order. AOG and field response is subject to availability, travel feasibility and visa or entry requirements. Cancellation: [more than 14 days] before the agreed start — [no charge]; [7–14 days] — [__%] of the quoted labour; [less than 7 days] or no-show — [__%] plus documented travel and accommodation costs.
6. Prices, travel and payment
Prices are net in [EUR] and exclude VAT, travel, accommodation, per-diem, freight, tooling rental, consumables and third-party charges unless stated. VAT treatment follows the place-of-supply rules; for cross-border B2B services the reverse charge may apply. Payment: [14] days from invoice without deduction. Late payment interest: [statutory rate under Cypriot law]. Set-off only against undisputed claims.
7. Warranty
The Contractor warrants workmanship in accordance with the approved data for [12 months] from completion or [500 flight hours], whichever occurs first, limited to re-performance of the defective work. Excluded are wear, operational damage, further use after a defect became apparent, work on parts supplied by the Client, and consequences of instructions or data provided by the Client. Parts carry only the manufacturer’s warranty.
8. Liability
Liability for intent and gross negligence, personal injury and death is unlimited, as required by law. Otherwise liability is limited to typical, foreseeable direct damage and in aggregate to [the higher of the order value or the sum insured, currently [amount]] per event. Liability for loss of profit, loss of use, aircraft-on-ground costs, contractual penalties owed to third parties, loss of data and indirect damage is excluded to the extent permitted by law. Mandatory aviation liability regimes remain unaffected.
9. Confidentiality, records and IP
Both parties keep technical and commercial information confidential. The Contractor may retain copies of work records and photographs as required for record-keeping, quality and defence of claims; publication of images or Client identity requires prior written consent. Repair schemes, drawings and documentation created by the Contractor remain the Contractor’s intellectual property, with a non-exclusive right of use granted to the Client for the aircraft concerned.
10. Force majeure, compliance, law and venue
Neither party is liable for events beyond its control (including airspace closures, strikes, epidemics, sanctions or authority orders). Both parties comply with applicable export control, sanctions and anti-bribery rules; the Contractor may refuse or stop work where compliance requires it. These terms are governed by the law of the Republic of Cyprus, excluding the CISG; exclusive venue is the competent court in [Larnaca], subject to the Complaints and dispute resolution section. Severability applies: an invalid clause is replaced by the lawful provision closest to its purpose.
Disclaimer & liability notice — draft
Website content
The content of this website is provided for general information about services and past work. It is prepared with care but without warranty of accuracy, completeness or currency. Capacity figures, availability, counts of airframes and locations are indicative snapshots and create no entitlement. Nothing on this website constitutes an offer, a quotation, technical instruction, approved data, or advice on airworthiness, and nothing may be relied on when planning or performing maintenance.
No technical instruction
Descriptions of repairs are simplified summaries of completed work. Repairs must always be carried out to the applicable approved data (SRM, AMM, Service Bulletin, Airworthiness Directive, DOA/EASA Form 1 or FAA 8110/8130 approval as relevant) by appropriately qualified and authorised personnel. GRYPS.AERO accepts no liability for any use of information on this website as a repair instruction.
Third-party links and marks
External links, including the booking area at book.gryps.aero, are checked at the time of publication; we accept no responsibility for third-party content. The booking area is operated by GRYPS.AERO itself, on third-party cloud infrastructure. This website (gryps.aero) itself loads no third-party resources — fonts, stylesheets, scripts and images are served from our own server. Manufacturer names, type designations and logos belong to their owners and imply no cooperation, authorisation or endorsement.
Photographs and records
Photographs show work as documented on site. They may be published only where the operator, owner or maintenance organisation has consented, and confidential markings, registrations, serial numbers and personal data are removed or masked. Where a consent is withdrawn, the image is removed on request to [office@gryps.aero].
Availability and security
We do not warrant uninterrupted availability of the website or of the restricted area, and we may suspend either for maintenance or security reasons. Attempted unauthorised access to the restricted area is logged and may be reported to the competent authorities.
Jurisdictions & data transfers — draft
[Under revision — the table below predates the current country list and does not yet include the Netherlands, Croatia, Serbia or Guernsey.]
Services are offered in the countries listed in section 03 of this website. Each engagement is additionally subject to local aviation, labour, immigration, tax and data protection rules. The table names the primary data protection regime we align with per group; local counsel confirmation is required per country before work starts.
Posted-worker notifications, A1 certificates, local VAT [confirm]
Europe, non-EU
United Kingdom (England, Scotland, Wales), Switzerland, Liechtenstein, Serbia
UK GDPR / Swiss FADP / EEA rules / Serbian LPDP
UK and Swiss adequacy in place; Serbia via SCCs. Work permits and customs for tooling [confirm]
Islands & dependencies
Cyprus, Malta, Crete, Rhodes, Guernsey, Mauritius, Bahamas
GDPR; Data Protection (Bailiwick of Guernsey) Law 2017; Mauritius DPA 2017; Bahamas DPPA
Guernsey has its own adequacy decision, separate from the UK. Other non-EU islands need SCCs and local entry rules [confirm]
Asia
Japan, Singapore, Hong Kong, South Korea, Thailand, Vietnam
APPI · PDPA · PDPO · PIPA · PDPA TH · PDPD
Japan and Korea adequacy; others via SCCs [confirm]
South & Central America
Brazil, Argentina, Chile, Uruguay, Paraguay, Panama
LGPD · Law 25.326 · Law 21.719 · Law 18.331 · Law 6534/2020 · Law 81 of 2019
Uruguay and Argentina adequacy; others via SCCs [confirm]
Contractual framework
Cross-border assignments are performed under the Terms of service, governed by Cypriot law, unless a local mandatory rule or the Client’s framework agreement requires otherwise. Where local law demands a local establishment, licence or registration for the work concerned, the work is performed through or under the approval of the Client’s or host organisation’s local entity: [describe arrangement per country].
Permanent establishment and tax
Assignment duration is monitored to avoid creating a permanent establishment or local wage-tax obligation. The booking system enforces a 180-day cap on presence in any one country per calendar year and a 360-day global cap. Thresholds and reporting per country: [tax adviser input required].
Export control & sanctions notice — draft
Scope
Work on military or dual-use aircraft, parts, technical data and repair documentation may be subject to export control and sanctions law, including EU Regulation 2021/821 (dual-use), national Cypriot export control law, the US EAR and ITAR where US-origin items or technical data are involved, and UK controls. Technical data and drawings may constitute a controlled “deemed export” when shared with foreign nationals.
Our commitments
We screen counterparties, aircraft owners and destinations against the EU consolidated list, UN, UK and US (OFAC, BIS, DDTC) lists before accepting an assignment.
We do not accept work where a licence is required and not held, or where the item, end-use or end-user is prohibited.
Access to confidential repair records in the restricted area is granted per person and per record, and every opening of a record is logged, so that it can be shown who was given sight of controlled data and when.
We keep classification and screening records and disclose them to authorities on request. [Retention period to be set by counsel. Export control law imposes a statutory minimum, so this cannot be left open — but no figure is stated here until counsel sets one.]
We stop work and inform the Client if new information indicates a controlled or sanctioned situation.
Client obligations
The Client warrants that it is entitled to commission the work, discloses any military, governmental or dual-use character of the aircraft and any applicable licence conditions, provides end-use and end-user statements where required, and does not use the results for prohibited purposes. The Client indemnifies the Contractor against claims and penalties resulting from incorrect or withheld information. Licence numbers and conditions applicable to current work: [insert].
Airworthiness & approvals notice — draft
Who releases the aircraft
GRYPS.AERO provides skilled structural repair labour and repair engineering support. Unless a written agreement states otherwise, the maintenance is performed within the scope, procedures and quality system of an approved maintenance organisation (e.g. EASA Part-145, FAA Part 145, or the equivalent approval of the state of registry) held by the Client or the host facility, and the Certificate of Release to Service is issued by that organisation’s certifying staff.
Data and traceability
Repairs are carried out only to approved or acceptable data: manufacturer SRM/AMM instructions, Service Bulletins, Airworthiness Directives, or a repair approved by the design organisation or authority. Parts and materials are used with traceability documents (EASA Form 1, FAA 8130-3 or equivalent); unapproved and suspected unapproved parts are refused and reported. Records, findings, deviations and photographs are documented and handed to the certifying organisation.
Personnel and human factors
Personnel hold the qualifications, authorisations and recurrent training required for the tasks performed: [licences, NDT levels, composite and human-factors training records]. Duty-time and fatigue limits of the host organisation are observed. Tooling and measuring equipment is calibrated: [calibration register].
Safety reporting
Occurrences are reported without delay to the host organisation and, where required, under Regulation (EU) No 376/2014 or the equivalent national scheme, in a just-culture framework. Safety concerns can be raised confidentially to [safety@gryps.aero].
Complaints & dispute resolution — draft
First step
Send complaints about work, invoicing or data handling to [office@gryps.aero] with the record number and a description. We acknowledge within [3 working days] and answer substantively within [15 working days]. Quality complaints are recorded in the corrective-action log and shared with the host organisation where the work was released.
Decisions about access to the booking area
If a strike has been recorded against your account, or your account has been blocked from making new booking requests, that decision was taken by a person and not by software. Write to [office@gryps.aero] and you will receive the grounds and a reasoned answer, and the decision will be reviewed. The grounds on which such a decision may be taken are published to logged-in users at book.gryps.aero under “Rules”.
Escalation
Technical or airworthiness concerns: the certifying organisation and, where appropriate, the competent authority of the state of registry or [Department of Civil Aviation, Cyprus].
Data protection: the Office of the Commissioner for Personal Data Protection, Cyprus, [address], or your local supervisory authority.
Commercial disputes: good-faith negotiation, then mediation at [Cyprus Chamber of Commerce mediation service] before litigation, unless urgent relief is needed.
Forum
Failing settlement, disputes are subject to the exclusive jurisdiction of the competent courts of [Larnaca], Republic of Cyprus, or, if agreed in the work order, to arbitration under the [rules, seat, language]. Nothing in this section limits mandatory local rights of the Client.