The protection of privacy on the Internet is of great importance for the future of Internet-based business models. The protection of your personal data is important to us. With this data protection information, we would like to inform you about which personal data we collect about you within the scope of our services and our website, why we use and pass on this data, how long we store the data, what rights you have and how you can exercise them.
When we talk about data below, we mean your personal data. This is any information from which you can be directly or indirectly identified as a person.
Therefore, please read the following information carefully.
Note on the transmission of data of third parties by you: If you transmit personal data about your spouse, life partner, relatives or other third parties, please inform them about the processing of their personal data by us and refer to this data protection information. Where appropriate, consent from these individuals to the transfer of data may be required.
WHO WE ARE
Responsible for the data processing described here is
(hereinafter referred to as "aeroPS")
WHERE WE GET YOUR DATA FROM AND WHAT DATA WE USE
If you use our website solely for information purposes, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you visit our website solely for information purposes, we collect the following access data, which are technically necessary for us to display our website to you and to ensure its stability and security. This access data includes the IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (i.e. name of the specific website accessed), access status/HTTP status code, amount of data transferred in each case, referrer URL (previously visited page), operating system and its interface, browser type as well as language and version of the browser software, notification of successful retrieval.
If you use our services, in particular the payment processing services for pilots and airports, we also process the following personal data: personal master data, contact data (in particular e-mail), login data, contract processing data, data defining minimum legislative requirements for invoicing, other payment information.
Furthermore, we receive your personal data if you contact us via contact form or e-mail. Personal data here are e.g. name, address, e-mail address, telephone number.
FOR WHAT PURPOSES DO WE PROCESS YOUR DATA?
We process personal data in accordance with the provisions of the European Data Protection Regulation (DSGVO) and the German Federal Data Protection Act (BDSG) for the following purposes and on the basis of the following legal grounds:
To fulfil pre-contractual and contractual obligations (Article 6 para. 1b DSGVO ) as well as on the basis of legal requirements (Article 6 para. 1c DSGVO):
When contacting us (via contact form or email), your details are processed for the purpose of handling the contact request and its processing.
For the establishment, processing, administration and implementation of the contractual relationship and, if applicable, for customer service purposes including recording of telephone calls, e-mails and other contact requests;
For the fulfilment of legal and regulatory requirements and any resulting monitoring and reporting obligations;
Within the framework of the balancing of interests - legitimate interests (Article 6 (1f) DSGVO):
We process your data to protect legitimate interests of us or of third parties, insofar as this is necessary. In particular, we pursue the following legitimate interests:
Improving the quality of our products and services, testing and optimising procedures for needs analysis and direct customer contact as well as measures for customer retention and service enhancement;
Advertising (incl. competitions) or conducting customer satisfaction and opinion surveys, provided you have not objected to the use of your data for this purpose;
Assertion of legal claims and defence in legal disputes;
Ensuring the IT security and operation of aeroPS, in particular the security of the website (see data listed above under "Where we obtain your data and what data we use").
In the context of consent given by you (Article 6 (1a) DSGVO ):
For certain processing of personal data (e.g. in the context of contact forms and for the use of certain cookies), we inform you separately and ask you to explicitly consent to such processing (e.g. for advertising or analysis purposes). Please note that you can revoke this consent at any time with effect for the future. The revocation can be sent to the contact details above, among others.
WITH WHOM WE SHARE YOUR DATA (RECIPIENTS)
Within aeroPS, in compliance with applicable data protection laws, those entities that need to access your data in order to fulfil our contractual and legal obligations will have access to it. Processors engaged by us may also receive data for these purposes. These are companies in the categories of payment processing, customer service, IT services, telecommunications, advice and consulting as well as sales and marketing.
Outside of aeroPS, we only pass on information about you to third parties if one of the legal bases mentioned under "For what purposes do we process your data?" applies or you have consented to the data being passed on. In this context, we share your data with the following recipients:
Other government authorities, if aeroPS has a legal obligation to do so.
IF DATA IS TRANSFERRED TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANISATION
The data provided will be processed by aeroPS and external service providers both within and outside the European Economic Area ("EEA"). Accordingly, whenever aeroPS uses or otherwise processes your personal data for the purposes described in this Privacy Notice, aeroPS may transfer your personal data outside the EEA, including to countries where laws provide a level of data protection that is not comparable to the level of data protection within the EEA. Such transfer will then be subject to the standard contractual clauses as set out in EU Commission Decision 2021/914/EU or any successor version as the contractual framework for the protection of your personal data by a level of protection applicable in the EEA. You can request a version of these standard contractual clauses at firstname.lastname@example.org.
HOW LONG WE STORE YOUR DATA
Where aeroPS processes and uses your personal data as permitted by law or with your consent, aeroPS will retain your personal data only for as long as is necessary for the purposes set out above or until you object to aeroPS using your personal data (where aeroPS has a legitimate interest in using your personal data) or until you withdraw your consent (where you have consented to aeroPS using your personal data). However, if a longer storage of your personal data by aeroPS is mandatory by law, aeroPS will process your personal data until the expiry of the relevant retention period.
For security reasons (for example, to clarify acts of abuse or fraud), log file information is stored for a maximum of 30 days and then deleted (see above "Where we get your data and what data we use"). Data whose further retention is required for evidentiary purposes is exempt from deletion until the respective incident has been finally clarified.
You have the following rights in relation to your data and our processing of it:
Right of access to the personal data concerned from Article 15 DSGVO, i.e. you have the right to request information about your personal data stored by us at any time;
Right to rectification under Article 16 DSGVO, i.e. in the event that your personal data is inaccurate or incomplete, you may request that it be rectified;
Right to erasure of your data under Article 17 DSGVO, i.e. you can request the erasure of your personal data to the extent permitted by law;
Right to restriction of the processing of your data under Article 18 DSGVO, i.e. you may have the right to request the erasure or restriction of the processing of your personal data if, for example, there is no longer a legitimate business purpose for such processing and legal retention obligations do not require the continued storage;
Right to data portability under Article 20 DSGVO, i.e. you may have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and to transfer this data to another controller without hindrance;
To assert these rights, you are welcome to contact us directly using the contact details above (see the "Who we are" section above).
RIGHT OF COMPLAINT
If you believe that aeroPS is not processing your personal data in accordance with the criteria described herein or with the data protection rules applicable in the EEA, you may at any time lodge a complaint with the data protection authority of the EEA member state in which you reside or with the data protection authority of the country or state in which aeroPS has its registered office.
RIGHT TO OBJECT TO THE PROCESSING OF YOUR DATA UNDER ARTICLE 21 DSGVO.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1e) DSGVO (data processing in the public interest) and Article 6(1f) DSGVO (data processing on the basis of a balance of interests).
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.
Please send your objection to email@example.com or to our contact details listed above.
AM I OBLIGED TO PROVIDE DATA?
Within the scope of our Internet offer, you must provide the personal data that is required for the use of our Internet offer for technical or IT security reasons. If you do not provide the aforementioned data, you will not be able to use our website.
In the context of contract processing, contacting us by form or e-mail, you only have to provide the personal data that is required for the processing of the contract or the handling of your enquiry. Otherwise, we will not be able to process the contract or handle your enquiry.
WILL MY DATA BE USED FOR AUTOMATED DECISION MAKING INCLUDING PROFILING?
We do not use any automated decision making processes including profiling.
These cookies are essential for the functioning of our website.
By default, we only use necessary cookies. Necessary cookies enable the core functionalities of our website. The website cannot be displayed correctly without these cookies or individual areas may not function properly. Necessary cookies can only be prevented by appropriate settings in your browser.
SOCIAL MEDIA PLUGINS
We use social media plug-ins from the social networks Facebook and Instagram on our website on the basis of Art. 6 (1) p. 1 lit. f DSGVO. The underlying promotional purpose is to be regarded as a legitimate interest within the meaning of the DSGVO. The responsibility for data protection-compliant operation is to be ensured by their respective providers. We integrate these plug-ins using the so-called two-click method in order to protect visitors to our website as best as possible.
Social media plug-ins from Facebook are used on our website to make their use more personal. We use the "LIKE" or "SHARE" button for this purpose. This is an offer from Facebook.
When you call up a page of our website that contains such a plugin, your browser establishes a direct connection with the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser, which then integrates it into the website.
By integrating the plugins, Facebook receives the information that your browser has called up the corresponding page of our website, even if you do not have a Facebook account or are not currently logged in to Facebook. This information (including your IP address) is transmitted by your browser directly to a Facebook server in the USA and stored there.
If you are logged in to Facebook, Facebook can directly assign your visit to our website to your Facebook account. If you interact with the plugins, for example by clicking the "LIKE" or "SHARE" button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your Facebook friends.
Facebook may use this information for the purposes of advertising, market research and the needs-based design of Facebook pages. For this purpose, Facebook creates usage, interest and relationship profiles, e.g. to evaluate your use of our website with regard to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website and to provide other services associated with the use of Facebook.
If you do not want Facebook to assign the data collected via our website to your Facebook account, you must log out of Facebook before visiting our website.
Our website also uses so-called social plugins ("plugins") from Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram").
The plugins are marked with an Instagram logo, for example in the form of an "Instagram camera".
When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the Instagram servers. The content of the plugin is transmitted by Instagram directly to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has called up the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram.
This information (including your IP address) is transmitted by your browser directly to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can directly assign your visit to our website to your Instagram account. If you interact with the plugins, for example by clicking the "Instagram" button, this information is also transmitted directly to an Instagram server and stored there.
The information is also published on your Instagram account and displayed there to your contacts.
If you do not want Instagram to directly assign the data collected via our website to your Instagram account, you must log out of Instagram before visiting our website.