PRIVACY POLICY
A. GENERAL PROVISIONS ON DATA PROCESSING ON OUR WEBSITE
1. SUBJECT MATTER OF THIS PRIVACY POLICY
We, Flugplatzgesellschaft Arnsberg-Menden mbH (hereinafter also referred to as FAM), appreciate your interest in our Internet presence and our offers on our website.
The protection of your personal data is a major and very important concern for us. We would therefore like to inform you in detail below about what data is collected when you visit our website and use our services there and how it is processed or used by us in the following. Furthermore, we will also inform you about the accompanying protective measures we have taken in technical and organizational terms.
The processing of personal data, such as the name, address, e-mail address or telephone number of a data subject, is always carried out in accordance with the applicable data protection regulations. By means of this data protection declaration, we would like to inform you about the type, scope and purpose of the personal data collected, used and processed by us and, if you are affected by the data processing, to clarify this.
Although we, as the controller responsible for the processing of personal data, have implemented numerous technical and organizational measures, Internet-based data transmission may in principle have security gaps, meaning that absolute protection cannot be guaranteed. Please bear this in mind when using our website.
2. DEFINITIONS
This privacy policy uses terms that have been defined by the legislator in the General Data Protection Regulation (hereinafter also referred to as GDPR). You can access the GDPR at the following link:
http://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32016R0679&from=DE
The aim of our privacy policy is to inform you in a simple and understandable way about the processing of your personal data on our website.
3. NAME AND ADDRESS OF THE DATA CONTROLLER
The controller within the meaning of data protection law is
Flugplatzgesellschaft Arnsberg-Menden mbH
Hüingser Ring 52
58710 Menden
Phone: 0049-2373-89-1488
Fax: 0049-2373-89-1699
E-mail: digital@obo.de
4. CONTACT DETAILS OF THE DATA PROTECTION OFFICER
Airfield company Arnsberg-Menden mbH
– the data protection officer –
Hüingser Ring 52
58710 Menden
Phone: 0049-2373-89-1351
E-mail: datenschutz(at)obo.de
5. DELETION AND BLOCKING OF PERSONAL DATA/STORAGE PERIOD
Unless otherwise stipulated for the respective processing of personal data in Chapter B. of this Privacy Policy, the data stored by us will be deleted after storage is no longer required and the deletion does not conflict with any statutory retention obligations. If the data of the data subject is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data of the data subject that must be retained for commercial or tax law reasons.
In accordance with the legal requirements, the company is required to keep records for six years in accordance with Section 257 (1) HGB (trading books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting vouchers, etc.) and for ten years in accordance with Section 147 (1) AO (books, records, management reports, accounting vouchers, commercial and business letters, etc.).
6.RIGHTS OF THE DATA SUBJECT
6.1. Right to confirmation
Each data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed. If a data subject wishes to avail himself of this right of confirmation, he or she may, at any time, contact us or our Data Protection Officer.
6.2. Right to information
Any person affected by the processing of personal data has the right to receive free information from us at any time about the personal data stored about them and a copy of this information. The data subject is also entitled to the following information:
– the purposes of processing
– the categories of personal data that are processed
– the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations
– where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period
– the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing
– the existence of a right to lodge a complaint with a supervisory authority
– if the personal data is not collected from the data subject: All available information about the origin of the data
– the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject
Furthermore, the data subject has a right to information as to whether personal data has been transferred to a third country or to an international organization. If this is the case, the data subject also has the right to obtain information about the appropriate safeguards in connection with the transfer.
If a data subject wishes to avail himself of this right of access, he or she may, at any time, contact us or our Data Protection Officer.
6.3 Right to rectification
Any person affected by the processing of personal data has the right to demand the immediate correction of incorrect personal data concerning them. Furthermore, the data subject has the right to request the completion of incomplete personal data by means of a supplementary declaration, taking into account the purposes of the processing.
If a data subject wishes to exercise this right to rectification, he or she may, at any time, contact us or our Data Protection Officer.
6.4 Right to erasure
Any person affected by the processing of personal data shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay where one of the following grounds applies and insofar as the processing is not necessary:
– The personal data was collected or otherwise processed for purposes for which it is no longer necessary.
– The data subject withdraws consent on which the processing is based according to point (a) of Article 6(1) GDPR, or point (a) of Article 9(2) GDPR, and where there is no other legal ground for the processing.
– The data subject objects to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21 (2) GDPR.
– The personal data was processed unlawfully.
– The deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject.
– The personal data was collected in relation to information society services offered in accordance with Art. 8 para. 1 GDPR.
If one of the aforementioned reasons applies, and a data subject wishes to request the erasure of personal data stored by FAM, he or she may at any time contact our Data Protection Officer or another employee. We will then arrange for the deletion request to be complied with immediately.
If the personal data has been made public by FAM and our company is obliged to delete the personal data in accordance with Art. 17 para. 1 GDPR, we shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform other data controllers who process the published personal data, that the data subject has requested the deletion of all links to this personal data or of copies or replications of this personal data from these other data controllers, insofar as the processing is not necessary. We will take the necessary steps in individual cases.
6.5 Right to restriction of processing
Any person affected by the processing of personal data has the right to obtain from the controller restriction of processing where one of the following applies:
– The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.
– The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead.
– The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims.
– The data subject has objected to processing pursuant to Art. 21 (1) GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.
If one of the aforementioned cases applies and a data subject wishes to request the restriction of personal data stored by FAM, they can contact us or our data protection officer at any time. We will then arrange for the restriction of processing.
6.6 Right to data portability
Any person concerned by the processing of personal data has the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and has the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Furthermore, in exercising their right to data portability pursuant to Art. 20 (1) GDPR, the data subject has the right to have the personal data transmitted directly from one controller to another, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.
To assert the right to data portability, the data subject can contact us or our data protection officer at any time.
6.7 Right of objection
Any person affected by the processing of personal data has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1) GDPR. This also applies to profiling based on these provisions.
FAM shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defense of legal claims.
If FAM processes personal data for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing. This also applies to profiling insofar as it is associated with such direct advertising. If the data subject objects to us to the processing for direct marketing purposes, we will no longer process the personal data for these purposes.
In addition, the data subject has the right, on grounds relating to his or her particular situation, to object to processing of personal data concerning him or her by us for scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
To exercise the right to object, the data subject may contact us directly. The data subject is also free, in the context of the use of information society services, and notwithstanding Directive 2002/58/EC, to exercise his or her right to object by automated means using technical specifications.
6.8 Automated decisions in individual cases including profiling
Each data subject shall have the right granted by the European legislator not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her, or similarly significantly affects him or her, as long as the decision
– is not necessary for the conclusion or performance of a contract between the data subject and the controller, or
– is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, or
– with the express consent of the data subject.
Is the decision
– necessary for the conclusion or performance of a contract between the data subject and the controller, or
– Where the data subject has given his or her explicit consent, FAM shall implement suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.
If the data subject wishes to assert rights relating to automated decisions, they can contact us or our data protection officer at any time.
6.9 Right to withdraw consent under data protection law
Any person affected by the processing of personal data has the right to withdraw consent to the processing of personal data at any time.
If the data subject wishes to exercise his or her right to withdraw consent, he or she may contact us at any time.
Any data subject can contact us directly at any time with any questions or suggestions regarding data protection.
6.10 Right to lodge a complaint with a data protection supervisory authority
Any person affected by the processing of personal data has the right to complain to a data protection supervisory authority about the processing of your personal data by us.
7. LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
Unless otherwise stated in the description of the respective data processing operation in the following Chapter B. of this Privacy Policy, the following provisions apply.
Art. 6 I lit. a GDPR serves FAM as the legal basis for processing operations for which consent must be obtained for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party by us or one of our subsidiaries – to whose services and/or products the request relates – the processing is based on Art. 6 I lit. b GDPR. The same applies to processing operations that are necessary to carry out pre-contractual measures, for example in cases of inquiries about our services and products.
If FAM is subject to a legal obligation which requires the processing of personal data, the processing is based on Art. 6 I lit. c GDPR. In rare cases, the processing of personal data may become necessary in order to protect the vital interests of the data subject or another natural person. In this case, the processing is based on Art. 6 I lit. d GDPR.
Ultimately, processing operations could be based on Art. 6 I lit. f GDPR. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to safeguard a legitimate interest of FAM or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not prevail. We are permitted to carry out such processing operations in particular because they have been specifically mentioned by the European legislator (see recital 47 sentence 2 GDPR).
8. CONSIDERATION OF LEGITIMATE INTERESTS
Unless otherwise specified in the description of the respective data processing operation in Chapter B. of this Privacy Policy and the processing of personal data is based on Article 6 I lit. f GDPR, our legitimate interest lies in the performance of our business activities and the associated economic interest.
9. DATA PROTECTION WHEN USING OUR CONTACT DATA / REVOCATION OPTION
If you use the contact details provided on our website (e.g. our e-mail address or fax number) to contact us, the personal data you provide will be processed for the purpose for which you contacted us.
If the reason for your contacting us is your interest in our services or products or the fulfillment of an existing contract with us, the legal basis is Art. 6 para. 1 lit. b GDPR. In all other cases of contact, we have a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in data processing based on the communication initiated by you.
The personal data collected to answer your request or to establish and implement the contractual relationship will be stored until the request has been fully processed or the contractual relationship has ended and then deleted (not before the expiry of any warranty periods), unless we are obliged to store it for a longer period of time in accordance with Article 6 para. 1 sentence 1 lit. c GDPR due to tax and commercial law storage and documentation obligations (from HGB, StGB or AO) or you have consented to further storage in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. In addition, we would like to maintain contact with you even after processing the order or after the end of the contract and draw your attention to our services and offers in electronic form, e.g. via the e-mail address you have provided. We base data processing for these purposes of customer retention and maintenance as well as facilitating contact on a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR, whereby we also see the advantages of this approach when weighing up your interests against your fundamental rights and freedoms, e.g. by informing you in good time about our services and offers, the opportunity to be asked to prepare offers for further construction projects or to be able to clarify questions directly with the contact persons. You have the right to object, on grounds relating to your particular situation, at any time to data processing which is based on Article 6(1)(f) GDPR and which is not for direct marketing purposes. In the case of direct advertising, however, you can object to the processing at any time without giving reasons.
Data processed on the basis of Art. 6 para. 1 lit f. GDPR for customer loyalty or direct contact will be processed until the legitimate interest ceases to apply and then deleted, at the latest when you object to the data processing. Statutory retention obligations are also observed with regard to this data.
Recipients of the personal data processed in accordance with this provision are IT service providers (in particular hosters) with whom we have concluded a corresponding order processing agreement in accordance with Art. 28 GDPR and, if applicable, subsidiaries whose services and/or products your request relates to.
10. DATA PROTECTION FOR JOB APPLICATIONS AND IN THE APPLICATION PROCESS
We collect and process the personal data of applicants for the purpose of carrying out the application process and thus on the basis of a pre-contractual measure within the meaning of Art. 6 para. 1 lit. b GDPR or our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in the recruitment of employees.
Processing may also be carried out electronically, e.g. if an applicant sends us the relevant application documents electronically, for example by email or via our contact form. If we conclude an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the controller does not conclude an employment contract with the applicant, the application documents will be automatically deleted two months after notification of the rejection decision, unless deletion conflicts with any other legitimate interests of the controller. Other legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).
Due to the digitized recording of the applications received, the recipients of the processed personal data are our IT service providers (in particular hosters), with whom we have concluded corresponding order processing agreements within the meaning of Art. 28 GDPR.
11. CHANGES TO THIS PRIVACY POLICY
FAM reserves the right to amend these data protection provisions at any time with effect for the future. A current version is always available on the website. Please visit the website regularly and inform yourself about the applicable data protection provisions.
B. SPECIAL PROVISIONS ON DATA PROCESSING ON OUR WEBSITE
1. COLLECTION AND USE OF YOUR DATA
The scope and type of collection and use of your data differs depending on whether you visit our website only to retrieve information or make use of services offered by us, such as concluding a contract via the website or whether you register.
2. INFORMATIONAL USE / DATA COLLECTED / COOKIES
(1) General information
Cookies cannot execute programs or transfer viruses to your computer. They serve to make the website more user-friendly and effective overall.
Our website uses the following types of cookies, the scope and function of which are explained below:
- Transient cookies
- Persistent cookies
Transient cookies are automatically deleted when you close the browser. These include session cookies in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
Persistent cookies are automatically deleted after a specified period, which differs depending on the cookie and can be several years. You can delete the cookies at any time in the security settings of your browser.
(2) Cookies that are absolutely necessary for the operation of the website.
If you use the website for purely informational purposes, e.g. if you do not make a booking via our website or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):
- IP address
- Language and version of the browser software.
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status / http status code
- Amount of data transferred in each case
- Website from which the request comes
- Browser
- Operating system and its interface
The data processed in accordance with paragraph 1 of this provision will be stored for the specified purposes for a period of 30 days and then deleted.
(3) Cookies that are not absolutely necessary for the operation of the website.
We only use cookies that are not absolutely necessary for the operation of the website with your express consent. For this purpose, we use the consent tool of Usercentrics GmbH. In this context, FAM transmits personal data (consent data) to Usercentrics GmbH, Sendlingerstr. 7, 80331 Munich. This takes place within the framework of order processing in accordance with Article 28 GDPR. Consent data includes the following data Date and time of the visit or consent / refusal, device information, anonymized IP address. The data is processed for the purpose of compliance with legal obligations (obligation to provide evidence pursuant to Art. 7 para. 1 GDPR) and the associated documentation of consent and thus on the basis of Art. 6 para. 1 lit. c) GDPR. Local storage is used to store the data.
The consent data is stored for 3 years. The data is stored in the European Union. Further information on the data collected and contact options can be found at https://usercentrics.com/privacy-policy/
3. PLUGINS AND TOOLS
3.1 Usercentrics Consent Management Platform
This is a consent management service.
Processing company
Usercentrics GmbH
Sendlinger Str. 7, 80331 Munich, Germany
Data processing purposes
This list represents the purposes of data collection and processing. Consent is only valid for the stated purposes. The data collected cannot be used or stored for any purpose other than those listed below.
- Compliance with legal obligations
- Storage of the consent
Technologies used
- Local storage
- Enable cookies
Data collected
This list contains all (personal) data collected by or through the use of this service.
- Device information
- Browser information
- Anonymized IP address
- Opt-in and opt-out data
- Date and time of the visit
- Request URLs of the website
- Page path of the website
- Geographical location
Legal basis
The required legal basis for the processing of data is set out below
- Art. 6 para. 1 s. 1 lit. c GDPR
Place of processing
European Union (consent database is located in Belgium)
Storage period
The retention period is the period of time during which the collected data is stored for processing. The data must be deleted as soon as it is no longer required for the specified processing purposes.
The consent data (consent given and withdrawal of consent) is stored for three years. Data will be exported after termination of the contract.
Data recipient
- Usercentrics GmbH
Data protection officer of the processing company
Below you will find the e-mail address of the data protection officer of the processing company.
Click here to read the data processor’s privacy policy https://usercentrics.com/privacy-policy/
Storage Information
Below you can see the longest potential duration for storage on a device, as set when using the cookie method of storage and if there are any other methods used.
- Maximum age of cookie storage: –
- Non-cookie storage: no
3.2. Google Tag Manager
This is a tag management system for managing JavaScript and HTML code snippets that can be used to implement tracking, analytics, personalization and marketing performance tags and tools.
Processing company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data processing purposes
This list represents the purposes of data collection and processing. Consent is only valid for the stated purposes. The data collected cannot be used or stored for any purpose other than those listed below.
- Functionality
Technologies used
- Pixel
Data collected
This list contains all (personal) data collected by or through the use of this service.
- Aggregated data for triggering tags
Legal basis
The required legal basis for the processing of data is set out below
- Art. 6 para. 1 s. 1 lit. f GDPR
Place of processing
United States of America
Storage period
The retention period is the period of time during which the collected data is stored for processing. The data must be deleted as soon as it is no longer required for the specified processing purposes.
The data will be deleted after 14 days.
Data recipient
- Alphabet Inc.
- Google LLC
- Google Ireland Limited
Data protection officer of the processing company
Below you will find the e-mail address of the data protection officer of the processing company.
https://support.google.com/policies/contact/general_privacy_form
Transfer to third countries
This service may transfer the collected data to another country. Please note that this service may transfer data outside the European Union and the European Economic Area and to a country that does not provide an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for monitoring and surveillance purposes without you having any legal recourse. Below you will find a list of the countries to which the data is transferred. This may be the case for various purposes, e.g. for storage or processing.
Worldwide
Click here to read the data processor’s privacy policy https://policies.google.com/privacy?hl=en
Click here to object on all domains of the processing company https://safety.google/privacy/privacy-controls/
Click here to read the cookie policy of the data processor https://www.google.com/intl/de/tagmanager/use-policy.html
Storage Information
Below you can see the longest potential duration for storage on a device, as set when using the cookie method of storage and if there are any other methods used.
- Maximum age of cookie storage: –
- Non-cookie storage: no
3.3 fonts.com
This is a web font service.
Processing company
Monotype Imaging Holdings Inc.
600 Unicorn Park Drive, Woburn, Massachusetts 01801, United States of America
Data processing purposes
This list represents the purposes of data collection and processing. Consent is only valid for the stated purposes. The data collected cannot be used or stored for any purpose other than those listed below.
- Provision of web fonts
Technologies used
- Cookies
Data collected
This list contains all (personal) data collected by or through the use of this service.
- IP address
- Browser information
- Refferer URL
- Customer ID
Legal basis
The required legal basis for the processing of data is set out below
- Art. 6 para. 1 s. 1 lit. a GDPR
Place of processing
European Union
Storage period
The retention period is the period of time during which the collected data is stored for processing. The data must be deleted as soon as it is no longer required for the specified processing purposes.
The user data collected is stored for up to 30 days from the date of collection.
Data recipient
- Monotype Imaging Holdings Inc.
Data protection officer of the processing company
Below you will find the e-mail address of the data protection officer of the processing company.
Click here to read the data processor’s privacy policy https://www.monotype.com/legal/privacy-policy
Storage Information
Below you can see the longest potential duration for storage on a device, as set when using the cookie method of storage and if there are any other methods used.
- Maximum age of cookie storage: –
- Non-cookie storage: no
3.4 Google Fonts
This is a collection of fonts for commercial and personal use.
Processing company
Google Ireland Limited
Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data processing purposes
This list represents the purposes of data collection and processing. Consent is only valid for the stated purposes. The data collected cannot be used or stored for any purpose other than those listed below.
- Provision of fonts
Data collected
This list contains all (personal) data collected by or through the use of this service.
- IP address
- CSS request
- Accumulated usage data
- Requirements for font files
- Referrer URL
Legal basis
The required legal basis for the processing of data is set out below
- Art. 6 para. 1 s. 1 lit. a GDPR
Place of processing
European Union
Storage period
The retention period is the period of time during which the collected data is stored for processing. The data must be deleted as soon as it is no longer required for the specified processing purposes.
The data is deleted as soon as it is no longer required for the processing purposes.
Data recipient
- Alphabet Inc.
- Google LLC
- Google Ireland Limited
Data protection officer of the processing company
Below you will find the e-mail address of the data protection officer of the processing company.
https://support.google.com/policies/contact/general_privacy_form
Transfer to third countries
This service may transfer the collected data to another country. Please note that this service may transfer data outside the European Union and the European Economic Area and to a country that does not provide an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for monitoring and surveillance purposes without you having any legal recourse. Below you will find a list of the countries to which the data is transferred. This may be the case for various purposes, e.g. for storage or processing.
Worldwide
Click here to read the data processor’s privacy policy https://policies.google.com/privacy?hl=en
Click here to object on all domains of the processing company https://safety.google/privacy/privacy-controls/
Click here to read the cookie policy of the data processor https://policies.google.com/technologies/cookies?hl=en
Storage Information
Below you can see the longest potential duration for storage on a device, as set when using the cookie method of storage and if there are any other methods used.
- Maximum age of cookie storage: –
- Non-cookie storage: no
3.5 Fontawesome
This is a service toolkit service for fonts and symbols.
Processing company
Fonticons. Inc.
6 Porter Road, Apartment 3R, Cambridge, MA 02140, United States of America
Data processing purposes
This list represents the purposes of data collection and processing. Consent is only valid for the stated purposes. The data collected cannot be used or stored for any purpose other than those listed below.
- Provision of fonts
Technologies used
- Cookies
Data collected
This list contains all (personal) data collected by or through the use of this service.
- IP address
- Referrer URL
Legal basis
The required legal basis for the processing of data is set out below
- Art. 6 para. 1 sentence 1 lit. a GDPR
Place of processing
United States of America
Storage period
The retention period is the period of time during which the collected data is stored for processing. The data must be deleted as soon as it is no longer required for the specified processing purposes.
The data is deleted as soon as it is no longer required for the processing purposes.
Data recipient
- Fonticons. Inc.
Data protection officer of the processing company
Below you will find the e-mail address of the data protection officer of the processing company.
Transfer to third countries
This service may transfer the collected data to another country. Please note that this service may transfer data outside the European Union and the European Economic Area and to a country that does not provide an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for monitoring and surveillance purposes without you having any legal recourse. Below you will find a list of the countries to which the data is transferred. This may be the case for various purposes, e.g. for storage or processing.
United States of America
Click here to read the data processor’s privacy policy https://fontawesome.com/privacy
Storage Information
Below you can see the longest potential duration for storage on a device, as set when using the cookie method of storage and if there are any other methods used.
- Maximum age of cookie storage: 2 years
- Non-cookie storage: no
3.6 Google Analytics
This is a web analysis service.
Processing company
Google Ireland Limited
Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data processing purposes
This list represents the purposes of data collection and processing. Consent is only valid for the stated purposes. The data collected cannot be used or stored for any purpose other than those listed below.
- Analysis
Technologies used
- Agree to cookies
- Pixel tags
Data collected
This list contains all (personal) data collected by or through the use of this service.
- IP address
- Date and time of the visit
- Usage data
- Click path
- App updates
- Browser information
- Device information
- JavaScript support
- Visited pages
- Referrer URL
- Downloads
- Flash version
- Location information
- Purchase activity
- Widget interactions
Legal basis
The required legal basis for the processing of data is set out below
- Art. 6 para. 1 s. 1 lit. a GDPR
Place of processing
European Union
Storage period
The retention period is the period of time during which the collected data is stored for processing. The data must be deleted as soon as it is no longer required for the specified processing purposes.
The retention period depends on the type of data stored. Each customer can determine how long Google Analytics retains data before it is automatically deleted.
Data recipient
- Alphabet Inc.
- Google LLC
- Google Ireland Limited
Data protection officer of the processing company
Below you will find the e-mail address of the data protection officer of the processing company.
https://support.google.com/policies/contact/general_privacy_form
Transfer to third countries
This service may transfer the collected data to another country. Please note that this service may transfer data outside the European Union and the European Economic Area and to a country that does not provide an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for monitoring and surveillance purposes without you having any legal recourse. Below you will find a list of the countries to which the data is transferred. This may be the case for various purposes, e.g. for storage or processing.
Worldwide
Click here to read the data processor’s privacy policy https://policies.google.com/privacy?hl=en
Click here to object on all domains of the processing company https://tools.google.com/dlpage/gaoptout?hl=de
Click here to read the cookie policy of the data processor https://policies.google.com/technologies/cookies?hl=en
Storage Information
Below you can see the longest potential duration for storage on a device, as set when using the cookie method of storage and if there are any other methods used.
- Maximum age of cookie storage: –
- Non-cookie storage: no
3.7 Gstatic
This is a domain used by Google to load static content into a different domain name to reduce bandwidth usage and increase network performance for the end user.
Processing company
Alphabet Inc.
1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, United States of America
Data processing purposes
This list represents the purposes of data collection and processing. Consent is only valid for the stated purposes. The data collected cannot be used or stored for any purpose other than those listed below.
- Reduction of bandwidth usage
- Increasing network performance
Technologies used
- JavaScript
Data collected
This list contains all (personal) data collected by or through the use of this service.
- Pictures
- CSS
- JavaScript code
Legal basis
The required legal basis for the processing of data is set out below
- Art. 6 para. 1 s. 1 lit. f GDPR
Place of processing
United States of America
Storage period
The retention period is the period of time during which the collected data is stored for processing. The data must be deleted as soon as it is no longer required for the specified processing purposes.
Requests for CSS assets are cached for 1 day, font files are cached for one year. Some information is retained until it is removed by the user. Others are retained after a certain period of time.
Data recipient
- Alphabet Inc.
Data protection officer of the processing company
Below you will find the e-mail address of the data protection officer of the processing company.
https://support.google.com/policies/contact/general_privacy_form
Transfer to third countries
This service may transfer the collected data to another country. Please note that this service may transfer data outside the European Union and the European Economic Area and to a country that does not offer an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for monitoring and surveillance purposes without you having any legal recourse. Below you will find a list of the countries to which the data is transferred. This may be the case for various purposes, e.g. for storage or processing.
Worldwide
Click here to read the data processor’s privacy policy http://www.google.com/intl/de/policies/privacy/
Click here to object on all domains of the processing company https://safety.google/privacy/privacy-controls/
Click here to read the cookie policy of the data processor https://policies.google.com/technologies/cookies?hl=en
Storage Information
Below you can see the longest potential duration for storage on a device, as set when using the cookie method of storage and if there are any other methods used.
- Maximum age of cookie storage: –
- Non-cookie storage: no
5. use of functions and offers on our website
5.1 Contact form
(1) When using our contact forms on a voluntary basis, you will be asked to provide your title, surname, e-mail address and a comment, whereby this information is marked as a mandatory field. You also have the option of providing additional information if required in order to optimize your personal availability and contact (e.g. telephone number).
(2) When you send your request, we store your IP address and the time of registration. The purpose of this procedure is to be able to verify your request and, if necessary, to clarify any possible misuse of your personal data.
(3) The legal basis for the processing of your personal data is first of all the consent you have expressly given in accordance with Art. 6 para. 1 lit. a GDPR. In addition, the data processing serves to answer the request initiated by you and thus also for (pre-) contractual purposes within the meaning of Art. 6 para. 1 lit b. GDPR. Furthermore, the data processing is carried out on the basis of a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in answering your inquiry about our services or offers and the proof of possible misuse of the e-mail address used for this purpose. Insofar as a distinction is made between mandatory and voluntary information, only data that is typically also transmitted via other inquiry channels – e.g. via the e-mail signature of the inquirer – and for which experience has shown that this data (see paragraph 2) is necessary to answer the inquiry will be requested as mandatory information within the meaning of Art. 5 para. 1 lit. c, Art. 25 GDPR.
Voluntary information helps us to provide you with the best possible service immediately without having to ask any further questions. A legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR ultimately also exists in being able to use the data provided by you for subsequent contact in the sense of (potential) customer care and to inform you about our offers and services.
(5) We will delete the data provided by you as soon as storage for the aforementioned purposes is no longer necessary. If you have revoked your consent to data processing, which is possible at any time with effect for the future, but does not affect the permissibility of the data processing carried out until the revocation, and/or have asserted an objection to data processing as a legitimate interest (Art. 6 para. 1 lit. f GDPR), the data will be deleted by us immediately. This only does not apply if and insofar as another legal reason (e.g. that of pre- and post-contractual fulfillment from Art. 6 para. 1 lit. b GDPR) justifies further processing or legal storage obligations prevent immediate deletion (Art. 6 para. 1 lit. c GDPR).
(6) Recipients of the data processed in accordance with this provision are IT service providers (in particular hosters) with whom we have concluded corresponding order processing agreements in accordance with Art. 28 GDPR.
6. safety measures
We take organizational, contractual and technical security measures in accordance with the state of the art to ensure that the data protection regulations are complied with and to protect the data processed by us against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. The security measures include, in particular, the encrypted transmission of data between your browser and our server.
C. SPECIAL FEATURES OF DATA PROCESSING VIA SOCIAL NETWORKS
No social plugins are used on our website. We only provide links to various social media services.
The social media platforms process your personal data when you access our respective channel.
The legal basis for the processing of your personal data arises from a legitimate interest (Article 6 (1) (f) GDPR). The legitimate interest consists in communicating with the interested parties and customers active there, answering inquiries and providing information about our products. If you have been asked by the provider of the respective social media platform for consent to the processing described, the legal basis is Article 6(1)(a) GDPR.
Please refer to the data protection notices of the respective service providers to find out which personal data is collected by the service providers, information about your right to object (opt-out) and information about your data protection rights. Please refer to the following links of the platform providers.
User data may be processed in third countries (countries outside the European Economic Area “EEA”). However, this may result in risks for the user, e.g. that the enforcement of user rights could be made more difficult.
Further information can be found under the links of the respective platform providers.
As a rule, the data is processed for market research and advertising purposes. For example, usage profiles can be created from the usage behavior and the resulting interests of the users. These usage profiles can be used, for example, to place advertisements inside and outside the platforms that presumably correspond to the interests of the users.
For this purpose, cookies are stored on the user’s computer, in which the user’s behavior and interests are stored.
A detailed description of the respective processing operations and the options to object
(opt-out) can be found under the respective links of the platform providers.
In the case of requests for information and the assertion of user rights, we would like to point out that these can be asserted most effectively with the platform providers. Only the providers have access to the users’ data and can take appropriate measures and provide information directly. If you still need help, you can contact us.
Comment function
You can leave comments on the content published by us on the FAM channels of the social platforms. By clicking the “Send comment” button, personal data is collected from you. Please refer to the privacy policy of the respective platform provider to find out which personal data this is in detail, as well as further data protection information. The comment you enter will be published with your user name on our respective social media profile.
If you like our social media channels and/or subscribe to updates, personal data will be collected from you. Please refer to the privacy policy of the respective platform provider to find out what this is.
The basis is an agreement on joint processing in accordance with Article 26 GDPR.
Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) and Flugplatzgesellschaft Arnsberg-Menden mbH are jointly responsible for the processing of your data via our fan page.
Privacy Policy: https://www.facebook.com/about/privacy/ and https://facebook.com/privacy/explanation
Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
As part of the “Page Insight” service, your behavior in relation to our fan page is recorded. The analyses visible to us do not allow us to analyze the usage behavior of individual persons. We only see aggregated data (e.g. number of hits, likes, followers, region of origin, age group, gender).
Further information can be found at: https://www.facebook.com/legal/terms/page_controller_addendum and
https://www.facebook.com/legal/terms/information_about_page_insights_data.
Status: 23.04.2021
