Privacy

I. Name and address of the Controller

The Controller in the meaning of the General Data Protection Regulation and other national data protection laws of the Member States as well as other data protection regulations is the:

Aero-Dienst GmbH
Flughafenstraße 100
90411 Nürnberg
Deutschland
Tel.: +49 911 93 56-0
E-mail: info@aero-dienst.de
Website: www.aero-dienst.de

II. Name and Address of the data protection officer

The data protection officer of the Controller can be reached as follows:

Data Protection Officer Aero-Dienst GmbH
Flughafenstraße 100
90411 Nürnberg
Deutschland
Tel.: +49 911 93 56-0
E-mail: datenschutz@aero-dienst.de
Website: www.aero-dienst.de

III. General information about data processing

1. Extent of personal data processing

We process our users’ personal data only to the extent required for providing a functional website and supplying our content and services. We process our users’ personal data regularly only if the respective users have given their consent. The only exception to this is where it is actually impossible for us to obtain prior consent and processing of the data is legally allowed.
The same applies in the event that we supply you with information materials at your request or to respond to your inquiries. In these cases you will always be notified.
When you use one of our services, we typically only collect the data necessary to offer our services to you. We may request additional information but this is of a voluntary nature. Any personal data we process is processed only for the purpose of offering our services to you or to pursue our commercial objectives.

2. Legal basis for processing personal data

Where we obtain the corresponding data subjects’ consent for processing their personal data, art. 6 paragraph 1 point a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
Where we need to process personal data for the purposes of fulfilling a contract, and the data subject is party to the contract, art. 6 paragraph 1 point b of the GDPR serves as the legal basis. This also applies to processing necessary to accommodate preparations for entering into a contract.
Where processing of personal data is necessary for our company to fulfil a legal obligation, art. 6 paragraph 1 point c of the GDPR serves as the legal basis.
Where processing of personal data is necessary for protecting the vital interests of the data subject, or those of another individual, art. 6 paragraph 1 point d of the GDPR serves as the legal basis.
Where processing is necessary to protect our company's or a third party’s legitimate interests, and such interests are not overridden by the interests, fundamental rights and freedoms of the data subject, art. 6 paragraph 1 point f of the GDPR serves as the legal basis.

3. Deletion of data and data storage period

The data subject’s personal data will be deleted or blocked as soon as the purpose for which it has been collected has been fulfilled. Data may remain on record beyond this period if such is specified in European or national legislation from European Union Regulations, laws or other provisions to which the controller is subject. Data will also be deleted if a storage period specified in the above standards expires unless conclusion or fulfilment of a contract requires the data to remain on record further.

IV. Provision of website and creation of log files

1. Details and extent of data processing

Any time our website is accessed, our system automatically records data and information concerning the accessing computer.

The information collected relates to the following:

Information of browser and used version
Operating System used
Internet-Service-Provider of the user
IP-Adress of the requesting computer
Date and time of the page request
Page from which users system was linked to our web page
Pages accessed by users system from our web page
Name of the requested files
Access Status (file transferred, file not found, etc.)
Volume of data transferred This data is also recorded in our system’s log files.

This data is not stored together with any of the user’s other personal data.

2. Legal Basis for data processing

The basis for data processing is Art. 6 (1) (f) of the GDPR, which allows the processing of data for the purposes of our legitimate interest in improving the stability and functionality of our website.

3. Purpose of data processing

Our system needs to temporarily record the IP address in order to provide the website to the user’s computer. This also requires that the user’s IP address remains logged throughout the session.
Recording the data in log files is necessary to ensure that the website operates correctly. The data further helps us optimise the website and ensure that our computer systems remain secure. No data is processed for marketing purposes in this context.
The above purposes also constitute our legitimate interests in data processing under art. 6 paragraph 1 point f GDPR.

4. Data storage period

The data is deleted as soon as it is no longer required for achieving the purpose for which it was recorded. With respect to data being recorded in order to provide the website, the data is no longer required as soon as the respective session ends.
With respect to data being recorded in log files, the data is no longer required after fourteen days at the latest. Data may remain on record for longer. If so, the users’ IP addresses are deleted or rendered untraceable to make identification of the accessing client impossible.

5. Right to object and options for avoidance

The website cannot be provided without recording the data and the operation of the site in the Internet is impossible without storing the data in log files. There is correspondingly no option for the user to object.

V. Usage of cookies

a) Details and extent of data processing

Our website uses cookies. Cookies are text files saved in the Internet browser or by the Internet browser on the user’s computer. When a user accesses a website, a cookie may be stored in the user’s operating system. This cookie contains a unique character string that allows the website to identify the browser when it accesses the website again.
We use cookies to improve the user experience when accessing our website. Some of our website’s elements need to be able to identify the accessing browser even after it has left the site.
Our website further employs cookies that facilitate analysis of the users’ web-surfing behaviour.

Google Web Fonts
We use Google Web Fonts to ensure the optimal depiction of various types of information at our website (http://www.google.com/webfonts/).

When you open a page, the web fonts are sent to your browser cache for use in displaying texts. If your browser does not support Google Web Fonts, or blocks them, a standard font will be used by your computer. Google Web Fonts does not install cookies when a user views a page. Data that are transmitted in connection with a page view are sent to resource-specific domains such as fonts.googleapis.com or fonts.gstatic.com. These data are not associated with data that may be collected or processed in connection with the parallel use of authenticated Google services such as Gmail. You can set your browser in a way that ensures the fonts are not downloaded from Google's servers (e.g. through the installation of add-ons such as NoScript or Ghostery for Firefox).
If your browser does not support Google fonts or if you have denied access to Google's servers, all text will appear in the default font of the system.
Information about the privacy policy for Google Web Fonts can be found at: https://developers.google.com/fonts/faq#PrivacyInformation
Information on Google’s privacy policy and terms of use can be obtained directly from Google: http://www.google.com/intl/en/privacy/

Google-Analytics
This website uses Google Analytics, a web analytics service provided by Google, Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, later on "Google". Google Analytics uses "cookies", which are text files stored on your computer enabling to analyse how this web site is used by yourself.
The information generated by the cookies, i.e. time, place and frequency of your website visit (including your IP address) will be transmitted to and stored by Google on servers in the United States.
We utilise Google-Analytics on our website with the addition of "gat._anonymizeIp". In this case your IP address will already be shortened and thereby anonymised by Google within the member states of the European Union or in other countries contracted into the European Economic Area.
Google will utilise this information to evaluate your utilisation of our website and to create reports about website activities for us and to provide additional services connected with the utilisation of our website and the internet. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.
Google has declared that they will never utilise your IP address in conjunction with other data from Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you might not be able to use the full functionality of this website.
In addition, Google will provide a deactivation add-on for all standard browsers which will provide you with more control over which data can be recorded by Google from websites accessed by you. The add-on informs the JavaScript (ga.js) from Google Analytics that no information about website visits should be transmitted to Google Analytics. The deactivation add-on for browser from Google Analytics does not however prevent that information will be transmitted to us or other web analysis services that have, where applicable, been implemented by us. Additional information relating to the browser add-on can be found via the following link: https://tools.google.com/dlpage/gaoptout?hl=en
This is also possible as an alternative to the above browser add-on. By clicking on the link, an opt-out cookie is set in your browser, which is only valid for this browser and this domain. If you delete the cookies in this browser, the opt-out cookie is also deleted and you will need to click on this link again.
If you have agreed to your web and app browser history being linked to your Google account and to information from your Google account being used for the personalisation of advertisements, Google will use your data together with the Google Analytics data in order to prepare target group lists for cross-device re-marketing. For this purpose, Google Analytics first collects your Google-authenticated ID on our website, which is linked to your Google account (personal data). Subsequently, Google Analytics will temporarily link your ID to your Google Analytics data to optimise our target groups.
If you do not agree to this you can opt out by means of the appropriate settings in the "My Account" area of your Google account.

Google Maps
This website uses Google Maps API to visually present geographical information. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
When you use Google Maps, information about the use of this website, including your IP address, is transmitted to and stored on a server belonging to Google in the USA. By using this website you confirm that in this regard you are in agreement with the recording, processing and use of your automatically collected data by Google, one of its representatives, or third-party suppliers.
The terms of use for Google Maps can be found under Terms of Service for Google Maps: http://www.google.com/help/terms_maps.html.
Full details can be found in Google’s data protection centre:
Transparency and Choice
http://www.google.com/policies/privacy/#infochoices
and Data Protection Policy
http://www.google.de/policies/privacy/

It is possible to simply deactivate the Google Maps service and thus prevent the transfer of your data to Google by deactivating JavaScript in your browser. However, in this case you will be unable to use the map view.”

YouTube in extended data protection mode
We use the provider YouTube to incorporate videos. For this, the videos were embedded in extended data protection mode [CV1]. As most websites, YouTube also uses cookies to collect information about the visitors to its website. YouTube uses this information amongst other things to prepare video statistics, to avoid fraud and for the improvement of user friendliness. This also leads to the establishment of a connection to the Google DoubleClick network. Starting the video could trigger other data processing operations. We have no influence on this. For further information regarding YouTube data protection, please refer to the YouTube Data Protection Declaration under: http://www.youtube.com/t/privacy_at_youtube

Newsletter
We use the so-called double opt-in procedure for sending our newsletter, i.e. we will only send you a newsletter via e-mail if you have previously explicitly confirmed that you would like us to activate the newsletter service. We will then send you a notification e-mail prompting you to confirm that you wish to receive our newsletter by clicking on a link in the e-mail. When you subscribe to our newsletter we will save your IP address and the date of subscription. This serves solely for the purpose of proof in case your e-mail address is misused by a third party to register you for the receipt of our newsletter without your knowledge or authorisation. If at any time in the future you no longer wish to receive our newsletter, you can unsubscribe without any other costs being incurred than the transmission costs at the basic tariffs.

b) Legal Basis for data processing

c) Purpose of data processing

The purpose of using technically necessary cookies is to make using our website easier for users. Several of our website’s functions will not work without using cookies. These functions require the browser to be recognised again after leaving and returning to our website.

Following Cookies are used:

Name of Cookie	Cookie functionality	Domain	Duration
_ga	These cookies, managed by Google Analytics and Google Adwords, collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited. _ga is used to distinguish users from sessions and has a duration of 2 year.	.aero-dienst.de (.aero /.eu/ .com)	26 month
_gat	These cookies, managed by Google Analytics and Google Adwords, collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited. _gat is used to throttle the request rate - limiting the collection of data on high traffic sites.	.aero-dienst.de (.aero /.eu/ .com)	1 min
_gid	These cookies, managed by Google Analytics and Google Adwords, collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited. _ga is used to distinguish users from sessions and has a duration of 1 day.	.aero-dienst.de (.aero /.eu/ .com)	1 day
Fe_typo_user	This cookie helps our website content management system to function. This cookie enables closed user groups with front-end login.	.‍aero‍-‍dienst‍.‍de‍;(.aero/.eu/.com)	end of session

The user data recorded in technically necessary cookies is not used to create user profiles.

We use analysis cookies to improve the quality of our website and its contents. The analysis cookies tell us how the website is being used and this way allow us to keep on improving it.

For further details on the analysis cookies used, refer to the section on web analysis by Matomo below.

The above purposes also constitute our legitimate interests in processing personal data under art. 6 paragraph 1 point f GDPR.

d) Data storage period, right to object and options for avoidance

Cookies are stored on the user’s computer and transferred to us by that computer. As the user, you therefore have complete control over the use of cookies. You can restrict or prevent your computer from sending cookies by adjusting your Internet browser’s settings. You can delete any saved cookies at any time. You can even automate deletion. If you disable cookies for our website, you may no longer be able to use the site’s full range of functions.

VI. Online presence in social media

We maintain an online presence in social media and platforms to communicate with the prospects and users active there and to keep them up-to-date on our services.
We point out that data of the users outside the area of the European Union can be processed. This may result in risks to users because, e.g. the enforcement of user rights could be made more difficult. As for US providers certified under the Privacy Shield, we point out that they are committed to upholding the EU's privacy standards.
Furthermore, the data of the users are usually processed for market research and advertising purposes. Thus, e.g. user profiles are created from the user behavior and the resulting interests of the users. The usage profiles may in turn be used to e.g. Place advertisements inside and outside the platforms that are allegedly in line with users' interests. For these purposes, cookies are usually stored on the computers of the users, in which the user behavior and the interests of the users are stored. Furthermore, in the usage profiles, data can also be stored independently of the devices used by the users (in particular if the users are members of the respective platforms and logged in to them).
The processing of personal data of users is based on our legitimate interests in an effective information of users and communication with users in accordance with. Art. 6 para. 1 lit. f. GDPR. If the users are asked by the respective providers of the platforms for a consent to the above-described data processing, the legal basis of the processing is Art. 6 para. 1 lit. a., Art. 7 GDPR.
For a detailed description of the respective processing and the possibilities of contradiction (opt-out), we refer to the following linked information of the provider.
Also in the case of requests for information and the assertion of user rights, we point out that these can be claimed most effectively from the providers. Only the providers have access to the data of the users and can directly take appropriate measures and provide information. If you still need help, then you can contact us.

Google/ YouTube
(Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland) –
Privacy: https://policies.google.com/privacy,
Opt-Out: https://adssettings.google.com/authenticated,
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

VII. Newsletter

1. Details and extent of data processing

Our website offers you the option of subscribing to our free newsletter. When you register a subscription, the data you enter in the input screen is sent to us.
In addition, we store your IP addresses and the time of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify any potential misuse of your personal data.

In addition, the following data will be collected upon registration:

IP-address of the requesting compute
Date and timestamp of registration
The first- and lastname entered
The entered e-mail address
The entered country

During the registration process, we will ask you to give your consent to our processing the data and will point you towards this data policy.
No data will be forwarded to third parties as part of data processing when supplying the newsletter. The data will be used solely for supplying the newsletter.

2. Legal basis for data processing

The legal basis for processing data after newsletter subscription and with the user’s consent is art. 6 paragraph 1 point a GDPR.

3. Purpose of data processing

We record the user’s email address, name and country to allow us to send out the newsletter. We collect the other data as part of subscription registration to prevent our services from being used inappropriately and to prevent the email address from being fraudulently used. The data also helps us provide tailored information.

4. Data storage period

The data is deleted as soon as it is no longer required for achieving the purpose for which it was recorded. We therefore keep the user’s email address on record for as long as the user remains subscribed to the newsletter.
The other personal data collected during registration will also be deleted after a period of regularly 7 days when the user unsubscribes from the newsletter.

5. Right to object and options for avoidance

Users can unsubscribe from the newsletter at any time. The newsletter itself includes a corresponding link. This also allows users to withdraw their consent regarding our storing of the personal data collected during registration.
If your personal data is processed, you are a data subject as defined in the GDPR and consequently have the following rights:

1. Right of access

You are entitled to request information from the controller on whether we are processing any personal data related to yourself.

If we do, you can further request information from the controller on the following:

(1) the purposes to which the personal data is being processed;
(2) the categories of personal data processed;
(3) the recipients or categories of recipients to whom the personal data relating to yourself is or will be disclosed;
(4) the period for which the personal data relating to yourself is intended to remain on record or, if this cannot be specified, the criteria for defining the storage period;
(5) whether you are entitled to demand correction or deletion of the personal data relating to yourself, to demand limitation of processing by the controller or to object to processing;
(6) whether you are entitled to file a complaint with a supervisory authority;
(7) everything available on the data’s source if the entity you are enquiring with did not obtain it themselves;
(8) whether there was any automated decision-making and profiling as per art. 22 paragraphs 1 and 4 GDPR and – at least where such was the case – useful information on the underlying logic and the impact and pursued effects of this processing on the data subject. You are entitled to request information on whether the personal data relating to yourself will be transmitted to a non-EU member state or international organisation.

You are entitled in this context to request information on suitable safeguards according to art. 46 GDPR related to the transmission.

Your right to restriction of processing can be restricted insofar as it is likely to render impossible or seriously impair the research or statistical purposes for which the data is required and this restriction is necessary for achieving the required research or statistical purposes.

2. Right to rectification

You are entitled to request that the controller corrects and/or completes the personal data relating to yourself if this data is incorrect or incomplete. The controller is obliged to do so without delay.

Your right to rectification can be restricted insofar as it is likely to render impossible or seriously impair the research or statistical purposes for which the data is required and restricting the right to rectification is necessary for achieving the required research or statistical purposes.

3. Right to restriction of processing

You can request limits to the processing of personal data relating to yourself if the following applies:

(1) If you contest the correctness of the personal data relating to yourself for a period that allows the controller to check the data's correctness;
(2) Processing of the data is illegal and you object to deletion of the data in favour of restricting the personal data’s use;
(3) The controller no longer requires the personal data for the purposes of processing, but you need them to legitimise, exercise or defend a legal claim or
(4) You have objected to processing in accordance with art. 21 paragraph 1 GDPR and it has not yet been established whether the controller’s legitimate interests outweigh your own.

If processing the personal data relating to yourself has been limited, the data can without your consent be used neither to assert, exercise or defend legal claims nor to enforce protection of another individual’s or legal entity’s rights nor can it be processed in the public interest of the European Union or one of its member states. This does not apply to the storing of the data.

If processing has been restricted in accordance with the above conditions, you will be notified by the controller before any restrictions are lifted.

4. Right to erasure

a) Obligation to delete
You can request that the controller delete the personal data relating to yourself immediately; the controller is then obliged to delete the data immediately, provided one of the following conditions applies:
(1) The personal data relating to yourself is no longer required to achieve the purposes for which it was collected or otherwise processed.
(2) You withdraw your consent, under which processing became legitimate as per art. 6 paragraph 1 point a or art. 9 paragraph 2 point a GDPR, and there is no other legal basis for processing.
(3) You object to processing as per art. 21 paragraph 1 GDPR and your objection is not overridden by legitimate reasons for processing, or you object to processing as per art. 21 paragraph 2 GDPR.
(4) The personal data relating to yourself have been processed unlawfully.
(5) Deletion of the personal relating to yourself is necessary for the controller to fulfil a legal obligation imposed upon them by European Union law or the national laws of European Union member states.
(6) The personal data relating to yourself has been collected in connection with the offer of information society services as per art. 8 paragraph 1 GDPR.

b) Notification of third parties
If the controller has published personal data relating to yourself and has become obliged to delete it as per art. 17 paragraph 1 GDPR, the controller will take action, including technical measures, using the available technology and at appropriate expense with the aim of notifying any controllers processing your personal data that you as the data subject have requested deletion of all links to said personal data or to copies or reproductions thereof.

c) Exceptions
The right to erasure becomes void if processing is necessary
(1) to exercise of the right to free expression and information;
(2) to fulfil a legal obligation requiring the controller to process the data imposed upon them by European Union law or the national laws of a European Union member state, or to complete a duty in the public interest or to perform executive duties appointed to the controller;
(3) in the interests of public health and safety as per art. 9 paragraph 2 points h and i and art. 9 paragraph 3 GDPR;
(4) for archiving purposes in the public interest, for scientific or historical research or for statistical purposes as per art. 89 paragraph 1 GDPR, provided that the right described in section a) can be reasonably assumed to prevent or seriously impede achievement of the processing purposes;
(5) to assert, exercise or defend legal claims.

5. Notification obligation

If you have asserted your right to rectification, erasure or restriction of processing against the controller, the controller is under obligation to notify all recipients to whom the personal data relating to yourself has been disclosed of the corresponding rectification or erasure of data or of the restriction of their processing. The controller is exempted from this obligation where such notification proves impossible or unreasonable.
You have the right to be informed of who these recipients are.

6. Right to data portability

You have the right to receive the personal data concerning yourself that you have provided to a controller in a structured, commonly used and machine-readable format. You are also entitled to transmit this data to another controller without the controller to whom you have provided the data hindering you from doing so and if
(1) you have consented to processing as per art. 6 paragraph 1 point a GDPR or art. 9 paragraph 2 point a GDPR or processing is governed by a contract as per art. 6 paragraph 1 point b GDPR and
(2) processing occurs using automated methods.

When exercising this right, you can further request controllers to send the personal data relating to yourself directly to another controller, provided this is technically feasible. This must not adversely affect the liberties and rights of others.

The right to data portability does not extend to the processing of personal data where such processing is necessary for fulfilling a duty in the public interest or for exercising executive duties appointed to the controller.

7. Right to object

You are entitled to object for reasons arising from your own personal situation at any time against processing of personal data relating to yourself where processing is legitimised by art. 6 paragraph 1 points e or f GDPR; this applies in equal measure to profiling legitimised by these provisions.
The controller will cease to process your personal data unless they can prove compelling legitimate reasons for processing that override your interests, rights and liberties or processing pursues the assertion, exercise or defence of legal claims.
If personal data relating to yourself is processed for the purpose of direct advertising, you are entitled to object at any time to the processing of your personal data for this purpose; this applies equally to profiling where it occurs in connection with such direct advertising.
If you object to processing for direct advertising, the personal data relating to yourself will no longer be processed for this purpose.
You may, in connection with the use of information society services – Directive 2002/58/EC notwithstanding – exercise your right to object by means of automated methods that are subject to technical specifications.
You also have the right, on grounds arising out of your particular situation, to object to the processing of personal data concerning you that occurs for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 (1) GDPR.
Your right to object can be restricted insofar as it is likely to render the achievement of research and statistical purposes impossible or seriously impair such purposes and this restriction is necessary for achieving such research or statistical purposes.

8. Right to withdraw your consent under data protection law

You are entitled to withdraw your consent under data protection law at any time. Your withdrawing consent does not affect legitimacy of any processing that has occurred with your consent prior to withdrawal.

9. Automated individual decision-making, including profiling

You have the right not to be subject to any decision that entails legal implications for yourself or has similar, substantially adverse effects on yourself, if said decision is based solely on automated processing; this includes profiling. You do not have this right if the decision

(1) is necessary to allow conclusion or fulfilment of a contract between yourself and the controller,
(2) is legitimate under the legal provisions of the European Union or its member states to which the controller is subject and these legal provisions include appropriate measures safeguarding your rights, liberties and legitimate personal interests or
(3) is made with your express consent.

However, such decisions may have been made based on personal data of special categories as per art. 9 paragraph 1 GDPR unless art. 9 paragraph 2 points a or g GDPR also apply and appropriate measures have been taken to protect your rights, liberties and legitimate personal interests.

With respect to cases (1) and (3), the controller shall take appropriate precautions to protect your rights, liberties and legitimate personal interests; such precautions will include at least the right to enforce intervention by a human individual at the controller’s, to put forward your own opinion and to contest the decision.

10. Right to complain with a supervisory authority

If you believe that processing of personal data relating to yourself is in breach of the GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the EU member state you, your place of work or the locale of the alleged infringement are in. This does not affect your recourse to other administrative or judicial remedies.
The supervisory authority receiving the complaint will keep the appellant up to date on status and results of the complaint, including on recourse to judicial remedies as per art. 78 GDPR.