The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data are all data with which you can be personally identified. You will find detailed information about data protection in the following privacy policy.
Who is responsible for the data collected on this website?
The website operator processes data on this website. You can find their contact details in the section “Information on the data controller” in this privacy policy.
How do we collect your data?
We collect data that you communicate to us. This may be data that you fill in a contact form, for example. Other data are collected automatically or after you have given consent by our IT systems when you visit our website. These are mainly technical data (e.g. Internet browser, operating system or time of page visit). These data are collected automatically as soon as you enter this website.
What do we use your data for?
We collect some of your data to ensure that we can provide the website without any errors. Other data may be used to analyse the way you use the website.
What are your rights concerning your data?
You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of these data. If you have given your consent to data processing, you can revoke this consent for the future at any time. Furthermore, you have the right to demand that we restrict the processing of your personal data under certain circumstances. You also have the right of appeal to the competent supervisory authority.
You can contact us at any time with this and other questions concerning data protection.
Our website is hosted by united-Domains AG. The provider is united-Domains AG, Gautinger Straße 10, 82319 Starnberg, Germany (hereinafter: united-Domains).
Der Einsatz des Hosters erfolgt zum Zwecke der Vertragserfüllung gegenüber unseren potenziellen und bestehenden Kunden (Art. 6 Abs. 1 lit. b DSGVO) und im Interesse einer sicheren, schnellen und effizienten Bereitstellung unseres Online-Angebots durch einen professionellen Anbieter (Art. 6 Abs. 1 lit. f DSGVO). Sofern eine entsprechende Einwilligung abgefragt wurde, erfolgt die Verarbeitung ausschließlich auf Grundlage von Art. 6 Abs. 1 lit. a DSGVO und § 25 Abs. 1 TTDSG, soweit die Einwilligung die Speicherung von Cookies oder den Zugriff auf Informationen im Endgerät des Nutzers (z. B. Device-Fingerprinting) im Sinne des TTDSG umfasst. Die Einwilligung ist jederzeit widerrufbar.
For details please refer to the united-Domains privacy policy: https://www.united-domains.de/unternehmen/datenschutz/.
united-Domains is used on the basis of Art. 6(1) f) GDPR. We have a legitimate interest in ensuring that our website is displayed as reliably as possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6(1) a) GDPR; the consent can be revoked at any time.
We have concluded a data processing contract (AVV) with the above provider. This is an agreement required by data protection law, which ensures that this provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with GDPR.
The operators of these pages take the protection of your personal data very seriously. We treat your personal data as confidential and in compliance with statutory data protection regulations and this privacy policy.
When you use this website, various personal data are collected. Personal data are data with which you can be personally identified. This privacy policy explains which data we collect and what we use them for. It also explains how and for what purpose this is done.
We would like to emphasise that data transmission over the Internet (e.g. communication by email) may have security gaps. It is not possible to guarantee absolute protection of data against access by third parties.
The data controller with responsibility for the processing of data on this website is:
KFG Luftfahrt GmbH & Co. KG
Römerstr. 22
73450 Neresheim-Elchingen
Germany
Phone: +49 (0)7367959820
Email: office@kfg-luftfahrt.de
The data controller is the natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).
Unless a more specific storage period is stipulated in this privacy policy, your personal data will remain with us until the purpose for which they are processed ceases to apply. If you assert a justified request for erasure or revoke your consent to data processing, your data will be erased unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods); in the latter case, the deletion will take place after these reasons have ceased to exist.
We use tools, among other things, that are provided by companies based in the USA or other third countries that are not designated as secure. When these tools are active, your personal data may be transferred to these third countries and processed there. We would like to point out that a level of data protection comparable to that in the EU cannot be guaranteed in these countries. For instance, US companies are obliged to hand over personal data to security agencies without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US agencies (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for surveillance purposes. We have no influence over these processing activities.
Many data processing operations are only possible with your explicit consent. You can revoke consent already granted at any time. The legality of the data processing up to the revocation remains unaffected by the revocation.
Right to object to data collection in special cases and to direct advertising (Art. 21 GDPR)
IF DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6(1) E) OR F) GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS FOR PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU FILE AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PROCESSING IS FOR THE PURPOSES OF ASSERTING, EXERCISING OR DEFENDING LEGAL RIGHTS/CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR).
WHERE YOUR PERSONAL DATA ARE PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING PURPOSES, WHICH INCLUDES PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).
In the event of infringements of the GDPR, the data subjects have the right to appeal to a supervisory authority, in particular in the Member State of their habitual residence, workplace or place of presumed infringement. The right of appeal shall be without prejudice to other administrative or judicial remedies.
You have the right to have data which we automatically process, either on the basis of your consent or to execute the contract, provided either to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another data controller, this will only take place if it is technically feasible.
This website uses an SSL or TLS encryption procedure for security purposes and to protect the transmission of confidential contents, such as purchase orders or enquiries which you have sent to us (website operator). You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Within the scope of applicable statutory provisions you have the right to obtain free of charge information about the personal data we store, their source and recipient, the purpose of data processing and, in some cases, the right to the rectification, blocking or erasure of these data. You can contact us at any time with this and other questions concerning personal data.
You have the right to demand that we restrict the processing of your personal data. You can contact us at any time for this purpose. The right to restrict processing exists in the following cases:
Where processing has been restricted, your personal data will, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State.
If you would like to send any enquiry to us using this contact form, the information you enter in the form (including any contact data you provide) will be stored by us for the purpose of dealing with your enquiry and any follow-up questions which may arise. We do not transfer such data without your consent.
These data are processed on the basis of Art. 6(1) b) GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6(1) f) GDPR) or on your consent (Art. 6(1) a) GDPR), provided that this consent has been requested.
The data entered in the contact form will be held by us until you ask us to erase them, you revoke your consent to storage or the purpose for which data have been stored no longer applies (e.g., after finally processing your enquiry). Mandatory legal provisions – including but not limited to retention periods – remain unaffected.
Our website incorporates Instagram functions. These functions are provided by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
If you are logged into your Instagram account, you can link the contents of our website to your Instagram profile by clicking the Instagram button. This allows Instagram to assign your visit to this website to your user account. We draw your attention to the fact that, as website providers, we have no knowledge of the content of the data transferred in this way or how Instagram uses the data.
These data are saved and analysed on the basis of Art. 6(1) f) GDPR. The website operator has a legitimate interest in maximising its social media visibility. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6(1) a) GDPR; the consent can be revoked at any time.
If the described tool is used to collect personal data on our website and transfer them to Facebook and/or Instagram, we and Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are joint controllers with responsibility for processing data (Art. 26 GDPR). The joint responsibility is limited to the collection of data and their transfer to Facebook and/or Instagram. The processing of the data after their transfer to Facebook and/or Instagram is not part of the joint controller arrangement. The duties incumbent upon us are set out in a joint processing agreement. The wording of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. Under this agreement we are responsible for the provision of data privacy information when Facebook or Instagram tools are used and for the data privacy law-compliant implementation of the tool on our website. Facebook is responsible for the data security of the Facebook and Instagram products. Data subject rights (e.g. information requests) with regard to the data processed by Facebook or Instagram can be asserted directly vis-a-vis Facebook. If you assert your rights as a data subject vis-a-vis us, we are under obligation to forward them to Facebook.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find the details here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 and https://de-de.facebook.com/help/566994660333381.
Further information can be found in the Instagram privacy policy at https://instagram.com/about/legal/privacy/.
We use Google reCAPTCHA (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
reCAPTCHA is used to verify whether entries are made on a website (e.g. in a contact form) by a human or by an automated program. For this purpose, reCAPTCHA analyses the website visitor’s behaviour based on various characteristics. This analysis commences automatically as soon as the visitor enters the website. For analysis, reCAPTCHA evaluates various pieces of information (e.g. IP address, duration of the visitor’s stay on the website or mouse movements made by the user). The data collected as part of the analysis are forwarded to Google.
