1. Information on the collection of personal data and provider identification
(2) For the sake of simplicity, users are referred to in a uniform manner in the male form.
(3) The service provider and the person responsible for the purposes of the data privacy law are referred to in the contact details in our imprint.
2. Collection of personal data for informational use
(1) Personal data is information that enables a person to be identifiable, such as the name and e-mail address, but also the surfing behaviour on the internet. In the case of merely informational use of the website, i.e. if you do not provide us with any information, we do not collect any personal data except for the data that your browser transmits in order to enable you to visit the website (so-called log files, legal basis Article 6 (1) 1 F) of the GDPR. Log files are technically required for us so that the website you are visiting can be sent to your computer and displayed to you. They will be deleted within 7 days of accessing the website. The log files contain the following data:
- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/http status code
- Relevant amount of data transferred
- Website from which the request originates
- Operating system and its surface
- Language and version of the browser software.
(2) The use of the log files is also used for statistical evaluations and for the improvement of the website (legal basis art. 6 (1) 1 f) GDPR). In this way we can detect possible errors such as faulty links. In connection with your use of the website, among other things, the IP address of the computer you are using is recorded. Using the IP address, it may be possible to identify users of the website. However, an evaluation of the IP addresses covered by paragraph (1) does not take place through us. The evaluation of the IP addresses is carried out in anonymous form on a statistical basis alone.
3. Data processing at and for contacting
(1) In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do this, you usually need to provide additional personal information that we use to deliver the respective service. If additional voluntary information is possible, these are marked appropriately.
(2) Personal data will only be collected if you provide it to us by filling out contact forms or sending e-mails, in the context of ordering services, inquiries or other contacts. Then we collect the information that comes into contact, such as contact and correspondence data. We will only use the personal information you collect for the purpose provide you with the services you want (legal basis, article 6 (1) 1 B) GDPR), for your own information or advertising purposes (legal basis art. 6 (1) 1 F) and recital (47) GDPR) or for other purposes for which you have given your consent (legal basis Article 6 (1) 1 a) GDPR) and which are described in this data protection declaration. Your consent, for example for the setting of cookies by third parties or for a web tracking by these, can also be given in the appropriate technical settings of your browser.
(3) When contacting us, your information will be stored for the duration of the legal retention requirements for the purpose of processing the request and in the event that connection issues arise (legal basis art. 6 (1) 1 c) GDPR) and then deleted.
4. Transfer of data
(1) We would point out that, on the order of the competent authority, we are entitled, in individual cases, to provide information on data to the extent that this is necessary for the purposes of law enforcement, security by the police authorities of the countries, to fulfil the legal duties of the Constitutional protection authorities of the federal government and the counties, the Federal Intelligence Service or the military shielding service or the enforcement of intellectual property rights (legal basis article 6 (1) 1 c) GDPR).
5. Data security
We take precautions to protect your data from loss, destruction, tampering, manipulation and unauthorized access to the state of the art. As far as your data is collected by us, it is stored on specially protected servers. These are protected by technical and organisational measures against loss, destruction, access, alteration or dissemination of your data by unauthorised persons. Only a few authorised persons can access your data. These are responsible for the technical or editorial support of the servers. All our employees are committed to confidentiality.
• Transient cookies (temporary)
• Persistent cookies (timely limited)
• Third-Party cookies (of other suppliers according to special information).
(3) Transient cookies (legal basis art. 6 (1) 1 f) GDPR) are automatically deleted when you close the browser. This includes in particular the session cookies. These store a so-called session ID, with which different requests from your browser can be assigned to the shared session. This will allow your computer to be recognized again when you return to the site. The session cookies are deleted when you close the browser.
(4) Persistent cookies are used only in connection with the Web Analytics services we use (legal basis art. 6 (1) 1 F) GDPR) and used only as long as the purpose requires; They have a life span of no more than two years. You can delete the cookies from your computer's hard drive at any time using the privacy features of your browser. In this case, the features and usability of the offer could be limited.
7. Use of Social Media plug-ins
(1) We currently use the following social media plug-ins: Facebook, Google +, Twitter, Xing. We use the so-called two-click solution. This means that when you visit our site, no personal data will be passed on to the provider of the plug-in in principle. You will recognize the provider of the plug-in by marking it on the box by its initial letter or logo. We offer you the possibility to communicate directly with the provider of the plug-in via the button. Only if you click the selected field and enable it, the plug-in provider will be informed that you have called the appropriate Web site. In addition, the subpara. 2 (1) of this data protection declaration. In the case of Facebook and Xing, according to the provider in Germany, the IP address is anonymized immediately after collection. The activation of the plug-in means that personal data is transferred from you to the respective plug-in provider and stored there (with us-American providers in the USA).
(2) We do not have any influence on the data collected and processing, nor are we aware of the full scope of the data collection, the purposes of the processing, the storage deadlines. We also do not have any information to delete the data collected by the plug-in provider.
(3) The plug-in provider stores the data collected about you as usage profiles and uses these for the purpose of advertising, market research and/or design of its website as required. Such an evaluation is made in particular (also for users who are not logged in) to display advertising on demand and to inform other users of the social network about their activities on our website. You are entitled to object to the formation of these user profiles, and you must contact the respective plug-in provider to exercise them. Through the plug-ins we offer you the opportunity to interact with the social networks and other users, so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Article 6 (1) 1 F) of the GDPR.
(4) Data is propagated regardless of whether you have an account with the plug-in provider and are logged in. If you are logged in to the plug-in provider, your data collected from us will be directly associated with your existing account with the plug-in provider. If you press the activated button and, for example, link the page, the plug-in provider also stores this information in your user account and communicates it to your contacts in public. We recommend that you log out regularly after using a social network, but especially before activating the button, because you can avoid a mapping to your profile with the plug-in provider.
(5) For more information about the purpose and scope of the data collection and its processing by the plug-in provider, please see the privacy statements of these providers that are provided below. There you will also receive further information on your rights and setting options to protect your privacy.
(6) Addresses of the individual providers and URLs with their privacy policies:
- a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php ; additional information on data collection: http://www.facebook.com/help/186325668085084 , http://www.facebook.com/about/privacy/your-info-on-other#applications and http://www.facebook.com/about/privacy/your-info#everyoneinfo . Facebook has been subject to the EU-US-Privacy-Shield, https://www.privacyshield.gov/EU-US-Framework .
- b) Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://www.google.com/policies/privacy/partners/?hl=de . Google has been subject to the EU-US-Privacy-Shield,
- c) Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; twitter.com/privacy. Twitter has been subject to the EU-US-Privacy-Shield,
- d) Xing AG, Gaensemarkt 43, 20354 Hamburg, Germany; http://www.xing.com/privacy .
8. Right to object
(1) There is a right of objection for reasons arising from their particular situation against processing for other purposes, which is due to a balance of interests (article 6 (1) 1 F) of the GDPR). If you exercise such a contradiction, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your reasoned opposition, we will examine the situation and either adjust or adapt the data processing or indicate to you our compelling reasons for which we continue processing.
9. External links
10. Additional information according to the GDPR
(1) The person responsible for processing your personal data is FLYLINE Tele Sales & Services GmbH, Hermann-Koehl-Stasse 3, 28199 Bremen, Germany. For further contact details please refer to the imprint of our website www.flyline.de.
(2) You may require us to provide information about the stored data and have the right to correct incorrect data, to restrict the processing as well as a right to delete, unless there is no obligation to hold it. There is no right of deletion if further processing is necessary for the assertion, exercise or defence of legal claims. With regard to the personal data relating to you that you have provided to us, for example in an input mask or a contact form, on the basis of a consent or for the execution of a contract between us, you have the right to Data transferability in a structured, common and machine-readable format.
(3) As far as the processing of your data is based on consent (legal basis art. 6 (1) 1 a) GDPR), you have the right to revoke your consent at any time without affecting the legality of the processing due to the consent until the revocation Is. Legal permission facts remain unaffected by a revocation of consent.
(4) You have the right to appeal to a data protection supervisory authority, such as the National Commissioner responsible for data protection and freedom of information in Bremen, Dr. Imke Sommer, Arndtstrasse 1, 27570 Bremerhaven, Germany, firstname.lastname@example.org .
(5) For all questions relating to the processing of your personal data and the exercise of your rights under the GDPR, you can consult our data protection officer Stephan Dwinger, whom you can reach under +49 (0)421 55 75 051 or email@example.com
We will update this statement if necessary in order to adapt it to the content of the website as well as to the general legal changes.
Date: May 2018