Responsible Entity for Processing under GDPR

The entity responsible in terms of the General Data Protection Regulation and other data protection laws applicable in the member states of the European Union and other provisions with data protection character is:

Union of Air Traffic Control (GdF) Frankfurt Airport Center 1 Hugo-Eckener-Ring 60549 Frankfurt am Main

Privacy Policy

We welcome you to our website and appreciate your interest. The protection of your personal data is important to us. Therefore, we conduct our activities in compliance with the applicable legal provisions for the protection of personal data and data security. Below, we would like to inform you about which data is collected during your visit and for what purposes it is used.

  1. What is Personal Data? The term personal data is defined in the Federal Data Protection Act and in the EU GDPR. It refers to any information relating to an identified or identifiable natural person. This includes, for example, your legal name, address, telephone number, or date of birth.

  2. Scope of Anonymous Data Collection and Processing Unless otherwise stated in the following sections, no personal data is collected, processed, or used when using our website. However, we obtain certain technical information through the use of analysis and tracking tools based on the data transmitted by your browser (e.g., browser type/version, operating system, websites visited on our site including duration of stay, previously visited websites). We evaluate this information only for statistical purposes.

  3. Legal Basis for Processing Personal Data When we obtain the consent of the data subject for processing personal data, Article 6(1)(a) GDPR serves as the legal basis. For processing necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing required for pre-contractual measures. If processing is necessary to fulfill a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis. If processing is necessary to protect the vital interests of the data subject or another natural person, Article 6(1)(d) GDPR serves as the legal basis. If processing is necessary for the purposes of the legitimate interests pursued by our company or a third party, and these interests are not overridden by the interests or fundamental rights and freedoms of the data subject, Article 6(1)(f) GDPR serves as the legal basis.

  4. Use of Cookies The GDF website uses cookies. Cookies are data stored by the internet browser on the user's computer system. Cookies can be transmitted to a page when it is called up, allowing the user to be identified. Cookies help simplify the use of websites for users. Our legitimate interest in processing personal data under Article 6(1)(f) GDPR lies in these purposes. We also use cookies on our website that enable an analysis of the user's browsing behavior. (1) Entered search terms (2) Frequency of page views (3) Use of website functions You can object to the setting of cookies at any time by changing the settings in your internet browser. Set cookies can be deleted. Note that if cookies are disabled, not all functions of our website may be fully usable. The data collected in this way is pseudonymized by technical measures. Therefore, it is no longer possible to assign the data to the accessing user. The data is not stored together with other personal data of the users. When you visit our website, you will be informed about the use of cookies for analysis purposes via an information banner and referred to this privacy policy. The legal basis for processing personal data using technically necessary cookies is Article 6(1)(f) GDPR. The legal basis for processing personal data using cookies for analysis purposes, with the user's consent, is Article 6(1)(a) GDPR.

  5. Creation of Logfiles Whenever the website is accessed, GDF collects data and information through an automated system, stored in the server's log files. This data is also stored in our system's log files. This data is not stored together with other personal data of the user. The following data can be collected: (1) Information about the browser type and version used (2) The user's operating system (3) The user's internet service provider (4) The user's IP address (5) Date and time of access (6) Websites from which the user's system accessed our website (referrer) (7) Websites accessed by the user's system through our website

  6. Registration on Our Website If the data subject uses the option to register on the website of the controller by providing personal data, the data will be transmitted to the controller through the input mask. The data will be stored exclusively for internal use by the controller. The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. During registration, the user's IP address and the date and time of registration are also stored. This is to prevent misuse of the services. The data will not be passed on to third parties, except when there is a legal obligation to do so. Registration of the data is necessary for providing content or services. Registered persons can have their stored data deleted or modified at any time. The data subject can obtain information about their stored personal data at any time.

  7. Contact Options The GDF website contains a contact form for electronic communication. Alternatively, contact can be made via the provided email address. If the data subject contacts the controller via one of these channels, the personal data transmitted by the data subject will be automatically stored. This storage is solely for the purpose of processing or contacting the data subject. The data will not be passed on to third parties. The legal basis for processing the data is the user's consent, Article 6(1)(a) GDPR. The legal basis for processing data transmitted in the course of sending an email is Article 6(1)(f) GDPR. If the email contact aims to conclude a contract, the additional legal basis for processing is Article 6(1)(b) GDPR. The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. For personal data from the contact form and data sent via email, this is the case when the respective conversation with the user has ended. The conversation is considered ended when it can be inferred from the circumstances that the relevant matter has been conclusively clarified. The additional personal data collected during the sending process will be deleted at the latest after seven days.

  8. Routine Deletion and Blocking of Personal Data The controller processes and stores personal data of the data subject only as long as necessary to achieve the storage purpose. Storage beyond this can occur if provided for by European or national legislation in Union regulations, laws, or other provisions to which the controller is subject. Once the storage purpose no longer applies or a storage period prescribed by the aforementioned regulations expires, the personal data is routinely blocked or deleted.

  9. Rights of the Data Subject If personal data relating to you is processed, you are a data subject within the meaning of the GDPR, and you have the following rights against the controller:

9.1 Right to Information You can request confirmation from the controller as to whether personal data concerning you is being processed by us. If such processing exists, you can request information from the controller about the following: a. The purposes for which the personal data is processed; b. The categories of personal data that are processed; c. The recipients or categories of recipients to whom your personal data has been or will be disclosed; d. The planned duration of storage of your personal data or, if specific information is not possible, criteria for determining the storage duration; e. The existence of a right to rectification or erasure of your personal data, a right to restrict processing by the controller, or a right to object to this processing; f. The existence of a right to lodge a complaint with a supervisory authority; g. All available information about the source of the data, if the personal data is not collected from the data subject; h. The existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject. You have the right to request information as to whether your personal data is transferred to a third country or an international organization. In this context, you can request to be informed about the appropriate safeguards pursuant to Article 46 GDPR in connection with the transfer.

9.2 Right to Rectification You have the right to rectification and/or completion by the controller if the personal data processed concerning you is inaccurate or incomplete. The controller must make the correction without undue delay.

9.3 Right to Restriction of Processing You can request the restriction of the processing of your personal data under the following conditions: a. If you contest the accuracy of your personal data for a period enabling the controller to verify the accuracy of the personal data; b. The processing is unlawful, and you oppose the erasure of the personal data and request the restriction of its use instead; c. The controller no longer needs the personal data for processing purposes, but you require it for the establishment, exercise, or defense of legal claims; d. If you have objected to processing pursuant to Article 21(1) GDPR pending the verification of whether the legitimate grounds of the controller override your grounds. Where processing has been restricted, such data may, with the exception of storage, only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State. If the processing restriction has been restricted according to the above conditions, you will be informed by the controller before the restriction is lifted