Privacy Policy

As of August 2023

1. GENERAL INFORMATION

The airfield is delighted that you have visited our website and are interested in our offers and services. The protection of your personal data (hereinafter referred to as ‘data’) during use is very important to us, and we want you to feel comfortable and secure when visiting our website. Compliance with the statutory data protection regulations is a matter of course for us.

In principle, you can use our website without having to provide any data. Below, we explain whether and what information is collected and used on our websites during your visit.

This privacy policy applies to the website www.flugplatz-koblenz-winningen.de operated by the airfield.

1. IDENTITY OF THE CONTROLLER

The controller responsible for data processing within the meaning of Art. 4 No. 7 GDPR (EU General Data Protection Regulation) is

Flugplatz Koblenz/Winningen GmbH

Airfield

56333 Winningen

available by telephone on: 02606 1030, fax: 02606 348, email This email address is being protected from spambots. You need JavaScript enabled to view it.

1. DATA PROTECTION OFFICER

The airfield has effectively appointed a data protection officer at

3rd Mind Business Consulting GmbH

Langer Weg 60

65760 Eschborn

If you have any questions about data protection, please contact Mr Frank Giebel at This email address is being protected from spambots. You need JavaScript enabled to view it.

Please note that if you contact us by standard e-mail, the confidentiality of the information transmitted cannot be guaranteed due to the (technical) nature of e-mail transmission. We therefore recommend that you send confidential information by post.

1. PERSONAL DATA

This is all information relating to an identified or identifiable natural person (hereinafter referred to as ‘data subject’); A natural person (human being) is considered identifiable if they can be identified directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special characteristics that express the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.

This includes, in principle, all direct or indirect information that leads to your identity. This includes, among other things, information such as name, address, telephone number, email address, account details, credit/debit card details, but also fingerprints, photos, etc.

1. PURPOSES OF PROCESSING AND LEGAL BASIS

If you provide us with your data, our use of it is regularly based on the contract concluded with you or pre-contractual negotiations on the basis of Art. 6 (1) lit. b GDPR or on your voluntary consent in accordance with Art. 6 (1) lit. a GDPR, e.g. for processing your enquiries, using our web forms, etc.

Furthermore, as a public body, we may process your data on the basis of Art. 6 (1) lit. e GDPR in conjunction with § 3 LDSG RP (Rhineland-Palatinate State Data Protection Act) if this is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us (in this case: air traffic control tasks).

Web forms (general):

If we use web forms, your consent is required for the transmission and processing of the information provided therein. The consent text is available for you directly below the respective form.

Your enquiry will then be transmitted to our systems and stored for the specific purpose of executing a contract or responding to an information request until the process is completed and/or for the duration of the business relationship. Data will only be stored for longer if there are legal retention obligations (e.g. under tax law).

The specific processing purposes, options for revocation/objection and other conditions (including conditions of participation) are specified in more detail in the texts below the respective forms, where applicable. Please note these information before submitting your data from the respective forms.

Contact form (general)

The data you enter there will be processed for the purpose of handling your enquiry:

• Your first name and surname (for identification, reservation, registration, etc.)
• Optionally, your postal address (for sending the requested information material by post)
• Your e-mail address (for electronic contact / electronic reservation / registration)
• Your enquiry itself (free text)

Aircraft noise contact form

The data you enter there will be used to process your aircraft noise complaint:

• Your first and last name (for identification and further correspondence, if necessary)
• Optional: your postal address (for sending the response by post)
• Your email address (for electronic contact / in case of queries and for responding)
• Date + time and location of the overflight
• Selection of the aircraft (airplane, helicopter)
• If applicable, the registration number and colour of the aircraft

Customs declarations

Flights subject to customs duties must be registered at least 24 hours before departure or arrival by telephone or using a special customs declaration form on our website:

The information you enter there is necessary for proper customs clearance:

• Email address (for identification, contact in case of queries, etc.)
• Registration number of your aircraft
• Number of persons on board
• Departure/destination airport and its name
• Details of departure or arrival, including date and time

Border clearance

If you are travelling to/from Germany to/from a country that has not acceded to the Schengen Agreement (a so-called ‘third country’), you are subject to mandatory border controls.

To speed up the process, you can enter and submit the following required data yourself:

• Email address (for identification purposes, to be contacted in case of queries, etc.)
• First name and surname
• Date of birth
• Passport number
• Details of departure or arrival, including date and time

Data collected automatically when you visit our websites:

When you use our websites, data is automatically collected in log files (‘server log files’), via search engines and/or forms, which your web browser/provider automatically transmits to our provider. When you visit our websites, our web servers temporarily store the following information by default

• the websites you visit on our site, as well as the date, time and duration of your visit
• the type of browser you use, its version and the operating system you use
• any search engine you may use
• the names of any files downloaded
• the (anonymised) IP address at the time of access
• the type of device used
• the website from which you visit us (‘referrer URL’).

If we evaluate this technical data, we do so anonymously and for the purpose of ensuring a smooth connection to the website, ensuring comfortable use of our website, evaluating and improving system security and stability, and for other administrative purposes on the legal basis of Art. 6 (1) lit. e GDPR in conjunction with § 3 LDSG RLP.

This data is not merged with other data sources. However, we reserve the right to check this data retrospectively if we become aware of specific indications of illegal use.

Other purposes:

Data processing may also be necessary on the basis of Art. 6 (1) lit. e GDPR in conjunction with § 3 LDSG RP for the establishment, assertion or defence of legal claims in these contexts.

1. RECIPIENTS OR CATEGORIES OF RECIPIENTS / THIRD COUNTRY TRANSFERS

We host our website exclusively in data centres in Germany or the EU.

Your data will not be passed on, sold or otherwise transferred to third parties unless this is necessary for the purpose of contract processing or the performance of a service, or you have expressly consented to this.

Furthermore, data is processed on our behalf on the basis of Art. 28 GDPR (contract processing), e.g. for external services related to the operation of our IT infrastructure.

Furthermore, data processing and its transfer to state institutions and authorities entitled to receive information only takes place within the framework of the relevant laws or if we are obliged to do so by a court decision (cf. Art. 6 (1) lit. c GDPR in conjunction with § 3 LDSG RP).

1. AUTOMATED DECISION-MAKING / PROFILING

Automated decision-making / profiling or scoring within the meaning of Art. 22 GDPR does not take place.

1. CRITERIA FOR STORAGE DURATION AND DELETION

The storage duration of your data depends on the processing purposes (see above) or the statutory retention/limitation and deletion periods. As a rule, they are stored for the duration of the business relationship with us. Longer (access-protected) storage only takes place in accordance with the relevant statutory retention obligations (e.g. for billing and tax purposes) or for the exercise/defence of legal claims.

If your data is no longer required for the aforementioned purposes, including statutory retention obligations, it will be deleted within the statutory time limits.

For technical reasons, data may be duplicated in data backup files and mirrors. Such copies may also only be deleted after a technically necessary time delay.

1. COOKIES

A cookie is a small data packet in the form of a text file that is transmitted to your browser by a website when you visit it and is stored on your computer. Cookies do not cause any damage to your computer, nor do they contain viruses or personal data. Cookies are primarily used to ensure basic technical functions of the website, e.g. navigation or shopping basket and booking functions, as well as to store user information during or after a visit to a website. This includes, for example, language settings for multilingual websites, a login status or the point at which a video was viewed so that it can be played from the same point on the next visit. Related technologies with the same function may also be included, which, for example, store pseudonymised user information in so-called ‘user IDs’.

Some cookies, especially those from third-party providers, transfer their content and other information about visitors to the respective locations, including third countries, which is why your consent is required.

This website uses the following cookies:

• Strictly necessary or ‘essential’ cookies are absolutely necessary for the proper technical operation of a website or for reasons of information security. These cannot be ‘deselected’ in order to ensure the functionality of this website (e.g. to store your cookie preferences).
• Statistics and third-party cookies: Although no personal data is analysed or transferred to third countries for the use of MATOMO, we still ask for your consent via our ‘Cookie Consent Box’ (CCB). If we use additional third-party cookies that are subject to consent, you can give us your consent either by manually ‘double-clicking’ directly on the element or via our Cookie Consent Box (CCB).

Legal basis for setting cookies

As a matter of principle, we do not process any personal data with the help of cookies, unless this is necessary for a function of this website for the fulfilment of a contract with you, e.g. for bookings (cf. Art. 6 (1) lit. b or 49 (1) lit. b GDPR) or on the basis of your consent (cf. Art. 6 (1) lit. a or 49 (1) lit. a GDPR). In other cases, we process purely technical data without personal reference on the basis of Art. 6 (1) lit. e GDPR in conjunction with § 3 LDSG RP for the purpose of ensuring that the website functions properly, that it is operated economically and securely, and that our online offering is optimised.

Effective granting and revocation of consent to cookies

Before setting a cookie based on the legal basis of consent, we ask for your consent directly via this function by actively clicking or via our ‘cookie consent box’. You can revoke this consent at any time with future effect by closing your browser or via the CCB. If this is not available, only the technically necessary cookies will be set, the use of which is based on our interest and the interest of users in the expected security and functionality of our website.

Basic settings via your browser

Regardless of the respective legal basis for setting cookies (see above) and the technology used (cookie banner, cookie box), you can fundamentally determine the management of cookies via your browser; these then apply regularly to all websites by

• informing you about the setting of cookies,
• only allowing cookies in individual cases, excluding cookies for certain cases or in general, or
• automatically deleting cookies – regardless of which ones – from your computer when you close your browser.

To implement this, please follow the instructions in your browser's manual.

Cookie block for online services (generally not secure)

You can also object to the use of cookies for online marketing purposes via third-party services, in cases of ‘tracking’ via http://optout.aboutads.info (in English) and www.youronlinechoices.com/ (also in German) online.

Cookie management via our Cookie Consent Box (CCB)

You can easily give your consent (activation of cookies) or withdraw your consent (deactivation of cookies) via our ‘Cookie Box’, which appears automatically on your screen when you first visit our website. You can access the ‘cookie box’ at any time via the corresponding (floating) icon on the side. Deactivation is just as easy as activation (consent): simply select or deselect the corresponding check box. As mentioned above, exceptions are technically necessary (‘essential’) cookies for the proper and secure functioning of our website (see above).

Please note that deactivating cookies may restrict certain functions of our website.

1. USE OF MATOMO

As part of our internet service and in order to further improve our website for you and tailor it even more to the needs of users, we use the open source tool ‘Matomo’ for statistical evaluation of website usage (further information in English can be found at: https://www.matomo.org/). The information obtained in this way is not passed on to third parties.

Matomo is configured in such a way that no personal data is processed (e.g. no user IDs, user tracking) and no cookies are set. There is also no ‘device fingerprinting’, i.e. your input device cannot be recognised. Anonymisation takes place immediately after the IP address has been processed and before it is stored on our web server. This is done by truncating the IP address by the last octet in accordance with the decisions of the Data Protection Conference of the Federal and State Data Protection Supervisory Authorities (DSK). This means that you, as a user, always remain anonymous.

The anonymous statistical data includes, for example:

• Browser type and version
• Operating system used
• Device type, model and brand
• Screen resolution
• Search engine used
• Websites visited on our site, including length of stay
• Search terms and keywords, if applicable
• Date and time of visit
• Location of visit (continent, country, region, city)
• Browser language.
• The number of visitors to each individual website
• The Internet provider used.

1. USE OF GOOGLE MAPS

This website uses the product ‘Google Maps’, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’), with the interest (based on Art. 6 (1) (1) (f) GDPR and an agreement on joint responsibility pursuant to Art. 26 GDPR, which can be read here: https://privacy.google.com/intl/de/businesses/mapscontrollerterms), so that you can find us and our events quickly and easily. It is technically possible that Google could identify at least individual users based on the data it receives. It is possible that personal data and personality profiles of website users could be processed by Google for other purposes over which we have no influence and cannot have any influence. This, and the fact that data is transferred to the USA, is problematic for data protection reasons.

The terms of use for Google Maps can be found at ‘Terms of Use for Google Maps’.

You can easily deactivate the Google Maps service and thus prevent data transfer to Google: To do this, deactivate JavaScript in your browser. Please refer to your browser manufacturer's instructions for details on how this works. However, we would like to point out that in this case you will not be able to use the map display.

By using this website and not deactivating the JavaScript function, you expressly declare, in full knowledge of the data protection issues, that you agree to the processing of data collected about you by Google in the manner described above and for the purpose stated above.

1. INTEGRATION OF YOUTUBE VIDEOS

We have integrated videos from YouTube (owned by Google, see section 10) into our online offering via corresponding plug-ins, which are regularly stored on www.youtube.com and can be played directly from our website. These are primarily integrated in ‘extended data protection mode’, i.e. no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in the following paragraph be transferred. We have no influence on this data transfer.

When you visit these subpages, a connection to the YouTube servers in the USA is automatically established and YouTube receives the information that you have accessed the corresponding subpage of our website. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to YouTube/Google, your data will be directly associated with your account. If you do not want this information to be associated with your YouTube profile, you must log out of your account before activating the video. YouTube stores your data as usage profiles and uses it for advertising, market research and/or the design of its website in line with current needs. Such evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube or Google to exercise this right.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in their privacy policy. There you will also find further information on your rights and settings options for protecting your privacy at the current link www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield (see www.privacyshield.gov/EU-US-Framework).

1. USE OF GOOGLE WEB FONTS

This website uses so-called ‘web fonts’ from Google (see above) for the uniform display of fonts. When you visit the site, your browser automatically loads the required fonts into its browser cache. We regularly store these fonts locally on our servers, which means that no connection needs to be established with the Google servers to transfer your IP address.

However, it cannot be completely ruled out that your browser may still connect to Google servers for these or other purposes, which would ultimately allow Google to know that our website was accessed via your IP address.

If your browser does not support web fonts, a standard font from your computer will be used.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/.

1. CHILDREN & YOUNG PEOPLE

Persons under the age of 18 should only transmit their data on the Internet with the consent of their parents or legal guardians. We do not request such information from children and young people, nor do we collect it, and we certainly do not pass it on to third parties.

1. INFORMATION SECURITY

We have taken technical and organisational security measures to protect your data from loss, destruction, manipulation and unauthorised access and, in particular, to maintain confidentiality, availability and (data) integrity, e.g. by storing it in data centres in Germany or the EU only. All employees and all persons involved in data processing (including contracted service providers) have been obliged by us to maintain confidentiality, comply with data protection regulations and handle personal data with care.

To protect security during transmission, we encrypt your data with Secure Socket Layer (SSL) wherever possible to prevent misuse by third parties.

Our security measures are continuously adapted in line with technological developments.

1. YOUR RIGHTS AS A DATA SUBJECT

As a data subject, authorised representative or other entitled person, you have the right to assert the following rights against us at any time in writing or by email, provided that there are no contractual or legal provisions to the contrary or that processing is necessary for other reasons.

To do so, please use the contact details at the beginning of this document.

Right to information: You can obtain information about your personal data stored by us at any time. Please only submit requests for information in writing (letter) or in text form (email). For data protection reasons and due to a lack of qualified identification options, no information will be provided by telephone.

Right to rectification: If we process your personal data directly and you discover incorrect information or a need for updates, you are welcome to notify us for correction purposes. In the event of significant changes, please enclose appropriate supporting evidence (e.g. in the case of name changes due to marriage or similar).

Right to erasure: You have the right to request the erasure of your personal data from us at any time. Please note that we are legally obliged to retain certain data in accordance with statutory retention obligations. We will then inform you of these data categories.

Right to restriction: You can request the restriction of the processing of your personal data at any time.

Right to data portability (data export): As you do not usually provide us with personal data via our websites, we are unable to offer you a traditional data export function. In any case, we will review your request in accordance with legal requirements and technical feasibility and contact you immediately regarding its implementation.

Right to object/revoke: You may object to the processing of your personal data by us at any time or revoke your consent with effect for the future.

Right to lodge a complaint with the supervisory authorities: You have the right to lodge a complaint with your competent state data protection supervisory authority if you believe that the processing of your personal data violates the GDPR. You can find the respective address on the website of the Federal Commissioner for Data Protection and Freedom of Information in Berlin.

1. COMPETENT DATA PROTECTION SUPERVISORY AUTHORITY

The following supervisory authority is responsible for the airfield:

The State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate (LfDI RP)

Hintere Bleiche 34

55116 Mainz

1. LINKS TO OTHER WEBSITES

If you use links to external websites offered within our applications, this privacy policy does not extend to these external websites.

At the time the links were created, we were able to verify the correctness of the linked website(s) in terms of content and security, and we check this regularly. However, we have no influence on the continued compliance with data protection and security regulations by other providers or on changes to content.

If you click on links to external websites displayed on our website, these external websites may collect user data when you click on these links or otherwise follow the instructions of these external websites, especially if you are logged in to other platforms or similar. We have no control over the data that is collected voluntarily or involuntarily via advertisements or third-party websites. For your own safety, please also refer to the privacy policies provided on the websites of other providers.

If you become aware of an ‘unsafe’ link originating from our applications, please inform us immediately so that we can investigate the matter. Thank you very much.

1. CHANGES TO OUR DATA PROTECTION REGULATIONS

If necessary due to the legal situation and technical developments, we reserve the right to change our security and data protection measures accordingly. In such cases, we will also amend this document.

Please therefore note the current version at the beginning of this document.

1. FURTHER INFORMATION

If you require further information that is not provided in this privacy policy, or if you would like further information on a specific point, please contact our data protection officer directly at This email address is being protected from spambots. You need JavaScript enabled to view it..