Privacy policy
This website is a purely informational site. It sets no cookies, embeds no third-party services and processes as little data as is technically possible.
This is a translation provided for convenience. In case of any discrepancy, the German version is the legally binding one.
1. Controller
The controller for data processing on this website is:
Rhöner Drachen- und Gleitschirmflugschulen Wasserkuppe GmbHBurgstraße 9
36163 Poppenhausen (Wasserkuppe)
Germany
- Phone
- +49 6654 7548
- datenschutz@papillon.de
- Represented by
- Andreas Schubert, Managing Director
Further details can be found in the imprint.
2. Data protection officer
We have appointed an external data protection officer:
CTM-COM GmbH, Rolf MentgesIn den Leppsteinswiesen 14
64380 Roßdorf, Germany
- datenschutz@ctm-com.de
- Phone
- +49 6154 57605-111
3. Hosting
This website is operated on the servers of an external service provider:
Stefan Dorn – schnied.netLeibnizstr. 59
63071 Offenbach, Germany
The host processes the data that arises when this website is accessed (see section 4) on our behalf. The legal basis is our legitimate interest in providing our website securely and reliably (Art. 6 (1) (f) GDPR). A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.
4. Server log files
When you access this website, the hosting provider automatically collects information that your browser transmits and stores it in what are known as server log files. These are:
- the file requested and the referrer URL
- date and time of access
- volume of data transferred and HTTP status code
- browser type, browser version and operating system used
- IP address of the requesting device
This data cannot be attributed by us to any specific individual and is not merged with other data sources. Processing is based on Art. 6 (1) (f) GDPR. Our legitimate interest lies in delivering the site without technical faults, in the security of our systems and in defending against attacks. Log files are deleted after 30 days at the latest, unless they are needed to investigate a specific security incident.
5. No cookies, no tracking
This website sets no cookies and uses no tracking. No analytics or statistics services, no advertising networks, no social media plugins and no external fonts or scripts are embedded. No profiling takes place, and nothing is stored in your browser – neither cookies nor local storage.
For that reason this website needs no consent or cookie banner. The consent management tool used on the previous version of this website, and the embedding of an interactive map via external providers, have been removed entirely.
6. Links to external websites
This website links to the sites of flying schools, clubs, businesses and municipalities in the region. These links only become active when you click them – until then no data is transmitted to the respective providers.
As soon as you follow a link, the privacy policy of the respective provider applies. We have no influence over the data processing that takes place there and accept no responsibility for it.
7. Map display (Google Maps – only on click)
The map in the “Directions” section is a static image served from our own server. Simply viewing the page establishes no connection to Google.
Only when you click the map image does Google Maps open in a new tab. Your IP address is then transmitted to Google; depending on whether you are signed in, Google may associate the request with your Google account. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The legal basis for this forwarding, triggered by your click, is our legitimate interest in making it easy for visitors to plan their journey (Art. 6 (1) (f) GDPR). Data may also be transferred to the USA in the process. Google LLC is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists. If you wish to avoid this transfer, simply do not click the map image – the address and the coordinates are given in plain text on the page.
Information on how Google handles user data: policies.google.com/privacy
8. Contacting us
If you contact us by e-mail or telephone, we process your details solely in order to deal with your enquiry. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract, and otherwise Art. 6 (1) (f) GDPR on the basis of our legitimate interest in answering enquiries. We delete this data as soon as it is no longer required for the purpose of processing and no statutory retention periods prevent deletion. This website contains no contact form.
9. Your rights as a data subject
You have the following rights in relation to us at any time:
- Access to the data stored about you (Art. 15 GDPR)
- Rectification of inaccurate or incomplete data (Art. 16 GDPR)
- Erasure of the data we hold about you (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR)
An informal message to datenschutz@papillon.de or to our data protection officer (section 2) is enough to exercise these rights.
10. Right to lodge a complaint with a supervisory authority
Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes the GDPR (Art. 77 GDPR). The authority responsible for us is:
Der Hessische Beauftragte für Datenschutz und InformationsfreiheitPostfach 3163
65021 Wiesbaden, Germany
datenschutz.hessen.de
11. SSL/TLS encryption
For security reasons this website uses SSL/TLS encryption throughout. You can recognise an
encrypted connection by the fact that your browser's address bar begins with
https:// and shows a padlock symbol. While encryption is active, the data you
transmit to us cannot be read by third parties.
12. Changes to this privacy policy
We update this privacy policy whenever changes to our website or to the legal framework make it necessary. The version published on this page always applies.