We are very delighted that you have shown interest in our enterprise. Data protection is of a particularly high priority for the management of Utafly Aviation (hereinafter referred to as Utafly). For this reason, Utafly has implemented extensive technical and organizational measures to ensure the most complete protection possible for your personal data processed by us. However, we would like to point out that Internet-based data transmissions can generally have security gaps, so that absolute protection cannot be guaranteed.

By means of this privacy policy, we would like to inform you about the type, scope and purpose of the personal data we collect, use and process when you visit our website. We also inform you as the data subject about the rights to which you are entitled.

1. Responsible body

The controller responsible for data processing on this website is

Utafly Aviation GmbH
Industriestrasse 2 | D-75228 Ispringen | Phone: +49 7231 801 1801
Email: info@utafly.com

2. General information

How do we collect your data?

There are various ways in which we collect data from you on our website. On the one hand, this is done by you providing us with this data when you contact us via our contact form. Other data is collected automatically or after your consent in our Consent Manager by our analysis tools when you visit our website. This is primarily technical data (e.g. internet browser, operating system or time of page view).

What do we use your data for?

We collect some of your data to ensure the error-free provision of our website. We use other data to analyze your user behavior in order to offer you special services, for example.

Storage period

Unless we provide you with a specific storage period within the privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, we will delete your data unless we have other legally permissible reasons for storing your personal data. Such a reason would be, for example, retention periods under tax or commercial law. If such a reason exists, the deletion will take place after the reason no longer applies.

Contact options

If you have any questions or wish to assert one of your rights as a data subject, you can contact us at any time by email at: info@utafly.com

3. External hosting of our website

The website is not hosted by Utafly itself, but by an external service provider. We use the services of DomainFactory GmbH, c/o WeWork, Neuturmstraße 5, 80331 Munich (hereinafter referred to as DomainFactory) to host our website

Our hoster will only process your data to the extent necessary to fulfill its performance obligations and follow our instructions with regard to this data. DomainFactory processes our customer data on our behalf in accordance with our instructions and has undertaken to handle your personal data in a trustworthy and GDPR-compliant manner. We ensure this through a so-called order processing contract (hereinafter AVV) with DomainFactory in accordance with Art. 28 GDPR.

Further information on data processing by DomainFactory can be found at: https://www.df.eu/datenschutz

4. Purposes of processing

Personal data such as name, address or e-mail address are only collected by us in the context of providing a service, e.g. when using the contact form, placing an order via our web store or registering for our newsletter. We only use the information you provide voluntarily for the purpose for which you have given it to us. The processing of personal data is carried out exclusively in accordance with the principles of Art. 5 GDPR.

4.1 Processing of usage data when accessing our website

Even in the case of purely informational use, a range of general data and information is transmitted each time our website is accessed. We only log the general data and information that your browser transmits to our server. Data and information are recorded that are technically necessary for us to display our website to you and that serve to ensure stability, security and security in the event of attacks on our information technology systems.

In detail, the following data is collected

IP address

Date and time of accessing the website

browser types and versions used

Operating system used and its interface

Website from which an accessing system accesses our website (so-called referrer)

Sub-websites which are accessed via an accessing system on our website

Internet service provider of the accessing system

We delete the data collected in this context after storage is no longer required for error analysis, or restrict processing if there are statutory retention obligations. The legal basis for data processing in this context is Art. 6 para. 1 f) GDPR. When using this general data and information, we do not draw any conclusions about you as the data subject. The logged data is stored for a period of 100 days. It is then deleted by the system.

4.2 Error logs (“error logs”)

Error logs are created for the purpose of identifying and rectifying errors. This is absolutely necessary in order to be able to react as quickly as possible to possible problems in the presentation and implementation of content (legitimate interest). These data are generally pseudonyms and therefore do not allow any conclusions to be drawn about a natural person. The legal basis for this can be found in Section 15 (1) TMG and Art. 6 (1) sentence 1 f) GDPR. If an error message occurs, general data such as the domain name of the website, the web browser and web browser version, the operating system, the IP address and the timestamp when the corresponding error message/specification occurs are recorded. These error logs are stored for up to 100 days. There is no right of objection.

4.3 Use of the contact form or contact by e-mail

If you have any questions, for example about our services, you can use the contact form provided on our website or you can also contact us by email. Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 a) GDPR on the basis of your voluntarily given consent or, in the case of a (pre-)contractual relationship with us, in accordance with Art. 6 para. 1 b) GDPR. We delete the data arising in this context after storage is no longer required to process your request, or restrict processing if there are statutory retention obligations.

4.4 Cookies

The Internet pages of Utafly use cookies. Cookies are text files that are placed and stored on a computer system via an Internet browser. 
Numerous websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters that can be used to assign websites and servers to the specific internet browser in which the cookie was stored. This enables the websites and servers visited to distinguish the individual browser of the data subject from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified via the unique cookie ID.

Through the use of cookies, we can provide the users of this website with more user-friendly services that would not be possible without the cookie setting.
By means of a cookie, the information and offers on our website can be optimized for the benefit of the user. As already mentioned, cookies enable us to recognize the users of our website. The purpose of this recognition is to make it easier for users to use our website. For example, the user of a website that uses cookies does not have to re-enter their access data each time they visit the website because this is taken over by the website and the cookie stored on the user's computer system. 
We use tracking services and cookies to create user profiles under a pseudonym. Such a user profile contains information about the behavior of a visitor on websites. It is not possible to draw any direct conclusions about the user.

The setting of cookies by our website can be prevented at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software programs. This is possible in all common Internet browsers. If the data subject deactivates the setting of cookies in the Internet browser used, not all functions of our website may be fully usable.

You can delete all cookies stored on your computer and set most browsers to prevent the storage of cookies. You can find out how here, for example: AllAboutCookies.org.

In general, web browsers are currently set by default to accept cookies automatically. On these pages you can find out how to change this default setting and block cookies - including from this website:

Chrome

Firefox

Internet Explorer

Opera

Safari

Our website uses different types of cookies. Some cookies are placed by third parties that appear on our pages.

Essential cookies are required to ensure the core functionality of the website.

Statistical cookies are cookies that are used to record user behavior on our website so that the functionality of the website can be improved.

The legal basis for the use of essential cookies is Art. 6 para. 1 f) GDPR - a legitimate interest. Our legitimate interest in the use of essential cookies is to be able to provide a functioning website. The legal basis for statistical cookies is Art. 6 para. 1 a) GDPR - your consent. No non-essential cookies are set without your consent.

You can change or revoke your consent to the use of cookies at any time in our Cookie Consent Manager on our website with effect for the future.

5. integration of third-party tools

5.1 Google

On our website, we use the services of Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter “Google”). The following information relates to all Google components across the board and is therefore not explained further in the subsections under 5.1 below.

Google tools are only ever used with your consent in accordance with Art. 6 (1) a) GDPR. You can refuse your consent or revoke it at any time via our Consent Manager with effect for the future if you do not want Google to collect and process the aforementioned data for the respective purposes.

Your personal data will only be stored for the period of time required to fulfill the respective processing purpose. Your data will be deleted as soon as it is no longer required to achieve the purpose.

In addition to Google Ireland Limited, your data may also be transmitted to the following recipients for processing:

Google LLC.

Alphabet Inc.

If personal data is processed by Google, this data may also be transferred to the USA. We ensure the transfer of your data through so-called standard contractual clauses, which we have included in our DPA with Google. These additionally guarantee your data a contractual level of security during processing that corresponds to that of the GDPR.

Further information on Google's privacy policy can be found here: https://www.google.com/intl/de/policies/privacy/.

5.1.1 Google Search Console

We use the web analysis service Google Search Console to improve the Google ranking of our website. We use this service to carry out search analyses to determine how often our website appears in Google's search results.

Google Search Console is used without the processing of personal user or tracking data. This means that no such data is transmitted to Google. For this reason, we do not obtain your consent to the use of this service in our Consent Manager.

5.1.2 Google Analytics

Our website uses Google Analytics, a web analysis service from Google. Google Analytics uses cookies which are stored on your computer and which enable your use of the website to be analyzed. The information generated by the cookie about your use of our website (including your IP address) will be transmitted to and stored by Google on servers in the United States.

The following data is collected and processed with the help of Google Analytics

IP address (anonymized)

Usage data

Click path

App updates

Browser information

Device information

JavaScript support

Visited pages

Referrer URL

downloads

Flash version

Location information

Purchase activity

Widget interactions

Date and time of the visit

We would like to point out that this website uses the “_anonymizeIp()” extension from Google Analytics. This activates IP anonymization on our website and your IP address will be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The truncation prevents direct personal identification.

Google will use the information to evaluate your use of our website, to compile reports on website activity for website operators and to provide other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of our website. By clicking on the “I agree” button in the cookie window that appears the first time you visit our website or by making the appropriate settings in our cookie settings, you consent to the processing of the data collected about you by Google in the manner described above and for the aforementioned purpose. You can revoke your consent at any time with effect for the future, i.e. without the legality of the data processing ceasing to apply at the time of your revocation, in one of the following ways:

By changing the cookie settings on our website: Consent Manager

By downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

This sets an opt-out cookie that prevents the future collection of your data when you visit this website.

You can find more information on Google's terms of use and data protection at http://www.google.com/analytics/terms/de.html or at https://www.google.de/intl/de/policies/

We can also track so-called events on our website via Google Analytics using a JavaScript, i.e. the click on certain buttons, the download of information, etc. You cannot object to this separately, but only by completely deactivating tracking as described above.

6. Contact options for data protection questions

If you have any questions or wish to assert one of your data subject rights explained below, you are welcome to contact us at any time by e-mail with the subject “Data protection request”: info@utafly.com

7 Your rights as a data subject

The GDPR regulates certain rights that data subjects can assert against the controller. We would like to inform you about these in more detail below. The exercise of these rights can be asserted against Utafly in writing. We ask you to assert these rights in writing, as this will make it easier for us to process your case internally. Thank you for your understanding.

7.1 Right to confirmation

Confirmation as to whether personal data concerning you is being processed by Utafly.

7.2 Right to information

To receive information about the personal data stored about him/her and a copy of this information - Art. 15 GDPR. Furthermore, the European legislator has granted the data subject access to the following information

the purposes of the processing

the categories of personal data being processed

the recipients or categories of recipients to whom the personal data have been or will be disclosed

the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period

the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing

the existence of the right to lodge a complaint with a supervisory authority

if the personal data are not collected directly from the data subject: All available information about the origin of the data

the existence of automated decision-making, including profiling, referred to in Art. 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject

a statement as to whether personal data have been transferred to a third country or to an international organization. If this is the case, the data subject also has the right to obtain information about the appropriate guarantees in connection with the transfer.

7.3 Right to rectification

Immediate correction of incorrect personal data in accordance with Art. 16 GDPR.

7.4 Right to erasure (right to be forgotten)

The immediate erasure of the personal data concerned if one of the following reasons applies and insofar as the processing is not necessary:

The personal data have been collected or otherwise processed for such purposes for which they are no longer necessary.

The data subject withdraws consent on which the processing is based according to Article 6(1)(a) GDPR, or Article 9(2)(a) GDPR, and where there is no other legal ground for the processing.

The data subject objects to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21 (2) GDPR.

The personal data have been processed unlawfully.

There is no exception pursuant to Art. 17 para. 3 GDPR.

If Utafly has made the personal data public and our company, as the controller, is obliged to erase the personal data pursuant to Article 17(1) GDPR, we have taken reasonable steps to do so, taking into account the available technology and the cost of implementation.

7.5 Right to restriction of processing

In accordance with Art. 18 GDPR, you have the right to request the restriction of the processing (blocking) of your personal data. The prerequisites for this are

The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.

The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead.

The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims.

The data subject has objected to processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.

7.6 Right to data portability

The transfer of the personal data concerned in a structured, commonly used and machine-readable format in accordance with Art. 20 GDPR.

7.7 Right to object

You have the right to object, at any time, to the processing of your personal data based on Art. 6 (1) e) or f) GDPR in accordance with Art. 21 GDPR. 
Utafly shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defense of legal claims.

7.8 Automated decisions in individual cases including profiling

As a responsible company, we do not use automated decision-making or profiling.

7.9 Right to withdraw consent under data protection law

The temporally independent withdrawal of a given consent to the processing of personal data with effect for the future in accordance with Art. 7 para. 3 GDPR.

7.10 Right to lodge a complaint

As a data subject, you have the right to lodge a complaint with the competent supervisory authority at any time in accordance with Art. 77 GDPR. The competent supervisory authority for Utafly is

State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Lautenschlagerstraße 20 | D-70173 Stuttgart | Tel.: 0711/615541-0
E-mail: poststelle@lfdi.bwl.de | www.baden-wuerttemberg.datenschutz.de

8 Validity of this privacy policy

Please note that the contents of this privacy policy are only valid in the version stated at the time of your visit. It may be necessary to amend this privacy policy due to changes in legal or official requirements. This is also the case if we add functions or use additional providers. The new privacy policy will then apply the next time you visit our website.

Current status of the privacy policy: November 2023