privacy policy
Personenbezogene Daten (nachfolgend zumeist nur „Daten“ genannt) werden von uns nur im Rahmen der Erforderlichkeit sowie zum Zwecke der Bereitstellung eines funktionsfähigen und nutzerfreundlichen Internetauftritts, inklusive seiner Inhalte und der dort angebotenen Leistungen, verarbeitet.
Gemäß Art. 4 Ziffer 1. der Verordnung (EU) 2016/679, also der Datenschutz-Grundverordnung (nachfolgend nur „DSGVO“ genannt), gilt als „Verarbeitung“ jeder mit oder ohne Hilfe automatisierter Verfahren ausgeführter Vorgang oder jede solche Vorgangsreihe im Zusammenhang mit personenbezogenen Daten, wie das Erheben, das Erfassen, die Organisation, das Ordnen, die Speicherung, die Anpassung oder Veränderung, das Auslesen, das Abfragen, die Verwendung, die Offenlegung durch Übermittlung, Verbreitung oder eine andere Form der Bereitstellung, den Abgleich oder die Verknüpfung, die Einschränkung, das Löschen oder die Vernichtung.
Mit der nachfolgenden Datenschutzerklärung informieren wir Sie insbesondere über Art, Umfang, Zweck, Dauer und Rechtsgrundlage der Verarbeitung personenbezogener Daten, soweit wir entweder allein oder gemeinsam mit anderen über die Zwecke und Mittel der Verarbeitung entscheiden. Zudem informieren wir Sie nachfolgend über die von uns zu Optimierungszwecken sowie zur Steigerung der Nutzungsqualität eingesetzten Fremdkomponenten, soweit hierdurch Dritte Daten in wiederum eigener Verantwortung verarbeiten.
Unsere Datenschutzerklärung ist wie folgt gegliedert:
I. Informationen über uns als Verantwortliche
II. Rechte der Nutzer und Betroffenen
III. Informationen zur Datenverarbeitung
Responsible provider of this website in the sense of data protection law is:
Bastjan Alan James Schmidt
Weygandtstraße 138
D-22419 Hamburg
E-Mail: info@nordfly-vag.com
For technical reasons, particularly to ensure a secure and stable website, data is transmitted to us or our web hosting provider by your internet browser. These so-called server log files include, among other things, the type and version of your internet browser, the operating system, the website from which you accessed our site (referrer URL), the pages of our website that you visit, the date and time of each access, and the IP address of the internet connection from which the use of our website occurs.
This data is stored temporarily but not in conjunction with any other personal data of yours.
This storage is based on the legal foundation of Art. 6 (1) lit. f) GDPR. Our legitimate interest lies in the improvement, stability, functionality, and security of our website.
The data will be deleted no later than seven days after collection, unless further retention is required for evidentiary purposes. In such cases, the data is excluded from deletion either partially or entirely until the incident is fully resolved.
a) Session cookies
We use cookies on our website. Cookies are small text files or other storage technologies stored on your computer by your browser. These cookies process certain specific information about you, such as your browser, location data, or IP address.
This processing makes our website more user-friendly, efficient, and secure, allowing us, for example, to display our website in different languages or to offer a shopping cart function.
The legal basis for such processing is Art. 6 Para. 1 lit. b) GDPR, insofar as these cookies are used to collect data to initiate or process contractual relationships.
If the processing does not serve to initiate or process a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6 Para. 1 lit. f) GDPR.
When you close your browser, these session cookies are deleted.
b) Third-party cookies
If necessary, our website may also use cookies from companies with whom we cooperate for the purpose of advertising, analyzing, or improving the features of our website.
Please refer to the following information for details, in particular for the legal basis and purpose of such third-party collection and processing of data collected through cookies.
c) Disabling cookies
You can refuse the use of cookies by changing the settings on your browser. Likewise, you can use the browser to delete cookies that have already been stored. However, the steps and measures required vary, depending on the browser you use. If you have any questions, please use the help function or consult the documentation for your browser or contact its maker for support. Browser settings cannot prevent so-called flash cookies from being set. Instead, you will need to change the setting of your Flash player. The steps and measures required for this also depend on the Flash player you are using. If you have any questions, please use the help function or consult the documentation for your Flash player or contact its maker for support.
If you prevent or restrict the installation of cookies, not all of the functions on our site may be fully usable.
If you create a customer account with us via our website, we will use the data you entered during registration (e.g. your name, your address, or your email address) exclusively for services leading up to your potential placement of an order or entering some other contractual relationship with us, to fulfill such orders or contracts, and to provide customer care (e.g. to provide you with an overview of your previous orders or to be able to offer you a wishlist function). We also store your IP address and the date and time of your registration. This data will not be transferred to third parties.
During the registration process, your consent will be obtained for this processing of your data, with reference made to this privacy policy. The data collected by us will be used exclusively to provide your customer account.
If you give your consent to this processing, Art. 6 Para. 1 lit. a) GDPR is the legal basis for this processing.
If the opening of the customer account is also intended to lead to the initiation of a contractual relationship with us or to fulfill an existing contract with us, the legal basis for this processing is also Art. 6 Para. 1 lit. b) GDPR.
You may revoke your prior consent to the processing of your personal data at any time under Art. 7 Para. 3 GDPR with future effect. All you have to do is inform us that you are revoking your consent.
The data previously collected will then be deleted as soon as processing is no longer necessary. However, we must observe any retention periods required under tax and commercial law.
If you register for our free newsletter, the data requested from you for this purpose, i.e. your email address and, optionally, your name and address, will be sent to us. We also store the IP address of your computer and the date and time of your registration. During the registration process, we will obtain your consent to receive this newsletter and the type of content it will offer, with reference made to this privacy policy. The data collected will be used exclusively to send the newsletter and will not be passed on to third parties.
The legal basis for this is Art. 6 Para. 1 lit. a) GDPR.
You may revoke your prior consent to receive this newsletter under Art. 7 Para. 3 GDPR with future effect. All you have to do is inform us that you are revoking your consent or click on the unsubscribe link contained in each newsletter.
If you contact us via email or the contact form, the data you provide will be used for the purpose of processing your request. We must have this data in order to process and answer your inquiry; otherwise we will not be able to answer it in full or at all.
The legal basis for this data processing is Art. 6 Para. 1 lit. b) GDPR.
Your data will be deleted once we have fully answered your inquiry and there is no further legal obligation to store your data, such as if an order or contract resulted therefrom.
We offer you the opportunity to post questions, answers, opinions, and ratings on our website, hereinafter referred to jointly as “posts.” If you make use of this opportunity, we will process and publish your post, the date and time you submitted it, and any pseudonym you may have used.
The legal basis for this is Art. 6 Para. 1 lit. a) GDPR. You may revoke your prior consent under Art. 7 Para. 3 GDPR with future effect. All you have to do is inform us that you are revoking your consent.
In addition, we will also process your IP address and email address. The IP address is processed because we might have a legitimate interest in taking or supporting further action if your post infringes the rights of third parties and/or is otherwise unlawful.
In this case, the legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in any legal defense we may have to mount.
To protect against attacks, harmful bots and to improve performance, we use services of CloudFlare Inc., 101 Townsend St, San Francisco, CA 94107 USA for our website.
Cloudflare is a decentralized content delivery network. It delivers the static content of a website via cache servers. It ensures that each user is assigned the server that is closest to them and that can deliver the content the fastest. Cloudflare also ensures the secure, stable operation of the website.
Cloudflare processes web traffic information. Cookies are set for this purpose and the user’s IP address is transmitted to Cloudflare and stored for processing purposes. In general, complete request logs are kept for up to 7 days. The legal basis is Art. 6 para. 1 f DSGVO.
For more information on the provider’s data processing, in particular data protection and data security, please visit: https://www.cloudflare.com/de-de/privacypolicy/
Cloudflare is certified under the EU-US Privacy Shield, which ensures a level of protection for your data comparable to European data protection law. You can access the certificate here: https://www.privacyshield.gov/participant?id=a2zt0000000GnZKAA0
To advertise our products and services as well as to communicate with interested parties or customers, we have a presence on the Facebook platform.
On this social media platform, we are jointly responsible with Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland.
The data protection officer of Facebook can be reached via this contact form:
https://www.facebook.com/help/contact/540977946302970
We have defined the joint responsibility in an agreement regarding the respective obligations within the meaning of the GDPR. This agreement, which sets out the reciprocal obligations, is available at the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
The legal basis for the processing of the resulting and subsequently disclosed personal data is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the analysis, communication, sales, and promotion of our products and services.
The legal basis may also be your consent per Art. 6 para. 1 lit. a GDPR granted to the platform operator. Per Art. 7 para. 3 GDPR, you may revoke this consent with the platform operator at any time with future effect.
When accessing our online presence on the Facebook platform, Facebook Ireland Ltd. as the operator of the platform in the EU will process your data (e.g. personal information, IP address, etc.).
This data of the user is used for statistical information on the use of our company presence on Facebook. Facebook Ireland Ltd. uses this data for market research and advertising purposes as well as for the creation of user profiles. Based on these profiles, Facebook Ireland Ltd. can provide advertising both within and outside of Facebook based on your interests. If you are logged into Facebook at the time you access our site, Facebook Ireland Ltd. will also link this data to your user account.
If you contact us via Facebook, the personal data your provide at that time will be used to process the request. We will delete this data once we have completely responded to your query, unless there are legal obligations to retain the data, such as for subsequent fulfillment of contracts.
Facebook Ireland Ltd. might also set cookies when processing your data.
If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your browser. Cookies that have already been saved can be deleted at any time. The instructions to do this depend on the browser and system being used. For Flash cookies, the processing cannot be prevented by the settings in your browser, but instead by making the appropriate settings in your Flash player. If you prevent or restrict the installation of cookies, not all of the functions of Facebook may be fully usable.
Details on the processing activities, their suppression, and the deletion of the data processed by Facebook can be found in its privacy policy:
https://www.facebook.com/privacy/explanation
It cannot be excluded that the processing by Facebook Ireland Ltd. will also take place in the United States by Facebook Inc., 1601 Willow Road, Menlo Park, California 94025.
Facebook Inc. has submitted to the EU-US Privacy Shield, thereby complying with the data protection requirements of the EU when processing data in the USA.
https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
To advertise our products and services as well as to communicate with interested parties or customers, we have a presence on the Instagram platform.
On this social media platform, we are jointly responsible with Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.
The data protection officer of Instagram can be reached via this contact form:
https://www.facebook.com/help/contact/540977946302970
We have defined the joint responsibility in an agreement regarding the respective obligations within the meaning of the GDPR. This agreement, which sets out the reciprocal obligations, is available at the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
The legal basis for the processing of the resulting and subsequently disclosed personal data is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the analysis, communication, sales, and promotion of our products and services.
The legal basis may also be your consent per Art. 6 para. 1 lit. a GDPR granted to the platform operator. Per Art. 7 para. 3 GDPR, you may revoke this consent with the platform operator at any time with future effect.
When accessing our online presence on the Instagram platform, Facebook Ireland Ltd. as the operator of the platform in the EU will process your data (e.g. personal information, IP address, etc.).
This data of the user is used for statistical information on the use of our company presence on Instagram. Facebook Ireland Ltd. uses this data for market research and advertising purposes as well as for the creation of user profiles. Based on these profiles, Facebook Ireland Ltd. can provide advertising both within and outside of Instagram based on your interests. If you are logged into Instagram at the time you access our site, Facebook Ireland Ltd. will also link this data to your user account.
If you contact us via Instagram, the personal data your provide at that time will be used to process the request. We will delete this data once we have completely responded to your query, unless there are legal obligations to retain the data, such as for subsequent fulfillment of contracts.
Facebook Ireland Ltd. might also set cookies when processing your data.
If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your browser. Cookies that have already been saved can be deleted at any time. The instructions to do this depend on the browser and system being used. For Flash cookies, the processing cannot be prevented by the settings in your browser, but instead by making the appropriate settings in your Flash player. If you prevent or restrict the installation of cookies, not all of the functions of Instagram may be fully usable.
Details on the processing activities, their suppression, and the deletion of the data processed by Instagram can be found in its privacy policy:
https://help.instagram.com/519522125107875
It cannot be excluded that the processing by Facebook Ireland Ltd. will also take place in the United States by Facebook Inc., 1601 Willow Road, Menlo Park, California 94025.
Facebook Inc. has submitted to the EU-US Privacy Shield, thereby complying with the data protection requirements of the EU when processing data in the USA.
https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
We also integrate the following social media sites into our website. The integration takes place via a linked graphic of the respective site. The use of these graphics stored on our own servers prevents the automatic connection to the servers of these networks for their display. Only by clicking on the corresponding graphic will you be forwarded to the service of the respective social network.
Once you click, that network may record information about you and your visit to our site. It cannot be ruled out that such data will be processed in the United States.
Initially, this data includes such things as your IP address, the date and time of your visit, and the page visited. If you are logged into your user account on that network, however, the network operator might assign the information collected about your visit to our site to your personal account. If you interact by clicking Like, Share, etc., this information can be stored your personal user account and possibly posted on the respective network. To prevent this, you need to log out of your social media account before clicking on the graphic. The various social media networks also offer settings that you can configure accordingly.
The following social networks are integrated into our site by linked graphics:
Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA.
Privacy Policy: https://www.facebook.com/policy.php
EU-US Privacy Shield https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
Facebook plug-in
Our website uses the plug-in of the Facebook social network. Facebook.com is a service provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. In the EU, this service is also operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, hereinafter both referred to as “Facebook.”
Through certification according to the EU-US Privacy Shield
https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
Facebook guarantees that it will follow the EU’s data protection regulations when processing data in the United States.
The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in improving the quality of our website.
Further information about the possible plug-ins and their respective functions is available from Facebook at
https://developers.facebook.com/docs/plugins/
If the plug-in is stored on one of the pages you visit on our website, your browser will download an icon for the plug-in from Facebook’s servers in the USA. For technical reasons, it is necessary for Facebook to process your IP address. In addition, the date and time of your visit to our website will also be recorded.
If you are logged in to Facebook while visiting one of our plugged-in websites, the information collected by the plug-in from your specific visit will be recognized by Facebook. The information collected may then be assigned to your personal account at Facebook. If, for example, you use the Facebook Like button, this information will be stored in your Facebook account and published on the Facebook platform. If you want to prevent this, you must either log out of Facebook before visiting our website or use an add-on for your browser to prevent the Facebook plug-in from loading.
Further information about the collection and use of data as well as your rights and protection options in Facebook’s privacy policy found at
https://www.facebook.com/policy.php
Twitter plug-in
Our website uses the plug-in of the Twitter social network. The Twitter service is operated by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA (“Twitter”).
Through certification according to the EU-US Privacy Shield
https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active
Twitter guarantees that it will follow the EU’s data protection regulations when processing data in the United States.
The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in improving the quality of our website.
If the plug-in is stored on one of the pages you visit on our website, your browser will download an icon for the plug-in from Twitter’s servers in the USA. For technical reasons, it is necessary for Twitter to process your IP address. In addition, the date and time of your visit to our website will also be recorded.
If you are logged in to Twitter while visiting one of our plugged-in websites, the information collected by the plug-in from your specific visit will be recognized by Twitter. The information collected may then be assigned to your personal account at Twitter. If, for example, you use the Twitter Tweet button, this information will be stored in your Twitter account and may be published on the Twitter platform. To prevent this, you must either log out of Twitter before visiting our site or make the appropriate settings in your Twitter account.
Further information about the collection and use of data as well as your rights and protection options in Twitter’s privacy policy found at
https://twitter.com/privacy
Google+ plug-in
We use the plug-in of the Google+ social network on our website. Google+ is an online service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (hereinafter: Google).
Through certification according to the EU-US Privacy Shield
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Google guarantees that it will follow the EU’s data protection regulations when processing data in the United States.
The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in improving the quality of our website.
Further information about the possible plug-ins and their respective functions is available from Google at
https://developers.google.com/+/web/
If the plug-in is stored on one of the pages you visit on our website, your browser will download an icon for the plug-in from Google’s servers in the USA. For technical reasons, it is necessary for Google to process your IP address. In addition, the date and time of your visit to our website will also be recorded.
If you are logged in to Google while visiting one of our plugged-in websites, the information collected by the plug-in from your specific visit will be recognized by Google. The information collected may then be assigned to your personal account at Google. If, for example, you use the +1 button, this information will be stored in your Google Account and may be published on the Google platform. To prevent this, you must either log out of Google before visiting our site or make the appropriate settings in your Google account.
Further information about the collection and use of data as well as your rights and protection options in Google’s privacy policy found at
https://policies.google.com/privacy
Nutzerkonto
Falls Sie über unseren Internetauftritt ein Nutzerkonto bei uns anlegen, werden wir die von Ihnen bei der Registrierung eingegebenen Daten erheben und speichern.
Bei der Registrierung erheben wir folgende personenbezogene Daten, sowie nicht personenbezogene Daten:
– Name
– Geburtsdatum
– E-Mail-Adresse
– Discord ID
– Discord Nutzernamen
– IVAO ID
– VATSIM VID
Gleichzeitig speichern wir die IP-Adresse und das Datum Ihrer Registrierung nebst Uhrzeit.
Die erhobenen Daten werden für das Nutzerkonto genutzt.
Eine Weitergabe* sowie der Verkauf Ihrer Daten erfolgt nicht.
* Weitere Nutzung Ihrer Daten:
Unser Internetauftritt ist Teil eines Zusammenschlusses von mehreren virtuellen Airlines.
Im Rahmen dieses Zusammenschlusses wurde eine von uns geführte Datenbank angelegt, in denen Nutzerdaten gelöschter Nutzer erhoben und gespeichert werden und der Zugriff bzw. die Abfrage dritter erfolgt.
Bei Löschung Ihres Nutzkontos erfolgt die Speicherung Ihrer Daten in dieser Datenbank.
Hierzu werden folgende Daten erhoben und gespeichert:
– Name
– Geburtsdatum
– IVAO ID
– VATSIM VID
– Scoring Punktzahl
Zweck dieser Datenbank ist ein Scoring System für alle virtuellen Partner Airlines, die es ermöglichen soll festzustellen, ob eine Registrierung bei der virtuellen Airline gewünscht oder unerwünscht ist.
Eine Nutzung dritter, nicht im Airline Zusammenschluss zugehörigen Personen erfolgt nicht.
Alle Zugriffsberechtigten Personen des Zusammenschlusses erhalten eine Einweisung und müssen vor Zugriff eine Datenschutzerklärung / Verschwiegenheitserklärung unterzeichnen.
Der Zugriff auf die Datenbank erfolgt Personenbezogen und Passwortgeschützt.
Zusätzlich erfolgt bei der Löschung Ihres Nutzerkontos die Erhebung und Speicherung folgender personenbezogene Daten, sowie nicht personenbezogene Daten:
– Name
– Geburtsdatum
– E-Mail-Adresse
– Pilot ID
– Airline ID
– Land
– Zeitzone
– Flüge
– Discord ID
– IVAO ID
– VATSIM VID
– Grund der Löschung
– Erteilung eines Registrierungsbannes
Im Rahmen des Weiteren Anmeldevorgangs wird Ihre Einwilligung in diese Verarbeitung eingeholt und auf diese Datenschutzerklärung verwiesen. Die dabei von uns erhobenen Daten werden ausschließlich für die oben genannten Zwecke verwendet.
Soweit Sie in diese Verarbeitung einwilligen, ist Art. 6 Abs. 1 lit. a) DSGVO Rechtsgrundlage für die Verarbeitung.
Die uns erteilte Einwilligung in die Eröffnung und den Unterhalt des Nutzerkontos können Sie gemäß Art. 7 Abs. 3 DSGVO jederzeit mit Wirkung für die Zukunft widerrufen.
Hierzu müssen Sie uns lediglich über Ihren Widerruf in Kenntnis setzen.
Dieses können Sie schriftlich per E-Mail an die im Impressum stehende E-Mail.
Nutzerkontolöschung
Die Löschung Ihres Nutzerkontos kann auf zwei Wegen erfolgen:
Möglichkeit 1:
Loggen Sie sich hierfür in Ihr Nutzerkonto ein.
Navigieren Sie auf Profil-Verwaltung.
Dort auf den Button „Account löschen“
Geben Sie ihr Passwort zur Bestätigung ein.
Klicken Sie auf Account löschen.
Möglichkeit 2:
Senden Sie eine E-Mail an die im Impressum stehende E-Mail Adresse mit Ihrem Löschungswunsch, unter Angabe Ihres Namens
User account
If you create a user account with us via our website, we will collect and store the data you entered during registration.During registration, we collect the following personal data, as well as non-personal data:
– Name
– Date of birth
– e-mail address
‘- Discord ID
– Discord username
– IVAO ID
– VATSIM VID
At the same time we store the IP address and the date of your registration together with the time.
The collected data is used for the user account.
A passing on* as well as the sale of your data does not take place.
* Further use of your data:
Our website is part of a merger of several virtual airlines.
Within the framework of this merger, a database managed by us was created, in which user data of deleted users is collected and stored, and third party access or query.
When your user account is deleted, your data is stored in this database.
The following data will be collected and stored for this purpose:
– Name
– Date of birth
– IVAO ID
– VATSIM VID
– Scoring score
The purpose of this database is to provide a scoring system for all virtual partner airlines to determine whether registration with the virtual airline is desired or undesired.
Third parties who do not belong to the airline group will not be allowed to use the data.
All persons authorized to access the database will receive a briefing and must sign a data protection declaration / confidentiality agreement before accessing the database.
Access to the database is personalized and password protected.
In addition, when your user account is deleted, the following personal data is collected and stored, as well as non-personal data:
– Name
– Date of birth
– e-mail address
– Pilot ID
– Airline ID
– Country ID
– Time Zone
– Flights
– Discord ID
– IVAO ID
– VATSIM VID
– Reason for deletion
– Issuance of a registration ban
As part of the further registration process, your consent to this processing will be obtained and reference will be made to this Privacy Policy. The data collected by us in this process will be used exclusively for the above-mentioned purposes.
Insofar as you consent to this processing, Art. 6 para. 1 lit. a) DSGVO is the legal basis for the processing.
In accordance with Art. 7 (3) DSGVO, you can revoke the consent given to us for the opening and maintenance of the user account at any time with effect for the future.
To do this, you only need to inform us of your revocation.
You can do this in writing by e-mail to the e-mail in the imprint.
User Account deletion
Deleting your user account can be done in two ways:
Option 1:
Please follow these steps to delete your account:
Log in to your user account.
Navigate to Profile Management.
Click the “Delete Account” button.
Enter your password to confirm.
Click Delete Account.
Option 2:
Send an e-mail to the e-mail address in the imprint with your deletion request, stating your name.
