Privacy Notice according to Art. 13 GDPR

With this notice, we want to inform you about the processing of personal data by us and for what purposes we process them. Personal data includes all information about an identified or identifiable natural person. This person is referred to as the "data subject" by law.

Controller

Responsible for processing your data is Arcus-Air GmbH & Co. KG, Berliner Allee 31, 66482 Zweibrücken (hereinafter also referred to as Arcus-Air).

Contact Data Protection Officer

For questions regarding data protection, you can contact us at any time via the following email address: datenschutz@arcus-air.com. You can also reach us for data protection inquiries at our above business address.

Purposes of Data Processing at Arcus-Air

Contractual Fulfillment

We process your personal data (name; address; contact information; including email address and other data) that you provide to us for the purpose of fulfilling the contracts concluded with us, including pre-contractual contacts, e.g., the fulfillment of contracts for air transport services or inquiries from you regarding such services. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. b GDPR.

Legal Requirements

Furthermore, we process your data to fulfill our legal obligations, i.e., specifically to identify your person before commencing transport. The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. c GDPR (legal obligation).

Processing of Personal Data via our Website www.arcus-air.de

Contact Option via the Website

We offer the possibility to contact us via email on our website. If you do so, we process your email address as well as any other data you provide us with, for the purpose you specify in your request. All information is voluntary. Your data will not be disclosed to third parties unless required by law. The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. b GDPR, if you submit your request as part of a pre-contractual measure, or Art. 6 para. 1 sentence 1 lit. f GDPR, as it corresponds to our legitimate interest to process your data in response to your inquiries.

Cookies

During your visit to our website, we use cookies with your consent to facilitate usage. These are small text files that are stored on your computer's hard drive for the duration of your visit to our website and are deleted when you close your browser, depending on your browser settings. Many cookies contain a so-called cookie ID, which is a unique identifier of the cookie. It consists of a string that can be assigned to specific internet pages and servers, allowing them to distinguish the individual browser of the data subject from other internet browsers that contain different cookies. A specific internet browser can be recognized and identified via the unique cookie ID.

Most browsers are set to accept cookies. However, storing cookies can be disabled. However, certain functions of our website may no longer be available in this case.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited Gordon House, Barrow Street Dublin 4. Ireland ("Google"), with your consent. Google Analytics uses cookies (as described above), which are text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information to evaluate your use of the website, compile reports on website activity for us, and provide other services related to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google.

For more information, please visit tools.google.com/dlpage/gaoptout or www.google.com/intl/en/analytics/privacyoverview.html (general information on Google Analytics and privacy). We would like to point out that Google Analytics on this website has been expanded to include the code "gat._anonymizeIp();" in order to ensure anonymized collection of IP addresses (so-called IP masking).

The legal basis for setting cookies is § 25 para. 1 TTDSG in conjunction with Art. 4 No. 11 GDPR. If we process personal data in the context of using Google Analytics, such as in the form of IP addresses, the legal basis for this is Art. 6 para. 1 sentence 1 lit. f GDPR, as it corresponds to our legitimate interest in evaluating the use of our website by users.

Hubspot

We also use the services of the software manufacturer HubSpot (HubSpot Ireland Ltd., Hubsot House, 1 Sir John Rogerson's Quay, Dublin 2, Ireland). The service used is a software solution for managing customer data and supporting marketing measures. HubSpot stores the data collected on servers in HubSpot Ireland. HubSpot is used to analyze the use of our website in order to optimize it and make it user-friendly. For this purpose, we use, among other things, cookies (as described above). By using HubSpot, the following personal data, among others, may be collected:
• IP address,
• geographical location,
• type of browser,
• duration of the visit,
• pages accessed.

The processing of the IP address is only done in truncated form, i.e., the IP address of users of our website is truncated by the last three digits within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. In exceptional cases, the full IP address may be transmitted to a server of HubSpot in the USA and truncated there.

Further information about the functioning of HubSpot can be found in the privacy policy of HubSpot Inc.

The legal basis for processing personal data is Art. 6 para. 1 sentence 1 lit. b GDPR, insofar as it concerns pre-contractual measures carried out at your request, or Art. 6 para. 1 sentence 1 lit. f GDPR, as it is in our legitimate interest to process the data of customers and potential customers.

Further Description of Cookies:

Necessary (9)

Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

Preferences (1)

Preference cookies enable a website to remember information that changes the way the website behaves or looks, like your preferred language or the region that you are in.

Statistics (4)

Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.

Marketing (6)

Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third party advertisers.

Unclassified (1)

Unclassified cookies are cookies that we are in the process of classifying, together with the providers of individual cookies.

Categories of Recipients of Your Data

For the above purposes, we transmit personal data to group companies, authorities (e.g., customs offices, if applicable aviation authorities), and possibly to airports (e.g., driver data including license plate numbers if the airport premises are to be accessed).

Transfer to Third Countries

The transfer to a third country is based on an adequacy decision of the European Commission. If there is no adequacy decision by the European Commission for the respective third country, the transfer to a third country is based on appropriate safeguards within the meaning of Art. 46 para. 2 GDPR. In addition, we may transfer your data to a third country under the conditions of Art. 49 GDPR. Copies of these safeguards can be requested from Arcus-Air at the above address (see → Controller). Third countries are all countries outside the European Economic Area. The European Economic Area includes all countries of the European Union as well as the countries of the European Free Trade Association. These are Norway, Iceland, and Liechtenstein.

Duration of Storage / Criteria for Storage Duration

Arcus-Air stores your personal data until the purpose underlying the processing (see → Purposes of Data Processing) no longer applies. If Arcus-Air is legally obliged to store personal data, storage is carried out for the duration of the legal obligation. For commercial documents, including commercial books and records (e.g., invoices), this is 10 years (§ 257 para. 4 of the Commercial Code). If necessary, your data will be blocked for operational purposes during this time, provided that there is no other purpose for processing.

Your Rights as Data Subject

Rights according to Art. 15 – 18, 20 GDPR

You have the right to request information from us about your stored personal data at reasonable intervals (Art. 15 GDPR). This information includes whether Arcus-Air has stored personal data about you and, among other things, what data it is and for what purposes the data is processed. Upon request, Arcus-Air will provide you with a copy of the data subject to processing. Furthermore, you have the right to request Arcus-Air to correct incorrectly stored data (Art. 16 GDPR).

You also have the right to request Arcus-Air to delete your personal data (Art. 17 GDPR). We are obliged to delete data if your personal data is no longer necessary for the purposes for which it was collected or otherwise processed, if you have revoked consent once given, or if the data has been unlawfully processed. Under certain conditions, you have the right to restrict the processing of your personal data (Art. 18 GDPR).

This includes the right to challenge the accuracy of your personal data and we must verify your objection. In this case, your data may not be further processed by us, except for storage, until the question of accuracy is clarified. If you wish to switch to another provider, you have the right to have the data you have provided to us based on your consent or based on an existing contractual relationship provided to you in a machine-readable format or, at your choice, transferred to a third party (right to data portability, Art. 20 GDPR).

No Contractual or Legal Obligation to Provide Data / Consequences of Non-Provision

You are not contractually or legally obliged to provide us with your personal data. Please note, however, that you cannot enter into a contract for the provision of our services with us if we are not allowed to collect and process the data we need for the purposes mentioned (see → Purposes of Data Processing).

Right to Object at any Time according to Art. 21 GDPR

If the processing of your data by Arcus-Air is based on the performance of a task carried out in the public interest or in the exercise of official authority (Art. 6 para. 1 sentence 1 letter e) GDPR) or if data processing is based on legitimate interests of Arcus-Air, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation.

Arcus-Air will then cease processing, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests in ceasing processing. The right to object to the processing of your personal data for the purposes of direct marketing is possible at any time without restrictions.

Right to Withdraw Consent at any Time

If the processing of data by Arcus-Air is based on your consent, you have the right to revoke consent given to us at any time. The legality of processing carried out on the basis of consent until revocation is not affected by the revocation.

Right to Lodge a Complaint with the Supervisory Authority

You have the right to lodge a complaint with the supervisory authority responsible for Arcus-Air at the following address: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz Prof. Dr. Dieter Kugelmann Hintere Bleiche 34 55116 Mainz

As of: April 2024