Data Protection Declaration
Last updated: 11 October 2018
1. GENERAL NOTICES AND AREA OF VALIDITY OF THIS DATA PROTECTION DECLARATION
This Web Site (the "glock-aviation.at" web site is meant with "Web Site") is operated by GLOCK Aviation G.m.b.H., Company Registration Number 354566 x, Flughafenstraße 60-64, 9020 Klagenfurt, Austria (hereafter referred to as "GLOCK", "we" and "us").
This data protection declaration relates to personal information that is collected when this Web Site is visited. Please therefore read through this declaration carefully before using the Web Site, because here in particular it explains what personal data is collected, the methods used for this and the purposes for which it is collected, and how GLOCK handles this data. Personal data is all data that has a personal reference, for example, name, address, email addresses, user behaviour. With regard to the terms used, such as "personal data" or the "processing" thereof, we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).
This Web Site can contain links to web sites, online applications or mobile platforms of other providers, which are not covered by this data protection declaration. Insofar as the collection, processing or use of personal data is linked to the use of web sites of other providers, please note the respective data protection notices from the respective provider, for which GLOCK does not assume any responsibility or liability .
With the use of this Web Site, you consent to the following data protection provisions of GLOCK. The protection of personal data and the maintaining of the basic right to data protection is of particular importance to GLOCK. You can revoke your agreement to this data protection declaration or individual points at any time by contacting us (See Item 2 for contact details).
This data protection declaration can be changed or updated from time to time. If changes are made, you can see this using the last date under "Last Updated" at the start of the data protection declaration. If you also want to interact with us after the changes have been made, this is considered consent to the changes. You should therefore check this data protection declaration regularly for the latest version.
GLOCK collects, processes and uses your personal data in compliance with the respective provisions regarding data protection. This means that users’ data is only processed if legal consent has been obtained, that is if the data processing is necessary in order to perform a contract or to carry out pre-contractual measures (Art. 6 Para. 1 (b) GDPR), if your consent for this has been given (Art. 6 Para. 1 (a) GDPR), to protect our justified interests (Art. 6 Para. 1 (f) GDPR) or to meet our legal obligations (Art. 6 Para. 1 (c) GDPR).
2. PERSON IN CHARGE AND CONTACT DETAILS
The person in charge (initiator) of the collection, processing and use of your data is GLOCK Aviation G.m.b.H., Company Registration Number 354566 x, Flughafenstraße 60-64, 9020 Klagenfurt, Austria. You can contact GLOCK using the following contact details:
Phone: 0043 (0)2247 90300-0
3. DATA COLLECTION AND DATA USAGE, PURPOSE OF DATA PROCESSING, DURATION OF DATA STORAGE
GLOCK records, saves and processes the following data:
Direct personal data in the form of personal contact data and flight information that you notify us of: Such data is only collected by GLOCK with your consent if you actively and voluntarily provide it to us during your visit to our Web Site by filling out the contact form (request form) or contacting us via E-Mail (firstname.lastname@example.org). This includes the following data: Preferred aircraft, flight details (place, date, time number of passengers) of departure and return flight, salutation, first and last name, telephone number and email address. We collect, process and save this data for the execution and response to your query or message, especially to make you a flight offer. To do this, we need your email address, so that we know where we can send our answer to, your telephone number to call you and (re)check your flight details and your name and salutation, so that we can address you personally. We ask you if we should call you to check out the communication channel you prefer.
You can of course also visit the GLOCK Web Site without filling out the contact form and thus without disclosing the direct personal data collected from it. The data collected is not forwarded to third parties by GLOCK, unless we are obliged to do this due to legal regulations. The data collected in this context will be deleted if storage is no longer necessary or minimized if the law requires retention. The processing is necessary for the protection of the prevailing, legitimate interests of GLOCK (Art. 6 § 1 (f) GDPR), as well as for the implementation of pre-contractual measures (art 6 § 1 (b) GDPR).
Technical data and data about usage:
With mere use of the Web Site for information, i.e. if you only visit our Web Site without otherwise sending us information, we only collect the data that your browser sends to our server. If you want to view our Web Site, we collect the following data in particular, which is required for technical reasons in order to display our Web Site and to guarantee its stability and security (the legal basis of this is Art. 6 Para. 1 (f) GDPR):
- IP address, making the IP address anonymous: In the Internet, each device needs a unique address to transfer data, known as the IP address. The IP addresses are shortened by us before any processing takes place and only processed further in anonymous form. In doing so, they are made anonymous by means of a unidirectional conversion algorithm – a hash algorithm. In doing so, the IP address is converted into a hash that cannot be converted back to the original IP address. We do not save or process the unshortened IP addresses. The IP address helps us to, among other things, determine the country from which you are visiting us, in order to be able to offer regionally-differing content on our Web Site, for example, or for a statistical analysis of the visitors according to country, or to document user activity, such as the same user returning to our Web Site. Based on the anonymous IP address, there is also the assignment of the Web Site being called up at the location of being called up to the geographical level of the region (geolocalisation). However, in no case can an indication of the actual residence of the user be obtained from the geographic information.
- Browser name or browser type, browser version, browser language, operating system: The user agent string is an identification that is used to identify and read the browser. It states the browser name or browser type, the browser version, the operating system and the browser language. This data is to improve and optimise the display and user-friendliness of our Web Site. We thus need the browser language, for example, to find out whether our Web Site should be provided in a further language.
We receive further (technical) data and information using automatic technologies such as cookies and using external tracking services such as Google Analytics. For further individual details about these technologies, as well as about the possibility of opting out of the use of the above-mentioned technologies, please see our Cookie Guidelines. This information is not collected or used by us to identify the users personally. We evaluate this data anonymously, primarily for statistical purposes and also in order to administer our Web Site technically and to optimise our Internet presence. This data is not combined with other data sources. The data is saved for as long as is necessary to analyse the data; however, for three years as a maximum. It is automatically deleted after three years. It is the following data:
- Date, time and duration of visit: We record the start and end time of the Web Site visit, primarily to define a user session and to analyse user behaviour. We also record the time that the URL is called up (time stamp); this serves to limit statistical evaluations to certain time periods.
- Screen resolution: We record the screen resolution. This is to further develop our Web Site, in particular with regard to the most-preferred screen resolution.
- Number of pages visited: We record the number of pages visited on our Web Site. This information shows us whether and how well our content is received by users and whether there is a need for change or amendment.
- History of pages visited: We record all uniform resource locators (URLs) that a user visits during a session on our Web Site. This information shows us, for example, how well the user accepts the structure, or the arrangement and linking of our Web Site, in order to be able to make changes and amendments to our Web Site in this regard.
4. DATA THAT IS ASCERTAINED AND PROCESSED BY THIRD PARTIES
This is data for which the responsibility for compliance with data protection law is incumbent upon third parties, because this is not ascertained or processed by GLOCK.
GLOCK allows third parties (Google Analytics), as a result of the inclusion of their services on our Web Site, to also ascertain and process data by saving third-party cookies or similar technology. You can find more detailed information about this in our Cookie Guidelines and in the respective data protection declarations, to which we refer you.
5. TRANSFERRING/SENDING PERSONAL DATA TO THIRD PARTIES
The personal data provided by you is solely collected, processed and used by GLOCK for legally-permitted purposes. Forwarding of data to third parties is not undertaken, unless this is absolutely necessary to comply with applicable law, such as if we are requested to through an official order, or legal proceedings require this (court or administrative proceedings, including criminal proceedings).
Your personal data is processed by our employees depending on the specific purposes for which your data has been recorded. Appropriate (security) precautions to prevent unauthorised use of your data have been implemented in our company. Our employees are obliged to adhere to the relevant legal stipulations and data protection law and to treat the data confidentially.
In some cases your data is processed by external service providers (subcontractors). We have authorized Flight Management Platform FL3XX GmbH, located at Kolingasse 11, 1090 Vienna, to address any issues in connection with your flight inquiries. IT-services, for example, are also performed by external service providers. The external service providers we use for the processing of your data are carefully selected, thoroughly instructed and regularly supervised by us.
Your personal data may also be sent to and stored at a destination outside the European Economic Area (EEA) and, thus, be processed by companies outside the EEA who work for us. If permitted by law, we provide your personal information only to those countries for which the EU-commission has decided that they have an adequate level of data privacy protection, or we take measures that ensure that all recipients have an adequate level of data protection, wherefore we complete the standard contractual clauses approved by the European Commission as well as take the appropriate safety precautions.
6. STORAGE/SAVING OF YOUR PERSONAL DATA
GLOCK uses a range of different security technologies and procedures to protect your personal data from unauthorised access, misuse or prohibited disclosure. The data is protected from unauthorised access by means of encrypted transfer, encrypted saving, a role authorisation system, a data security system and physical protection measures for the server. The security measures are revised on an ongoing basis in accordance with technological development.
GLOCK uses your data in line with the relevant legal provisions. GLOCK only saves your personal data for as long as is necessary to meet the purposes for which the data has been recorded or in order to suffice for respective legal provisions.
7. RIGHT TO INFORMATION, CORRECTION, DELETION AND OBJECTION; RIGHT OF REVOCATION AND RIGHT TO COMPLAIN
You have, at any time, the right to information about the personal data saved about you, to be provided at no charge. In this regard, you have the right to demand a confirmation from us of whether personal data in relation to you is processed. You also have the right to have corrections made, the deletion of, or restrictions on the processing of this data. Furthermore, you have a right to object to the processing, as well as the right of data to be transferred. In addition, you can revoke your consent to our data processing activities at any time (right of revocation). Furthermore, you have the possibility to lodge a complaint with the data protection authority.
With regard to this, and if you have general questions on data protection and/or this data protection declaration, please contact us at any time using the address here:
GLOCK Aviation G.m.b.H., Company Registration Number 354566x, Flughafenstrasse 60-64, 9020 Klagenfurt, Austria.
8. COOKIE GUIDELINES (COOKIES AND OTHER TECHNOLOGIES)
What are cookies?
Cookies allow us and external service providers to save your activities and the number of your visits to our Web Site. The data that is saved by cookies helps to evaluate your preferences for our content and thus to amend our Web Site as well as possible to your requirements and interests, with the result that you can be offered an even better surfing experience. For example, as a user, you do not need to enter the language setting again each time you visit the Web Site.
Which cookies are used by GLOCK?
GLOCK uses four different types of cookies on its Web Site, which can be placed on your end device: first-party, third-party, transient and persistent cookies.
First-party cookies are cookies that are placed on your computer or another device by GLOCK directly; the information saved in them is sent to GLOCK.
Third-party cookies are cookies from third-party providers; the information saved in them is sent to the third-party provider’s web site.
Transient cookies are automatically deleted when you close the browser. This includes the session cookies in particular. These save what is called a session ID, with which different queries from your browser can be assigned to the joint session. As a result, your computer can be recognised again if you come back to our Web Site. The session cookies are deleted if you log out or close the browser.
Persistent cookies are automatically deleted after a prescribed duration, which can differ depending on the cookie. You can delete the cookies in your browser’s security settings at any time.
Function and duration
This cookie is saved on the user’s computer and is valid for one year. The cookie is saved as soon as "I agree" is clicked on in the cookie information. As soon as the cookie is saved, the cookie information is no longer shown until the validity of the cookie has expired or the cookie is deleted.
This cookie is saved on the user’s computer. It saves the session ID. It expires once the session has ended, i.e. if the browser is closed or there is a session timeout (after 20 minutes of inactivity by default). If a user connects with an ASP.NET application, a specific session ID is linked to the user’s IP address.
This cookie is saved on the user’s computer. It expires after the session has ended, i.e. if the browser is closed or after a session timeout (after 20 minutes of inactivity by default). glock#lang saves the language selected by the user on the Web Site, such as “en”.
This Google Analytics cookie is saved on the user’s computer. It is used to distinguish Google users clearly in the analysis tool. It is valid for two years. It is used for analysis by Google Analytics.
In Google Analytics, users’ interactions are primarily recorded with the help of first-party cookies. These cookies are used to save non-personal information. In browsers, first-party cookies are not made accessible throughout domains.
With users who use Google Analytics advertising functions, Google cookies are used for advertisement display purposes such as remarketing in the Google display network for products such as AdWords. You can find further information on the use of such cookies by Google in the frequently-asked questions regarding the Google data protection declaration. In the settings for advertising, you can change the settings for cookies or deactivate this function.
This Google Analytics cookie is saved on the user’s computer. It is valid for 10 minutes.
For further information, see the Google Developer Network:https://developers.google.com/analytics/devguides/collection/gajs/methods/gaJSApi_gat
|_gid||This Google Analytics cookie is saved on the user’s computer and used to distinguish users. It is valid for 24 hours.||Third Party
Cookies on the GLOCK Web Site that do not require consent
Most browsers accept cookies automatically. If you do not want this, you can make changes to the browser settings at any time, for example to block all cookies, to delete cookies that have already been placed, to reject all cookies, or to only accept certain types of cookies. You can, for example, change settings so that you are asked each time the GLOCK Web Site wants to save a cookie. The process for the administration and deletion of cookies is different, depending on which browser you use. You can find out how this works in individual cases from your browser’s or end device manufacturer’s instructions. Please note that deactivating cookies limits the functionality of our Web Site. You can find further information on the deactivation of cookies in common browsers here, for example:
Microsoft Internet Explorer:
Please also note that you have the possibility to object to the collection of the above-mentioned anonymous technical information. This setting is also saved on your hard drive in the form of a cookie on a lasting basis. In the event that you have switched off the saving of cookies, your objection cannot be saved on a lasting basis. In this case, you have the possibility to use the “Do Not Track” function in the settings of your browser, which is of course noted as part of this web presence.
This Web Site uses Google Analytics, a web analysis service from Google Inc. (“Google”). Google Analytics uses “cookies”, text files that are saved on your computer and that allow your use of the Web Site to be analysed. The information created by the cookie about your use of this Web Site including your IP address is generally sent to a Google server in the USA and saved there.
In the event of IP anonymisation being activated on this Web Site, your IP address is shortened by Google within member states of the European Union or in other treaty states to the Agreement on the European Economic Area first. Only in exceptional cases is the full IP address sent to a Google server in the USA and shortened there. On behalf of the operator of this Web Site, Google will use this information to evaluate your use of the Web Site, to compile reports about the Web Site activities for the Web Site operator and to carry out further services in relation to Web Site use and Internet use for the Web Site operator. The IP address transferred by your browser as part of Google Analytics is not combined with other Google data. You can prevent the saving of the cookies by means of a corresponding setting in your browser software; however, we would like to point out that in this case it is possible that you may not be able to use all functions of this Web Site to their full extent. Furthermore, you can prevent the recording of the data generated by the cookie and related to your use of the Web Site (including your IP address) by Google and the processing of the data by Google, by downloading and installing the browser plug-in available under the following link https://tools.google.com/dlpage/gaoptout?hl=en.
This Web Site uses Google Analytics with the suffix “_anonymizeIp()”. As a result, IP addresses are further processed in short form; it is thus not possible to relate it to any person. If the data about you that is collected is assigned a personal reference, this is precluded immediately and the personal data is thus deleted immediately.
We use Google Analytics in order to analyse the use of our Web Site and to improve it regularly. Using the statistics obtained, we can improve the content we offer and design it in a way that is more interesting for you, the user. For the exceptional cases in which personal data is sent to the USA, Google is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 Para. 1 P. 1 (f) of the GDPR.
Information on the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: https://www.google.com/analytics/terms/gb.html, overview of data protection: https://support.google.com/analytics/answer/6004245?hl=en, as well as the data protection declaration: https://policies.google.com/privacy?hl=en.
The Web Site also uses Google Analytics for a cross-device analysis of visitor numbers, which is carried out by means of a user ID. You can deactivate the cross-device analysis of your usage in the customer account under “My Data”, “Personal Data”.
GLOCK itself does not use any web beacons. However, we would like to point out that web beacons and pixel tags can, under certain circumstances, be used by Google Analytics as a third-party provider, in order to analyse the activities of a user on our Web Site. You can opt out of the data recording and use of data by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.