Privacy Protection

Privacy Policy

Responsible in the sense of the General Data Protection Regulation (GDPR) and other national data protection laws as well as other data protection provisions is:

Aerodata AG
Hermann-Blenk-Str. 34-36
38108 Braunschweig

T + 49 531. 2359 - 0
F + 49 531. 2359 - 158


The data protection officer of Aerodata is:


Mr. Markus Strauss
tacticx Consulting GmbH
Walbecker Stra├če 53
47608 Geldern, Germany


T +49 800. 5 22 77 00


The distinction between female and male person names has been deliberately omitted for reasons of better readability.

1. General information about data processing

1.1. Processing of personal data and their purpose

Aerodata AG (hereinafter referred to as "Aerodata" or "we") processes personal data of users only to the extent that this is necessary to provide a functional website and our content and services. When visiting our websites, the following data is processed:

  • IP address of the user
  • used browser (type, version, language)
  • used operating system
  • Internet service provider of the user
  • date and time of access to our website
  • files retrieved on our website
  • website from which the user came to our website
  • website that the user accesses through our website


The processing and temporary storage of the IP address is necessary to enable delivery of the website to the user's computer. To do this, the user's IP address must be stored for the duration of the session. The log files contain IP addresses or other data that enables a mapping of the user. Storage is done in log files to ensure the functionality of the websites. Moreover, the data are used to optimize our website and to ensure the security of our information technology systems. Any processing of personal data is solely done for these purposes and to the extent necessary to achieve these purposes. Any use of this data for purposes of advertising, customer service and market research does not take place.


1.2. Legal basis for the processing of personal data

The processing of personal data of our users is carried out regularly by the user's permission. An exception applies in cases where prior obtaining of consent is not possible for factual reasons and processing of data is permitted by applicable law. The storage of data and logfiles is based on Article 6 para. 1 lit. f GDPR.


1.3. Data deletion and storage duration

The personal data of the individuals concerned will be deleted or blocked as soon as the purpose of storage omitted from us. In case of data processing to provide the websites, deletion occurs when the current session ends. In the case of storage of personal data in log files, the deletion will take place by no later than fourteen days. Any further storage is possible if previously the IP addresses of users are deleted or distorted, so that an assignment of the calling client is no longer possible.

2. Cookies

On our websites we use cookies in several places. If a user accesses one of our websites, a cookie can be stored on the user's operating system. A cookie contains a characteristic string that allows a clear identification of the browser when revisiting our web pages. The following data is stored and transmitted in the cookies:

  • Language settings
  • log-in information


The purpose of using cookies is a user-friendly design of our websites. The processing of personal data using cookies is based on Article 6 para. 1 lit. f GDPR. Cookies are stored on the user's computer and transmitted from there to our websites. Users may disable or restrict the transmission of cookies by changing the settings of their Internet browser. Already saved cookies can be deleted at any time. If cookies are disabled for our websites, it may not be possible to use all functions of our websites to the full extend.

3. Contact form and e-mail contact

On our website a contact form is available, which can be used for electronic contact. If a user realizes this possibility, the data entered by him in the input mask are transmitted to us and stored:

  • name
  • company
  • e-mail address
  • individual field for free text
  • IP-address of the user
  • date and time of the transmission


Alternatively, contact via the provided e-mail addresses is possible. In this case, we will store the personal data of the user transmitted by e-mail. The legal basis for processing the data is Art. 6 para. 1 lit. f GDPR. If the establishment of contact aims at concluding a contract, Art. 6 para. 1 lit. b GDPR forms the legal basis. The data will be used exclusively to process the contact and the subsequent communication. In this context, there is no disclosure of the data to third parties. The personal data from the input form of the contact form and those sent by e-mail will be deleted when the respective communication with the user has ended, i.e. as soon as it can be deduced from the circumstances that the facts are finally clarified. The additional personal data collected during the sending process will be deleted at the latest after a period of seven days.

4. Social media

On our websites, we provide a social media plug-in ("plug-in") to the LinkedIn social network, LinkedIn Inc., 2029 Stierlin Court, Mountain View, CA 94043, USA. This will connect to the service provider. Data are transmitted related to the browser behavior of the user. When users click on the plug-in, personal data (IP address of the user and the web address (URL) of the page currently visited by the user, including time and location) are transmitted to and processed by the service provider. Further information on data processing can be found in LinkedIn's privacy policy:


Users, who are members of the aforementioned social networks and do not wish user data to be collected through the respective social network via our websites, must log out of their respective social media account before visiting our websites.


On our websites we provide YouTube videos. These are embedded via the integration of the URL with iframes in the extended data protection mode on our web pages. This will replace the domain with the official YouTube Nocookie domain. According to current information of YouTube, by using this variant only information about visitors to the web pages are saved when playing the video, but not by just accessing the embedding web pages. For more information about the collection and use of data by YouTube, as well as the rights to protect users' privacy, see the privacy policy at

5. Google Maps

Our websites use Google Maps API to visually display geographic information. When using Google Maps, Google also processes data about the use of Maps features by users of the Websites. For more information about Google's data processing, see the Google Privacy Policy at

6. Security measures

Aerodata uses technical and organizational security measures to protect the personal data of users against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously improved in line with technological developments.

7. Rights of the person concerned

If Aerodata processes your personal data, you are a person affected pursuant to Article 4 No. 1 GDPR with the following rights towards Aerodata AG.


7.1. Right to information

You may request confirmation from us pursuant to Article 15 GDPR if personal data concerning you are processed by us. If we process your personal data, you can request from us information about the following details:

  • the processing purposes;
  • the categories of your personal information processed by us;
  • the recipients or categories of recipients to whom we have disclosed or will disclose your personal data;
  • (if possible) the planned duration for which we store your personal information or, if this is not possible, the criteria for determining the duration of storage;
  • the existence of a right to rectification or deletion of your personal data, a right of restriction of our processing or a right to object to such processing
  • the existence of a right of appeal to a supervisory authority;
  • all available information about the origin of the data, if the personal data was not collected from you;
  • the existence of automated decision-making including profiling (Article 22 para. 1 and para. 4 of the GDPR) and - at least in these cases - meaningful information about the logic involved, and the scope and intended impact of such processing on you.


You have the right to request information about whether your personal information are submitted to a third country or an international organization. In this connection, you can request appropriate guarantees in accordance with Article 46 GDPR in connection with the transmission of information.


7.2. Right to rectification

According to Article 16 GDPR you have the right to demand the correction and / or completion of incorrect personal data concerning you.


7.3. Right to deletion

According to Article 17 GDPR you can demand that your personal data will be deleted immediately. We are obliged to delete your data immediately if one of the following applies:

  • Your personal information is no longer necessary for the purposes for which it was collected or otherwise processed.
  • You revoke your consent to the processing in accordance with Article 6 para. 1 lit. a GDPR or Article 9 para. 2 lit. a GDPR and there is no other legal basis for processing.
  • In accordance with Article 21 para. 1 GDPR, you object to the processing and there are no priority legitimate reasons for the processing, or you object to the processing in accordance with Article 21 para. 2 GDPR.
  • Your personal data has been processed unlawfully.
  • The deletion of your personal data is required to fulfill a legal obligation under Union or national law to which we are subject.
  • Your personal data were collected in relation to information society services offered pursuant to Article 8 para. 1 GDPR.


If we have made your personal data public and we are obliged to delete them pursuant to Article 17 para. 1 of the GDPR, we shall take appropriate measures, including technical ones taking into account available technology and implementation costs, to inform data controllers, who process the personal data, that you as the respective subject have requested from them the deletion of all links to your personal data or of copies or replications of your personal data.

The right to deletion does not exist if the processing is necessary

  • to exercise the right to freedom of expression and information;
  • to fulfill a legal obligation to which we are subject to or to perform a task that is in the public interest or in the exercise of official authority that has been delegated to us;
  • for reasons of public interest in the field of public health (Article 9 para. 2 lit. h and lit. i and Article 9 para. 3 of the GDPR);
  • for archival purposes of public interest, scientific or historical research purposes or for statistical purposes acc. Article 89 para. 1 of the GDPR, in so far as that law is likely to render impossible or seriously affect the achievement of the objectives of that processing, or
  • to assert, exercise or defend legal claims.


7.4. Right to restriction of processing

According to Article 18 GDPR you can request the restriction of the processing of your personal data under the following conditions:

  • if you deny the accuracy of your personal information for a period that allows us to verify the accuracy of your personal information;
  • if the processing is unlawful and you refuse to delete the personal data and you request the restricted use of personal data instead;
  • if we no longer need your personal information for the purposes of processing, but you need it to assert, exercise or defend your rights, or
  • if you have objected to the processing pursuant to Article 21 para. 1 GDPR and it is not yet certain whether our legitimate reasons prevail over your reasons.

If the processing of your personal data has been restricted, your data may be stored only with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or important public interest of the Union or a Member State. If the limitation of the processing according to the above stated conditions are restricted, you will be informed by us before the restriction is rescinded.


7.5. Right to information about recipients

If you have asserted the right of rectification, deletion or limitation of the processing against us, we are obliged, according to Article 19 GDPR, to communicate this fact to all recipients to whom your personal data have been disclosed by us, unless this proves to be impossible or involves a disproportionate effort. You have the right to be informed about these recipients.


7.6. Right to data portability

According to Article 20 GDPR you have the right to receive your personal data provided to us in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another person responsible without hindrance by us, provided that

  • processing is based upon consent (Article 6 para. 1 lit. a of the GDPR or Article 9 para. 2 lit. a of the GDPR) or on a contract in accordance with Article 6 para. 1 lit. b GDPR and
  • the processing is done using automated procedures.

In exercising this right, you also have the right to obtain that your personal data be transmitted directly by us to another person responsible, as far as this is technically feasible. Freedom and rights of other persons may not be affected in this respect. The right of data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority that has been delegated to us.


7.7. Right of objection

In accordance with Article 21 GDPR, you have the right to object at any time, for reasons arising from your particular situation, against the processing of your personal data, which is based on Article 6 para. 1 lit. e or f GDPR; this also applies to profiling based on these provisions. We will not process your personal data subsequently unless we can demonstrate compelling legitimate reasons for our processing that outweigh your interests, rights and freedoms, or the processing is intended to assert, exercise or defend legal claims.


7.8. Right to revoke the data protection consent declaration

You have the right to revoke your data protection declaration of consent at any time. The revocation of consent does not affect the lawfulness of the processing, which took place on the basis of the consent until the revocation. 


7.9. Automated decision on an individual case including profiling

According to Article 22 GDPR you have the right not to be subjected to a decision based solely on automated processing - including profiling - which has a legal effect on you or, in a similar manner, significantly affects you. This does not apply if the decision

  • is required for the conclusion or performance of a contract between you and us,
  • is permitted under Union or Member State legislation to which we are subject, and where such legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests, or
  • with your express consent.


7.10. Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to complain to a supervisory authority, in particular in the Member State of your place of residence, your place of work or the place of the alleged infringement, if you believe that the processing of your personal data carried out by us violates the GDPR.

8. Responsibility for content and information

Our websites contain links to Internet offers of external providers. The contents of the Internet offers of external providers were checked when setting the link by us, whether they violate civil or criminal law against applicable law. However, it cannot be ruled out that these content will be changed by the respective providers afterwards. If you believe that linked external sites infringe applicable law or have any other inappropriate content, please let us know. We will review your notice and remove the external link if necessary. Aerodata is not responsible for the content and availability of the linked external websites.

9. Inclusion and validity of the Privacy Policy

By using our website, you consent to the data processing described above. This Privacy Policy applies only to the content of Aerodata. The linked external content is governed by other privacy and data security regulations. If you are responsible for these offers, you will find out in the respective imprint.

Due to the further development of our websites or the implementation of new technologies, it may be necessary to change this Privacy Policy. We therefore reserve the right to change the Privacy Policy at any time with future effect. The version available at the time of your website visit is always valid.

As of May 2018

To top

Aerodata AG
Hermann-Blenk-Str. 34-36
38108 Braunschweig

T + 49 531. 2359 - 0
F + 49 531. 2359 - 158