Privacy

1. Controller

The controller responsible for processing personal data on this website is FSL Flugplatz Speyer/Ludwigshafen GmbH, Joachim-Becher-Str. 2, 67346 Speyer, Germany, phone +49 6232 687 29-0, email info@flugplatz-speyer.de, represented by its managing director Rüdiger Franke.

2. Data protection officer

You can reach our data protection officer at: open: name and contact of the data protection officer

3. In brief

No cookies, no tracking, no analytics. This website sets no cookies, uses no analytics or advertising services and loads no third-party content when you view a page. Typeface, map and images are served from our own server.

We only process personal data when you send us something through a form, and only for the purpose stated there.

4. Hosting and server log files

The website is hosted by: open: hosting provider, location, data processing agreement.

When you access the website, the server may store technically necessary data in log files, such as date and time, page requested, amount of data transferred, browser type and IP address. This data is used solely for the security and stability of operations (Art. 6(1)(f) GDPR) and is not combined with other data.

Retention of log files: open: retention period, e.g. 7 days. open: disable or anonymise server logs for /melden and /api/report* (hosting)

5. Flight registration (PPR, customs, handling)

When you register a flight we process the details in the form: registration, aircraft type, MTOM, date and times, departure and destination aerodrome, name, email address, optionally phone number and fuel quantity, and for customs flights the number of persons on board and their nationalities.

The purpose is to process your PPR request, your customs registration and your handling order. The legal bases are Art. 6(1)(b) GDPR (performance of your order) and Art. 6(1)(c) GDPR (legal obligations, in particular in customs and border procedures).

For customs flights we pass the required details on to the competent authorities, in particular customs and the federal police. open: exact procedure and scope of disclosure

6. Waiting list for tours

For the waiting list we process your name, email address, optionally your phone number, your interest, group size, preferred dates and your message in order to inform you about dates.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future, for example by email to info@flugplatz-speyer.de.

7. Safety and noise reports

The “Report” form lets you tell us about safety occurrences (safety reports), noise and other matters. We process the details of the event (type, time, place, description) and, if you would like a reply, your contact details.

Anonymous report: If you choose “Anonymous”, the report is stored without name, email address or IP address. You receive a case number and choose a password; we store the password only as a cryptographic hash and cannot read it. With the case number and password you can read our replies. We do not analyse IP addresses to identify reporters. To prevent misuse, the number of retrieval attempts is briefly limited in memory; nothing is stored permanently.

The purpose is to improve flight safety under the principle of “just culture” and to handle concerns from our neighbours. The legal basis is our legitimate interest in safe flight operations that are compatible with the neighbourhood (Art. 6(1)(f) GDPR) and, where applicable, Art. 6(1)(c) GDPR in conjunction with Regulation (EU) No 376/2014.

Only the persons responsible for safety have access to safety reports. open: confirm roles and permissions

8. Storage location and recipients

Form submissions are stored in FSL’s Microsoft 365 environment (SharePoint lists). The provider is Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, acting as our processor (Art. 28 GDPR). Data is processed in the European Union under Microsoft’s EU Data Boundary.

Data is only passed on to third parties where this is necessary for the purpose or required by law (see section 5). open: confirm data processing agreements with Microsoft and the hosting provider

9. Retention

We delete personal data as soon as it is no longer needed for its purpose and no statutory retention obligations apply. open: specific periods per list: flight registrations, waiting list, safety reports, noise reports

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw any consent at any time.

For anonymous reports we can only provide information or delete data if you give us the case number.

You also have the right to lodge a complaint with a supervisory authority. The competent authority is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz, Hintere Bleiche 34, 55116 Mainz, Germany.

11. Changes

We update this privacy policy when the website or the legal situation changes. The version published here applies. The German version is authoritative.