Privacy Policy according to Art. 13 GDPR
The purpose of this notice is to inform you which of your personal data we process and for what purposes. Personal data is any information relating to an identified or identifiable natural person. The GDPR refers to this person as the “data subject”.
Controller
Arcus-Air GmbH & Co KG, Berliner Allee 31, 66482 Zweibrücken (hereinafter also referred to as Arcus-Air) is controller for processing your personal data.
Contact Data Protection Officer
If you have any questions concerning data protection, you can contact us at any time via the following e-mail address: datenschutz@arcus-air.com. In addition, you can reach us for data protection enquiries at our business address above.
Purposes of data processing at Arcus-Air
Contract performance
We process your personal data (name; address; telecommunication data; including e-mail address and other data) that you provide to us for the purpose of fulfilling the contracts concluded with us, including pre-contractual contact, e.g. the fulfilment of contracts for air transport services or enquiries from you in this regard.
Legal requirements
We also process your data to fulfil our legal obligations, i.e. specifically to identify you before you start your journey.
Processing of personal data via our website www.arcus-air.de
Contact option via the website
We offer the possibility to contact us by e-mail on our website. If you do so, we will process your e-mail address and other data you provide us with for the purpose of your enquiry. All information provided is voluntary. Your data will not be disclosed to third parties unless disclosure is required by law.
Cookies
When you visit our website, we use cookies with your consent to make our website easier to use. Cookies are small text files that are stored on your hard drive for the duration of your visit to our website and, depending on the settings of your browser, are deleted again when you close the browser. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters by which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This enables the visited Internet pages and servers to distinguish the individual browser of the data subject from other Internet browsers that contain other cookies. A specific internet browser can be recognised and identified via the unique cookie ID.
Most browsers are set to accept cookies automatically. However, the storage of cookies can be deactivated or the browser can be set to indicate that cookies are being sent.
Google Analytics
With your consent, this website uses Google Analytics, a web analytics service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies (see above), which are text files placed on your computer, to help the website analyse how you use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf.
You can find more information on Google Analytics at www.google.com/intl/de/analytics/privacyoverview.html (general information on Google Analytics and data protection).
Legal basis of the above processing operations
Art. 6 para. 1 sentence 1 point a) GDPR for data processing based on your consent.
Art. 6 para. 1 sentence 1 point b) GDPR for data processing that is necessary for the purpose of fulfilling the contract or for carrying out pre-contractual measures that take place at your request.
Art. 6 para. 1 sentence 1 point c) GDSPR for data processing to which we are legally obliged.
Categories of recipients of your data
For the above-mentioned purposes, we transmit personal data to group companies, to authorities (e.g. customs offices, air supervisory authorities, if applicable) and to airports (e.g. driver data and vehicle registration number).
Transfer to third countries
The transfer to a third country shall take place on the basis of an adequacy decision of the European Commission. If there is no adequacy decision of the European Commission for the respective third country, the transfer to a third country takes place on the basis of appropriate safeguards within the meaning of Art. 46 (2) of the GDPR. In addition, we may transfer your data to a third country under the conditions of Art. 49 GDPR. Copies of these guarantees can be requested from Arcus-Air at the above address (see → Controller). Third countries are all countries outside the European Economic Area. The European Economic Area includes all countries of the European Union as well as the countries of the so-called European Free Trade Area. These are Norway, Iceland and Liechtenstein.
Duration of storage / criteria for storage duration
Arcus-Air will store your personal data until the purpose on which the processing is based (see → Purposes of data processing) has ceased to apply. If Arcus-Air is legally obliged to store personal data, it will be stored for the duration of the legal obligation. For commercial documents, which include commercial books and receipts (including invoices), this is 10 years (Sec. 257 para. 4 of the German Commercial Code). If necessary, your data will be blocked for ongoing operations during this period, provided there is no longer any other purpose for the processing.
Rights of the data subjects
Rights according to Art. 15 – 18, 20 GDPR
You have the right to request information about your stored personal data from us at reasonable intervals (Art. 15 GDPR). This information extends to the question of whether Arcus-Air has stored personal data of yours and, among other things, what the data is and for what purposes the data is processed. Upon request, Arcus-Air will provide you with a copy of the data that is the subject of the processing.
Furthermore, you have the right to request Arcus-Air to correct incorrectly stored data (Art. 16 GDPR).
You also have the right to request Arcus-Air to delete your personal data (Art. 17 GDPR). We are obliged to delete your personal data, among other things, if it is no longer necessary for the purposes for which it was collected or otherwise processed, if you have withdrawn consent once given or if the data was processed unlawfully.
Under certain conditions, you have the right to restrict the processing of your personal data (Art. 18 GDPR). This includes if you dispute the accuracy of your personal data and we need to verify your objection. In that case, your data may not be further processed by us, with the exception of storage, until the question of accuracy has been clarified.
Should you wish to switch to another provider, you have the right to have us hand over the data you have provided to us on the basis of your consent or on the basis of an existing contractual relationship with you in a machine-readable format or – at your choice – transfer it to a third party (right to data portability, Art. 20 GDPR).
No contractual or legal obligation to provide the data / consequences of non-provision
You are not contractually or legally obliged to provide us with your personal data. Please note, however, that you cannot conclude a contract with us for the provision of our services if we are not allowed to collect and process the data we need for the purposes stated (see → Purposes of data processing).
Right to object at any time pursuant to Art. 21 GDPR
If the processing of your data by Arcus-Air is based on the performance of a task carried out in the public interest or is carried out in the exercise of official authority (Art. 6 para. 1 sentence 1 point e) GDPR) or if data processing is based on Arcus-Air’s legitimate interests, you have the right to object to the processing of your personal data at any time on grounds relating to your particular situation. Arcus-Air will then stop the processing unless we can demonstrate compelling legitimate grounds for the processing which override your interests in the processing being stopped.
The objection to the processing of your personal data for direct marketing purposes is possible at any time without restrictions.
Right to withdraw consent at any time
If the data processing by Arcus-Air is based on your consent, you have the right to revoke your consent at any time. The lawfulness of the processing carried out on the basis of the consent until the revocation remains unaffected by the revocation.
Right of appeal to the competent supervisory authority
You have the right to complain to the supervisory authority responsible for Arcus-Air at the following address:
The State Commissioner for Data Protection and Freedom of Information of Rheinland-Pfalz
Prof. Dr Dieter Kugelmann
Hintere Bleiche 34
55116 Mainz
E-mail: poststelle(at)datenschutz.rlp.de
Status: March 2022