Privacy
Disclaimer
§ 1 Content warning
The free and freely accessible contents of this website have been created with the greatest possible care. However, the provider of this website does not guarantee the accuracy and timeliness of the provided free and freely accessible journalistic guides and news. Contributions identified by name reflect the opinion of the respective author and not always the opinion of the provider. Simply by calling up the free and freely accessible content, no contractual relationship is established between the user and the provider; in this respect, the provider's intention to be legally bound is lacking.
§ 2 External links
This website contains links to third-party websites ("external links"). These websites are subject to the liability of the respective operators. When the external links were first created, the provider checked the third-party content for any legal violations. At that time, no legal violations were apparent. The provider has no influence on the current and future design and content of the linked pages. The inclusion of external links does not imply that the provider adopts the content behind the reference or link as its own. It is not reasonable for the provider to constantly monitor the external links without concrete evidence of legal violations. However, such external links will be deleted immediately if legal violations become known.
§ 3 Copyrights and ancillary copyrights
The content published on this website is subject to German copyright and ancillary copyright law. Any use not permitted by German copyright and ancillary copyright law requires the prior written consent of the provider or the respective copyright holder. This applies in particular to the copying, editing, translation, storage, processing or reproduction of content in databases or other electronic media and systems. Contents and rights of third parties are marked as such. The unauthorized reproduction or distribution of individual content or complete pages is not permitted and is punishable by law. Only the production of copies and downloads for personal, private and non-commercial use is permitted.
The display of this website in external frames is only permitted with written permission.
§ 4 Special terms of use
Insofar as special conditions for individual uses of this website deviate from the aforementioned paragraphs, this will be expressly indicated at the appropriate place. In this case, the special terms of use apply in the respective individual case.
Privacy policy
In the following, we inform you according to the legal requirements - in particular the EU General Data Protection Regulation (DSGVO, available under http://eur-lex.europa.eu/legal-content/DE/TXT/?uri=uriserv:OJ.L_.2016.11...) – about the processing of personal data by our company.
Table of Contents:
I. General information
1. important terms
2. scope of application
3. responsible person
4. data protection officer
II. the data processing in detail
1. general information on data processing
2. accessing our services
3. newsletter subscriptions
4. competitions and promotions
5. download offers and activation of content requiring registration
6. use of our press distribution list
7. tracking
8. social media plugins
III. data subject rights
1. right of objection
2. right to information
3. right of rectification
4. right to erasure ("right to be forgotten")
5. right to restriction of processing
6. right to data portability
7. right of revocation in case of consent
8. right of appeal
I. General Information
In this section of the Privacy Policy, you will find information on the scope of application, the data controller, its data protection officer and data security. We also explain in advance the meaning of important terms used in the Privacy Policy.
1. important terms
Browser: Computer program for displaying web pages (e.g. Chrome, Firefox, Safari).
Cookies: text files that the accessed web server places on the user's computer by means of the browser used. The stored cookie information can contain both an identifier (cookie ID), which is used for recognition, and content information such as login status or information about websites visited. The browser sends the cookie information back to the web server on subsequent, new visits to this page with each request. Most browsers accept cookies automatically. You can manage cookies using the browser functions (mostly under "Options" or "Preferences"). This allows the storage of cookies to be disabled, made dependent on your consent in individual cases or otherwise restricted. You can also delete cookies at any time.
Third countries: countries outside the European Union (EU).
GDPR: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data, on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), available at http://eur-lex.europa.eu/legal-content/DE/TXT/?uri=uriserv:OJ.L_.2016.11...
Personal Data: Any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Profiling: any type of automated processing of personal data consisting of using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to that natural person's job performance, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location.
Services: Our offerings to which this Privacy Policy applies (see Scope).
Tracking: The collection and analysis of data regarding the behavior of visitors to our Services.
Tracking Technologies: Tracking can be done both via the activity logs stored on our web servers (log files) and by means of data collection from your terminal device via pixels, cookies and similar tracking technologies.
Processing: any operation or set of operations which is performed upon personal data, whether or not by automated means, such as collection, recording, organization, arrangement, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Pixel: Pixels are also called tracking pixels, web beacons or web bugs. They are small, invisible graphics in HTML emails or on web pages. When a document is opened, this small image is loaded from a server on the Internet, and the download is registered there. This allows the server operator to see if and when an e-mail was opened or a web page was visited. Mostly this function is realized by calling a small program (Javascript). In this way, certain types of information on your computer system can be detected and passed on, such as the content of cookies, the time and date of the page view, and a description of the page on which the tracking pixel is located.
2. scope of application
This privacy policy applies to the following offers:
- our online offer Onaironline.de, available in particular at www.onaironline.de
- whenever otherwise referred to this privacy policy from one of our offers (e.g. websites, subdomains, mobile applications, web services or integrations in third-party sites), regardless of the way you access or use it.
All of these offerings are also collectively referred to as "Services".
3. responsible party
The person responsible for data processing - i.e. the person who decides on the purposes and means of the processing of personal data - in connection with the Services is
ONAIR Gbr
Markgrafendamm 13
10245 Berlin
E-Mail: management@onaironline.de
4. data protection officer
You can contact our data protection officer using the contact details provided in 3. above.
II. Data processing in detail
In this section of the data protection declaration, we inform you in detail about the processing of personal data within the scope of our services. For better clarity, we structure this information according to specific functionalities of our Services. During the normal use of the Services, different functionalities and thus also different processing operations may come into play one after the other or at the same time.
1. general information on the processing of data
For all processing operations presented below, unless otherwise specified:
a. No obligation to provide & Consequences of not providing.
The provision of personal data is not required by law or contract and you are not obliged to provide data. We will inform you during the input process if the provision of personal data is required for the respective service (e.g. by designating it as a "required field"). In the case of required data, failure to provide it will result in the relevant service not being provided. Otherwise, the non-provision may have the consequence that we cannot provide our services in the same form and quality.
b. Consent
In various cases, you have the option of also giving us your consent to further processing in connection with the processing described below (where applicable, for part of the data). In this case, we will inform you separately in connection with the submission of the respective declaration of consent about all modalities and the scope of the consent and about the purposes we pursue with these processing operations. The processing operations based on your consent are therefore not listed again here (Art. 13 para.4 DSGVO).
c. Transfer of personal data to third countries
If we transfer data to third countries, i.e. countries outside the European Union, then the transfer takes place exclusively in compliance with the legally regulated permissibility requirements.
If the transfer of data to a third country is not for the performance of our contract with you, we do not have your consent, the transfer is not necessary for the assertion, exercise or defense of legal claims and no other exemption under Article 49 GDPR applies, we will only transfer your data to a third country if an adequacy decision under Article 45 GDPR or appropriate safeguards under Article 46 GDPR are in place.
One of these adequacy decisions is the Commission's Implementing Decision (EU) 2016/1250 of 12.07.2016 on the so-called "EU-US Privacy Shield"("Privacy Shield") for the USA. For transfers to companies certified under the EU-US Privacy Shield, the level of data protection is generally considered adequate within the meaning of Article 45 of the GDPR.
Alternatively or additionally, the conclusion of the EU standard data protection clauses issued by the European Commission with the receiving entity create appropriate guarantees pursuant to Art. 46 (2) c) DSGVO and an adequate level of data protection. Copies of the EU standard data protection clauses are available on the website of the European Commission at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-o.....
d. Hosting with external service providers
Our data processing is carried out to a large extent using so-called hosting service providers, who provide us with storage space and processing capacity in their data centers and also process personal data on our behalf according to our instructions. It may happen with all the functionalities mentioned below that personal data is transferred to hosting service providers. These service providers process data exclusively in the EU or we have guaranteed an adequate level of data protection with the help of the EU standard data protection clauses (see under c.).
e. Transfer to government authorities
We transfer personal data to government authorities (including law enforcement authorities) if this is necessary for the fulfillment of a legal obligation to which we are subject (legal basis: Art. 6 para. 1 c) DSGVO) or if it is necessary for the assertion, exercise or defense of legal claims (legal basis Art. 6 para. 1 f) DSGVO).
f. Storage period
The "Storage period" section indicates in each case how long we use the data for the respective processing purpose. After this period has expired, the data will no longer be processed by us, but will be deleted at regular intervals, unless continued processing and storage is provided for by law (in particular because it is necessary for the fulfillment of a legal obligation or for the assertion, exercise or defense of legal claims) or you give us consent that goes beyond this.
g. Designation of data categories
In the next sections, the following summary category designations are used for certain types of data:
Account data: Login/user ID and password.
Personal master data: Title, salutation/gender, first name, last name, date of birth.
Address data: street, house number, if necessary address additions, postal code, city, country
Contact data: Telephone number(s), fax number(s), e-mail address(es)
Registration data: Information about the service through which you have registered; timing and technical information about registration, confirmation and deregistration; data provided by you when registering.
Order Data: Products ordered, prices, payment and delivery information.
Payment data: Account data, credit card data, data on other payment services such as Paypal
Usage data press distribution list: Accreditation topic, accreditation date, consent to usage restriction/ declaration of consent, downloads of press materials
Usage profile data Newsletter: opening of the newsletter (date and time), contents, selected links, also the following information of the accessing computer system: internet protocol address (IP address) used, browser type and version, device type, operating system and similar technical information.
Access data: Date and time of the visit to our service; the page from which the accessing system reached our site; pages accessed during use; data for session identification (session ID); also the following information of the accessing computer system: Internet protocol address (IP address) used, browser type and version, device type, operating system and similar technical information.
2. accessing our services
In the following, we describe how your personal data is processed when you access our services (e.g., loading and viewing the website, opening and navigating within the mobile device app). In particular, we point out that the transmission of access data to external content providers (see under b.) is unavoidable due to the technical functioning of information transmission on the Internet. The third-party providers themselves are responsible for the data protection-compliant operation of the IT systems they use. The decision on the storage period of the data is the responsibility of the service providers.
a. Purpose of data processing and legal basis and, if applicable, legitimate interests, storage period
Data category:
Access data
Purpose:
Connection establishment, display of the contents of the service, detection of attacks on our site based on unusual activity, error diagnosis.
Legal basis:
Art. 6 para. 1 f) DSGVO
Legitimate interest, if applicable:
Proper functioning of the Services, security of data and business processes, prevention of misuse, prevention of damage due to interference with information systems.
Storage period:
4 weeks
b. Recipients of personal data
(1) Recipient category:
External content providers who provide content (e.g., images, videos, embedded posts from social networks, advertising banners, fonts, update information) necessary to display the Service.
Data Concerned:
Access data
Legal basis:
Art. 6 (1) f) DSGVO, in case of transfer to the USA additionally Art. 45 DSGVO in conjunction with Commission Implementing Decision (EU) 2016/1250 of 12.07.2016 on the so-called "EU-US Privacy Shield".
Legitimate interest, if applicable:
Proper functioning of the Services, (accelerated) presentation of content.
(2) Recipient category:
IT security service provider
Data Concerned:
Access data
Legal basis:
Art. 6 para. 1 f) DSGVO
Legitimate interest, if applicable:
Prevention of attacks by exploiting security holes / vulnerabilities.
3. newsletter subscriptions
Below we describe how your personal data is processed when you subscribe to a newsletter
a. Purpose of the data processing and legal basis as well as legitimate interests, if applicable, storage period.
(1) Data category:
Email address
Purpose:
Verification of registration (double opt-in procedure), newsletter delivery.
Legal basis:
Art. 6 para. 1 lit. b) DSGVO
Storage period:
Duration of the newsletter subscription
(2) Data category:
Personal master data
Purpose:
Personalization of the newsletter
Legal basis:
Art. 6 para. 1 letter b) DSGVO
Storage period:
Duration of the newsletter subscription
(3) Data category:
Login data
Purpose:
Traceability of successful newsletter registration/confirmation/unsubscription.
If applicable, legitimate interest:
Proof of successful newsletter registration/confirmation/unsubscription.
Storage period:
Duration of the newsletter subscription
b. Recipients of the personal data
Recipient category:
Service provider for newsletter dispatch
Data concerned:
All data mentioned under 2.a.
Legal basis:
Order processing (Art. 28 DSGVO).
4. sweepstakes and promotions
Below we describe how your personal data is processed when you participate in sweepstakes or promotions (e.g. events, votings, contests).
a. Purpose of the data processing and legal basis as well as legitimate interests, if applicable, storage period.
(1) Data category:
Personal master data
Purpose:
Identification, age verification
Legal basis:
Art. 6 para. 1 b) DSGVO
Storage period:
Duration of the sweepstakes/promotion
(2) Data category:
Address data
Purpose:
Contact
Legal basis:
Art. 6 para. 1 b) DSGVO
Storage period:
Duration of the sweepstakes/promotion
(3) Data category:
Contact details
Purpose:
Contact
Legal basis:
Art. 6 para. 1 b) DSGVO
Storage period:
Duration of the competition/promotion
(4) Data category:
If applicable (as further specified in the respective terms and conditions of participation) answering sweepstakes questions, providing application information, voting information.
Purpose:
Implementation of the respective sweepstakes/campaign, winner/participant selection.
Legal basis:
Art. 6 para. 1 b) DSGVO
Storage period:
Duration of the sweepstakes/campaign
b. Recipients of personal data
(1) Recipient category:
Service providers for sweepstakes/promotion implementation.
Data concerned:
All data according to letter a.
Legal basis:
Order processing, Art. 28 DSGVO
(2) Recipient category:
Shipping service provider
Data concerned:
Name, address data
Legal basis:
Art. 6 para. 1 letter b) DSGVO
5 Download offers and activation of content requiring registration
In the following, we describe how your personal data is processed when you take advantage of download offers or activate content that requires registration. Purpose of data processing and legal basis as well as legitimate interests, if applicable, storage period:
(1) Data category:
Personal master data
Purpose:
Identification
Legal basis:
Art. 6 para. 1 b) DSGVO
Storage period:
Duration of the action/subscription authorization
(2) Data category:
E-mail address
Purpose:
Establishing contact, checking subscription eligibility
Legal basis:
Art. 6 para. 1 b) DSGVO
Storage period:
Duration of the action/subscription authorization
6. use of our press distribution list
In the following, we describe how your personal data is processed in connection with a registration for our press distribution list:
a. Purpose of data processing and legal basis as well as, if applicable, legitimate interests, storage period.
(1) Data category:
Account data
Purpose:
Identification, control of authorization to access the offer and press materials.
Legal basis:
Art. 6 para. 1 b) DSGVO
Storage period:
Duration of registration
(2) Data category:
Personal master data, contact data, address data
Purpose:
Identification, contacting
Legal basis:
Art. 6 para. 1 b) DSGVO
Storage period:
Duration of registration
(3) Data category:
Function, represented medium
Purpose:
Control of authorization to retrieve the offer and press materials.
Legal basis:
Art. 6 para. 1 b) DSGVO
Storage period:
Duration of registration
(4) Data category:
Usage data press distribution list
Purpose:
Securing the use within the granted rights.
Legal basis:
Art. 6 para. 1 b) DSGVO
Storage period:
Duration of registration
b. Recipients of personal data
Recipient category
E-mail dispatch service provider
Data concerned
Personal master data, contact data
Legal basis
Order processing, Art. 28 DSGVO
7. tracking
In the following, we describe how your personal data is processed using tracking technologies to analyze and optimize our services and for advertising purposes.
The description of the tracking methods also includes information on how you can prevent or object to the data processing. Please note that this so-called "opt-out", i.e. the refusal of processing, is usually stored via cookies. If you use our services via a new terminal device or in a different browser, or if you have deleted the cookies set by your browser, you will have to declare your rejection again.
The tracking methods presented process personal data only in pseudonymous form.A connection with a concrete, identified natural person, i.e. a combination of the data with information about the bearer of the pseudonym, does not take place.
a. Tracking for the analysis and optimization of our services and their use
(1) Purpose of processing
The analysis of user behavior by means of tracking helps us to check the effectiveness of our services, to optimize them and adapt them to the needs of users, and to correct errors. It also serves to statistically determine key data about the use of our services (reach, intensity of use, surfing behavior of users) - on the basis of uniform standard procedures - and thus to obtain values that are comparable across the market.
(2) Legal basis of the processing
In the case of services that are provided by us in connection with a contract, tracking and the associated analysis of user behavior are carried out in order to fulfill our contractual obligations. The legal basis for this processing of personal data is Art. 6 I b) DSGVO. The evaluation of information obtained through tracking is necessary to provide you with optimized services in accordance with the contractual purpose and to ensure the greatest possible benefit to you.
Otherwise, i.e. outside a context of a contractual relationship, the legal basis for this processing of personal data is Art. 6 I f) DSGVO. We use it to pursue the legitimate interest of providing attractive services as efficiently as possible on the basis of the information obtained through tracking and to market them in the best possible way.
(3) The tracking methods used in detail
Name of the service:
Google Analytics
How it works:
Our Services use Google Analytics, a web analytics service provided by Google LLC ("Google"). Google Analytics uses cookies that allow an analysis of your use of the website. We use Google Analytics including the features of Universal Analytics. Universal Analytics allows us to analyze activity on our Services across devices (e.g., accesses via laptops and later via a tablet). This is made possible by the pseudonymous assignment of a user ID. The information generated by the cookie about your use of the website is usually transmitted to a Google server in the USA and stored there. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google. We have also extended Google Analytics on our services with the code "anonymizeIP". This guarantees the masking (shortening of the last eight digits) of your IP address, so that all data is collected anonymously. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On our behalf, Google will use this information for the purpose of evaluating your use of the services, compiling reports on the activities of the services and providing us with other services relating to the use of the services and the internet. The data transmitted and linked to cookies or user IDs will be deleted after 26 months*. The deletion of data whose retention period has been reached occurs automatically once a month.
Possibility to prevent the processing (opt-out):
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of our services. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. This plugin is provided by Google; we point out that we can neither check nor control its function. As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on this [insert link]**. An opt-out cookie will be set that prevents the future collection of your data when visiting the Services. The opt-out cookie is only valid in this browser and only for the respective website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again. To prevent collection by Universal Analytics across different devices, you must perform the opt-out on all systems used.
Data transfer to third country?:
Yes, USA
If applicable, adequacy decision (Art. 45 GDPR):
Commission Implementing Decision (EU) 2016/1250 of 12.07.2016 on the so-called "EU-US Privacy Shield" ("Privacy Shield").
8. social media plugins
This website may contain add-on programs (plugins) of social networks such as Facebook, Twitter, YouTube, Instagram, which are operated by third parties and through which messages can be transmitted to the corresponding social network by means of a button, e.g. to rate, recommend or share content. In doing so, we pursue the purpose and legitimate interest of making our Services better known. We configure our services so that data transmission only takes place when you click the button. The legal basis for the data transfer in this case is Art. 6 I f) DSGVO. The respective provider is responsible for the data protection-compliant processing of the transmitted data.
(1) Name of the service:
Facebook
Provider:
Facebook Inc, 1601 S. California Avenue, Palo Alto, CA 94304, USA.
Privacy information of the provider:
https://de-de.facebook.com/about/privacy/
2) Name of the service:
Twitter
Provider:
Twitter Inc, 539 Bryant Street, Suite 402, San Francisco, CA 94107, USA.
Provider's privacy information:
https://twitter.com/de/privacy
(3) Service Name:
Youtube
Provider:
YouTube LLC901 Cherry Ave.,San Bruno, CA 94066,USA
Privacy information of the provider:
https://policies.google.com/privacy?hl=de
(4) Name of the Service:
Instagram
Provider:
Instagram LLC 1601 Willow Rd,Menlo Park CA 94025,USA
Provider privacy information:
https://help.instagram.com/155833707900388
III. data subject rights
1. right of objection
If we process your personal data for the purpose of direct marketing, you have the right to object at any time with future effect to the processing of personal data relating to you for the purpose of such marketing; this also applies to profiling, insofar as it is associated with such direct marketing.
You also have the right to object at any time with future effect to the processing of personal data concerning you which is carried out pursuant to Article 6(1)(e) or (f) DSGVO on grounds relating to your particular situation; this also applies to profiling based on these provisions. You can contact us via the contact details mentioned under I.3, among others.
2. right to information
You have the right to request confirmation from us as to whether personal data relating to you is being processed and, if applicable, to receive information about this personal data and the other information listed in Art. 15 DSGVO.
3. right of rectification
You have the right to demand that we correct any inaccurate personal data concerning you without undue delay (Art. 16 DSGVO). Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data - also by means of a supplementary declaration.
4. right to erasure ("right to be forgotten").
You have the right to demand that we erase personal data concerning you without undue delay, provided that one of the reasons set out in Article 17(1) of the GDPR applies and the processing is not necessary for one of the purposes regulated in Article 17(3) of the GDPR.
5. right to restriction of processing
You are entitled to request a restriction in the processing of your personal data if one of the conditions regulated in Article 18 (1) a) to d) DSGVO is met.
6. right to data portability
You have the right, under the conditions set out in Art. 20(1) DSGVO, to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and the right to transfer this data to another controller without hindrance from us. When exercising the right to data portability, you have the right to obtain that the personal data be transferred directly from us to another controller, where this is technically feasible.
7. right of revocation in case of consent
Insofar as the processing is based on your consent, you have the right to revoke the consent at any time. This does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
8. right of complaint
You have a right of appeal to the supervisory authority responsible for our company. The supervisory authority responsible for our company is:
Berlin Commissioner for Data Protection and Freedom of Information, An der Urania 4-10, 10787 Berlin, http://www.datenschutz-berlin.de/