Privacy Policy

Thank you for visiting our website. We are committed to maintaining the security of your data and respecting your privacy rights.

This policy covers the following domain owned and managed by GLVI Gesellschaft für Luftverkehrsinformatik mbH: https://medifly.hamburg. If you follow a link to another website, different privacy policies may apply. You should read these policies before you submit any personal data to these websites and agree that use of your personal data by those websites will be subject to those privacy policies.

This Privacy Policy describes the collection, use and disclosure of personal data. We inform about the general categories of personal data that we may process, the purposes for which we may process personal data, and the legal basis of the processing.

According to Art. 4 sentence 2 General Data Protection Regulation (GDPR) ‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

The controller

GLVI Gesellschaft für Luftverkehrsinformatik mbH
Beim Farenland 40 a
22159 Hamburg
Germany

Fon: +49 40 6068 5977
E-Mail: info(at)glvi.de

Our website is operated on servers of Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp, HRA 6640, AG Bad Oeynhausen, www.mittwald.de (“Host”).
We do not make use of social media plug-ins on our websites.

Handling of personal data

Your data processed on our website will be deleted or blocked as soon as the purpose of the storage is omitted, the deletion of the data does not conflict with statutory retention requirements and subsequently no other information is given about individual processing methods.

Server data

You can use this website without disclosing your identity. When you access our website, your browser will transfer certain data to a web server. This is done for technical reasons and required to make the requested information available to you. The following data are collected, briefly stored, and used: IP address, date and time of access, content of request (specific site), transferred volume of data, website requesting access, browser, and version of browser software operating systems and surface. This data is used only to ensure a smooth operation of the site and to ensure IT security on the part of the host. It does not allow us to infer your identity.

The anonymised IP addresses will be stored for a period of 60 days. Error logs that log page view errors are deleted after seven days. In addition to the error messages, these include the accessing IP address and, depending on the error, the website visited. Mail server logs will be deleted after four weeks. The retention period is necessary for ensuring the functionality of the mail services and spam fighting.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f) GDPR. Our legitimate interest follows from the data collection purposes listed above. We will not use the collected data for the purpose of inferring your identity. We will not merge this data with other data sources, nor will we mine the data.

Contact request

You can contact us by e-mail. By doing this, your personal data will be stored and processed for the purposes of communication. The data collected for this purpose (name and e-mail address) will not be disclosed to third parties. We will not merge this data with other data sources, nor will we mine the data.

The legal basis of data collection according to Art. 6 para. 1 sentence 1 GDPR are: the consent you may have given (lit. a); if applicable, the processing of the information necessary for the performance of a contract or the initiation of a contract (lit. b), if necessary the fulfillment of a legal obligation (lit. b) as well as the legitimate interest of our company in the communication you have initiated (lit. f).

The data will be deleted once the purpose of the communication has been achieved.

For data transmitted by e-mail, unless end-to-end encrypted, we cannot guarantee confidentiality.

Contract management

The data transmitted by you for the purpose of using our service offer are processed by us for the purpose of contract execution and are required to that extent. A conclusion of contract is not possible without provision of your data.

The legal basis for processing is Art. 6 para. 1 sentence 1 lit. b) GDPR.

We delete the data with complete contract processing, but must take into account the tax and commercial retention periods.

Information regarding your rights

You have the right to obtain free information about your personal data processed by us. In detail, you have the right

  • to obtain information about your personal data processed by us. This includes i.a. the purposes of processing, the categories of personal data, the expected duration of storage, the right to rectification, erasure, restriction or objection of processing, as well as the right of appeal (see Art. 15 GDPR);
  • to obtain without undue delay the rectification of inaccurate data (see Art. 16 GDPR);
  • to obtain the erasure of personal data without undue delay (see Art. 17 GDPR), or alternatively, if further processing is necessary under Art. 17 para. 3 GDPR, to restrict processing in accordance with Art. 18 GDPR;
  • to receive your personal data which you have provided. You have the right to transmit those data to another controller (see Art. 20 GDPR);

In addition, according to Art. 21 GDPR, you have the right to object to the future processing of data concerning you, provided that the data are processed by the provider in accordance with Art. 6 para. 1 sentence 1 lit. f) DSGVO be processed. In particular, a contradiction against the data processing for the purpose of the direct advertisement is naturally possible.

Picture: Copyright by Jan Brandes