Privacy Policy of Flynex GmbH.

Published: October 2nd 2020.

Annotation

The German version of this document will govern our relationship – this translated version is provided for convenience only and will not be interpreted to modify the German version. For the German version, please see the FlyNex Privacy Policy page.

The website and the service portfolio of FlyNex GmbH operate on the basis of:

FlyNex GmbH, c/o SpinLab, Halle 14
Spinnereistraße 7, 04179 Leipzig (Germany)
Phone: + 49 (0) 341 331 760
Fax: + 49 (0) 341 331 76099
Email: info@flynex.de
Web: https://www.flynex.io
Representatives: Andreas Dunsch, Michael Petrosjan
Register entry: Eintragung im Handelsregister, HRB 33972
Registry court: Amtsgericht Leipzig

(in the following: “we”)

We as hosts of this website and the connected services are responsible for the elicitation, use, processing, and passing on (in the following: “process” or “processing”) of personal data of our users in the sense of the General Data Protection Regulation (GDPR). Our service includes our websites and all other subdomains, and the products Map2Fly, Map2Fly_Pro or Enterprise (in the following: “products”).

We take the security of your personal data very seriously and protect your privacy and your private data. We process your personal data in accordance with the content of this privacy policy and adhere strictly to the regulations of the Data protection law of the Federal Republic of Germany, the German Telemedia Act, and the data protection regulations of the European Union (in the following: “data protection legal requirements”). We will obligate our employees and partners to comply with the data protection legal requirements and guidelines.

These data protection regulations regulate which of your personal data we process in which way. We, therefore, ask you to read the following statements carefully.

For all questions and messages regarding data protection please contact the data protection officer of the FlyNex GmbH via Email info@flynex.de, via post, using the address stated above or via Fax or phone using the dials stated above.

1 Processing of personalized data

1.1 Personalized data

Personal data in the sense of these data protection regulations is all information about you which relates to you as an identified or identifiable person, e.g. data about your personal or material circumstances.
In order to provide our services, to establish a data protection and compliance management system, and to contact you, we process the following personal data, which you enter when registering and completing your profile:

• full name
• email address
• company name
• address with street, number, postal code, and city
• (mobile) phone number
• profile picture

In addition, we process data associated with your account regarding drones, accessories, projects, etc. in order to provide our services.

Personal data also includes information about your use of our products and websites. This is usually done through the use of log files and cookies. Further information on log files and cookies can be found below under point 3.1. In this context, we refer to our General Terms and Conditions and assume no guarantee or liability whatsoever for the information contained on the third-party sites.

In this context, we collect personal data from you in the form of information about your visits to our products or websites as follows:

• amount of data transfer,
• place from where you access data from our website and
• other connection data and sources you retrieve.

1.2 Storage and deletion

We store your personal data as long as you use our services. We delete your personal data (see no. 2.1), which you provide us with when you register for our newsletter, as soon as you unsubscribe from the newsletter. Personal data that you provide to us in the course of registering for and using our services (sub paras 2.2 and 2.3) will be deleted within 90 days after you cancel the service or delete your account. Any storage of your personal data beyond this period results from statutory provisions, such as the statutory storage obligations for invoices addressed to you. If you interact with other people via one of our products, personal data cannot be deleted in the course of the interaction either. If, for example, you are added to a project as a partner and you agree to this invitation, your personal data stored in the project will not be deleted until this project is completely deleted, due to the obligation of all project participants to provide proof.
In addition to the legal obligation to retain data, the responsible party may also have a legitimate interest of its own (in this case the interest in preserving evidence) in the long-term storage of the data, particularly in order to be able to defend itself against legal claims in the event of potential legal disputes, Art. 17 para. 3 letters e, f GDPR.

2 Intended Use

In the following, the intended use of your personal data mentioned under no. 1.1 is explained.

2.1 Processing of your data or personal data after registration for our newsletter

When registering for our newsletter, it is necessary to enter your e-mail address. We process this to send you newsletters, information, and notices. These notices may also contain advertising information about our own products or products of our cooperation partners.

2.2 Products (e.g. Map2Fly, Map2Fly Pro, Enterprise Suite)

When using our products it may be necessary to process your personal data. This may include, among other things:

• surname and family name,
• email address,
• (mobile) phone number,
• postal address,
• company name.

We use this information to validate your registration and account, for the purpose of displaying it in your personal user profile (“Profile”) and on your individual home page, and to forward it to the payment service provider PayOne (see PayOne section) for the purpose of creating and delivering a proper invoice. Overall, this data may also be necessary to provide the service of our products and will also be used for all technically necessary communication with you at

• support requests,
• general questions about your account or
• when resetting your password.

Furthermore, we process the aforementioned personal data in order to send you information or notices by post or in electronic form by e-mail or telephone (SMS, messenger services). These notices may also contain advertising information about our own products or products of our cooperation partners.

You can also store your own profile picture in your profile. Irrespective of whether you store a profile picture which allows conclusions to be drawn about you as a person, we process this exclusively for display in your profile.

2.3 contact and support inquiries

On our websites, we use various forms or feedback options to be accessible to you. This includes both forms for general inquiries (contact forms) and for specific support requests (support forms). We process the personal data transmitted to us (e.g. surname, first name, e-mail address, telephone number, and/or mobile phone number) exclusively in order to communicate with you within the scope of processing your inquiry, unless you wish to register for our newsletter at the same time. If you do not register for the newsletter, we will delete this data within 3 months, provided that there is no legal obligation to retain it.

2.4 Consequences of not providing personal data

As stated above, we require your personal information for the purpose of providing the various FlyNex products and services. If you do not provide us with the above personal data, you will not be able to use the FlyNex products or services (e.g. support) or to use them in full.
At least your e-mail address is always required

• for validating your account,
• for technical communication in case of technical inquiries, questions regarding your account or
• to reset your password.

In the case of booking fee-based services, at least your surname and first name, your postal address and your payment details are necessary to receive payments from you and to provide you with a proper invoice.

2.5 Processing of your data and personal data when visiting our websites or their sub-domains

Access to and use of our websites is subject to the following conditions. If you do not agree with these conditions, we ask you not to use our websites. By using this website, you agree to the following conditions.
When visiting our websites https://www.flynex.iohttps://www.flynex.de or their subdomains or a forwarding to our website or their subdomains we use your personal data for the following purposes:

• to provide the services requested by you within the scope of the services offered by FlyNex GmbH and the services selected by you (see point 2 Intended use),
• to ensure that our websites are presented to you in the most effective and interesting way,
• to perform our obligations under contracts entered into between you and us,
• to communicate with you, verify your data, send newsletters, information, or notices and
• to inform you about changes in our services.

3 Information about your end device, cookies and targeting

3.1 Processing

Whenever you access our products or websites, we lawfully process the following information about your terminal device on the basis of Art. 6 paras. 1 letter f GDPR:

• IP-adress of your end device,
• request of your browser,
• time of this request,
• status of the request,
• amount of data transferred in the context of the request.

We also process the following information

• information on the operating system of your terminal device,
• product and version information of your browser used for access,
• website from which the access takes place.

The IP address of your end device is only stored for the time of your use and is then immediately deleted or made anonymous by shortening it. The remaining data is stored for a limited period of time. We use this data for the operation of our products and websites, in particular, to detect and eliminate errors, to determine the capacity utilization, and to make adjustments and improvements.

3.2 Browser-Cookies

We also process information about your use by using so-called browser cookies. These are small text files that are stored on your data carrier and which store certain settings and data for exchange with our system via your browser. A cookie usually contains the name of the domain from which the cookie data was sent, information about the age of the cookie, and an alphanumeric identifier. Cookies enable our systems to recognize the user’s device and make any pre-settings immediately available. As soon as a user accesses the platform, a cookie is transferred to the memory of the user’s terminal device. Cookies help us to improve our products and websites and to be able to offer you a better and even more customized service. They enable us to recognize your terminal device when you return to our products or our website and thus to offer you a better and more personalized service:

• to store information about your preferred activities and thus to tailor our products and our websites to your individual interests. This includes, for example, information that corresponds to your personal interests;
• speed up the processing of your requests.

3.3 Explanation on Cookies

In the cookies we use, only the data explained above about your use of our products and websites are stored. This is generally not done by assigning it to you personally, but by assigning an identification number to the cookie (“cookie ID”). In general, the cookie ID is not combined with your name, IP address, or similar data that would allow the cookie to be assigned to you. An exception to this is Mixpanel. For information on how you can prevent the use of browser cookies, please refer to section 3.6.

3.4 Tracking-Technologies

Our products and websites use so-called tracking technologies. We use these technologies in order to make the internet offer more interesting for you. These technologies make it possible to address Internet users who have already taken an interest in our products or websites with advertising on the websites of our partners. The display of these advertising media on the websites of our partners is based on cookie technology and an analysis of previous usage behavior. This analysis is carried out under a pseudonym and no user profiles are merged with your personal data. You can activate these technologies by entering a cookie information window when you first visit our products or websites.

3.5 Business partners and affiliate services

We work together with business partners who help us to make the Internet offer and the website more interesting for you; any advertising links are marked as such on the website accordingly. For this reason, when you activate a cookie on your first visit to our products or websites, cookies from these partner companies are also stored on your hard drive. These are cookies that are automatically deleted after the specified time. Also through the cookies of our partner companies, only data under a cookie ID is collected, which enables our advertising partners to address you with advertisements that might actually interest you. You can find out which cookies are involved and how you can prevent the use of such cookies under section 3.6.

3.6 Browser settings and types of cookies

If you do not wish to use browser cookies, you can set your browser to refuse to accept cookies (for instructions on how to do this, please refer to the help files of your browser or the website of your browser manufacturer). Please note that in this case, you may only be able to use our products or websites to a limited extent or not at all. If you only want to accept our own cookies, but not the cookies of our service providers and partners, you can select the setting in your browser “Block third-party cookies”. Cookies classified as essential in the table below are minimum technical requirements for using our products or websites. In addition, our products and websites use a Cookie Consent Tool. This tool will ask you for your permission to use which cookies we are allowed to use on your first visit or after clearing your browser memory (cache). This consent is given separately for each browser and each terminal device used. There you will also find further information on the cookies used.

We distinguish the following cookies for the websites:

Website Cookies
category of cookie cookie name purpose of cookie duration
Essenziell Borlabs-Cookie Speicherung Ihrer Angaben, welche Cookies Sie zulassen 1 Jahr
essential Google Recaptcha protection against spam in forms ad-hoc
essential Google Tag Manager (_ga,_gat,_gid) meta-cookie to control other cookies 2 years
statistics WPML (_icl_*, wpml_*, wp-wpml_*, ) saves current language 1 year
statistics Facebook Pixel (_fbp,act, c_user, datr, fr, m_pixel_ration, pl, presence, sb, spin, wd, xs) website analyses, advertising measures 1 year
statistics Google Analytics (_ga,_gat,_gid) website analyses 2 years
marketing Taboola Pixel ( tb_*) Erfolgsmessung von Werbeanzeigen 2 Jahre
marketing Outbrain Pixel (OB_ADV_ID) success measurement of advertisement 2 years
external media Facebook unlock Facebook content 2 years
external media Google Maps (NID) unlock Google Maps contentn 2 years
external media Instagram (pigeon_state) unlock Instagram content 2 years
external media Open Street Map (_osm_location, _osm_session, _osm_totp_token, _osm_welcome, _pk_id., _pk_ref., _pk_ses., qos_token) unlock OpenStreetMap content 10 years
external media Twitter (__widgetsettings, local_storage_support_test) unlock Twitter content unlimited
external media Vimeo (vuid) unlock Vimeo content 2 years
external media YouTube (NID) unlock YouTube content 2 years

We distinguish the following cookies for the products:

Product Cookies
category of cookie cookie name purpose of cookie duration
essential Application Gateway Affinity CORS operation of the products Sitzung / Session
essential Application Gateway Affinity operation of the products Session
essential FlyNex_Lang operation of the products; language settings Session
essential FlyNex_Selected_Product operation of the products; choice of product Session
statistics Google Analytics (_gat, _ga, _gid) usage analysis 2 years
performance mp_{{id}}_mixpanel usage analysis 1 year
marketing Hubspotutk (__hssc, __hssrc, __hstc) usage analysis 2 years
marketing Inspectlet (__insp_wid, __insp_nv, __insp_targlpu, __insp_targlpt, __insp_norec_sess, __insp_slim, __insp_uid)) usage analysis 1 year
marketing Facebook Pixel (_fbp, _fr)) usage analysis, advertising 1 year
3.7 Provider

The provider of the respective pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• type and version of your browser,
• used operating system,
• referrer URL,
• hostname of the computer,
• time of server request.

These data cannot be assigned to specific persons. A consolidation of this data with other data sources is not carried out. We reserve the right to check this data subsequently if we become aware of concrete indications of illegal use.

4 Data security

All information that you send to us is stored on servers within Germany and the European Economic Area. With regard to hyperlinks to and from third-party websites, we refer to point 4.6. Unfortunately, the transmission of information via the Internet is not completely secure, which is why we cannot guarantee the security of data transmitted to our website via the Internet. However, we secure our website and other systems by technical and organizational measures against loss, destruction, access, modification, or distribution of your data by unauthorized persons. In particular, your personal data will be transmitted in encrypted form. We use the coding system SSL (Secure Socket Layer) or TLS (Transport Layer Security).

5 No disclosure of your personal data

We do not pass on your personal data to third parties unless you have consented to the data transfer or we are entitled or obliged to transfer data due to legal regulations and/or official or court orders. This may include, in particular, the provision of information for the purposes of criminal prosecution, averting danger, or enforcing intellectual property rights. In this regard, we also refer to point 6.

6 Data protection and third party websites

Our products or websites may contain hyperlinks to and from third-party websites both within and outside Germany. If you follow a hyperlink to one of these websites, please note that we cannot assume any responsibility or guarantee for third-party content or data protection regulations. Please make sure you are aware of the applicable data protection regulations before you submit personal data to these websites. We also use the following services to optimize our processes. You can deactivate these services as described in point 3.6. Their use constitutes a legitimate interest within the meaning of Art. 6 paras. 1 lit. f GDPR.

6.1 Google Analytics

Our products and websites use functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and which enable an analysis of your use of the website. We only use Google Analytics with activated IP anonymization. This means that the IP address of users is shortened by Google within member states of the European Union or in other states that are party to the Agreement on the European Economic Area. The IP address transmitted by the user’s browser is not merged with other data from Google. We use Google Analytics and all the following Google services (incl. YouTube) on the basis of the EU standard contract clauses.

6.1.1 Google Optimize

In addition, the web analysis and optimization service “Google Optimize” is used on our website. This is a tool integrated into Google Analytics. We use the service to increase the attractiveness, content, and functionality of our website by making new functions and content available to a percentage of our users and statistically evaluating the change in usage. Google Optimize uses cookies to help optimize and analyze your use of our website. Google will use this information for the purpose of evaluating your use of our website, compiling reports on optimization tests and related website activity, and providing other services relating to website activity and internet usage.

6.1.2 Browser plugin

You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?

6.1.3 Opposition to data collection

You can prevent the collection of your data by Google Analytics by refusing to give your consent in the appearing Cookie Consent Tool during your first visit or after deleting your browser cache when using our products or websites. This will prevent the collection of your data on future visits. The deactivation only applies to the currently used end device and browser and must therefore be repeated on each end device/browser.
You can find more information on how Google Analytics handles user data in the Google privacy policy: https://support.google.com/analytics/answer/6004245?

6.1.4 Demographic characteristics in Google Analytics

Our products and websites use the “demographic characteristics” feature of Google Analytics. This allows reports to be generated that contains information about the age, gender, and interests of the site visitors. This data comes from interest-based advertising by Google as well as visitor data from third parties. This data cannot be assigned to a specific person. You can disable this feature at any time in the ad settings in your Google Account or generally prohibit the collection of your data by Google Analytics as described in the “Opting out of data collection” section.

6.2 Google Ads

We use the online advertising program “Google Ads” and within Google Ads the conversion tracking. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The conversion tracking cookie is set when a user clicks on an ad served by Google. Cookies are small text files that are stored on your computer system. If the user visits certain pages of this site and the cookie has not expired, Google and we can recognize that you clicked on the ad and were directed to us. Each Google Ads customer receives a different cookie. As a result, cookies cannot be tracked through the websites of AdWords customers. The information collected through the conversion cookie is used to compile conversion statistics for AdWords customers who have opted into conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive information that personally identifies users. If you do not wish to participate in tracking, you can opt-out of this use by deactivating the Google Conversion Tracking cookie on your web browser under User Preferences or by following the procedure described in Section 3.6. You will then not be included in the conversion tracking statistics. For more information about Google’s privacy policy, please visit the following web address: http://www.google.de/policies/privacy/

6.3 Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) on our websites, especially when registering for our products. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). The purpose of reCAPTCHA is to check whether the data input on our websites (e.g. in a contact form) is done by a human being or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For analysis purposes, reCAPTCHA evaluates various information (e.g. IP address, duration of the visitor’s stay on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Google. The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place. The data processing is based on Art. 6 paras. 1 lit. f GDPR. The website operator has a legitimate interest in protecting his web offers from abusive automated spying and from spam. Further information about Google reCAPTCHA and the Google privacy policy can be found in the following links: https://www.google.com/intl/de/policies/privacy/

6.4 Google Tag Manager

Our products and websites use the Google Tag Manager. This service allows you to manage tags through a single interface. The Google Tool Manager only implements tags. This means: no cookies are used and no personal data is collected. The Google Tag Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If deactivation has been made at the domain or cookie level, it will remain in effect for all tracking tags as long as they are implemented with the Google Tag Manager. You can deactivate the tags and cookies implemented in Google Manager as described in point 3.6. You can find the data protection information here: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/

6.5 Login with Google

You can use your Google Account to sign in to third-party websites and apps. This eliminates the need to remember individual usernames and passwords for each account. For more information, please see https://support.google.com/accounts/answer/112802?&ref_topic=7188760

6.6 Facebook-Plugins (Like-Button and Facebook Pixel)

On our products and websites, we use plugins of the social network Facebook. The provider is Facebook Inc, 1 Hacker Way, Menlo Park, California 94025, USA. You can recognize the Facebook plugins by the Facebook logo or the “Like-Button” (“Like”) on our products or websites. An overview of the Facebook plugins can be found here: https://developers.facebook.com/docs/plugins/.
When you visit our products or websites, the plugin establishes a direct connection between your browser and the Facebook server. Facebook thereby receives the information that you have visited our site with your IP address. If you click on the Facebook “Like-Button” while you are logged in to your Facebook account, you can link the contents of our pages on your Facebook profile. This allows Facebook to associate your visit to our pages with your user account. We would like to point out that we, as the provider of the Pages, have no knowledge of the content of the transmitted data or its use by Facebook. We use Facebook plugins and all the following Facebook services (including Instagram) on the basis of the EU standard contract clauses. You can find more information on this in the Facebook privacy policy at https://facebook.com/policy.php
If you do not want Facebook to be able to assign visits to our pages to your Facebook user account, please log out of your Facebook user account.
We also use the Facebook Conversion Pixel or Visitor Action Pixel function. By calling up this pixel from your browser, Facebook can subsequently recognize whether a Facebook advertisement was successful, e.g. whether it led to an online purchase transaction. We receive only statistical data from Facebook for this purpose, without reference to a specific person. This enables us to record the effectiveness of Facebook advertisements for statistical and market research purposes. Especially if you are logged in to Facebook, we refer to their privacy information https://www.facebook.com/about/privacy/
Zur Verhinderung der Erfassung Ihrer Daten durch Facebook Pixel siehe Pkt. 3.6.

6.7 Login with Microsoft

You can use your Microsoft account to sign in to third-party Web sites and apps. This eliminates the need to remember individual usernames and passwords for each account. We use Microsoft services on the basis of EU standard contract clauses and a contract processing agreement. For further information, please refer to https://privacy.microsoft.com/privacystatement

6.8 Twitter

On our products and websites, functions of the service Twitter are integrated. These functions are offered by Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the “Re-Tweet” function, the websites you visit are linked to your Twitter account and made known to other users. Data is also transferred to Twitter in the process. We use Twitter on the basis of the EU standard contract clauses. Furthermore, we have concluded a “Data Processing Agreement” with Twitter. This is a contract in which Twitter undertakes to protect the data of our users and process it on our behalf in accordance with its data protection regulations.
Further information on this can be found in Twitter’s privacy policy at https://twitter.com/privacy
You can change your privacy settings on Twitter in the account settings under: https://twitter.com/account/settings.

6.9 LinkedIn

Our products and websites include features of the LinkedIn service. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Each time you access one of our sites that contains LinkedIn features, a connection to LinkedIn servers is established. LinkedIn will be notified that you have visited our sites using your IP address. If you click on LinkedIn’s “Recommend Button” and are logged into your LinkedIn account, LinkedIn will be able to track your visit to our site to you and your account. We use LinkedIn on the basis of the EU standard contract clauses. Furthermore, we have concluded a “Data-Processing-Agreement” with LinkedIn. This is a contract in which LinkedIn undertakes to protect the data of our users and to process it on our behalf in accordance with its privacy policy.
For more information, please refer to the LinkedIn Privacy Policy at https://www.linkedin.com/legal/privacy-policy

6.10 XING

Functions of the XING service are integrated into our products and websites. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. Each time one of our pages containing XING functions is accessed, a connection to XING servers is established. To the best of our knowledge, no personal data is stored. In particular, no IP addresses are stored or the usage behavior is evaluated. Further information on data protection and the XING Share button can be found in the XING Privacy Policy: https://www.xing.com/app/share?op=data_protection

6.11 YouTube

On our products and websites, functions of the YouTube service are integrated. The operator is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit one of our sites equipped with a YouTube plug-in, a connection is established to the YouTube servers. This tells the YouTube server which of our pages you have visited. If you are logged in to your YouTube account, you allow YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account. YouTube is used in the interest of an attractive presentation of our online offers. Further information on the handling of user data can be found in the YouTube privacy policy at https://www.google.de/intl/de/policies/privacy

6.12 Instagram

Our products and websites include features of the Instagram service. The provider is Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA. This may include, for example, content such as images, videos, or text and buttons that allow users to share content from this online offering within Instagram. If the users are members of the Instagram platform, Instagram may assign access to the above-mentioned content and functions to the profiles of the users there. Instagram is part of the Facebook group of companies and shares with Facebook and other Facebook companies https://www.facebook.com/help/111814505650678?ref=dp the infrastructure, the systems, and the technology.
For more information about how we handle user data, please see Instagram’s Privacy Policy: http://instagram.com/about/legal/privacy/

6.13 BS PayOne

To fulfill the contract for bookings with costs, we transmit your user data to the payment service provider commissioned by us using SSL encryption to process all payment obligations.
Provider is the BS PAYONE GmbH, Lyoner Straße 9, D-60528 Frankfurt/Main (Germany), www.bspayone.com

The BS PAYONE GmbH is certified and supervised as payment provider by the Federal Institution for the supervision of financial services, Graurheindorfer Straße 108 in D-53117 Bonn. Please see their privacy policy: www.payone.com/datenschutz/ abrufbar.

6.14 HubSpot

We use product HubSpot for our online marketing activities. The provider is HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland. It is an integrated software solution with which we cover different aspects of our online marketing. This includes email marketing (newsletters as well as automated mailings, e.g. to provide downloads), social media publishing & reporting, reporting (e.g. traffic sources or access), contact management (e.g. user segmentation & CRM), landing pages, and contact forms. Our registration service allows visitors to our products and websites to learn more about our company, download content, and provide their contact information, including their last name, first name, email address, postal address and phone number and/or mobile phone number, and other demographic information. This information and the content of our website are stored on servers of our software partner HubSpot. We may use this information to contact visitors to our website and to determine which of our company’s services are of interest to them. All information collected by us is subject to this Privacy Policy. We use all information collected solely to optimize our marketing efforts.
We also use HubSpot’s live chat service “Messages” (round chat icon at the bottom right of the screen) to send and receive messages on some sub-pages to improve the user experience on our site. If you agree and use this feature, the following data will be transmitted to HubSpot’s servers:

• content of all sent and received chat messages
• context information (e.g. page on which the chat was used)
• optional: e-mail address of the user (if provided by the user via chat function)

HubSpot is a software company from the USA with a subsidiary in Ireland. We use HubSpot on the basis of the EU standard contract clauses. Furthermore, we have concluded a “Data-Processing-Agreement” with HubSpot. This is a contract in which HubSpot commits itself to protect the data of our users and to process it on our behalf according to its data protection regulations.
More information about HubSpot’s privacy policy can be found at https://legal.hubspot.com/de/privacy-policy
If you do not want Hubspot to collect cookies in general, you can prevent the storage of cookies at any time, as described in point 3.6.

6.15 MapBox

Our products use Mapbox Tiles to display interactive maps. The Mapbox Tiles API is a mapping service provided by Mapbox Inc, 1509 16th St NW, Second Floor, Washington, DC 20036 (Mapbox). By using the Mapbox Tiles API, information about your use of this site, including your IP address, may be transmitted to Mapbox. When you access a page that contains Mapbox Tiles maps, your browser connects directly to Mapbox servers. The map content is sent directly from Mapbox to your browser, which embeds it into the Web site. Therefore, we have no control over the amount of data Mapbox collects in this way. If you do not want Mapbox to collect, process, or use data about you through our website, you can deactivate JavaScript in your browser settings. In this case, you will not be able to use the map display. For more information about the purpose and scope of data collection as well as further processing and use of data by Mapbox, your rights in this regard, and setting options to protect your privacy, please refer to the Mapbox data protection information at https://www.mapbox.com/privacy/. Among other things, it states that the IP address of the visitor, the address of the page visited, date and time, and the pages accessed are stored. Mapbox uses this information according to its own statements exclusively for the improvement of the provided service for diagnostic and analysis purposes. Mapbox does not share personal data with third parties. The use of Mapbox is in the interest of the function and an attractive presentation of our online offers and in order to make it easy to find the places we have indicated on the website. This represents a legitimate interest in the sense of art. 6 paragraph 1 lit. f GDPR.
We use MapBox on the basis of the EU standard contract clauses. Furthermore, we have concluded a “Data-Processing-Agreement” with MapBox. This is a contract in which MapBox commits itself to protect the data of our users and to process them according to its data protection regulations on our behalf.

6.16 Vimeo

Our products and websites use plugins from the video portal Vimeo. The provider is Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA. When you visit one of our sites equipped with a Vimeo plugin, a connection to the Vimeo servers is established. This tells the Vimeo server which of our pages you have visited. Vimeo also obtains your IP address. This also applies if you are not logged in to Vimeo or do not have an account with Vimeo. If you are logged in to your Vimeo account, you allow Vimeo to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your Vimeo account. We use Vimeo on the basis of the EU standard contract clauses. For more information on how we handle user data, please refer to the Vimeo privacy policy: https://vimeo.com/privacy

6.17 SendInBlue

We use SendInBlue to send our newsletter. The provider is SendInBlue SAS, 55 rue d’Amsterdam, 75008 Paris, France. SendInBlue is a service that allows us to analyze the behavior of the recipients of the newsletter. The information you enter to subscribe to the newsletter (e.g. e-mail address) is stored on SendInBlue’s servers.
If you do not want SendInBlue to analyze your data, you must unsubscribe from the newsletter (see paragraph 7 of this Privacy Policy). Furthermore, you can also revoke your consent at any time with future effect by sending an e-mail to the address given in our imprint. The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of SendInBlue after you unsubscribe from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation. Data stored by us for other purposes (e.g. e-mail address for the member area) remain unaffected. We have concluded a “Data Processing Agreement” with SendInBlue. This is a contract in which MailChimp commits to protect the data of our users and to process it on our behalf according to its privacy policy.
For more information, please refer to the SendInBlue privacy policy: https://de.SendinBlue.com/legal/privacypolicy/.

6.18 PayPal

Insofar as this is necessary for the processing and payment of your contract, we will pass on the collected and stored data, especially payment data, to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg within the framework of the payment processing within the framework of contractual regulations. Details about PayPal’s handling of personal data are described in PayPal’s privacy policy. You can find them here: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE

6.19 Slack

For direct communication with you, we use the Slack communication solution from Slack Technologies Inc. 500 Howard Street, CA 94105, San Francisco, USA. Registration is voluntary, we only use Slack to communicate directly with you through this medium or to provide you with messages through group chats. The data entered during your registration to Slack is stored on Slack’s servers in the USA. We use Slack on the basis of the EU standard contract clauses. Slack thereby agrees to comply with EU data protection regulations. Furthermore, we have entered into a “Data-Processing-Agreement” with Slack. This is a contract in which Slack is committed to protecting the data of our users. You can view Slack’s privacy policy here: https://slack.com/intl/de-de/terms-of-service

6.20 Outbrain

We use technology from Outbrain UK Ltd, Outbrain UK Limited, 5 New Bridge Street, London, EC4V 6JAUK to identify website visitors and to deliver certain advertising and information formats on our website. With the help of a so-called widget, users are referred to additional content within our website and to websites of third parties which may also be of interest to them. The content displayed in the Outbrain widget is automatically controlled and delivered by Outbrain in terms of content and technology.
Outbrain enables you to display interest-based ads based on what FlyNex has to offer. For this purpose, Outbrain uses cookies, which are stored on the user’s device or browser. Outbrain may also collect the source of the device, browser type, and IP address of the user, where the last octet is deleted for anonymization. Outbrain issues a Universally Unique Identifier (UUID) which can identify the user when they visit a website that has an Outbrain widget implemented. Outbrain creates user profiles that aggregate user interactions (e.g. page views and clicks) from a browser or terminal device to derive the preferences of the UUID.
The use of Outbrain’s services serves to safeguard our predominantly legitimate interests in the optimal marketing of our offers in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR.
You can opt-out of Outbrain’s tracking of interest-based recommendations at any time by clicking on the “Opt-out” button in Outbrain’s privacy policy, available at http://www.outbrain.com/legal/privacy. Here you also receive further information about the data protection of Outbrain UK Ltd. The Opt-Out applies only to the device used by you in each case and loses, besides, his validity if you extinguish your Cookies. Further options for disabling the use of cookies can be found under point 3.6. We use Outbrain on the basis of the EU standard contract clauses. Outbrain thereby undertakes to comply with the EU data protection regulations. Furthermore, we have concluded a “Data-Processing-Agreement” with Outbrain. This is a contract in which Outbrain undertakes to protect the data of our users.

6.21 Brand24

Brand24 from the provider Brand24 Global Inc, 121 Executive Circle, Daytona Beach, FL 32114, USA is a web-based social media monitoring tool that helps users to analyze traffic to specific keywords to gain a better understanding of brands and keywords and helps to analyze the individual information. We use Brand 24 based on the EU standard contract clauses. You can find further information on Brand24 data protection at https://brand24.com/privacy-policy/.

6.22 Mixpanel

Mixpanel of the provider Mixpanel UK Ltd, London, 1-2 Berners Street, Third Floor, London W1T 3LA automatically collects certain information: IP address, location, and browser information. When FlyNex uses the Mixpanel application, some information is collected automatically. This may include information such as the operating system (“OS”) running on your device, the Internet Protocol address (“IP address”) (which may be used to retrieve your location), access times, browser type, and language settings of the operating system, and the website you visited prior to the Mixpanel website. Information is also collected on how you use the Mixpanel site, applications, and services, including the elements you have interacted with, metadata, and other details about these elements, clicks, status changes, and other user actions. In addition, pixel tags (also known as clear gifs, web beacons, or web bugs) are used. Pixel tags are tiny graphic images with a unique identifier, similar to cookies. They will be used to track the online movements of web users. We use Mixpanel for marketing and optimization purposes, in particular, to analyze the use of our website and to continuously improve individual functions and offers as well as the user experience. By statistically evaluating user behavior, we can improve our offer and make it more interesting for you as a user. This is also our legitimate interest in the processing of the above data by the third-party provider. We use Mixpanel on the basis of the EU standard contract clauses. Mixpanel thus undertakes to comply with the EU data protection regulations. Furthermore, we have concluded a “Data Processing Agreement” with Mixpanel. This is a contract in which Mixpanel is committed to protecting the data of our users.
For more information on data protection and on how to object to the collection by Mixpanel, please visit https://mixpanel.com/legal/privacy-policy/ .

6.23 Plista

FlyNex uses Plista from the provider Plista GmbH, Torstraße 33-35, 10119 Berlin, Germany, to analyze user behavior and create interest-based advertising for users. Plista helps FlyNex to find out information about surfing and user behavior. Plista also collects data that can be used to identify browsers and devices visited repeatedly on the Plista Network sites. Data is collected in the following categories: Technical Identification (cookie IDs + mobile device advertising IDs (e.g. IDFA and Google Ad ID), additional technical data (IP addresses) and data derived from these IP addresses, such as inaccurate geolocation data, the country, region, city and/or postal code area of a particular type of Internet browser, browser language, and operating system, type of connection (wired or wireless); network to which the device is connected and mobile operator (if available) and latitude/longitude of a mobile device. Plista collects information about your online activities on the Plista Network sites to determine which activities and products interest you and other users. This includes information about the pages and sub-pages of the Plista Network that are visited (for example, to narrow the interests of the user) and web page/subpage from which an advertisement is served and web pages visited after viewing an advertisement. We use Plista on the basis of the EU standard contract clauses. For more information about privacy, please visit https://www.plista.com/de/about/privacy.

6.24 Taboola

Our products and websites use technologies from Taboola Germany GmbH, Alt-Moabit 2, 10557 Berlin (Germany). Taboola uses cookies that determine which content you use and which of our pages you visit. The cookie enables us to create pseudonymous user profiles through the collection of device-related data as well as protocol data and to recommend content that matches your personal interests. This enables us to design our offer individually for you. These user profiles do not allow any conclusions to be drawn about your person. We use Taboola on the basis of the EU standard contract clauses. Further information about Taboola and the option to deactivate the Taboola cookie can be found at https://policies.taboola.com/en/privacy-policy/.

6.25 Inspectlet

Our products and websites use technologies of InspectLet (1135 Scotland Dr., Cupertino, CA 95014, USA) for marketing and optimization purposes as well as to analyze the use and continuous improvement of our website. Inspectlet uses so-called “cookies”, text files which are stored on your computer and which enable an analysis of your use of the website (e.g. which contents on the website are clicked on). Inspectlet will process the data collected by the cookie on our behalf in order to evaluate user behavior on our website and provide us with reports on the use of our website. Personal data collected by Inspectlet may be transferred to an Inspectlet server in the USA. For more information on data protection by Inspectlet, please visit the Inspectlet website at https://www.inspectlet.com/terms-of-service#privacy. You may at any time object to the collection, processing, and recording of your personal data by the Analysis Service Inspectlet by following the instructions at http://www.inspectlet.com/optout. This means that a so-called opt-out cookie is stored on your end device. If you delete the cookies on your terminal device, it is, therefore, necessary to follow the instructions under the above-mentioned link again to continue to deactivate Inspectlet. We use Inspectlet on the basis of the EU standard contract clauses. Inspectlet thus undertakes to comply with the EU data protection regulations. Furthermore, we have concluded a “Data-Processing-Agreement” with Inspectlet. This is a contract in which Inspectlet undertakes to protect the data of our users.

6.26 TÜV Rheinland Industrie Service GmbH

Within the scope of our offer, you have the possibility to send data, including personal data, to TÜV Rheinland Industrie Service GmbH, Am Grauen Stein, 51105 Köln (Germany) and to us via contact forms. This serves to link our range of services with that of TÜV Rheinland Industrie Service GmbH. This includes your name, first name, e-mail address, company name, address with street, house number, zip code and city, telephone number and cell phone number, profile picture, and, if applicable, other data. To do this, you must agree to the data protection regulations of TÜV Rheinland Industrie Service GmbH and FlyNex before sending your data.
You can find the data protection regulations of TÜV Rheinland Industrie Service GmbH here: https://www.tuv.com/de/deutschland/rechtlichehinweise/datenschutzvereinbarung_1.html

7 Newsletter data

If you would like to receive the newsletter offered on the website, we need an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Further data will not be collected. We use these data exclusively for sending the requested information and do not pass them on to third parties. You can revoke your consent to the processing of your data, in particular your e-mail address, and its use for sending the newsletter at any time, for example by using the unsubscribe link in the newsletter.

8 Changes to this Privacy Policy

We reserve the right to change this privacy policy at any time with effect for the future. An up-to-date version is available on our products and websites, e.g. at www.flynex.de/datenschutz. Please check the data protection regulations regularly and inform yourself about the applicable data protection regulations.

9 Your rights and contact

Due to the data protection regulations, you can obtain information about your personal data at any time and free of charge or demand that it be corrected, completed, deleted, or blocked unless this is contrary to legal regulations. You can also demand the restriction of the processing of your personal data. For these purposes, in particular the revocation of your consent to this privacy policy, the permission to process your personal data according to this privacy policy, or to receive more detailed information about this, please contact the data protection officer of FlyNex GmbH:

FlyNex GmbH
c/o SpinLab, Halle 14
Spinnereistraße 7, 04179 Leipzig (Germany)
to hands data protection officer Nora Braun
Phone: +49 (0) 341 331 760
Fax: + 49 (0) 341 331 76099
Email: info@flynex.de

Please formulate a message by mail or notify us by e-mail, phone or fax using the contact information above. You can unsubscribe from our newsletter using the unsubscribe link at the end of each newsletter. If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provide there, will be stored and processed by us for the purpose of processing the inquiry and in the event of follow-up questions. The legality of the data processing procedures carried out up to the revocation remains unaffected by the revocation.
If you have any questions, comments, or requests regarding the collection, storage, processing, or use of your personal data by us, please also contact the data protection officer of FlyNex GmbH using the contact details above.
Furthermore, in accordance with Art. 77 GDPR, you have the right to lodge complaints with the competent authorities about the data processing carried out by us. The competent supervisory authority for data protection issues is the data protection commissioner of the federal state in which our company is located. A list of the data protection officers and their contact details can be found on the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
You also have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only take place to the extent that it is technically feasible.