Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

XFLIGHT GmbH
Antoniusweg 9
63897 Miltenberg
Germany
Phone: +49 (0)9371 911 98 55
Email: team@xflight-aircrafts.com

2. General Data Processing

We process personal data of our users only to the extent necessary to provide a functional website and our content and services. Processing of personal data of our users occurs regularly only with the user's consent. An exception applies in cases where prior consent is not possible for practical reasons and the processing of the data is permitted by law.

3. Server Log Files

The hosting provider of this website automatically collects and stores information in server log files that your browser automatically transmits. These are:

• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

This data cannot be assigned to specific individuals. This data is not merged with other data sources. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure operation of the website).

4. Contact Form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not share this data without your consent.

The processing of data entered into the contact form is therefore based exclusively on your consent (Art. 6(1)(a) GDPR). You may revoke this consent at any time. The lawfulness of the data processing carried out before the revocation remains unaffected by the revocation.

The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after completing the processing of your inquiry). Mandatory statutory provisions — in particular retention periods — remain unaffected.

Spam protection: To defend against automated requests (bots), we use technical measures (timing analysis, honeypot field). No personal data is transmitted to third-party providers.

5. Hosting

This website is hosted by an external service provider. The personal data collected on this website is stored on the host's servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses, and other data generated via a website.

The use of the host serves the purpose of fulfilling contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast, and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR).

6. Cookies

This website does not use tracking cookies or third-party cookies. Only technically necessary session cookies are used that are required for the operation of the website and are deleted when the browser is closed.

7. External Fonts

This website loads fonts (Barlow) from Google Fonts. Your IP address is transmitted to Google's servers in the process. The legal basis is Art. 6(1)(f) GDPR. If you wish to prevent this, you can block the use of Google Fonts in your browser.

8. Your Rights as a Data Subject

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent (Art. 7(3) GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data by us. The competent supervisory authority in Bavaria: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), www.lda.bayern.de.

9. Data Security

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://”.