Privacy Policy

1. In General

I, Michael Schmidt-Voigt (“I” or “me” or “my” or “Michael“), provider of “luftlust” (see the Imprint available on luftlust.com/imprint), e-mail address: hello@luftlust.com (“E-Mail Address”), process your personal data when you use luftlust. The processing of your personal data takes place in compliance with the General Data Protection Regulation (“GDPR“).

In this privacy policy (“Privacy Policy”) I am providing you with information about luftlust, the nature, scope and purposes of the data collection and use, giving you insights into the processing of your personal data.

2. Controller

The controller of data processing is me, Michael Schmidt-Voigt. You can contact me by email at the E-Mail Address.

3. Which Data I Collect and Process

1. In General

I process personal data that you as a user of luftlust make available to me, for example by using luftlust (“Data”).

2. Data You Provide to Me

Registration Information

Mandatory Information: You have to provide to me certain information in order to register with luftlust:

  • email address;
  • name.

Paragliding Activity Information

  • paragliding activities: e.g. date, duration, take-off and landing times, general location, take-off and launch sites, type of flight, and arbitrary notes;
  • tracklogs: e.g. geolocation data, altitudes, times;

3. Service Use

Fathom Analytics

I use Fathom Analytics (“Fathom”) for statistical purposes. Fathom is GDPR and ePrivacy compliant – it provides statistics without tracking or storing personal data of visitors.

Fathom collects basic data from each page view, including when it occurred, which site referred it, and whether it is a new session. This data is aggregated for statistical purposes and then deleted after at most 30 minutes. Most importantly, it does not contain any identifying information.

Fathom uses a cookie on your device to determine if you visited the website before and to count your visit accurately. This cookie is deleted after at most 24 hours, is not used to track you across websites, and does not transmit any identifying information. Please see the Cookie Policy available on luftlust.com/cookie-policy.

Fathom supports Do Not Track ("DNT"). Do Not Track is a preference you can set in your web browser to inform websites that you do not want to be tracked. You can enable or disable Do Not Track by visiting the Preferences or Settings page of your web browser.

I self-host Fathom on the same server in Frankfurt, Germany that luftlust runs on.

4. Cookies

luftlust uses 'cookies' – small text files that are stored on your computer or mobile device when you visit a website. The basis for the processing of Data via cookies are my legitimate interests.

For more information on the cookies I use, which, if any, personal data they collect, and how to disable them, please see the Cookie Policy available on luftlust.com/cookie-policy.

5. Device and Location Information

When you visit or leave luftlust, I receive

  • the URL of both the site you came from and the one you go to next, as well as date and time stamp and time zone;
  • IP address, access status/HTTP status code;
  • transmitted data volume;
  • proxy server, operating system, web browser (including language and version of the browser software) and add-ons;
  • device identifier and features; and/or
  • ISP or your mobile carrier.

4. Why I Process Data (“Purposes”)

1. Operating luftlust

I process your Data to be able to provide you with a seamless user experience when using luftlust.

Providing Services. To operate luftlust and provide the services, including to

  • authenticate your access to an account;
  • collect and display your paragliding activities;
  • show you statistics; and

User Support. To investigate, respond to your requests, and resolve complaints and service issues, e.g. to contact you about a question you submitted.

2. Business Needs

I process your Data to manage my business needs.

Performance. I process Data to monitor, analyse and improve the use of luftlust, as well as protect the security or integrity of luftlust, and its performance and functionality. For example, I analyze user behaviour and perform research about the way you use luftlust.

Research and Development. I process Data, including public feedback, to conduct research for the further development of luftlust, in order to provide you and others with a better, more intuitive and personalized experience, and drive user growth and engagement in luftlust.

E-Mail Marketing. With your explicit consent I will send you marketing e-mails with information on luftlust and paragliding-related topics. I will ask you to confirm your email address before you receive any marketing e-mails.

You can revoke your consent to the marketing e-mails at any time, by clicking the link at the end of the email or changing your account settings concerning the “Newsletter”.

3. Compliance and Enforcement

Compliance. I process your Data to comply with my obligations and in compliance with all applicable laws and regulations.

Enforcement. I process your Data, if I think it is necessary for security purposes or to investigate possible fraud or other violations of my Terms & Conditions or this Privacy Policy and/or attempts to harm luftlust’s users or visitors.

5. Sharing of Personal Data

1. General

I share Data with third parties

  • if this is necessary, for the Purposes,
  • due to a request from a national authority,
  • due to a court ruling,
  • if required by law,
  • if necessary to investigate and defend ourselves against any third-party claims or allegations,
  • to exercise or protect the rights and safety of me, other users, or
  • if you have (explicitly) consented beforehand.

2. Service Providers and Other Third Party Services

I share your information to others, who help me provide and improve luftlust (e.g. maintenance, analysis, marketing and development). Service providers will have access to your information as reasonably necessary to perform these tasks on my behalf, and are obligated not to disclose or use it for other purposes. I use processors such as DigitalOcean and MailerLite.

DigitalOcean

luftlust is hosted by DigitalOcean on servers located in Frankfurt, Germany.

DigitalOcean is compliant within EU-US “Privacy Shield” Frameworks and the European GDPR regulations. More information on DigitalOcean’ commitment to GDPR: https://www.digitalocean.com/legal/gdpr/

For more details of DigitalOcean's privacy and security processes, please visit https://www.digitalocean.com/legal/.

DigitalOcean 101 Avenue of the Americas, 10th Floor New York, NY 10013 United States

MailerLite

Automated email communication takes place using “MailerLite” an email marketing and automation software as a service provided by UAB “MailerLite”, J. Basanavičiaus 15, LT-03108 Vilnius, Lithuania.

The names and email addresses of luftlust’s Registered Users are saved on the MailerLite servers within the EU. MailerLite uses this information to send and evaluate automated email communication on my behalf. MailerLite does not share, sell or rent your data to anyone or any third party for any reason.

I depend upon the reliability and IT and data security of MailerLite. MailerLite is located in Europe and therefore obliged to adhere to EU data protection regulations. I have also agreed a “Data-Processing-Agreement” with MailerLite. This is a contract which obliges MailerLite to protect the data of luftlust users and accordingly to process data protection instructions on my behalf, and particularly not to pass data to third parties.

For more details of MailerLite's privacy and security processes, please visit https://www.mailerlite.com/legal.

6. How Long I Store Data

1. Storage Period

I store your Data as long as you are a Registered User of luftlust. Beyond that, I only store Data, if it is legally necessary (because of warranty, limitation or retention periods) or otherwise required.

2. Account Deletion

If you decide to delete your account, all Data I have about you will be deleted, with the following exceptions:

  • Any Data required for luftlust’s performance of contractual obligations or compliance with statutory retention obligations shall not be deleted, but minimized to the necessary extent.
  • A deletion request does not affect Data, if the storage is legally necessary, for example for accounting purposes.

7. Which Rights You Have

1. Exercise your Rights

To exercise your rights defined in sections 7.2 to 7.8, please send a request by email at the E-Mail Address.

2. Revocation of Consent

You can revoke your consent – in those cases where consent for processing is necessary – for future data processing at any time. However, this does not affect the lawfulness of Data processing based on the consent before the revocation. In certain cases, I may continue to process your information after you have withdrawn consent, if I have another legal basis to do so or if your withdrawal of consent was limited to certain processing activities.

3. Right of Access

You have the right to obtain (i) confirmation as to whether or not your Data is being processed by me and, if so, (ii) more specific information on the Data. The more specific information concerns, among other things, processing purposes, categories of Data, potential recipients, or the duration of storage.

4. Right to Rectification

You have the right to obtain the rectification of inaccurate Data concerning you from me. In case the Data processed by me is not correct, I will rectify these without undue delay and inform you of this rectification. Please note that (i) you can rectify much of your information in the settings and (ii) it is not technically possible for me to rectify all kinds of data in luftlust.

5. Right to Erasure

You have the right to delete Data I store about you. Should you decide to do so, please go to your account settings and delete your account there. If you are unable to do this, please contact me by email at the E-Mail Address.

6. Right to Restriction of Processing

You have the right to obtain a restriction of processing of your Data from me in the following cases:

  • you make an inquiry pursuant para. 7.4, if you so request;
  • you are of the opinion that the processing of your Data is unlawful, but are opposed to an erasure of Data;
  • you still require the Data for the establishment, exercise or defense of legal claims; or
  • you have objected to the processing pursuant para. 7.8.

7. Right to Data Portability

You have the right to (i) receive a copy of your Data in a structured, commonly used and machine-readable format and (ii) transmit those Data to another controller without hindrance from me. If you would like to receive of copy of your Data, please contact me by email at the E-Mail Address.

8. Right to Object

You have the right to object at any time to the processing of Data for which my legitimate interests are the legal basis, including profiling based on those provisions. You also have the right to object to processing of Data for direct marketing purposes.

9. Right to File a Complaint

You have the right to file a complaint with your local supervisory authority, if you think that the processing of Data infringes applicable law.

8. Further Important Information

1. Legal Bases

Data protection laws regulate that I am only allowed to collect and process your Data, if I have lawful bases for processing. The lawfulness of processing of Data stems from:

  • your (explicit) consent in cases where you have given (explicit) consent to the processing;
  • the necessity for the performance of your user contract, e.g. where Data is needed for a satisfactory use of the Product; or
  • legitimate interests pursued by me or a third party, e.g. my use of cookies, plug-ins, or marketing e-mails.

My legitimate interests include protecting you, me, or others from security threats or fraud, complying with all applicable laws, managing and improving my business (e.g. user support, reporting) including possible corporate transactions (e.g. M&A), enabling users to share their and connect via their paragliding experiences, and express all sport-related opinions.

2. Security Measures

I am committed to protecting your Data and implement appropriate technical and organizational security measures to protect it against any unauthorized or unlawful processing and against any accidental loss, destruction, or damage. Those security measures are constantly revised to comply with the latest technological developments.

9. Changes to the Privacy Policy

1. General

I may change this Privacy Policy.

2. Material Changes

If I make material changes to it, I will provide notice directly in luftlust, or by other means (e.g. via email), to offer you the opportunity to review the changes before they become effective. Material changes could, for example, include further tracking, profiling, and analytics services. Should your consent be necessary, I will ask for it before the changes become effective. If you object to any changes, you may need to close your account as it might not function properly.

3. Last Updated

This Privacy Policy was last modified on 1 March, 2019.