Source: https://www.stuttgart-airport.com/privacy-statement/
Timestamp: 2019-04-20 11:18:33+00:00

Document:
Thank you for visiting our website www.flughafen-stuttgart.de / www.stuttgart-airport.com and for your interest in our company. We process your personal data exclusively within the scope of the legal data protection regulations, in particular the General Data Protection Regulation (GDPR) and the Bundesdatenschutzgesetz (Federal Data Protection Act, new BDSG).
"any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person."
You can contact Flughafen Stuttgart GmbH's Data Protection Officer either by using a postal service or e-mail.
and/or insofar as the processing of personal data is permitted by law (Art. 6 Para. 1 lit. b - f GDPR).
Art. 6 Para. 1 lit. a GDPR serves as the legal basis insofar as we obtain the data subject’s consent for the processing of personal data.
Art. 6 Para. 1 lit. b GDPR serves as the legal basis for the processing of personal data required for the performance of a contract to which the data subject is a party. This also applies to processing operations that are necessary for performing pre-contractual measures.
Art. 6 Para. 1 lit. c GDPR serves as the legal basis insofar as the processing of personal data is required to fulfil a legal obligation to which Flughafen Stuttgart GmbH is subject.
Art. 6 Para. 1 lit. f GDPR serves as the legal basis for processing if this is necessary to protect a legitimate interest of Flughafen Stuttgart GmbH or a third party.
Personal data are only stored for as long as this is necessary to achieve the purposes stated in each case or pursuant to the legally stipulated retention periods.
If you merely use our website www.flughafen-stuttgart.de / www.stuttgart-airport.com for information purposes (only viewing and reading), i.e. if you do not contact us (for example via a contact form) and do not submit any other information to us, we only collect the personal data that are transferred automatically or that your browser - depending on the terminal device and configuration of the client - transfers to our server.
Internet service provider of the user.
Art. 6 Para. 1 lit. f GDPR constitutes the legal basis for the temporary storage of these data and the log files. The data are stored in log files to ensure the website’s functionality and, in the event of any errors or problems in the network, to carry out an adequate analysis and thus ensure the security of our information technology systems. These data are not evaluated for other purposes. Pursuant to Art. 13 Para. 1 lit. d GDPR, we are herewith informing you as a user that this is in our legitimate interests.
The log files and thus also the data stored in them are erased after 14 days. The log files are not saved beyond this period.
We use two types of cookies on our website: technically necessary cookies and technically unnecessary cookies.
Technically necessary cookies are those used to make our website more user-friendly. Some elements of our website require that the visitor’s browser can be identified even after a page change. Without these cookies, we are unable to provide you with certain functionalities of our website, such as the language settings of our website.
In the case of cookies, Art. 6 Para. 1 lit. f GDPR constitutes the legal basis for the processing of personal data.
The purpose of using technically unnecessary analysis cookies is to improve the quality of our website and its contents. Through the analysis cookies, we learn how the website is used and can thereby continuously improve the functionalities and contents of our website.
Pursuant to Art. 13 para. 1 lit. d GDPR, we are herewith informing you as a user that this is in our legitimate interests.
Our website uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics also uses "cookies", which are text files placed on your computer, to help analyse your website-using behaviour. The information generated by the cookie about your use of this website is usually transferred to a Google server in the US and stored there. The IP address transferred by your browser in the context of Google Analytics is not merged with other Google data. Our website uses Google Analytics with the extension "_anonymizeIp()". This shortens the IP addresses for further processing. Only in exceptional cases, the full IP address is transferred to a Google server in the US and shortened there. On our behalf, Google uses this information to evaluate your use of the website, to compile reports on website activities and to provide us with other services relating to the use of the website and the Internet.
Art. 6 Para. 1 lit. f GDPR constitutes the legal basis for the processing of personal data, as well as an agreement on processing within the meaning of Art. 28 GDPR. We use Google Analytics to analyse and regularly improve the use of our website. Using theses analyses, we can improve our offer and make it more interesting for you. Pursuant to Art. 13 Para. 1 lit. d GDPR, we are herewith informing you as a user that this is in our legitimate interests.
As a user, you can at any time erase cookies that have already been set by Google Analytics in your Internet browser. The personal data that Google Analytics collects is erased or made anonymous after 14 months.
Google is certified according to the Privacy Shield Framework and thus offers a safeguard to comply with European data protection law and thus the GDPR.
By visiting the website, Google receives the information that you have visited the corresponding subpage of our website. In addition, personal data (such as your IP address) are transferred to Google. This occurs regardless of whether you have a Google Account that you are logged in with or whether you do not have a Google Account. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile on Google, you must log out prior to visiting our website. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such evaluation takes place in particular (even for users who are not logged in) to provide needs-oriented advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, whereby you must contact Google to exercise the right to object.
For more information about the processing of personal data by Google Maps, please see Google's data protection declaration. They will also provide you with further information about your respective rights and setting options to protect your privacy.
You can contact us by e-mail at info@stuttgart-airport.com In this case, the personal data transferred by e-mail about you are stored.
There is also a contact form on our website which can be used to contact Flughafen Stuttgart GmbH electronically on various topics.
When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, your name, your request and when contacting the aircraft noise prevention representative your postcode and residence) are stored by us in order to answer your request appropriately. In addition, a copy of the contact form and thus also your entries, as well as the time of your establishment of contact, is stored in our content management system ("CMS"). The data from the contact form are transferred to our web server in encrypted form.
Depending on the subject matter on which you contact us by e-mail or using the contact form, your data and your request are transferred to third parties. A transfer to third parties only takes place if this is necessary to clarify and respond to the contact request.
To clarify the facts of the case, your personal data and your inquiry may be transferred to to shops or catering services on the campus of Stuttgart Airport.
Your personal data and your request are forwarded directly to the Noise Abatement Officer of the Stuttgart Regional Board. By contacting the Noise Abatement Officer of the Stuttgart Regional Board, furthermore the mention of the postcode and the residence is necesary. This enables the Noise Abatement Officer of the Stuttgart Regional Board to follow up your request and answer your questions appropriately.
Art. 6 Para. 1 lit. f GDPR and Art. 6 Para. 1 lit. a GDPR constitute the legal bases for data processing if you contact us by e-mail or via the contact form.
Regardless of whether you contact us by e-mail or using the contact form, your data are used exclusively to process and answer your enquiry appropriately. This also applies to any transfer of your data to third parties.
Personal data are only stored for as long as this is necessary to achieve the above-mentioned purpose or pursuant to the legally stipulated retention periods.
This is the case with the personal data that you send us as part of an enquiry by e-mail or contact form when the conversation with the user has ended, i.e. when the relevant facts have been finally clarified.
The data are only processed to be able to answer your contact request appropriately and conclusively. Pursuant to Art. 13 Para. 1 lit. d GDPR, we are herewith informing you as a user that this is in our legitimate interests.
Flughafen Stuttgart GmbH offers special user groups (travel agency partners, business partners/corporates and members of the press) the option of subscribing for a target group-oriented newsletter. With these newsletters, we regularly send out target group-relevant information/invitations about Flughafen Stuttgart GmbH by e-mail.
Art. 6 Para. 1 lit. a GDPR constitutes the legal basis for the processing of the data after the user registers for the newsletter. The collection of your personal data serves for verification and correct allocation to the target group-oriented newsletter and to ensure that the newsletter can be delivered. Your data are used exclusively for sending the newsletter.
Your personal data are only stored for as long as necessary to achieve the above-mentioned purpose or pursuant to the legally stipulated retention periods. We store your data for as long as the subscription to your newsletter is active. As a user, you can cancel your subscription to the respective newsletter at any time by withdrawing your consent and without needing to give any reasons.
To do this, you can send an e-mail to Betroffenenrechte@stuttgart-airport.com or click the “Unsubscribe” button in the newsletter.
If you belong to the travel agency partners, business partners user group and are interested in subscribing to the “Travel agency partners, business partners/corporates” newsletter, please contact Marketing@stuttgart-airport.com. To consider your registration, we need information about you (e-mail address, name) and the organisation/company to which you belong. Section 4 of this Data Protection Declaration applies to contacting us by e-mail.
The “Newsletter2Go” newsletter software is used to send the newsletter to travel agency partners, business partners/corporates. Your data are transferred to Newsletter2Go GmbH. Newsletter2Go is prohibited from selling your data or using it for any purpose other than sending the newsletter. Newsletter2Go is a certified provider in Germany, selected according to the requirements of the GDPR.
Art. 6 Para. 1 lit. f GDPR constitutes the legal basis for the transfer to Newsletter2Go. The dispatch service provider is used to ensure the smooth technical dispatch of the newsletters and to guarantee the IT integrity of Flughafen Stuttgart GmbH's servers. Pursuant to Art. 13 para. 1 lit. d GDPR, we are herewith informing you as a user that this is in our legitimate interests.
If you are a member of the Press user group and are interested in subscribing to the “Presserundschreiben” newsletter, please contact Presse@stuttgart-airport.com. To consider your registration, we need information about you (e-mail address, name) and the organisation/company to which you belong. Section 4 of this Data Protection Declaration applies to contacting us by e-mail.
We look forward to you visiting one of our profiles in the above-mentioned networks. In this case, the terms and conditions and data protection regulations of the respective operators apply.
All references to social media profiles on our website are integrated by means of a link. Personal data are therefore not transferred on to third parties without your active involvement.
A transfer only takes place if you initiate it yourself by clicking on the link. In this case, the data protection regulations of the respective social network apply. As a user, your respective rights and setting options to protect your privacy can be found in the providers' data protection information.
In our blog, various authors describe their personal views on a topic and report from a subjective perspective on topics relating to Stuttgart Airport. Readers can comment on these contributions. We use the DISQUS comment service for this, offered by DISQUS Inc, 301 Howard Street, Suite 300, San Francisco, CA 94105, US (“DISQUS”).
This comment function is disabled by default. To be able to use the DIQUS comment function, the user must first activate it. This is done by setting an appropriate cookie. If you do not activate the DISQUS comment function, no personal data are transferred to DISQUS.
As a user and as far as you activate the comment function of DISQUS, the use of DISQUS and the associated transfer of personal data to DISQUS is legally based on Art. 6 Para. 1 lit. f GDPR.
Personal data is processed for the purpose of an efficient and user-friendly design of the comment management.
DISQUS is certified according to the Privacy Shield Framework and thus offers a safeguard to comply with European data protection law and thus the GDPR.
If you do not wish your personal data to be transferred to DISQUS, we recommend that you do not activate the comment function.
As a user of our website, you have the option of being notified by e-mail about status updates of flights that you can select yourself.
As a user, you can subscribe to the flight status (for example, status: en-route; status: landed; status: boarding) and flight status changes for a specific flight by e-mail. For this purpose, we collect your e-mail address in the registration form for notification. This data is only collected to inform you of any changes in the flight status of the desired flight(s).
Art. 6 Para. 1 lit. a GDPR constitutes the legal basis for this data processing.
Personal data are only stored for as long as this is necessary to achieve the above-mentioned purpose or pursuant to the legally stipulated retention periods. Your e-mail address is routinely erased after a period of 4 days, but no later than 7 days, after the end of the respective flight.
On our website, you have the possibility to book VIP services around your flight. These are special services (e.g. shuttle service).
You will find a booking form on our website for this purpose. Depending on which VIP package you book, we request various information required to book the package (e.g. your name, number of adults and children travelling with you, flight details). As the performance of the ordered service takes place at an international commercial airport and is therefore subject to legal security requirements, we pass on your data to third parties within the framework of the execution of the contract, insofar as this is necessary. In this sense, third parties are the authorities involved (cf. Section 4) as well as the internal departments required for the execution of the contract (e.g. terminal supervision, operations officer on duty) and external cooperation partners (e.g. the booked airline, the handling partner responsible for this airline, the security service provider used for personnel and goods control). Art. 6 Para. 1 lit. b GDPR constitutes the legal basis for this data processing. The data are processed exclusively for the purpose of executing the contract.
You can book airport tours on our website. We provide you with a platform for your booking enquiry/booking for this purpose. Within the framework of the booking enquiry/booking, we collect the data necessary for carrying out the tour (number of participants, type of group, address of the contact person/booking organisation or the booking company, billing address, telephone number, e-mail address). After booking, you receive an acknowledgement of receipt of the reservation request and a confirmation e-mail if the booking was successful.
Art. 6 Para. 1 lit. b GDPR constitutes the legal basis for this data processing. The data to be provided are required for the execution and processing of the airport tour and booking. The transfer of data to us is encrypted as part of the SSL encryption of our website.
Online, you have the opportunity to apply for a job with us using the application portal “d.vinci” of d.vinci HR-Systems GmbH, Nagelsweg 37 - 39, D-20097 Hamburg, Germany; this is integrated on our homepage.
The personal data which you enter are only stored by d.vinci HR-Systems GmbH. Art. 6 Para. 1 lit. b GDPR constitutes the legal basis for this data processing. We have carefully selected d.vinci HR-Systems GmbH and have made contractual regulations in accordance with the requirements of the GDPR (Art. 28 GDPR).
You can register for a free subscription to our “Flugblatt” airport magazine on our website. If you would like to receive the airport magazine, please send an e-mail with your name and full address to publikationen@stuttgart-airport.com.
If you register to receive the airport magazine, your personal data are processed exclusively for the purpose of sending the magazine. Your personal data are required to send you our airport magazine and thus to provide the service for your requested subscription.
Art. 6 Para. 1 lit. a GDPR constitutes the legal basis for the processing of your personal data. Your personal data are only stored for as long as it is necessary to provide the subscription. We store your data as long as your subscription to the magazine remains active. Your personal data are forwarded to the shipping service for the purpose of sending you the magazine. Your personal data are not transferred to other third parties.
You can cancel your subscription to the airport magazine at any time and without giving reasons by withdrawing your consent.
You can send an e-mail to Betroffenenrechte@stuttgart-airport.com at any time.
Section IV, Paragraph 4 of this Data Protection Declaration applies to contacting us by e-mail.
Pursuant to Art. 15 GDPR, you have the right to access information on your personal data processed by us. In particular, you may access information on the purposes for the processing, the category of personal data, the categories of recipients to whom your data have been or will be transferred, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of lodging a complaint, the origin of your data, if these have not been collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on their details.
You also are entitled to the right to access information as to whether your personal data is being transferred to a third country or to an international organisation. In this context and pursuant to Art. 46 GDPR, you may request to be informed of the appropriate safeguards in connection with the transfer.
Vis-à-vis us as data controller and in accordance with Article 16 of the GDPR, you are entitled to the right to rectify and/or complete your personal data if the personal data relating to you and being processed is incorrect or incomplete. We, as controllers, must make this rectification without delay.
Pursuant to Art. 17 Para. 1 GDPR, you are entitled to the right to request the erasure of your personal data stored with us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims (cf. Art. 17 Para. 3 GDPR).
If we, as controller, have made the personal data relating to you public and we are obliged to erase this personal data pursuant to Art. 17 Para. 1 GDPR, we will take appropriate measures, including technical measures (taking into account the available technology and the costs for implementation) to inform other data processors who process the personal data that you, as data subject, have requested the erasure of all links to these personal data or of copies or replications of these personal data.
Pursuant to Article 18 GDPR, you are entitled to the right to demand the restriction of the processing of your personal data if you dispute the accuracy of the data, the processing is unlawful but you reject their erasure and we no longer need the data, but you need them to assert, exercise or defend any legal claims or you have filed an objection against the processing pursuant to Article 21 GDPR.
Pursuant to Art. 20 GDPR, you are entitled to the right to receive the personal data you have provided us with in a structured, common and machine-readable format or to request the transfer to another controller.
On the basis of Article 6(1)(e) or (f) of the GDPR, you are entitled to the right to object at any time to the processing of personal data concerning you for reasons arising from your particular situation.
As controllers, we then no longer process the personal data relating to you unless we can prove that there are compelling reasons worthy of protection for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend any legal claims. If the personal data relating to you are processed for direct marketing purposes, you have the right to object to the processing at any time. If you object to the processing for direct marketing purposes, the personal data concerning you is no longer processed for these purposes.
You are entitled to the right to withdraw your consent for this Data Protection Declaration at any time. The withdrawal of consent shall not affect the legality of the processing carried out on the basis of the consent until withdrawal.
You are entitled to the right not to be subject to a decision based exclusively on automated processing - including profiling - that has any legal effect against you or significantly impairs you in any similar manner.
You are entitled to the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of your place of residence, workplace or our company headquarters.
We use SSL (Secure Socket Layer) encryption with 256-bit encryption on our website. You can recognise the encryption of our website and its individual areas by the lock or key symbol in the lower status bar of your browser.
Within the meaning of Art. 32 GDPR, we principally use suitable technical and organisational measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are constantly developed and improved in accordance with technical progress and technical development.
If you have any questions regarding the processing of your personal data by us or your rights as a data subject, you can contact our Data Protection Officer at any time. Also, if you have any suggestions or other information on the subject of data protection, you can contact our Data Protection Officer at any time. You will find the contact details in II. of this Data Protection Declaration.
This Data Protection Declaration is currently valid and dated 25 May 2018.

References: Art. 6

Art. 6

Art. 6

Art. 6

Art. 6
 Art. 13
 Art. 6
 Art. 13

Art. 6
 Art. 28
 Art. 13

Art. 6
 Art. 6
 Art. 13

Art. 6

Art. 6
 Art. 13
 Art. 6

Art. 6
 Art. 6

Art. 6
 Art. 6

Art. 6
 Art. 15
 Art. 46
 Art. 17
 Art. 17
 Art. 17
 Art. 20
 Art. 77
 Art. 32