Source: http://extranet.keulen-bonn-airport.nl/en/service/privacy-policy.html
Timestamp: 2020-07-06 13:04:05
Document Index: 502108991

Matched Legal Cases: ['Art. 13', 'Art. 13', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', '§ 34', 'Art. 15', '§ 35', 'Art. 16', 'Art. 20', 'Art. 6', '§ 36', 'Art. 21', 'Art. 6', 'Art. 77', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 4', 'Art. 4', 'Art. 6', 'Art. 7', '§ 26', 'Art. 6', 'Art. 6', 'Art. 4', '§ 34', 'Art. 15', '§ 35', 'Art. 15', '§ 36', 'Art. 21', 'Art. 20', 'Art. 77', 'Art. 6', '§ 26', 'Art. 6', '§ 26', 'Art. 4', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 28', 'Art. 6', '§ 26', 'Art. 15', '§ 34', 'Art. 16', '§ 35', 'Art. 20', 'Art. 77', 'Art. 6', '§ 36', 'Art. 21', 'Art. 6']

Privacy Policy - Service - Cologne Bonn Airport
Privacy statement and informing persons concerned pursuant to Art. 13, 14 General Data Protection Regulation (GDPR)
The protection of your personal data is an important issue for Flughafen Köln/Bonn GmbH (hereinafter: FKB). The collection and processing of your personal data by our company therefore only takes place in compliance with data protection guidelines. Here we would like to inform you on the collection and processing of your personal data pursuant to Art. 13 General Data Protection Regulation (GDPR)
Responsibility for data processing lies with the Airport company, Flughafen Köln/Bonn GmbH, Heinrich-Steinmann-Str. 12, 51147 Cologne, represented by the Chief Executive Officer, Johan Vanneste. You can contact the data protection officer at FKB here.
When you visit this website and use its features, we will process your personal data as follows:
Session Cookies: With every visit to our website we use session cookies, which will be maintained until you close all browser windows. We require these session cookies to be able to process your enquiry on our website and guide you to the various sub-pages. Here we have legitimate interest, as otherwise we could not present our website in this manner (Art. 6 I 1 f EU-GDPR). If you do not wish to use cookies, you can block these in your browser settings. You can still visit our website but not use it to the same extent.
Server log files: With every visit to the website your browser transmits access data, server log files, which we process to guarantee system security and draw up usage statistics. With these, information, such as the time of your enquiry, the site from where you visited us (referrer.URL), the sub-pages visited, your IP address, the data volume and the browser you have used, is transmitted to us. These data are required to ensure system security, e.g. to identify hack attackers and block the same. This is in our predominant, legitimate interest (Art. 6 I 1 f EU-GDPR).
Social Media: You can also click on various social media tools and plug-ins and view our offers in these media or share information on the same with other users. You will recognize these offers by the respective icons.
All these plug-ins are deactivated, i.e. none of your data will be transmitted to the respective providers, as long as you do not click on these links. If you do click on the links, your data will be transmitted to the respective providers, in particular the referring page. This also applies if you do not have an account with the respective provider or are not logged in.
We have no influence on which personal data these third-party providers collect and how they deal with these. We are also not aware of this. Please consider that some of these providers are located outside the EU and your data may probably transmitted to non-member states for which an adequate level of data protection is not ensured. Further information on how your data are handled can be had from the respective third-party providers.
Information on third-party providers:
Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland,
Privacy Statement: https://www.facebook.com/about/privacy/update?ref=old_policy, https://www.facebook.com/privacy/explanation, https://de-de.facebook.com/policies/cookies,
Data protection information: https://www.facebook.com/help/568137493302217,
Terms of use: https://de-de.facebook.com/legal/terms/update
One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 IRELAND.
Privacy Statement: https://twitter.com/de/privacy
Privacy Statement: http://www.google.de/intl/de/policies/privacy
YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA,
Privacy Statement: https://policies.google.com/privacy?hl=de&gl=de,
Data protection information: https://www.youtube.com/intl/de/yt/about/policies/#community-guidelines,
Terms of use: https://www.youtube.com/t/terms und https://www.youtube.com/t/terms_paidservice
Via the social media links, we offer you opportunities to receive even more attractive offers from us on other channels and to communicate with these offers and their users directly. This way, we make our website more attractive and more interesting for you. Embedding the social media links is therefore in the predominant, legitimate interest of our enterprise (Art. 6 I 1 f EU-GDPR). By clicking actively, you can yourself decide whether your personal data are disclosed to third-party providers.
The parent companies of the social media providers are mostly located in the USA. If personal data are transmitted to the USA there is a sufficient level of protection in place via the EU-US-Privacy Shield, to which all the above-mentioned providers are subject, insofar as they are based in the USA (Facebook, Twitter, WhatsApp, Google (Google is responsible for YouTube in data protection issues) – List available at https://www.privacyshield.gov/list).
Contact forms/e-mails: At various positions on the website you have the possibility of contacting FKB on several issues. This concerns any specific enquiries or complaints. We process the personal data you have given to us (name and contact data) and your message only to be able to deal with your matter as best as possible. That is in our legitimate interest (Art. 6 Abs. 1 lit. f GDPR). We do not disclose your data to third parties, unless this is absolutely necessary to process your enquiry.
Travis/Flight tracks live: On our website you have the possibility of following live the tracks of aircraft taking off and landing. Using this application, you can also send us any complaints you may have. The personal data you submit here (name, postal address, e-mail address, if applicable, telephone number, content of the complaint) will only be processed for handling your complaint and, if necessary, for contacting you. This is based on our legitimate interest (Art. 6 Section 1 lit. f, GDPR). In the case of noise complaints, you also have the possibility of marking your location on a map. The operator of this electronic map is Google based in the USA. To use the Google Maps functions it is necessary to store your IP address. As a rule, this information will be transmitted to a Google server in the USA and stored there. The operator of this website has no influence on this data transfer, however, no personal data (for instance, information on complaints) will be passed on to Google. The use of Google Maps is in the interest of providing a graphic representation of the flight and noise data. This is based on our legitimate interest (Art. 6 Section 1 lit. f, GDPR). Information on data protection and privacy: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, IrelandFax: +353 (1) 436 1001. Data privacy statement: http://www.google.de/intl/de/policies/privacy
Reservation of guided group tours: On our website you can book guided group tours. We process the personal data you have given us (name, contact data, dates) only to fulfil the contractual services (Art. 6 Sect. 1 lit. b, f GDPR). We will transfer the data to the responsible authorities only within the limits of our statutory obligations.
New registration (Airport Club): On our website you can register for the FKB Airport Club. The main subject matter of the membership is that you and/or your enterprise are regularly informed of all news in and around the Airport, in particular electronically per e-mail. Your personal data (name and contact data) are solely processed to offer you the quasi-contractual services of the Airport Club free of charge (Art. 6 Sect. 1 lit. b, f GDPR). The data will not be disclosed to third parties.
Registration form (Airport Club): You can register for FKB Airport Club events via an online form. We process the personal data given by you (name and contact data) solely to offer you the quasi-contractual services of the Airport Club free of charge (Art. 6 Abs. 1 lit. b, f GDPR). The data will not be disclosed to third parties.
Application for security passes: You can apply for security passes online. We process the personal data given by you (including name, address, contact data, company name) solely for processing purposes (Art. 6 Sect. 1 lit. b, f GDPR).
Google WebFonts: Google uses WebFonts on our website, which is a service made available to us by Google, Inc. WebFonts provides us with a font library that allows us to present a visually attractive design and uniform format. This happens insofar as the fonts used on this website are loaded by your browser and then displayed. As far as we are informed, a link will be made from your browser to our provider’s servers, and the information that our website has been accessed by the IP address you have used, will be collected. It is possible that your IP address will also be transmitted to the USA. The certification of our provider pursuant to the EU-US Privacy Shield ensures that an adequate standard of data protection is in place. (The list can be accessed at https://www.privacyshield.gov/list). A uniform and visually attractive layout of our website is in the legitimate interest of our company (Art. 6 I 1 f EU-GDPR). No user analysis will be carried out, nor will a user profile be generated; your IP address is used exclusively for the targeted transference of fonts. Information on the third-party provider Google relating to WebFonts is available here: https://fonts.google.com/about
Google Analytics: This website uses Google Analytics, a web analysis service provided by Google Inc. Google Analytics uses tracking cookies, text files which are stored on your computer and enable an analysis of the use of the website. The information on your use of this website generated by the cookie is as a rule transmitted to a Google server in the USA and stored there. This website uses Google Analytics with the add-on “_anonymizeIp()”. Therefore, your IP address is abbreviated directly after transmission and thus anonymized. Specifically, within the member states of the European Union or in other states party to the Agreement in the European Economic Area your IP address will be abbreviated by Google after transmission. Within the scope of Google Analytics, the IP address first transmitted from your browser and then abbreviated will not be combined with any other Google data. Acting on behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide services connected to the use of the internet vis-à-vis the website operator.
We use Google Analytics to be able to analyze the use of our website and improve this on a regular basis. Using the statistics derived here, we can improve our services and make our website more interesting for you as a user.
Information on third-party providers: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
Privacy statement: www.google.de/intl/de/policies/privacy,
Data protection information: www.google.com/intl/de/analytics/learn/privacy.html,
You can also block the capture function of Google Analytics, by clicking on the following link. An opt-out cookie will be set, which prevents your data being captured on future visits to this website.
We also have offers of third-party enterprises embedded on this website. These are:
Hotel reservation via Hotel DE GmbH, Hugo-Junkers-Str. 15-17, D-90411 Nürnberg
Reservation of flights via ypsilon.net AG, Vilbeler Landstraße 203, 60388 Frankfurt
Reservation of charter and private jets via PRO SKY AG, Schanzenstraße 6-20, 51063 Köln
We would like to draw your attention to the fact that FKB can neither influence the contents of these offers, nor does it have access to the personal data you have submitted in this connection. If you have questions as to data protection or privacy, please contact the respective provider directly.
For the operation of the website we cooperate with an external service provider whom we have carefully selected and obligated in compliance with the stipulations of the data protection law.
Your personal data shall generally be stored as long as legally required and/or is necessary to fulfil a contract or your enquiry, and/or in the event of consent until you have revoked your consent. Further storage shall only take place if this is in our justified interest and your interest does not predominate here.
Insofar as personal data are used relating to you as a natural person, you have various claims vis-à-vis us as regards data protection. Pursuant to § 34 BDSG [German Federal Data Protection Act], Art. 15 EU-GDPR, you have the right to information on your personal data stored and the source of the same, the recipients or categories of recipients to whom the data have been disclosed and the purpose of their storage.
Moreover, pursuant to § 35 BDSG, Art. 16 - 18 EU-GDPR, where appropriate, you also have the right to rectification, deletion or restriction (of processing) of your personal data. Pursuant to Art. 20 EU-GDPR, you can also demand the data be transferred to another responsible authority.
Furthermore, you can object to the further processing of your personal data if we are processing your data on the basis of a legitimate interest (Art. 6 I 1 f EU-GDPR). Insofar as we do not process your data for advertising purposes there must be a reason arising from a special situation on your part. In the case of objection, we will no longer process your personal data after input and during the following verification, and once the verification has been completed – in the case of a justified objection – delete your personal data (§ 36 BDSG, Art. 21 EU-GDPR).
You can revoke the consent to data processing (Art. 6 I 1 a EU-GDPR) at any time; in such a case, we shall no longer process your personal data, unless there is a legal authorization for this.
An objection or revocation shall not affect the legitimacy of data processing in the past.
We shall fulfill your legal rights without delay and free of charge. Please contact us or our data protection officer; our contact data can be found at the beginning of this privacy statement.
Lastly, you have the right to complain to the Data Protection Supervisory Authority responsible - pursuant to Art. 77 EU-GDPR.
Privacy Policy "Parking"
Responsibility for data processing lies with the Airport company, Flughafen Köln/Bonn GmbH, Heinrich-Steinmann-Str. 12, 51147 Cologne, represented by the Chief Executive Officer, Johan Vanneste. You can contact the data protection officer at FKB under the following e-mail address: info.dsbkoeln-bonn-airport.de.
Contact forms/e-mails: At various positions on the website you have the possibility of contacting FKB on several issues. This concerns any specific enquiries or complaints. We process the personal data you have given us (name and contact data) and your message only to be able to deal with your matter as best as possible. That is in our legitimate interest (Art. 6 Abs. 1 lit. f GDPR). We do not disclose your data to third parties, unless this is absolutely necessary to process your enquiry.
Newsletter:You can subscribe to our e-mail newsletter to receive the latest information from the Airport. Before sending you the first newsletter we will obtain your consent (Art. 6 Sect. 1 Lit. a) GDPR). You have the possibility of revoking this consent – also in the newsletter - at any time for the future. Please use the “Unsubscribe” function in the newsletter or contact our data protection officer.
Creating a user account: On our website you can create a user account. This makes it easier for you to effect repeated or regular reservations for parking. We process the personal data you have given us (name and contact data, user name, password) only to offer you the user account as a quasi-contractual service free of charge (Art. 6 Sect. 1 lit. b, f GDPR). We do not disclose the data to any third party.
Parkings reservation: You can reserve your parking space online on our website. We process the personal data you have given us (name and contact data, details of parking request, if necessary, car registration number) only to fulfill our contractual duties (Art. 6 Sect. 1 lit. b GDPR). Alongside your confirmation of reservation and the accompanying invoice, you will also receive additional information associated with your actual parking procedure. With the reservation of parking space we cooperate with third-parties which provide us with technical assistance or payment transaction services. These third parties are also contractually obliged to comply with privacy and data protection regulations.
Participating in competitions: On our website you have the opportunity of participating in competitions. In the scope of this, the personal data you submit for taking part in any prize draw (name, e-mail address or any other information provided by you) will solely be processed for this competition (Art. 6 Sect. 1 lit. b) GDPR).
Privacy Policy "Airport Club"
Registration form (also for ITB): You can register for FKB events using an online form. Your personal data (name and contact data) are solely processed to offer you a reservation as a quasi-contractual service free of charge. (Art. 6 Sect. 1 lit. b, f GDPR). We do not disclose the data to any third Party.
Privacy Policy "Applicants"
Information on Data Protection regarding Collection of Employees’ Data
I.	Preliminary marks
In the case of application documents submitted, and other data collected in the application process, which can be personally assigned to you as a job applicant, these personal data are protected in accordance with Art. 4 No. 1 of the EU-General Data Protection Regulation (EU-GDPR).
The collection and processing of your personal data is solely effected by our company in compliance with the data protection requirements. Under the applicable data protection law, your personal data may only be collected, stored, published or used (Data Processing, Art. 4 No. 2 EU-GDPR) if this is expressly permitted or mandated by law, or if you have given your express consent (Art. 6 Sect. 1 p. 2 a) in conjunction with Art. 7 EU-GDPR). Processing of your personal data is, in particular, permitted if this is required for the decision as regards an employment relationship or for the establishment or termination of an employment relationship (§ 26 Sect. 1 of the German Federal Data Protection Act (BDSG), Art. 6 Sect. 1 p. 2 b) EU-GDPR).
The same shall apply insofar as data processing is required to safeguard justified interests of the organisation responsible for purposes other than the employment relationship, and there is no reason to believe that your legitimate interest as the person involved outweighs the exclusion of processing or usage (Art. 6 Sect. 1 p. 2 f) EU-GDPR).
Pursuant to Art. 4 No. 7 EU-GDPR, the organisation responsible for the data processing in the course of an job application procedure is our company,
Flughafen Köln/Bonn GmbH, Heinrich-Steinmann-Str. 12, 51147 Cologne.
You can contact our data protection officers at any time regarding privacy-related aspects. Contact information is available on our website at the following address (https://www.koeln-bonn-airport.de/serviceseiten/datenschutz.html).
II.	Data protection rights
As regards your processed personal data, you have various rights and entitlements vis-à-vis the responsible authority. In compliance with § 34 German Federal Data Protection Act, Art. 15 EU-GDPR, you have the right to information on the data stored in relation to your person and to their origin, the recipients or categories of recipients to whom these data are disclosed, and the purpose of the storage.
Moreover, in compliance with § 35 German Federal Data Protection Act, Art. 15 - 18 EU-GDPR, you also may have the right to rectification, blocking or deletion of your personal data. Pursuant to § 36 German Federal Data Protection Act, Art. 21 EU-GDPR, you can at any time disagree to the processing of personal data related to your person. Pursuant to Art. 20 EU-GDPR, you can also demand that the data be transferred to another responsible organisation.
Lastly, in compliance with Art. 77 EU-GDPR, you have the right to lodge a complaint with the appropriate data protection authority.
III.	Application for an advertised Position
In order to include you in application procedures for a specific position, we require the customary and informative application documents which inform us of your personal profile and qualifications. As a matter of principle, we only use your application documents for making the decision on filling the position you have specifically applied for. For information purposes, in the course of the application procedure further personal data can be collected from you personally, from generally accessible sources, or from previous employers and training supervisors. The legal basis of data processing is Art. 6 Sect. 1 p. 2 b) EU-GDPR, § 26 Sect. 1 German Federal Data Protection Act. If the application procedure does not result in recruitment, we will, as a matter of course, delete and destroy your application data, as soon as a period of six months has elapsed after a definitive refusal has been made on your part or on the part of our company.
If the application procedures results in recruitment, we will, insofar as required on the basis of Art. 6 Sect. 1 p. 2 b) EU-GDPR, § 26 Sect. 1 German Federal Data Protection Act, include your application documents in your personnel file to establish the employment relationship and gain information on your personal profile and qualifications. This will apply regardless of whether or not you have revoked your given consent at a later stage. In such a case, your application documents will not be deleted and destroyed until your employment relationship has been terminated and a period of three years following the end of the year of termination has elapsed.
IV.	Unsolicited applications
If you submit an unsolicited application which does not apply to one specific position, we can use your application documents within the scope of making recruitment decisions on all potential positions. For this purpose, we may make your application data available to selected decision-makers for automatic searches for recruitment purposes. As soon as your application documents are included in a recruitment procedure, further personal data can be collected from you personally, from generally accessible sources or from previous employers and training supervisors, to provide us with more specific information on your personal profile and your qualifications. After a period of one year has elapsed, we will, as a matter of course, delete and destroy your application data, however, not before in the case of all application procedures, in which your application documents were involved, a period of six months has elapsed after a definitive refusal has been made on your part or on the part of our company.
Privacy Policy "B2B"
Information on Data Protection for Business Customers
The collection and processing of your personal data is solely effected by our company in compliance with the data protection requirements, in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). Therefore, your personal data may only be collected, stored, published or used if this is expressly permitted or mandated by law, or if you have given your express consent.
Responsibility and contact partner
The responsible organisation (Art. 4 No.7 GDPR) for the processing of your personal data is: Flughafen Köln/Bonn GmbH, Heinrich-Steinmann-Straße 12, 51147 Cologne. Any queries regarding data protection can be directed at any time to our data protection officer at info.dsbkoeln-bonn-airport.de.
Overview of relevant data processing procedures
We only process your personal data insofar as it is (1) necessary for fulfilling contracts (Art. 6 Sect. 1 p. 1 b) GDPR), or (2) the data processing is required for safeguarding the legitimate interests of the company, and there is no reason to believe that your legitimate interest as the person involved outweighs the exclusion of processing or usage (Art. 6 Sect. 1 p. 1 f) GDPR), or (3) there is a legal obligation that requires personal data be justifiably processed (Art. 6 Sect. 1 p. 1 c) GDPR), or (4) you have given explicit consent to the respective processing (Art. 6 Sect. 1 p. 1 a) GDPR).
Processing master and contact data: We process your business contact data (address, e-mail address, telephone and fax numbers) to fulfil our contractual obligations vis-à-vis you and/or the company you are employed by (Art. 6 Sect. 1 p. 1 b) GDPR).
Processing to maintain business relationships: We process your business contact data (address, e-mail address, telephone and fax numbers) to establish business contacts and maintain business relationships. This is in our legitimate interest (Art. 6 Sect. 1 p. 1 f).
Processing in business documents: We also process your personal data if these are included in business correspondence, e-mails or other documents which we require to process contracts with your company (Art. 6 Sect. 1 p. 1 b) GDPR).
Data processing for reasons of Airport safety and security: In compliance with the Aviation Security Act, we are legally obliged to only allow access to security areas after the correct application for a day and/or security pass has been made. In the application procedure the personal data submitted by you (name, master and contact data, reason for access, the employing company, other details [last places of residence and work]) are solely processed for carrying out the application procedure. These data will also be disclosed to the responsible district government.
In the course of our business communication we can make available data on our server for download. For this purpose, you will receive a link per e-mail. Using a personal and secure access, we will process your name, e-mail address, IP address and access time exclusively for the proper provision of the data. This data processing is in our preponderant justified interest in accordance with (Art. 6 Sect. 1 Clause 1 lit. f) of the General Data Protection Regulation (GDPR).
On our website, you have the possibility of booking appointments with our registration office online, for instance to apply for an airport security pass or to collect such a pass. The personal data you give us (name, e-mail address, date of appointment) will only be processed to render the services we are obliged to provide or on the basis of our legitimate interest (Art. 6 Section 1 lit. b, f GDPR). In order to provide this reservation portal, we cooperate with an external processor we have carefully selected and bound by contract to comply with statutory requirements pursuant to Art. 28 GDPR to ensure the protection of your personal data.
Our cooperation with third-party companies/enterprises
We also benefit from the advantages of a collaborative society and business world. In the data processing sector this means that not all data processing procedures are carried out in-house, but we also cooperate with external service providers:
External (IT-) service providers, who, as processors, we have obligated to process data strictly to our guidelines and instructions and fully protect these data on both a technical and organizational basis.
External (IT-) service providers, who work for us in their own responsibility and are contractually obligated to fully protect data on both a technical and organizational basis.
Disclosure to other third parties
The personal data collected can also be transmitted to responsible authorities and courts of law, as well as to lawyers, auditors, tax consultants, management consultants and similar service providers with a particular position of trust and likewise committed to confidentiality. Disclosure of your personal data to a third party will only take place insofar as it is necessary to fulfil the given purposes and in compliance with data protection laws pursuant to Art. 6 GDPR, § 26 Sect. 1 German Federal Data Protection Act.
Storage and deletion of your data
We delete your personal data when the above mentioned purposes no longer apply, or if consent has been revoked, the legal obligation period to retain data has elapsed and we have no legitimate interest in continuing to store the data.
Your data protection rights and entitlements
Insofar as we process your personal data, you have various rights and entitlements vis-à-vis our company. You have the right to
demand information on the data stored in relation to your person and to their origin, the processing purpose, recipients or categories of recipients to whom these data are disclosed and the purpose of the storage (Art. 15 GDPR, § 34 German Federal Data Protection Act ),
under certain conditions, demand rectification, blocking or deletion of your personal data by us (Art. 16 - 18 GDPR, § 35 German Federal Data Protection Act ),
demand that the data be transferred to another responsibility organisation (Art. 20 GDPR) and
lodge a complaint with us or the appropriate data protection organisation (Art. 77 GDPR).
You can also object to the further processing of your data, if we are processing your data for the purpose of a legitimate interest (Art. 6 Sect. 1 p. 1 f) GDPR). Since we do not process your data for advertising purposes this will require a special reason. In the case of an objection we will, upon receipt of the same and during the subsequent verification, no longer process your personal data and after the verification – in the case of a justified objection – delete the data (§ 36 German Federal Data Protection Act , Art. 21 GDPR).
Consent to data processing (Art. 6 Sect. 1 p. 1 a) GDPR) conveyed to us can at any time be revoked; in such a case we shall no longer process your personal data, unless legal permission for this is in place.
A justified objection and revocation shall have no impact on data processing operation already effected.
We shall fulfil all your rights without delay and free of charge.
Contact Data Protection Representative