Privacy Policy

This privacy policy explains how flyvbird GmbH processes personal data when you visit our website, make booking enquiries or communicate with us. We process personal data exclusively in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the TTDSG.

1. Controller

flyvbird GmbH
Wolfschlugenerstrasse 7
70597 Stuttgart
Germany

E-mail: [email protected]
Phone: +49 711 3608 7603

2. Categories of processed data

Technical and usage data — collected automatically when the website is accessed: IP address (shortened/anonymised where possible), date and time of access, browser type and version, operating system and device type, referrer URL, pages visited, session data. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in security and functionality).

Communication data — when you contact us: name, e-mail address, telephone number, message content. Legal basis: Art. 6 (1) (b) and (f) GDPR.

Booking and flight data — for enquiries via our booking platform: passenger names, contact and booking data, destinations, times, routes, billing data as well as travel documents where legally required. Legal basis: Art. 6 (1) (b) GDPR and aviation law obligations.

Marketing and analytics data — only with consent: cookie-based analyses, newsletter data, booking-engine tracking, behaviour on the website. Legal basis: Art. 6 (1) (a) GDPR.

3. Purposes of data processing

We process data in order to provide and optimise the website, to handle booking enquiries, to organise on-demand flights and charter services, to fulfil legal aviation requirements, to ensure security and fraud prevention, to enable customer communication, and to carry out marketing and analytics purposes (only with consent).

4. Legal bases at a glance

• Consent: Art. 6 (1) (a) GDPR
• Performance of a contract: Art. 6 (1) (b) GDPR
• Legal obligations: Art. 6 (1) (c) GDPR
• Legitimate interest: Art. 6 (1) (f) GDPR

5. Cookies and tracking technologies

Essential cookies are set without consent and are necessary for the basic functions of the website.

Analytics and marketing cookies are only active if you actively consent. Consent can be withdrawn at any time with effect for the future.

6. Disclosure of data

We only disclose data where this is necessary for the provision of our services or due to legal obligations.

Operational partners in aviation: flight operators and AOC partners, airports and ground handlers, payment service providers.

IT and technology providers: hosting providers, booking-system partners, analytics providers (only with consent).

Legal obligations: authorities, supervisory bodies, courts. No disclosure to unauthorised third parties takes place.

7. International data transfers

Data transfers outside the EU only take place on the basis of standard contractual clauses, adequacy decisions or the required additional measures.

8. Retention periods

Contract and booking data

10 years

Communication data

up to 3 years

Log files

up to 12 months

Marketing data

until consent is withdrawn

9. Your rights as a data subject

Under the GDPR you have the right to information, rectification, erasure, restriction of processing, data portability, objection to processing as well as the right to withdraw consent that has been given.

Please direct requests to: [email protected]

You also have the right to lodge a complaint with the supervisory authority: The State Commissioner for Data Protection Baden-Württemberg.

10. Data security

We use modern technical and organisational measures, including SSL/TLS encryption, access controls, secure EU servers and regular security reviews.

11. Web analytics with Cloudflare Web Analytics

On this website we use Cloudflare Web Analytics, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare”), in order to statistically evaluate the use of our website and improve our offering.

Cloudflare Web Analytics works without cookies: no cookies are set and no information is stored on or read from your end device. There is no cross-website tracking and no creation of user profiles. Only aggregated metrics are recorded, such as pages accessed, referrer URL, approximate origin (country), browser type, operating system and device type. The IP address is processed for evaluation but is not stored permanently and is not used to identify individual persons.

The legal basis is our legitimate interest in a statistically sound, needs-based design of our website pursuant to Art. 6 (1) (f) GDPR. As the service works without cookies and does not create personal profiles, no consent is required for this.

When using Cloudflare services, data may be transferred to the USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework; in addition, the EU standard contractual clauses exist as appropriate safeguards pursuant to Art. 46 GDPR. Further information: https://www.cloudflare.com/privacypolicy/

12. Newsletter distribution with Brevo

For sending our newsletter we use Brevo, a service of Brevo SAS, 106 boulevard Haussmann, 75008 Paris, France. When you subscribe, the data you provide (e-mail address, and where applicable first and last name) is transmitted to Brevo and processed there on our behalf (processing on behalf pursuant to Art. 28 GDPR). We use the double opt-in procedure for registration. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR, which you can withdraw at any time with effect for the future (unsubscribe link in every newsletter e-mail). Further information: https://www.brevo.com/de/legal/privacypolicy/

13. Form on a time-limited campaign page (HubSpot)

On a time-limited campaign page we use a form provided by the service HubSpot of HubSpot, Inc., 2 Canal Park, Cambridge, MA 02141, USA. When the form is submitted, the entered data is transmitted to HubSpot and processed on our behalf; a transfer to the USA may take place. HubSpot is certified under the EU-U.S. Data Privacy Framework; in addition, the EU standard contractual clauses exist as appropriate safeguards pursuant to Art. 46 GDPR. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR. Further information: https://legal.hubspot.com/privacy-policy

14. Contact form

If you send us an enquiry via the contact form, we process the data you provide (name, e-mail address, telephone number where applicable, type of enquiry and your message) in order to process your request. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) or our legitimate interest in responding pursuant to Art. 6 (1) (f) GDPR. For sending we use Brevo as a processor. The data is deleted as soon as the request has been finally dealt with and no retention obligations conflict with this.

15. Cloudflare Turnstile

To protect our contact form against spam and abusive use, we use Cloudflare Turnstile (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). Turnstile checks whether an entry is made by a human and processes technical information for this purpose (including IP address, browser/device information), without cookies usable for advertising. The legal basis is our legitimate interest in security and abuse prevention pursuant to Art. 6 (1) (f) GDPR. In doing so, data may be transferred to the USA; Cloudflare is certified under the EU-U.S. Data Privacy Framework, in addition the EU standard contractual clauses exist. Further information: https://www.cloudflare.com/privacypolicy/

16. Managing cookies

Cookies are small files that store device-related information on your access device. They serve user-friendliness as well as the statistical recording of website usage. You can restrict or completely prevent the use of cookies via your browser settings. Please note that this may limit the functionality of the website.

17. Changes to this privacy policy

This policy may be updated. The version applicable at the time appears on this page.

Last updated: January 2025 · Basis: flyvini.com/de/privacy-policy