1. Data Controller
Daniel Kofler Thal-Aue 95 9911 Assling, Austria Phone: +43 676 7293888 Email: info@gleitschirm-tandemflug.com
2. Overview
Protecting your personal data is important to us. This website sets analytics cookies only with your explicit consent. Without consent, no analytics and no tracking take place. Beyond that, personal data is only collected when you actively submit it through a form or the chat.
3. Legal Basis for Processing
We process personal data based on the following legal grounds under the GDPR: • Art. 6(1)(a) – Consent (e.g. use of the AI chatbot) • Art. 6(1)(b) – Performance of a contract (e.g. booking requests, voucher orders) • Art. 6(1)(f) – Legitimate interest (e.g. website security)
4. Contact Form, Booking Requests & Voucher Orders
When you submit a booking request or voucher order through our form, the following data is collected: name, email address, phone number, and the information you provide (e.g. preferred date, package, notes). This data is used solely to process your request and is forwarded to the operator as a notification via the Telegram Bot API. No data is stored in a database. Data is deleted after your request has been processed. Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
5. AI Chatbot
Our website offers an AI-powered chatbot. When you use the chat, your messages are forwarded via OpenRouter to OpenAI (model: GPT-4o-mini) for processing. Server location: USA. The transfer is based on Standard Contractual Clauses (Art. 46(2)(c) GDPR). Your messages are not permanently stored. Legal basis: Art. 6(1)(a) GDPR (consent through use of the chat).
6. Google Maps
This website uses an embedded map from Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When the map is loaded, your IP address is transmitted to Google. Google's privacy policy: https://policies.google.com/privacy Legal basis: Art. 6(1)(f) GDPR (legitimate interest in displaying our locations).
7. Instagram (Meta)
We retrieve publicly available content (Reels) via the Meta Graph API server-side and display it on our website. No client-side data transfer to Meta takes place – your browser does not communicate directly with Instagram servers. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
8. Hosting
This website is hosted by Netlify, Inc. (512 2nd Street, Floor 2, San Francisco, CA 94107, USA). With each page view, technically necessary data such as IP address, browser type, and timestamp is transmitted. The transfer to the USA is based on Standard Contractual Clauses, which form part of Netlify's data processing agreement: https://www.netlify.com/pdf/netlify-dpa.pdf Netlify's privacy policy: https://www.netlify.com/privacy/ Legal basis: Art. 6(1)(f) GDPR (legitimate interest in stable website operation).
9. Cookies & Tracking
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics sets cookies and records which pages you visit, how long you stay and which source you arrived from. Your IP address is truncated. The legal basis is solely your consent under Art. 6(1)(a) GDPR in conjunction with section 165(3) of the Austrian Telecommunications Act 2021. As long as you do not consent in the banner, Google Analytics is not loaded, no cookies are set and no data is transferred to Google. You may withdraw your consent at any time with effect for the future. To do so, clear this site's data in your browser settings; the banner will then ask again on your next visit. Google may also transfer data to the USA. Google Ireland Limited relies on the EU-US Data Privacy Framework and on standard contractual clauses. Further information: https://policies.google.com/privacy Advertising pixels (such as Meta Pixel) are not used on this website.
10. SSL Encryption
This website uses HTTPS encryption (SSL/TLS) for secure data transmission between your browser and our server.
11. Your Rights
Under the GDPR, you have the following rights: • Right of access (Art. 15) • Right to rectification (Art. 16) • Right to erasure (Art. 17) • Right to restriction of processing (Art. 18) • Right to data portability (Art. 20) • Right to object (Art. 21) Contact us at: info@gleitschirm-tandemflug.com
12. Right to Lodge a Complaint
You have the right to lodge a complaint with the competent data protection authority: Austrian Data Protection Authority Barichgasse 40–42 1030 Vienna, Austria https://www.dsb.gv.at
13. Changes
We reserve the right to update this privacy policy as needed to reflect changes in legal requirements or our services.