Privacy notice

Information about the processing of your personal data on our website

The following information provides an overview of what happens to your personal data when you visit our website. Personal data is any information that can be used to identify you personally.

Who is responsible for data processing on this website (the controller)?

The controller within the meaning of the General Data Protection Regulation (GDPR) is

Reflex Winkelmann GmbH
Gersteinstrasse 19
59227 Ahlen, Germany

Email: datenschutz@aviatics.de
Website: https://www.reflex-winkelmann.com

You will find additional information about our corporate group and the persons authorised to represent us as well as other ways to contact us in the legal disclosures on this website.

https://www.reflex-winkelmann.com/special-pages/impressum

How do we collect your data?

On the one hand, your data is collected when you give it to us. This can include data which you enter on a contact form. Alternatively, you can use the email address shown on the site to contact us. If you contact us via one of these channels, the personal data you give us will automatically be stored. The user’s data may be stored in a Customer Relationship Management System ("CRM System") or a comparable enquiry system. It is stored for the sole purpose of processing or contacting you.

Other data is automatically collected by our IT systems when you visit our website. This is mainly technical data (for example, your browser, operating system or the time you viewed the page). This data is collected automatically as soon as you access our website.

On some of our pages, you can register to use additional functions on that page. We will only use the data you enter there for purposes of using the relevant offer or service which you have registered for. The required data requested when you register must be entered in full. Otherwise we will reject the registration.

If any important changes are made, for example, in the scope of the offer or any changes that are necessary for technical reasons, we will use the email address provided during registration to notify you.

What data do we collect?

  • Information about the type of browser and the version used

  • The user’s operating system

  • The user’s internet service provider

  • The user’s IP address

  • Date and time of access

  • Websites that referred the user’s system to our website (referrer)

  • Websites that are accessed by the user’s system from our website

  • Your details via the contact form or registration, such as surname, first name, email address and postal address

  • Cookies

For what purpose and on what lawful basis do we process your data?

Data entered when you register or use the contact form is processed on the basis of your consent in accordance with Article 6 (1) a of the GDPR (General Data Protection Regulation).

Furthermore, we process your data on the basis of your consent in accordance with Article 6 (1) a of the GDPR (General Data Protection Regulation) for certain purposes, in particular:

  • For sending newsletters with regular offers

  • For receipt of specific information and offers

  • For market research and customer surveys

  • For personalised use of the website and personalised offers

  • For analytical purposes for the optimisation of our service for you

  • For processing cookies subject to consent

You can withdraw any consent you have given at any time by sending us an informal message by email. The lawfulness of data processing already carried out will not be affected by the withdrawal of consent.

The lawful basis of the processing of personal data required for performing a contract to which you are a party is set out in Article 6 (1) b of the GDPR. This also applies to processing operations which are required to conduct pre-contractual measures.

Insofar as processing of personal data is required for compliance with a legal obligation to which our company is subject, the lawful basis is set out in Article 6 (1) c of the GDPR.

If processing is necessary for the purposes of the legitimate interests pursued by our company or a third party and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject, Article 6 (1) f of the GDPR provides the lawful basis for the processing. The legitimate interest of our company is the conduct of our business activities.

Is data transferred to third parties?

We transfer personal data to third parties solely if and when this is necessary during contract processing, for example to the bank which has been instructed to process payments.

The lawful basis of this processing is Article 6 (1) b of the GDPR, which permits the processing of data for the performance of a contract or for pre-contractual measures.

When cookies and tools are used for marketing purposes, personal data is transferred to the relevant providers. This transfer is based on your consent in accordance with Article 6 (1) a of the GDPR.

Transfers to third countries

Insofar as we process data in a third country (i.e. outside of the European Union (EU) or the European Economic Area (EEA)) or this occurs as part of the use of third-party services or the disclosure or transfer of data to third parties, we do so solely to the extent necessary for the fulfilment of our (pre-)contractual obligations, on the basis of your consent, in compliance with a legal obligation or in the pursuit of our legitimate interests. To the extent allowed by law or contract, we process data, or cause data to be processed, in a third country solely if and when the specific conditions set out in Art. 44 et seq. of the GDPR are applied. i.e. the processing is carried out (for example) on the basis of special guarantees or compliance with officially recognised special contractual obligations (so-called “standard contractual clauses“).

How long do we process your data for?

We only process your personal data for as long as this is necessary to achieve the purpose of the storage. Storage of data may continue beyond this time insofar as required by provisions adopted by European or national legislatures in EU regulations, laws or other legal statutes to which we are subject.

As soon as the purpose of storage has lapsed or a storage period prescribed by the aforementioned regulations expires, the personal data is routinely blocked or erased.

The data collected during registration will be stored by us for as long as you are registered on our website and will then be deleted. This statement is without prejudice to statutory retention periods.

What rights do you have regarding your data?

Withdrawal of your consent to data processing

Many data processing operations are possible solely with your express consent. You may withdraw any previously given consent at any time by sending us an informal message by email. The lawfulness of data processing carried out prior to the withdrawal of consent will not be affected by the withdrawal.

Your right to object

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Article 6 (1) e or f of the GDPR, including profiling based on those provisions.

The controller will no longer process the personal data concerning you unless the controller can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

Access, rectification, restriction and erasure

You have the right under the applicable statutory provisions to obtain at any time and free of charge information about your personal data that is stored, its origin and recipients, the purpose of the data processing and if applicable, a right to rectification, restriction or erasure of this data. You may contact us at any time by using the provided address to exercise these rights and to submit additional questions on the subject of personal data.

Right to data portability

You have the right to request the provision of any data that we process by automated means on the basis of your consent or in performance of a contract to you or to third parties in a commonly used, machine-readable format. Insofar as you request the direct transfer of the data to another controller, the data will be transferred solely insofar as technically feasible.

Furthermore, you have the right to lodge a complaint with a supervisory authority.

Please refer to the following link for a list of supervisory authorities and their contact details: https://www.bfdi.bund.de/DE/Service/Anschriften/anschriften_node.html
The following supervisory authority has jurisdiction over the controller:

State Officer for Data Protection and Freedom of Information of North Rhine-Westphalia

Postfach 20 04 44
40102 Düsseldorf, Germany

Kavalleriestrasse 2–4
40213 Düsseldorf, Germany

Phone: 02 11/384 24–0
Fax: 02 11/384 24-10
Email: poststelle@ldi.nrw.de

Our data protection officer

We have appointed a data protection officer at our company - the Winkelmann Group, all affiliated companies and the sales and production sites. You can contact the officer at the following address:

AVIATICS Cost & Safety Management GmbH & Co. KG
Kieshecker Weg 148
40468 Düsseldorf
Germany

Email: datenschutz@aviatics.de

Newsletter

Below we inform you about the content of our newsletter, the sign-up, sending and statistical analysis processes as well as your rights to object. By subscribing to our newsletter you give your consent to receiving it and to the described processes.

Content of the newsletter: We only send newsletters, emails and other electronic messages containing advertising information (hereinafter: Newsletter) with the consent of the recipient or lawful permission. If when signing up for the Newsletter its contents are described in concrete terms, they shall be authoritative for the user's consent. Apart from this, our Newsletters contain information about us and our services.

Sign-up details: All you need to give us when signing up for the Newsletter is your email address. We ask you to give us a name optionally for the purpose of personally addressing the Newsletter.

We have instructed a service provider who is a specialist in the field to send the Newsletter and carry out the associated performance measurement. We have concluded a data processing agreement with this service provider (APSIS). The possibility of the external service provider instructing subcontractors and affiliated companies in third countries to process the data cannot be ruled out.

The sending of the Newsletter and associated performance measurement are carried out on the basis of the recipient’s consent in accordance with Article 6 (1) a, Article 7 of the GDPR in conjunction with Section 7 (2) no. 3 of the German Protection against Unfair Competition Act (UWG) or if no consent is necessary, on the basis of our legitimate interests in direct marketing in accordance with Article 6 (1) f of the GDPR in conjunction with Section 7 (3) of the UWG.

The recording of the sign-up process is based on our legitimate interests in accordance with Article 6 (1) f of the GDPR. Our interest is focused on the implementation of a user-friendly and secure newsletter system, which serves our business interests as well as meeting the users’ expectations and furthermore, allows us to prove consents.

Cancellation/withdrawal - you may unsubscribe from our Newsletter at any time, i.e. withdraw your consents. You can find a link to unsubscribe from the Newsletter at the end of every Newsletter. We may store the email addresses you signed up with for up to three years on the basis of our legitimate interests before we erase them, in order to be able to prove that consent was given previously. The processing of this data is limited to the purpose of a possible defence against claims. A personal request for deletion is possible at any time, provided the prior existence of consent is confirmed at the same time.

Cookies and integration of external online services

Some of the website pages use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies help us to make our sites more user friendly, more effective and more secure. Cookies are small text files which are placed on your computer and saved by your browser.

Among the cookies that we use are so-called session cookies. They are erased automatically at the end of your browser session. Other cookies remain on your device until you erase them. These cookies enable us to recognise your browser whenever you return to our site.

You can set your browser to notify you whenever cookies are set and allow cookies solely in specific cases; preclude the acceptance of cookies for certain cases or in general; and activate the automatic erasure of cookies when the browser is closed. The disabling of certain cookies may restrict the available functions on our website.

Cookies that are required to carry out the electronic communication process or to provide certain functions you request are stored on the basis of Article 6 (1) f of the GDPR. We have a legitimate interest in the placement of cookies to ensure optimised provision of our services free of any technical errors. Insofar as other cookies (e.g. cookies for the analysis of your browsing behaviour) are stored, they are processed solely on the basis of your consent in accordance with Article 6 (1) a of the GDPR.

Session and persistent cookies are fully preserved during any type of navigation on the internet (including the use of links) and can therefore be read by any website that you subsequently visit. Session cookies are not erased until the browser is closed; persistent cookies are not erased until their lifetime has expired.

If you have given your consent and wish to withdraw it, you can do so at any time in the browser settings.

IP anonymisation

We have enabled the IP anonymisation function on this website. As a result, your IP address is truncated by Google within the Member States of the European Union or in other contracting parties to the Agreement on the European Economic Area before being transferred to the USA. The full IP address is only transferred to a Google server in the USA and truncated there in exceptional cases.

Google will use this information on behalf of the site’s operator to analyse your use of the website, compile reports on website activities and render additional services associated with website usage and internet usage for the website operator. The IP address transferred by your browser in the context of Google Analytics will not be combined with other Google data.

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called cookies, text files that are stored on your computer and enable an analysis of your use of the website. As a rule, the information regarding your use of this website generated by the cookie is transferred to a Google server in the USA and stored there.

Google Analytics cookies are stored on the basis of your consent pursuant to Article 6 (1) a of the GDPR.

Additional information about the terms and conditions of use and privacy can be found at http://www.google.com/analytics/terms/de.html and https://www.google.de/intl/de/policies/.

Browser plugin

Moreover, you can prevent the capture of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by deactivating Google Analytics. To do so, download and install the plugin for your web browser. It will set an optout cookie that prevents the collection of your data during future visits to this website: https://tools.google.com/dlpage/gaoptout?hl=de.

Order processing

We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic characteristics

This website uses the “demographic characteristics” function of Google Analytics. It can create reports containing statements about the age, gender and interests of the site visitors. This data is obtained from interest-based marketing from Google and visitor data from third-party providers. Such data cannot be attributed to a specific individual. You can deactivate this function at any time via the Ad Settings in your Google account or generally prohibit the collection of your data by Google Analytics as described under “Objection to data collection”.

Google Maps

This site uses the Google Maps service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps it is necessary to store your IP address. As a rule, this information is transferred to a Google server in the USA and stored there.

The provider of this site does not have any influence over this data transfer.

The use of Google Maps is in the interest of an attractive display of our online services and makes it easy to find the places we mention on our website. It is a legitimate interest within the meaning of Article 6 (1) f of the GDPR.

You can find more information about the handling of user data in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/.

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our websites. The provider is Google, Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

The reCAPTCHA function is used to determine whether the data entered on our websites (e.g. in a contact form) comes from a human being or an automated program. To do so, reCAPTCHA analyses the behaviour of the website visitor according to various characteristics. The analysis begins automatically as soon as the website visitor accesses the website. reCAPTCHA evaluates various information (e.g. IP address, time the website visitor remains on the website or the user’s mouse movements) for the analysis. The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run completely in the background. Website visitors are not notified that an analysis is taking place.

This data processing is based on Article 6 (1) f of the GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated spying and from spam.

For more information on Google reCAPTCHA and Google’s privacy policy, please click on the following links: https://www.gooqle.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/about/.

YouTube

Our website uses plugins from the YouTube site, which is operated by Google. The operator of the sites is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

If you visit one of our pages which has a YouTube plugin, a connection to the YouTube servers is established. At the same time, the YouTube server is informed which of our pages you have visited.

If you are logged into your YouTube account, you are allowing YouTube to assign your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

The use of YouTube is in the interest of an attractive display of our online services. It is a legitimate interest within the meaning of Article 6 (1) f of the GDPR.

You can find more information about the handling of user data in YouTube’s privacy policy: https://www.google.de/intl/de/policies/privacy and https://www.youtube.com/intl/ALL_de/howyoutubeworks/user-settings/privacy/#your-data-in-youtube.

Adobe Web Fonts

We use external fonts from the provider Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland on the basis of our legitimate interests (i.e. interests in the analysis, optimisation and efficient operation of our online service within the meaning of Article 6 (1) f of the GDPR) for the standardised display of fonts. Adobe Fonts is a service which enables access to a font library on the servers in the USA for use in desktop applications and websites. In the process, Adobe collects information about the fonts provided, the account ID, the application requesting the fonts, the server providing the fonts and the host name of the website which the fonts are loaded onto. It is not clear whether Adobe also receives access to the IP address or other personal data. However, it is clear that there is no adequate level of data protection for the data transfer to the USA so this data processing is based on your consent according to Article 6 (1) a of the GDPR. You can find more information about the handling of user data in Adobe’s privacy policy: https://www.adobe.com/de/privacy/policy.html

Xing

Functions and content from the Xing service, provided by XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany, may be embedded within our online offering. This may include content such as images, videos or text and buttons, for example, with which the user can share content from this online offering within Xing. If users are members of the Xing platform, Xing can assign the access to the aforementioned content and functions to the user's profile there. Information about how the provider handles personal data can be found here: https://www.xing.com/app/share?op=data_protection.

LinkedIn

Functions and content from the LinkedIn service, provided by LinkedIn Ireland Unlimited Company, Attn: Legal Dept. (Privacy Policy and User Agreement), Wilton Plaza, Wilton Place, Dublin 2, Ireland, may be embedded within our online offering. This may include content such as images, videos or text and buttons, for example, with which the user can share content from this online offering within LinkedIn. If users are members of the LinkedIn platform, LinkedIn can assign the access to the aforementioned content and functions to the user's profile there.

Information about how the provider handles personal data can be found here: https://de.linkedin.com/legal/privacy-policy?trk=d_org_guest_company_overview_footer-privacy-policy