Privacy Statement

Thank you for visiting our website www.flughafen-stuttgart.de / www.stuttgart-airport.com and for your interest in our company. We process your personal data exclusively within the scope of the legal data protection regulations, in particular the General Data Protection Regulation (GDPR) and the Bundesdatenschutzgesetz (Federal Data Protection Act, new BDSG).

In the following, we would therefore like to inform you about the processing (e.g. collection, storage, transfer) of personal data when using our website. Pursuant to Art. 4 (1) GDPR, the General Data Protection Regulation defines personal data as

"any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person."

.

 

.

I Name and address of the controllers

Flughafen Stuttgart GmbH
Flughafenstraße 32
D-70629 Stuttgart
Germany

PO Box 23 04 61
D-70624 Stuttgart
Germany

Telefon: +49 711 948-0
Telefax: +49 711 948-2241
E-Mail: info@stuttgart-airport.com

Legal representatives:
Management:

Walter Schoefer
Dr. rer. pol. Arina Freitag

II Name and address of the company’s Data Protection Officer

You can contact Flughafen Stuttgart GmbH's Data Protection Officer either by using a postal service or e-mail.

By postal service:
Herr Martin Stadelmaier
Flughafen Stuttgart GmbH
Flughafenstraße 32
70629 Stuttgart
Germany

By e-mail:
DSB@stuttgart-airport.com

III General information on data processing

  1. Scope of processing of personal data

    As a matter of principle, the processing of our users' personal data only takes place

    • insofar as this is necessary for the provision of a functional website and for the presentation of the relevant contents
    • and/or insofar as we, as the controllers, have obtained the user's consent, pursuant to Art. 6 Para. 1 lit. a GDPR
    • and/or insofar as the processing of personal data is permitted by law (Art. 6 Para. 1 lit. b - f GDPR).
  2. Legal basis for the processing of personal data

    Art. 6 Para. 1 lit. a GDPR serves as the legal basis insofar as we obtain the data subject’s consent for the processing of personal data.

    Art. 6 Para. 1 lit. b GDPR serves as the legal basis for the processing of personal data required for the performance of a contract to which the data subject is a party. This also applies to processing operations that are necessary for performing pre-contractual measures.

    Art. 6 Para. 1 lit. c GDPR serves as the legal basis insofar as the processing of personal data is required to fulfil a legal obligation to which Flughafen Stuttgart GmbH is subject.

    Art. 6 Para. 1 lit. f GDPR serves as the legal basis for processing if this is necessary to protect a legitimate interest of Flughafen Stuttgart GmbH or a third party.

  3. Recipients or categories of recipients to whom the data may be transferred

    • Courts, authorities or other state bodies, insofar as a legal obligation exists
    • External bodies, insofar as this is necessary to fulfil the purposes stated in each case
    • External contractors within the framework of the provisions of Art. 28 GDPR
    • Other cooperation partners whose participation is necessary to provide the service
  4. Period of storage, erasure

    Personal data are only stored for as long as this is necessary to achieve the purposes stated in each case or pursuant to the legally stipulated retention periods.

IV Collection and storage of personal data by Flughafen Stuttgart GmbH and the type and purpose of its use

  1. Visit to the website www.stuttgart-airport-media.com


    If you merely use our website www.stuttgart-airport-media.com for information purposes (only viewing and reading), i.e. if you do not contact us (for example via a contact form) and do not submit any other information to us, we only collect the personal data that are transferred automatically or that your browser - depending on the terminal device and configuration of the client - transfers to our server.

    This information is temporarily stored in a so-called log file. In this case, only data collected by our system are recorded. The following data are collected:

    • IP address,
    • date and time of access,
    • name and URL of the requested page,
    • website from which access is made (so-called referrer URL),
    • information about the browser type and version used,
    • operating system and its interface,
    • language and version of the browser software,
    • Internet service provider of the user.

    Art. 6 Para. 1 lit. f GDPR constitutes the legal basis for the temporary storage of these data and the log files. The data are stored in log files to ensure the website’s functionality and, in the event of any errors or problems in the network, to carry out an adequate analysis and thus ensure the security of our information technology systems. These data are not evaluated for other purposes. Pursuant to Art. 13 Para. 1 lit. d GDPR, we are herewith informing you as a user that this is in our legitimate interests.

    The log files and thus also the data stored in them are erased after 14 days. The log files are not saved beyond this period.

  2. Use of cookies


    Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. If a user calls up a website, cookies can be stored on the user's operating system. The stored cookies contain a characteristic string that enables a unique identification of the browser when the website is visited again.

    We use two types of cookies on our website: technically necessary cookies and technically unnecessary cookies.

    • Technically necessary cookies
      Technically necessary cookies are those used to make our website more user-friendly. Some elements of our website require that the visitor’s browser can be identified even after a page change. Without these cookies, we are unable to provide you with certain functionalities of our website, such as the language settings of our website.

    • Technically unnecessary cookies
      Additionally, we also use cookies on our website that are not technically necessary and enable an analysis of the user's surfing behaviour, such as determining the frequency of page views, or the use of website functions (see also Section 3 of this Data Protection Declaration).

    In the case of cookies, Art. 6 Para. 1 lit. f GDPR constitutes the legal basis for the processing of personal data.

    The purpose of using technically necessary cookies is to simplify the use of our website for the user. Some functions of our website cannot be offered without the use of cookies. These are functions that require the browser to be recognised even after a page change. Adopting the selected language setting is one example of this.

    The purpose of using technically unnecessary analysis cookies is to improve the quality of our website and its contents. Through the analysis cookies, we learn how the website is used and can thereby continuously improve the functionalities and contents of our website.

    Pursuant to Art. 13 para. 1 lit. d GDPR, we are herewith informing you as a user that this is in our legitimate interests.

    Most browsers automatically accept cookies. The cookies are then stored on the user's terminal device and transferred to us by the user. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transfer of cookies by changing the settings in your Internet browser. Cookies that have already been stored can be erased at any time. However, the complete deactivation of cookies may cause you to be unable to use all functions of our website to the full extent.

  3. Use of Google services (Google Analytics)

    1. Google Analytics

      Our website uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics also uses "cookies", which are text files placed on your computer, to help analyse your website-using behaviour. The information generated by the cookie about your use of this website is usually transferred to a Google server in the US and stored there. The IP address transferred by your browser in the context of Google Analytics is not merged with other Google data. Our website uses Google Analytics with the extension "_anonymizeIp()". This shortens the IP addresses for further processing. Only in exceptional cases, the full IP address is transferred to a Google server in the US and shortened there. On our behalf, Google uses this information to evaluate your use of the website, to compile reports on website activities and to provide us with other services relating to the use of the website and the Internet.

      Art. 6 Para. 1 lit. f GDPR constitutes the legal basis for the processing of personal data, as well as an agreement on processing within the meaning of Art. 28 GDPR. We use Google Analytics to analyse and regularly improve the use of our website. Using theses analyses, we can improve our offer and make it more interesting for you. Pursuant to Art. 13 Para. 1 lit. d GDPR, we are herewith informing you as a user that this is in our legitimate interests.

      As a user, you can at any time erase cookies that have already been set by Google Analytics in your Internet browser. The personal data that Google Analytics collects is erased or made anonymous after 14 months.

      You may refuse the use of cookies by selecting the appropriate settings in your browser; however, please note that if you do this, you may not be able to use the full functionality of our website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from Google’s processing of these data by downloading and installing the browser plug-in available at the following link:
      http://tools.google.com/dlpage/gaoptout?hl=de

      Google is certified according to the Privacy Shield Framework and thus offers a safeguard to comply with European data protection law and thus the GDPR.

      More information can be found here:
      https://www.privacyshield.gov/participant?id=a2zt000000001L5AAl&status=active
      https://www.privacyshield.gov/EU-US-Framework

      Terms of use of Google Analytics:
      http://www.google.com/analytics/terms/de.html

      Overview of data protection:
      http://www.google.com/intl/de/analytics/learn/privacy.html

      Data protection declaration:
      http://www.google.de/intl/de/policies/privacy

      You can find a more detailed explanation of Google Analytics at:
      https://www.google.com/intl/de_de/analytics

V Rights of the data subject

Within the meaning of the GDPR, you are a data subject if we process your personal data. Therefore, you have rights vis-à-vis Flughafen Stuttgart GmbH as the controller. If you wish to exercise such a right, please contact:

Flughafen Stuttgart GmbH
Flughafenstraße 32
70629 Stuttgart
Germany

E-Mail: Betroffenenrechte@stuttgart-airport.com

You are entitled to the following rights:

  1. Right to access, pursuant to Art. 15 GDPR

    Pursuant to Art. 15 GDPR, you have the right to access information on your personal data processed by us. In particular, you may access information on the purposes for the processing, the category of personal data, the categories of recipients to whom your data have been or will be transferred, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of lodging a complaint, the origin of your data, if these have not been collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on their details.

    You also are entitled to the right to access information as to whether your personal data is being transferred to a third country or to an international organisation. In this context and pursuant to Art. 46 GDPR, you may request to be informed of the appropriate safeguards in connection with the transfer.

  2. Right to rectification, pursuant to Art. 16 GDPR

    Vis-à-vis us as data controller and in accordance with Article 16 of the GDPR, you are entitled to the right to rectify and/or complete your personal data if the personal data relating to you and being processed is incorrect or incomplete. We, as controllers, must make this rectification without delay.

  3. Right to erasure (“Right to be forgotten”), pursuant to Art. 17 GDPR

    Pursuant to Art. 17 Para. 1 GDPR, you are entitled to the right to request the erasure of your personal data stored with us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims (cf. Art. 17 Para. 3 GDPR).

    If we, as controller, have made the personal data relating to you public and we are obliged to erase this personal data pursuant to Art. 17 Para. 1 GDPR, we will take appropriate measures, including technical measures (taking into account the available technology and the costs for implementation) to inform other data processors who process the personal data that you, as data subject, have requested the erasure of all links to these personal data or of copies or replications of these personal data.

  4. Right to restriction of processing, pursuant to Art. 18 GDPR

    Pursuant to Article 18 GDPR, you are entitled to the right to demand the restriction of the processing of your personal data if you dispute the accuracy of the data, the processing is unlawful but you reject their erasure and we no longer need the data, but you need them to assert, exercise or defend any legal claims or you have filed an objection against the processing pursuant to Article 21 GDPR.

  5. Right to data portability, pursuant to Art. 20 GDPR

    Pursuant to Art. 20 GDPR, you are entitled to the right to receive the personal data you have provided us with in a structured, common and machine-readable format or to request the transfer to another controller.

  6. Right to object, pursuant to Art. 21 GDPR

    On the basis of Article 6(1)(e) or (f) of the GDPR, you are entitled to the right to object at any time to the processing of personal data concerning you for reasons arising from your particular situation.

    As controllers, we then no longer process the personal data relating to you unless we can prove that there are compelling reasons worthy of protection for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend any legal claims. If the personal data relating to you are processed for direct marketing purposes, you have the right to object to the processing at any time. If you object to the processing for direct marketing purposes, the personal data concerning you is no longer processed for these purposes.

  7. Right to withdraw your consent for the data protection declaration, pursuant to Art. 7 Para. 3 GDPR

    You are entitled to the right to withdraw your consent for this Data Protection Declaration at any time. The withdrawal of consent shall not affect the legality of the processing carried out on the basis of the consent until withdrawal.

  8. Automated individual decision-making, including profiling, pursuant to Art. 22 GDPR

    You are entitled to the right not to be subject to a decision based exclusively on automated processing - including profiling - that has any legal effect against you or significantly impairs you in any similar manner.

  9. Right to lodge a complaint with a supervisory authority, pursuant to Art. 77 GDPR

    You are entitled to the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of your place of residence, workplace or our company headquarters.

    The supervisory authority responsible for Flughafen Stuttgart GmbH is:

    Der Landesbeauftragte für den Datenschutz und die Informationssicherheit
    PO Box 10 29 32
    70025 Stuttgart
    Germany

    Telefon: 0711/615541-0
    Fax: 0711/615541-15
    E-Mail: Poststelle@lfdi.bwl.de

VI Data security

We use SSL (Secure Socket Layer) encryption with 256-bit encryption on our website. You can recognise the encryption of our website and its individual areas by the lock or key symbol in the lower status bar of your browser.

Within the meaning of Art. 32 GDPR, we principally use suitable technical and organisational measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are constantly developed and improved in accordance with technical progress and technical development.

VII Queries

If you have any questions regarding the processing of your personal data by us or your rights as a data subject, you can contact our Data Protection Officer at any time. Also, if you have any suggestions or other information on the subject of data protection, you can contact our Data Protection Officer at any time. You will find the contact details in II. of this Data Protection Declaration.

VIII Status of this Data Protection Declaration

This Data Protection Declaration is currently valid and dated 25 May 2018.