Flightbook.at

Privacy Policy of Flightbook.at

Dear User,
We appreciate your interest in Flightbook.at, the platform for model pilots and model aircraft clubs. We take the protection of your personal data very seriously and are committed to handling it in accordance with the provisions of the General Data Protection Regulation (GDPR).

1. Data Controller

For questions regarding the collection, processing, or use of your personal data, for information, correction, blocking, or deletion of data, as well as revocation of granted consents, please contact the data protection officer in writing:

RA Mag. Markus Spani
Citobit Software GmbH
Friedrich-Knauergasse 1-3/11/8, 1100 Wien, AUSTRIA
office@citobit.at

2. Collection, Processing, and Use of Your Data

We use the data you provide to fulfill the platform-related services. This data is used exclusively for managing your account and providing the functions of our platform.

If you separately subscribe to the newsletter, your email address will be used for our own advertising purposes until you unsubscribe from the newsletter. Unsubscribing is possible at any time by clicking the "Unsubscribe" link at the end of a newsletter.

Upon completion of the premium membership, the additional personal data you provide, which is necessary for payment processing, will be collected. The processing of this data is carried out to manage the premium access and to improve our offer.

Your data will only be passed on to third parties if this is necessary for the fulfillment of our contractual obligations or required by legal regulations. This particularly concerns the transfer of your data to model aircraft clubs registered with Flightbook.at for the purpose of member administration. For payment processing for premium access, we use the payment service provider Stripe. Stripe is a US company that enables online payments worldwide. When using Stripe, some of your personal data is transmitted to and processed by Stripe. Stripe is committed to complying with European data protection regulations and is certified under the EU-US Privacy Shield. The Privacy Shield is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when processing personal data in the USA.

The personal data collected by Stripe may include:

Stripe uses this data exclusively for processing payments and for fraud and abuse prevention. Stripe does not pass this data on to third parties unless required by law or necessary for payment processing. Your data is stored and processed by Stripe on secure servers in the USA. Stripe has implemented appropriate technical and organizational measures to protect your data against unauthorized access and loss. Further information on Stripe's privacy policy can be found on the Stripe website.

3. Storage Duration

Your data will only be stored for as long as necessary to fulfill the purposes mentioned above or as required by law. Your data will be deleted if you withdraw your consent or if your data is no longer required for the purpose.

4. Your Rights as a Data Subject

You have the right to access information about the data we store about you, as well as the right to correct, delete, and restrict the processing of this data. You also have the right to withdraw your consent to the processing of your data at any time.

5. Data Security

We take appropriate technical and organizational measures to protect your data against loss, destruction, unauthorized access, or unauthorized modification.

6. Use of Cookies

Provided you have given your consent, this website uses Google Analytics, a web analytics service provided by Google LLC ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States.

However, if IP anonymization is activated on this website, your IP address will be truncated by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.

We point out that on this website Google Analytics has been extended by IP anonymization to ensure an anonymized collection of IP addresses (so-called IP masking). The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Further information on terms of use and data protection can be found at https://www.google.com/analytics/terms/us.html or at https://policies.google.com/?hl=en. The legal basis for the use of Google Analytics is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

7. Marketplace and AI Features

When you use the Flightbook.at Marketplace, we process the data you provide in your listing (e.g. title, description, photos, price and location details such as postcode and town) for the purpose of publishing your offer. Listings are publicly visible – including to non-registered visitors. Your name is only displayed in shortened form (first name and abbreviated surname); your email address is not published.

Messages you exchange with other users via the Marketplace messaging feature are stored on our servers in order to provide you with the conversation history. We notify you of new messages by email to the address stored in your account. Messages can only be viewed by the participants of the conversation; the operator will only access them where there are concrete indications of misuse or where required by law.

For the AI-powered assistance features of the Marketplace (e.g. description suggestions and price estimates) we use the OpenAI service. Only the listing data required for the respective function (e.g. model name, technical specifications, condition) is transmitted to OpenAI – no account or contact data. Data is only transmitted when you actively invoke an AI feature. OpenAI processes this data in accordance with its own privacy policy; according to OpenAI, data transmitted via the API is not used to train its models. The legal basis is your consent given by actively using the feature (Art. 6(1)(a) GDPR).

8. Contact

If you have questions about the processing of your data or wish to exercise your rights as a data subject, you can contact us at any time.

Sincerely,
Your Flightbook.at Team!