This policy explains which personal data we process on this website, why, and on what legal basis. In short: we use no analytics or advertising services, no third-party content is loaded while you read, and we only set cookies that are technically necessary.
This policy covers the website www.apron-pilot.com. The apron:pilot application at app.apron-pilot.com has its own privacy terms.
1. Controller
apron:pilot Aviation Software e.U.
Owner: David Josef Ornigg, M.Sc.
Rosenberggürtel 39, 8010 Graz, Austria
Email for privacy questions: dataprivacy@apron-pilot.com
2. Visiting the website and hosting
The website is hosted by World4You Internet Services GmbH, Hafenstraße 47–51, 4020 Linz, Austria. When you open a page, your browser transmits data for technical reasons, which the server stores in log files:
- IP address
- date and time of access
- page requested and the previous page (referrer)
- browser, operating system and language setting
We need this data to deliver the website, find errors and fend off attacks. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). World4You processes the data as our processor. We do not use the log files for statistics or combine them with other data.
Fonts and all other files of the website are served from our own server. No data is transferred to third parties while you read the website.
3. Contact form and email
When you write to us via the contact form or by email, we process the details you give us: name, email address, topic and message, and optionally organisation and type of operation.
We only use the data to answer your request. If it concerns using apron:pilot, the legal basis is taking steps prior to entering into a contract (Art. 6(1)(b) GDPR); otherwise it is our legitimate interest in answering requests (Art. 6(1)(f) GDPR).
Messages from the form are delivered to our mailbox by the email service Brevo (Sendinblue SAS (Brevo), 106 boulevard Haussmann, 75008 Paris, France). Brevo acts as our processor.
We keep requests for six months after they have been dealt with. If a contract results or statutory retention periods require more, we keep them accordingly longer.
4. Spam protection with Cloudflare Turnstile
To keep bots from abusing the contact and newsletter forms, we use Cloudflare Turnstile (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA).
Turnstile is only loaded once you select a field in one of the forms. Cloudflare then processes your IP address and characteristics of your browser and device to check whether a human is filling in the form. For this, Turnstile stores a check value in your browser’s local storage. We only receive the result of this check.
The legal basis is our legitimate interest in protection against spam and abuse (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework, so transfers to the USA are covered by an adequacy decision of the European Commission (Art. 45 GDPR). More in Cloudflare’s privacy policy: www.cloudflare.com/privacypolicy/
5. Newsletter
When you subscribe to our newsletter, we process your email address, optionally your name, and the language you signed up in. The newsletter covers new features and important updates three to four times a year.
Sign-up uses double opt-in: you receive an email with a confirmation link, and only then are you added to the list. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time via the unsubscribe link in every newsletter or by email to dataprivacy@apron-pilot.com. Withdrawal does not affect the lawfulness of processing up to that point.
For sign-up and delivery we use Brevo (Sendinblue SAS (Brevo), 106 boulevard Haussmann, 75008 Paris, France) as our processor. Brevo stores the time and IP address of sign-up and confirmation as proof of your consent, and records whether a newsletter was delivered and opened and which links were clicked.
After you unsubscribe, we remove you from the mailing list. Your email address is only kept blocked so that you receive no further newsletters.
6. Cookies
While you read, we store nothing in your browser. The only things necessary are the check value of Cloudflare Turnstile once you fill in a form (see section 4) and, for logged-in editors, the WordPress login cookies. We do not use cookies for statistics, marketing or advertising. We therefore need no consent and show no cookie banner (Section 165(3) of the Austrian Telecommunications Act 2021). Details are in the cookie policy.
7. Your rights
You have the right to:
- access the data we hold about you (Art. 15 GDPR)
- rectification (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- object to processing based on legitimate interests (Art. 21 GDPR)
- withdraw consent with effect for the future (Art. 7(3) GDPR)
To exercise them, write to dataprivacy@apron-pilot.com. If you believe we process your data unlawfully, you can lodge a complaint with the Austrian Data Protection Authority (Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at/).