Last updated: 19.08.2026

Thank you for visiting our website. Protecting your personal data is important to us. In this Privacy Policy, we inform you about which personal data we process, for what purposes we process it, and what rights you have.

This Privacy Policy applies to the following website:

https://flugplatz-oerlinghausen.de

Controller

The controller responsible for data processing on this website is:

Flugplatzgemeinschaft e.V. Oerlinghausen
Flugplatz / Stukenbrocker Weg 43
33813 Oerlinghausen
Germany

Registered in the register of associations at the Local Court of Lemgo
Registration number: VR 60578

Represented by:
Felix Huttel, Chairman of the Board

Managing Director:
Jan-Philipp Kube

Phone: +49 (5202) 72477
Fax: +49 (5202) 72433
Email: info@flugplatz-oerlinghausen.de

No data protection officer has been appointed.

General information on data processing

We process personal data only to the extent necessary for operating our website, communicating with you, managing memberships, processing enquiries or services, organising flight operations, or fulfilling legal obligations.

Personal data means any information relating to an identified or identifiable person. This includes, for example, name, address, telephone number, email address, membership data, contract data, communication data or technical access data.

We use your personal data only for the purposes described in this Privacy Policy.

Hosting and server log files

Our website is hosted by the following provider:

IOK GmbH & Co. KG
https://www.iok.net

According to our information, the server location is in Germany.

When you access our website, the web server automatically processes technical access data. This may include in particular:

  • IP address
  • date and time of access
  • page or file accessed
  • amount of data transferred
  • referrer URL
  • browser used
  • operating system used
  • HTTP status code
  • requesting provider

This data is processed in order to technically provide the website, ensure the stability and security of its operation, and detect misuse or technical disruptions.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of our website.

The storage period of server log files depends on the technical settings of our hosting provider. If log files are stored, they are kept only for as long as necessary for the purposes stated above.

Members, customers and interested persons

If you are or wish to become a member or customer of our association, we process the personal data required for establishing, carrying out and managing the membership or respective contractual relationship.

This may include in particular:

  • first and last name
  • date of birth
  • gender
  • address
  • if applicable, different registered address
  • telephone number
  • email address
  • membership and contract data
  • if a SEPA direct debit mandate has been issued: bank details

The processing is carried out in particular for the following purposes:

  • administration of membership
  • communication with members, customers and interested persons
  • invitations to general meetings and meetings
  • information about resolutions of the general meeting and the board
  • information for active members about flight operations
  • billing and collection of membership fees and other charges
  • assignment to the correct contribution category
  • organisation and execution of flight operations
  • fulfilment of our obligations as operator of an airfield

The legal basis is Art. 6(1)(b) GDPR, insofar as the processing is necessary for establishing or carrying out a membership or contractual relationship.

Where we process data to fulfil legal obligations, the legal basis is Art. 6(1)(c) GDPR.

Where we process data for the organisation, safety and documentation of association and flight operations, the processing is also based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the proper administration of the association, the organisation of flight operations and the safe performance of our tasks.

Trial flights and vouchers

If you purchase a voucher for a trial flight or make use of a corresponding service, we process the personal data required for this purpose.

This may include in particular:

  • first and last name
  • form of address
  • address
  • telephone number
  • email address
  • details of the requested or booked service
  • payment and billing data, where required

We use this data to process your enquiry, handle the voucher or trial flight, communicate with you, and comply with legal retention obligations.

The legal basis is Art. 6(1)(b) GDPR, insofar as the processing is necessary for initiating or performing a contract.

Where legal retention obligations exist, the legal basis is Art. 6(1)(c) GDPR.

The data will be deleted as soon as it is no longer required for the purposes stated and no legal retention obligations prevent deletion.

Contacting us

If you contact us by email, telephone, contact form or any other means, we process the data you provide in order to handle your enquiry.

This may include in particular:

  • name
  • email address
  • telephone number
  • content of your enquiry
  • time of contact
  • any additional information voluntarily provided by you

The processing is carried out to handle your enquiry and communicate with you.

The legal basis is Art. 6(1)(b) GDPR if your enquiry is related to a contract or pre-contractual measures.

In all other cases, the processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the proper handling of enquiries.

If you voluntarily provide us with particularly sensitive information, the processing is based on your consent pursuant to Art. 6(1)(a) GDPR, unless another legal basis applies.

Forms on the website

We use WordPress plugins for forms on our website, in particular JetFormBuilder.

When you submit a form, the data you enter is processed in order to handle your enquiry, registration or message. Depending on the form, the data may be transmitted by email to the responsible persons and/or stored in WordPress.

The processing is carried out only to the extent necessary for the respective purpose.

The legal basis is Art. 6(1)(b) GDPR, insofar as the processing is necessary for a contract or pre-contractual measures.

Otherwise, the processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the efficient handling of enquiries and the organisation of our activities.

Email communication

Emails are sent via our hosting provider or the technical infrastructure used by us.

When we send you emails, we process in particular your email address, the content of the message and technical sending information.

The processing is carried out for communication with you, handling your concerns, or carrying out existing contractual or membership relationships.

The legal basis is Art. 6(1)(b) GDPR, insofar as the communication is necessary for a contractual or membership relationship.

Otherwise, the processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in proper and reliable communication.

Cookies and similar technologies

Our website uses only technically necessary cookies and similar technologies. These are required to ensure that the website functions reliably, can be operated securely, and that basic functions can be provided.

We do not use analytics, marketing or tracking cookies.

Technically necessary cookies may be used in particular for:

  • operating the website
  • security functions
  • form protection
  • login and administration functions for authorised users
  • storing technical settings, where required

The legal basis for the use of technically necessary cookies and similar technologies is Section 25(2) TDDDG and Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and user-friendly operation of our website.

Cookie and privacy notice

We use the WordPress plugin “Beautiful Cookie Consent Banner” to display a cookie or privacy notice.

Since we do not use analytics, marketing or tracking cookies, this notice is used solely to provide transparent information about technically necessary cookies and services.

Consent to optional cookies is not required, as we do not use such cookies.

If confirmation of the notice is stored technically, this is done only so that the notice is not displayed again on every page view. This storage is technically necessary.

The legal basis is Section 25(2) TDDDG and Art. 6(1)(f) GDPR.

Cloudflare Turnstile

We use Cloudflare Turnstile to protect our forms from spam, misuse and automated access.

Provider:

Cloudflare, Inc.
101 Townsend St.
San Francisco, CA 94107
USA

Turnstile checks whether a form request is likely to originate from a human. In this process, technical data may be processed, for example:

  • IP address
  • browser information
  • device information
  • operating system
  • interaction data
  • technical verification data for detecting automated access

We use Turnstile exclusively to protect our website and forms from spam, misuse and automated attacks.

Where Turnstile is used in a form, this verification may be required in order to submit the form.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in protecting our website, forms and technical systems from misuse, spam and automated attacks.

Where Turnstile stores or reads information on your device, this is carried out on the basis of Section 25(2) TDDDG, as the service is necessary for the secure provision of the forms.

Further information on data processing by Cloudflare can be found in Cloudflare’s Privacy Policy:

https://www.cloudflare.com/privacypolicy

Local fonts

Fonts on our website are embedded locally. When loading fonts, no connection is established to external font provider services, in particular Google Fonts.

External links

Our website may contain links to external third-party websites. When you click such a link, you leave our website.

We have no influence on the data processing carried out by the operators of the linked websites. The respective provider or operator is responsible for the content and data processing on the linked pages.

Please refer to the respective websites for information on how your personal data is handled.

Social media links

Our website may contain links to our profiles or pages on social networks.

As long as you do not click these links, no data is transferred to the respective providers by our website via these simple links.

If you click such a link, the privacy policies of the respective provider apply.

No web analytics, no marketing tracking

We do not use web analytics tools such as Google Analytics, Matomo or comparable services.

We do not use marketing, advertising or retargeting services.

No tracking pixels, social media plugins or comparable marketing technologies are used.

Recipients and access to data

Access to personal data is granted only to persons who require such data for the respective purposes.

This may include in particular:

  • association administration
  • board
  • management
  • responsible employees or authorised representatives
  • technical administrators
  • webmasters
  • accounting, where required

Personal data is passed on to third parties only if this is necessary for the respective purpose, if there is a legal obligation, or if you have given your consent.

Please note that we use technical service providers, in particular our hosting provider. These service providers may have access to personal data in the course of their work, insofar as this is necessary for the operation of the website.

In addition, technical data is processed by Cloudflare in connection with Cloudflare Turnstile. Further information can be found in the section “Cloudflare Turnstile”.

Storage period

We store personal data only for as long as necessary for the respective purposes or as required by legal retention obligations.

Data relating to memberships is stored for the duration of the membership. After the membership ends, the data is deleted unless it is still required or legal retention obligations prevent deletion.

Data relating to contracts, vouchers, trial flights or billing is stored for the duration of contract processing and in accordance with legal retention obligations.

Data from contact enquiries is deleted once the enquiry has been finally processed and no legal retention obligations or legitimate interests require further storage.

Server log files are stored only for as long as necessary for the technical security and operation of the website.

Security of processing

We take technical and organisational measures to protect personal data against loss, misuse, unauthorised access and unauthorised alteration.

Data transmission on our website is encrypted using HTTPS.

Please note that communication by email may generally involve security risks. If you wish to send us particularly sensitive information, we recommend contacting us in advance to agree on a suitable transmission method.

Your rights

Under the GDPR, you have in particular the following rights:

  • right of access to the personal data processed by us
  • right to rectification of inaccurate or incomplete data
  • right to erasure of your data
  • right to restriction of processing
  • right to data portability
  • right to object to processing based on legitimate interests
  • right to withdraw consent with effect for the future
  • right to lodge a complaint with a data protection supervisory authority

If you wish to exercise any of these rights, you can contact us at any time:

Email: info@flugplatz-oerlinghausen.de

Right to object

If we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defence of legal claims.

Withdrawal of consent

If you have given us consent to process personal data, you may withdraw this consent at any time with effect for the future.

The lawfulness of processing carried out before the withdrawal remains unaffected.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.

You may contact, in particular, the supervisory authority responsible for your place of residence or the supervisory authority responsible for us.

No automated decision-making

We do not use your personal data for automated decision-making, including profiling.

Changes to this Privacy Policy

We may update this Privacy Policy if technical, organisational or legal changes occur.

The current version published on our website applies.