Privacy Policy and information for data subjects according to Art. 13, 14 GDPR

The protection of your personal data is an important concern for Flughafen Köln/Bonn GmbH (hereinafter referred to as 'Flughafen Köln/Bonn GmbH' or FKB). The collection and processing of your personal data by our company therefore takes place exclusively within the framework of data protection regulations. On this page we inform you in accordance with Art. 13 of the General Data Protection Regulation (GDPR) about the collection and processing of your personal data.

Responsible for data processing is Flughafen Köln/Bonn GmbH, Heinrich-Steinmann-Str. 12, 51147 Cologne, represented by the Managing Directors Thilo Schmid (Chairman) and Torsten Schrank. You can contact the data protection officer of the FKB here.

When operating our website, we work together with external service providers that we have carefully selected and committed to comply with data protection law by concluding a contract for data processing in accordance with Art. 28 EU-GDPR.

When visiting this website and using its functionalities, we process your personal data as follows:

1. Server Log Files

If you visit our website, we collect what are known as server log files. This is access data that we process to ensure system security (e.g. to detect technical errors or automated access by bots). Technically we can trace transmission errors, check the activities of the firewall or perform a search engine optimization.

The following information is recorded in the server log files:

• IP address in anonymous form to determine the location of access and host name
• Time of access and duration of visit
• Previously visited website
• Requested website including the number of pages viewed and the last page opened before leaving the website
• Browser type and version
• Operating system and device type used.

These server log files contain the IP address of the user. This is stored in plain text for a period of three days. This is in our legitimate interest in a technically secure and optimized web offer (legal basis: Art. 6 I 1 f GDPR) The IP address will be anonymized after three days, so that personal references can no longer be made. The log files are deleted after 7 days.

2. Cookies

This website uses cookies. We use cookies to personalize content and ads, to provide social media features, and to analyse traffic to our website. We also share information about your use of our website with our social media, advertising and analytics partners. Our partners may combine this information with other information that you have provided to them or that they have collected as part of your use of the services.

We use different types of cookies. When you visit our website, we ask you explicitly whether you agree to the use of cookies or not. For this purpose, a cookie banner appears on your first visit to our site, which informs you about the use of cookies. When you visit our website, we set technically necessary cookies that enable us to provide our website in a technically optimal way. This is in our overriding legitimate interest (Art. 6 I 1 e, f GDPR). Furthermore, you can select by ticking the box whether you agree to the use of cookies from the categories "Preferences", "Statistics" and "Marketing" (Art. 6 I 1 a GDPR). By clicking on the "Show details" button, you can obtain further information on the cookies used.

You can change or withdraw your consent at any time from the cookie declaration on our website.

2.1 Necessary cookies

If you visit our website, we set technically necessary cookies that enable us to provide our website in a technically optimal way (Art. 6 I 1 e, f GDPR).

2.2 Preferences

Preference cookies allow a website to remember information that affects the way a website behaves or looks, such as your preferred language or the region you are located in.

2.3 Statistics

Statistical cookies help us understand how visitors interact with websites by collecting and reporting information anonymously.

2.4 Marketing

Marketing cookies are used to follow visitors to websites. The intent is to show ads that are relevant and appealing to the individual user and therefore more valuable to publishers and third-party advertisers.

3. Google Analytics

Providing your consent, this website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses what are known as (tracking) cookies. These are text files which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookies about your use of this website is usually transferred to a Google [AB1] server in the USA and stored there.

The storage of Google Analytics cookies and the use of this analysis tool only takes place if you have agreed to this via our cookie banner (legal basis: Article 6 I 1 a EU-GDPR). Specifically, the Google Analytics script is loaded with every page view, but tracking data is only collected and transmitted to Google after you click "Agree". You can revoke your consent at any time using the link below.

IP anonymization: We have activated the IP anonymization function on this website. As a result, your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide further services to the website operator in connection with the use of the website and the internet. The IP address transmitted by your browser within the framework of Google Analytics is not merged with other data from Google. For the exceptional cases in which personal data is transferred to the USA, an adequate level of data protection is ensured.

Withdrawal of your consent: You can prevent your data from being collected by Google Analytics by rejecting this in the Consent Manager the first time you visit our site. The collection of your data will then also be prevented during future visits to this website.

Order processing: We have concluded a contract with Google for order processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Storage duration: The cookies set by Google remain on your terminal device even after you leave our website (for up to 2 years). The use of long-term cookies makes it possible to recognise you when you visit our website again. The recognition is done with these cookies to optimise the content of our website. User and event-level data stored at Google that is linked to cookies, user IDs (e.g. User ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) is anonymised or deleted after 14 months. Details can be found under the following link: support.google.com/analytics/answer/7667196

You can find more information on how Google Analytics handles user data in the Google Privacy Policy: support.google.com/analytics/answer/6004245

Google Tag Manager is a solution that manages website tags through a single interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect IP addresses/personal information. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation is performed at the domain or cookie level, it will remain in effect for all tracking tags implemented with Google Tag Manager. www.google.de/tagmanager/use-policy.html

4. Social media: YouTube

4.1 Integration of YouTube videos

You can also watch videos on our website: These are integrated into our online offer, so that you can watch the videos directly on our site. The integration of the videos directly into our site is done by activating the advanced privacy settings of YouTube. When you watch the video, information about you is sent to YouTube, including your IP address and the page from which you came, including information about which video you are viewing. This also applies if you do not have your own account with the respective provider or are not logged in. If you have your own account, YouTube can link this information to your account, even if you are not logged in.

If you watch the video (via our site or on YouTube), your data is transmitted to YouTube, in particular about the site from which you came. This also applies if you do not have your own account with the respective provider or are not logged in.

We have no control over what personal information YouTube collects and how it handles it. We are not aware of this either.

4.2 Further information on the handling of your data

YouTube: Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Privacy Policy: policies.google.com/privacy, Privacy Notice: www.youtube.com/intl/de/yt/about/policies/, Terms of Use: www.youtube.com/t/terms and www.youtube.com/t/terms_paidservice 

Please note that the parent companies of the above-mentioned employees are located in the USA. If you use our offers on these platforms, your data will therefore probably be transferred to third countries for which an adequate level of data protection is not necessarily guaranteed. Insofar as personal data is transferred to the USA, an adequate level of data protection is ensured.

5. General contact

At various points on the website you have the opportunity to contact FKB on numerous topics. This applies in particular to specific inquiries or complaints. We process the personal data (name and contact details) and your message exclusively to be able to process your request in the best possible way. This is in our legitimate interest (Art. 6 para. 1 lit. f GDPR). We do not transmit your data to third parties, except if it is absolutely necessary for the processing of your request.

6. Data security

In order to protect your personal data in the best possible way, we use TLS encryption (https standard) for technical and organisational security measures, which are also adapted to the current state of the art in a risk-appropriate manner.

7. Rights of data subjects

We shall fulfil the rights to which you are entitled immediately and free of charge. Please contact us for this purpose.

As far as personal data are processed which refer to you as a natural person, you are entitled to various data protection claims against us. In accordance with § 34 of the Federal Data Protection Act ("BDSG"), Art. 15 of the GDPR, you have the right to information about the data stored about you and its origin, the recipients or categories of recipients to whom the data is passed on and the purpose of the storage.

In addition, you may be entitled to correction, deletion or restriction (of processing) of your personal data in accordance with § 35 BDSG, Art. 16-18 GDPR.

In addition, you can request the transfer of the data to another responsible body in accordance with Art. 20 EU-GDPR. In the event that the requirements of Art. 20 Para. 1 GDPR are met, you have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to third parties. The collection of data for the provision of the website and the storage of log files are mandatory for the operation of the website. They are therefore not based on consent under Article 6(1)(a) GDPR or on a contract under Article 6(1)(b) GDPR, but are justified under Article 6(1)(f) GDPR, meaning that the conditions of Article 20(1) GDPR are not fulfilled.

You can also object to the further processing of your data if we process your data on the basis of a legitimate interest (Art. 6 I 1 f GDPR); if we do not process your data for advertising purposes, this requires a special reason. In the event of an objection, we will no longer process your personal data from the time of receipt during the examination which will then follow. After the examination has been completed – if the objection is justified – we will delete your data from our active databases and only note in an advertising block file that you do not wish to be contacted by us (§ 36 BDSG, Art. 21 GDPR).

You can revoke any consent you have given us for data processing (Art. 6 I 1 a EU-GDPR) at any time; we will then not process your personal data further and delete it, unless there is legal permission for further processing.

An objection or revocation does not affect the admissibility of data processing in the past.

We shall fulfil the rights to which you are entitled immediately and free of charge. Please contact our data protection officer; the contact details can be found at the beginning of this Privacy Policy.

If you are of the opinion that data processing violates data protection law, you have the right to complain to a data protection supervisory authority of your choice (Section 19 BDSG, Art. 77 GDPR). This also includes the data protection supervisory authority responsible for us, which you can reach at the following contact details:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
PO Box 20 04 44
40102 Düsseldorf
Kavalleriestraße 2-4
40213 Düsseldorf
Germany

Tel: +49 (0) 2 11/384 24-0
Fax: +49 (0) 2 11/384 24-10
Email: poststelle@ldi.nrw.de
Homepage: http://www.ldi.nrw.de

8. Updates

We will update this Privacy Policy from time to time to adapt it to new developments. If we have the opportunity to contact you, we will notify you of relevant changes.

This Privacy Policy dated: 04/2020

Information about Access to this Website by Akamai Technologies Inc.

This website uses distribution, security and analysis services from Akamai Technologies, Inc. (“Akamai”). These services use “cookies”, text files, “beacons”, browser interfaces that generate log files to enable Akamai (i) to deliver the website quickly, reliably and securely, (ii) conduct analyses of the performance of the website and the associated user experience, (iii) conduct security analyses and (iv) prevent illegal access to the website, and (v) create reports on (i) to (iv) for its clients. The log files that are generated may contain personal data in the form of (IP address, activities on the website and evaluations of your use of the website). Akamai may pass these data on to third parties if Akamai is required to do so for legal reasons or if third parties process these data on behalf of Akamai. Akamai can transfer, store and process the data on its servers. The Akamai servers are mainly in the USA. Akamai shall ensure that the transfer of personal data of EU citizens outside the European Economic Area complies with the requirements of the relevant data protection legislation. To do this, Akamai has implemented legally recognised transfer mechanisms, including the EU-US and Switzerland-US Privacy Shield Program Certification and EU Standard Contract Clauses. Akamai shall not use the data to identify natural persons or to profile natural persons.

By using the website, you are consenting to data processing by Akamai for the above-mentioned purpose and in the ways described above.

More information on the usage conditions when personal data are being processed by Akamai and the data protection guidelines concerning Akamai can be found at https://www.akamai.com/de/de/privacy-policies/.