The protection of your personal data is an important concern for Flughafen Köln/Bonn GmbH (hereinafter referred to as 'Flughafen Köln/Bonn GmbH' or FKB). The collection and processing of your personal data by our company therefore takes place exclusively within the framework of data protection regulations. On this page we inform you in accordance with Art. 13 of the General Data Protection Regulation (GDPR) about the collection and processing of your personal data.
Responsible for data processing is Flughafen Köln/Bonn GmbH, Heinrich-Steinmann-Str. 12, 51147 Cologne, represented by the Managing Directors Johan Vanneste (Chairman) and Torsten Schrank. You can contact the data protection officer of the FKB here.
When operating our website, we work together with external service providers that we have carefully selected and committed to comply with data protection law by concluding a contract for data processing in accordance with Art. 28 EU-GDPR.
When visiting this website and using its functionalities, we process your personal data as follows:
1. Server Log Files
If you visit our website, we collect what are known as server log files. This is access data that we process to ensure system security (e.g. to detect technical errors or automated access by bots). Technically we can trace transmission errors, check the activities of the firewall or perform a search engine optimization.
The following information is recorded in the server log files:
- IP address in anonymous form to determine the location of access and host name
- Time of access and duration of visit
- Previously visited website
- Requested website including the number of pages viewed and the last page opened before leaving the website
- Browser type and version
- Operating system and device type used.
These server log files contain the IP address of the user. This is stored in plain text for a period of three days. This is in our legitimate interest in a technically secure and optimized web offer (legal basis: Art. 6 I 1 f GDPR) The IP address will be anonymized after three days, so that personal references can no longer be made. The log files are deleted after 7 days.
You can change or withdraw your consent at any time from the cookie declaration on our website.
2.1 Necessary cookies
If you visit our website, we set technically necessary cookies that enable us to provide our website in a technically optimal way (Art. 6 I 1 e, f GDPR).
Preference cookies allow a website to remember information that affects the way a website behaves or looks, such as your preferred language or the region you are located in.
Statistical cookies help us understand how visitors interact with websites by collecting and reporting information anonymously.
Marketing cookies are used to follow visitors to websites. The intent is to show ads that are relevant and appealing to the individual user and therefore more valuable to publishers and third-party advertisers.
3. Google Analytics
Providing your consent, this website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses what are known as (tracking) cookies. These are text files which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookies about your use of this website is usually transferred to a Google [AB1] server in the USA and stored there.
The storage of Google Analytics cookies and the use of this analysis tool only takes place if you have agreed to this via our cookie banner (legal basis: Article 6 I 1 a EU-GDPR). Specifically, the Google Analytics script is loaded with every page view, but tracking data is only collected and transmitted to Google after you click "Agree". You can revoke your consent at any time using the link below.
IP anonymization: We have activated the IP anonymization function on this website. As a result, your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide further services to the website operator in connection with the use of the website and the internet. The IP address transmitted by your browser within the framework of Google Analytics is not merged with other data from Google. For the exceptional cases in which personal data is transferred to the USA, an adequate level of data protection is ensured.
Withdrawal of your consent: You can prevent your data from being collected by Google Analytics by rejecting this in the Consent Manager the first time you visit our site. The collection of your data will then also be prevented during future visits to this website.
Order processing: We have concluded a contract with Google for order processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Storage duration: The cookies set by Google remain on your terminal device even after you leave our website (for up to 2 years). The use of long-term cookies makes it possible to recognise you when you visit our website again. The recognition is done with these cookies to optimise the content of our website. User and event-level data stored at Google that is linked to cookies, user IDs (e.g. User ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) is anonymised or deleted after 14 months. Details can be found under the following link: support.google.com/analytics/answer/7667196
Google Tag Manager is a solution that manages website tags through a single interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect IP addresses/personal information. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation is performed at the domain or cookie level, it will remain in effect for all tracking tags implemented with Google Tag Manager. www.google.de/tagmanager/use-policy.html
4. Social media: YouTube
4.1 Integration of YouTube videos
You can also watch videos on our website: These are integrated into our online offer, so that you can watch the videos directly on our site. The integration of the videos directly into our site is done by activating the advanced privacy settings of YouTube. When you watch the video, information about you is sent to YouTube, including your IP address and the page from which you came, including information about which video you are viewing. This also applies if you do not have your own account with the respective provider or are not logged in. If you have your own account, YouTube can link this information to your account, even if you are not logged in.
If you watch the video (via our site or on YouTube), your data is transmitted to YouTube, in particular about the site from which you came. This also applies if you do not have your own account with the respective provider or are not logged in.
We have no control over what personal information YouTube collects and how it handles it. We are not aware of this either.
4.2 Further information on the handling of your data
Please note that the parent companies of the above-mentioned employees are located in the USA. If you use our offers on these platforms, your data will therefore probably be transferred to third countries for which an adequate level of data protection is not necessarily guaranteed. Insofar as personal data is transferred to the USA, an adequate level of data protection is ensured.
5. General contact
At various points on the website you have the opportunity to contact FKB on numerous topics. This applies in particular to specific inquiries or complaints. We process the personal data (name and contact details) and your message exclusively to be able to process your request in the best possible way. This is in our legitimate interest (Art. 6 para. 1 lit. f GDPR). We do not transmit your data to third parties, except if it is absolutely necessary for the processing of your request.
6. Data security
In order to protect your personal data in the best possible way, we use TLS encryption (https standard) for technical and organisational security measures, which are also adapted to the current state of the art in a risk-appropriate manner.
7. Rights of data subjects
We shall fulfil the rights to which you are entitled immediately and free of charge. Please contact us for this purpose.
As far as personal data are processed which refer to you as a natural person, you are entitled to various data protection claims against us. In accordance with § 34 of the Federal Data Protection Act ("BDSG"), Art. 15 of the GDPR, you have the right to information about the data stored about you and its origin, the recipients or categories of recipients to whom the data is passed on and the purpose of the storage.
In addition, you may be entitled to correction, deletion or restriction (of processing) of your personal data in accordance with § 35 BDSG, Art. 16-18 GDPR.
In addition, you can request the transfer of the data to another responsible body in accordance with Art. 20 EU-GDPR. In the event that the requirements of Art. 20 Para. 1 GDPR are met, you have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to third parties. The collection of data for the provision of the website and the storage of log files are mandatory for the operation of the website. They are therefore not based on consent under Article 6(1)(a) GDPR or on a contract under Article 6(1)(b) GDPR, but are justified under Article 6(1)(f) GDPR, meaning that the conditions of Article 20(1) GDPR are not fulfilled.
You can also object to the further processing of your data if we process your data on the basis of a legitimate interest (Art. 6 I 1 f GDPR); if we do not process your data for advertising purposes, this requires a special reason. In the event of an objection, we will no longer process your personal data from the time of receipt during the examination which will then follow. After the examination has been completed – if the objection is justified – we will delete your data from our active databases and only note in an advertising block file that you do not wish to be contacted by us (§ 36 BDSG, Art. 21 GDPR).
You can revoke any consent you have given us for data processing (Art. 6 I 1 a EU-GDPR) at any time; we will then not process your personal data further and delete it, unless there is legal permission for further processing.
An objection or revocation does not affect the admissibility of data processing in the past.
If you are of the opinion that data processing violates data protection law, you have the right to complain to a data protection supervisory authority of your choice (Section 19 BDSG, Art. 77 GDPR). This also includes the data protection supervisory authority responsible for us, which you can reach at the following contact details:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
PO Box 20 04 44