Privacy Policy

Privacy Policy and information for data subjects according to Art. 13, 14 GDPR

The protection of your personal data is an important concern for Flughafen Köln/Bonn GmbH (hereinafter referred to as 'Flughafen Köln/Bonn GmbH' or FKB). The collection and processing of your personal data by our company therefore takes place exclusively within the framework of data protection regulations. On this page we inform you in accordance with Art. 13 of the General Data Protection Regulation (GDPR) about the collection and processing of your personal data.

Responsible for data processing is Flughafen Köln/Bonn GmbH, Heinrich-Steinmann-Str. 12, 51147 Cologne, represented by the Managing Directors Thilo Schmid (Chairman) and Torsten Schrank. You can contact the data protection officer of the FKB here.

When operating our website, we work together with external service providers that we have carefully selected and committed to comply with data protection law by concluding a contract for data processing in accordance with Art. 28 EU-GDPR.

When visiting this website and using its functionalities, we process your personal data as follows:

1. Server Log Files

If you visit our website, we collect what are known as server log files. This is access data that we process to ensure system security (e.g. to detect technical errors or automated access by bots). Technically we can trace transmission errors, check the activities of the firewall or perform a search engine optimization.

The following information is recorded in the server log files:

• IP address in anonymous form to determine the location of access and host name
• Time of access and duration of visit
• Previously visited website
• Requested website including the number of pages viewed and the last page opened before leaving the website
• Browser type and version
• Operating system and device type used.

These server log files contain the IP address of the user. This is stored in plain text for a period of three days. This is in our legitimate interest in a technically secure and optimized web offer (legal basis: Art. 6 I 1 f GDPR). The log files are deleted after three days.

2. Cookies

This website uses cookies. We use cookies to personalize content and ads, to provide social media features, and to analyse traffic to our website. We also share information about your use of our website with our social media, advertising and analytics partners. Our partners may combine this information with other information that you have provided to them or that they have collected as part of your use of the services.

We use different types of cookies. When you visit our website, we ask you explicitly whether you agree to the use of cookies or not. For this purpose, a cookie banner appears on your first visit to our site, which informs you about the use of cookies. When you visit our website, we set technically necessary cookies that enable us to provide our website in a technically optimal way. This is in our overriding legitimate interest (Art. 6 I 1 e, f GDPR). Furthermore, you can select by ticking the box whether you agree to the use of cookies from the categories "Preferences", "Statistics" and "Marketing" (Art. 6 I 1 a GDPR). By clicking on the "Show details" button, you can obtain further information on the cookies used.

You can change or withdraw your consent at any time from the cookie declaration on our website.

2.1 Necessary cookies

If you visit our website, we set technically necessary cookies that enable us to provide our website in a technically optimal way (Art. 6 I 1 e, f GDPR).

2.2 Preferences

Preference cookies allow a website to remember information that affects the way a website behaves or looks, such as your preferred language or the region you are located in.

2.3 Statistics

Statistical cookies help us understand how visitors interact with websites by collecting and reporting information anonymously.

2.4 Marketing

Marketing cookies are used to follow visitors to websites. The intent is to show ads that are relevant and appealing to the individual user and therefore more valuable to publishers and third-party advertisers.

3. Google Analytics

Providing your consent, this website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses what are known as (tracking) cookies. These are text files which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookies about your use of this website is usually transferred to a Google [AB1] server in the USA and stored there.

The storage of Google Analytics cookies and the use of this analysis tool only takes place if you have agreed to this via our cookie banner (legal basis: Article 6 I 1 a EU-GDPR). Specifically, the Google Analytics script is loaded with every page view, but tracking data is only collected and transmitted to Google after you click "Agree". You can revoke your consent at any time using the link below.

IP anonymization: We have activated the IP anonymization function on this website. As a result, your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide further services to the website operator in connection with the use of the website and the internet. The IP address transmitted by your browser within the framework of Google Analytics is not merged with other data from Google. For the exceptional cases in which personal data is transferred to the USA, an adequate level of data protection is ensured.

Withdrawal of your consent: You can prevent your data from being collected by Google Analytics by rejecting this in the Consent Manager the first time you visit our site. The collection of your data will then also be prevented during future visits to this website.

Order processing: We have concluded a contract with Google for order processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Storage duration: The cookies set by Google remain on your terminal device even after you leave our website (for up to 2 years). The use of long-term cookies makes it possible to recognise you when you visit our website again. The recognition is done with these cookies to optimise the content of our website. User and event-level data stored at Google that is linked to cookies, user IDs (e.g. User ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) is anonymised or deleted after 14 months. Details can be found under the following link: https://support.google.com/analytics/answer/7667196?hl=en 

You can find more information on how Google Analytics handles user data in the Google Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=en 

Google Tag Manager is a solution that manages website tags through a single interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect IP addresses/personal information. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation is performed at the domain or cookie level, it will remain in effect for all tracking tags implemented with Google Tag Manager. http://www.google.de/tagmanager/use-policy.html 

4. Social media: Facebook/Twitter/Instagram/YouTube

4.1 Links

On our website, you can click on various social media tools and view our details there or exchange information with other users about our services. These are Facebook, Twitter, Instagram[AB2]  and YouTube. You can recognise these offers by the respective icons.

The links to the social media offers, which you can access via buttons and icons, enable you to share our offer with others. If you click on a link or icon, you will be redirected from our website to the respective third party provider. Then your data will be transmitted to the respective third party provider, in particular the site from which you came. This also applies if you do not have your own account with the respective provider or are not logged in. If you have your own account, the provider will regularly link the information about which page you came from to your account. This is also possible when you are not logged in.

We have no control over what personal data these third parties collect and how they handle it when you use the social media platforms. We are not aware of this either.

Through social media links, we enable you to receive even more attractive offers from us on other channels and to communicate directly with these offers and their users; in addition, you can conveniently share our offers with others in various ways. In this way, we make our website more interesting for you. The embedding of social media offerings is in our overriding, justified corporate interest (Art. 6 I 1 f EU-GDPR). By actively clicking on it, you can decide for yourself whether your personal data will be transferred to the third-party providers. The evaluation of the usage analyses sent to us by Facebook also serves to fulfil our task and is in our overriding, legitimate interest (Art. 6 I 1 e EU-GDPR). The provision of usage data via Facebook is carried out in an anonymised form.

4.2 Usage evaluation

We use the usage evaluations ("page insights") provided by Facebook to continuously improve our Facebook page. This data is only collected by Facebook and transmitted to us if you have a Facebook account and visit our site there.  We are responsible for data processing together with Facebook. We have entered into an agreement with Facebook on this subject, which transparently regulates the sharing of obligations (Art. 26 EU-GDPR; available at www.facebook.com/legal/terms/page_controller_addendum). The main content of this agreement is that Facebook is primarily responsible for visitor data processing and fulfils all relevant obligations of the EU-GDPR in relation to the processing of visitor data (including but not limited to the fulfilment of the rights of the data subject). Below we show you where you can get more information about data processing at Facebook.

Otherwise, we have no influence on what personal data these third-party providers collect and how they handle it.  We are not aware of this either. Please note that some of these providers are located outside the EU and your data is therefore likely to be transferred to third countries for which an adequate level of data protection is not necessarily guaranteed. You can obtain further information on the handling of your data from the respective third-party providers.

4.3 Integration of YouTube videos

You can also watch videos on our website: These are integrated into our online offer, so that you can watch the videos directly on our site. The integration of the videos directly into our site is done by activating the advanced privacy settings of YouTube. When you watch the video, information about you is sent to YouTube, including your IP address and the page from which you came, including information about which video you are viewing. This also applies if you do not have your own account with the respective provider or are not logged in. If you have your own account, YouTube can link this information to your account, even if you are not logged in.

If you watch the video (via our site or on YouTube), your data is transmitted to YouTube, in particular about the site from which you came. This also applies if you do not have your own account with the respective provider or are not logged in.

We have no control over what personal information YouTube collects and how it handles it. We are not aware of this either.

4.4 Further information on the handling of your data

• Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, Privacy Policy: https://de-de.facebook.com/about/privacy/, Cookie Notice: https://de-de.facebook.com/policies/cookies, Privacy Notice: https://www.facebook.com/help/568137493302217, Terms of Use: https://de-de.facebook.com/legal/terms/update
• Additionally, Instagram is also based there: https://help.instagram.com/519522125107875?helpref=page_content
• Twitter, Twitter International Company, Attn: Privacy Policy Inquiry, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 IRELAND. Privacy Policy: https://twitter.com/de/privacy
• Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001, Privacy Policy: http://policies.google.com/privacy
• YouTube: Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Privacy Policy: https://policies.google.com/privacy, Privacy Notice: https://www.youtube.com/intl/de/yt/about/policies/#community-guidelines, Terms of Use: www.youtube.com/t/terms and https://www.youtube.com/t/terms_paidservice 

Please note that the parent companies of the above-mentioned employees are located in the USA. If you use our offers on these platforms, your data will therefore probably be transferred to third countries for which an adequate level of data protection is not necessarily guaranteed. Insofar as personal data is transferred to the USA, an adequate level of data protection is ensured.

5. General contact

At various points on the website you have the opportunity to contact FKB on numerous topics. This applies in particular to specific inquiries or complaints. We process the personal data (name and contact details) and your message exclusively to be able to process your request in the best possible way. This is in our legitimate interest (Art. 6 para. 1 lit. f GDPR). We do not transmit your data to third parties, except if it is absolutely necessary for the processing of your request.

6. Google Maps

We use Google Maps at various points on our website to make our website more usable and attractive for you. When you click on the map from Google Maps, data is transmitted to Google. Google Maps is a service provided by Google Ireland Limited. We have no influence on what data Google collects and how Google handles the data. More on that:

Third party information: Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Privacy Policy: https://policies.google.com/privacy 

Google's parent company is based in the USA, so we cannot safely rule out the possibility that data may be transferred there. However, even in these cases, an adequate level of data protection is ensured.

Map embedding enables FKB to provide the Travis function as well as to make the web offer more attractive and usable overall. It is therefore in our legitimate interest (Art. 6 I 1 f GDPR), especially since the user can decide whether to transfer their data to Google by accessing our offer.

7. Google WebFonts

Our website uses Google WebFonts, a service provided to us by Google, Ireland Limited. This service enables us to provide you with a consistent, visually appealing presentation of our website using the font library obtained through this service. This is done by loading the fonts used on this website through the browser you use and then displaying them.

According to our information, the browser you use for this purpose establishes a connection to the servers of our service provider and information is collected that our website was accessed with the IP address you used. It is possible that your IP address will also be transmitted to the USA. Our service provider ensures an adequate level of data protection.

A uniform and visually attractive design of our website is in our overriding, justified interest (Art. 6 I 1 f EU-GDPR). No user analysis is carried out, nor is a user profile created; your IP address is used exclusively for the targeted transmission of fonts. Furthermore, fonts.google.com records the number of visits to your page ("page views").

Information from the third party provider Google about WebFonts https://fonts.google.com/about 

8. Data security

In order to protect your personal data in the best possible way, we use TLS encryption (https standard) for technical and organisational security measures, which are also adapted to the current state of the art in a risk-appropriate manner.

9. Rights of data subjects

We shall fulfil the rights to which you are entitled immediately and free of charge. Please contact us for this purpose.

As far as personal data are processed which refer to you as a natural person, you are entitled to various data protection claims against us. In accordance with § 34 of the Federal Data Protection Act ("BDSG"), Art. 15 of the GDPR, you have the right to information about the data stored about you and its origin, the recipients or categories of recipients to whom the data is passed on and the purpose of the storage.

In addition, you may be entitled to correction, deletion or restriction (of processing) of your personal data in accordance with § 35 BDSG, Art. 16-18 GDPR.

In addition, you can request the transfer of the data to another responsible body in accordance with Art. 20 EU-GDPR. In the event that the requirements of Art. 20 Para. 1 GDPR are met, you have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to third parties. The collection of data for the provision of the website and the storage of log files are mandatory for the operation of the website. They are therefore not based on consent under Article 6(1)(a) GDPR or on a contract under Article 6(1)(b) GDPR, but are justified under Article 6(1)(f) GDPR, meaning that the conditions of Article 20(1) GDPR are not fulfilled.

You can also object to the further processing of your data if we process your data on the basis of a legitimate interest (Art. 6 I 1 f GDPR); if we do not process your data for advertising purposes, this requires a special reason. In the event of an objection, we will no longer process your personal data from the time of receipt during the examination which will then follow. After the examination has been completed – if the objection is justified – we will delete your data from our active databases and only note in an advertising block file that you do not wish to be contacted by us (§ 36 BDSG, Art. 21 GDPR).

You can revoke any consent you have given us for data processing (Art. 6 I 1 a EU-GDPR) at any time; we will then not process your personal data further and delete it, unless there is legal permission for further processing.

An objection or revocation does not affect the admissibility of data processing in the past.

We shall fulfil the rights to which you are entitled immediately and free of charge. Please contact our data protection officer; the contact details can be found at the beginning of this Privacy Policy.

If you are of the opinion that data processing violates data protection law, you have the right to complain to a data protection supervisory authority of your choice (Section 19 BDSG, Art. 77 GDPR). This also includes the data protection supervisory authority responsible for us, which you can reach at the following contact details:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
PO Box 20 04 44
40102 Düsseldorf
Kavalleriestraße 2-4
40213 Düsseldorf

Tel: +49 (0) 2 11/384 24-0
Fax: +49 (0) 2 11/384 24-10
Email: poststelleldi.nrw.de
Homepage: http://www.ldi.nrw.de 

10. Updates

We will update this Privacy Policy from time to time to adapt it to new developments. If we have the opportunity to contact you, we will notify you of relevant changes.

This Privacy Policy dated: 04/2020