Privacy policy

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Phone

+49 2403 97110330

Email

mail@knabe-gmbh.de

If you have questions about data protection on this website, the easiest way to reach us is mail@fly-k.com.

This website runs on a server that we operate ourselves. It is located in a data centre in Germany operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Hetzner provides the infrastructure and acts as our processor under Art. 28 GDPR.

When you visit the website, your browser sends data to our server without which the site cannot be delivered:

• your IP address,
• the date and time of the request,
• the address (URL) requested,
• the identifier of your browser and operating system (user agent),
• your browser’s preferred language – so that we can show you the matching language version.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to provide the website securely and reliably. The connection is encrypted using TLS.

Server logs

Our web server is configured not to write permanent access logs. We therefore process the data listed above only for as long as it takes to deliver the page. If a technical error occurs, an entry may be written to the error log, and it may contain your IP address. These entries are kept in the server's system log, which continuously overwrites itself (older entries are deleted automatically once the space reserved for the log is used up). We use them solely to fix faults.

Through the waitlist we let you know by email when Fly-K becomes available and send you news about Fly-K. Signing up is voluntary; without your email address, however, we cannot notify you.

Sign-up with confirmation (double opt-in)

After you sign up, we send you an email with a confirmation link. You are only on the waitlist once you have confirmed your sign-up through that link. This makes sure nobody can enter someone else’s address. The confirmation link is valid for 48 hours. We automatically delete unconfirmed sign-ups after 7 days; the clean-up runs once a day.

What we store

• your email address,
• the language in which you signed up,
• the time and IP address of your sign-up and of your confirmation,
• the version of the consent text you agreed to,
• the status of your sign-up (unconfirmed or confirmed),
• technical helper data: a random internal identifier, checksums (hashes) of the confirmation and unsubscribe links, the expiry time of the confirmation link, and the time of the last email we sent you.

We store the time, IP address and text version so that we can prove your consent.

Legal basis

The legal basis is your consent (Art. 6(1)(a) GDPR). We process the proof-of-consent data because we must be able to demonstrate your consent (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR) and also have a legitimate interest in doing so (Art. 6(1)(f) GDPR).

Withdrawal and deletion

You can withdraw your consent at any time with effect for the future: via the unsubscribe link included in every email we send, or informally by email to mail@fly-k.com. When you unsubscribe, we delete your record completely. If you do not unsubscribe, we keep your data for as long as we run the waitlist. Processing carried out before your withdrawal remains lawful.

No disclosure

We do not pass waitlist data on to third parties and do not use a newsletter service provider. The waitlist is kept in a database on our own server (section 2); we send the emails through our own mailbox (section 4). Our emails contain no tracking pixels and no link tracking.

Protection against abuse

To prevent abuse of the sign-up form and of the confirmation and unsubscribe pages, we limit the number of attempts per IP address. For this purpose the server holds your IP address in memory only; it is removed from there no later than 20 minutes after your last attempt. It is not stored permanently in the process. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is to protect the waitlist against abuse.

To send our emails and to run our mailbox mail@fly-k.com, we use Strato GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. In doing so, Strato processes your email address as well as the content and connection data of the respective message – as a processor under Art. 28 GDPR on our behalf.

When you send us an email, we process your email address, your name if you provide it, and the content of your message in order to deal with your request. The legal basis is Art. 6(1)(b) GDPR where your request concerns a contract or pre-contractual questions, and otherwise Art. 6(1)(f) GDPR; our legitimate interest is to answer enquiries. We delete your message once your request has been dealt with and no statutory retention obligations prevent deletion.

This website uses a single cookie: NEXT_LOCALE. It remembers the language you chose so that your next page view does not drop you back into the other language version. The cookie contains only the language code (“de” or “en”). It is only set if the language you chose differs from your browser’s preferred language, and it is deleted as soon as you close your browser (session cookie).

The cookie is technically necessary to show you the website in the language you want. Under Section 25(2) no. 2 of the German Telecommunications and Digital Services Data Protection Act (TDDDG) it does not require consent – which is why you do not see a cookie banner here. Where personal data is processed in this context, the legal basis is Art. 6(1)(f) GDPR.

We do not use analytics or tracking tools, advertising networks or social media embeds. The website does not load any content from third-party servers – the fonts, too, are served from our own server. Visiting the website therefore does not send any data to third parties.

The only recipients of your data are the processors named above: Hetzner for the data centre (section 2) and Strato for email (section 4). Beyond that, we only disclose data where we are legally obliged to do so. We do not transfer data to countries outside the European Union and the European Economic Area.

You have the following rights towards us regarding the data that concerns you:

• access (Art. 15 GDPR),
• rectification (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• objection to processing (Art. 21 GDPR),
• withdrawal of consent you have given, with effect for the future (Art. 7(3) GDPR).

To exercise any of these rights, an informal email to mail@fly-k.com is sufficient.

Right to object

Where we process data on the basis of Art. 6(1)(f) GDPR, you may object to the processing at any time on grounds relating to your particular situation (Art. 21(1) GDPR). We will then stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

You can lodge a complaint with a data protection supervisory authority if you believe that we are not processing your data lawfully (Art. 77 GDPR) – for example with the authority where you live. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia:

We do not make decisions based solely on automated processing and do not carry out profiling (Art. 22 GDPR).

We update this privacy policy when the website, our data processing or the legal situation changes – for example once Fly-K becomes available. The version published here applies; you will find its date at the top of this page.