📄 Privacy Policy

The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:

Matthias Schelhaas
Rote Landstraße 98B
06886 Lutherstadt Wittenberg
Germany

Contact:
Email: admin@finsch.dev

The protection of your personal data is important to me.

This iOS app is operated privately, free of charge and without commercial intent.

The app does not actively collect or process personal data, unless this is required for technical operation or for individual optional features (e.g. navigation features). The exception is the optional login via VATSIM Connect (see Section 5).

When you use the app, technically necessary data may be processed by the iOS operating system and by services of Apple Inc. This may include in particular:

• IP address
• Device and operating system information (e.g. device type, iOS version)
• Time of access, installation or use

This data is not evaluated or stored by me as the app operator but is processed exclusively under the responsibility of Apple Inc.

Legal basis:

Art. 6(1)(f) GDPR (legitimate interest in the secure and stable provision of the app)

Transfers to third countries:

Apple Inc. partly processes data in the USA. The transfer is based on the European Commission's adequacy decision for the EU-US Data Privacy Framework and on standard contractual clauses.

For more information on data processing by Apple, please see Apple's Privacy Policy.

To distribute and test new versions in advance, the app may be provided via TestFlight.

When you use TestFlight, Apple Inc. processes, among other things:

• Apple ID
• Device information
• Usage and diagnostic data (e.g. crash reports)

This processing is carried out exclusively by Apple Inc.

As the app operator, I only receive aggregated and anonymized information provided by Apple (e.g. number of downloads, general crash statistics).

Legal basis:

Art. 6(1)(f) GDPR (legitimate interest in the quality assurance of the app)

Storage period:

TestFlight data is automatically deleted by Apple after the end of the test phase or after 90 days of inactivity.

The app optionally offers login with your VATSIM account. The app can also be used without logging in.

Which data:

Your VATSIM CID (membership number). No further data such as your name or email address is requested.

Process:

When you tap “Login with VATSIM”, you are redirected to the VATSIM Connect login page (auth.vatsim.net) and confirm the authorization there. I do not receive your VATSIM credentials. My server (finsch.dev) then exchanges the authorization code for an access token, retrieves your CID and returns it to the app.

Storage:

The CID is stored exclusively locally on your device. Neither the CID nor the token is stored on the server, not even in error or debug logs. When the server is accessed, your IP address and the time of access are technically recorded in server logs; these are deleted after no more than 8 weeks. The server is operated by IONOS SE (Elgendorfer Straße 57, 56410 Montabaur, Germany); a data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

Purpose:

Assigning your VATSIM account within the app.

Legal basis:

• Login and retrieval of the CID: Art. 6(1)(a) GDPR (consent). Before the login, the app displays a notice about this data processing with a reference to this privacy policy. You give your consent by actively tapping “Login with VATSIM” after this notice. You can withdraw your consent at any time with effect for the future by logging out in the app and revoking access in your VATSIM account. The lawfulness of the processing carried out until then remains unaffected.
• Server logs (IP address, time): Art. 6(1)(f) GDPR (legitimate interest in the operational security and error analysis of the server).

VATSIM as a separate controller:

The login page (auth.vatsim.net) is operated by VATSIM. VATSIM processes your data there under its own responsibility and according to its own privacy provisions; I have no influence on this processing. According to VATSIM, the processing of member data is based on a legitimate interest in operating the network (Art. 6(1)(f) GDPR), and the data is stored until deletion is requested. VATSIM is an international network; for information on processing locations and possible transfers to third countries, please refer to VATSIM's documents.

You can exercise your rights towards VATSIM (access, rectification, erasure, objection) directly with VATSIM, according to VATSIM via a support ticket at support.vatsim.net. Please note: according to VATSIM, an objection or restriction of processing there leads to your VATSIM account being locked. Logging out in the app and revoking access for this app, on the other hand, only affect this app, not your VATSIM account or the data stored there.

Further information: VATSIM Privacy Policy and VATSIM Data Protection and Handling Policy.

This app does not use:

• Tracking or analytics tools (e.g. Google Analytics, Firebase Analytics)
• Advertising or marketing SDKs
• Social media plugins
• Cookies or similar technologies
• Profiling technologies

There is no user tracking or profiling.

For visits to this privacy policy web page, see Section 7.

When you visit this privacy policy in your browser, the server technically processes the following data in server logs:

• IP address
• Date and time of the request
• Page requested
• Browser and operating system information (user agent)
• Previously visited page (referrer), if transmitted by the browser

This data is deleted after no more than 8 weeks. The server is operated by IONOS SE (Elgendorfer Straße 57, 56410 Montabaur, Germany), with which a data processing agreement pursuant to Art. 28 GDPR is in place.

Cookies:

This website does not set any cookies and does not use any tracking or analytics services. The language selection is carried out solely via the web address (“?lang=”) or the language setting of your browser.

Legal basis:

Art. 6(1)(f) GDPR (legitimate interest in the secure and error-free provision of the website).

Personal data is not disclosed to third parties, except:

• within the Apple system services described above (technically required)
• within the optional login via VATSIM Connect (see Section 5)
• to the hosting provider IONOS SE (Montabaur, Germany) as processor (operation of the finsch.dev server, server logs)
• to comply with legal obligations

There is no commercial disclosure of data.

The app does not permanently store any personal data on a server. The VATSIM CID is stored only locally on your device and is only briefly routed through my server during login.

All other data remains exclusively locally on your device and is used solely for the functioning of the app.

Storage period:

• Local data (including the CID): until you log out in the app, uninstall the app or delete the data manually
• Server logs (IP address, time; during login and when visiting this website): no more than 8 weeks

Under the GDPR you have the following rights at any time:

• Access (Art. 15 GDPR) to the data stored about you
• Rectification (Art. 16 GDPR) of inaccurate data
• Erasure (Art. 17 GDPR) of your data
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent given (Art. 7(3) GDPR)

Requests can be sent at any time by email to the address stated above.

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data violates the GDPR.

Competent supervisory authority for Saxony-Anhalt:

Landesbeauftragter für den Datenschutz Sachsen-Anhalt
(State Commissioner for Data Protection of Saxony-Anhalt)
Otto-von-Guericke-Straße 34a
39104 Magdeburg
https://datenschutz.sachsen-anhalt.de/landesbeauftragte/kontakt

A list of all German data protection authorities can be found at: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

This privacy policy may be updated to reflect legal, technical or functional changes to the app.

The current version can always be viewed in the app.

In the event of material changes, you will be informed via the app.