Thank you for visiting our website www.cost-aviation.de / www.cost-aviation.com and for your interest in our company. We process your personal data exclusively within the scope of the legal data protection regulations, in particular the General Data Protection Regulation (GDPR) and the Bundesdatenschutzgesetz (Federal Data Protection Act, new BDSG).

In the following, we would therefore like to inform you about the processing (e.g. collection, storage, transfer) of personal data when using our website. Pursuant to Art. 4 (1) GDPR, the General Data Protection Regulation defines personal data as

"any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person."

Cost Aviation GmbH
Flughafenstraße 32
70629 Stuttgart
Germany

Phone: +49 711 948 5005
Fax: +49 711 948 3711
E-Mail: This email address is being protected from spambots. You need JavaScript enabled to view it.

Legal representatives:
Management: Andreas Schweizer

As a matter of principle, the processing of our users' personal data only takes place

• insofar as this is necessary for the provision of a functional website and for the presentation of the relevant contents
• and/or insofar as we, as the controllers, have obtained the user's consent, pursuant to Art. 6 Para. 1 lit. a GDPR
• and/or insofar as the processing of personal data is permitted by law (Art. 6 Para. 1 lit. b - f GDPR).

Art. 6 Para. 1 lit. a GDPR serves as the legal basis insofar as we obtain the data subject’s consent for the processing of personal data.

Art. 6 Para. 1 lit. b GDPR serves as the legal basis for the processing of personal data required for the performance of a contract to which the data subject is a party. This also applies to processing operations that are necessary for performing pre-contractual measures.

Art. 6 Para. 1 lit. c GDPR serves as the legal basis insofar as the processing of personal data is required to fulfil a legal obligation to which Cost Aviation GmbH is subject.

Art. 6 Para. 1 lit. f GDPR serves as the legal basis for processing if this is necessary to protect a legitimate interest of Cost Aviation GmbH or a third party.

• Courts, authorities or other state bodies, insofar as a legal obligation exists
• External bodies, insofar as this is necessary to fulfil the purposes stated in each case
• External contractors within the framework of the provisions of Art. 28 GDPR
• Other cooperation partners whose participation is necessary to provide the service

If you merely use our website www.cost-aviation.de / www.cost-aviation.com for information purposes (only viewing and reading), i.e. if you do not contact us (for example via a contact form) and do not submit any other information to us, we only collect the personal data that are transferred automatically or that your browser - depending on the terminal device and configuration of the client - transfers to our server.

This information is temporarily stored in a so-called log file. In this case, only data collected by our system are recorded. The following data are collected:

• IP address,e
• date and time of access,
• name and URL of the requested page,
• website from which access is made (so-called referrer URL),
• information about the browser type and version used,
• operating system and its interface,
• language and version of the browser software,
• internet service provider of the user.

Art. 6 Para. 1 lit. f GDPR constitutes the legal basis for the temporary storage of these data and the log files. The data are stored in log files to ensure the website’s functionality and, in the event of any errors or problems in the network, to carry out an adequate analysis and thus ensure the security of our information technology systems. These data are not evaluated for other purposes. Pursuant to Art. 13 Para. 1 lit. d GDPR, we are herewith informing you as a user that this is in our legitimate interests.

The log files and thus also the data stored in them are erased after 14 days. The log files are not saved beyond this period.

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. If a user calls up a website, cookies can be stored on the user's operating system. The stored cookies contain a characteristic string that enables a unique identification of the browser when the website is visited again.

We use two types of cookies on our website: technically necessary cookies and technically unnecessary cookies.

• Technically necessary cookies: Technically necessary cookies are those used to make our website more user-friendly. Some elements of our website require that the visitor’s browser can be identified even after a page change. Without these cookies, we are unable to provide you with certain functionalities of our website, such as the language settings of our website.
• Technically unnecessary cookies: Additionally, we also use cookies on our website that are not technically necessary and enable an analysis of the user's surfing behaviour, such as determining the frequency of page views, or the use of website functions (see also Section 3 of this Data Protection Declaration).

In the case of cookies, Art. 6 Para. 1 lit. f GDPR constitutes the legal basis for the processing of personal data.

The purpose of using technically necessary cookies is to simplify the use of our website for the user. Some functions of our website cannot be offered without the use of cookies. These are functions that require the browser to be recognised even after a page change. Adopting the selected language setting is one example of this.

The purpose of using technically unnecessary analysis cookies is to improve the quality of our website and its contents. Through the analysis cookies, we learn how the website is used and can thereby continuously improve the functionalities and contents of our website.

Pursuant to Art. 13 para. 1 lit. d GDPR, we are herewith informing you as a user that this is in our legitimate interests. Most browsers automatically accept cookies. The cookies are then stored on the user's terminal device and transferred to us by the user. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transfer of cookies by changing the settings in your Internet browser. Cookies that have already been stored can be erased at any time. However, the complete deactivation of cookies may cause you to be unable to use all functions of our website to the full extent.

Our website uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics also uses "cookies", which are text files placed on your computer, to help analyse your website-using behaviour. The information generated by the cookie about your use of this website is usually transferred to a Google server in the US and stored there. The IP address transferred by your browser in the context of Google Analytics is not merged with other Google data. Our website uses Google Analytics with the extension "_anonymizeIp()". This shortens the IP addresses for further processing. Only in exceptional cases, the full IP address is transferred to a Google server in the US and shortened there. On our behalf, Google uses this information to evaluate your use of the website, to compile reports on website activities and to provide us with other services relating to the use of the website and the Internet.

Art. 6 Para. 1 lit. f GDPR constitutes the legal basis for the processing of personal data, as well as an agreement on processing within the meaning of Art. 28 GDPR. We use Google Analytics to analyse and regularly improve the use of our website. Using theses analyses, we can improve our offer and make it more interesting for you. Pursuant to Art. 13 Para. 1 lit. d GDPR, we are herewith informing you as a user that this is in our legitimate interests.

As a user, you can at any time erase cookies that have already been set by Google Analytics in your Internet browser. The personal data that Google Analytics collects is erased or made anonymous after 14 months.

You may refuse the use of cookies by selecting the appropriate settings in your browser; however, please note that if you do this, you may not be able to use the full functionality of our website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from Google’s processing of these data by downloading and installing the browser plug-in available at the following link:
http://tools.1d5920f4b44b27a802bd77c4f0536f5a-gdprlock/dlpage/gaoptout?hl=en

Google is certified according to the Privacy Shield Framework and thus offers a safeguard to comply with European data protection law and thus the GDPR.

More information can be found here:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAl&status=active https://www.privacyshield.gov/EU-US-Framework

Terms of use of Google Analytics:
http://www.1d5920f4b44b27a802bd77c4f0536f5a-gdprlock/analytics/terms/de.html

Overview of data protection:
http://www.1d5920f4b44b27a802bd77c4f0536f5a-gdprlock/intl/de/analytics/learn/privacy.html

Data protection declaration:
http://www.google.de/intl/de/policies/privacy

You can find a more detailed explanation of Google Analytics at:
https://www.1d5920f4b44b27a802bd77c4f0536f5a-gdprlock/intl/de_de/analytics

We use the offer of Google Maps on this website. This allows us to display interactive maps directly on the website and enables you to conveniently use the map function.

By visiting the website, Google receives the information that you have visited the corresponding subpage of our website. In addition, personal data (such as your IP address) are transferred to Google. This occurs regardless of whether you have a Google Account that you are logged in with or whether you do not have a Google Account. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile on Google, you must log out prior to visiting our website. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such evaluation takes place in particular (even for users who are not logged in) to provide needs-oriented advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, whereby you must contact Google to exercise the right to object.

For more information about the processing of personal data by Google Maps, please see Google's data protection declaration. They will also provide you with further information about your respective rights and setting options to protect your privacy.

Data protection declaration:
http://www.google.de/intl/de/policies/privacy

Google also processes your personal data in the US and has submitted to the EU-US Privacy Shield:
https://www.privacyshield.gov/EU-US-Framework.

Further information can also be found in the Terms of Use:
https://www.1d5920f4b44b27a802bd77c4f0536f5a-gdprlock/intl/de_US/help/terms_maps.html.

You can contact us by e-mail at This email address is being protected from spambots. You need JavaScript enabled to view it. or This email address is being protected from spambots. You need JavaScript enabled to view it.. In this case, the personal data transferred by e-mail about you are stored.

When you contact us by e-mail, the data you provide (your e-mail address, your name, your request) are stored by us in order to answer your request appropriately. A transfer to third parties does not occur.

Art. 6 Para. 1 lit. f GDPR and Art. 6 Para. 1 lit. a GDPR constitute the legal bases for data processing if you contact us by e-mail.

Your data are used exclusively to process and answer your enquiry appropriately.

Personal data are only stored for as long as this is necessary to achieve the above-mentioned purpose or pursuant to the legally stipulated retention periods.

This is the case with the personal data that you send us as part of an enquiry by e-mail hen the conversation with the user has ended, i.e. when the relevant facts have been finally clarified.

The data are only processed to be able to answer your contact request appropriately and conclusively. Pursuant to Art. 13 Para. 1 lit. d GDPR, we are herewith informing you as a user that this is in our legitimate interests.

Online, you have the opportunity to apply for an open position or to send a speculative application by e-mail. In this case we process the personal data you have provided us during the application process and by contacting us by e-mail (see also section IV of this Data Protection Declaration).

In both cases your application data will be processed for the purposes of the application procedure and the recruitment process only. Art. 6 Para. 1 lit. b GDPR and Art. 26 Para. 1 BDSG constitute the legal basis for this data processing.

We store your personal data, beginning with the reception of your job application. If your job application is rejected (no matter if you applied for an open position or sent a speculative application), your personal data and your application will be erased within 6 months after the rejection.

Within the meaning of the GDPR, you are a data subject if we process your personal data. Therefore, you have rights vis-à-vis Cost Aviation GmbH as the controller. If you wish to exercise such a right, please contact:

Cost Aviation GmbH
Flughafenstraße 32
70629 Stuttgart
Germany
This email address is being protected from spambots. You need JavaScript enabled to view it.

You are entitled to the following rights:

Pursuant to Art. 15 GDPR, you have the right to access information on your personal data processed by us. In particular, you may access information on the purposes for the processing, the category of personal data, the categories of recipients to whom your data have been or will be transferred, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of lodging a complaint, the origin of your data, if these have not been collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on their details.

You also are entitled to the right to access information as to whether your personal data is being transferred to a third country or to an international organisation. In this context and pursuant to Art. 46 GDPR, you may request to be informed of the appropriate safeguards in connection with the transfer.

Pursuant to Art. 17 Para. 1 GDPR, you are entitled to the right to request the erasure of your personal data stored with us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims (cf. Art. 17 Para. 3 GDPR).

If we, as controller, have made the personal data relating to you public and we are obliged to erase this personal data pursuant to Art. 17 Para. 1 GDPR, we will take appropriate measures, including technical measures (taking into account the available technology and the costs for implementation) to inform other data processors who process the personal data that you, as data subject, have requested the erasure of all links to these personal data or of copies or replications of these personal data.

On the basis of Article 6(1)(e) or (f) of the GDPR, you are entitled to the right to object at any time to the processing of personal data concerning you for reasons arising from your particular situation.

As controllers, we then no longer process the personal data relating to you unless we can prove that there are compelling reasons worthy of protection for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend any legal claims. If the personal data relating to you are processed for direct marketing purposes, you have the right to object to the processing at any time. If you object to the processing for direct marketing purposes, the personal data concerning you is no longer processed for these purposes.

You are entitled to the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of your place of residence, workplace or our company headquarters.

The supervisory authority responsible for Cost Aviation GmbH is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit
PO Box 10 29 32
70025 Stuttgart
Germany
Phone: +49 711 615541 0
Fax: +49 711 615541 15
E-Mail: This email address is being protected from spambots. You need JavaScript enabled to view it.

We use SSL (Secure Socket Layer) encryption with 256-bit encryption on our website. You can recognise the encryption of our website and its individual areas by the lock or key symbol in the lower status bar of your browser.

Within the meaning of Art. 32 GDPR, we principally use suitable technical and organisational measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are constantly developed and improved in accordance with technical progress and technical development.