FlightBox Data Privacy Statement
In this document we would like to inform you about the collection and use of your personal data in FlightBox.
A. Responsible Person
The "FlightBox" product consists of the the FlightBox App (available for Google Android and Apple iOS) and the FlightBox website (my.flightbox-app.com). FlightBox is a product of T. Schramme Softwareentwicklung + Beratung, Kurzer Weg 8, 38442 Wolfsburg, Germany (hereinafter referred to as "Provider").
B. Collected Data
a. Protocol Data
Both on the FlightBox website and in the FlightBox app, log data is collected when you visit/use it. These include:
- IP address of the visitor / user
- Version used (app, browser)
- In case of a problem: Technical error information
This data is collected in the legitimate interests of the provider in order to correct application errors quickly, prevent misuse of the product, and to continuously improve it.
b. FlightBox Account
A FlightBox account is required to use many, but not all FlightBox functions. The user can register for the account in the app. When registering, the user's name and email address are requested, which are then stored in the FlightBox account information.
c. Recorded Flights Sessions
When a flight is recorded in the FlightBox App, every second the following data set is requested from and stored on the mobile device that is used to record the flight:
- Time stamp
- WSG84 position coordinates (GPS)
- Altitude
- Position signal accuracy
as well as derived from it
- Speed over ground
- Vertical speed
- Course over ground
- Distance to nearest airport
This data is required to provide the FlightBox services, e.g. to show later the flight path, or for automatic logbook creation. If the user has a FlightBox account, this data is also stored online in his/her account.
The user can delete a recorded flight via the app or the website.
d. Pilots Logbook
The user can keep a personal digital logbook for his/her flights. All data entered here (departure/destination airport, times, flight times, pilot name, passenger names, comments) are optional and are entered by the user. The user can also correct or delete this data again.
This data is required to provide the FlightBox services and is stored on the user's end device for each recorded flight. If the user has also created a FlightBox account, this data is also stored online.
e. Flight planning
Flights can be planned to support the pilot in flight. To do this, the user can select waypoints from various sources (airfields, VFR reporting points, Google Maps search) whose position coordinates are then stored in the flight plan. No personal data is requested. All data entered is optional and can be deleted by the user by deleting the flight plan.
This data is required to provide the FlightBox services and is stored on the user's end device for each recorded flight. If the user has also created a FlightBox account, this data is also stored online.
f. Analytics data for product improvements
In order to develop new FlightBox functions and to improve existing functions, usage data is collected via the website and the app. These include the functions that are currently being used, the order of the functions used and the areas of the app/website visited.
The so collected data is sent to the FlightBox analytics systems together with the log data (cf B.a.). It is not possible to draw conclusions about specific users from this data.
The collection and use of this data takes place in the legitimate interest of the provider.
All usage data collected in this way is automatically deleted after 30 days.
C. Transfer of data to third parties
a. Microsoft Cloud
To implement the FlightBox services, the provider uses services from the Microsoft Azure Cloud. If the user has created a FlightBox account, the data described in Section B will be transferred to a European data center in the Azure Cloud and stored there. This is done in accordance with the Microsoft Services Agreement.
b. Google Maps
Google Maps is used to implement the map functions in FlightBox. This means that when a map section is accessed, the user's IP address is transmitted to Google. If the user uses the free text search for waypoints when planning the flight, the functions entered there are also transferred to Google to provide a suitable waypoint.
D. Data subject rights
According to the EU General Data Protection Regulation, you as the data subject (FlightBox user) have the following rights vis-à-vis us as the provider:
Right of providing information You have the right to receive information from us (Art. 15 GDPR) about the processing of your personal data.
Right of rectification You have the right to request us to correct (Art. 16 GDPR) incorrect or incomplete personal data concerning you.
Right to delete You have the right to request the deletion of your data if the conditions set out in Art. 17 GDPR are met. You can then, for example, request the deletion of your data if they are no longer necessary for the purposes for which they were collected. You can also request deletion if we process your data on the basis of your consent and you withdraw this consent.
Right to restrict data usage You have the right to demand the restriction of the processing of your data if the requirements of Art. 18 GDPR are met. This is the case, for example, if you contest the accuracy of your data. You can then request the restriction of processing for the duration of the verification of the correctness of the data.
Right to data portability If the data processing is based on consent or the fulfillment of a contract and this is also carried out using automated processing, you have the right to receive your data in a structured, common and machine-readable format and to transmit it to another data processor.
Right to object: If the processing is based on an overriding legitimate interest, you have the right to object to the processing of your data. An objection is permissible if the processing is either in the public interest or based on a legitimate interest of the provider or a third party. In the event of an objection, we ask you to inform us of your reasons for objecting to the data processing. You also have the right to object to data processing for direct marketing purposes. This also applies to profiling insofar as it is related to direct advertising.
Right of withdrawal If the data processing is based on consent, you have the right to revoke your consent at any time free of charge with effect for the future.
Right of appeal You also have the right to complain to a supervisory authority (e.g. the Lower Saxony State Commissioner for Data Protection) about our processing of your data.
To exercise these rights, contact:
Post: Torben Schramme, Kurzer Weg 8, 38442 Wolfsburg, Germany Email: support@flightbox-app.com
As of: October 1, 2023