Privacy Policy

1. Controller

Firma Fly Funkmietwagen (sole proprietorship), Owner Ahmad Nabi Azzad
Robert-Perthel-Str. 71-73, 50739 Köln
Email: info@firmafly.de · Phone: 0221-700-06961

A data protection officer has not been appointed, as the legal requirements for this (§ 38 BDSG) are not met.

2. Access to the website & hosting

When you visit this website, our hosting provider automatically stores technical access data in server log files (e.g. shortened IP address, date/time, page accessed, browser type). This serves the secure and stable operation of the website. The legal basis is our legitimate interest (Art. 6 (1) (f) GDPR). The website and our internal dispatch system (see section 3) are operated on servers of Hostinger International Ltd. in a data center within the EU; a data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

3. Booking and contact requests

When you use the request or booking form, we process the data you provide (including name, email, phone number, pickup and destination address, date, number of passengers) exclusively to handle your request and carry out the ride. The legal basis is Art. 6 (1) (b) GDPR (initiation or performance of a contract). Providing this data is necessary in order to process your request; without it we cannot process the request.

Your request is stored in our own dispatch system (“FleetOS”) and triggers a notification to our mailbox (info@firmafly.de). Both the dispatch system and the email delivery are operated by us on our own server infrastructure or via the email service of our provider Hostinger International Ltd., exclusively within the EU. Your request data is not transferred to service providers outside the EU/EEA.

4. Address entry & price calculation

As soon as you begin entering an address (from three characters onward), your input is automatically transmitted to the map service Photon (operator: komoot GmbH, Germany – processing within the EU) for address completion. For the subsequent distance and price calculation, the selected address is additionally transmitted once to the geocoding service Nominatim (OpenStreetMap Foundation, Cambridge, United Kingdom). In each case, your IP address is also transmitted to the provider. For the United Kingdom, an adequacy decision of the EU Commission (Art. 45 GDPR) exists, establishing an adequate level of data protection. The legal basis is our legitimate interest in a functioning address entry and price quote (Art. 6 (1) (f) GDPR). Only the entered location details are transmitted, no further personal data.

5. Cookies & local storage

This website does not use any cookies for analytics, marketing, or tracking purposes and does not embed any services for reach measurement or profiling; a consent banner is therefore not required. To protect against form spam, when you submit a request your browser stores the times of your last requests locally (localStorage) in order to limit the number of submissions over time. No personal data is stored in the process, only technical timestamps that never leave your device. This storage is technically necessary for the secure operation of the form (§ 25 (2) no. 2 TDDDG) and does not require consent.

6. Retention period

Server log files are deleted or anonymized after 7 days at the latest, unless a security-relevant incident requires longer retention. Non-binding requests that do not lead to a booking are deleted no later than 12 months after receipt. Booking and invoice documents are retained in accordance with the statutory retention obligations (including § 147 AO, § 257 HGB, up to ten years). After the respective period expires, the data is deleted.

7. Encryption

For security reasons, this website uses SSL/TLS encryption (recognizable by the “https” in the address bar).

8. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), and data portability (Art. 20 GDPR). To exercise these, please contact info@firmafly.de.

Insofar as we process your data on the basis of legitimate interests (Art. 6 (1) (f) GDPR, e.g. server logs or map services), you have the right to object at any time to this processing on grounds relating to your particular situation (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR) – the authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW). Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place.