Privacy Policy for SCANDIC FLY

Status: July 01, 2025

We are pleased that you are visiting our website. The protection and security of your personal information when using our website are very important to us. We would therefore like to inform you at this point about which of your personal data we collect when you visit our website and for what purposes it is used.

This Privacy Policy applies to the online offer of SCANDIC FLY, a brand within the SCANDIC PAY, SCANDIC TRUST, and SCANDIC TRADE brand network and part of the diversified, internationally operating company Legier Beteiligungs mbH, Kurfürstendamm 195, D-10707 Berlin (Federal Republic of Germany), Telephone: +49 30 408174005, Telephone: +49 30 232574470, Commercial Register Berlin-Charlottenburg (Federal Republic of Germany) HRB 57837, VAT ID: DE 413445833, which is accessible under the domain www.ScandicFly.aero as well as various subdomains ("our website").

Who is responsible, and how can I reach them?

Controller for Data Processing

Controller for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR):

Legier Beteiligungs mbH
Kurfürstendamm 195
D-10707 Berlin
(Federal Republic of Germany)
Telephone: +49 30 408174005
Telephone: +49 30 232574470
Commercial Register Berlin-Charlottenburg
(Federal Republic of Germany) HRB 57837
VAT ID: DE 413445833
(See our imprint for contact details)

Data Protection Officer

Attorney Thilo Herges
Hohenzollerndamm 27a
10713 Berlin
Germany
Contact:
Telephone: +49 30 408174005
E-Mail: Datenschutz@ScandicFly.aero

What is this about?

This Privacy Policy fulfills the legal requirements for transparency in the processing of personal data. Personal data is any information relating to an identified or identifiable natural person. This includes, for example, your name, age, address, telephone number, date of birth, email address, IP address, or user behavior when visiting a website. Information that we cannot (or can only with disproportionate effort) link to your person, e.g., through anonymization, is not personal data. The processing of personal data (e.g., collecting, querying, using, storing, or transmitting) always requires a legal basis and a defined purpose.

Stored personal data is deleted as soon as the purpose of the processing has been achieved and there are no legitimate reasons for further retention. We inform you about the specific storage periods or criteria for storage in the individual processing operations. Regardless, we store your personal data in individual cases for the assertion, exercise, or defense of legal claims and in the presence of statutory retention obligations.

Who receives my data?

We only share your personal data that we process on our website with third parties if this is necessary for the fulfillment of the purposes and is covered by the legal basis (e.g., consent or safeguarding legitimate interests) in the individual case. In addition, we share personal data with third parties in individual cases if this serves the assertion, exercise, or defense of legal claims. Possible recipients may include, for example, law enforcement authorities, lawyers, auditors, or courts.

Insofar as we use service providers for the operation of our website who process personal data on our behalf within the scope of commissioned processing pursuant to Art. 28 GDPR, these may also be recipients of your personal data. You can find more information about the use of processors and web services in the overview of the individual processing operations.

If personal data is transferred to third countries outside the EU/EEA (e.g., USA), we ensure that appropriate safeguards pursuant to Art. 44 ff. GDPR (e.g., standard contractual clauses) are in place.

Do you use cookies?

Cookies are small text files that are sent from us to the browser of your device during your visit to our website and stored there. Alternatively, information can also be stored in the local storage of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies enable us to perform analyses, e.g., to recognize the browser you use when you revisit and transmit information to us (non-essential cookies). With the help of cookies, we can make our website more user-friendly and effective by tracking your usage and determining your preferred settings (e.g., country and language settings). If third parties process information via cookies, they collect the data directly through your browser. Cookies do not cause any damage to your device, cannot execute programs, and do not contain viruses.

We provide information about the respective services for which we use cookies in the individual processing operations. Detailed information about the cookies used can be found in the cookie settings or in the consent manager of this website.

What rights do I have?

Under the conditions of the legal provisions of the General Data Protection Regulation (GDPR), you have the following rights as a data subject:

  • Right to information pursuant to Art. 15 GDPR regarding the data stored about you in the form of meaningful information about the details of the processing and a copy of your data;
  • Right to rectification pursuant to Art. 16 GDPR of inaccurate or incomplete data stored by us;
  • Right to erasure pursuant to Art. 17 GDPR of the data stored by us, unless the processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the assertion, exercise, or defense of legal claims;
  • Right to restriction of processing pursuant to Art. 18 GDPR, insofar as the accuracy of the data is disputed, the processing is unlawful, we no longer need the data and you object to their erasure because you need them for the assertion, exercise, or defense of legal claims, or you have objected to the processing pursuant to Art. 21 GDPR;
  • Right to data portability pursuant to Art. 20 GDPR, insofar as you have provided us with personal data within the scope of consent pursuant to Art. 6(1)(a) GDPR or based on a contract pursuant to Art. 6(1)(b) GDPR and these have been processed by us using automated procedures. You will receive your data in a structured, commonly used, and machine-readable format, or we will transmit the data directly to another controller, insofar as this is technically feasible;
  • Right to object pursuant to Art. 21 GDPR to the processing of your personal data, insofar as this is based on Art. 6(1)(e, f) GDPR and there are reasons arising from your particular situation, or the objection is directed against direct marketing. The right to object does not apply if overriding, compelling legitimate grounds for the processing are demonstrated or the processing is carried out for the assertion, exercise, or defense of legal claims;
  • Right to withdraw consent pursuant to Art. 7(3) GDPR with effect for the future;
  • Right to lodge a complaint pursuant to Art. 77 GDPR with a supervisory authority if you believe that the processing of your personal data violates the GDPR. You can usually contact the supervisory authority of your usual place of residence, your workplace, or our company headquarters (e.g., the Berlin Commissioner for Data Protection and Freedom of Information).

How is my data processed in detail?

Below, we inform you about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data, and the respective storage period. No automated decision-making, including profiling, takes place in individual cases.

Website Provision

Nature and Scope of Processing

When accessing and using our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called logfile:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the accessed file
  • Website from which the access was made (referrer URL)
  • Browser used and, if applicable, the operating system of your computer as well as the name of your access provider

Our website is not hosted by us but by a service provider who processes this data on our behalf pursuant to Art. 28 GDPR.

Purpose and Legal Basis

The processing is carried out to safeguard our overriding legitimate interest in displaying our website and ensuring security and stability based on Art. 6(1)(f) GDPR. The collection of data and storage in logfiles are absolutely necessary for the operation of the website. There is no right to object to the processing due to the exception under Art. 21(1) GDPR. Insofar as further storage of logfiles is required by law, the processing is based on Art. 6(1)(c) GDPR.

Storage Period

The aforementioned data is stored for the duration of the website display and, for technical reasons, for a maximum of 28 days thereafter.

Contact Form

Nature and Scope of Processing

On our website, we offer you the opportunity to contact us via a provided form. The information collected via mandatory fields (e.g., name, email address) is necessary to process your request. In addition, you can voluntarily provide additional information that you deem necessary for processing the contact request.

When using the contact form, your personal data is not shared with third parties unless this is necessary for processing your request (e.g., sharing with a real estate agency for property inquiries).

Purpose and Legal Basis

The processing of your data is carried out for the purpose of communication and processing your request based on your consent pursuant to Art. 6(1)(a) GDPR. Insofar as your request relates to an existing contractual relationship with us, the processing is carried out for the purpose of contract fulfillment based on Art. 6(1)(b) GDPR. For property inquiries, the sharing with a real estate agency may be based on our legitimate interest pursuant to Art. 6(1)(f) GDPR to process your request efficiently.

Storage Period

  • When using the contact form based on your consent, we store the collected data for each request for a period of three years, starting from the completion of your request or until you withdraw your consent.
  • When used in the context of a contractual relationship, we store the data for a period of six years from the end of the contractual relationship, in accordance with statutory retention periods (e.g., § 257 HGB, § 147 AO).

Presence on Social Media Platforms

We maintain so-called fan pages, accounts, or channels on the networks listed below (Facebook, Instagram, LinkedIn, XING) to provide you with information and offers within social networks and to offer you additional communication channels.

Further information can be found in their privacy policies:

Contact

For questions or concerns regarding data protection, please contact:

Legier Beteiligungs mbH
E-Mail: Datenschutz@ScandicFly.aero
Telephone: +49 30 408174005