Privacy

If you log in to the gliding.app or visit the website, we will record personal data of you.We think it is important to respect and protect your privacy as much as possible.That is why we handle your personal data carefully and we are transparent about its use.

1. Who is who?

If you read 'you', or 'your' in this privacy statement, we mean you as a glider or visitor to the gliding.app.

If you read 'we', 'we', 'us', or 'our', then we mean the gliding.app (registered with the Chamber of Commerce under number 88819051).

By "Club" we mean the gliding association of which you are a member, who are legally responsible for the processing of personal data.

The relationship between us, you and the club is a triangle, and there is an appointment along every relationship:

• You have an agreement with your club in the form of a membership at your club.Your club processes personal data of you as part of it.

• Your club has chosen to use the gliding.app to keep track of the starting administration, DTO administration and/or other club administration.Your club is legally the responsible person for the processing of personal data and the gliding.app is the (sub) processor of this (personal) data.Your club and the gliding.app have been agreed for a processing agreement for this as prescribed by the AVG in which, among other things, the processing, rights, confidentiality and security of data are recorded.

• Furthermore, as an individual member you also have the opportunity to log in to the gliding.app.You can view your data, enter additional data and the gliding.app can process additional personal data from you (for example, if you were last logged in).For the data that gliding.app additionally processed of you, the gliding.app is the controller.The processing of that data is explained in this privacy distribution.

Couplings are also offered in the gliding.app, for example with specific login systems.For the sake of completeness, we hereby establish that we are legally not the controller for the processing of personal data via the relevant websites.The person in charge is the party in question.

2. What information do we keep up and why?

We process data commissioned by your club with the aim of taking care of the digital gliding administration of your club.Think of things such as the starting administration, EASA Declared Training Organization (DTO) administration, powers, or currency of members.

Which personal data we record and what the reason is, depends on the situation.Below we describe what we record per situation and why.In addition, there may be more situations in which your data is used.

2.1 Data that we process on behalf of your club

The data that we process from you on behalf of your gliding association are described in the processing agreement that your club has with the gliding.app.In the privacy statement of your gliding club you can read back which personal data your club processes of you.In general, the gliding.app processes the following data on behalf of the clubs, but the situation may differ per club:

If you sign up to fly and if you start flying, we will store this information in our administration.Among other things, it is registered with whom you flew, on which box, type of flight (for example EASA training, exam or overland flights), where the flight was and what time and for a long time flown.The operator of an airport is obliged to register who the captain is on the basis of the EASA legislation.This fact will be stored at the flight.

Within the EASA Declared Training Organization (DTO) there is also a requirement for storing data.For example for the student follow system that can be consulted by instructors.We also request other information, such as (emergency) contact details, a profile photo, the validity date of Medical.

This data is also used to calculate your current currency (according to the Currency Barometer) and whether you meet the EASA Recency requirements.What is good to know is that your currency and recency can be seen by all members to create a collective consciousness of safety.

In addition, your certification number, KNVVL number (insurance), validity of medical, and powers within the club are stored so that the club can see whether you meet the legal requirements or conditions set by the club.

Finally, if you give permission for this and make your club use of this functionality, you can enter your bank account number and we share your bank account number with your gliding club to ensure that you can automatically collect, for example, your membership, towing flights and othersClub -related costs.

2.2 Data that the gliding.app processes itself

We collect data about visitors to our website, for example how many visitors have been and from which page they have been referred.Which data we record depends on which information your browser sends.This can be information about your device, your operating system or the time at which you visited our website.

If you log in to the gliding.app, you must specify your name and e-mail address.We store this data in the administration that your club manages.This data is necessary to ensure that you can log in, your password can be reset and to be able to send service messages.Without this data we cannot let you use the gliding.app.

3. How did we secure your data?

To secure your personal data, we have taken appropriate technical and organizational measures.We have based the choice of these measures based on the available technology, the implementation costs, the type of personal data that we process about you and the risks associated with it.For example, our website has an SSL certificate, we use a firewall to prevent abuse and we have encryption on certain critical data.In addition, all our servers within the European Union (European Economic Area) and hosts are at locations whose data cannot be shared with the US (think of the EU-US Privacy Shield).

4. With whom do we share your data?

4.1 Data that we process on behalf of your club

The data that will be processed in the gliding.app on behalf of your club can (partly) be shared with other members or specific groups of members within your club (for example instructors).For example, this is necessary for your club to be able to comply with (EASA and DTO) legislation, to organize a safe air company and to be able to meet conditions of, for example, the insurance of aircraft and vehicles.We perform this on behalf of your club and your club is the controller for this.This is laid down in a processing agreement between us and your club.More information about which data your club processes you can find in the privacy communication of your club.

Within the gliding.app, every user can choose to switch on privacy mode.With this mode, privacy -sensitive data (such as address and flight information) will be protected from other members.However, system administrators, instructors and trawls (only for towing flights) of your own club will in that case still be able to see your data.

If you give permission for this, we share your bank account number with your club to ensure that people can automatically be collected for, for example, your membership and towing flights.

With other parties we only share your data if this is required by law, for example safety investigations from the Human Environment and Transport Inspectorate (ILT).In that case we only share the personal data that we must provide for such an investigation according to the law.The communication about this will be done through your club since they are responsible for the processing of your data.

Finally, we will never use, sell, exchange or rent out your personal data and flight data for our own purposes.

4.2 Data that the gliding.app processes itself

We will never hand over your personal information to a third party unless we are legally obliged to do so.

5. How long do we save your data?

We do not store your personal data for longer than is necessary for the purpose for which we have recorded it.This money for both data that we process on behalf of your club, and data that the gliding.app processes itself.

If you have created a user account, your data will be stored.After you have canceled your account, we will definitively receive the data within 36 months according to the assignment from your club.This is in accordance with the EASA DTO legislation DTO.Gen.135 C).

We do keep the data that is necessary to comply with EASA legislation as an operator of the airport, namely the name of the captain for every flight you have made.

We make continuous backups of the data that you store with us.We store backups for a maximum of 60 days.This means that deleted data can be stored in such a backup for a maximum of 60 days.

6. What rights do you have when it comes to your privacy?

According to privacy legislation you have a number of rights, such as viewing, receiving, correcting and deleting your data:

Via the portal you can get access to the personal data and flight data that we process from you.

• You can correct or delete personal data that is actually incorrect.
• You can limit the visibility of your personal data by switching on the privacy mode in the gliding.app.
• We can transfer your personal data digitally to you (data portability).In that case we create an export of your related personal data and flight data.If you want to use this, the export of your data can be found in the my data tab of the gliding.app.

Do you have other questions or requests about viewing, correcting or deleting your data?Then contact your club.

7. What can you do if you have a privacy complaint?

If you have a complaint about how we handle the personal data as we do on behalf of your club, we ask you to first share this complaint with your club.Your club will look for a solution together with you, and if necessary together with us.

In other cases, mail us at contact@gliding.app.You can do this, for example, if you suspect that abuse of your data has been made, or that there has been a data breach.

Version 4, 17 Feb 2023