Privacy policy

1. Controller

The controller for data processing on this website is Mathias Pelzmann, Pelzmannstraße 3, 8435 Wagna, Austria, email: bookings@flyinhias.com (see also the imprint).

2. Principle

This website is built to collect as little data as possible. There is no tracking, no analytics, no advertising and no cookies. External content is only loaded after you actively agree.

3. Hosting and server logs

The website is delivered via Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you visit, Cloudflare processes technically necessary data (including IP address, time, requested page, browser information) to deliver the website securely and reliably and to fend off attacks. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework; a data processing agreement is in place.

4. Booking form

When you use the booking form, we process the details you enter (e.g. name, email, event details, message) to answer your request and, where applicable, to prepare a contract (Art. 6(1)(b) GDPR). Required fields are marked.

• The request is not stored on the website; it is forwarded as an email to the booking team. Emails are sent via Resend (Resend, Inc., USA) as a processor.
• To protect against spam we use Cloudflare Turnstile. Technical characteristics of your browser and your IP address are sent to Cloudflare to detect automated requests (Art. 6(1)(f) GDPR).
• To limit abusive requests, an irreversible hash of your IP address is stored for at most one hour.
• Request emails are deleted once they are no longer needed, or after statutory retention periods if a contract is concluded.

5. External players (SoundCloud, Mixcloud, YouTube, Spotify, Apple Music)

Music and video players from external providers are only embedded after you click “Load player”. Only then is data (including your IP address) transferred to the provider, who may also set its own cookies. The legal basis is your consent (Art. 6(1)(a) GDPR). For YouTube we use the privacy-enhanced mode (youtube-nocookie.com).

If you choose “always allow”, this decision is stored only locally in your browser (localStorage, no cookie). You can revoke it at any time below under Privacy settings.

6. Links to social networks

Links to Instagram, TikTok and other platforms are plain links. Data is only transferred when you follow them.

7. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time. Contact the address given in the imprint. You can also lodge a complaint with the Austrian Data Protection Authority (Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at).