Flying Kiwi Virtual

Privacy Policy

Privacy Policy for Flying Kiwi Virtual
Last Updated: 09.12.2024

Flying Kiwi Virtual (“we,” “our,” or “us”) values your privacy and is committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR). This Privacy Policy explains how we collect, use, and protect your data when you visit our website or use our services.

If you have any questions about this Privacy Policy or your privacy rights, please contact us at [email protected].

1. Data Controller

Flying Kiwi Virtual acts as the Data Controller for the personal data we process. Our servers are hosted by Hetzner in the European Union, and our DNS services are managed by Cloudflare, and we use Discord as an optional login and registration provider..

2. Data We Collect

a) Personal Data

When you register or use our services, we may collect the following personal data:

  • Name
  • Email address
  • VATSIM or IVAO ID
  • Flight data (e.g., flight logs, routes, hours)
  • IP address (for security and troubleshooting purposes)

b) Technical Data

  • Browser type and version
  • Operating system
  • Time zone and location
  • Pages accessed on our website

c) Cookies and Tracking

We use cookies to enhance your browsing experience and for analytics purposes. You can manage your cookie preferences via your browser settings.

3. Legal Basis for Processing

We process your personal data under the following lawful bases:

  1. Consent: When you register with Flying Kiwi Virtual, you consent to the processing of your data as described in this policy.
  2. Legitimate Interest: To manage your account, monitor activity, and improve our services.
  3. Compliance with Legal Obligations: To meet any applicable laws and regulations.

4. How We Use Your Data

We use your personal data for the following purposes:

  1. Membership Management: To create, maintain, and manage your account with Flying Kiwi Virtual.
  2. Flight Logging: To track and record your virtual flight activity on the VATSIM and IVAO networks.
  3. Communication: To send updates, respond to queries, and provide support.
  4. Analytics: To monitor and improve our website’s performance.
  5. Security: To protect against unauthorized access and ensure the integrity of our systems.

5. Data Sharing

We only share your data in the following circumstances:

  • Service Providers: With third-party providers, such as:
    • Hetzner: For server hosting.
    • Cloudflare: For DNS services.
    • Discord: For optional login and registration. When you use Discord to log in, we collect your Discord user ID and associated data as permitted by Discord’s OAuth system.
  • VATSIM and IVAO Networks: To verify your membership and flight activity.
  • Legal Compliance: When required by law or to respond to lawful requests by public authorities.

All third-party service providers are bound by confidentiality and data protection obligations in line with GDPR requirements.

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy. Once your data is no longer needed, we securely delete or anonymize it.

  • Membership Data: Retained for the duration of your membership and up to one week after account closure for administrative purposes.
  • Technical Logs: Retained for one week for troubleshooting and security.

7. Your Rights Under GDPR

As a user, you have the following rights under GDPR:

  1. Access: Request a copy of your personal data that we hold.
  2. Correction: Request correction of any inaccurate or incomplete data.
  3. Erasure: Request deletion of your personal data (“right to be forgotten”), subject to legal and operational requirements.
  4. Restriction: Request restricted processing of your data.
  5. Data Portability: Request a copy of your data in a structured, machine-readable format.
  6. Objection: Object to processing based on legitimate interests.
  7. Withdraw Consent: Withdraw your consent at any time, where processing is based on your consent.

To exercise your rights, contact us at [email protected].

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • Secure servers hosted by Hetzner.
  • DNS management with Cloudflare’s advanced security features.
  • Integration with Discord OAuth for secure authentication.
  • Encryption and regular security audits.

However, no method of transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee its absolute security.

9. International Data Transfers

Your data may be processed outside your country of residence, including within the European Economic Area (EEA). When transferring data internationally, we ensure appropriate safeguards are in place, such as:

  • Hosting with GDPR-compliant providers like Hetzner.
  • Agreements with third parties that adhere to GDPR requirements.

10. Cookies and Tracking Technologies

We use cookies for essential website functionality and analytics. By using our website, you consent to our use of cookies. You can manage or disable cookies in your browser settings.

For more details, please see our Cookie Policy.

11. Updates to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with a new “Last Updated” date. Continued use of our services constitutes acceptance of any updates.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

By using our website and services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy.