Data privacy statement

1. Controller

We, ProFlight GmbH (hereinafter also referred to as “PF GmbH” or “we”, or “us”), would like to provide you with information on how we process your personal data when you use our website (“website”).

2. Scope, purpose, and lawful basis of processing personal data

We collect and use personal information directly from our users or from other sources (as described below) in the following situations:

2.1. Use of the website and creation of log files

When users visit our website, our system automatically collects data and information about the computer accessing our website each time our website is accessed. In the process, the following data (“technical information”) is collected:

  1. Information about the type and version of browser used 
  2. The user’s operating system 
  3. The user’s internet service provider 
  4. The user’s IP address 
  5. The date and time the website was accessed 
  6. Websites from which the user accessed our website 
  7. Websites and files that were accessed by the user’s system from our website, as well the following information: the method of access and protocol 
  8. The size of the file/page accessed 

This data is also saved in our system’s log files. This data is not stored together with any other personal data about the user. We collect and use this technical information for purposes of (network) security (e.g. to combat cyberattacks), marketing, and to better understand the requirements of our users, as well as to continuously improve our website and enable the respective user to access the website from their computer. This information is stored in log files to guarantee the website’s functionality. In addition, we use the data to optimize our website and to ensure the security of our information technology systems. We do not process the data collected in this context for marketing purposes. The lawful basis for the temporary storage of data and log files is article 6(1)(f) of the GDPR.

2.2. SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption techniques (such as SSL) over HTTPS.

2.1.1. Use of cookies

Our website uses cookies. Cookies are text files that are saved in the user’s web browser or by the user’s web browser on their computer system. If a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a unique string of characters that uniquely identifies the user’s browser when the user returns to the website. Cookies are stored on the user’s computer and transmitted to our site. As a result, you as the user also have full control over the use of cookies. You can deactivate or restrict the use of cookies by changing the settings in your web browser. Any cookies that have already been saved can be deleted at any time. This can also be carried out automatically. Please note that if you deactivate cookies for our website, you may no longer be able to fully use all of our website’s features.

2.1.2. Tracking tools

We use the following tracking and (re-)marketing tools on our website:
Google Analytics

The legal basis for the use of the aforementioned tools is our legitimate interest pursuant to article 6(1)(f) of the GDPR for the purposes of increasing the efficiency of our website and our marketing activities (including direct marketing). Data privacy statement for the use of google analytics

This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer to help the website analyse how visitors use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. However, if IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or other parties to the Agreement on the European Economic Area.
On behalf of the operator of this website Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. The IP address of your browser provided by Google Analytics will not be associated with any other data held by Google.You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can prevent Google’s collection and use of data (cookies and IP address) by downloading and installing the browser plug-in available under

You can prevent the collection by Google Analytics by clicking on the following link. An opt-out cookie will be set that will prevent the future collection of your data when you visit this website: disable Google Analytics.

Further information concerning the terms and conditions of use and data privacy can be found at or at

We point out that on this website Google Analytics has been extended by the code "anonymizeIp" to ensure an anonymous collection of IP addresses (so-called IP-Masking).
(Source: Privacy statement for the use of Facebook remarketing

This website uses the remarketing feature "Custom Audiences" of Facebook Inc. ("Facebook"). This function serves to present to visitors of this website, as part of their visit to the social network Facebook, interest-based advertisements ("Facebook Ads"). For this purpose, the Facebook remarketing tag was implemented on this website. Through this tag, a direct connection to the Facebook servers is made when visiting the website. It is transmitted to the Facebook server that you have visited this website and Facebook assigns this information to your personal Facebook user account. For more information on the collection and use of data by Facebook, as well as your rights in this regard and ways to protect your privacy, please refer to the privacy policy of Facebook at Alternatively, you can disable the remarketing feature "Custom Audiences" at For this you must be logged in to Facebook.

2.2. Use of the services offered on our website

We offer a wide range of services on our website. In order to provide these services, we must collect and process personal data from users or our customers.

2.3. Processing personal data on the basis of our legitimate interests

The object of the company is the marketing of free capacities on the Full Flight Simulators of Lufthansa Aviation Training GmbH in Germany and abroad and the operation of all business and facilities related to this sole corporate purpose. Data collection, processing and use are for the purpose stated above. The processing of personal data takes place in the area of customers (booking, processing and security).
In the event that article 6(1)(f) of the GDPR is our legal basis for processing, in addition to the purposes listed above, our legitimate interests include:

  • Protecting the company from material or immaterial damage
  • Professionalization (of our products and services) 
  • Cost optimization (cost control and cost minimization) 

2.4. Further obligations to process data

Insofar as we are legally obligated to do so, we also process personal data in order to comply with our obligation to retain data as set forth in applicable commercial or tax law or to meet security requirements of Lufthansa Aviation Training GmbH (e.g. § 7 LuftSiG). Further information about retention periods can be found under duration of data processing.

2.5. Obligation to provide personal data

In order to meet statutory or contractual requirements, we have marked the respective fields in the forms on our website that must be filled out so that we can perform the requested contract or service.

2.6. Contact us by e-mail or contact form

If you contact us by e-mail or contact form, the information you provide will be stored for the purpose of processing the request and for possible follow-up questions. We will not transfer your personal data to third parties for promotional purposes or for purposes that do not serve the processing of the request.

3. Duration of data processing

Your personal data will be erased as soon as it is no longer required for the aforementioned purposes. In this context, personal data may be stored for the period of time during which legal claims can be asserted against PF GmbH (statutory limitation period of three to thirty years). In addition, personal data is stored to the extent and for as long as PF GmbH has a legal obligation to do so. Corresponding documentation and retention obligations result from Germany’s Commercial Code, tax code, and money-laundering act, among others. Based on the aforementioned laws, data can be stored for a period of up to 10 years.

4. Right to object pursuant to Article 21 of the GDPR

You have the right to object, at any time, on grounds relating to your particular situation, to the processing of personal data concerning you, which is based on point (e) or (f) of article 6(1) of the GDPR, including profiling based on those provisions.
If you make such an objection, the controller will no longer process your personal data unless the controller can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms or for the establishment, exercise, or defense of legal claims.
Where personal data is processed for direct marketing purposes, you have the right to object, at any time, to the processing of your personal data for the purpose of such marketing; this also applies to profiling insofar as it is conducted in conjunction with such direct marketing.
If you object to the processing of your personal data for direct marketing purposes, we will cease to process your personal data for this purpose.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.

5. Disclosure of personal data to third parties

In the case of priority legal acts of public authorities, we must pass on the necessary personal data to the internal department of Lufthansa Aviation Training and its assigned security service in order to fulfill the purpose stated in point 4 (security check at the entrance to the simulator building).

In order to be able to offer you our products and services based on our contractual obligations or in accordance with our legitimate interests, we may have to disclose your personal data to third parties within or PRO TOURA Group. These recipients can be categorized as follows:
Service providers:

  • special requests:  PRO TOURA GmbH, Kleiner Ort 5, 28357 Bremen; UG, Kleiner Ort 5, 28357 Bremen; PRO TOURA Holding GmbH, Kleiner Ort 5, 28357 Bremen
  • backoffice / accounting: PRO TOURA Holding GmbH, Kleiner Ort 5, 28357 Bremen
  • IT 
  • security check Lufthansa Aviation Training: primarily responsible for all locations: Lufthansa Aviation Training GmbH, Zeppelinstraße 1–3, 85399 Hallbergmoos; Subunternehmer: Gegenbauer Sicherheitsdienste GmbH, Sachsenstraße 8, 20097 Hamburg

In addition, we are legally obligated to disclose personal data to German and international authorities pursuant to article 6(1)(c) of the GDPR in conjunction with local and international regulations and agreements.

6. Rights of the data subject

Ensuring our processing operations are fair and transparent is extremely important to PF GmbH. For this reason, it is important to us that you, as the data subject, can exercise the following rights, in addition to the right of objection, if the respective legal requirements are met:

  • Right of access pursuant to article 15 of the GDPR;
  • Right to rectification pursuant to article 16 of the GDPR; 
  • Right to erasure (“right to be forgotten”) pursuant to article 17 of the GDPR;
  • Right to restriction of processing pursuant to article 18 of the GDPR;
  • Right to data portability pursuant to article 20 of the GDPR 

To exercise your rights, simply send an e-mail to info(a) In this case, we would like to point out that in order to process your request and to identify you, we will process your personal data in accordance with article 6(1)(c) of the GDPR.

7. Consent

If you have given us your consent to process your personal data, we hereby inform you that you have the right to withdraw this consent at any time.
In all other cases or if you have any difficulties withdrawing your consent on this website, you can send an e-mail to info(a)
Please note that the withdrawal of consent only applies to the future and does not affect the lawfulness of processing based on consent before its withdrawal. In certain cases, we may be authorized to continue processing your personal data on another legal basis – such as to fulfil a contract – despite your withdrawal.

8. Disclaimer and limits of this privacy policy

The information regarding data protection provided in this privacy policy only applies to the processing of data on the website: Other websites are not covered by this privacy policy and provide their own specific privacy policy.

9.Enforcement of and compliance with this privacy policy

Proflight GmbH undertakes to adhere to the aforementioned privacy stipulations as described above.
If you have questions regarding the processing of your personal information, you can contact the management directly who, together with the team, is available for inquiries, suggestions, or complaints.

Jens Katenkamp
ProFlight GmbH
Gerold-Janssen-Straße 5
28359 Bremen 
Telefon: 0421 24 13 321
E-Mail: jens.katenkamp(at)

Due to the size of the company we are not obliged to appoint a data protection officer.

Please contact us.

+49 (0)421 24 133-20

Jens Katenkamp Jens Katenkamp

Do you have any questions?

We are happy to assist you and feel free to call us at

+49 421 24 13 321