Contents 14 sections
- 1. Controller
- 2. Website hosting
- 3. Server log files
- 4. Contact by email, phone and WhatsApp
- 5. Form before booking (voluntary details)
- 6. WhatsApp community
- 7. Redirect to booking with the organiser
- 8. Cookies and audience measurement
- 9. Embedded content (fonts, maps, videos)
- 10. Gull game and leaderboard
- 11. Retention periods
- 12. Your rights
- 13. Right to lodge a complaint with a supervisory authority
- 14. Changes to this notice
Contents
- 1. Controller
- 2. Website hosting
- 3. Server log files
- 4. Contact by email, phone and WhatsApp
- 5. Form before booking (voluntary details)
- 6. WhatsApp community
- 7. Redirect to booking with the organiser
- 8. Cookies and audience measurement
- 9. Embedded content (fonts, maps, videos)
- 10. Gull game and leaderboard
- 11. Retention periods
- 12. Your rights
- 13. Right to lodge a complaint with a supervisory authority
- 14. Changes to this notice
Privacy notice
Good to have you here. This is where you find out what happens to your data when you visit our website, write to us or are interested in a training. In short: we collect as little as possible. There are no advertising cookies, no external services for fonts, maps or videos, and we don't pass on anything you haven't entrusted to us yourself.
1. Controller
The controller responsible for processing your data on this website is:
Soaring Perfection
Kai Kessler
Am Buch 3
36391 Sinntal
Email: info@soaring-perfection.de
We are not required to appoint a data protection officer. For any questions about data protection, just write to the email address above.
2. Website hosting
This website runs on a server operated by Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany, in a data centre in Nuremberg, Germany. Hetzner processes the data exclusively on our behalf on the basis of a data processing agreement under Art. 28 GDPR.
The server is maintained by netzdirektion – Gesellschaft für digitale Wertarbeit mbH, Patrick Dornbusch, Adam-Foßhag-Straße 29, 65428 Rüsselsheim am Main, also on the basis of a data processing agreement. This service provider too is contractually bound by our instructions and by the GDPR.
The legal basis is our legitimate interest in providing the website securely and quickly (Art. 6 (1) (f) GDPR).
3. Server log files
Every time a page is requested, the web server automatically stores information your browser transmits: the IP address, date and time, the page requested, the page visited before (referrer), browser type and operating system, and the status code of the response.
We need this data to run the website reliably, detect attacks and find errors. It is not combined with other data and is deleted automatically after 14 days. The legal basis is our legitimate interest in secure operation (Art. 6 (1) (f) GDPR).
4. Contact by email, phone and WhatsApp
If you write to us or call, we store your details (name, contact details, content of your enquiry) to answer your enquiry and for follow-up questions. The legal basis is the initiation or performance of a training (Art. 6 (1) (b) GDPR) or our legitimate interest in answering your enquiry (Art. 6 (1) (f) GDPR).
If you write to us via WhatsApp, WhatsApp Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, processes your phone number, metadata and – end-to-end encrypted – the content of your message under WhatsApp's privacy policy (https://www.whatsapp.com/legal/privacy-policy-eea (opens in a new tab)). Data may be transferred to the USA in the process; the parent company Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework. If you'd rather not, simply use email or phone.
We delete enquiries as soon as they are dealt with and no statutory retention obligation stands in the way.
5. Form before booking (voluntary details)
Before you go on to book with the organiser, you can tell us how to reach you: name, email address and phone number – all voluntary. Along with that we store the date or camp you chose, what you want (booking, pre-registration or enquiry), the time of your consent and the wording of the consent text you agreed to. For pre-registrations and enquiries we need at least an email address or phone number, otherwise we can't get back to you.
Purpose: Kai gets in touch before your training week, answers questions about gear and level and lets you know as soon as there are dates or your request has been sorted out. The legal basis is your consent (Art. 6 (1) (a) GDPR). You can withdraw it at any time with effect for the future, for example by email; we then delete your details.
You can also skip this step: “Continue directly” takes you to the organiser without entering anything. In both cases we only count anonymously which of the two routes was chosen (date, variant and time) to check whether the step is useful. No personal data is created in the process.
We delete your details automatically 12 months after the entry, earlier on request. They are not passed on to the organiser – booking there is separate.
6. WhatsApp community
On request, Kai adds your mobile number to the SPT WhatsApp community. That's where you find wind updates, meeting points and info about the camp. This only happens if you tick the box for it in the form – separately from the consent to being contacted. The legal basis is your consent (Art. 6 (1) (a) GDPR).
We store your number with a note that you want to join the community and add it on WhatsApp. WhatsApp Ireland Limited (see above) thereby learns your number and your membership; other members of the community can see your number and your profile, depending on your WhatsApp settings. The community is run by Kai as administrator.
You can leave the community at any time via WhatsApp or write to us; we then remove your number from our list.
7. Redirect to booking with the organiser
Booking is not done with us but with the organiser of the respective date: Papillon Paragliding, Heli Schrempf or the flying school Fly Hohe Wand. When you click the booking button, you leave our website. We do not transmit any data about you in the process; your browser only sends the organiser the usual connection data and, where applicable, the address of our page as referrer.
From there on, the organiser's privacy policy applies. Everything you enter there stays between you and the organiser.
8. Cookies and audience measurement
This website only sets one technically necessary session cookie and one cookie to protect the forms from misuse (CSRF protection). Neither contains any data about you, neither is used to recognise you, and both expire no later than two hours after your last visit. That's why we don't need a cookie banner. We don't use advertising or tracking cookies, Google Analytics or similar services.
To know how many people visit the site and whether the path to booking works, we count ourselves – without cookies and without external services. From your IP address and browser identifier, together with a random value that changes daily, we form a short hash. The IP address is only processed at the moment of the request and never stored. The hash is only valid for the current day; the next day the same visit produces a different value, and even we cannot reverse it. What's stored per day is the number of visits, page views per page, whether someone looked at the camps, opened the booking step or clicked the booking button, how many pages a visit covered, how much time passed between the first and last request, and which content was opened or clicked (such as a team profile, an FAQ answer, a link or a simulator). If your browser tells us which site you came from, we only keep the name of that website (such as “google.de”), never the full address. After the end of the day, only totals remain, without any link to a person.
We don't count visitors with “Do Not Track” or “Global Privacy Control” enabled in their browser; nor search engines or logged-in admin users. The legal basis is our legitimate interest in understanding how the website is used, in anonymous form (Art. 6 (1) (f) GDPR). Since nothing is stored on or read from your device, no consent under Section 25 TDDDG is required for this.
9. Embedded content (fonts, maps, videos)
We do not embed any third-party content. The fonts are hosted on our own server, the map of Europe is our own graphic, and we don't use videos or map services such as YouTube or Google Maps. So no connection to other providers is established when you open our pages.
Links to organisers, partners and other websites only open when you click them; from there on, the respective provider's privacy policy applies. Should we embed videos or other external content later, we will add to this section.
10. Gull game and leaderboard
You don't need an account or an email address for the gull game. Your progress (levels completed, best times, the flight track of your best flight as a “ghost”) and – if you enter one – your nickname with a key that reserves the name for you are stored by your browser on your device (local storage). This data never leaves your device, we cannot read it, and you can delete it at any time in your browser settings.
For the leaderboard, the game sends every completed flight to our server: level, wind conditions, start and end time, flight time, crashes, rings and split times. So that nobody fills the list with manipulated flights, we additionally store a hash of your IP address for each flight for 30 days (formed with a daily changing random value, not reversible); we do not store the IP address itself. The legal basis is our legitimate interest in fair play (Art. 6 (1) (f) GDPR).
If you enter a nickname, it appears publicly in the leaderboard along with your time. You can choose any nickname – please don't use a real full name. The legal basis is your voluntary entry (Art. 6 (1) (a) GDPR). If you want an entry removed, send us the nickname; we delete it and its flights.
11. Retention periods
- Server log files: 14 days
- Details from the form before booking: 12 months after the entry, earlier on withdrawal
- Mobile number for the WhatsApp community: until you leave or withdraw consent, see the WhatsApp community section
- Anonymous count of visits, booking clicks and opened content: hash only until the end of the day, daily totals without personal reference indefinitely
- Game: hash of the IP address 30 days, flights and nicknames until you ask for deletion; flights never completed are deleted automatically
- Emails and enquiries: until they are dealt with; business letters we must retain under commercial or tax law, six or ten years respectively
Data on your device (the game's local storage) stays until you delete it in your browser.
12. Your rights
You have the right to obtain information from us about your stored data (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18) and to data portability (Art. 20). You can object to processing based on our legitimate interest on grounds relating to your particular situation (Art. 21 GDPR). You can withdraw consent you have given at any time with effect for the future (Art. 7 (3) GDPR).
For all of this, an email to info@soaring-perfection.de is enough. We reply as quickly as possible, at the latest within one month.
13. Right to lodge a complaint with a supervisory authority
If you believe we are not processing your data lawfully, you can complain to a data protection supervisory authority – the one where you live or the one responsible for us:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Gustav-Stresemann-Ring 1
65189 Wiesbaden
https://datenschutz.hessen.de (opens in a new tab)
You can find an overview of all supervisory authorities in Germany at the Federal Commissioner for Data Protection at https://www.bfdi.bund.de (opens in a new tab).
14. Changes to this notice
If the website or the legal situation changes, we adapt this notice. The version published here always applies; you can find the date it was last updated at the end of the page.
Last updated: 23 Oct 2026