Privacy Policy

Last Updated: January 2025

1. Introduction

This Privacy Policy explains how we collect, use, and protect your personal data when you use our educational flight information service. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) (EU) 2016/679 and Dutch data protection laws.

This service is an independent educational platform and is not affiliated with KLM Royal Dutch Airlines or Amsterdam Airport Schiphol, although it uses publicly available data from the Schiphol API.

2. Data We Collect

2.1 Automatically Collected Data

When you visit our website, we automatically collect certain technical information:

  • IP Address: Used for security and geographic analysis
  • Browser Type and Version: To ensure compatibility
  • Operating System: For technical support purposes
  • Browsing Behavior: Pages visited, time spent on site
  • Referral Source: How you arrived at our website

2.2 Consent Data

We store your consent acceptance in your browser's local storage:

  • Timestamp of consent acceptance
  • Consent status (accepted/declined)
  • This data expires after 24 hours

2.3 Flight Data

All flight information displayed is obtained from the Schiphol Airport public API. We do not store personal travel information or booking details. Flight data is cached for a maximum of 24 hours in compliance with Schiphol API terms.

3. How We Use Your Data

We use the collected data for the following purposes:

  • To provide and maintain our educational flight information service
  • To improve user experience and website functionality
  • To analyze usage patterns and optimize performance
  • To ensure security and prevent abuse
  • To comply with legal obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Data Storage and Retention

In compliance with Schiphol API Terms and Conditions:

  • Flight data obtained from the Schiphol API is cached for a maximum of 24 hours
  • We do not create permanent databases of historical flight information
  • Technical logs are retained for 30 days for security purposes
  • Consent data expires automatically after 24 hours

Important: All flight data is temporary and for educational display purposes only. We do not maintain long-term flight history databases.

5. Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your personal data
  • Right to Restrict Processing: Limit how we use your data
  • Right to Data Portability: Receive your data in a portable format
  • Right to Object: Object to certain types of processing
  • Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact us using the information provided at the bottom of this policy.

6. Cookies and Local Storage

We use minimal cookies and local storage for essential functionality:

  • Consent Storage: To remember your consent status (expires after 24 hours)
  • Session Cookies: For basic website functionality
  • No Tracking Cookies: We do not use advertising or tracking cookies

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

  • Secure HTTPS connections for all data transmission
  • Regular security audits and updates
  • Limited access to personal data on a need-to-know basis
  • Encryption of sensitive data

8. Third-Party Data Sources

This service uses the Schiphol Airport public API to obtain flight information. The flight data is:

  • Managed by airlines and airline handlers in the Central Information System Schiphol (CISS)
  • Provided for educational purposes only
  • Subject to Schiphol's API Terms and Conditions
  • Used only to help actual passengers or people picking up passengers

Prohibited Uses: The flight data may not be used for competitive analysis, claims regarding EU Regulation 261/2004, or other commercial uses not related to actual travel.

9. Children's Privacy

Our service is not directed to children under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of the service after changes constitutes acceptance of the updated policy.

11. Data Protection Authority

You have the right to lodge a complaint with the Dutch Data Protection Authority:

Autoriteit Persoonsgegevens
Postbus 93374
2509 AJ Den Haag
The Netherlands
autoriteitpersoonsgegevens.nl

Contact Information

If you have any questions about this Privacy Policy or your personal data, please contact us through the contact information provided on our website.