Privacy Policy
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Homecockpit-Simulation
Owner: Sven Lamprecht
Lindenallee 17
91161 Hilpoltstein
Germany
Email: info@homecockpit-simulation.de
Phone: +49 157 31808328
2. Scope
This privacy policy applies to the current Homecockpit-Simulation website including the contact form. If additional services such as an online shop, customer accounts, payment providers, shipping providers, newsletters or analytics/marketing services are activated, this policy will be updated before those services are used.
3. Website delivery and server logs
When the website is requested, the web server processes technically necessary connection and access data. This may include the IP address, date and time, requested resource, HTTP status code, transferred data volume, referrer, browser type/version and operating system.
The purpose is secure and technically reliable website delivery, troubleshooting and protection against abusive access. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable and functional operation of this website.
Server log data is retained only for as long as required for operation, troubleshooting or IT security. Longer retention takes place only where a specific security incident must be investigated or statutory requirements apply.
4. Language detection and language preference
The website is available in German and English. To determine the initial language, the application may evaluate a country code supplied by an upstream system, where available, and the language preference transmitted by the browser in the HTTP “Accept-Language” header. The application does not call an external Geo-IP lookup service for this purpose.
If you manually select a language, your choice is stored in the hc_lang cookie for up to 12 months so that you do not need to select it again on every visit. The legal basis for personal-data processing is Art. 6(1)(f) GDPR. Access to or storage on your terminal device is limited to functionality that is technically necessary or expressly requested by you in accordance with Section 25(2) TDDDG.
5. Technically necessary cookies / session
No analytics, advertising or marketing cookies are currently used. The following technically necessary or functional cookies may be used:
- hc_lang: stores the manually selected language (DE/EN), for up to 12 months.
- PHPSESSID: technically required session identifier used for the contact form, in particular CSRF protection, form state and protection against automated abuse; generally for the session duration or according to the server configuration.
No consent banner for analytics or marketing is currently used because no such services are currently deployed.
6. Contact by email
When you contact us by email, we process the information you provide, in particular your email address, name, message content and any other information you voluntarily provide, in order to respond to your inquiry.
For pre-contractual or contractual inquiries, the legal basis is Art. 6(1)(b) GDPR. For other inquiries, processing is based on Art. 6(1)(f) GDPR and our legitimate interest in responding to incoming communications.
7. Contact form
When using the contact form, we process your name, email address, selected category, subject and message as well as technically necessary session and security information. The website does not store the inquiry in its own database; instead, the inquiry is transmitted by SMTP to our email mailbox.
For email transmission and the mailbox, we use services provided by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. STRATO may therefore process communication and content data required for email transmission.
The legal basis is Art. 6(1)(b) GDPR for pre-contractual/contractual inquiries and otherwise Art. 6(1)(f) GDPR. Data is deleted once the inquiry has been fully handled and no statutory retention obligations or legitimate reasons for further storage remain.
8. Spam and abuse prevention
The contact form uses a CSRF token, a hidden honeypot field, a minimum completion time and a limited test frequency to reduce automated or abusive use. Only technically necessary session information is processed for this purpose. No external CAPTCHA or tracking service is currently used.
9. Fonts
The website uses system fonts. Google Fonts and other external font services are currently not embedded.
10. Wikimedia Commons image
The current A320 cockpit image is technically loaded directly from Wikimedia Commons. When the image is requested, the browser establishes a connection to servers operated by the Wikimedia Foundation and/or its delivery infrastructure. In particular, the requesting device's IP address is technically transmitted; additional technical metadata may also arise.
The image is embedded for the visual presentation of our services on the basis of Art. 6(1)(f) GDPR. Our legitimate interest is a relevant and visually appropriate presentation of the website. Once the image is hosted fully locally, this external request will no longer occur.
Image credit: “EasyJet airbus A320 cockpit”, author Exilexi, licence CC BY 4.0, Wikimedia Commons; cropped and darkened on this website.
11. Recipients
Personal data is disclosed only to parties that require it for the stated purposes. Recipients may include technical infrastructure and communication service providers where their involvement is necessary. Data is not disclosed for address trading or third-party advertising.
12. Transfers outside the EEA
We do not currently intend to independently transfer personal data to countries outside the European Economic Area. However, for externally embedded content – in particular Wikimedia Commons – it cannot be ruled out that technical connection data is processed through international infrastructure. The respective provider's privacy information also applies in this respect.
13. Retention
Personal data is deleted once the relevant purpose no longer applies and there are no statutory retention duties, legal defence interests or other lawful reasons for continued processing. More specific periods or criteria stated in this policy apply to individual processing activities.
14. Your rights
Subject to the statutory requirements, you have rights including access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection to processing based on Art. 6(1)(e) or (f) GDPR (Art. 21 GDPR).
Where processing is based on consent, consent may be withdrawn at any time with effect for the future.
15. Right to object under Art. 21 GDPR
Where we process personal data on the basis of legitimate interests under Art. 6(1)(f) GDPR, you have the right to object at any time on grounds relating to your particular situation. We will then cease processing unless we can demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or the processing is required for the establishment, exercise or defence of legal claims.
16. Right to lodge a complaint
Under Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority. For a private-sector business established in Bavaria, the competent authority is in particular:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Germany
Phone: +49 (0) 981 180093-0
Email: poststelle@lda.bayern.de
17. No automated decision-making
This website currently does not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
18. SSL/TLS encryption
The website is intended to be provided exclusively via HTTPS. This encrypts data in transit between your browser and the web server. Nevertheless, particularly confidential or sensitive information should not be sent through an ordinary contact form or standard unencrypted email.
19. Changes to this privacy policy
This privacy policy will be updated if functions, technical services or legal requirements change. In particular, before the online shop is launched it will be adapted to the shop, payment, shipping, customer-account and, where applicable, marketing services actually used at that time.
Last updated: 03.09.2026