Version effective as of July 23, 2026
With this privacy policy, we, Global Aviation Talent Exchange (GATE) e.V. (hereinafter “GATE”, “we” or “us”), explain how we process personal data in connection with this website. “Personal data” means any information relating to an identified or identifiable natural person (Art. 4 No. 1 GDPR).
This privacy policy is based on the EU General Data Protection Regulation (“GDPR”), the German Federal Data Protection Act (“BDSG”) and the German Telecommunications Digital Services Data Protection Act (“TDDDG”).
1. Controller / Responsible Entity
The controller responsible for the data processing described in this privacy policy (Art. 4 No. 7 GDPR) is:
Global Aviation Talent Exchange (GATE) e.V.
Wandsbeker Königstr. 33a
22041 Hamburg, Germany
Registered in the Register of Associations (Vereinsregister) of the Local Court (Amtsgericht) of Hamburg under VR 25970.
Email: info@GATE-talentnetwork.com
Executive Board (Vorstand) within the meaning of § 26 BGB: Moritz Kormann (President), Naomi Steiner (Vice-President), Adrian Voß (Vice-President), Fabian Rieg (Treasurer) and Pieter April (Deputy Treasurer). The association is legally represented by two members of the Executive Board acting jointly.
You can contact us at any time using the details above if you have any questions or concerns regarding our data protection practices.
2. Data Protection Officer
A data protection officer has not been appointed, as the statutory conditions under which an appointment is mandatory (Art. 37 GDPR, § 38 BDSG) are not met.
3. Visiting the Website: Server Log Files and Hosting
When you visit this website, the web server automatically processes technical data that your browser transmits. This data comprises: the IP address of the requesting device, date and time of the request, the requested file or page, the referrer URL, browser type and version, operating system, the volume of data transferred and the HTTP status code (server log files).
Purpose: delivering the website to your device, ensuring the stability and security of the website (including the detection and defence of attacks and misuse) and analysing technical errors.
Legal basis: Art. 6 (1) (f) GDPR. Our legitimate interest is the secure, stable and functional operation of the website. The reading of information that is technically strictly necessary to transmit the website to your device is permitted without consent under § 25 (2) No. 2 TDDDG.
Hosting: The website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (“IONOS”), which processes the above data on our behalf as a processor under Art. 28 GDPR. The servers used are located in data centres within the European Union. According to IONOS, the IP addresses of visitors are anonymised directly upon collection, and the server log files are retained for a maximum of eight weeks and then deleted. Further information on data processing by IONOS is available at www.ionos.de/terms-gtc/terms-privacy.
Provision of data: The provision of this technical data is neither required by law nor by contract, but without it the website cannot be displayed on your device.
4. Contact by Email; Contact Form
You can contact us by email at info@GATE-talentnetwork.com. When you do, we process the data you provide (your email address, your name if given, and the content of your message) in order to handle your enquiry.
Legal basis: Art. 6 (1) (b) GDPR, if your enquiry relates to a membership or another contractual or pre-contractual relationship with us; otherwise Art. 6 (1) (f) GDPR, our legitimate interest being the proper handling of enquiries addressed to us.
Storage: We delete the data once your enquiry has been dealt with conclusively, unless statutory retention obligations require longer storage. Providing this data is voluntary; without it, however, we cannot answer your enquiry.
5. Membership
According to our statutes, applications for membership can be submitted in writing or online. If you apply for membership, we process the data contained in your application: your name, your contact details, the type of membership applied for and the further information needed to administer the membership and to collect membership fees.
Purpose: deciding on your application, establishing and administering the membership, collecting membership fees and communicating with members as provided for in our statutes.
Legal basis: Art. 6 (1) (b) GDPR (establishment and performance of the membership relationship) and, for statutory retention, Art. 6 (1) (c) GDPR.
Storage: for the duration of the membership; after the membership ends, data that is relevant under tax law is retained for the statutory retention periods (in particular § 147 of the German Fiscal Code (AO), generally between six and ten years).
Provision of data: Providing this data is necessary to become and remain a member; without it, a membership cannot be established or administered.
Membership applications are not submitted via this website; they can be made in writing or by email in accordance with our statutes.
6. Event Registrations
GATE organises in-person and online events. Registrations for these events are not processed through this website. If an online registration function is introduced, this privacy policy will be updated beforehand.
7. Newsletter
A newsletter is not offered.
If a newsletter is introduced, it will only be sent with your prior express consent (Art. 6 (1) (a) GDPR, § 7 (2) No. 2 of the German Act against Unfair Competition (UWG)), obtained by means of a double opt-in procedure, and this privacy policy will be updated beforehand. You will then be able to withdraw your consent at any time with effect for the future, for example via an unsubscribe link contained in every newsletter.
8. Cookies and Similar Technologies
This website does not set any cookies and does not use similar technologies (such as local storage or tracking pixels).
Should cookies or similar technologies that require consent be introduced in the future, they will only be activated after your effective prior consent (§ 25 (1) TDDDG in conjunction with Art. 6 (1) (a) GDPR), obtained through a separate consent management solution, and this privacy policy will be updated beforehand. Merely using the website does not constitute consent, and any consent given can be withdrawn at any time with effect for the future.
9. Analytics and Tracking Services
This website does not use any web analytics or tracking services.
If such a service is introduced, it will only be activated after your prior consent, in accordance with the principles set out in section 8, and this privacy policy will be updated beforehand.
10. External Links and Embedded Third-Party Content
This website contains links to external websites, in particular to our LinkedIn page. These are plain links: no data is transmitted to the linked providers merely by loading our website. When you follow such a link, the privacy policy of the respective provider applies.
No third-party content (such as videos, maps or social media feeds) is embedded in this website.
11. Recipients and Processors
We only disclose personal data to third parties where this is necessary for the purposes described in this privacy policy or where we are legally obliged to do so. The only processor engaged for this website is our hosting provider IONOS (section 3), which processes personal data on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR. We do not sell personal data.
12. Data Transfers to Countries Outside the EEA
We do not transfer personal data to countries outside the European Economic Area (EEA). The website is hosted in data centres within the European Union (section 3).
Should a transfer to a country outside the EEA become necessary in the future, it will only take place where the requirements of Art. 44 et seq. GDPR are met, in particular on the basis of an adequacy decision of the European Commission or of the EU standard contractual clauses.
13. Storage Periods
We store personal data only for as long as is necessary for the respective purpose stated in this privacy policy. The specific storage periods, or the criteria for determining them, are set out in the sections above. Once the data is no longer required, it is deleted or anonymised, unless statutory retention obligations (in particular under tax law, § 147 AO, generally between six and ten years) require longer storage. Where retention is necessary to establish, exercise or defend legal claims, data is kept until the relevant limitation periods have expired.
14. Data Security
We take appropriate technical and organisational measures in accordance with Art. 32 GDPR to protect personal data against manipulation, loss and unauthorised access. In particular, the website is delivered via an encrypted connection (TLS).
15. Obligation to Provide Personal Data
You are not legally obliged to provide personal data via this website. Without the technical data described in section 3, however, the website cannot be displayed. If you apply for membership, you must provide the data required to establish and administer the membership; otherwise the application cannot be processed. Any further provision of data, for example when contacting us, is voluntary.
16. No Automated Decision-Making
We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
17. Your Rights
Subject to the statutory conditions, you have the following rights with regard to your personal data:
- the right of access (Art. 15 GDPR);
- the right to rectification (Art. 16 GDPR);
- the right to erasure (Art. 17 GDPR);
- the right to restriction of processing (Art. 18 GDPR);
- the right to data portability (Art. 20 GDPR);
- the right to withdraw any consent you have given, at any time with effect for the future (Art. 7 (3) GDPR); the lawfulness of the processing carried out before the withdrawal remains unaffected.
Right to object (Art. 21 GDPR): Where we process your personal data on the basis of Art. 6 (1) (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation. We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. Where personal data is processed for direct marketing purposes, you can object at any time without giving reasons.
These rights are subject to the statutory conditions and exceptions, in particular under Art. 15 to 21 GDPR and §§ 34, 35 BDSG. To exercise your rights, please contact us using the details in section 1. If we have reasonable doubts about your identity, we can request additional information necessary to confirm it (Art. 12 (6) GDPR).
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state of your habitual residence, your place of work or the place of the alleged infringement. The supervisory authority responsible for us is:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (HmbBfDI)
Ludwig-Erhard-Str. 22, 20459 Hamburg, Germany
Phone: +49 40 42854-4040
Email: mailbox@datenschutz.hamburg.de
Website: www.datenschutz-hamburg.de
18. Amendments to this Privacy Policy
We update this privacy policy whenever changes to the website, to our processing activities or to the legal situation make this necessary. The version published on this website applies.