|
Summary: Acceptable use limited to your own crew work context; no redistribution without permission. GDPR-aligned processing with data minimization: parser server in AT/EU without persistent storage (brief RAM processing technically necessary); AI analysis via OpenAI and Anthropic (both US) under appropriate safeguards (SCC, DPF where applicable). Official sources take precedence over app outputs. Use at your own risk.
Tax Analysis Tool – Important Notice: The integrated tax analysis tool is a calculation instrument for reference purposes only and is NOT an official tax report or return. All calculations are estimates based on the parameters you provide. You are solely responsible for independently verifying all calculations with a qualified tax professional before submitting any tax documents to authorities. This tool does NOT replace professional tax advice. Use is at your own risk. The developers assume NO liability for any tax-related consequences.

1. Permitted Use & Liability

Personal use by flight crew to manage own rosters and flight-related information. Commercial reuse only with prior written consent.

Disclaimer: Information provided by the app (flight data, weather, AI outputs, tax calculations) is for personal orientation only and does not replace official sources or professional judgment. Use is at your own risk. Liability for accuracy, completeness or timeliness of information is excluded to the extent permitted by law.

2. IP & Third-party Content

App, code, design and DB structures protected. Third-party data (METAR/TAF, ATIS, airline/flight status) remains with right holders; no off-app reuse or scraping without permission.

3. User Conduct

  • No unlawful/offensive content
  • No malware
  • No unauthorized access or mass requests
  • No misleading use of outputs

4. User-generated Content

User holds rights/permissions; personal data of others only where lawful. Provider receives a purpose-bound, temporary processing right (incl. AI/third-party APIs) to deliver the service; no use beyond contract purpose.

5. Account & Security

One account per person (if applicable); keep credentials confidential; report suspicious access.

6. Enforcement & Changes

Measures in case of violations: warnings, feature suspension, termination. Changes will be notified; continued use implies consent where legally permitted.

7. Technical Data & Logs

Server logs (time, resource, device info, IP, errors) for security/stability (Art. 6(1)(f) GDPR); IP anonymization/deletion usually within 30 days.

8. Roster Data (EU Parser)

Transfer to EU server (AT) for JSON parsing; no persistent storage. Brief processing in working memory (RAM) may be technically required. Legal basis: contract performance (Art. 6(1)(b) GDPR); third-party names strictly purpose-bound (Art. 6(1)(f) GDPR).

9. AI Analysis (OpenAI & Anthropic, US)

To provide AI-powered features, content submitted by the user is forwarded to external AI providers:

  • OpenAI, LLC – 3180 18th St, San Francisco, CA 94110, USA
  • Anthropic, PBC – 548 Market St, San Francisco, CA 94104, USA

The provider itself does not permanently store the submitted content. Brief processing in working memory (RAM) may be technically required.

Third-country transfers: Data transfer to the US is based on Standard Contractual Clauses (SCC, Art. 46(2)(c) GDPR) and, where applicable, certifications under the EU-U.S. Data Privacy Framework (DPF). A residual risk of access by US authorities cannot be excluded.

Legal basis: Contract performance (Art. 6(1)(b) GDPR) where AI analysis is necessary to provide the app function; additionally consent (Art. 6(1)(a) GDPR) for optional AI features. Consent may be withdrawn at any time with future effect.

Tip: Submit only what's necessary; avoid sensitive personal details where possible.

10. Weather/Flight APIs & External Services

The app uses the following third-party APIs for flight, weather and location data. All calls are made server-side via our infrastructure (the app does not contact these services directly). Technically, IP address and request metadata are processed on our server; no user data is forwarded to the APIs. Legal basis: legitimate interests (Art. 6(1)(f) GDPR).

  • Deutsche Lufthansa AG / Lufthansa Systems GmbH & Co. KG, Frankfurt – flight status, airport data, schedules
  • Cirium (RELX Group), London, UK – flight status and schedule data via FlightStats API (cirium.com)
  • CheckWX / AvWx Holdings LLC, USA – METAR and TAF weather data (checkwx.com)
  • OpenWeather Ltd., UK – weather forecasts and map tiles (openweathermap.org)
  • Google LLC, USA – location search and details via Google Places API; privacy policy: policies.google.com/privacy

Roster Analysis (External Parser)

Rosters from airlines other than Lufthansa CityLine/Lufthansa City are forwarded for analysis to dienstplankonverter.de. Our server acts as a proxy only; the file is processed there and not stored permanently.

Operator of dienstplankonverter.de (pursuant to § 5 TMG):
Andreas Oelsner, Brenntenhau 11b, 70565 Stuttgart, Germany
Tel.: +49 711 6748383 · E-mail: [email protected]

11. Contact & Support

Processing of your details/messages to handle requests (Art. 6(1)(b/f) GDPR); deletion after completion/statutory retention.

12. Processors & Recipients

Recipients of personal data may include in particular:

  • EU hosting provider (server location: Austria/EU) – for operation and storage
  • OpenAI, LLC (USA) – AI-powered roster analysis (Lufthansa CityLine/City)
  • Anthropic, PBC (USA) – AI-powered content analysis
  • Andreas Oelsner / dienstplankonverter.de, Stuttgart, Germany – roster analysis for all airlines other than Lufthansa CityLine/City (proxy forwarding, no permanent storage)
  • Deutsche Lufthansa AG / Lufthansa Systems, Frankfurt, Germany – flight data API (no user data)
  • Cirium (RELX Group), London, UK – flight data API (no user data)
  • AvWx Holdings LLC / CheckWX, USA – weather API (no user data)
  • OpenWeather Ltd., UK – weather API (no user data)
  • Google LLC, USA – Places API (no user data; SCCs in place)

Data processing agreements pursuant to Art. 28 GDPR and/or appropriate safeguards for third-country transfers (SCC, DPF where applicable) are in place with all processors. No data sales; disclosures to other third parties only by law or explicit consent.

13. Retention

  • Logs: up to 30 days (longer if incidents require)
  • Rosters/screenshots: no persistence; temporary RAM processing only
  • Support emails: until completion/statutory periods

14. Data Subject Rights

Access, rectification, erasure, restriction, portability, objection, withdrawal of consent (Art. 15–21 GDPR). Contact: [email protected]. Right to lodge a complaint with a supervisory authority (e.g., Berliner Beauftragte für Datenschutz und Informationsfreiheit).

15. Security

HTTPS transport, access controls, up-to-date server security; technical and organizational measures (TOMs) adapted to the state of the art (Art. 32 GDPR).

16. Policy Changes

Latest version provided in-app/website; material changes will be proactively communicated.

17. Trial Registration (Device ID, 90 days)

To provide the free 90-day trial, the app sends a pseudonymous device identifier (device_id) and the signup date to our server flightbook.attomic.de (server location: Austria/EU).

The device_id is pseudonymous and does not allow direct identification of a person. No directly identifying personal data is stored; there is no profiling and no linkage with other datasets. The device_id is used exclusively for abuse prevention and is not used for tracking or marketing purposes.

Purposes: Trial management and abuse prevention (e.g., multiple registrations), system stability.

Legal bases: Contract performance/pre-contractual steps (Art. 6(1)(b) GDPR) for providing the trial; legitimate interests (Art. 6(1)(f) GDPR) in preventing abuse.

Retention: for the duration of the trial (90 days); afterwards the entry is deleted unless statutory retention obligations apply.

18. Automated Decisions

No solely automated decision-making within the meaning of Art. 22 GDPR takes place that produces legal effects concerning users or similarly significantly affects them. AI-powered analyses serve exclusively to prepare information and always require independent assessment by the user.

19. Cookies & Tracking

This website uses no cookies for tracking or marketing purposes. No behavioral tracking, remarketing, or third-party analysis of user behavior takes place.

Only the language preference (DE/EN) is stored locally in the user's browser (localStorage) and remains exclusively on the user's device.

Impressum

Angaben gemäß § 5 TMG

Tom Göckeritz
Einzelunternehmer
Kaulsdorfer Straße 8a
12621 Berlin
Deutschland

Telefon: +49 160 954 29239
E-Mail: [email protected]
Website: attomic.de

Hinweis: Dieses Impressum gilt für die App „CrewLog" und alle damit verbundenen Web-Darstellungen.