Privacy policy

1. Controller

GAT – German Aviation Training, owner Tim Hittinger
Max-Planck-Straße 22, 72810 Gomaringen, Germany
Phone: +49 7072 1352530 · Email: info@german-aviation-training.de

No data protection officer has been appointed, as there is no legal obligation to do so. For data protection questions, please use the contact details above.

2. Overview and legal bases

We process personal data in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). Legal bases are in particular Art. 6(1)(b) GDPR (contract and pre-contractual measures), (c) (legal obligations), (f) (legitimate interests) and – where we explicitly ask for it – (a) (consent).

3. Hosting and server log files

This website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. When you access the website, the server automatically processes data transmitted by your browser: IP address, date and time, page accessed, referrer URL, amount of data transferred, as well as browser and operating system. This is technically necessary to deliver the website and ensure its security (Art. 6(1)(f) GDPR). The log data is deleted or anonymised after a short time. A data processing agreement is in place with the host.

4. No cookies, no tracking

This website sets no cookies, stores nothing in your device’s browser storage and uses no analytics, advertising or social media services. Fonts and graphics are loaded from our own server; no third-party content is embedded unless you open the booking calendar yourself (see section 6).

5. Contact by email, phone or WhatsApp

If you contact us, we process your details (e.g. name, email address, phone number, content of your enquiry) to handle your request (Art. 6(1)(b) or (f) GDPR). We delete the data as soon as it is no longer needed and no statutory retention obligations apply.

If you use WhatsApp, WhatsApp Ireland Limited (Merrion Road, Dublin 4, Ireland) also processes your data; this may include a transfer to Meta Platforms in the USA. Please only use WhatsApp if you agree to this – alternatively, you can reach us by email or phone.

6. Booking via eTermin

For bookings we use the service eTermin of eTermin GmbH, Mättivor 3, 6430 Schwyz, Switzerland. According to the provider, its servers are located in Frankfurt am Main. On our “Book a test” page, the calendar is only displayed once you select a test or click “Show available slots”; on small screens, eTermin’s booking page opens directly. Your IP address and technical information are transmitted to eTermin in the process.

When you book, eTermin processes the data you enter on our behalf (e.g. name, email address, phone number, chosen slot, payment status) to manage the appointment and send you confirmations (Art. 6(1)(b) GDPR). A data processing agreement is in place with eTermin. The European Commission has adopted an adequacy decision for Switzerland. eTermin may set technically necessary cookies, for example for language selection. More information: eTermin privacy policy.

7. Payment service providers

You can pay by PayPal, credit card or bank transfer. For PayPal, PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg, is responsible; credit card payments are processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. We or our booking provider transmit the data required for payment to the chosen payment service (Art. 6(1)(b) GDPR). The respective provider’s privacy notices also apply.

8. Conducting the language test

The test takes place by video conference via Zoom (Zoom Communications, Inc., USA; certified under the EU-US Data Privacy Framework). For the test, the identity check and the certificate, we process your identity and licence data (e.g. name, date and place of birth, address, copy of ID and licence) as well as your test performance and result. We pass this data on to the language testing body LTB 112, which carries out the second assessment and issues the certificate; within the scope of official supervision it may be made available to Austro Control GmbH.

The legal bases are Art. 6(1)(b) GDPR (performance of the contract) and (c) GDPR (obligations under aviation rules for language assessments). You will receive details – for example on retention periods – with our privacy form after booking.

9. Tech check and sample tasks

The tech check and the recording feature on our practice pages run exclusively in your browser. Camera image, microphone signal, recordings and your entries are neither transmitted to us or third parties nor stored. You grant access to camera and microphone yourself via your browser; it ends when you stop the test or leave the page.

10. External links

Links to other websites (e.g. authorities, ProvenExpert, Google, the Zoom test) are only called up when you click them. From then on, the respective provider’s privacy policy applies.

11. Retention period

We only store personal data for as long as necessary for the respective purpose. Statutory retention obligations, for example under commercial and tax law (usually six or ten years for booking and invoice documents), remain unaffected.

12. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw any consent given at any time with effect for the future.

You can also lodge a complaint with a data protection supervisory authority, for example the authority responsible for us: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

13. Encryption

For security reasons, this website uses TLS encryption. You can recognise it by the padlock symbol and “https://” in the address bar.

Last updated: September 2026