Privacy notice
Who runs Ventera and how we handle data.
These texts contain the supplied operator details. The conditions for using external services and publishing live flight data still need to be clarified. This version does not confirm a completed legal review of the operation.
1. Controllers and contact
Ruhrorterweg 22
59439 Holzwickede
Germany
Germany
Shared contact for this website and privacy requests:
felixcuesta980@gmail.com
We jointly operate Ventera Air and jointly determine the purposes and means of the processing described here. You may exercise your privacy rights against either of us; the shared email address is an additional central contact point.
To be completed before publication: document the allocation of responsibilities and add the essence of the arrangement required by Article 26 GDPR here.
2. How this website works
You can use this website without registering. It has no contact form, newsletter, user accounts or payment function. We have not added advertising trackers or tools that analyse individual visitors. Images, fonts, the map library and base map data are served by the website server.
Visits involve technically necessary connection data. When you save destinations, your browser stores the chosen route numbers on your device. Messages and participation in our Discord involve communication data. The live map may also display flight data from Newsky.
3. Hosting and security: Cloudflare
The website is configured for Cloudflare Workers. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. When a page is requested, its hosting infrastructure receives data including IP address, request time, requested address and technical browser and connection information. This supports delivery, error handling and security.
Our necessary hosting and security processing relies on Article 6(1)(f) GDPR. Our legitimate interest is a functional, reliable website protected against misuse. Connection data is necessary to deliver the requested website.
The supplied configuration disables additional Workers invocation logs. Our application does not create its own visitor logs. Cloudflare may separately process technical network and security data. Its retention criteria include the relevant operating and security purpose, data type and legal requirements. We therefore do not state one fixed retention period for all Cloudflare data.
Before publication, verify the actual Cloudflare contract and plan, valid incorporation of the data processing agreement, dashboard settings, other logs and any data exports. Disabling Workers Logs does not disable all processing by Cloudflare.
Cloudflare Privacy Policy · Cloudflare Data Processing Addendum
4. Saved destinations and cookies
When you save a destination, we store its route number in your browser under ventera-saved-v1. Saved numbers are read again when you return. This does not collect names or email addresses, and your list is not sent to us. Storage ends when you clear the list or this website’s browser data. Our code does not create this entry if you do not use the feature.
Storage and access are solely for your requested saved destinations feature. We rely on section 25(2)(2) TDDDG. To the extent personal data is involved, our legitimate interest in providing the requested feature is the basis under Article 6(1)(f) GDPR. If browser storage is blocked, the list remains available only during the page visit.
Our website code does not set cookies. Depending on the security features actually enabled, Cloudflare may use security cookies, for example for a security check. This does not happen automatically on every Cloudflare website. Storage access that is not strictly necessary requires valid prior consent; mentioning it here does not replace that consent.
The supplied public website URL returned an error page during the check on 29 September 2026. Cookie use on the deployed website therefore remains unverified. After deployment, check actual cookies, purposes and lifetimes and add them here as necessary.
5. Contact by email
If you email us, we process your sender address, displayed name, message content, attachments and technical message information. Entering those details in your own email program does not prevent us from receiving them.
We use the data to handle your enquiry and reply as needed. The basis is Article 6(1)(f) GDPR; our legitimate interest is responding to messages you voluntarily send us. Providing this information is voluntary. We cannot reply by email without a reachable sender address.
The listed mailbox uses Gmail. For users in the European Economic Area, Google identifies Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as its provider or controller. Google processes messages and technical data to provide the service. We do not use received messages for advertising.
Enquiries are retained for as long as needed to handle them and foreseeable follow-up questions. They should then be deleted unless specific legal duties or establishing, exercising or defending claims require further retention. In that case, use must be restricted to that purpose.
The suitability of the personal Gmail account and the required contractual basis for its use as a project mailbox still need review. We do not claim that a data processing agreement with Google has been concluded. Both operators must implement the described deletion process.
6. Discord and our community
The Discord link leads to an external platform. We do not embed a Discord widget. Merely visiting our website does not make our website code contact Discord. Opening the link takes you to Discord.
When you join or post on the server, we and authorised members or moderators can see data such as your Discord name, user ID, profile picture, roles and posts. Messages, shared files and voice contributions are available to other participants according to the channels you use. Keeping data within Discord does not mean that we, as server operators, perform no processing.
Our purpose is organising and moderating the free flight simulation community. The basis is Article 6(1)(f) GDPR insofar as our interests in communication, organisation and community protection are not overridden by your rights. Children’s interests require particular consideration. Under the currently described process, we do not maintain additional application forms or external member lists.
Discord also processes data for its own platform purposes. For EEA users this is Discord Netherlands BV, Schiphol Boulevard 195, 1118 BG Schiphol, Netherlands. Operating a server there does not by itself make Discord our processor.
Channel permissions determine who can see your posts. Leaving the server does not automatically delete your posts. You can edit or delete your own posts using Discord’s tools and contact us about deletion. We remove data under our control once no longer needed for the relevant community purpose unless overriding reasons require retention. Discord’s own retention is covered by its notices.
Still to verify: actual bots, moderation logs, roles with data access and the Discord server’s deletion process. Additional services must be added to these notices before use.
7. Live flights from Newsky
The live map is configured for active Ventera flights. Its source is Newsky’s airline API. Newsky identifies Gotaclue Robert Miroszewski, Poland, as its provider. Our server queries the API, and the browser receives a response limited to map display from our server. Visitor IP addresses and browser cookies are not forwarded to the Newsky API. A separate Newsky link takes you to the external platform.
The public response includes flight identifier or number, airline, aircraft type and designation, departure and arrival airports, available coordinates, heading, altitude, speed and timestamps. Our server may receive a more detailed upstream response but only selects fields for the display. The adapter does not publish pilot names, profile images, email addresses or account data. Flight identifiers may still be linked to a pilot on Newsky; we therefore do not describe the data as inherently anonymous.
The purpose is a current overview of the virtual operation for the community. Article 6(1)(f) GDPR is the proposed basis: an interest in displaying shared flight simulation activity. This requires a documented balance against pilots’ rights. Prior availability on Newsky does not replace that assessment or information about additional publication. Recipients of displayed data are visitors to this public website.
Successful responses are normally cached for 60 seconds. During an outage, a labelled last-known response may be shown for up to ten minutes. The application maintains no flight archive or database of movement history. Flights cease to appear at the next successful update once Newsky no longer reports them as active. Other visitors may independently copy public information.
If you are an affected pilot, contact us at the email address above. In particular, you may object for reasons relating to your particular situation. Please identify the flight so that we can assess your request.
Before activation, clarify permitted airline access, terms of use, information to pilots and the balancing assessment. Section 12 of Newsky’s terms published on the review date states a minimum age of 18. No individual exception has been demonstrated.
8. Recipients and processing outside the EEA
Depending on use, Cloudflare, Google and Discord receive the data described above. Live flight data originates from Newsky and is delivered to visitors via the hosting infrastructure. Authorities or other parties receive data only where a legal obligation or another valid basis applies.
Cloudflare, Google and Discord may process data in the United States or other countries outside the European Economic Area. Their published safeguards include adequacy decisions and standard contractual clauses. The basis applicable to your specific contract must be checked before publication. Visiting the website is not treated as blanket consent.
The applicable safeguards under Articles 44 et seq. GDPR for the actual hosting and email arrangements still require confirmation. The links below provide the providers’ published terms; they do not replace that assessment.
Cloudflare · Google · Discord
9. Your privacy rights
Subject to the relevant legal requirements, you may request access, rectification, erasure, restriction of processing and data portability under Articles 15–20 GDPR. Portability mainly concerns automated processing based on consent or a contract. Not every right applies in every situation.
Objection: Where processing relies on Article 6(1)(f) GDPR, you may object under Article 21 for reasons relating to your particular situation. We must then stop unless overriding compelling legitimate grounds apply or the data is needed to establish, exercise or defend legal claims.
You can withdraw consent at any time for the future. Withdrawal does not affect the lawfulness of earlier processing. We do not make solely automated decisions producing legal or similarly significant effects on you or carry out such profiling.
You may also complain to a supervisory authority, in particular where you habitually live, work or believe an infringement occurred. The North Rhine-Westphalia data protection authority is a competent contact for our location. You do not have to contact us first before lodging a complaint.
10. Minors and external platforms
The website does not collect dates of birth and has no registration system. Participation in external services is subject to their actual age and consent requirements. Our intention to provide an open community does not override those rules.
Discord requires compliance with its minimum age and applicable country requirements; under its terms, parents or legal guardians must agree to the terms for users who have not reached the age of majority. Newsky’s published terms state a minimum age of 18. Please check the linked terms before using either service.
11. Version and changes
Review draft dated 29 September 2026. The description is based on the website package and information supplied by its operators. Changes to services, features or processing require the notice to be updated before use. Outstanding review items are visibly marked in this version.