{"id":9048,"date":"2026-05-27T08:21:24","date_gmt":"2026-05-27T07:21:24","guid":{"rendered":"https:\/\/zal.aero\/?page_id=9048"},"modified":"2026-06-04T07:28:59","modified_gmt":"2026-06-04T06:28:59","slug":"privacy-policy-roger","status":"publish","type":"page","link":"https:\/\/zal.aero\/en\/privacy-policy-roger\/","title":{"rendered":"Data Policy ROGER"},"content":{"rendered":"

[vc_section el_id=”intro”][vc_row][vc_column][vc_custom_heading text=”ROGER Privacy Policy” font_container=”tag:h1|text_align:left” use_theme_fonts=”yes” css=”” el_class=”push_nav_headline”][vc_column_text css=”” el_class=”eingerueckt-1″]Last updated: June 2026<\/p>\n

1 General<\/h2>\n

1.1 Controller<\/p>\n

The controller responsible for data processing in the ROGER app is:<\/p>\n

ZAL GmbH
\nHein-Sa\u00df-Weg 22
\n21129 Hamburg, Germany
\nPhone: +49 40 248 595-0
\nE-mail: info@zal.aero<\/p>\n

ROGER is the communications app of ZAL GmbH. ROGER is aimed at customers, partner networks, employees, and anyone with an interest in ZAL and its topics.<\/p>\n

For further information and contact options, please refer to our legal notice at zal.aero.<\/p>\n

1.2 Data Protection Officer<\/h3>\n

You can reach our Data Protection Officer at:<\/p>\n

DS EXTERN GmbH
\nDipl.-Kfm. Marc Althaus
\nFrapanweg 22, 22589 Hamburg, Germany
\nContact form: https:\/\/www.dsextern.de\/anfragen\/<\/p>\n

1.3 Legal Bases<\/h3>\n

Personal data is processed on the following legal bases:<\/p>\n

1. Consent pursuant to Art. 6(1)(a) GDPR: Upon registration, you will be informed about data processing and give your consent by active confirmation.<\/p>\n

2. Legitimate interests pursuant to Art. 6(1)(f) GDPR: Where processing is necessary for the operation of the app and the provision of its functions.<\/p>\n

1.4 Your Rights<\/h3>\n

You have the right at any time to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and to object to processing (Art. 21 GDPR).<\/p>\n

Withdrawal of consent: Any consent given may be withdrawn at any time with effect for the future (Art. 7 GDPR).<\/p>\n

In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged infringement. This right of complaint exists without prejudice to other administrative or judicial remedies.<\/p>\n

To exercise your rights, please contact the Data Protection Officer listed above or write to: help-roger@zal.aero<\/p>\n

1.5 Disclosure to Third Parties<\/h3>\n

We only transfer personal data to third parties in accordance with the applicable legal provisions. We engage processors with whom data processing agreements pursuant to Art. 28 GDPR have been concluded (see Section 3).<\/p>\n

Where data is transferred to countries outside the EU\/EEA, this only takes place where an adequate level of data protection is ensured, consent has been given, or the transfer is otherwise permitted by law.<\/p>\n

1.6 Retention Periods<\/p>\n

Personal data will be deleted once the purpose of processing has ceased and no statutory or contractual retention obligations apply. Unless a different retention period is specified in these notices, this principle applies.<\/p>\n

2 Data Processing<\/h2>\n

2.1 Technical Connection Data<\/h3>\n

When the app is accessed, connection data is technically processed by the server, including IP address, time of access, and device information. This data is not evaluated on a personal basis and is used exclusively for the technical operation of the app.<\/p>\n

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the stable operation of the app).<\/p>\n

The app contains links to external websites (e.g. event calendar, cafeteria menu). The respective privacy notices of those external sites apply; we have no influence over their content or data processing.<\/p>\n

2.2 User Account<\/h3>\n

Authorised ROGER users gain access to additional functions upon sign-in. The following personal data is processed in this context:<\/p>\n

– First and last name
\n– E-mail address
\n– ZAL ID<\/p>\n

Legal basis: Art. 6(1)(a) GDPR (consent), Art. 6(1)(f) GDPR.<\/p>\n

2.3 Service Forms<\/h3>\n

Authorised users can submit various service requests and applications digitally via ROGER.<\/p>\n

The data stored in the user profile (name, e-mail address) is pre-filled automatically. Depending on the form, additional information may be required. The details you provide in the request form, including the contact information you supply, are stored for the purpose of processing your request and handling any follow-up queries. We do not share this data without your consent.<\/p>\n

Processing is carried out on the basis of Art. 6(1)(b) GDPR where your request relates to the performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries directed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) where this has been obtained; consent may be withdrawn at any time.<\/p>\n

The data you provide via the form will be retained until you request deletion, withdraw your consent to storage, or the purpose for storage no longer applies (e.g. after your request has been fully processed). Mandatory statutory provisions \u2013 in particular statutory retention periods \u2013 remain unaffected.<\/p>\n

Legal basis: Art. 6(1)(f) GDPR.<\/p>\n

2.4 Push and E-mail Notifications<\/h3>\n

Push notifications:
\nWith your consent, notifications are displayed directly on your device. For this purpose, a device ID is assigned and linked to your account. You can disable push notifications at any time in your device settings.
\nLegal basis: Art. 6(1)(a) GDPR (consent).<\/p>\n

E-mail notifications:
\nFor important information, notifications may be sent to the e-mail address stored in your profile. You can configure this in your profile settings.
\nLegal basis: Art. 6(1)(f) GDPR.<\/p>\n

 <\/p>\n

2.5 Account Deletion<\/p>\n

If an account is deleted, content created by the user remains in the app. The author information (first and last name) will be pseudonymised and replaced by a placeholder. Personal data will be deleted once the purpose of processing has ceased and no statutory retention obligations apply.<\/p>\n

3 Service Providers<\/h2>\n

Data is hosted by the solution provider Staffbase GmbH under a data processing agreement pursuant to Art. 28 GDPR. Staffbase engages the following sub-processors:<\/p>\n

Microsoft Ireland Operations Ltd. (Azure)
\nSouth County Business Park, One Microsoft Court, Dublin, Ireland.
\nData is hosted in a Microsoft data centre in Germany; transmission and storage are encrypted.<\/p>\n

Cloudflare, Inc.
\n101 Townsend St, San Francisco, USA.
\nContent delivery network for the provision of media files. Storage within the EU.<\/p>\n

Zendesk, Inc.
\n989 Market Street, San Francisco, CA 94103, USA.
\nCustomer support management. Processing within the EU.<\/p>\n

Google LLC (Firebase Cloud Messaging)
\n1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
\nDelivery of push notifications via random instance IDs without personal reference.<\/p>\n

Last updated: June 2026 | Version 1.0
\n[\/vc_column_text][\/vc_column][\/vc_row][\/vc_section]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"

[vc_section el_id=”intro”][vc_row][vc_column][vc_custom_heading text=”ROGER Privacy Policy” font_container=”tag:h1|text_align:left” use_theme_fonts=”yes” css=”” el_class=”push_nav_headline”][vc_column_text css=”” el_class=”eingerueckt-1″]Last updated: June 2026 1 General 1.1 Controller The controller responsible for data processing in the ROGER app is: ZAL GmbH Hein-Sa\u00df-Weg 22 21129 Hamburg, Germany Phone: +49 40 248 595-0 E-mail: info@zal.aero ROGER is the communications app of ZAL GmbH. ROGER is aimed at […]<\/p>\n","protected":false},"author":9,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-9048","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/zal.aero\/en\/wp-json\/wp\/v2\/pages\/9048","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zal.aero\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/zal.aero\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/zal.aero\/en\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/zal.aero\/en\/wp-json\/wp\/v2\/comments?post=9048"}],"version-history":[{"count":1,"href":"https:\/\/zal.aero\/en\/wp-json\/wp\/v2\/pages\/9048\/revisions"}],"predecessor-version":[{"id":9066,"href":"https:\/\/zal.aero\/en\/wp-json\/wp\/v2\/pages\/9048\/revisions\/9066"}],"wp:attachment":[{"href":"https:\/\/zal.aero\/en\/wp-json\/wp\/v2\/media?parent=9048"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}