All Posts →

Privacy Policy

Last Updated: October 2026

This Privacy Policy explains how personal data is collected, processed and protected when you visit and interact with https://iamflyingblog.com (“the Website” or “the Blog”), in compliance with the EU General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and the German Telecommunications-Telemedia Data Protection Act (“TDDDG”).

1. Data Controller

The controller responsible for data processing on this website within the meaning of Art. 4 No. 7 GDPR is:

Seda Sendenel
Düsseldorf, Germany
Email: iamflyingblog@gmail.com
Electronic Contact Form: https://iamflyingblog.com/en/contact/

This website is operated by Seda Sendenel as a private, individual blog and not as a registered commercial company. There is no public user registration, membership area, or customer payment processing on this website.

2. Hosting and Server Log Files

When you access our website, the web server automatically collects and stores technical information transmitted by your internet browser in server log files for technical stability and system security.

The logged information includes:

  • Your Internet Protocol (IP) address
  • Date and time of the request
  • Requested page path or file (URL)
  • Referrer URL (the page visited immediately prior to accessing our site)
  • Browser type and version
  • Operating system and device category

Legal Basis: Art. 6(1)(f) GDPR (our legitimate interest in ensuring the stability, operational integrity, and security of the website, including the detection and prevention of cyberattacks).

Retention Period: Server log data is stored strictly for technical security purposes and is deleted or anonymised as soon as it is no longer required, unless statutory retention obligations apply.

3. WordPress Core Functions and Comments

This website runs on the self-hosted, open-source WordPress platform. There are no public user accounts or member login portals for general visitors.

If you leave a public comment under an article, the information you enter in the comment form (name, email address, comment text) as well as your IP address and browser user-agent string are collected to assist in spam detection.

Legal Basis: Art. 6(1)(a) GDPR (your explicit consent when submitting a comment) and Art. 6(1)(f) GDPR (our legitimate interest in preventing spam and unlawful commentary).

4. Cookies and Consent Management (Complianz)

Our website uses cookies and local storage technologies. Technical, functional cookies are placed to ensure the proper operation of the site, while statistics cookies are placed only with your explicit prior consent.

Cookie consent is managed through Complianz | GDPR/CCPA Cookie Consent:

  • When you first visit the website, a cookie banner informs you about the use of cookies and allows you to select your preferences.
  • Statistics cookies remain disabled by default until you actively grant consent.
  • You can modify or revoke your cookie consent at any time via the consent settings interface on our Cookie Policy page.

Legal Basis: Art. 6(1)(f) GDPR and § 25(2) TDDDG for strictly necessary functional cookies; Art. 6(1)(a) GDPR and § 25(1) TDDDG for statistics cookies (consent).

5. Web Analytics: Google Analytics 4, Google Site Kit & Consent Mode v2

We use Google Analytics 4 (GA4) to analyse visitor interactions and improve our editorial content. The integration is implemented via the official Google Site Kit plugin (Measurement ID: GT-TNF9Z887).

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Consent Mode v2 Implementation:

  • Google Consent Mode v2 is configured on this site. Before you grant consent, measurement and advertising signals (analytics_storage, ad_storage, ad_user_data, ad_personalization) remain set to “denied”.
  • No persistent analytical cookies are placed unless you explicitly consent through the Complianz banner.
  • IP Anonymisation: Google Analytics 4 anonymises IP addresses by default. Your IP address is truncated within member states of the European Union, and full IP addresses are never logged or stored on disk.

Legal Basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG (explicit consent).

International Data Transfers: Data processed by Google Analytics may be transferred to Google LLC servers in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF), and Standard Contractual Clauses (SCCs) are in place.

Data Retention: Event-level data in Google Analytics is automatically erased after the standard retention period (2 months).

6. Google Search Console

We use Google Search Console to monitor the indexing status and search appearance of our website. Search Console does not collect or process personal visitor data from this site; it provides aggregated search query analytics from Google Search.

7. Contact Inquiries and Contact Form 7

When you contact us using the contact form (/en/contact/) or via email at iamflyingblog@gmail.com, the information you provide (name, email address, subject, message text) is processed solely to handle and respond to your inquiry.

Legal Basis: Art. 6(1)(b) GDPR (handling pre-contractual requests or inquiries) and Art. 6(1)(f) GDPR (our legitimate interest in answering incoming communications efficiently).

Retention Period: Inquiries are deleted once the matter has been conclusively resolved and no statutory retention obligations apply.

8. Affiliate Links: Wise

Some articles on this blog (such as our money transfer guides) contain affiliate links. In particular, referral links to Wise (Wise Payments Ltd / Wise Europe SA) — such as https://wise.prf.hn/click/camref:1011l3RFbf — are routed via the Partnerize (Performance Horizon Group) network.

When you click on an affiliate link:

  • You are redirected to the external provider’s website. The provider or affiliate network may set a tracking cookie on their own domain to record that a referral originated from this blog.
  • As the blog operator, we do not receive or process any of your personal, banking, or financial data. We only receive aggregated, anonymous statistics regarding referrals and earned commissions.

Legal Basis: Art. 6(1)(f) GDPR (our legitimate interest in financing the editorial operation of our free blog through performance-based affiliate commissions).

9. External Links

This blog contains links to third-party websites (such as public transport authorities, museums, or official government portals). We have no influence over the data processing practices of external operators. Please consult the respective privacy policies of those external websites.

10. Services Not Used on This Website

For transparency, we explicitly confirm that this website does not use:

  • Google Ads or Google AdSense display advertising networks
  • Retargeting, remarketing, or third-party tracking pixels (such as Meta Pixel)
  • Email newsletter subscription lists or marketing automations
  • E-commerce systems, customer accounts, or payment processing gateways

11. Your Rights Under the GDPR

Under the GDPR, you have the following rights regarding your personal data:

  • Right of Access (Art. 15 GDPR): You have the right to obtain confirmation as to whether your personal data is being processed, and access to that data.
  • Right to Rectification (Art. 16 GDPR): You have the right to request the correction of inaccurate personal data.
  • Right to Erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data where statutory conditions are met.
  • Right to Restriction of Processing (Art. 18 GDPR): You have the right to request the restriction of processing under certain circumstances.
  • Right to Data Portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to Object (Art. 21 GDPR): You have the right to object at any time to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation.
  • Right to Withdraw Consent (Art. 7(3) GDPR): You have the right to withdraw any consent you have granted at any time with future effect.

To exercise your rights, please contact us at iamflyingblog@gmail.com.

12. Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of your personal data infringes data protection law, you have the right to lodge a complaint with a competent supervisory authority (Art. 77 GDPR).

The lead supervisory authority responsible for the operator in North Rhine-Westphalia, Germany is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2-4, 40213 Düsseldorf, Germany
Postal Address: Postfach 20 04 44, 40102 Düsseldorf, Germany
Phone: +49 (0)211 38424-0
Website: https://www.ldi.nrw.de
Email: poststelle@ldi.nrw.de

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our technical operations. The current version will always be published on this page.