Privacy Policy

Privacy Policy

Last updated: October 2026

1. Controller and General Information

This Privacy Policy explains how AviaSpark e.U. processes personal data in connection with SoloCompass, including the SoloCompass website, product waitlist, application, customer accounts, support services and purchases.

Data Controller:

Personal data is processed in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Website Hosting and Technical Delivery

Cloudflare Pages

The SoloCompass website is hosted and delivered using Cloudflare Pages, provided by Cloudflare, Inc. and its affiliated entities.

When you access the website, technical information may be processed as necessary to deliver, secure and maintain the website and its infrastructure. This may include technical request information such as IP address, browser information, device information, requested resources and timestamps, depending on the applicable Cloudflare services and configuration.

Purpose: Technical delivery, security, abuse prevention and reliable operation of the website.

Legal basis: Legitimate interests in operating and securing the website (Art. 6(1)(f) GDPR).

Cloudflare may process data internationally as part of its global infrastructure. Further information is available in the Cloudflare Privacy Policy.

Cloudflare Web Analytics

If Cloudflare Web Analytics is enabled on the Solocompass website, it is used to understand general website performance and usage.

Cloudflare describes Web Analytics as a privacy-focused analytics service that does not use cookies or local storage for analytics and does not track individual visitors across websites.

Purpose: Understanding website performance and improving the website.

Legal basis: Legitimate interests in maintaining and improving the website (Art. 6(1)(f) GDPR).

3. User Accounts and Application Data

Supabase

SoloCompass uses Supabase to provide database infrastructure and user authentication for the application.

Depending on how you use Solocompass, the following information may be processed:

  • Email address
  • Account and authentication information
  • Account creation and related timestamps
  • Application data entered or created by you while using SoloCompass
  • Technical information required to operate and secure the application

Purpose: Creating and managing user accounts, authenticating users, storing application data and providing the SoloCompass service.

Legal basis: Processing necessary for the performance of the contract or to take steps at your request before entering into a contract (Art. 6(1)(b) GDPR).

Supabase provides database and authentication infrastructure on behalf of Solocompass. Further information is available in the Supabase Privacy Policy.

4. Customer Support and Live Chat

Tawk.to

SoloCompass uses Tawk.to to provide customer support and, where enabled, live chat or chatbot functionality within the application.

Depending on your interaction with the support service, information such as your name, email address, message content, IP address, browser information and other technical information may be processed.

Purpose: Providing customer support, responding to questions and assisting users with the SoloCompass service.

Legal basis: Processing necessary to provide customer support in connection with the service (Art. 6(1)(b) GDPR) or legitimate interests in providing efficient customer communication and support (Art. 6(1)(f) GDPR), depending on the circumstances.

Further information is available in the Tawk.to Privacy Policy.

5. Purchases and Payments

Creem

SoloCompass uses Creem as a merchant of record and payment service provider for purchases and subscriptions.

When you purchase SoloCompass, Creem may process payment and transaction information required to complete the purchase. Depending on the transaction, AviaSpark e.U. may receive information from Creem such as:

  • Name
  • Email address
  • Country
  • Order and checkout identifiers
  • Product and subscription information
  • Other information provided through the checkout where applicable

Creem handles the payment transaction as merchant of record. AviaSpark e.U. does not receive or store your full payment card details through the normal Creem checkout process.

Purpose: Processing purchases and subscriptions, providing access to Solocompass, managing customer accounts and subscriptions, and fulfilling legal and accounting obligations.

Legal basis: Performance of the contract (Art. 6(1)(b) GDPR) and compliance with legal obligations where applicable (Art. 6(1)(c) GDPR).

Creem and AviaSpark e.U. may each process certain buyer information as independent controllers for their respective processing activities. Further information is available in the Creem Privacy Notice and the applicable Creem Buyer Terms.

6. Waitlist and Email Communications

MailerLite

MailerLite may be used to manage the SoloCompass waitlist, email courses and product-related email communications.

Depending on the communication, the following information may be processed:

  • Email address
  • Name, where provided
  • Subscription and consent information
  • Subscription date and related technical information
  • Email engagement information, such as opens and link clicks, where provided by the service

Purpose: Managing subscriptions and delivering requested email communications, product updates and other communications for which you have subscribed.

Legal basis: Consent (Art. 6(1)(a) GDPR) where consent is required and has been given.

You can withdraw consent and unsubscribe from marketing communications at any time using the unsubscribe mechanism provided in the relevant email.

Further information is available in the MailerLite Privacy Policy.

7. Business Email

Google Workspace

Email correspondence with Solocompass or AviaSpark e.U. is processed using Google Workspace.

Depending on the communication, this may include your email address, name, message content, attachments and other information voluntarily included in the correspondence.

Purpose: Receiving and responding to customer communications, support requests, business enquiries and other correspondence.

Legal basis: Depending on the circumstances, processing necessary to perform a contract or take steps at your request before entering into a contract (Art. 6(1)(b) GDPR), legitimate interests in managing business correspondence (Art. 6(1)(f) GDPR), or compliance with legal obligations (Art. 6(1)(c) GDPR).

Further information is available in Google's Privacy Policy.

8. Data Retention

Personal data is retained only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required by law.

Account and application data is generally retained for as long as your Solocompass account remains active or as necessary to provide the service. After an account is closed, certain information may be retained where necessary for legal, accounting, security or dispute-resolution purposes.

Transaction and accounting records may be retained for periods required by applicable law.

Support communications may be retained for as long as reasonably necessary to provide support, document the customer relationship and address potential disputes or legal obligations.

9. Your Rights Under the GDPR

Subject to the applicable legal requirements, you have the following rights concerning your personal data:

  • Right of access (Art. 15 GDPR): You may request information about the personal data processed about you.
  • Right to rectification (Art. 16 GDPR): You may request correction of inaccurate personal data.
  • Right to erasure (Art. 17 GDPR): You may request deletion of your personal data where the legal requirements are met.
  • Right to restriction of processing (Art. 18 GDPR): You may request restriction of processing in certain circumstances.
  • Right to data portability (Art. 20 GDPR): You may request certain personal data in a structured, commonly used and machine-readable format.
  • Right to object (Art. 21 GDPR): You may object to processing based on legitimate interests where the legal requirements are met.
  • Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise your rights, contact [email protected].

10. Complaints to the Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.

For AviaSpark e.U. and SoloCompass, the relevant supervisory authority is:

Österreichische Datenschutzbehörde (DSB)
Barichgasse 40-42
1030 Vienna
Austria
https://www.dsb.gv.at

11. Third-Party Privacy Policies

The services described above are provided by independent third-party providers. Their own privacy policies explain their respective processing activities in greater detail. Links to the relevant policies have been provided above.

This Privacy Policy concerns the processing activities for which AviaSpark e.U. is responsible in connection with SoloCompass. Separate privacy information applies to the AviaSpark e.U. corporate website and its other resources.