Privacy Policy

Last updated: 6 September 2026

1. General Information

This Privacy Policy explains how personal data is processed when you visit and use this website, contact us, apply for a consultation or the WANDERBIRD Academy, book an appointment, or otherwise interact with our services.

Personal data is any information relating to an identified or identifiable natural person. We process personal data in accordance with the General Data Protection Regulation ("GDPR"), the Austrian Telecommunications Act 2021 ("TKG 2021"), and other applicable data protection laws.

Controller

The controller responsible for processing personal data on this website is:

Element5 GmbH
Adnet 34
5421 Adnet
Austria

Email: office@wanderbird.io
Phone: +43 664 1523101

For questions regarding this Privacy Policy or the processing of your personal data, you may contact us using the details above.

2. Website Platform and Hosting – Onepage

This website is created and operated using Onepage, provided by:

Onepage GmbH
Neue Rothofstr. 13–19
60313 Frankfurt am Main
Germany

Onepage provides the technical infrastructure required to operate this website. In connection with the delivery and operation of the website, technical data may be processed, including:

• IP address
• date and time of access
• browser type and version
• operating system
• requested page or resource
• referrer information
• technical device information

The processing of technically necessary data is based on Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable and efficient operation of this website.

Where Onepage processes personal data on our behalf, Onepage acts as a processor within the meaning of the GDPR.

3. Cookies and Consent Management

We use the Onepage consent management functionality to obtain and document your choices regarding cookies and similar technologies.

Technologies used on this website may be divided into categories such as:

• Essential
• Functional
• Performance / Analytics
• Marketing

Essential technologies may be used without consent where they are strictly necessary to provide the website or a service explicitly requested by you.

Non-essential technologies, particularly analytics, advertising and tracking technologies, are activated only after you have given the relevant consent.

Where information is stored on or accessed from your device, the legal basis for non-essential technologies is your consent pursuant to Section 165(3) TKG 2021. Where personal data is subsequently processed, the legal basis is Art. 6(1)(a) GDPR.

You can change or withdraw your consent at any time through the cookie settings available on this website. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

4. Onepage Analytics

We may use analytics functionality provided by Onepage to obtain statistical information about the use of our website and to improve its performance, content and user experience.

Depending on the configuration, information processed may include:

• page views
• general usage information
• technical browser and device information
• interaction and performance information

Performance and analytics functionality requiring consent is activated only after you have provided the relevant consent.

The legal basis is Art. 6(1)(a) GDPR and, where information is stored on or accessed from your device, Section 165(3) TKG 2021.

5. Contact Forms and Academy Applications

We use forms provided through Onepage to allow you to contact us, request information, register your interest in our services, apply for a strategy session or submit an application relating to the WANDERBIRD Academy.

When you submit a form, we process the information that you provide. This may include:

• name
• email address
• telephone number
• flying experience and flying background
• annual flying hours and equipment information
• personal flying goals and ambitions
• areas in which you would like to improve
• message or inquiry
• how you learned about WANDERBIRD
• other information you voluntarily provide in connection with your request

We process this information in order to review and respond to your inquiry, understand whether and how we may be able to support you, arrange a strategy session where appropriate, and take steps toward a possible contractual relationship.

Where your inquiry or application relates to entering into or performing a contract, processing is based on Art. 6(1)(b) GDPR.

In other cases, processing may be based on our legitimate interest in responding to communications, evaluating inquiries and managing our business relationships pursuant to Art. 6(1)(f) GDPR.

6. Zapier – Workflow Automation

We use Zapier to automate certain internal workflows, including the transfer of information submitted through website forms to systems used for lead, customer and communication management.

The provider is:

Zapier, Inc.
548 Market St. #62411
San Francisco, CA 94104-5401
USA

Depending on the relevant workflow, information processed through Zapier may include your name, contact details, information contained in an Academy application or inquiry, and technical information necessary to perform the automated workflow.

Processing is based on Art. 6(1)(b) GDPR where it is necessary to take steps at your request prior to entering into a contract or to perform a contract. In other cases, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is the efficient organisation and administration of inquiries, applications and customer communication.

Zapier is based in the United States. Where personal data is transferred outside the European Economic Area, appropriate safeguards for international data transfers are used. Zapier participates in the EU-U.S. Data Privacy Framework and provides contractual safeguards including Standard Contractual Clauses where applicable.

7. Google Workspace and Internal Lead / Customer Management

We use Google Workspace services for internal business administration, communication and the management of inquiries, Academy applications and customer relationships. Depending on our internal workflow, this may include services such as Gmail, Google Sheets, Google Drive and related Google Workspace functionality.

For users and business customers in the European Economic Area, relevant Google services are generally provided by:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Data processed through these systems may include your name, email address, telephone number, application information, communication history, flying goals, appointment information and other information relating to your inquiry or customer relationship.

Processing is based on Art. 6(1)(b) GDPR where necessary in connection with a potential or existing contractual relationship. In other cases, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is the efficient, secure and organised administration of inquiries, applications and customer relationships.

Google may process data outside the European Economic Area. Where required, lawful transfer mechanisms under Chapter V GDPR are used.

8. Google Calendar Appointment Scheduling

We use Google Calendar and, where applicable, Google Calendar Appointment Scheduling to arrange consultations, strategy sessions and other appointments.

When you book or arrange an appointment, Google and we may process information required to arrange and conduct that appointment, such as:

• name
• email address
• selected appointment time
• information entered into booking fields
• information relating to the purpose of the appointment

Where the appointment concerns a potential or existing contractual relationship, processing is based on Art. 6(1)(b) GDPR. In other cases, processing may be based on Art. 6(1)(f) GDPR.

9. Email Newsletter and Marketing Communications

Where you voluntarily choose to receive news, tips, Academy information, updates or other marketing communications from WANDERBIRD by email, we process your email address and, where available, your name for this purpose.

Subscription to marketing communications is voluntary and is separate from submitting an Academy application or requesting a strategy session. Choosing not to subscribe has no effect on your ability to submit an inquiry or application.

The legal basis for sending such communications is your consent pursuant to Art. 6(1)(a) GDPR and the applicable provisions of the Austrian Telecommunications Act.

You may withdraw your consent at any time with effect for the future, for example by using an unsubscribe option contained in the relevant email or by contacting us at office@wanderbird.io.

We may retain information relating to your consent or withdrawal where necessary to demonstrate compliance with legal requirements.

10. Google Analytics

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited.

Google Analytics helps us understand how visitors use our website and allows us to improve our content, services and user experience.

Depending on your consent and our configuration, Google Analytics may process information such as:

• pages visited
• time and duration of visits
• approximate geographic information
• browser and device information
• interactions with website elements
• referring website or campaign
• technical identifiers and cookie information

Google Analytics is activated only after you have consented to the relevant Performance or Analytics technologies.

The legal basis is Art. 6(1)(a) GDPR and Section 165(3) TKG 2021 where information is stored on or accessed from your device.

11. Meta Pixel

We use the Meta Pixel, provided by:

Meta Platforms Ireland Limited
Merrion Road
Dublin 4
D04 X2K5
Ireland

The Meta Pixel allows us to understand how visitors interact with our website, measure advertising effectiveness, optimise advertising campaigns and create audiences for advertising and retargeting.

Depending on your consent and the way you use our website, information processed may include:

• IP address
• browser and device information
• pages visited
• referring URL
• time of visit
• website interactions and events
• advertising and campaign information
• cookie and browser identifiers

Meta Cookies

_fbp
Used by Meta to measure visits to our website, advertising effectiveness and advertising-related interactions. The typical lifetime of this cookie is up to three months.

_fbc
May be used when a visitor reaches our website through a Facebook or Instagram advertising link. It may be used to measure advertising conversions. The typical lifetime is up to three months.

The Meta Pixel is activated only after you have consented to Marketing technologies.

The legal basis is Art. 6(1)(a) GDPR and Section 165(3) TKG 2021.

12. Wistia Videos

We use Wistia to host and display video content on this website.

The provider is:

Wistia, Inc.
120 Brookline Street
Cambridge, Massachusetts 02139
USA

Wistia videos may be loaded when you visit our website. We use Wistia's privacy-oriented functionality where configured.

Depending on the configuration, Wistia may process technical and aggregated information relating to video usage, such as whether a video was played, viewing progress and general engagement information.

Where technically necessary processing does not require consent, the legal basis may be our legitimate interest pursuant to Art. 6(1)(f) GDPR in providing video content and operating our website.

Any additional non-essential tracking functionality requiring consent is activated only after the relevant consent has been provided.

Wistia is based in the United States. Where personal data is transferred outside the European Economic Area, an appropriate transfer mechanism under Chapter V GDPR is used where required.

13. YouTube Videos

We may embed videos from YouTube, a service provided by Google.

Where technically possible, YouTube videos are embedded using privacy-enhanced settings.

YouTube functionality involving non-essential tracking technologies is loaded only after you have provided the required consent.

The legal basis for consent-based processing is Art. 6(1)(a) GDPR and Section 165(3) TKG 2021 where information is stored on or accessed from your device.

14. Spotify

We may embed content from Spotify, provided by:

Spotify AB
Regeringsgatan 19
111 53 Stockholm
Sweden

Spotify embeds allow visitors to listen to music, podcasts or other Spotify content directly from our website.

Spotify content involving non-essential tracking technologies is loaded only after the relevant consent has been provided.

15. External Links and Social Media

Our website contains links to external websites and social media platforms, which may include Instagram, YouTube, Spotify and LinkedIn.

A simple external link does not itself cause us to transmit personal data to the linked provider. Information may be transmitted to the provider when you actively open the external link, unless a corresponding third-party element is embedded directly into our website.

16. International Data Transfers

Some service providers used by us are located outside the European Economic Area or may process personal data outside the EEA.

Where personal data is transferred outside the EEA, a lawful transfer mechanism under Chapter V GDPR is used where required. Depending on the relevant provider and destination, this may include:

• an adequacy decision by the European Commission
• the EU-U.S. Data Privacy Framework for participating organisations
• Standard Contractual Clauses approved by the European Commission
• another lawful transfer mechanism permitted under the GDPR

17. Data Retention

Unless a specific retention period is stated in this Privacy Policy, we retain personal data only for as long as necessary for the purpose for which it was collected or as required by applicable legal retention obligations.

Information relating to inquiries and Academy applications may be retained for as long as reasonably necessary to process the inquiry, manage follow-up communication and document our business relationship. If a contractual relationship is established, relevant information may be retained for the duration of the relationship and thereafter in accordance with applicable legal retention requirements.

Where processing is based solely on consent, the relevant processing will cease after withdrawal of consent unless another legal basis or legal retention obligation applies.

18. Your Rights

Subject to the applicable legal requirements, you have the following rights under the GDPR:

• Right of access – Art. 15 GDPR
• Right to rectification – Art. 16 GDPR
• Right to erasure – Art. 17 GDPR
• Right to restriction of processing – Art. 18 GDPR
• Right to data portability – Art. 20 GDPR
• Right to object – Art. 21 GDPR
• Right to withdraw consent – Art. 7(3) GDPR

To exercise your rights, you may contact us at office@wanderbird.io.

19. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority.

In Austria, the competent supervisory authority is:

Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Vienna
Austria

20. SSL/TLS Encryption

This website uses SSL/TLS encryption to protect information transmitted between your browser and our website.

21. Changes to This Privacy Policy

We may update this Privacy Policy where necessary to reflect changes to our website, services, technologies, internal processes or legal requirements.

Last updated: 6 September 2026