Data protection

The protection of your personal data when you visit our website is important to us.

Below you will find information about what data we collect during your visit to the website, when you use our web forms, and other functions on the website, and how and for what purpose we process this data. We collect, process, and use personal data only in accordance with the following principles and in compliance with applicable data protection laws. Questions about data protection in connection with our website and the contracts concluded via our website can be directed to us using the contact information in Section 1, directly below.

1. Person responsible and data protection officer
This privacy information applies to data processing by:

AIRY Green Solutions GmbH
Elbberg 6a
22767 Hamburg
Germany

Email: info@airy.green
(hereinafter also “ AIRY ” or “we”).

You can contact AIRY’s data protection officer at the email address provided above.

2. Collection and storage of personal data and the nature and purpose of their use
2.1 Visiting our website
When you visit our website, your browser automatically sends information to our website server. This information is temporarily stored in a so-called log file. The following information is collected without your intervention:

IP address of your device,
Date and time of the server request,
The website you previously visited (referrer URL),
The browser type and version used on your device,
If applicable, the operating system of your device and
The name of your access provider.

The processing of the aforementioned data takes place for the following purposes:

Ensuring a smooth connection to the website,
Ensuring comfortable use of our website,
Evaluation of system security and stability as well as
for further administrative purposes.

The data is stored in server log files in a form that allows the identification of the data subjects, for a maximum period of one month, unless a security-relevant event occurs (e.g., a DDoS attack). In the event of a security-relevant event, server log files are stored until the security-relevant event has been resolved and fully resolved.

The legal basis for data processing is our legitimate interest, which arises from the purposes for data collection listed above. Under no circumstances will we use the collected data to draw conclusions about you personally. Providing this data is not required by law or contract, nor is it necessary for concluding a contract. You are not obligated to provide the personal data. However, if you do not provide the data, you will not be able to access the website.

We also use cookies and analytics services when you visit our website. Further details can be found below.

2.2 Contact by email
We offer you the opportunity to contact us via a contact form, which you can access by clicking on the "Contact" or "Contact us" buttons on our website. You will need to provide your title, first name, last name, email address, subject, and your message.

Alternatively, you can send us messages using your usual email program to the email addresses listed on our website. You will need to provide your name, a valid email address, and a description of your problem so we know who sent the inquiry and can respond to it. Additional information (such as the subject and, if applicable, the contract reference) can be provided voluntarily.

If your inquiry concerns a contract to which you are a party or the implementation of pre-contractual measures, data processing will be carried out in accordance with Art. 6 (1) (b) GDPR. For all other inquiries, data processing for the purpose of establishing contact is based on our legitimate interest (Art. 6 (1) (f) GDPR). In this case, our legitimate interest is processing your request.

Personal data stored by us when you contact us will be deleted in accordance with legal regulations as soon as your request has been fully processed, unless lawful processing for other purposes subsequently arises from your message.

2.3 Contact via chat
You also have the option of contacting us via a chat function on our website. We only collect, process, and use the information you provide during chat conversations to process your request. We retain details of the chat history, including your uploaded files (if any) and IP address, until your request has been processed.

For the chat function we use Helpdesk, a service provided by Deskpro Ltd (79 Hartfield Road SW19 3ES, London, United Kingdom).

When you use the chat, Helpdesk temporarily collects your IP address to determine the country from which the chat was initiated and to provide personalized customer service. Your IP address is collected for no other purpose, and Helpdesk does not permanently store it.

Helpdesk uses cookies to operate the chat function. These cookies enable your browser to be recognized, enabling smooth chat communication and identifying individual users.
Your personal data collected during the live chat will be stored and transmitted to Helpdesk servers.

If you do not want Helpdesk to process your personal data, you can prevent cookies from being stored on your device by selecting the appropriate settings on your browser. You can prevent the use of cookies completely by activating the "disable cookies" setting on your browser. Please refer to your browser's user guide for instructions on how to do this. However, the use of some areas of our websites (including the chat function) may be limited if you block or do not consent to the use of cookies. Further information on Helpdesk's privacy policy can be found here .

2.4 Newsletter
You have the option of signing up for a free newsletter on our website. We use the Klaviyo service to send the newsletter.
The provider of this service is Klaviyo, Inc., 125 Summer St, Floor 6, Boston, MA 02111, USA (privacy policy: https://www.klaviyo.com/privacy/policy ). The provider processes content, usage, meta/communication data. We require a valid email address to process your newsletter registration/order (" Registration "). Upon registration, this and the other data entered (optional: title, first name, last name, street and house number, zip code, city) are sent to Klaviyo, Inc. in encrypted form.

In addition, the following data will be collected during registration in order to be able to confirm your registration at a later date:

IP address of your computer,
Date and time of registration and
Date and time of confirmation of your registration.

We reserve the right to store your registration data for a period of three years in accordance with Art. 6 (1) No. 1 (f) GDPR in order to document proof of your consent. This is also our legitimate interest.

Data processing for sending the newsletter, to optimize our newsletter and to increase its quality and attractiveness is carried out in accordance with Art. 6 (1) (a) GDPR on the basis of your voluntary consent.
You can revoke your consent to receive the newsletter at any time with future effect in accordance with Art. 7 (3) GDPR. You can revoke your consent via any of our contact options or via the unsubscribe link included in each newsletter.

2.5 Blog
You have the option of leaving individual comments on individual text contributions (" blog posts ") on our website after we have approved them. To submit a comment, you must provide a user name (pseudonym) and a valid email address, along with other information about your comment. In addition to your comment and the other information, we also store the date and time you entered it, your user name (pseudonym), and the IP address of your computer. After submitting your comment, you will receive an email with a confirmation link that you must click to confirm your comment. We will then decide at our sole discretion whether to publish it.
If we publish your blog post, we will store the data as long as the respective text post is online or until you revoke your consent. If we do not publish your blog post, your data will be deleted after three years , taking into account the standard limitation period for civil law claims.

2.6 Customer reviews
You have the opportunity to rate products in our online shop on the respective product page after we have approved it. To do so, we require a valid email address and a summary of your rating. Optionally, you can also provide your name and a detailed review. In addition to your rating and other information, we also save the date and time of your entry, your name (if you provide it), and the IP address of your computer. After submitting your rating, you will receive an email with a confirmation link that you must click to confirm your rating.
The review will be published anonymously on the product page unless you provide your name. Your email address will not be published.

2.7 Notepad
We offer a wish list function on our website. You can save specific products for later by clicking on a heart button. By setting a cookie (for details, see section 4 of this privacy policy), you can find the products on your wish list across multiple website visits and conveniently access the respective product pages via quick access. In this context, we store your IP address and the products you have added to your wish list.
Data processing for the purpose of storing products on your wish list is carried out in accordance with Art. 6 (1) (a) GDPR on the basis of your voluntarily given consent.

2.8 Recommendations
By clicking "Recommend" on our product pages, you can recommend individual products to others. To do so, you must provide your name, email address, and the recipient's email address. Optionally, you can also enter a comment. By clicking "Send," the product recommendation will be sent from your email address to the recipient. Because we don't want to bother anyone, it's important that the recipient actually wants to receive information about our products. Therefore, please only use our "Recommend" function if the recipient has previously agreed to share their email address with us for this purpose.

Data processing for the purpose of product recommendations is carried out in accordance with Art. 6 (1) (a) GDPR on the basis of your voluntarily given consent.

If we sent you an email with a product recommendation on behalf of an AIRY customer/website visitor, we assumed that you had previously consented to the use of your email address. By sending you our email, we pursue the legitimate interest of advertising our products to you. The legal basis for this processing of your personal data is Article 6 (1) (f) GDPR. We will not use your email address for any other purpose. You can let us know at any time at info@airy.green that you no longer wish to receive emails from us. Otherwise, we will delete your email address after 7 days and will not use it any further.

2.9 Registration of a customer account
You have the option of creating a customer account on our website so that you can use the additional features of the customer account. Creating a customer account simplifies the ordering process for you (see Section 2.10) and gives you the opportunity to save the data you provide for future orders, specify your preferred payment method, and review previous orders.

To register, you will need to provide your title, first name, last name, email address, and address. You will also be asked to set a password. Optionally, you can also provide your phone number. Your customer account is not publicly visible.

The processing of the data that you must provide during registration is necessary in order to fulfill the contract you concluded by registering for a customer account on our website (Art. 6 (1) (b) GDPR).
You have the option to delete your customer account yourself at any time. If you do not use your customer account for more than five years, we will delete your account. If your data is required to fulfill a contract or to carry out pre-contractual measures, premature deletion of the data is only possible if contractual or legal obligations do not prevent deletion.

2.10 Ordering goods
We offer you the opportunity to purchase goods on our website. You can place orders using a customer account (including registration), as a guest, or via the individual communication channels listed here.

As part of the ordering process, we store all data you enter when using our product range. In addition to the data you may have already provided when registering a customer account (title, first name, last name, email address, and address), this also includes your payment details and a possible additional delivery address.

If you place an order via individual communication channels (email, telephone), we will save your email address and the other data you enter.

During the ordering process via the shop, we store the items you selected, their quantity, your IP address, and the date and time of your selection in a separate session cookie (first-party cookie) until the order is completed, and at most for the session. While you are logged into your user account, we store this information in a permanent first-party cookie, which is deleted when you log out of your user account. If you close your browser without logging out, the cookie remains for a maximum of one year to simplify the ordering process when you return to our website.

The data you provide during the ordering process will be processed in accordance with Article 6 paragraph 1 letter b GDPR, as this is necessary to fulfill the contract concluded via the website.

After the contract has been processed, we will delete your data, taking into account the applicable 6- or 10-year retention periods under tax and commercial law.

2.11 WhatsApp
We use the KEAZ app to send you automated WhatsApp messages related to your order. For this purpose, your name, phone number, and order number will be transmitted to the operator of the KEAZ app, Pocket Agency GmbH. This data is required to enable communication via WhatsApp. If you provide your phone number, you will automatically receive a message about your order status. Further information on data protection and the detailed privacy policy can be found at the following link: www.keaz.app

3. Sharing of data
We have concluded data processing agreements with technical service providers we use to operate and maintain our website, the providers of the tracking and web analysis tools listed in sections 5 and 6 of this privacy policy, who process the data on our behalf for the purpose of user analysis and statistical evaluation, and with service providers for the delivery and processing of orders. Service providers who process personal data on our behalf outside the European Union (so-called third countries) are only used if an adequacy decision by the European Commission for this third country or suitable or appropriate guarantees are in place by the recipient. Beyond this, we do not transfer your personal data to third parties – except for the purposes listed below. We only share your personal data with third parties if:

You have given your express consent to do so,
the transfer is necessary to protect our legitimate interests or the legitimate interests of a third party and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
in the event that there is a legal obligation to pass on the data, and
this is legally permissible and necessary for the processing of contractual relationships with you.

4. Cookies
When you visit our website, we store information on your device in the form of cookies (for information on individual cookies, see our Cookie Policy https://airy.green/pages/cookie-policies ).

Cookies are small files that are transferred from a web server to your browser and stored on your hard drive. Information is stored in the cookie that is specific to the device you are using. However, this does not mean that we directly know your identity. We use the term "cookies" in this policy to refer to all files that collect data in this way.
The use of cookies serves, on the one hand, to make using our services more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our website. In addition, we also use temporary cookies to optimize user-friendliness; these are stored on your device for a specific period of time. If you visit our website again to use our services, it is automatically recognized that you have already visited us and which entries and settings you have made so that you do not have to enter them again. First-party cookies come from us, third-party cookies from third-party providers.

We also use cookies to statistically record the use of our website and to evaluate this data in order to optimize our service for you (see Section 5). These cookies enable us to automatically recognize that you have already visited us when you visit our website again. We also use cookies for retargeting purposes (see Section 6 "Marketing"). These cookies are automatically deleted after a defined period of time.

When you visit our website, we ask for your consent to the use of all cookies that are not strictly necessary for the provision of our website (Art. 6 (1) (a) GDPR). Of course, you can also visit our website without accepting cookies. In our Cookie Policy , https://airy.green/pages/cookie-policies , you will find detailed information about the cookies we use, and you can manage your cookie settings and choose which cookies you wish to give us your consent for.

If you do not want your device to be recognized the next time you visit, you can refuse the use of cookies by changing your browser settings to "Reject cookies." You can find out how to do this in your browser's manual. However, if you refuse the use of cookies, this may limit your ability to use some areas of our website.

5. Analysis tools
The tracking measures listed below and used by us are carried out based on your voluntary consent. With the tracking measures we use, we want to ensure a needs-based design and the ongoing optimization of our website and, in addition, to be able to provide you with personalized recommendations based on your usage behavior. We also use the tracking measures to statistically record the use of our website and to optimize our offering for you. The provision of this data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obligated to provide this personal data.
The respective data processing purposes and data categories can be found in the information on the corresponding tracking tools.

Use of Google Analytics with anonymization function
To tailor our website to meet your needs and continuously optimize it, we use Google Analytics, a web analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). In this context, pseudonymized user profiles are created and cookies are used.
The information generated by the cookie about your use of this website such as

Browser type/version,
operating system used,
Referrer URL (the previously visited page),
Hostname of the accessing computer (IP address),
Time of server request,

are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage for the purposes of market research and the needs-based design of this website. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of Google. Under no circumstances will your IP address be merged with other data held by Google. The IP addresses are anonymized so that they cannot be assigned to a specific user (IP masking). This means that your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area.

You can prevent the installation of cookies by selecting the appropriate settings in your browser; however, please note that if you do this, you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing a browser add-on.

Further information on data protection in connection with Google Analytics can be found in the Google Analytics Help Center . The Google LLC privacy policy can be found here .

We also use Google Analytics to evaluate data from ads for statistical purposes. If you do not wish to do this, you can deactivate it via the Ads Preferences Manager .

6. Marketing
If we receive your email address in connection with the sale of a service and you have not objected, we also reserve the right to regularly send you information about our own similar services by email, as this represents a legitimate interest of AIRY.

You can object to this use of your email address at any time by sending a message to the following address : info@airy.green or via a link provided for this purpose in the advertising email.

We also use retargeting. In online marketing, retargeting is a process by which visitors to a website or app are marked and then addressed again in pseudonymized form on other websites with targeted advertising. Users of the website or app are marked in pseudonymous form so that they can be recognized on the website or another website. Pseudonymous user profiles are created from this information. The pseudonymous user profiles are not merged with data about the bearer of the pseudonym. The aim of the process is to draw the attention of a user who has already shown interest in a website or product to this website or product again in order to increase the advertising relevance and thus the click and conversion rate (e.g. order rate). For retargeting, we use temporary cookies with a lifespan. Further information can be found in Section 4 of this Privacy Policy. We may combine your pseudonymous personal data with other pseudonymous data we receive from other sources and use it to improve and personalize the advertisements and marketing activities directed to you.

If you do not want us to collect data relating to your visit to our website and the use of our services, applications and tools, you can object to this collection at any time with effect for the future by deactivating cookies in your browser or device settings or by making the appropriate settings in our Cookie Policy (see section 4).

6.1 Google Ads
We have integrated Google Ads into our website. Google Ads services are operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

We use Google Ads for remarketing purposes. This tool is used to show you interest-based ads on other websites and apps that participate in the Google advertising network. Your browser stores cookies that allow us to recognize you as a visitor when you visit websites that are part of the Google advertising network. These pages can then display ads to you that relate to content you have previously viewed on our website or other websites or apps that use Google's remarketing feature. We are able to pre-define certain keywords so that our advertising for our website only appears in search engine results when a keyword-relevant search result is retrieved.
If you access our website via a Google ad, Google will store a so-called conversion cookie on your computer. This cookie expires after 30 days and is no longer used to identify you. The conversion cookie allows us to track whether and which subpages of our website you have visited. This allows both Google and us to track whether you completed or canceled a purchase on our website if you accessed our website via a Google ad.

In addition, the information collected allows Google to compile visit statistics for our website. These statistics tell us the total number of users who clicked on our ad and which pages of our website were subsequently accessed by the respective user. For this purpose, anonymous data about your use of the website is stored and transferred to a Google server in the USA and stored there. For the USA, the European Commission has issued an adequacy decision (EU/US Privacy Shield), under which Google is certified.

These cookies are not used for personal identification. However, if you do not want the Google AdWords remarketing feature to work, you can opt out of data collection for these purposes by selecting the appropriate settings here and disabling cookies in your browser or device settings. You can also choose to do so in our Cookie Policy (see section 4).

Further information on data protection in connection with website statistics can be found here , and general information on Google Ads can be found here . The privacy policy of Google LLC can be found here .

6.2 Google Web Fonts
We integrate the font library of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, on our website. Google LLC is certified under the Privacy Shield Framework.
When you visit our website, your browser calls a Google server, usually in the USA, to which the IP address and subpage you are visiting are transmitted in order to load the required font into your browser cache. This prevents repeated and constant reloading. The Google Web Fonts service is integrated to display the text on our website in a visually correct and graphically appealing manner. If your browser does not support this function, a standard font of your computer will be used to display our text.

The privacy policy of Google LLC can be found here .

6.3 Facebook Pixel
We also use retargeting via the Facebook Pixel.
For retargeting, we use the Facebook Pixel from Facebook Inc. (1 Hacker Way, Menlo Park, CA 94025, USA) or, if you are based in the EU, Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) (" Facebook "). For the USA, the European Commission has issued an adequacy decision (EU/US Privacy Shield), under which Facebook is certified.

The Facebook Pixel is used to present interest-based advertisements to visitors to this website within the Facebook social network or when they visit websites that participate in the Facebook advertising network, based on information about their use of this website (“Facebook Ads”).

The Facebook pixel is a program code implemented on this website. When you visit the website, the program code can cause certain information to be stored on your device in the form of cookies and can also trigger the transmission of certain information to Facebook. This includes information that is technically generated when you visit the website via the hypertext transfer protocol (HTTP), such as your IP address. This can also include other information that is already stored in cookies on your device, such as your Facebook user ID. When you visit the website, Facebook can therefore recognize that you have visited this website and which content of the website you have accessed. If you have a Facebook user account, Facebook can assign this information to your user account.

If you do not want Facebook to directly associate the collected information with your Facebook user account, you can deactivate the remarketing function here . You must be logged in to Facebook to do so. You can also deactivate cookies in your browser or device settings. You can also make the appropriate settings in our Cookie Policy (see section 4).

For more information about how Facebook processes personal data, as well as your rights and options for protecting your privacy, please see Facebook’s privacy policy here .

6.4 YouTube
We embed videos from YouTube on our website. This is the video portal of YouTube LLC. (901 Cherry Ave., 94066 San Bruno, CA, USA) (" YouTube "). YouTube is a subsidiary of Google LLC. (1600 Amphitheatre Parkway, Mountain View, CA 94043 USA). Google LLC is certified under the Privacy Shield Framework.

We use YouTube to show you videos on our website that are stored on YouTube servers. When you start a YouTube video on our website, your specific request, along with your IP address, the date, time, and information about our website, is transmitted to YouTube servers in the USA. This connection is necessary to display the video you have requested. At the same time, your request establishes a connection to Google's DoubleClick advertising network. YouTube permanently stores the transmitted data to analyze your usage behavior. If you are logged into your YouTube user account when you request a video, YouTube will combine this data.

You can prevent this by logging out of your YouTube user account before viewing a video or by changing the settings there.

To protect your data, we use “Extended Data Protection” on YouTube, so that the connection to YouTube is only established when you specifically request a video and not when you visit our website if there is a video embedded by YouTube there.

You can prevent cookies from being saved by selecting the appropriate settings in your browser; however, please note that if you do this, you may not be able to use the full functionality of this website. You can also make the appropriate settings in our Cookie Policy (see section 4).

Further information on Google LLC’s terms of use and privacy policy can be found here .

The purpose of data processing is to improve the quality of our website.

6.5 Instagram
We integrate features and content from the Instagram service on our website. This service is provided by Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland).

The service's content includes images, videos, or texts, and buttons that users use to express their appreciation for this content. If you are a member of the Instagram service, this provider can assign access to the listed content and functions to your profile there.

You can find Instagram’s privacy policy here .

7. Social media profiles
We maintain publicly accessible social media profiles (“ Profiles ”) on various social networks (Facebook, Instagram, YouTube, Pinterest, Twitter, Xing, LinkedIn).

When you visit the profiles, your personal data is processed not only by us but also by the operators of the respective social network. This occurs even if you do not have a profile on the respective social network. The individual data processing operations and their scope vary depending on the operator of the respective social network. For details on the processing of your personal data, as well as the type, scope, and purpose of their use by the operator of the respective social network, please refer to the privacy policies of the respective operator:

Agreement on joint responsibility according to Art. 30 GDPR can be found here: Facebook and Instagram , LinkedIn .

If you use our profiles on social networks to contact us (e.g. by creating your own posts, reacting to one of our posts or sending us private messages), the data you provide to us will be processed solely for the purpose of being able to contact you.
The legal basis for data processing is Art. 6 (1) (f).

You are not obligated to provide us with your personal data. However, this may be necessary for certain functions of our social network profiles. These functions will not be available to you, or will only be available to a limited extent, if you do not provide us with your personal data.

8. PayPal as a payment method
We use the PayPal service on our website. PayPal's European operating company is PayPal (Europe) S.à.rl & Cie. SCA (22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg).

Online payments can be processed via the PayPal service. If you select PayPal as your payment provider during the ordering process in our store, your data will be automatically transmitted to PayPal.

The following data is generally transmitted to PayPal: first name, last name, address, date of birth, gender, email address, IP address, telephone number, mobile phone number, and other data necessary to process a payment. In particular, payment information such as bank details, card number, expiration date and CVC code, number of items, item number, product data, prices, and tax information may also be transmitted.
The processing is carried out in accordance with Art. 6 (1) (b) GDPR to fulfill pre-contractual measures or to fulfill a contract.

PayPal’s privacy policy can be found here .

9. Amazon Pay as a payment method
If you decide to pay with the online payment service provider Amazon Payments during your order process, your payment data will be transmitted primarily to Amazon Payments Europe sca, and secondarily to Amazon EU SARL, Amazon Services Europe SARL and Amazon Media EU SARL, all three located at 5, Rue Plaetis L 2338 Luxembourg (hereinafter "Amazon Payments").
By registering to use the Amazon Pay service, the data subject accepts and agrees to Amazon Payments’ privacy policy.

The data subject thereby further consents to Amazon Payments collecting, processing, and using their personal data listed below for the purposes stated below. This consent can be revoked at any time.

The personal data transmitted to Amazon Payments usually includes first name, last name, address, telephone number, IP address, email address, or other data required for order processing, as well as data related to the order, such as the number of items, item number, invoice amount and tax percentage, invoice information, etc.

This transmission is necessary to process your order using the payment method you have selected, in particular to confirm your identity, to administer your payment and the customer relationship.
Amazon.com, Inc. participates in the EU-US Privacy Shield program ("EU-US Privacy Shield").

Amazon Payments reserves the right to conduct a credit check. Amazon Payments uses the results of the credit check regarding the statistical probability of default to decide whether to provide the respective payment method. The credit check may contain probability values (so-called score values). To the extent that score values are included in the credit check, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, is used in calculating the score values. In addition, Amazon Payments is entitled to pass on your data to unnamed third parties (banks, e-service providers, service partners, but also auditors, analysis services, credit agencies, marketing partners, cloud service providers, retargeting providers, affiliated companies).

For further information on data protection, including information on the credit agencies used, please refer to the Amazon Payments privacy policy: https://pay.amazon.de/help/201751600

10. Stripe as a payment method
We use the Stripe service on our website. Stripe's European operating company is Stripe Payments Europe Ltd (Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland).

Online payments can be processed via the Stripe service. Payments are made via credit card or direct debit. If you select Stripe as your payment service provider during the ordering process in our shop, your data will be automatically transmitted to Stripe.

The following data is typically transmitted to Stripe: first name, last name, address, date of birth, gender, email address, IP address, telephone number, mobile phone number, and other data necessary to process a payment. In particular, payment information such as bank details, card number, expiration date and CVC code, number of items, item number, product data, prices, and tax information may also be transmitted.
The processing is carried out in accordance with Art. 6 (1) (b) GDPR to fulfill pre-contractual measures or to fulfill a contract.

Stripe’s privacy policy can be found here .

11. Security
For security reasons and to protect the transmission of content, our website is provided via an encrypted connection. You can recognize this by the closed lock symbol in your browser bar and the change from "http://" to "https://" in your browser's address bar. Encryption is implemented using the SSL (Secure Socket Layer) method in conjunction with the highest encryption level of your browser.

12. Rights of data subjects
You have the right:

to request information about your personal data processed by us in accordance with Art. 15 GDPR;
to request the immediate correction of any incorrect or incomplete personal data stored by us in accordance with Art. 16 GDPR;
to request the erasure of your personal data stored by us in accordance with Art. 17 GDPR, unless processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims (where we have made your personal data public, we are obliged, taking into account the available technology and the implementation costs, to take appropriate measures, including technical ones, to inform the data controllers which process the personal data that you have requested the erasure of all links to, or copies or replications of, those personal data);
to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR if you contest the accuracy of the data, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing;
pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another controller;
According to Art. 7 (3) GDPR, you have the right to revoke your consent at any time. This means that we may no longer continue the data processing based on this consent in the future and
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or our registered office.

13. Right of objection
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided there are reasons for doing so that arise from your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right of objection, which we will implement without specifying a particular situation.

If you wish to exercise your right of withdrawal or objection, simply send an email to info@airy.green .

14. Changes to this Privacy Policy
This privacy policy is currently valid.

Due to the ongoing development of our website and its offerings, or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. You can access and print the current privacy policy at any time at airy.green/pages/datenschutz .

Status: 08.05.2020