Data protection

The protection of your personal data when you visit our website is important to us.

Below you will find information about which data we collect during your visit to the website, when you use our web forms and the other functions on the website and how and for what purpose we process this data. We only collect, process and use personal data in accordance with the following principles and in compliance with the applicable legal provisions on data protection. You can direct any questions you have about data protection in connection with our website and the contracts concluded via our website to us using the contact information in Section 1, directly below.

1. Person responsible and data protection officer
This privacy information applies to data processing by:

AIRY Green Solutions GmbH
Elbberg 6a
22767 Hamburg
Germany

Email: info@airy.green
(hereinafter also “ AIRY ” or “we”).

You can contact AIRY’s data protection officer at the email address provided above.

2. Collection and storage of personal data and the nature and purpose of their use
2.1 Visiting our website
When you visit our website, your browser automatically sends information to our website server. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention:

IP address of your device,
Date and time of the server request,
The website you previously visited (referrer URL),
The browser type and version used on your device,
If applicable, the operating system of your device and
The name of your access provider.

The above data is processed for the following purposes:

Ensuring a smooth connection to the website,
Ensuring comfortable use of our website,
Evaluation of system security and stability as well as
for further administrative purposes.

The data is stored in server log files in a form that allows the identification of the data subjects for a maximum period of one month, unless a security-relevant event occurs (e.g. a DDoS attack). In the event of a security-relevant event, server log files are stored until the security-relevant event has been eliminated and fully clarified.

The legal basis for data processing is our legitimate interest, which arises from the purposes for data collection listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally. The provision of this data is not required by law or contract or necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the data, however, it will not be possible to access the website.

In addition, we use cookies and analysis services when you visit our website. You will find more detailed explanations below.

2.2 Contact by email
We offer you the opportunity to contact us via a contact form, which you can open by clicking on the buttons marked “Contact” or “Contact us” on our website. You must provide your title, first name, last name, email address, subject and your message.

Alternatively, you can send us messages using your usual email program to the email addresses provided on our website. You will need to provide your name, a valid email address and a description of your problem so that we know who the request came from and can answer it. Additional information (such as the subject and - if available - contract reference) can be provided voluntarily.

If your inquiry concerns a contract to which you are a party or the implementation of pre-contractual measures, the data processing will be carried out in accordance with Art. 6 (1) (b) GDPR. For all other inquiries, the data processing for the purpose of establishing contact is based on our legitimate interest (Art. 6 (1) (f) GDPR). In this case, our legitimate interest is to process your request.

Personal data stored by us when you contact us will be deleted in accordance with legal requirements as soon as your request has been fully processed, unless lawful processing for other purposes subsequently arises from your message.

2.3 Contact via chat
In addition, you have the option to contact us via a chat function on our website. We only collect, process and use the information you provide during chat conversations to process your request. We store details of the chat history, including your uploaded files (if any) and IP address, until your request has been processed.

For the chat function we use Helpdesk, a service provided by Deskpro Ltd (79 Hartfield Road SW19 3ES, London, United Kingdom).

When you use the chat, Helpdesk temporarily collects your IP address to determine the country from which the chat was started and to provide individual customer service. The collection of your IP address serves no other purpose and Helpdesk does not store it permanently.

Helpdesk uses cookies to operate the chat function. The cookies enable your browser to be recognized in order to enable smooth chat communication and to recognize individual users.
Your personal data collected during the live chat will be stored and transmitted to Helpdesk servers.

If you do not want Helpdesk to process your personal data, you can prevent cookies from being saved on your device by selecting the appropriate settings on your browser. You can prevent the use of cookies completely by activating the "disable cookies" setting on your browser. You can find instructions on how to do this in your browser's user guide. However, the use of some areas of our websites (including the chat function) may be restricted if you block or do not consent to the use of cookies. You can find more information about Helpdesk's privacy policy here .

2.4 Newsletter
You have the option of registering on our website to receive a free newsletter. We use the Klaviyo service to send the newsletter.
The provider of this service is Klaviyo, Inc., 125 Summer St, Floor 6 Boston, MA 02111, USA (privacy policy: https://www.klaviyo.com/privacy/policy ). The provider processes content, usage, meta/communication data. We require a valid email address to process your newsletter registration/order (“ registration ”). When registering, this and the other data entered (optional: title, first name, last name, street and house number, zip code, city) are sent to Klaviyo, Inc. in encrypted form.

In addition, the following data is collected during registration in order to be able to confirm your registration at a later date:

IP address of your computer,
Date and time of registration and
Date and time of confirmation of your registration.

We reserve the right to store the registration data for a period of 3 years in accordance with Art. 6 Paragraph 1 No. 1 Letter f of GDPR in order to document proof of your consent. This is also our legitimate interest.

The data processing for sending the newsletter, to optimize our newsletter and to increase its quality and attractiveness is carried out in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR on the basis of your voluntary consent.
You can revoke your consent to receive the newsletter at any time in accordance with Art. 7 Para. 3 GDPR with effect for the future. You can revoke your consent via any of our contact options or via the unsubscribe link included in each newsletter.

2.5 Blog
You have the option of leaving individual comments on individual text contributions (" blog contributions ") on our website after we have approved them. To submit a comment, you must provide a user name (pseudonym) and a valid email address, as well as other information about your comment. In addition to your comment and the other information, we also save the date and time you entered it, your user name (pseudonym) and the IP address of your computer. After submitting your comment, you will receive an email with a confirmation link that you must click to confirm your comment. We will then decide at our own discretion whether to publish it.
If we publish your blog post, we will store the data as long as the respective text post is online or you do not revoke your consent. If we do not publish your blog post, your data will be deleted after 3 years, taking into account the standard limitation period for civil law claims.

2.6 Customer reviews
You have the option of rating products in our online shop on the respective product page after we have approved it. To do this, we require a valid email address and a summary of your rating. Optionally, you can also provide your name and a detailed opinion. In addition to your rating and the other information, we also save the date and time of your entry, your name (if you provide it) and the IP address of your computer. After submitting your rating, you will receive an email with a confirmation link that you must click to confirm your rating.
The review will be published anonymously on the product page unless you have provided a name. Your email address will not be published.

2.7 Notes
We offer a wish list function on our website. You can save specific products for later by clicking on a heart button. By setting a cookie (for details, see section 4 of this privacy policy), you can find the products on the wish list on our website across different website visits and can easily access the respective product pages using quick access. In this context, we save your IP address and the products you have added to your wish list.
The data processing for the purpose of storing products on your wish list is carried out in accordance with Art. 6 Paragraph 1 Sentence 1 Letter a of GDPR on the basis of your voluntarily given consent.

2.8 Recommendations
By clicking on "Recommend" on our product pages, you can recommend individual products. To do this, you must provide your name, email address and the email address of the recipient. You can also optionally enter a comment. By clicking on "Send", the product recommendation will be sent from your email address to the recipient. Since we do not want to bother anyone, it is important that the recipient actually wants to receive information about our products. Therefore, please only use our "Recommend" function if the recipient has previously agreed to pass on their email address to us for this purpose.

Data processing for the purpose of product recommendations is carried out in accordance with Art. 6 Paragraph 1 Sentence 1 Letter a of GDPR on the basis of your voluntarily given consent.

If we sent you an email with a product recommendation on behalf of an AIRY customer/website visitor, we assumed that you had previously consented to the use of the email address. By sending our email to you, we pursue the legitimate interest of advertising our products to you. The legal basis for this processing of your personal data is Article 6 (1) lit. f GDPR. We will not use your email address for any other purpose. You can let us know at any time at info@airy.green that you do not wish to receive any further emails from us. Otherwise, we delete your email address after 7 days and do not use it any further.

2.9 Registration of a customer account
You have the option of setting up a customer account on our website so that you can use the additional functions of the customer account. Creating a customer account simplifies the ordering process for you (see section 2.10) and gives you the opportunity to save the data you have provided for future orders, specify your preferred payment method and view previous orders.

To register, you must provide your title, first name, last name, email address and address. You will also be asked to set a password. You can also optionally provide your telephone number. Your customer account is not publicly visible.

The processing of the data that you must provide during registration is necessary in order to fulfil the contract you concluded by registering for a customer account on our website (Art. 6 Para. 1 lit. b GDPR).
You have the option of deleting your customer account yourself at any time. If you do not use your customer account for more than 5 years, we will delete your customer account. If your data is required to fulfill a contract or to carry out pre-contractual measures, early deletion of the data is only possible if there are no contractual or legal obligations that prevent deletion.

2.10 Ordering goods
We offer you the opportunity to purchase goods on our website. You can order goods using a customer account including registration, as a guest or via the individual communication channels specified here.

As part of the ordering process, we save all data that you enter when using our range of products. In addition to the data that you may have already provided when registering a customer account (title, first name, last name, email address and address), this also includes your payment details and a possible additional delivery address.

If you place an order via individual communication channels (email, telephone), we will save your email address and any other data you enter.

During the ordering process via the shop, we save the goods you have selected, their quantity, your IP address and the date and time of your selection in a separate session cookie (first-party cookie) until the order is completed and for the session at the latest. While you are logged into your user account, we save this in a permanent first-party cookie, which is deleted when you log out of your user account. If you close the browser without logging out, the cookie will remain for a maximum of one year in order to simplify the ordering process when you visit our website again.

The data you provide during the ordering process will be processed in accordance with Article 6 paragraph 1 letter b GDPR, as this is necessary to fulfill the contract concluded via the website.

After completion of the contract, we will delete your data taking into account the applicable 6- or 10-year retention periods under tax and commercial law.

3. Transfer of data
We have concluded data processing agreements with technical service providers that we use to operate and maintain our website, the providers of the tracking and web analysis tools listed in sections 5 and 6 of this privacy policy, who process the data on our behalf for the purposes of user analysis and statistical evaluation, and with service providers for the delivery and processing of orders for goods. Service providers that process personal data on our behalf outside the European Union (so-called third countries) are only used if there is an adequacy decision by the European Commission for this third country or if the recipient has suitable or appropriate guarantees. In addition, we do not transfer your personal data to third parties - with the exception of the purposes listed below. We only pass on your personal data to third parties if:

You have given your express consent to do so,
the disclosure is necessary to protect our legitimate interests or the legitimate interests of a third party and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
in the event that there is a legal obligation to disclose the information, and
this is legally permissible and necessary for the performance of contractual relationships with you.

4. Cookies
When you visit our website, we store information on your device in the form of cookies (for information about individual cookies, see our Cookie Policy https://airy.green/pages/cookie-policies ).

Cookies are small files that are transferred from an internet server to your browser and stored on your hard disk. Information is stored in the cookie that is related to the specific device used. However, this does not mean that we immediately know your identity. We use the term "cookies" in this policy for all files that collect data in this way.
The use of cookies serves, on the one hand, to make the use of our services more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted when you leave our website. In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your device for a specific period of time. If you visit our website again to use our services, it is automatically recognized that you have already been with us and which entries and settings you have made so that you do not have to enter them again. First-party cookies come from us, third-party cookies from third-party providers.

We also use cookies to statistically record the use of our website and to evaluate this for the purpose of optimizing our offer for you (see section 5). These cookies enable us to automatically recognize that you have already visited our website when you visit it again. We also use cookies for retargeting purposes (see section 6 "Marketing"). These cookies are automatically deleted after a defined period of time.

When you visit our website, we ask for your consent to the use of all cookies that are not strictly necessary for the provision of our website (Art. 6 Para. 1 lit. a GDPR). Of course, you can also visit our website without accepting cookies. In our cookie policy https://airy.green/pages/cookie-policies , you will receive detailed information about the cookies we use and you can manage your cookie settings and choose which cookies you would like to give us your consent for.

If you do not want your device to be recognized the next time you visit, you can refuse the use of cookies by changing the settings in your browser to "Reject cookies". You can find out how to do this in your browser's user manual. However, if you refuse the use of cookies, this may result in restrictions on the use of some areas of our website.

5. Analysis tools
The tracking measures listed below and used by us are carried out on the basis of the consent you have given on a voluntary basis. With the tracking measures used, we want to ensure that our website is designed to meet your needs and is continuously optimized, and also to ensure that we can give you personalized recommendations based on your usage behavior. We also use the tracking measures to statistically record the use of our website and to optimize our offering for you. The provision of this data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide this personal data.
The respective data processing purposes and data categories can be found in the information on the corresponding tracking tools.

Use of Google Analytics with anonymization function
For the purpose of needs-based design and continuous optimization of our website, we use Google Analytics, a web analysis service from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). In this context, pseudonymized usage profiles are created and cookies are used.
The information generated by the cookie about your use of this website such as

Browser type/version,
operating system used,
Referrer URL (the previously visited page),
Hostname of the accessing computer (IP address),
Time of server request,

are transferred to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage for the purposes of market research and to design this website to meet your needs. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. IP addresses are anonymized so that they cannot be assigned (IP masking). This means that your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area.

You can prevent the installation of cookies by setting your browser software accordingly; however, we would like to point out that in this case, not all functions of this website may be fully available. In addition, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing a browser add-on.

Further information on data protection in connection with Google Analytics can be found in the Google Analytics Help . The privacy policy of Google LLC can be found here .

We also use Google Analytics to evaluate data from ads for statistical purposes. If you do not want this, you can deactivate it via the Ads Preferences Manager .

6. Marketing
If we receive your email address in connection with the sale of a service and you have not objected, we also reserve the right to regularly send you information about our own similar services by email, as this represents a legitimate interest of AIRY.

You can object to this use of your email address at any time by sending a message to the following address info@airy.green or via a link provided for this purpose in the advertising email.

We also use retargeting. In online marketing, retargeting is a process in which visitors to a website or app are marked and then addressed again in pseudonymized form on other websites with targeted advertising. Users of the website or app are marked in pseudonymous form so that they can be recognized on the website or another website. Pseudonymous usage profiles are created from this information. The pseudonymous usage profiles are not merged with data about the bearer of the pseudonym. The aim of the process is to draw the attention of a user who has already shown an interest in a website or product to this website or product again in order to increase the advertising relevance and thus the click and conversion rate (e.g. order rate). For retargeting, we use time-limited cookies with a lifespan. You can find more information in Section 4 in this privacy policy. We may combine your pseudonymous personal data with other pseudonymous data we receive from other sources and use it to improve and personalize the advertisements and marketing activities directed to you.

If you do not want us to collect data relating to your visit to our website and the use of our services, applications and tools, you can object to this collection at any time with effect for the future by deactivating cookies in your browser or device settings or by making the appropriate settings in our Cookie Policy (see Section 4).

6.1 Google Ads
We have integrated Google Ads on our website. The Google Ads services are operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

We use Google Ads for remarketing purposes. This tool is used to show you interest-based ads on other websites and apps that participate in the Google advertising network. Your browser stores cookies that enable us to recognize you as a visitor when you visit websites that are part of the Google advertising network. These pages can then display advertisements for you that relate to content that you have previously viewed on our website or other websites or apps that use Google's remarketing function. We are able to pre-define certain keywords so that our advertising for our website is only displayed in the search engine results when a keyword-relevant search result is retrieved.
If you access our website via a Google ad, Google will store a so-called conversion cookie on your computer, which expires after thirty days and is no longer used to identify you. The conversion cookie can be used to track whether and which subpages of our website you have accessed. This allows both us and Google to track whether you have completed or canceled a purchase on our website if you accessed our website via a Google ad.

In addition, the information collected is used by Google to compile visitor statistics for our website. These statistics tell us the total number of users who clicked on our ad and which pages of our website were subsequently accessed by the respective user. For this purpose, anonymous data about your use of the website is stored and transferred to a Google server in the USA and stored there. For the USA, the European Commission has issued an adequacy decision (EU/US Privacy Shield), according to which Google is certified.

These cookies are not used for personal identification. However, if you do not want the Google Ad remarketing feature to work, you can disable data collection for these purposes by making the appropriate settings here and disabling cookies in your browser or device settings. You can also make the appropriate settings in our Cookie Policy (see section 4).

Further information on data protection in connection with website statistics can be found here and general information on Google Ads can be found here . The privacy policy of Google LLC can be found here .

6.2 Google Web Fonts
We integrate the font library of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, on our website. Google LLC is certified under the Privacy Shield Agreement.
When you visit our website, your browser calls a Google server, usually in the USA, to which it is transmitted which subpage you are visiting with which IP address in order to load the required font into your browser cache. This prevents repeated and constant reloading. The Google Web Fonts service is integrated in order to display the texts on our website in a visually correct and graphically appealing manner. If your browser does not support this function, a standard font on your computer will be used to display our texts.

The privacy policy of Google LLC can be found here .

6.3 Facebook Pixel
We also use retargeting via the Facebook pixel.
For retargeting, we use the Facebook pixel from Facebook Inc. (1 Hacker Way, Menlo Park, CA 94025, USA) or, if you are based in the EU, Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) (“ Facebook ”). For the USA, the European Commission has issued an adequacy decision (EU/US Privacy Shield), according to which Facebook is certified.

The Facebook Pixel is used to present interest-related advertisements to visitors to this website within the framework of the social network Facebook or when they visit websites that participate in the Facebook advertising network, based on information about their use of this website (“Facebook Ads”).

The Facebook pixel is a program code implemented on this website. When you visit the website, the program code can cause certain information to be stored on your device in the form of cookies and can trigger the transfer of certain information to Facebook. This includes information that is technically generated when you visit the website via the hypertext transfer protocol (HTTP), such as your IP address. This can also include other information that is already stored in cookies on your device, such as your Facebook user ID. When you visit the website, Facebook can therefore recognize that you have visited this website and which content on the website you have accessed. If you have a user account with Facebook, Facebook can assign this information to your user account.

If you do not want Facebook to assign the collected information directly to your Facebook user account, you can deactivate the remarketing function here . To do this, you must be logged in to Facebook. You can also deactivate cookies in your browser or device settings. You can also make the appropriate settings in our cookie policy (see section 4).

For more information about how Facebook processes personal data and your rights and options for protecting your privacy, please see Facebook’s privacy policy here .

6.4 YouTube
We embed videos from YouTube on our website. This is the video portal of YouTube LLC. (901 Cherry Ave., 94066 San Bruno, CA, USA) (“ YouTube ”). YouTube is a subsidiary of Google LLC. (1600 Amphitheatre Parkway, Mountain View, CA 94043 USA). Google LLC is certified under the Privacy Shield Agreement.

We use YouTube to show you videos on our website that are stored on YouTube servers. When you start a video from YouTube on our website, your specific request is sent to YouTube servers in the USA along with your IP address, the date, time and details of our website. This connection is required to display the video you requested. At the same time, your request establishes a connection to Google's "DoubleClick" advertising network. YouTube stores the transmitted data permanently to analyze your usage behavior. If you are logged into your YouTube user account when you request a video, YouTube will combine this data.

You can prevent this by logging out of your YouTube user account before viewing a video or by changing the settings there.

To protect your data, we use “Extended Data Protection” on YouTube, so that the connection to YouTube is only established when you specifically request a video and not when you visit our website if there is a video embedded by YouTube there.

You can prevent cookies from being saved by selecting the appropriate settings on your browser; however, please note that if you do this you may not be able to use the full functionality of this website. You can also make the appropriate settings in our cookie policy (see section 4).

Further information on Google LLC’s terms of use and privacy policy can be found here .

The purpose of data processing is to improve the quality of our website.

6.5 Instagram
We integrate functions and content from the Instagram service on our website. The provider of this service is Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland).

The content of the service includes images, videos or texts and buttons with which users express their liking for this content. If you are a member of the Instagram service, this provider can assign a visit to the listed content and functions to your profile there.

You can find Instagram’s privacy policy here .

7. Social media profiles
We maintain publicly accessible social media profiles (“ Profiles ”) on various social networks (Facebook, Instagram, YouTube, Pinterest, Twitter, Xing, LinkedIn).

When you visit the profiles, your personal data is processed not only by us, but also by the operators of the respective social network. This also happens if you do not have a profile in the respective social network yourself. The individual data processing operations and their scope differ depending on the operator of the respective social network. For details on the processing of your personal data and the type, scope and purpose of their use by the operator of the respective social network, please refer to the data protection declarations of the respective operator:

Agreement on joint responsibility according to Art. 30 GDPR can be found here: Facebook and Instagram , LinkedIn .

If you use our profiles on social networks to contact us (e.g. by creating your own posts, reacting to one of our posts or sending us private messages), the data you provide to us will be processed solely for the purpose of being able to contact you.
The legal basis for data processing is Art. 6 Para. 1 lit. f).

You are not obliged to provide us with your personal data. However, this may be necessary for individual functions of our profiles in social networks. These functions will not be available to you or will only be available to a limited extent if you do not provide us with your personal data.

8. PayPal as a payment method
We use the PayPal service on our website. The European operating company of PayPal is PayPal (Europe) S.à.rl & Cie. SCA (22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg).

Online payments can be processed via the PayPal service. If you select PayPal as your payment service provider during the ordering process in our shop, your data will be automatically transmitted to PayPal.

The following data is usually transmitted to PayPal: first name, last name, address, date of birth, gender, email address, IP address, telephone number, mobile phone number and other data necessary to process a payment. In particular, payment information such as bank details, card number, expiration date and CVC code, number of items, item number, data on goods, prices and taxes can also be transmitted.
The processing is carried out in accordance with Art. 6 (1) (b) GDPR to fulfill pre-contractual measures or to fulfill a contract.

You can find PayPal’s privacy policy here .

9. Amazon Pay as a payment method
If you decide to use Amazon Pay, the online payment service provider Amazon Payments, as part of your order process, your payment data will be transmitted primarily to Amazon Payments Europe sca, and secondarily to Amazon EU SARL, Amazon Services Europe SARL and Amazon Media EU SARL, all three located at 5, Rue Plaetis L 2338 Luxembourg (hereinafter "Amazon Payments").
By registering to use the Amazon Pay service, the data subject accepts and agrees to Amazon Payments’ privacy policy.

The data subject thereby further consents to Amazon Payments collecting, processing and using their personal data listed below for the purposes stated below. This consent can be revoked at any time.

The personal data transmitted to Amazon Payments usually includes first name, last name, address, telephone number, IP address, email address, or other data required to process the order, as well as data related to the order, such as number of items, item number, invoice amount and taxes in percent, invoice information, etc.

This transmission is necessary to process your order using the payment method you have selected, in particular to confirm your identity, to administer your payment and the customer relationship.
Amazon.com, Inc. participates in the EU-US Privacy Shield program ("EU-US Privacy Shield").

Amazon Payments reserves the right to conduct a credit check. Amazon Payments uses the result of the credit check in relation to the statistical probability of default for the purpose of deciding on the provision of the respective payment method. The credit check may contain probability values (so-called score values). Insofar as score values are included in the result of the credit check, these are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, is included in the calculation of the score values. In addition, Amazon Payments is entitled to pass on your data to unnamed third parties (banks, e-service providers, service partners, but also auditors, analysis services, credit agencies, marketing partners, cloud service providers, retargeting providers, affiliated companies).

For further information on data protection, including information on the credit agencies used, please refer to the Amazon Payments privacy policy: https://pay.amazon.de/help/201751600

10. Stripe as a payment method
We use the Stripe service on our website. The European operating company of Stripe is Stripe Payments Europe Ltd (Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland).

Online payments can be processed via the Stripe service. Payments are made using your credit card or direct debit. If you select Stripe as your payment service provider during the ordering process in our shop, your data will be automatically transmitted to Stripe.

The following data is usually transmitted to Stripe: first name, last name, address, date of birth, gender, email address, IP address, telephone number, mobile phone number and other data necessary to process a payment. In particular, payment information such as bank details, card number, expiration date and CVC code, number of items, item number, data on goods, prices and taxes can also be transmitted.
The processing is carried out in accordance with Art. 6 (1) (b) GDPR to fulfill pre-contractual measures or to fulfill a contract.

You can find Stripe’s privacy policy here .

11. Security
For security reasons and to protect the transmission of content, our website is provided via an encrypted connection. You can recognize this by the closed lock symbol in your browser line and the change from "http://" to "https://" in your browser's address line. Encryption is carried out using the SSL (Secure Socket Layer) process in conjunction with the highest encryption level of your browser.

12. Rights of data subjects
You have the right:

to request information about your personal data processed by us in accordance with Art. 15 GDPR;
to request the immediate correction of inaccurate or incomplete personal data stored by us in accordance with Art. 16 GDPR;
to request the erasure of your personal data stored by us in accordance with Art. 17 GDPR, unless processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims (if we have published your personal data, we are obliged, taking into account the available technology and the implementation costs, to take appropriate measures, including technical ones, to inform the data controllers who process the personal data that you have requested the erasure of all links or copies or replications of these personal data);
pursuant to Art. 18 GDPR, to request the restriction of the processing of your personal data if you contest the accuracy of the data, the processing is unlawful but you refuse to delete it and we no longer need the data, but you require it to assert, exercise or defend legal claims or you have objected to the processing;
pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another controller;
pursuant to Art. 7 Paragraph 3 GDPR, to revoke your consent at any time. This means that we may no longer continue the data processing based on this consent in the future and
to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or work or of our place of business.

13. Right of objection
If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 Paragraph 1 Sentence 1 Letter f of GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided there are reasons for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which we will implement without specifying a particular situation.

If you would like to exercise your right of withdrawal or objection, simply send an email to info@airy.green .

14. Changes to this privacy policy
This privacy policy is currently valid.

Due to the further development of our website and offers on it or due to changes in legal or official requirements, it may become necessary to change this privacy policy. You can access and print out the current privacy policy at any time at airy.green/pages/datenschutz .

Status: 08.05.2020