Data protection

The protection of your personal data when you visit our website is important to us.
Below you will find information about what data we collect during your visit to the website, when you use our web forms and the other functions on the website and how and for what purpose we process it. We collect, process and use personal data only in accordance with the following principles and in compliance with the applicable legal regulations on data protection. You can address any questions about data protection in connection with our website and the contracts concluded via our website using the contact information in Section 1, directly below.

1. Person responsible and data protection officer
This data protection information applies to data processing by:

AIRY Green Solutions GmbH
Mellenbergstieg 6
22359 Hamburg
Germany

Email: info@airy.green
(hereinafter also “ AIRY ” or “we”).

You can reach AIRY's data protection officer at the email address provided above.

2. Collection and storage of personal data as well as the type and purpose of their use
2.1 Visiting our website
When you visit our website, your browser automatically sends information to our website server. This information is temporarily stored in a so-called log file. The following information is collected without your intervention:

IP address of your device,
Date and time of the server request,
The website you previously visited (referrer URL),
The browser type and version used on your device,
If applicable, the operating system of your device as well
The name of your access provider.

The data mentioned is processed for the following purposes:

Ensuring a smooth connection to the website,
Ensuring comfortable use of our website,
Evaluation of system security and stability as well
for further administrative purposes.

The data is stored in server log files in a form that allows the identification of the data subjects for a maximum period of one month, unless a security-related event occurs (e.g. a DDoS attack). In the event of a security-relevant event, server log files are stored until the security-relevant event has been eliminated and fully clarified.

The legal basis for data processing is our legitimate interest, which arises from the data collection purposes listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally. The provision of this data is not required by law or contract or is necessary for the conclusion of a contract. You are not obliged to provide the personal data. However, if the data is not provided, it will not be possible to access the website.

We also use cookies and analysis services when you visit our website. Further explanations can be found below.

2.2 Contact by email
We offer you the opportunity to contact us via the contact form, which you can open by clicking on the buttons labeled “Contact” or “Contact Us” on our website. You will need to provide your title, first name, last name, email address, subject and your message.

Alternatively, you can send us messages using your usual email program to the email addresses provided on our website. It is necessary to provide your name, a valid email address and a description of your problem so that we know who the request came from and in order to be able to answer it. Further information (such as topic and – if available – contract reference) can be provided voluntarily.

If your request concerns a contract to which you are a party or concerns the implementation of pre-contractual measures, data processing will be carried out in accordance with Article 6 Paragraph 1 Letter b of the GDPR. For all other inquiries, data processing is carried out for the purpose of establishing contact on the basis of our legitimate interest (Art. 6 Para. 1 lit f GDPR). In this case, our legitimate interest is to process your request.

Personal data stored by us when you contact us will be deleted in accordance with legal regulations as soon as your request has been finally processed, unless lawful processing for other purposes subsequently arises from your message.

2.3 Contact via chat
You also have the option of contacting us via a chat function on our website. We only collect, process and use the information you provide during chat conversations to process your request. We store chat history details, including your uploaded files (if any) and IP address, until your request has been processed.

For the chat function we use Helpdesk, a service provided by Deskpro Ltd (79 Hartfield Road SW19 3ES, London, Great Britain).

When you use the chat, Helpdesk temporarily collects your IP address to determine the country from which the chat was started and to provide individual customer service. The collection of your IP address serves no further purpose and Helpdesk does not store it permanently.

Helpdesk uses cookies to operate the chat function. The cookies enable your browser to be recognized in order to enable smooth chat communication and to recognize individual users.
Your personal data collected during the live chat will be stored and transmitted to Helpdesk servers.

If you do not want your personal data to be processed by Helpdesk, you can prevent cookies from being stored on your device by selecting the appropriate settings in your browser. You can completely prevent the use of cookies by switching on the “Deactivate cookies” setting in your browser. You can find instructions on how to do this in your browser's user guide. However, the ability to use some areas of our websites (including the chat function) may be restricted if you block or do not agree to the use of cookies. Further information about Helpdesk's privacy policy can be found here .

2.4 Newsletters
You have the option of registering on our website to receive a free newsletter. We use the Klaviyo service to send the newsletter.
The provider of this service is Klaviyo, Inc., 125 Summer St, Floor 6 Boston, MA 02111, USA (data protection declaration: https://www.klaviyo.com/privacy/policy ). The provider processes content, usage and meta/communication data. We need a valid email address to process your newsletter registration/order (“ registration ”). When registering, this and the other data entered (optional: salutation, first name, last name, street and house number, zip code, city) are sent to Klaviyo, Inc. in encrypted form.

In addition, the following data is collected when you register in order to be able to provide evidence of your registration at a later date:

IP address of your computer,
Date and time of registration and
Date and time your registration was confirmed.

We reserve the right to store the registration data for a period of 3 years in accordance with Art. 6 Para. 1 No. 1 lit. f GDPR in order to document proof of your consent. This is also our legitimate interest.

The data processing for sending the newsletter, to optimize our newsletter and to increase their quality and attractiveness is carried out in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR based on your voluntary consent.
You can revoke your consent to receive the newsletter at any time in accordance with Art. 7 Para. 3 GDPR with effect in the future. You can declare your revocation via any of our contact options or via the unsubscribe link contained in every newsletter.

2.5 Blog
You have the opportunity to leave individual comments on individual text posts (“ blog posts ”) on our website after they have been approved by us. To submit a comment, you must provide a username (pseudonym) and a valid email address, as well as other information about your comment. In addition to your comment and other information, we also store the date and time of your entry, your user name (pseudonym) and the IP address of your computer. After submitting your comment, you will receive an email with a confirmation link that you must click to confirm your comment. We will then decide whether to publish it at our own discretion.
If we publish your blog post, we will store the data as long as the respective text post is online or you do not revoke your consent. If we do not publish your blog post, your data will be deleted after 3 years, taking into account the standard limitation period for civil law claims.

2.6 Customer reviews
You have the opportunity to rate products in our online shop on the respective product page after approval by us. To do this, we require a valid email address and a summary of your review. Optionally, you can also provide your name and a detailed opinion. In addition to your rating and other information, we also store the date and time of your entry, your name (if you provide it) and the IP address of your computer. After submitting your review, you will receive an email with a confirmation link that you must click to confirm your review.
The review will be published anonymously on the product page unless you have provided a name. Your email address will not be published.

2.7 Notepad
We offer a wish list function on our website. You can save specific products for later by clicking on a heart button. By setting a cookie (see Section 4 of this data protection declaration for details), you can find the products on the notepad on our website across different website visits and can easily access the respective product pages with quick access. In this context, we store your IP address and the products you have added to your wish list.
Data processing for the purpose of storing products on your notepad is carried out in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR based on your voluntarily given consent.

2.8 Recommendations
By clicking on “Recommend” on our product pages you can recommend individual products. For this purpose, you must provide your name, your email address and the email address of the recipient. Optionally, you can also enter a comment. By clicking on “Send”, the product recommendation will be sent from your email address to the recipient. Since we don't want to bother anyone, it is important that the recipient actually wants to receive information about our products. Please only use our “Recommend” function if the recipient has previously agreed to their email address being passed on to us for this purpose.

Data processing for the purpose of product recommendations is carried out in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR based on your voluntarily given consent.

If we sent you an email with a product recommendation on behalf of an AIRY customer/website visitor, we assumed that you had previously agreed to the use of the email address. With our email to you, we pursue the legitimate interest of advertising our products to you. The legal basis for this processing of your personal data is Article 6 (1) lit. f GDPR. We will not use your email address for any other purpose. You can let us know at any time at info@airy.green that you do not wish to receive further emails from us. Otherwise, we will delete your email address after 7 days and will no longer use it.

2.9 Registration of a customer account
You have the option of setting up a customer account on our website so that you can use the additional functions of the customer account. Creating a customer account simplifies the ordering process for you (see Section 2.10) and gives you the opportunity to save the data you provide for future orders, specify your preferred payment method and view previous orders.

To register, you must provide your title, first name, last name, email address and address. You will also be asked to set a password. You can also optionally provide your telephone number. Your customer account is not publicly visible.

The processing of the data that you must provide when registering is necessary in order to fulfill the contract you concluded by registering for a customer account on our website (Art. 6 Para. 1 lit. b GDPR).
You have the option of deleting your customer account yourself at any time. If you do not use your customer account for more than 5 years, we will delete your customer account. If your data is necessary to fulfill a contract or to carry out pre-contractual measures, early deletion of the data is only possible unless contractual or legal obligations prevent deletion.

2.10 Ordering goods
We offer you the opportunity to purchase goods on our website. You can process orders for goods using a customer account including registration, as a guest or via the individual communication channels specified here.

As part of the ordering process, we store all the data that you enter when using our range of products. In addition to the data you may have already provided when registering a customer account (title, first name, last name, email address and address), this includes your payment details and a possible additional delivery address.

If you order via individual communication channels (e-mail, telephone), we store your e-mail address and the other data you enter.

During the ordering process via the shop, we store the goods you have selected, their quantity, your IP address and the date and time of your selection in a separate session cookie (first-party cookie) until the order is completed and for the session at the latest. . While you are logged into your user account, we store this in a permanent first-party cookie, which is deleted when you log out of your user account. If you close the browser without logging out, the cookie will remain for a maximum of one year to simplify the ordering process when you visit our website again.

The data you provide during the ordering process will be processed in accordance with Article 6 Paragraph 1 Letter b GDPR, as this is necessary to fulfill the contract concluded via the website.

After the contract has been processed, we will delete your data taking into account the applicable tax and commercial law retention periods of 6 or 10 years.

3. Sharing of data
With technical service providers that we use to operate and maintain our website, the providers of the tracking and web analysis tools listed in Sections 5 and 6 of this data protection declaration, who process the data on our behalf for the purposes of user analysis and statistical evaluation, and with service providers We have concluded data processing contracts for the delivery and order processing of goods orders. Service providers who process personal data on our behalf outside the European Union (so-called third countries) will only be used if there is an adequacy decision from the European Commission for this third country or if the recipient has appropriate or appropriate guarantees. Furthermore, we do not pass on your personal data to third parties - with the exception of the purposes listed below. We will only share your personal information with third parties if:

you have given your express consent to this,
the disclosure is necessary to protect our legitimate interests or the legitimate interests of a third party and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
in the event that there is a legal obligation for the disclosure, as well as
this is legally permissible and necessary for the processing of contractual relationships with you.

4. Cookies
When you visit our website, we store information on your device in the form of cookies (for individual cookies, see our cookie policy https://airy.green/pages/cookie-guidelines ).

Cookies are small files that are transferred to your browser from an Internet server and stored on your hard drive. The cookie stores information that arises in connection with the specific end device used. However, this does not mean that we receive direct knowledge of your identity. We use the term “cookies” in this policy to refer to any files that collect data in this way.
On the one hand, the use of cookies serves to make the use of our offer more pleasant for you. We use so-called session cookies to recognize that you have already visited individual pages on our website. These are automatically deleted after you leave our website. In addition, to optimize user-friendliness, we also use temporary cookies that are stored on your device for a specific period of time. If you visit our website again to use our services, it will automatically be recognized that you have already been with us and what entries and settings you have made so that you do not have to enter them again. First-party cookies come from us, third-party cookies come from third parties.

On the other hand, we use cookies to statistically record the use of our website and to evaluate this for the purpose of optimizing our offering for you (see Section 5). These cookies enable us to automatically recognize that you have already been with us when you visit our website again. We also use cookies for retargeting purposes (see Section 6 “Marketing”). These cookies are automatically deleted after a defined period of time.

When you visit our website, we ask for your consent to the use of all cookies that are not absolutely necessary for the provision of our website (Art. 6 Para. 1 lit. a GDPR). Of course, you can also visit our website without accepting cookies. In our Cookie Policy https://airy.green/pages/cookie-guidelines , you can get detailed information about the cookies we use and can manage your cookie settings and choose which cookies you want us to consent to.

If you do not want your device to be recognized the next time you visit, you can refuse the use of cookies by changing the settings in your browser to “reject cookies”. You can find the respective procedure in the operating instructions for your browser. However, if you refuse the use of cookies, the use of some areas of our website may be restricted.

5. Analysis tools
The tracking measures listed below and used by us are carried out based on the consent you have given on a voluntary basis. With the tracking measures we use, we want to ensure a needs-based design and continuous optimization of our website and also ensure that we can give you personalized recommendations based on your usage behavior. We also use the tracking measures to statistically record the use of our website and to optimize our offering for you. The provision of this data is neither required by law nor contractually or necessary for the conclusion of a contract. You are not obliged to provide this personal data.
The respective data processing purposes and data categories can be found in the information on the corresponding tracking tools.

Use of Google Analytics with anonymization function
For the purpose of tailoring and continuously optimizing our website, we use Google Analytics, a web analysis service from Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA). In this context, pseudonymized usage profiles are created and cookies are used.
The information generated by the cookie about your use of this website such as

browser type/version,
operating system used,
Referrer URL (the previously visited page),
Host name of the accessing computer (IP address),
time of server request,

are transferred to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website use and internet use for the purposes of market research and the needs-based design of this website. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of you. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized so that assignment is not possible (IP masking). This means that your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area.

You can prevent the installation of cookies by setting the browser software accordingly; However, we would like to point out that in this case not all functions of this website may be able to be used to their full extent. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on.

Further information on data protection in connection with Google Analytics can be found in the Google Analytics help . Google LLC's privacy policy can be found here .

We also use Google Analytics to evaluate data from ads for statistical purposes. If you don't want this, you can turn it off via the Ad Preferences Manager .

6. Marketing
If we receive your email address in connection with the sale of a service and you have not objected, we also reserve the right to periodically send you information about our own similar services by email, as this is in our legitimate interest AIRY represents.

You can object to this use of your email address at any time by sending a message to the following address info@airy.green or via a link provided for this purpose in the advertising email.

We also do retargeting. In online marketing, retargeting is a process in which visitors to a website or app are identified and then addressed again in a pseudonymized form on other websites with targeted advertising. Users of the website or app are marked in pseudonymous form so that they can be recognized on the website or another website. Pseudonymous usage profiles are created from this information. The pseudonymous usage profiles are not merged with data about the bearer of the pseudonym. The aim of the process is to draw the attention of a user who has already shown an interest in a website or product to this website or product again in order to increase the advertising relevance and thus the click and conversion rate (e.g. order rate). We use time-limited cookies with a running time for retargeting. Further information can be found under Section 4 in this data protection declaration. We may combine your pseudonymous personal information with other pseudonymous information we receive from other sources and use it to improve and personalize the advertising and marketing activities directed to you.

If you do not want us to collect data relating to your visit to our website and the use of our services, applications and tools, you can object to this collection at any time with future effect by deactivating cookies in your browser or device settings or accordingly Make settings in our cookie policy (see section 4).

6.1 Google Ads
We have integrated Google Ads on our website. The Google Ads services are operated by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

We use Google Ads for remarketing purposes. This tool is used to show you interest-based ads on other websites and apps that participate in the Google advertising network. Your browser stores cookies that allow us to recognize you as a visitor when you visit websites that are part of the Google advertising network. These pages may then display advertisements to you based on content that you have previously viewed on our website or other websites or apps that use Google's remarketing feature. We are able to pre-determine certain keywords so that our advertising for our website only appears in search engine results when a keyword-relevant search result is retrieved.
If you reach our website via a Google ad, Google will place a so-called conversion cookie on your computer, which loses its validity after thirty days and does not serve to identify you. The conversion cookie makes it possible to track whether and which sub-pages of our website you have accessed. This allows both us and Google to understand whether you have completed or canceled a purchase of goods on our website if you came to our website via a Google ad.

In addition, the information collected is used by Google to create visit statistics for our website. Through these statistics we find out the total number of users who clicked on our ad and also which pages of our website were subsequently accessed by the respective user. For this purpose, anonymous data about your use of the website is stored and transmitted to a Google server in the USA and stored there. For the USA, the European Commission has issued an adequacy decision (EU/US Privacy Shield), according to which Google is certified.

These cookies are not used for personal identification. However, if you do not want Google Ad's remarketing feature to work, you can deactivate data collection for these purposes by making the appropriate settings here and deactivating cookies in your browser or device settings. You can also make appropriate settings in our cookie policy (see section 4).

Further information about data protection in relation to website statistics can be found here and general information about Google Ads can be found here . Google LLC's privacy policy can be found here .

6.2 Google Web Fonts
We include the font library from Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA on our website. Google LLC is certified under the Privacy Shield Agreement.
When you access our website, your browser calls a Google server, usually in the USA, to which it is transmitted which subpage you are accessing with which IP address in order to load the required font into your browser cache. This prevents multiple and constant reloading. The Google Web Fonts service is integrated in order to display the texts on our website visually correctly and in a graphically appealing manner. If your browser does not support the function, a standard font on your computer will be used to display our texts.

Google LLC's privacy policy can be found here .

6.3 Facebook Pixels
We also carry out retargeting using the Facebook pixel.
For retargeting we use the Facebook Pixel from Facebook Inc. (1 Hacker Way, Menlo Park, CA 94025, USA) or, if you are based in the EU, Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) (“ Facebook ”). For the USA, the European Commission has issued an adequacy decision (EU/US Privacy Shield), according to which Facebook is certified.

The Facebook Pixel is used to present visitors to this website with interest-based advertisements based on information about their use of this website (“Facebook Ads”) as part of the social network Facebook or when they visit websites that participate in the Facebook advertising network.

The Facebook pixel is a program code implemented on this website. When you access the website, the program code can cause certain information to be stored on your device in the form of cookies and trigger the transmission of certain information to Facebook. This includes, on the one hand, information that is generated for technical reasons when you access the website via the hypertext transfer protocol (HTTP), such as your IP address. This may also include other information that is already stored in cookies on your device, such as your Facebook user ID. When you access the website, Facebook can recognize that you have visited this website and what content on the website you have accessed. If you have a user account with Facebook, Facebook can assign this information to your user account.

If you do not want Facebook to directly assign the collected information to your Facebook user account, you can deactivate the remarketing function here . To do this you must be logged in to Facebook. You can also disable cookies in your browser or device settings. You can also make appropriate settings in our cookie policy (see section 4).

Further information on the processing of personal data by Facebook as well as your related rights and options for protecting your privacy can be found in Facebook's data protection information here .

6.4 YouTube
We embed videos from YouTube on our website. This is the video portal of YouTube LLC. (901 Cherry Ave., 94066 San Bruno, CA, USA) (“ Youtube ”). YouTube is a subsidiary of Google LLC. (1600 Amphitheater Parkway, Mountain View, CA 94043 USA). Google LLC is certified under the Privacy Shield Agreement.

We use YouTube to show you videos on our website that are stored on YouTube servers. If you start a YouTube video on our website, your specific request with your IP address, the date, time and details of our website will be transmitted to YouTube servers in the USA. This connection is required to view the video you requested. At the same time, your request will establish a connection to Google’s “DoubleClick” advertising network. YouTube stores the transmitted data permanently to analyze your usage behavior. If you are logged into your YouTube user account when you request a video, YouTube will merge this data.

You can prevent this by logging out of your YouTube user account or changing the settings there before watching a video.

To protect your data, we use “extended data protection” at YouTube, so that the connection to YouTube only occurs when you specifically request a video and not when you access our website, if there is a video embedded by YouTube there.

You can prevent the storage of cookies by setting your browser software accordingly; However, we would like to point out that in this case you may not be able to fully use all of the functions of this website. You can also make appropriate settings in our cookie policy (see section 4).

Further information about Google LLC's terms of use and data protection can be found here .

The purpose of data processing is to improve the quality of our website.

6.5 Instagram
We include functions and content from the Instagram service on our website. The provider of this service is Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland).

The content of the service includes images, videos or texts and buttons with which users express their enjoyment of this content. If you are a member of the Instagram service, this provider can assign a call to the listed content and functions to your profile there.

You can find Instagram's privacy policy here .

7. Social media profiles
We maintain publicly accessible social media profiles (“ profiles ”) on various social networks (Facebook, Instagram, YouTube, Pinterest, Twitter, Xing, LinkedIn).

When you visit the profiles, your personal data is processed not only by us, but also by the operators of the respective social network. This happens even if you do not have a profile on the respective social network. The individual data processing operations and their scope differ depending on the operator of the respective social network. For details about the processing of your personal data as well as the type, scope and purpose of their use by the operator of the respective social network, please refer to the data protection declarations of the respective operator:

Agreement on joint responsibility in accordance with Art. 30 GDPR can be found here: Facebook and Instagram , LinkedIn .

If you use our profiles on social networks to contact us (e.g. by creating your own posts, reacting to one of our posts or sending us private messages), the data you provide to us will be processed exclusively for the purpose of: to be able to get in touch with you.
The legal basis for data processing is Article 6 Paragraph 1 Letter f).

You are not obliged to provide us with your personal data. However, this may be necessary for individual functionalities of our social network profiles. These functionalities will not be available to you or will only be available to a limited extent if you do not provide us with your personal data.

8. PayPal as a payment method
We use the PayPal service on our website. The European operating company of PayPal is PayPal (Europe) S.à.rl & Cie. SCA (22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg).

Online payments can be processed via the PayPal service. If you select PayPal as your payment service provider during the ordering process in our shop, your data will be automatically transmitted to PayPal.

The following data is usually transmitted to PayPal: first name, last name, address, date of birth, gender, email address, IP address, telephone number, mobile phone number and other data necessary to process a payment. In particular, payment information such as bank details, card number, validity date and CVC code, number of items, item number, data on goods, prices and tax charges can also be transmitted.
Processing is carried out in accordance with Art. 6 Para. 1 lit b) GDPR to fulfill pre-contractual measures or to fulfill a contract.

PayPal's privacy policy can be found here .

9. Amazon Pay as a payment method
If you decide to use Amazon Pay as part of your ordering process, payment with the online payment service provider Amazon Payments, your payment data will be sent primarily to Amazon Payments Europe sca as part of the payment processing, and secondarily to Amazon EU SARL, Amazon Services Europe SARL and Amazon Media EU SARL, all three located at 5, Rue Plaetis L 2338 Luxembourg (hereinafter “Amazon Payments”).
By registering to use the Amazon Pay service, the data subject accepts and agrees to the data protection declaration of Amazon Payments.

The data subject thereby further gives their consent that Amazon Payments may collect, process and use their personal data listed below for the purposes stated below. This consent can be revoked at any time.

The personal data transmitted to Amazon Payments is mostly first name, last name, address, telephone number, IP address, email address, or other data that is necessary for order processing, as well as data that is related to the Order status, such as number of items, item number, invoice amount and taxes in percent, invoice information, etc.

This transmission is necessary to process your order using the payment method you selected, in particular to confirm your identity, to administer your payment and the customer relationship.
Amazon.com, Inc. participates in the EU-US Privacy Shield program (“EU-US Privacy Shield”).

Amazon Payments reserves the right to carry out a credit check. Amazon Payments uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding whether to provide the respective payment method. The credit report can contain probability values (so-called score values). To the extent that score values are included in the results of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, is included in the calculation of the score values. In addition, Amazon Payments is entitled to pass on your data to unnamed third parties (banks, e-service providers, service partners, but also auditors, analysis services, credit agencies, marketing partners, cloud service providers, retargeting providers, affiliated companies).

Further data protection information, including information about the credit agencies used, can be found in the Amazon Payments data protection declaration: https://pay.amazon.de/help/201751600

10. Stripe as a payment method
We use the Stripe service on our website. The European operating company of Stripe is Stripe Payments Europe Ltd (Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland).

Online payments can be processed via the Stripe service. Payments are made via your credit card or direct debit. If you select Stripe as your payment service provider during the ordering process in our shop, your data will be automatically transmitted to Stripe.

The following data is usually transmitted to Stripe: first name, last name, address, date of birth, gender, email address, IP address, telephone number, mobile phone number and other data necessary to process a payment. In particular, payment information such as bank details, card number, validity date and CVC code, number of items, item number, data on goods, prices and tax charges can also be transmitted.
Processing is carried out in accordance with Art. 6 Para. 1 lit b) GDPR to fulfill pre-contractual measures or to fulfill a contract.

Stripe's privacy policy can be found here .

11. Security
For security reasons and to protect the transmission of content, our website is provided via an encrypted connection. You can recognize this by the closed appearance of the lock symbol in your browser line and by the change from “http://” to “https://” in the address line of your browser. The encryption is carried out using the SSL process (Secure Socket Layer) in conjunction with the highest encryption level of your browser.

12. Rights of those affected
You have the right:

in accordance with Art. 15 GDPR, to request information about your personal data processed by us;
in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or complete personal data stored by us;
in accordance with Art. 17 GDPR, to request the deletion of your personal data stored by us, unless the processing is carried out to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims is necessary (if we have published your personal data, we are obliged, taking into account the available technology and the costs of implementation, to take appropriate measures, including technical ones, to inform the data controllers who process the personal data, that you have requested the deletion of all links or copies or replications of such personal data);
in accordance with Art. 18 GDPR, to request the restriction of the processing of your personal data if you dispute the accuracy of the data, the processing is unlawful but you refuse its deletion and we no longer need the data but you use it to assert or exercise your rights or need to defend legal claims or have objected to processing;
in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another person responsible;
In accordance with Art. 7 Para. 3 GDPR, you can revoke your consent to us at any time. This means that we are no longer allowed to continue the data processing based on this consent in the future
to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority at your usual place of residence or place of work or at our place of business.

13. Right to object
If your personal data is processed on the basis of legitimate interests in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 of the GDPR, provided there are reasons for doing so arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which we will implement without specifying a special situation.

If you would like to exercise your right of withdrawal or objection, simply send an email to info@airy.green .

14. Changes to this Privacy Policy
This data protection declaration is currently valid.

Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can access and print out the current data protection declaration at any time at airy.green/pages/datenschutz .

As of: May 8, 2020