Declaration of Data Protection

The protection of personal data is a very important issue for us. For this reason, the company listed in the imprint, airwerk GmbH, handles private data in accordance with the applicable legislation for the protection of personal data and for data security.

1. Name and contact information of the person responsible for data handling and of the company data protection officer

This data protection information is valid for data handling by:

Responsible company:
airwerk GmbH
Heinrich Hertz Straße 7
49685 Emstek
Germany

E-mail: datenschutzbeauftragter@airwerk.com
Telephone: +49 (0) 4473-926 71-30
Fax: +49 (0)4473-92671-59

The data protection officer of airwerk GmbH can be reached under the address given above, to the attention of Mr. Holger Haardt or at datenschutzbeauftragter@airwerk.com.

2. The collection and storage of personal data and the nature and purpose of its use

a) When visiting the website

When accessing our website, www.airwerk.com, information from the browser on your terminal devices is automatically sent to our website server. This information is temporarily stored in a so-called logfile. In the course of this procedure, the following data is collected and stored, without any action on your part, until the time of automatic deletion:

• IP address of the requesting computer,

• Date and time of the access,

• Name and URL of the file accessed,

• Website from which it was accessed (Referrer-URL),

• Browser used and possibly the computer operating system as well as the name of your internet access provider.

These data are collected and processed for the following purposes:

• Enabling connection establishment of the website,

• Guaranteeing the comfortable use of our website,

• Analysis of system security and stability,

• For other administrative purposes.

The legal basis for the data handling is Art. 6 para. 1 S. 1 lit. f of the General Data Privacy Regulation (GDPR). It is our legitimate interest to collect data solely for the purposes listed above. In no case will we use the collected data for the purpose of making conclusions about you personally. In addition, we use cookies and analysis services when our website is accessed. For more detailed information see Sections 4 and 5 of this Declaration of Data Protection.

b) When registering for our newsletter

If you have given your permission in accordance with Art. 6 para. 1 S. 1 lit. a GDPR, we will use your e-mail address for the purpose of regularly sending you our newsletter. In order to receive the newsletter it is sufficient to enter an e-mail address. It is possible to unsubscribe to the newsletter at any time, for example by using the link at the end of every newsletter. Alternatively, you can send your unsubscribe request per e-mail at any time to datenschutzbeauftragter@airwerk.com.

c) When using our contact form

Should you have any questions we offer you the option of contacting us via the contact form on our website. To use this contact form it is necessary to enter a valid e-mail address so that we know who the inquiry is from and where to send our reply. The entry of other information is optional. The data handling for the purpose of making contact with us takes place in accordance with Art. 6 para. 1 S. 1 lit. a GDPR and is based on your voluntarily provided permission. The personal data received through the use of the contact form are automatically deleted after your inquiry has been processed.

3. Passing on data to third parties

When using airwerk websites, applications or online tools, airwerk processes the following personal data:

• Personal data which you have voluntarily entered online on a airwerk website (such as registration, request for contact or upon participation in a questionnaire, etc.), such as first and last name, e-mail address, telephone number, information as part of a support request, comments or forum posts an information, which is automatically sent from your web browser or terminal device, e.g. your IP address, device type, browser type, previously visited websites, visited subpages or the date and time of each visitor request.

We process personal data for the following purposes:

• to enable you to make use of the services and functions of the airwerk website,

• to determine your identity and to enable user authentication,

• to process your inquiries, and

• to enforce our user conditions, to exercise our legal rights or to defend against legal claims in order to defend against and prevent fraudulent activities, including attacks on our IT infrastructure.

The processing of personal data is necessary in order to achieve the above listed purposes. If not explicitly stated otherwise when personal data is elicited, the legal basis is as follows:

• the implementation and fulfillment of a contract with you (Article (1) (b) of the General Data Protection Regulation),

• the fulfillment of legal obligations to which airwerk is subject (Article 6 (1) (c) of the General Data Protection Regulation), or

• the preservation of the legitimate interests of airwerk GmbH (Article 6 (1) (f) the General Data Protection Regulation). The legitimate interest of airwerk GmbH lies in the processing of your personal data for the purpose of preparing an offer and operating airwerk online features.

In some cases, we expressly request your consent to the processing of your personal data.

In this case, the legal basis for the processing of personal data is the consent you have provided (Article 6 (1) (a) of the General Data Protection Regulation).

4. Cookies

We use cookies on our site. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not harm your device, do not contain viruses, Trojans or other malicious software. Information, which results in connection with the specific terminal device used, is stored in the cookie.   However, this does not mean that we are immediately aware of your identity. On the one hand, the use of cookies serves to make the use of our services more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages on our website. The session cookies are automatically deleted after you leave our website. In addition, to improve usability, we also use temporary cookies that are stored on your device for a specified period of time. If you visit our site again to take advantage of our services, it will automatically recognize that you have already been with us and what inputs and settings you have made, so you do not have to re-enter them. On the other hand, we use cookies in order to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer (see Section 5). These cookies allow us to automatically recognize when you visit our site again that you have already been with us. These cookies are automatically deleted after a defined time. The data processed by cookies are for the purposes mentioned above and used in order to safeguard our legitimate interests as well as those of third parties in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or that a notification always appears before a new cookie is created. However, disabling cookies completely may mean that you cannot use all features of our website.

5. Analysis Tools

a) Tracking Tools

The tracking measures listed below and used by us are based on Art. 6 para. 1 sentence 1 lit. f GDPR. With the tracking measures we use, we want to ensure a needs-based design and the continuous optimization of our website. On the other hand, we use the tracking measures to statistically record the use of our website and evaluate it for the purpose of optimizing our features for you. These interests are to be regarded as justified within the meaning of the aforementioned regulation. The respective data processing purposes and data categories can be found in the corresponding tracking tools.

i) Google Analytics1

We use Google Analytics, a web analysis service provided by Google Inc., for the purpose of designing and continually optimizing our websites as required (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; referred to in the following as „Google“). In this context, pseudonymised usage profiles are created and cookies are used (see point 4). The information generated by the cookie about your use of this website such as

• Browser Type/ Version,

• Operating system used,

• Referrer URL (the previously visited page),

• Hostname of the accessing computer (IP address),

• Time of the server request,

are transmitted to a Google server in the US and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage for the purposes of market research and tailor-made website design. This information may also be transferred to third parties if required by law or if third parties have been contracted to process this data. Under no circumstances will your IP address be merged with any other data provided by Google. The IP addresses are anonymized, so that an assignment is not possible (IP Masking). You can prevent the installation of cookies by setting the browser software accordingly; however, we would like to point out that in this case not all features of this website may be used to their full extent. In addition, you may prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de). As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics tracking by clicking https://tools.google.com/dlpage/gaoptout.  An opt-out cookie will be set that will prevent the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again. For more information about privacy related to Google Analytics, see the Google Analytics Help Center (https://support.google.com/analytics/answer/6004245?hl=de).

ii) Google Adwords Conversion Tracking

To statistically record the use of our website and to evaluate it for the purpose of optimizing our website, we also use Google Conversion Tracking. In doing so, Google Adwords will set a cookie (see section 4) on your computer if you have reached our website via a Google ad. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of the Adwords customer’s website and the cookie has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. Every Adwords customer receives a different cookie. Cookies cannot be tracked via the websites of Adwords customers. The information gathered using the conversion cookie is used to generate conversion statistics for Adwords customers who have opted for conversion tracking. Adwords customers receive the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, they do not receive information that personally identifies users. If you do not want to participate in the tracking process, you can also refuse the required setting of a cookie – for example, via a browser setting that generally disables the automatic setting of cookies. You can also disable cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com”. Google’s privacy policy for conversion tracking can be found here (https://services.google.com/sitestats/de.html).

iii) Matomo

We use Matomo open-source software for analysis and the statistical evaluation of website usage. Cookies are used for this purpose (see section 4). The information generated by the cookie about the use of the website is transmitted to our servers and summarized in pseudonymous usage profiles. The information is used to evaluate the use of the website and to enable a needs-based design of our website. The information will not be passed on to third parties. In no case will the IP address be associated with any other data concerning the user. The IP addresses are anonymized, so that an assignment is not possible (IP-Masking). Your visit to this website is currently covered by Matomo Web Analytics. Click here (https://matomo.org/privacy-policy/), so that your visit is no longer recorded.

6. Social Media Plug-ins

We rely on social plug-ins from the social networks Facebook, Twitter and Instagram on our website in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR to make our company better known. The underlying commercial purpose is to be regarded as a legitimate interest within the meaning of the GDPR. Responsibility for the operation in compliance with data protection is to be guaranteed by their respective providers. The incorporation of these plug-ins by us is done by using the so-called two-click method to protect visitors to our website as well as possible.

a) Facebook

On our website we use social media plugins from Facebook to make the use more personal. For this we use the “LIKE” or “SHARE” button. This is a feature provided by Facebook.

If you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser and incorporated into the website. By integrating the plugins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are currently not logged in to Facebook. This information (including your IP address) is transmitted from your browser directly to a Facebook server in the US and stored there.

If you are logged in to Facebook, Facebook can assign the visit to our website directly to your Facebook account. If you interact with the plugins, for example by pressing the “LIKE” or “SHARE” button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information will also be posted on Facebook and displayed to your Facebook friends. Facebook may use this information for the purpose of advertising, market research and customized design of the Facebook pages. For this purpose, Facebook creates user, interest and relationship profiles, for example, to evaluate your use of our website in relation to the advertisements displayed on Facebook, to inform other Facebook users about your activities on our website, and to provide other services related to the use of Facebook. If you do not want Facebook to assign the data collected via our website to your Facebook account, you must log out of Facebook before visiting our website. For the purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your related rights and settings options for the protection of your privacy, please refer to the Privacy Policy of Facebook here (https://www.facebook.com/about/privacy/).

b) Twitter

Plugins of the short message network of Twitter Inc. (Twitter) are integrated on our website. The Twitter plugins (tweet button) can be recognized by the Twitter logo on our site. An overview of tweet buttons can be found here (https://about.twitter.com/resources/buttons). When you visit a page of our website that contains such a plugin, a direct connection is established between your browser and the Twitter server. Twitter receives the information that you have visited our site with your IP address. If you click the Twitter “tweet button” while logged in to your Twitter account, you can link the contents of our pages to your Twitter profile. This allows Twitter to associate your visit to our pages with your user account. We would like to point out here that we, as the provider of the pages, are not aware of the content of the transmitted data and their use by Twitter. If you do not want Twitter to associate your visit to our pages, please log out of your Twitter account. For more information, see the privacy policy of Twitter (https://twitter.com/privacy).

c) Instagram

Our website also uses so-called social plugins (“plugins”) operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”).

The plugins are marked with an Instagram logo, for example, in the form of an “Instagram camera”. When you visit a page of our website that contains such a plugin, your browser connects directly to Instagram’s servers. The content of the plugin is transmitted by Instagram directly to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are currently not logged in to Instagram. This information (including your IP address) is sent from your browser directly to an Instagram server in the US and stored there. If you’re logged in to Instagram, Instagram can instantly assign the visit to our website to your Instagram account. If you interact with the plugins, for example, press the “Instagram” button, this information is also transmitted directly to an Instagram server and stored there. The information will also be posted on your Instagram account and displayed there to your contacts. If you do not want Instagram to directly map the data collected through our website to your Instagram account, you’ll need to log out of Instagram before visiting our website. For more information on this, please refer to the Instagram Privacy Policy here (https://help.instagram.com/155833707900388).

7. The Rights of Affected Persons

You have the right:

• to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you may request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been disclosed, the planned retention period, the right to rectification, deletion, limitation of processing or opposition, the existence of a right of appeal, the origin of your data, if not collected by us, as well as the existence of an automated decision-making process including profiling and, if applicable, any meaningful information about its particulars;

• in accordance with Art. 16 GDPR, to demand the correction of incorrect personal data or to complete personal data stored with us;

• under Art. 17 GDPR to demand the deletion of your personal data stored with us, unless the processing is required for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims;

• according to Art. 18 GDPR to demand the restriction of the processing of your personal data, as far as the accuracy of the data is disputed by you, the processing is unlawful, but you reject their deletion and we no longer need the data, but you need this data for asserting, exercising or defending legal claims, or you have objected to the processing of this data pursuant to Art. 21 GDPR;

• pursuant to Art. 20 GDPR to receive your personal data provided to us in a structured, standard and machine-readable format or to request transmission to another person responsible;

• pursuant to Art. 7 (3) GDPR to revoke your once given consent to us at any time. As a result, we are not allowed to continue the data processing based on this consent for the future and

• under Article 77 GDPR to register a complaint to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or our office.

8. Right of Appeal

If your personal data are processed based on legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to file an objection against the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to objection, which will be implemented by us without you having to specifying any particular situation. If you would like to exercise your right of revocation or objection, please send an e-mail to datenschutzbeauftragter@airwerk.com.

9. Data Security

We use the commonly used SSL (Secure Socket Layer) method within the site visit, in conjunction with the highest level of encryption supported by your browser. In general, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we’ll use 128-bit v3 technology instead. If a single page of our website is transmitted in an encrypted form, this can be recognized by the closed presentation of the key or lock icon in the lower status bar of your browser. We also take appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or total loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

10. Updating and Changing the Declaration of Data Protection

This privacy policy is currently valid and is valid as of May 2018. As a result of the development of our website and offers thereof or due to changes in the legal and regulatory requirements, it may be necessary to change this Declaration of Data Protection. The current Declaration of Data Protection can be viewed and printed by you at any time on the website at https://www.airwerk.com/data protection.