Privacy policy
1) Information on the collection of personal data and contact details of the controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about how we handle your personal data when you use our website. Personal data is all data with which you can be personally identified.
1.2 The controller in charge of data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is air up GmbH, Friedenstrasse 22A, 81671 Munich, Germany, e-mail: dataprivacy@air-up.com
1.3 The data protection officer of the controller is Ms. Pia Greuner, Friedenstrasse 22A, 81671 Munich, Germany, e-mail: dataprivacy@air-up.com
1.4 For security reasons and to protect the transmission of personal data and other data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL or TLS encryption.
2) Data collection when visiting our website
When you use our website for information purposes only (without registering, subscribing to the newsletter or placing an order), we only collect the data that your browser transmits to our server (so-called “server log files”). We also collect the following data, which is technically necessary for us to display the website to you - Our visited website - Date and time of access - Amount of data sent in bytes - Source/reference from which you reached the page - Browser used, operating system and IP address (if applicable: in anonymized form)
Processing is carried out in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.
3) Hosting
For the purpose of displaying and hosting the website and the online store, certain personal data is processed by corresponding service providers on our behalf. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR.
3.1 Hosting by Shopify
We use the store system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”). All data collected on our website is processed on Shopify's servers. Shopify takes appropriate technical and organizational measures to ensure that data is only processed within the EU or EEA. In order to ensure an adequate level of data protection in the event of access by the Canadian parent company, Shopify Inc, 150 Elgin St, Ottawa, ON K2P 1L4, Canada, there is an adequacy decision by the European Commission. Further information on Shopify's data protection can be found on the following website: https://www.shopify.de/legal/datenschutz and here: https://help.shopify.com/de/manual/your-account/privacy/GDPR.
3.2 Hosting by Vercel
Parts of this website are hosted via the Vercel cloud platform, which is provided by Vercel Inc. 340 S Lemon Ave #4133, Walnut, CA 91789, USA. This means that every visit to our website can be processed or delivered via Vercel. Personal data that you send to our website will therefore also be transmitted to Vercel. This is necessary to process your browser's requests to our website. The information transmitted includes: the host name of the accessing computer and the IP address. Depending on the server location, this information may also be transmitted to the USA. Vercel has concluded a data processing agreement with us in accordance with the European General Data Protection Regulation. In addition, Vercel is certified under the EU-US Data Protection Agreement and is therefore obliged to comply with EU data protection law. You can view Vercel's privacy policy at https://vercel.com/legal/privacy-policy. This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. The transfer of personal data is necessary for you to be able to use our website.
4) Cookies
We use cookies to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on the end device used and saved by the browser.
4.1 Necessary cookies
Some cookies ensure that our offers work properly or that you are recognized on your device after successful registration (“necessary” cookies). By placing these necessary cookies, we make it easier for you to visit our offers and use the services available there.
4.2 Advanced cookies
We only set non-essential cookies with your consent. When you visit our website for the first time, a pop-up will appear with an explanation about cookies. As soon as you click on the corresponding consent button, you agree that we may use the selected cookies described in the pop-up and in this privacy policy. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. Please note that the functionality of this website may be restricted if cookies are deactivated. If personal data is processed when “necessary” cookies are used, this is based on the legal basis of Art. 6 Para. 1 S.1 lit. f. GDPR due to legitimate interests in quality assurance and a technically flawless presentation of the website. The processing of personal data when using so-called “extended cookies” is based on your consent (legal basis: Art. 6 para. 1 sentence 1 lit. a GDPR).
5) Making contact
Personal data is collected when you contact us (e.g. via contact form, email or chat). Which data is collected when you contact us can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration. To process and respond to your messages, we sometimes use the services of Concentrix Corporation (formerly Webhelp) https://www.concentrix.com/privacy-policy/. If your contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 sentence 1 lit. b GDPR. Otherwise, Art. 6 para. 1 sentence 1 lit. a GDPR serves as the legal basis.
6) Data processing when opening a customer account and for contract processing
In accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, personal data will continue to be collected and processed if you provide it to us for the execution of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. You can delete your customer account at any time by sending a message to the above address of the controller. After completion of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial retention periods and deleted after expiry of these periods, unless you have expressly consented to further use of your data or a legally permitted further use of data has been reserved by us.
7) Use of your data for direct advertising
7.1 Registration for our e-mail newsletter
If you subscribe to our e-mail newsletter, we will send you regular information about our offers. Your e-mail address is mandatory for sending the newsletter. The provision of further data is voluntary and is used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. After registering, you will receive a confirmation e-mail asking you to confirm that you wish to receive the newsletter in future by clicking on a corresponding link. By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. When you register for the newsletter, we store your IP address entered by the Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected by us when you register for the newsletter will be used exclusively for the purposes of advertising via the newsletter. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a message to the controller named above. Once you have unsubscribed, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this declaration.
7.2 Sending the e-mail newsletter to existing customers
If you have provided us with your e-mail address when purchasing goods, we reserve the right to regularly send you offers for similar goods from our range by e-mail. In accordance with Section 7 (3) UWG, we do not need to obtain separate consent from you for this. In this respect, data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. If you have initially objected to the use of your email address for this purpose, we will not send any emails for this purpose. You can object to the use of your email address for this advertising purpose at any time with effect for the future by sending a message to the controller named above. 7.3 WhatsApp newsletter
If you sign up for our WhatsApp newsletter, we will regularly send you information about our offers via WhatsApp (1601 Willow Rd, Menlo Park, CA, United States). The only mandatory information required to receive the newsletter is your mobile phone number.
By subscribing to the Whatsapp newsletter, you consent to the use of your personal data in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR for the purpose of sending the newsletter. You can unsubscribe from the newsletter at any time by sending us the message “Stop” via WhatsApp. Once you have unsubscribed, your mobile phone number will be deleted from our newsletter mailing list immediately, unless you have expressly consented to further use of your data or it is otherwise permitted by law. Please note that WhatsApp receives access to the address book of the mobile device we use to send the newsletter and automatically transfers the telephone numbers stored in the address book to a Meta (formerly Facebook) server in the USA. However, the provider has implemented the so-called standard contractual clauses of the European Union and is certified under the EU-US data protection agreement to ensure an adequate level of data protection. We also carry out a case-by-case risk analysis to ensure data protection. The transmission of data of users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.
For more information about data processing by WhatsApp: https://www.whatsapp.com/legal/?eea=1#privacy-policy
7.4 Advertising by letter post
Due to our legitimate interest in personalized direct advertising, we reserve the right to store your first and last name, your postal address and - if we have received this additional information from you as part of our contractual relationship - your title, academic degree, year of birth and your professional, industry or business name in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR and to use them to send you interesting offers and information about our products by post. You can object to the storage and use of your data for this purpose at any time by sending us a corresponding message.
7.5 Mobile Message Service (UK only)
By signing up to our mobile messaging service, you agree to receive updates, alerts and information (e.g. order updates, account alerts etc.), promotions, special offers and other marketing offers (e.g. shopping cart reminders) from air up via text messages through your mobile provider to the mobile number you have provided. To unsubscribe from the messaging service, send a text message with the keyword STOP to +44 7479 273897 and you will receive a one-off confirmation text message to unsubscribe. If you are subscribed to other air-up mobile programs and wish to cancel them, you must unsubscribe from these programs separately.
We reserve the right to change or cancel the service or any of its features without notice. Subject to applicable law, we may also change these Mobile Terms at any time, and your continued use of the Service after the effective date of any such change will constitute your acceptance of such changes. We do not charge you for the service, but you are responsible for all costs and fees associated with text messaging charged by your mobile service provider. Message and data rates may apply. Text messages may be sent via an automatic telephone dialing system or other technology. Your consent to receive autodialed marketing text messages is not required as a condition of purchasing goods or services.
If you require support or assistance, please contact our customer service team using the following form: https://air-up-eu.kustomer.help/en_gb/contact/visual-form-r18IKUlY9 We may change any short code or telephone number we use to operate the Service at any time and will notify you of such changes. You acknowledge that any messages, including any STOP or HELP requests, that you send to a short code or phone number that we change may not be received, and we are not responsible for fulfilling any requests made in such messages.
The mobile phone providers supported by the service are not liable for delayed or undelivered messages. You agree to provide us with a valid cell phone number and to notify us of any changes. You agree to indemnify us against any third party claims, liability claims, damages or costs arising from your use of the Service or from the provision of a third party telephone number.
To the extent permitted by applicable law, you agree that we shall not be liable for any failed, delayed or misdirected delivery of information sent via the Service, for any errors in such information and/or for any actions you may or may not take in reliance on the information or the Service.
7.6 Optimove
We use the marketing technology of Optimove UK Limited, 35 Luke Street, 2nd Floor, Unit 2.01, London EC2A 4LH, United Kingdom (“Optimove”).
Optimove enables us to better understand and engage with our customers. Optimove offers a range of features, including data analytics, marketing automation and personalized communications, that allow us to provide you with a personalized and relevant experience. For this purpose, we collect your customer data (email address, name and order details as well as your browsing behavior) and transfer it to Optimove in accordance with the GDPR. We send campaigns to you if you have signed up for the email, SMS and WhatsApp channels. Your personal data is currently stored in Germany if you are based in the EEA, the United Kingdom or Switzerland.
Your data is processed voluntarily and only with your express consent in accordance with Art. 6 (1) sentence 1 letter a) GDPR.
You can withdraw your consent at any time by opting out of cookies on air-up.com or by clicking the “unsubscribe” button in our email newsletters. For more details on how Optimove processes your personal data, please refer to the Optimove Privacy Policy at the following link https://www.optimove.com/privacy-policy
7.7 Sinch
We use a communication tool provided by Sinch Sweden AB, located at Lindhagensgatan 74, 112 18 Stockholm, Sweden (“Sinch”). Sinch is a messaging tool that allows you to send text messages. For this purpose, your cell phone number may be shared with Sinch in accordance with Art. 6 (1), sentence 1 (a) GDPR so that Sinch can operate the service.
Your cell phone number will only be passed on to Sinch if you give us permission to contact you by SMS. You can revoke your consent at any time with effect for the future. After revocation, processing may take up to 72 hours. You can find more details about how Sinch processes your personal data at: https://www.sinch.com/privacy-policy
8) Data Processing for Order Fulfillment
To process your order, we work with the following service providers who assist us partially or fully in executing completed contracts. Certain personal data is transmitted to these service providers as outlined below and always in compliance with the GDPR. The legal basis for the transfer of personal data is Art. 6(1) sentence 1 lit. b GDPR.
8.1 Shipping Companies To deliver orders, we collaborate with shipping service providers. The personal data we collect (name and address) is shared with the shipping company responsible for delivery in accordance with Art. 6(1) sentence 1 lit. b GDPR, to the extent necessary for delivering the goods. For more information on how these shipping providers process your data, please refer to their respective privacy policies:
- DHL | Germany - DHL | Netherlands - BPost | Belgium - DPD | Italy, United Kingdom, Belgium - GLS | France - Royal Mail | United Kingdom - PostAT | Austria - CH Post | Switzerland - PostNord | Nordics
Narvar: To enable returns, we use the return management tool provided by Narvar Inc., 3 East Third Avenue, Suite 211, San Mateo, CA 94401, USA ("Narvar"). The data processing is voluntary and only occurs with your explicit consent pursuant to Art. 6(1) sentence 1 lit. a GDPR. Privacy Policy: https://corp.narvar.com/privacy-policy Narvar places cookies in your browser when you initiate the return process. Cookie Policy: https://corp.narvar.com/privacy-policy
8.2 Payment Service Providers For payment processing, your personal data may be transferred to the financial institution involved, insofar as it is necessary for the transaction. Below is a list of our payment service providers. For more information on how these payment providers process your data, please refer to their respective privacy policies:
Amazon Pay: Payments are processed via Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg ("Amazon Payments"). Privacy Policy: https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010&ref_=footer_privacy&ld=NSGoogle
Apple Pay: Payments are processed via Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. Privacy Policy: https://support.apple.com/de-de/HT203027
Google Pay: Payments are processed via Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Privacy Policy: https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de
Klarna: Payments are processed via Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden ("Klarna"). Privacy Policies: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy
PayPal: Payments via PayPal, credit card via PayPal, direct debit via PayPal, or — if offered — "purchase on account" or "installment payments" via PayPal are processed by PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal"). Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Shopify Payments: Payments via Shopify Payments are processed by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. Privacy Policies: https://www.shopify.com/legal/privacy. https://stripe.com/de/privacy
SOFORT: Payments via SOFORT are processed by SOFORT GmbH, Theresienhöhe 12, 80339 Munich. SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Privacy Policy: https://www.klarna.com/sofort/datenschutz.
iDEAL: Payments via iDEAL are processed by iDEAL B.V., Omval 300 Amsterdam, Netherlands. Privacy Policy: https://www.ideal.nl/en/ideal-privacy-cookiestatement
9) Contacting you to remind you to leave a review
We use your email address to send a reminder to submit a rating about your order for the rating system we use. Data is processed under Article 6 (1) (f) of the GDPR, based on our legitimate interest in improving our products and services. You may object to our storing and processing your data for this purpose at any time by sending an appropriate email to the data controller.
9.1 Trustpilot
We use the customer review website services of Trustpilot A/S, Pilestraede 58, 5th floor, 1112 Copenhagen, Denmark ("Trustpilot").
Trustpilot is a platform that allows us to invite customers to leave a review about our service or products. It aggregates these reviews and makes them available (for both our service and our products) via air up’s Trustpilot page. We can also use the information to enhance our user experience by displaying testimonials, product ratings & product reviews within our webshop to help you find relevant information about air up & / or the product being viewed.
Reviews will be collected by Trustpilot via email after purchasing our products. We will process your personal data (e-mail address, name, order number) with Trustpilot, so that you can leave product feedbacks and review our services. Your data will be transmitted for the sole purpose of collecting feedback from you, so that we are able to improve our products based on your feedback. The data is passed on exclusively in encrypted form.
Personal data of customers based in the EEA, the United Kingdom or Switzerland is currently stored in the EEA. Trustpilot transfers personal data to the USA or (other country) under the European Commission's Standard Contractual Clauses pursuant to Commission Decision 2021/914/EU to ensure that it is adequately protected. In addition, we carry out an individual risk analysis to ensure data protection that goes beyond the standard contractual clauses.
The processing of the data takes place under Article 6 (1) (f) of the GDPR, on our legitimate interest in improving our products and services. You may object to our storing and processing your data for this purpose at any time by sending an appropriate email to the data controller.
For more details on how Trustpilot processes your personal data, please refer to the following link in Trustpilot's Privacy Policy: https://legal.trustpilot.com/for-reviewers/end-user-privacy-terms
9.2 Review Collect (UK, FR, IT only)
We use a review management solution of REVCOL TECHNOLOGY LLC (Karim Rakkaby MBR), located at 1309 Coffeen Ave Ste 1200, Sheridan, WY 82801, EIN 352846891 ("Review Collect").
With the help of this tool, we are able to react quicker to any improvements you may be able to point us to if you are not happy with our service. In such a case, it allows our Customer Engagement team to contact you.
Review Collect may redirect your reviews to air up’s Trustpilot profile. Reviews can be collected via SMS, email, and WhatsApp, after purchasing our products.
We will process your personal data (e-mail address, name, phone number, purchase date, purchase order id) with Review Collect so that you can leave feedbacks and review our services. Your data will be transmitted for the sole purpose of collecting feedback from you, so that we are able to react on your feedback and improve our products and services.
Personal data of customers based in the EEA, the United Kingdom or Switzerland is currently stored in the EU and no data transfers outside the EU/EEA.
The processing of the data takes place under Article 6 (1) (f) of the GDPR, on our legitimate interest in improving our products and services. Your personal data will be automatically removed from Review Collect two months after purchasing our products. You may object to our storing and processing your data for this purpose at any time by sending an appropriate email to the data controller.
For more details on how Review Collect processes your personal data, please refer to the following link in Review Collect's Privacy Policy: https://www.review-collect.com/privacy-policy
10) Online Marketing
10.1 Facebook Pixel and TikTok Pixel
We use the "Meta Pixel" from the social network Meta (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, "Facebook") and the "TikTok Pixel" from the social network TikTok (TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland) in enhanced data matching mode.
Based on your explicit consent under Art. 6(1) sentence 1 lit. a GDPR, when you click on an advertisement we run on Meta or TikTok, the URL of our linked page is appended with a suffix. This URL parameter is then stored in your browser via a cookie set by our linked page. Additionally, this cookie collects (personal) data such as your email address that we gather on our website during actions like purchases, account sign-ups, or registrations (enhanced data matching). This cookie is then read by the Meta Pixel or TikTok Pixel, allowing the data to be forwarded to Meta or TikTok. The information is typically transmitted to a Meta or TikTok server and stored there. This may involve transmission to Meta Platforms Inc. servers in the USA.
To ensure an adequate level of data protection, Meta Platforms Inc. is certified under the EU-US Data Privacy Framework and has implemented Standard Contractual Clauses. Additionally, we conduct individual risk assessments to ensure maximum data protection.
This process allows us to identify visitors to our online offerings as a target audience for personalized advertising. We ensure that you only see advertisements relevant to your interests in our online offerings or specific characteristics (e.g., interests in specific topics or products) that we transmit to Meta or TikTok ("Custom Audiences"). Furthermore, we can analyze the effectiveness of our advertisements for statistical and market research purposes by determining whether users were redirected to our website after clicking on an advertisement ("Conversion").
You can revoke your consent at any time by disabling Meta Pixel tracking or TikTok Pixel tracking. To do so, you can set an opt-out cookie by clicking the following links:
- Opt-Out Meta Pixel Tracking - Opt-Out TikTok Pixel Tracking
These opt-out cookies work only in this browser and only for this domain. If you delete your cookies in this browser, you must click the links again to reset the opt-out.
For more detailed information on data processing by Facebook and TikTok, visit the following links: - Facebook: https://www.facebook.com/about/privacy/ - TikTok: https://www.tiktok.com/legal/privacy-policy-eea?lang=de & https://www.tiktok.com/legal/new-privacy-policy
10.2 Use of Google Ads Conversion Tracking
This website uses the online advertising program "Google Ads" and, within Google Ads, the conversion tracking service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to promote our offerings on external websites using Google advertisements (AdWords). Through the data from these ad campaigns, we can evaluate the success of individual advertising measures. The goal is to show you advertisements that are of interest to you, make our website more engaging for you, and achieve a fair calculation of advertising costs.
With your consent under Art. 6(1) sentence 1 lit. a GDPR, a conversion-tracking cookie is set when you click on a Google Ads advertisement. If you visit certain pages of this website and the cookie has not expired, Google and we can recognize that you clicked on the advertisement and were redirected to this page. Google does not receive any information that allows you to be personally identified.
As part of Google Ads usage, personal data may also be transmitted to Google LLC's servers in the USA. To ensure an adequate level of data protection, Google is certified under the EU-US Data Privacy Framework and has implemented Standard Contractual Clauses. Additionally, we conduct individual risk assessments to ensure maximum data protection.
For more information about Google's privacy policies, visit: https://www.google.de/policies/privacy/
If you do not wish to participate in tracking, you can block this feature by disabling the Google conversion-tracking cookie in your browser settings under "User Preferences." You will then not be included in the conversion-tracking statistics. You can revoke your consent at any time by disabling Google Ads tracking. To do so, click the link below to set an opt-out cookie:
-Opt-Out Google Ads Tracking
10.3 Google Marketing Platform
This website uses the online marketing tool Google Marketing Platform (GMP), operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("GMP"). GMP uses cookies to display ads relevant to you, improve campaign performance reports, and prevent you from seeing the same ads multiple times. Additionally, GMP can use cookie IDs to track "conversions," which occur when you see a GMP ad and later visit the advertiser's website using the same browser and make a purchase. According to Google, GMP cookies do not contain personal information. Data processing is based on your consent under Art. 6(1) sentence 1 lit. a GDPR.
Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no control over the scope or further use of data collected by Google through GMP and provide information according to our current knowledge as follows: Through GMP integration, Google receives information that you visited the relevant part of our website or clicked on one of our ads. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered or logged into Google, it is possible that Google can obtain and store your IP address.
As part of GMP usage, personal data may also be transmitted to Google LLC servers in the USA. To ensure an adequate level of data protection, Google is certified under the EU-US Data Privacy Framework and has implemented Standard Contractual Clauses. Additionally, we conduct individual risk assessments to ensure maximum data protection.
Opting Out of Tracking If you wish to opt out of this tracking process, you can disable cookies for conversion tracking by adjusting your browser settings to block cookies from the domain `www.googleadservices.com` ( https://www.google.de/settings/ads). Note that this setting will be deleted if you clear your cookies.
You can also configure your browser to notify you when cookies are set and decide on a case-by-case basis whether to accept them, exclude cookies for certain cases, or block cookies altogether. Please note that disabling cookies may limit the functionality of our website.
For more information on GMP's privacy policies, visit: https://www.google.de/policies/privacy/
10.4 Newsletter
For product recommendations (newsletter), we use the service provider **Clerk.io ApS**, Kigkurren 8G, 2nd Floor, 2300 Copenhagen, Denmark. The transmission of the data listed below to Clerk.io is based on Art. 6(1) sentence 1 lit. f GDPR and serves our legitimate interest in using an effective, secure, and user-friendly newsletter system. If you register to receive product recommendations, you also consent, under Art. 6(1) sentence 1 lit. a GDPR, to the transfer of the following data:
- Your email address - Pages you visit - Content you view through Clerk.io - Clicks on content via Clerk.io - Products in orders you have placed (if applicable)
Clerk.io uses this information to provide personalized product recommendations and, at our request, for statistical evaluations and analyses. If you wish to disable the analysis of your data for statistical evaluation of recommendations, you must unsubscribe from the email newsletter.
For more information about how Clerk.io uses your data, please visit their privacy policy: https://www.clerk.io/privacy?_gl=1*z7ide9*_up*MQ..*_ga*MTcwOTEyNzU5OS4xNzE0MDMzMTA2*_ga_T6MQ16Y1JP*MTcxNDAzMzEwNS4xLjAuMTcxNDAzMzEwNS4wLjAuMjA4MjQyNDQwMA.
10.5 WhatsApp Newsletter (Chatarmin)
We use a WhatsApp marketing tool provided by Chatarmin.com GmbH, located at Kaiserstraße 89/2/3, Vienna, Austria ("Chatarmin"). Chatarmin is a messaging tool that facilitates communication between air up and its customers via WhatsApp.
To operate this service, customer data is shared with Chatarmin under strict compliance with our instructions and in accordance with GDPR requirements. Chatarmin processes your personal data as a customer (or potential customer), such as:
- Email address - Name - Phone number - WhatsApp profile name - IP address - Device ID (communication metadata) - WhatsApp profile data - Order data (supply chain management data)
This data is collected and processed to allow you to interact with our marketing tool, send messages to us, and receive messages from us. Currently, customer data is stored within the European Union. However, Chatarmin may transfer personal data outside the country where users are located, including to the United States or other countries that may not have equivalent data protection laws. Such transfers are governed by the European Commission's Standard Contractual Clauses under Decision 2021/914/EU to ensure adequate data protection.
Data processing is voluntary and occurs only with your explicit consent under Art. 6(1) sentence 1 lit. a GDPR.
Opting Out You can withdraw your consent at any time with future effect directly within the WhatsApp conversation by tapping the Opt-Out button or by typing "STOP." For further details, see: https://faq.whatsapp.com/868507767645966
For more information on how Chatarmin processes your personal data, refer to their privacy policy: https://chatarmin.com/en/privacy-policy)
10.6 Qualtrics XM
We use the Qualtrics XM Experience Management software, provided by Qualtrics LLC, 333 W. River Park Drive, Provo, UT 84604, USA, to create and share surveys and other feedback mechanisms. This allows us to receive direct feedback from users about the air up brand.
To this end, data is shared with Qualtrics XM in compliance with GDPR. When Qualtrics XM is used to collect feedback via the air up website, a script runs through the Google Tag Manager, enabling Qualtrics XM content to be displayed only to specific audiences (e.g., returning vs. new users). This script transmits data to Qualtrics XM, where it is stored and made available for analysis. If feedback is collected via a direct link to a questionnaire, Qualtrics XM stores the data on its servers without using additional services. When other services (e.g., CRM systems) are used to distribute these links, pseudonymized data may also be transmitted to Qualtrics XM as "embedded data" through a URL parameter.
For this purpose, the following personal data may be shared with Qualtrics XM, depending on the context: - Customer ID - Current and past order details - Responses provided - Website language - Website usage details
Data processing is voluntary and occurs only with your explicit consent, in accordance with Art. 6(1) sentence 1 lit. a GDPR.
Withdrawing Consent You can withdraw your consent at any time for future processing by following the link below: (Opt-Out Link)
For more details on how Qualtrics XM processes your personal data, please visit their privacy policy: https://www.qualtrics.com/privacy-statement/.
Cookies Usage Qualtrics XM places cookies in your browser when you participate in a survey. These cookies are primarily used to track survey progress, ensuring that surveys cannot be completed multiple times or allowing surveys to resume from where they were interrupted. A detailed list of the cookies potentially used by Qualtrics can be found here: https://www.qualtrics.com/support/survey-platform/getting-started/browser-cookies/?.
Opt-Out You can disable Qualtrics tracking at any time by deactivating Qualtrics cookies. To do this, click the following link to set an opt-out cookie: Opt-Out Qualtrics Tracking
11) Web Analytics Services
Google Analytics and Google Analytics with Google Signals
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Analytics uses "cookies" to analyze your use of this website and transmit certain data (including a shortened IP address) to Google's servers. This may include transmission to servers operated by Google LLC in the United States.
This website uses Google Analytics exclusively with the "_anonymizeIp()" extension, which ensures the anonymization of IP addresses by truncating them, thereby excluding direct personal identification. With this extension, your IP address is shortened by Google within member states of the European Union (EU) or the European Economic Area (EEA). Only in exceptional cases is the full IP address transmitted to a server of Google LLC in the USA and truncated there.
To ensure an adequate level of data protection, Google is certified under the EU-US Data Privacy Framework and has implemented the European Union's Standard Contractual Clauses. Additionally, we conduct individual risk assessments to ensure maximum data protection.
The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Opt-Out Options - You can prevent the storage of cookies by adjusting your browser settings. However, please note that in this case, you may not be able to fully utilize all functions of this website. - You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de - Alternatively, you can set an opt-out cookie using the following link. This cookie will prevent the future collection of your data by Google Analytics on this website (this opt-out cookie works only in this browser and only for this domain. If you delete your cookies, you will need to click the link again): >Disable Google Analytics
Additional Information For more details about data processing by Google Analytics, visit: https://policies.google.com/privacy?hl=de&gl=de
Google Signals This website also uses Google Signals, an extension of Google Analytics. Google Signals allows us to create cross-device reports (known as "Cross Device Tracking"). If you have enabled "personalized ads" in your Google Account settings and linked your internet-enabled devices to your Google Account, Google can analyze user behavior across devices and create database models based on this analysis.
These models consider the logins and device types of all visitors who were logged into a Google account and completed a conversion. For instance, the data may show on which device you first clicked on an ad and on which device the corresponding conversion occurred.
We do not receive any personal data from Google, only statistics generated based on Google Signals. Data processing is based on your consent, as outlined in Art. 6(1) sentence 1 lit. a GDPR.
12) Retargeting / Remarketing / Recommendation Advertising
12.1 Microsoft Advertising (Microsoft Corporation) Universal Event Tracking This website uses the Universal Event Tracking (UET) feature of Microsoft Advertising's conversion tracking technology, provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. UET integrates a tag on every page of our website that interacts with the conversion cookie set by Microsoft Advertising. This interaction tracks user behavior on our website and sends the collected information to Microsoft Advertising.
The purpose of this tracking is to statistically record and evaluate predefined goals (e.g., purchases or leads) to better tailor the alignment and content of our offerings to user interests. These tags are never used for personal identification of users. If the transfer of user behavior information to Microsoft Advertising involves personal data, it is processed based on your consent under Art. 6(1) sentence 1 lit. a GDPR.
When data is transferred to the USA, Microsoft is certified under the EU-US Data Privacy Framework and has implemented Standard Contractual Clause to ensure an adequate level of data protection. Additionally, we conduct individual risk assessments to ensure maximum data security.
Opt-Out from Tracking If you do not wish to participate in tracking, you can disable the Microsoft Advertising conversion tracking cookie in your browser's user settings. This will exclude you from conversion tracking statistics. For more information about Microsoft Advertising's privacy policies, visit: https://privacy.microsoft.com/de-de/privacystatement
12.2 Google Ads Remarketing Our website uses the Google Ads Remarketing feature to advertise this website in Google search results and on third-party websites. The service is provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
For this purpose, Google sets a cookie in your browser that automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit. Data processing occurs based on your consent under Art. 6(1) sentence 1 lit. a GDPR.
Additional data processing occurs only if you have agreed to allow your internet and app browsing history to be linked to your Google account, and this information to be used for ad personalization. If you are logged into your Google account during your visit to our website, Google combines your data with Google Analytics data to create and define cross-device remarketing target lists. For this, your personal data is temporarily linked with Google Analytics data to form target audiences.
In the context of Google Ads Remarketing, personal data may also be transmitted to Google's servers in the USA. For this purpose, Google is certified under the EU-US Data Privacy Framework and has implemented Standard Contractual Clauses. Additionally, we conduct individual risk assessments to ensure maximum data security.
Opt-Out from Tracking You can disable the use of cookies for ad preferences permanently by downloading and installing the browser plug-in available at: https://www.google.com/settings/ads/onweb/
Alternatively, you can configure your browser to notify you when cookies are set, allowing you to decide on a case-by-case basis whether to accept them, or to block cookies entirely. Note that disabling cookies may limit the functionality of our website.
For more details on Google's privacy policies, visit: https://policies.google.com/technologies/ads
13) Use of a Live Chat System
13.1 Kustomer This website uses the Kustomer live chat system to respond to real-time inquiries. For this purpose, the chat name you provide and the content of your chats are collected as data and stored to maintain the chat history. Cookies are used to operate the chat function. These cookies enable your internet browser to be recognized, ensuring the differentiation of individual users accessing the chat feature on our website.
If the information collected is personally identifiable, the processing is carried out based on Art. 6(1) sentence 1 lit. f GDPR, reflecting our legitimate interest in effective customer support and the statistical analysis of user behavior for optimization purposes. The placement of cookies is based on your consent, in accordance with Art. 6(1) sentence 1 lit. a GDPR.
14) Tools and Other Services
14.1 Google reCAPTCHA This website uses the reCAPTCHA function provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). The primary purpose of this feature is to determine whether input is made by a natural person or through abusive, automated, and machine processing. The service involves sending your IP address and potentially other data required by Google reCAPTCHA to Google. This processing is carried out under Art. 6(1) sentence 1 lit. f GDPR, based on our legitimate interest in ensuring responsible internet use and preventing misuse and spam.
In the context of using Google reCAPTCHA, personal data may also be transmitted to servers of Google LLC in the USA. To ensure an adequate level of data protection, Google is certified under the EU-US Data Privacy Framework and has implemented the **European Union's Standard Contractual Clauses. Additionally, we conduct individual risk assessments to ensure maximum data protection.
Further Information For more details about Google reCAPTCHA and Google's privacy policy, please visit: https://www.google.com/intl/de/policies/privacy/
Consent and Withdrawal Where legally required, we obtain your consent for the above-described processing of your data under Art. 6(1) sentence 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future.
14.2 Google Customer Reviews (formerly Google Certified Shops Program)
We collaborate with Google as part of the Google Customer Reviews program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This program allows us to collect customer feedback from users of our website. After making a purchase on our website, you will be asked if you would like to participate in an email survey conducted by Google.
If you consent under Art. 6(1) sentence 1 lit. a GDPR, we will transmit your email address to Google. You will then receive an email from Google Customer Reviews asking you to rate your shopping experience on our website. Your review will be aggregated with other reviews and displayed as part of our Google Customer Reviews, in our Merchant Center dashboard, and in Google Seller Ratings.
In the context of Google Customer Reviews, personal data may also be transmitted to Google's servers in the United States. To ensure an adequate level of data protection, Google is certified under the EU-US Data Privacy Framework and has implemented Standard Contractual Clauses. Additionally, we conduct individual risk assessments to ensure the highest possible level of data protection.
Further Information For more details on Google's data privacy policies, visit: https://support.google.com/merchants/answer/7188525?hl=de https://support.google.com/google-ads/answer/2375474
14.3 YouTube
Our website includes videos from YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, which are not stored on our servers.
We embed YouTube videos using the no-cookie parameter in the embedded link, ensuring that cookies are not set until the user actively plays the video. A cookie is only set when the video is played. At that point, YouTube primarily receives the technically required usage data for this process. We do not have any control over further data processing by the third-party provider.
The embedding of YouTube videos is based on Art. 6(1) sentence 1 lit. f GDPR, reflecting our legitimate interest in providing an engaging website design, promoting public relations, and facilitating communication.
YouTube may transfer personal data of our website visitors outside the EEA, Switzerland, and the United Kingdom, potentially including to the United States. To ensure an adequate level of data protection, YouTube is certified under the EU-US Data Privacy Framework and has implemented Standard Contractual Clauses. Additionally, we conduct individual risk assessments to ensure maximum data protection.
Further Information For more details about YouTube's data processing, visit: https://www.youtube.com/howyoutubeworks/our-commitments/protecting-user-data/
14.4 Applications for Job Postings via Email
We use the applicant management service provided by Greenhouse Inc. (“Greenhouse”), headquartered at 18 West 18th Street, 11th Floor, New York, New York 10011, USA.
Greenhouse is employed as our applicant management system. For this purpose, your application data is transferred to Greenhouse in compliance with the GDPR to enable the provision of this service.
Data Processing In the context of the recruitment process, we process your personal data with Greenhouse, including: - Salary expectations - Notice period - Address - Work permit for Germany - Documents relevant to the hiring process (e.g., CV, cover letter, references)
This ensures your participation in our application process. Personal data of applicants located in the EEA, United Kingdom, or Switzerland is currently stored within the EU. If data is exceptionally transferred to the USA, Greenhouse is certified under the EU-US Data Privacy Framework and has implemented Standard Contractual Clauses to ensure an adequate level of data protection. Additionally, we conduct individual risk assessments to maximize data security.
Legal Basis Data processing is voluntary and based on Article 6(1)(b) GDPR for the purposes of the application process. If special categories of personal data (e.g., health data such as disability status) are processed under Article 9(1) GDPR, this is done under Article 9(2)(b) GDPR to comply with legal obligations in employment and social security law. Alternatively, processing may also rely on Article 9(2)(h) GDPR for purposes such as occupational health care, assessing the applicant’s work capacity, or managing health and social care services.
Data Retention Unsuccessful Applications: If a candidate is not selected or withdraws their application, all data (including email correspondence and the original application email) will be deleted after notification, no later than six months. This retention period allows us to answer follow-up questions regarding the application and comply with legal obligations, such as equal treatment laws. Successful Applications: If the application is successful, the data provided will be processed further based on Article 6(1)(b) GDPR to fulfill the requirements of the employment relationship.
Further Information For more details on how Greenhouse processes your personal data, refer to their privacy policy: https://www.greenhouse.com/de/privacy-policy
14.6 SYZYGY Performance Marketing GmbH
Certain SEO recommendations for our website are provided by the technical service provider SYZYGY Performance Marketing GmbH. To facilitate this, we transmit data you provide while navigating our website to SYZYGY. This data transfer is carried out under Art. 6(1) sentence 1 lit. f GDPR, reflecting our legitimate interest in improving the air up online shop.
If you click "accept" in our cookie banner, you also consent under Art. 6(1) sentence 1 lit. a GDPR to share the following customer data with SYZYGY:
- Google Analytics Cookie ID
SYZYGY has access to Google Analytics and Google Analytics 4 to generate SEO recommendations and, at our request, for statistical evaluations and analyses.
Opt-Out Option If you prefer that your Cookie ID not be shared with third parties, you must disable Google Analytics and Google Analytics 4 cookies: >Disable Cookies
14.7 Usercentrics
We use the Usercentrics Consent Management Platform, provided by Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany ("Usercentrics"), to collect and manage user consent for data processing on our website. This processing is necessary to fulfill a legal obligation under Art. 7(1) GDPR and Art. 6(1) sentence 1 lit. c GDPR.
Data Processed To facilitate consent management, the following data is processed: - Date and time of access - Browser information - Device information - Geographical location - Cookie preferences - URL of the visited page
Without this processing, the functionality of the website cannot be ensured.
Data Handling and Retention Usercentrics acts as a processor on our behalf and is the recipient of your personal data. All processing occurs within the European Union. Data collected through Usercentrics is stored for a maximum of three years, after which it is deleted.
Additional Information For further details about Usercentrics' data processing, as well as options to object or delete your data, visit their privacy policy: https://usercentrics.com/de/datenschutzerklaerung/
14.8 Google Tag Manager
This website uses Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Tag Manager enables the management of website tags via a centralized interface.
Functionality and Data Processing - The Google Tag Manager tool itself is a cookie-less domain and does not collect personal data. - It facilitates the activation of other tags, which may in turn collect data. However, Google Tag Manager does not access this data. - If deactivation is implemented at the domain or cookie level, it will apply to all tracking tags managed through Google Tag Manager.
Google Tag Manager ensures compliance with any tracking opt-out settings, preserving user preferences across all implemented tags.
14.9 Pinterest Tag Conversion Tracking
This website uses the Pinterest Tag Conversion Tracking technology provided by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest").
Functionality If you arrive at our website via a pin on Pinterest, a cookie is set on your device. This cookie interacts with a "tag" implemented as a JavaScript code snippet from Pinterest. The tag tracks specific predefined user actions on our website, such as: - Completed transactions - Leads - Searches on the website - Views of product pages
The data collected helps Pinterest generate statistics about user behavior on our website after being redirected from a Pinterest pin. These insights allow us to optimize our offerings. The cookies expire after 180 days and are not used for personal identification.
Data Protection If personal data is transferred to the USA, Pinterest has implemented the European Union’s Standard Contractual Clause to ensure an adequate level of data protection. Additionally, we conduct individual risk assessments to ensure data protection exceeds the requirements of the standard clauses.
Legal Basis The processing of personal data in this context is carried out with your consent under Art. 6(1) sentence 1 lit. a GDPR.
Opt-Out To prevent tracking, you can disable the Pinterest Tag Conversion Tracking cookie via your browser's user settings. In this case, you will not be included in the conversion tracking statistics.
Further Information For more details about Pinterest's privacy practices, visit: https://policy.pinterest.com/de/privacy-policy
14.10 Twilio
We use a marketing tool provided by Twilio Germany GmbH, located at Rosenheimer Str. 143 C, 81671 Munich, Germany ("Twilio").
Twilio is a messaging tool that facilitates communication between air up and its customers across digital channels such as SMS, WhatsApp, and Facebook Messenger.
Data Collection and Processing To enable this service, customer data is transmitted to Twilio in compliance with GDPR. The following personal data is collected in encrypted and pseudonymized form: - Email address - Name - Phone number - IP address - Order data
This data allows you to participate in our marketing tool, enabling you to send and receive messages with us.
Legal Basis Data processing is voluntary and occurs only with your explicit consent under Art. 6(1) sentence 1 lit. a GDPR.
Withdrawal of Consent You can withdraw your consent at any time with future effect by following the opt-out instructions provided here: https://support.twilio.com/hc/en-us/articles/360034798533-Getting-Started-with-Advanced-Opt-Out-for-Messaging-Services
Further Information For more details on Twilio's data processing and privacy policies, visit: https://www.twilio.com/legal/privacy
14.11 TikTok
We share email addresses in encrypted form as user IDs with TikTok. The purpose of this data sharing is to deliver targeted social media advertisements on the TikTok platform and to measure the effectiveness of marketing campaigns.
Legal Basis The processing of your data is voluntary and occurs only with your explicit consent under Art. 6(1) sentence 1 lit. a GDPR.
Withdrawal of Consent You can withdraw your consent at any time by disabling TikTok tracking in your cookie settings.
Further Information For more details on how TikTok processes your data, please refer to their privacy policy: https://www.tiktok.com/legal/page/eea/privacy-policy/en
14.12 Snapchat
For personalized advertising on Snapchat, we share encrypted email addresses and information related to corresponding orders with Snapchat. The encrypted email enables precise attribution. The encryption is performed using a one-way algorithm, ensuring that the email cannot be reverted to its original form.
Legal Basis The processing of your data is voluntary and occurs only with your explicit consent under Art. 6(1) sentence 1 lit. a GDPR.
Further Information For more details on Snapchat's data processing, refer to their privacy policy: https://values.snap.com/en-GB/privacy/privacy-center
14.13 Google Analytics
We share encrypted email addresses as user IDs with Google Analytics. The user ID allows us to assign a consistent, long-term identifier to a single user, linking their engagement data across one or more sessions and devices. This enables Google Analytics to provide a unified and comprehensive view of a user's relationship with our company. The email addresses are encrypted using a one-way algorithm, making it impossible to reverse the encryption and restore the original value.
Legal Basis The processing of your data is voluntary and occurs only with your explicit consent under Art. 6(1) sentence 1 lit. a GDPR.
Withdrawal of Consent You can withdraw your consent at any time by disabling Google Analytics tracking in your cookie settings.
Further Information For more details about Google Analytics' data processing, refer to their privacy policy: https://policies.google.com/privacy?hl=en
14.14 Kustomer
We use the Kustomer software platform, provided by Kustomer LLC, 372 9th Avenue, 4th Floor, New York, NY 10001, for our customer helpdesk. Kustomer offers a SaaS platform for customer relationship management, optimizing communication and interaction between us and you as our customer. To this end, your customer data is shared with Kustomer in compliance with the GDPR.
Data Processing We store and process the following personal and usage data: - Personal Data: Email address, name, address, social media handle, phone number, and IP address. - Device Data: Browser type, operating system, device ID, and IP address. - Service Usage Data: Accessed pages, timestamps, order status and history, support conversation history, and performed searches.
Some of this data may be shared with Kustomer to enable you to use our customer helpdesk platform effectively.
Data Storage and Protection Your personal data is stored in the USA and the European Union. Kustomer is certified under the **EU-US Data Privacy Framework and has implemented the Standard Contractual Clauses to ensure an adequate level of data protection. Additionally, we perform individual risk assessments to maximize data security.
Legal Basis The processing of your data is voluntary and occurs only with your explicit consent under Art. 6(1) sentence 1 lit. a GDPR.
Further Information For more details on how Kustomer processes your data, refer to their privacy policy: https://www.kustomer.com/privacy/
14.15 Meta
We use encrypted email addresses for personalized advertising on Meta platforms (e.g., Facebook, Instagram). Before being transmitted to Meta, the email address is encrypted and replaced with a random ID. No data is shared with third parties. Your data is protected against misuse and unauthorized access through technical and organizational measures.
Legal Basis The processing of your data is voluntary and occurs only with your explicit consent under Art. 6(1) sentence 1 lit. a GDPR.
Withdrawal of Consent You can withdraw your consent at any time by disabling Facebook tracking in your cookie settings.
Further Information For details on how Meta processes your data, please visit their privacy policy: https://www.facebook.com/privacy/policy/
14.16 Google
We use encrypted email addresses for personalized advertising on Google platforms. These first-party customer data points are collected during checkout via conversion tags. The hashed first-party conversion data is then transmitted securely from our website to Google using a secure one-way hashing algorithm known as SHA256.
Legal Basis The processing of your data is voluntary and occurs only with your explicit consent under Art. 6(1) sentence 1 lit. a GDPR.
Data Protection Google is committed to maintaining the confidentiality and security of your data, treating it securely and confidentially according to industry-leading standards used to protect user data.
Opt-Out Options You can opt out of automatic data collection by third-party ad networks for interest-based advertising by adjusting your preferences for Google Display Network ads at: http://www.google.com/ads/preferences/
Further Information For more details on how Google processes your data, refer to their privacy policy: https://policies.google.com/privacy?hl=en-US
14.17 Telebalance by Wavemaker GmbH & Hurra.com (Germany Only)
We use a TV measurement platform called Telebalance, provided by Wavemaker GmbH, Völklinger Straße 33, 40221 Düsseldorf, Germany. Wavemaker collaborates with hurra communications GmbH (hurra.com), Wollgrasweg 27, 70599 Stuttgart, Germany, to develop and maintain Telebalance.
Purpose of Telebalance Telebalance is a measurement and attribution platform for TV advertising that helps us optimize the value of our advertising investments across all screens and devices. To enable Telebalance to provide its services, your personal data is shared with Telebalance in compliance with GDPR. Using the Telebalance tool, we can correlate website traffic with the airing of a TV ad, allowing us to balance and optimize our TV campaigns for visibility and website engagement.
Data Processing To optimize TV campaigns, Telebalance processes the following data: - General information about the TV campaign (e.g., product name, creative content) - Booking details (e.g., target audience, GRPs) - Traffic data - IP address - Cookie-based session information
This data enables Telebalance to assess the increase in website interactions and engagement resulting from TV media activities. Telebalance matches this pseudonymized data with campaign data to measure the impact of TV ads on website visitor numbers. Personal data is shared only in pseudonymized form.
Data Storage and Transfers Personal data of users based in the EEA, United Kingdom, or Switzerland is stored within the EU or the USA. When personal data is transferred to countries outside the EU or the UK, suitable safeguards are applied, including: - EU Standard Contractual Clauses - UK Data Transfer Addendum, where applicable - Certification under the EU-US Data Privacy Framework
Additionally, individual risk assessments are conducted to ensure data protection exceeding the Standard Contractual Clauses.
Legal Basis Data processing is voluntary and occurs only with your explicit consent under Article 6(1)(a) GDPR.
Withdrawing Consent You can withdraw your consent at any time with future effect via your browser settings or through the "Cookie Settings" link at the bottom of every page on air-up.com.
Further Information For more details about how Telebalance processes your personal data, refer to the privacy policies: - Hurra.com: https://privacy.hurra.com/ - Wavemaker: https://wavemakerglobal.com/de/datenschutz
15) Data Subject Rights
Under applicable data protection law, you have the following rights concerning the processing of your personal data by the controller:
15.1 Access and Intervention Rights - Right of Access (Art. 15 GDPR): You have the right to request information about your personal data processed by us, including: - The purposes of processing - Categories of personal data processed - Recipients or categories of recipients to whom your data has been or will be disclosed - Planned storage duration or the criteria used to determine it - Your rights to rectification, deletion, restriction of processing, objection to processing, and lodging a complaint with a supervisory authority - The source of your data if it was not collected directly from you - The existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and intended consequences of such processing for you - Information about safeguards under Art. 46 GDPR if your data is transferred to third countries.
- Right to Rectification (Art. 16 GDPR): You have the right to request the immediate correction of incorrect data and/or the completion of incomplete data stored by us.
- Right to Erasure (Art. 17 GDPR): You can request the deletion of your personal data under the conditions of Art. 17(1) GDPR. However, this right does not apply if processing is necessary for: - Exercising the right to freedom of expression and information - Compliance with a legal obligation - Reasons of public interest - Establishment, exercise, or defense of legal claims.
- Right to Restriction of Processing (Art. 18 GDPR): You have the right to request restriction of processing if: - You dispute the accuracy of your data (while its accuracy is verified) - The processing is unlawful, but you oppose erasure and request restriction instead - We no longer need your data for processing purposes, but you require it for the establishment, exercise, or defense of legal claims - You object to processing for reasons related to your particular situation, pending verification of whether our legitimate reasons override yours.
-Right to Notification (Art. 19 GDPR): If you assert your right to rectification, erasure, or restriction of processing, we are obliged to notify all recipients of your personal data unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
-Right to Data Portability (Art. 20 GDPR): You can request your personal data, provided to us, in a structured, commonly used, and machine-readable format or request its transfer to another controller, where technically feasible.
-Right to Withdraw Consent (Art. 7(3) GDPR): You can revoke your consent to data processing at any time with future effect. Upon withdrawal, we will delete the affected data immediately unless further processing is legally permissible without consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
-Right to Lodge a Complaint (Art. 77 GDPR): If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority in the EU member state of your residence, workplace, or the location of the alleged infringement, without prejudice to other administrative or judicial remedies.
15.2 Right to Object
If we process your personal data based on our overriding legitimate interests as part of a balancing of interests, you have the right to object to this processing at any time, for reasons arising from your particular situation, with future effect.
Exercising the Right to Object If you exercise your right to object: - We will stop processing the affected data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to establish, exercise, or defend legal claims.
If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such purposes. This also applies to profiling related to direct marketing.
Impact of Your Objection If you object to processing for direct marketing purposes, we will stop processing your personal data for these purposes immediately.
You can exercise your right to object as described above or through any provided contact channels.
16) Duration of Storage of Personal Data
The duration of storage for your personal data depends on the applicable legal basis, the processing purpose, and any statutory retention periods (e.g., commercial or tax-related retention periods).
Data Processed Based on Consent If your data is processed based on your explicit consent under Art. 6(1) sentence 1 lit. a GDPR, it will be stored until you withdraw your consent.
Data Processed for Legal Obligations For data processed under Art. 6(1) sentence 1 lit. b GDPR in the context of legal or contractual obligations, such data will be routinely deleted once statutory retention periods expire, provided they are no longer necessary for fulfilling or initiating a contract and/or there is no legitimate interest in continued storage.
Data Processed Based on Legitimate Interests For data processed under Art. 6(1) sentence 1 lit. f GDPR, the data will be stored until you exercise your right to object under Art. 21(1) GDPR, unless compelling legitimate grounds for processing exist that override your interests, rights, and freedoms, or the processing serves to establish, exercise, or defend legal claims.
Data for Direct Marketing Data processed for direct marketing purposes under Art. 6(1) sentence 1 lit. f GDPR will be stored until you exercise your right to object under Art. 21(2) GDPR.
General Deletion Policy All personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or processed, unless: - Further processing is required to comply with legal obligations, or - There are legitimate grounds for retaining the data.