"Personal data" (Article 4(1) GDPR)
Means any information relating to an identified or identifiable natural person ("data subject"). A person is considered identifiable if they can be identified directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier, or one or more special characteristics that express the physical, physiological, genetic, psychological, economic, cultural, or social identity of that natural person. Identifiability may also be achieved by linking different pieces of information or by additional knowledge. The form of the information (photos, videos, audio recordings, etc.) is irrelevant.
"Processing" (Art. 4 No. 2 GDPR)
Refers to any operation or set of operations performed on personal data, with or without the aid of automated processes. This includes the collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of data, as well as the change of the original purpose.
"Controller" (Art. 4 No. 7 GDPR)
Refers to the natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data.
"Processor" (Art. 4 No. 8 GDPR)
Refers to a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller, in particular according to the controller's instructions (e.g. IT service providers). In the context of data protection law, a processor is not considered a third party.
"Third party" (Art. 4 No. 10 GDPR)
Refers to a natural or legal person, public authority, agency, or other body other than the data subject, the controller, the processor, and the persons who, under the direct authority of the controller or processor, are authorized to process personal data. This includes other legal entities belonging to the same group.
"Consent" (Art. 4 No. 11 GDPR)
Of the data subject means any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
"Special categories of personal data" (Art. 9 (1) GDPR)
Are data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data or biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation. The processing of such data is subject to different laws, which are explained in more detail in this privacy policy at the relevant points with explicit reference to these categories.
The data subject has voluntarily, knowingly, and unambiguously given their consent to a specific processing operation.
Processing is necessary for the performance of a contract or pre-contractual measures
Processing is necessary for compliance with a legal obligation to which the controller is subject.
Processing is necessary to protect vital interests.
Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.
Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.
You can request information about your processed data, the purposes of processing, data categories, recipients, storage period, your rights, etc.
You can request the immediate rectification of inaccurate data or the completion of your data.
Under certain conditions, you can request the erasure of your data.
Under certain circumstances, you may request that the processing of your data be restricted.
You may request to receive your data in a structured, commonly used, and machine-readable format or to have it transferred to another controller.
You may object to the processing of your data if it is based on Art. 6 (1) (e) or (f) GDPR.
You may withdraw your consent at any time, thereby prohibiting future processing based on this consent. This does not affect the lawfulness of processing based on consent before its withdrawal.
These are essential for navigation and basic functionality of our website and ensure its security. They do not collect marketing information or log your browsing history.
These collect pseudonymous data about your use of our website, visited subpages, and any malfunctions. They are used exclusively to optimize our offering and analyze user interests.
These enable the provision of customized advertising on our website or by third-party providers, as well as the measurement of the success of such offers. The maximum storage period is 13 months.
These improve the communication between our website and external services (e.g., social networks). Here too, the maximum storage period is 13 months. Any use of cookies that is not technically necessary constitutes a processing operation relevant to data protection law, which is only permissible with your express and active consent in accordance with Art. 6 (1) (a) GDPR. This applies in particular to advertising, targeting, and interaction cookies. The personal data processed by cookies will also only be passed on to third parties with your express consent
The processing of log data serves statistical purposes and the improvement of our website, in particular its stability and security (legal basis: Art. 6 (1) (f) GDPR).
A.5 applies.
Service providers for the operation of our website and the processing of stored data (e.g., data centers, IT security). Furthermore, A.11 applies
Data may be transferred to Hotjar's subcontractors for analysis purposes and to Framer for hosting. More detailed information and the legal classification of the transfer can be found in Appendix 2.
Name
_hjSessionUser_
_ga
ga_<property_id >
fs-consent-*
Domain
airadoc.com
airadoc.com
airadoc.com
airadoc.com
Storage period
12 months
13 months
13 months
1 months
Category
Service
Performance
Performance
Technically necessary
Description
Assignment of the user to an ID (Hotjar)
Assignment of the user to an ID (Google Analytics)
Assignment of the user to a property ID (Google Analytics)
Storage of cookie preferences
See the "Description" column in the overview above. A.13 also applies.
A.5 and A.12 apply.
For performance cookies, our processors for analytics. For the cookie "_hjSessionUser_", these are Hotjar and its processors. For the cookies "_ga" and "_ga_<property_id>", these are Google and its processors. More detailed information and the legal classification of the transfer can be found in Appendix 1.
The transfer of personal data to third countries takes place for the cookies "_hjSessionUser_", "_ga" and "_ga_<property_id>" to Google (Analytics) and, if applicable, to Hotjar's sub-processors. More detailed information and the legal classification of the transfer can be found in Appendices 1 and 2. Data may be transferred to Hotjar's subcontractors for analysis purposes and to Framer for hosting. More detailed information and the legal classification of the transfer can be found in Appendix 2.
When you use our contact forms, we process the data you provide, such as your last name, first name, email address, and the time of transmission. In addition, any optional personal data provided in your message will also be processed
The processing of log data serves statistical purposes and the improvement of our website, in particular its stability and security (legal basis: Art. 6 (1) (f) GDPR).
A.5 applies.
Service providers for the operation of our website and the processing of stored data (e.g., data centers, IT security). Furthermore, A.11 applies
The data may be transferred to Framer's subcontractors for hosting. More detailed information and the legal classification of the transfer can be found in Appendix 2. In addition, data is transferred to Google (email traffic) and its processors. More detailed information and the legal classification of the transfer can be found in Appendix 1.
Each time AIRAdoc is accessed, a temporary and anonymized log data record (so-called server log files) is stored, which contains the following information:
The processing of log data serves statistical purposes and the improvement of our website, in particular its stability and security (legal basis: Art. 6 (1) (f) GDPR).
A.5 applies.
Service providers for the operation of our website and the processing of stored data (e.g., data centers, IT security). Furthermore, A.11 applies
The data may be transferred to Framer's subcontractors for hosting. More detailed information and the legal classification of the transfer can be found in Appendix 2. In addition, data is transferred to Google (email traffic) and its processors. More detailed information and the legal classification of the transfer can be found in Appendix 1.
Name
i18next
Domain
airadoc.com
Storage period
Session
Category
Technically necessary
Description
Storage of language preferences
See the "Description" column in the overview above. A.13 also applies.
A.5 and A.12 apply.
Processors for hosting.
Personal data is transferred to third countries for the cookies "i18next" to the processor Microsoft for hosting. More detailed information and the legal classification of the transfer can be found in Appendix 1.
We request some basic information to create and manage your user account. This includes:
This data is processed for the purpose of registering users and fulfilling product functionalities (legal basis: Art. 6 (1) (b) GDPR).
A.5 applies.
Processors for the hosting of AIRAdoc. Furthermore, A.11 applies.
Data is only transferred to third countries when it is transferred to the processor Microsoft and its processors for the purpose of hosting the product. More detailed information and the legal classification of the transfer can be found in Appendix 1.
We require payment information from you for payment processing.
This data is processed exclusively for payment processing (legal basis: Art. 6 (1) (b) GDPR).
A.5 applies.
Processors for payment processing by AIRAdoc. Furthermore, A.11 applies.
Transfers to third countries are made exclusively in the course of transfers to the processor Stripe and its processors for payment processing. More detailed information and the legal classification of the transfer can be found in Appendix 1.
In order to map organizational structures within AIRAdoc, we process the affiliation of various users to an organization and the identification of users as administrators for this organization.
This data is processed in order to fulfill the product functionalities (legal basis: Art. 6 (1) (b) GDPR).
A.5 applies.
Processors for the hosting of AIRAdoc. Furthermore, A.11 applies.
Transfer to third countries takes place exclusively in the course of transfer to the processor Microsoft and its processors for hosting.
You have the option of voluntarily evaluating the quality of the documentation provided. This includes a simple selection (positive or negative) and the option to enter text.
This data is processed to improve our product (legal basis: Art. 6 (1) (a) GDPR).
A.5 applies.
Processors for the hosting of AIRAdoc. Furthermore, A.11 applies.
Transfers to third countries are made exclusively in the course of transfers to the processor Microsoft and its processors for hosting purposes. More detailed information and the legal classification of the transfer can be found in Appendix 1.
Within the scope of the intended use of AIRAdoc, the user regularly shares personal data that is absolutely necessary for the fulfillment of the product functionalities. This includes, among other things:
This data is processed for the purpose of fulfilling product functionalities (legal basis: Art. 6 (1) (b) GDPR).
A.5 applies.
Processors for the hosting of AIRAdoc. Furthermore, A.11 applies.
Transfer to third countries takes place exclusively in the course of transfer to the processor Microsoft and its processors for hosting. More detailed information and the legal classification of the transfer can be found in Appendix 1.
Certification in accordance with Art. 45 (1) GDPR within the framework of the Data Privacy Framework. For more information on certification, see Data Privacy Framework.
Certification pursuant to Art. 45(1) GDPR within the framework of the Data Privacy Framework. For more information on certification, see Data Privacy Framework.
Certification pursuant to Art. 45 (1) GDPR within the framework of the Data Privacy Framework. For more information on certification, see Data Privacy Framework.
