Privacy Policy

1. Name and Contact Details of the Data Controller

This privacy policy applies to data processing by:

AirBit GmbH

Represented by: Olga Spirina

Vahrenwalder Straße 269 A

30179 Hannover,

Germany

Phone: +49 3025559880

Email: info@air-bit.de

Register Court: Amtsgericht Hannover

Registration Number: HRB 225544

VAT ID: DE 322302833

2. Collection and Storage of Personal Data as well as Type and Purpose of Their Use

a) When Visiting the Website

When you access our website https://dev.air-bit.eu, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until it is automatically deleted:

• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the retrieved file,
• Website from which access is made (referrer URL),
• Browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

The mentioned data is processed by us for the following purposes:

• Ensuring a smooth connection setup for the website,
• Ensuring comfortable use of our website,
• Evaluation of system security and stability, as well as
• Other administrative purposes.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest arises from the purposes of data collection listed above. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.

Furthermore, we use cookies and analytics services when you visit our website. Further explanations can be found in sections 4 and 5 of this privacy policy.

b) When Using the Contact Form, the New Customer Form, the RMA Form, the Switch Request Form, the Router Request Form, the New Vendor Form, the Sell to Us Form, the RMA Form, and the Route Planner

For any inquiries, we offer you the opportunity to contact us via a contact form provided on our website. In this context, it is necessary to provide a valid email address and telephone number so that we know who the inquiry is from and can respond accordingly. Additional information may be provided voluntarily.

The processing of data for the purpose of contacting us is carried out based on Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntarily given consent.

The personal data collected by us for the use of the contact form is automatically deleted after your inquiry has been processed.

Additionally, we offer the option to contact us via the New Customer Form, RMA Form, Switch Request Form, and Router Request Form.

When using the New Customer Form, it is necessary to provide a name, address, telephone number, email address, and website so that we know who the inquiry is from and can respond accordingly. Additional information may be provided voluntarily.

The processing of data for the purpose of contacting us is carried out based on Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntarily given consent.

The personal data collected by us for the use of the form is automatically deleted after your inquiry has been processed.

When using the RMA Request Form, it is necessary to provide a name, contact person, telephone number, and fax number so that we know who the inquiry is from and can respond accordingly. Additional information may be provided voluntarily.

The processing of data for the purpose of contacting us is carried out based on Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntarily given consent.

The personal data collected by us for the use of the form is automatically deleted after your inquiry has been processed.

When using the Switch Configurations Request Form, it is necessary to provide a name, telephone number, preferred messenger, account or messenger UID, switch model, hostname, NTP server, timezone, domain, and DNS server so that we know who the inquiry is from and can respond accordingly. Additional information may be provided voluntarily.

The processing of data for the purpose of contacting us is carried out based on Art. 6 para. 1 sentence 1 lit. a GDP on the basis of your voluntarily given consent.

The personal data collected by us for the use of the form is automatically deleted after your inquiry has been processed.

When using the Router Configurations Request Form, it is necessary to provide a name, email address, preferred messenger, account or messenger UID, router model, hostname, timezone, domain, and DNS server so that we know who the inquiry is from and can respond accordingly. Additional information may be provided voluntarily.

The processing of data for the purpose of contacting us is carried out based on Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntarily given consent.

The personal data collected by us for the use of the form is automatically deleted after your inquiry has been processed.

When using the New Vendor Form, it is necessary to provide a name, address, telephone number, and email address so that we know who the inquiry is from and can respond accordingly. Additional information may be provided voluntarily.

The processing of data for the purpose of contacting us is carried out based on Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntarily given consent.

The personal data collected by us for the use of the form is automatically deleted after your inquiry has been processed.

When using the Sell to Us Form, it is necessary to provide a first and last name, company name, address, telephone number, email address, and details about the items to be sold so that we know who the inquiry is from and can respond accordingly. Additional information may be provided voluntarily.

The processing of data for the purpose of contacting us is carried out based on Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntarily given consent.

The personal data collected by us for the use of the form is automatically deleted after your inquiry has been processed.

When using the RMA Request Form, it is necessary to provide a company name, contact person (name), telephone number, fax number, and email address so that we know who the inquiry is from and can respond accordingly. Additional information may be provided voluntarily.

The processing of data for the purpose of contacting us is carried out based on Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntarily given consent.

The personal data collected by us for the use of the form is automatically deleted after your inquiry has been processed.

If you wish to use our route planner to plan your journey to us, you must enter a starting point and a destination. These data are processed by Google Maps, a mapping service provided by Google Inc. By using Google Maps, information about your usage (in particular, the IP address of your computer) may be transmitted to a Google Inc. server in the USA and stored there.

The processing of personal data through the use of technically necessary cookies and your IP address is based on Art. 6 para. 1 sentence 1 lit. f GDPR. We have no influence on the further processing of data by Google Inc. Please also read the Google Maps Terms of Use before using this service.

If you do not agree with the data processing by Google Inc., please refrain from using the map service or disable the JavaScript function in your browser, which will result in a limited display.

For any inquiries, you have the option to contact us via email.

Data processing occurs based on your request and registration and is required under Art. 6 para. 1 sentence 1 lit. b GDPR for the proper handling of your request and for the mutual fulfillment of contractual obligations.

The personal data collected for the purpose of processing your request will be stored until the expiration of the statutory retention period (10 years after the end of the calendar year in which the contract was terminated) and then deleted, unless we are obligated under Art. 6 para. 1 sentence 1 lit. c GDPR due to tax or commercial law retention and documentation obligations (e.g., under the German Commercial Code (HGB), the German Criminal Code (StGB), or the Fiscal Code (AO)) to retain the data for a longer period, or if you have explicitly consented to further storage under Art. 6 para. 1 sentence 1 lit. a GDPR.

3. Disclosure of Data

Your personal data will not be transferred to third parties for purposes other than those listed below.

We will only disclose your personal data to third parties if:

• You have given your explicit consent pursuant to **Art. 6 para. 1 sentence 1 lit. a GDPR;
• The disclosure is necessary pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR** for the **establishment, exercise, or defense of legal claims, and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data;
• There is a legal obligation to disclose the data pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR; or
• The disclosure is legally permissible and necessary pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR for the performance of contractual relationships with you.

4. Cookies

We use cookies on our website. These are small files that your browser automatically creates and stores on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not cause any harm to your device and do not contain viruses, Trojans, or other malware.

Each cookie stores specific information related to the device used. However, this does not mean that we can directly identify you.

The use of cookies serves various purposes:

• Enhancing user experience: We use so-called session cookies to recognize that you have already visited certain pages on our website. These cookies are automatically deleted once you leave our website.

• Improving usability: We also use temporary cookies that are stored on your device for a specific period. When you revisit our site, it automatically recognizes that you have been here before and remembers your inputs and settings, so you do not need to enter them again.

• Statistical analysis and optimization: Additionally, we use cookies to statistically analyze the use of our website and to optimize our services (see Section 5). These cookies allow us to recognize returning users and are automatically deleted after a defined period.

The processing of data through cookies is necessary to protect our legitimate interests and those of third parties in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

Most browsers automatically accept cookies. However, you can configure your browser to prevent cookies from being stored on your device or to display a warning before a new cookie is created. Please note that completely disabling cookies may limit your ability to use all features of our website.

5. Analytics Tools and Payment Method: PayPal

The tracking measures listed below and used by us are carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR. Through these tracking measures, we aim to ensure a demand-oriented design and continuous optimization of our website. Additionally, we use these tracking measures to statistically analyze the use of our website and to optimize our services for you. These interests are considered legitimate within the meaning of the aforementioned regulation.

The purposes of data processing and the categories of data processed can be found in the respective tracking tools.

a) Google Analytics

For the purpose of demand-oriented design and continuous optimization of our website, we use Google Analytics, a web analytics service provided by Google Inc. (https://about.google) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as "Google").

In this context, pseudonymized usage profiles are created, and cookies (see Section 4) are used. The information generated by the cookie about your use of this website, such as:

• Browser type/version,
• Operating system used,
• Referrer URL (previously visited page),
• Hostname of the accessing computer (IP address),
• Time of the server request,

is transmitted to a Google server in the USA and stored there.

This information is used to evaluate website usage, compile reports on website activities, and provide other services related to website and internet usage for market research and the demand-oriented design of our website. Additionally, this information may be transferred to third parties if this is required by law or if third parties process the data on behalf of Google.

Your IP address will never be merged with other data from Google. The IP addresses are anonymized so that identification is not possible (IP masking).

Opting Out of Google Analytics

You can prevent the installation of cookies by configuring your browser settings accordingly. However, please note that in this case, you may not be able to fully use all the functions of this website.

Additionally, you can prevent Google from collecting and processing the data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing a browser add-on:

https://tools.google.com/dlpage/gaoptout?hl=en.

Alternatively, particularly for mobile browsers, you can disable Google Analytics tracking by clicking this link. An opt-out cookie will be set to prevent future data collection when visiting this website. The opt-out cookie is only valid for this browser and only for our website and will be stored on your device. If you delete cookies in this browser, you will need to set the opt-out cookie again.

Further information on Google Analytics and data protection can be found in the Google Analytics Help Center:

https://support.google.com/analytics/answer/6004245?hl=en.

b) Data Protection Regulations for PayPal as a Payment Method

The data controller has integrated components of PayPal on this website. PayPal is an online payment service provider** that processes payments via virtual personal or business accounts. Additionally, PayPal allows virtual payments through credit cards for users who do not have a PayPal account. A PayPal account is managed via an email address, meaning there is no traditional account number. PayPal enables users to make online payments to third parties or receive payments. Furthermore, PayPal acts as a trustee and offers buyer protection services.

The European operating company of PayPal is:

PayPal (Europe) S.à.r.l. & Cie. S.C.A.

22-24 Boulevard Royal,

2449 Luxembourg,

Luxembourg.

If the data subject* selects "PayPal" as the payment method during the checkout process in our online store, personal data is automatically transmitted to PayPal. By selecting this payment option, the data subject consents to the transfer of personal data necessary for payment processing.

The personal data transmitted to PayPal typically includes:

• First name, last name
• Address
• Email address
• IP address
• Telephone number or mobile number
• Other data necessary for payment processing

In addition, any personal data related to the respective order that is required for the fulfillment of the purchase agreement is also transmitted.

The purpose of the data transmission is to facilitate payment processing and fraud prevention. The data controller will transfer personal data to PayPal if a legitimate interest for the transmission exists.

Personal data exchanged between PayPal and the data controller may be transmitted by PayPal to credit agencies for the purpose of identity and credit checks.

PayPal may also share personal data with affiliated companies, service providers, or subcontractors if necessary for fulfilling contractual obligations or if the data is processed on behalf of PayPal.

Right to Withdraw Consent

The data subject may revoke consent to PayPal's processing of personal data at any time. However, such a revocation does not affect personal data that must be processed, used, or transmitted for contractual payment processing.

The applicable data protection regulations of PayPal can be accessed at:

https://www.paypal.com/de/webapps/mpp/ua/privacy-full

6. Social Media Plug-ins and Jivochat

We use social media plug-ins from the social network Facebook on our website based on Article 6(1)(f) of the GDPR to increase awareness of our company. The underlying promotional purpose is considered a legitimate interest under the GDPR. The responsibility for ensuring the data protection-compliant operation of these plug-ins lies with their respective providers. We integrate these plug-ins using the so-called two-click method to provide the best possible protection for visitors to our website.

a) Facebook

Our website uses social media plug-ins from Facebook to make its use more personalized. For this purpose, we use the "LIKE" or "SHARE" button, which is provided by Facebook.

When you access a page of our website that contains such a plug-in, your browser establishes a direct connection with Facebook's servers. The content of the plug-in is transmitted directly from Facebook to your browser and integrated into the website.

Through this integration, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently logged into Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there.

If you are logged into Facebook, Facebook can directly associate your visit to our website with your Facebook account. If you interact with the plug-ins, for example, by clicking the "LIKE" or "SHARE" button, this information is also transmitted directly to a Facebook server and stored there. Additionally, the information is published on Facebook and displayed to your Facebook friends.

Facebook may use this information for advertising, market research, and the demand-oriented design of Facebook pages. For this purpose, Facebook creates usage, interest, and relationship profiles, for example, to analyze your use of our website in relation to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website, and to provide other services related to Facebook usage.

If you do not want Facebook to associate the data collected via our website with your Facebook account, you must log out of Facebook before visiting our website.

For more information on the purpose and scope of data collection and further processing and use of the data by Facebook, as well as your rights in this regard and setting options to protect your privacy, please refer to Facebook’s privacy policy: https://www.facebook.com/about/privacy/.

b) Jivochat

Our live chat allows you to contact our employees directly in real-time. No personal data is required to use the chat. Your IP address is anonymized in accordance with legal requirements. The chat history is stored and analyzed in an anonymized form.

To provide you with real-time chat functionality on the website, "cookies" (i.e., text files) are stored on your computer. However, no data is aggregated to identify the user. For live chat, we use an external system provided by JivoSite, Inc., 525 W. Remington Drive, Sunnyvale, CA 94087, USA. The connection between your browser and JivoSite, Inc.'s servers is encrypted. Please refer to JivoSite’s privacy policy: https://www.jivochat.com/files/privacy_policy.pdf.

To prevent the storage of Jivochat cookies, you can configure your internet browser to block the future storage of cookies on your computer or to delete cookies that have already been stored. However, disabling all cookies may result in some functions of our website no longer being available.

You may object to the collection and storage of data for the purpose of creating a pseudonymized user profile at any time with future effect by sending an informal email with your objection to dev@air-bit.eu.

7. Rights of Data Subjects

You have the right to:

• Request access to your personal data processed by us pursuant to Article 15 GDPR. In particular, you may obtain information regarding the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, the existence of a right to rectification, erasure, restriction of processing, or objection, the existence of a right to lodge a complaint, the source of your data if it was not collected from you directly, as well as the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details.

• Request rectification of inaccurate or incomplete personal data stored by us without undue delay pursuant to Article 16 GDPR.

• Request erasure of your personal data stored by us pursuant to Article 17 GDPR, unless processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.

• Request restriction of processing of your personal data pursuant to Article 18 GDPR, if:

- You contest the accuracy of the data,

- The processing is unlawful, but you oppose the deletion of the data,

- We no longer need the data, but you require it for the establishment, exercise, or defense of legal claims, or

- You have objected to processing pursuant to Article 21 GDPR.

• Receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or request its transmission to another controller pursuant to Article 20 GDPR.

• Withdraw your consent at any time pursuant to Article 7(3) GDPR. This means that we will no longer process the data based on your consent in the future.

• Lodge a complaint with a supervisory authority pursuant to Article 77 GDPR. Generally, you may contact the supervisory authority of your habitual residence, place of work, or our business location.

8. Right to Object

If your personal data is processed based on legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right to object to the processing of your personal data pursuant to Article 21 GDPR, provided that there are reasons arising from your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will implement without requiring a specific situation to be stated.

If you wish to exercise your right to withdraw consent or object to processing, simply send an email to dev@air-bit.eu.

9. Data Security

We use the widely adopted SSL (Secure Socket Layer) protocol during website visits, in conjunction with the highest encryption level supported by your browser. Typically, this involves 256-bit encryption. If your browser does not support 256-bit encryption, we revert to 128-bit v3 technology instead. You can recognize whether a specific page on our website is encrypted by the closed key or lock symbol displayed in your browser's status bar.

Additionally, we implement appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological advancements.

10. Validity and Changes to This Privacy Policy

This Privacy Policy is currently valid and was last updated in February 2025.

Due to further development of our website and services or changes in legal or regulatory requirements, it may become necessary to modify this Privacy Policy. The latest version of the Privacy Policy can always be accessed and printed from our website at https://dev.air-bit.eu.