Privacy policy

Last updated: October 2026

1. Controller

The controller for the processing of personal data on this website is:

This website addresses business customers. We do not offer goods or services to consumers through it.

2. What this website processes

This website consists of static pages. It sets no cookies, stores nothing on your device and uses no web analytics, no tracking pixels and no embedded third-party content such as videos, maps or fonts from other servers. All files come from our own web space. There is no contact form and no login.

Personal data is therefore processed in two places only: in the server log files when you open the pages (section 3), and when you contact us by e-mail or phone (section 5).

3. Visiting the website and server log files

When you open the website, your browser automatically sends data to the server. It is stored temporarily in a log file:

• IP address of the requesting device
• date and time of access
• requested address (URL)
• referrer URL, meaning the page you came from
• browser type and operating system (user agent)
• HTTP status code and amount of data transferred

Without this data the server cannot deliver the pages. We use it to operate the website, to find errors and to defend against attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and stable operation of the website.

Storage period: at most eight weeks. After that the log files are deleted. We do not combine this data with other sources.

4. Hosting

The website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. The servers are located in Germany. IONOS processes the data named in section 3 on our behalf under a data processing agreement pursuant to Art. 28 GDPR.

The mailboxes for info@thingsonair.com are also held on IONOS mail servers, where e-mail is processed and stored as part of running the mail service.

The connection to the website is encrypted with TLS (shown by “https://” in the address bar).

5. Contact by e-mail and phone

If you write to us or call us, we process your name, your e-mail address or phone number and the information in your message in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where the enquiry concerns a contract or steps towards one, otherwise Art. 6(1)(f) GDPR, our legitimate interest in handling enquiries.

We delete this data once the enquiry is settled, unless statutory retention obligations apply. Business letters are kept for six years and accounting records for ten years (Section 257 German Commercial Code, Section 147 German Fiscal Code).

6. Recipients and third countries

Your data is received only by the processors we need for the website and the mailboxes (IONOS), and by bodies we are legally obliged to inform. We do not sell data and do not pass it on for advertising. No data is transferred to countries outside the EU or the EEA.

We do not use automated decision-making, including profiling (Art. 22 GDPR).

7. Your rights

You have the right to

• access the data we hold about you (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing we base on Art. 6(1)(f) GDPR (Art. 21 GDPR).

An informal message to the address in section 1 is enough.

8. Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence, your place of work or the place of the alleged infringement. The authority responsible for us is:

9. Changes

We update this policy when the legal situation or the website's technology changes. The version published here applies.