Privacy Policy
airion.car | Sargas GmbH | Last updated: 10.08.2026
1. Controller
The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Sargas GmbH
Zitadellenweg 34, 13599 Berlin, Germany
Managing Director: Michael Murawsky
Commercial register: Amtsgericht Charlottenburg, HRB 196979 B
VAT identification number: DE318764104
Email: info@airion.car
We have not appointed a Data Protection Officer, as we do not meet the thresholds set out in Art. 37 GDPR and § 38 BDSG.
2. Scope of this policy
This policy explains what personal data we process when you visit airion.car (the “website”), for what purposes, on what legal basis, for how long, and what rights you have. It applies to this website only. Separate terms apply to any purchase, order or commissioning agreement you may enter into with us.
3. Our approach
This website is deliberately built to collect as little personal data as possible. All media and typefaces are served from our own infrastructure or from your own device. The only third-party service involved in the operation of the website is the spam filter described in section 9. We do not build profiles of visitors, and we do not sell personal data.
4. Visiting the website
4.1 Technical delivery and server logs
When you access the website, your browser transmits technical information to the server delivering the site, including your IP address, so that the requested content can be returned to you. This is an unavoidable feature of how the internet operates.
Our web server does not create or retain access logs. We do not store visitor IP addresses, request histories, referrer information or browser identifiers in our own systems, and no such records exist for us to analyse, disclose or hand over.
Our hosting provider may process connection data at infrastructure level, for a strictly limited period, for the purposes of network security, defence against denial-of-service attacks and fault diagnosis. This processing is carried out on our behalf under the data processing agreement referred to in section 4.2.
Legal basis
Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable and functional delivery of the website.
4.2 Hosting
The website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The servers are located in Nuremberg, Germany. Hetzner acts as our processor under a data processing agreement pursuant to Art. 28 GDPR. No visitor data is transferred outside the European Union in connection with the hosting of this website.
4.3 Cookies and similar technologies
This website does not use cookies or comparable technologies for analytics, profiling, advertising or any other non-essential purpose. Any information stored on or read from your device is strictly necessary in order to provide the service you have requested, which is permitted under § 25(2) TDDDG without your consent; any associated processing of personal data is based on Art. 6(1)(f) GDPR.
Because no non-essential cookies are set, no consent banner is displayed.
4.4 Video
The film shown on the website is hosted on our own infrastructure and played back by your browser’s native video player. No third-party video service is involved, and no data is transmitted to any external provider when you play it.
4.5 Typefaces
The website uses typefaces already present on your device. No fonts are loaded from external servers, and no connection to any third-party font provider is established.
5. Contacting us
The website provides an “Enquire” button. Selecting it opens a pre-addressed message in your own email programme. No data is transmitted to us at that point; your data reaches us only if you choose to complete and send the message.
When you contact us by email, we process the information contained in your message — typically your name, email address and any further details you choose to provide — in order to handle your enquiry and any subsequent correspondence.
Legal basis
Art. 6(1)(b) GDPR where your enquiry relates to a contract or to steps taken at your request prior to entering into a contract; otherwise Art. 6(1)(f) GDPR, based on our legitimate interest in responding to enquiries addressed to us.
Retention
We retain enquiry correspondence for as long as necessary to deal with your enquiry and for the duration of any resulting business relationship. Where statutory retention obligations apply — in particular under the German Commercial Code (HGB) and the Fiscal Code (AO), generally six or ten years — we retain the data for those periods and restrict its processing accordingly. Correspondence not subject to such obligations is deleted 3 years after the matter is concluded.
Email provider
Our email is hosted on Google Workspace, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, acting as our processor under Art. 28 GDPR. Google may transfer data to servers in the United States. Such transfers are safeguarded by the EU–US Data Privacy Framework and, where applicable, by the European Commission’s Standard Contractual Clauses.
6. Recipients of your data
We do not sell personal data and we do not disclose it for the marketing purposes of third parties. We share it only with:
- our hosting and email providers, as described above;
- our website development and design partners, where access is unavoidable in order to maintain the website, under data processing agreements;
- our professional advisers in legal, tax and accounting matters, who are bound by professional confidentiality;
- our spam filtering provider, as described in section 9;
- public authorities, where we are legally obliged or entitled to disclose.
7. Transfers outside the EU/EEA
Hosting of this website takes place entirely within Germany. Where personal data is transferred to a country outside the EU/EEA in connection with our email service or the spam filtering service described in section 9, we ensure an appropriate level of protection through an adequacy decision of the European Commission, the EU–US Data Privacy Framework, or the Standard Contractual Clauses supplemented by additional safeguards where necessary. You may request a copy of the relevant safeguards using the contact details in section 1.
8. Social media
We maintain a presence on Instagram, operated by Meta Platforms Ireland Limited. Our website may link to that profile. Following such a link takes you to the platform’s own service, where the platform’s privacy policy applies and where the platform processes your data as its own controller. We have no influence over that processing. No social media plugins, “like” buttons or comparable widgets are embedded in our website, and no data is transmitted to any platform unless you actively follow a link.
9. Spam filtering
We use the Akismet spam filtering service, provided by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA, in order to identify and block automated and abusive submissions. Where a submission is made through the website, data relating to that submission — which may include the IP address, browser identifier and the content and metadata of the submission — is transmitted to Automattic’s servers for analysis and stored there.
Legal basis
Art. 6(1)(f) GDPR. Our legitimate interest is protecting the website against automated abuse and spam.
Third-country transfer
Data is transferred to the United States. The transfer is safeguarded by the European Commission’s Standard Contractual Clauses and, where applicable, by the EU–US Data Privacy Framework. Further information is available in Automattic’s own privacy policy.
10. Data security
Data transmitted to and from this website is encrypted in transit using TLS, indicated by “https://” in your browser’s address bar. We maintain appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration and unauthorised disclosure or access. No transmission over the internet can be guaranteed to be entirely secure.
11. Your rights
Under the GDPR you have the right to:
- Access (Art. 15) — obtain confirmation of whether we process your personal data and receive a copy of it;
- Rectification (Art. 16) — have inaccurate data corrected and incomplete data completed;
- Erasure (Art. 17) — have your data deleted where one of the grounds in Art. 17 applies;
- Restriction of processing (Art. 18);
- Data portability (Art. 20) — receive data you provided to us in a structured, commonly used and machine-readable format;
- Withdraw consent (Art. 7(3)) at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal;
- Lodge a complaint with a supervisory authority (Art. 77).
To exercise any of these rights, please contact us at info@airion.car.
Right to object (Art. 21 GDPR)
Where we process your personal data on the basis of our legitimate interests under Art. 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation. If you object, we will no longer process the data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defence of legal claims.
Supervisory authority
The supervisory authority competent for us is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61, 10555 Berlin, Germany
mailbox@datenschutz-berlin.de
You may also lodge a complaint with the supervisory authority in your country of residence or place of work.
12. Obligation to provide data
You are under no statutory or contractual obligation to provide us with personal data. However, without the information necessary to identify and respond to you, we will not be able to deal with your enquiry.
13. Automated decision-making
We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
14. Changes to this policy
We may update this policy to reflect changes to the website or to legal requirements. The version published here at the time of your visit applies. Please refer to the date at the top of this page for the current version.