Data Privacy

Status: 2026-10-01

Thank you for visiting the websites of Airtime Software AG (hereinafter also referred to as "AIRTIME" / "we" / "us"). The protection of your data is very important to us. In the following, we would like to inform you to what extent and for what purposes we collect and process personal data from you via the websites appairtime.com (hereinafter referred to as the "platform") and airtime-software.com (hereinafter referred to as the "website") – jointly referred to as the "online services".

1 General / Definitions

Our data privacy statement is based on the terms used in the General Data Protection Regulation (hereinafter "GDPR"). We use the following terms, among others, in this data privacy statement:

Personally identifiable information is any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"). A natural person is considered to be identifiable if, directly or indirectly, in particular by means of assignment to an identifier such as a name, an identification number, location data, an online identifier, or to one or more distinctive characteristics, the expression of the physical, physiological, genetic, psychological, economic, cultural, or social identity of this natural person can be identified (cf. Art. 4 No. 1 GDPR).

Processing is any process carried out with or without the help of automated procedures or any such series of processes in connection with personal data, such as collecting, recording, organizing, arranging, storing, adapting or changing, reading out, querying, using, disclosure through transmission, distribution or any other form of provision, comparison or linking, restriction, deletion, or destruction (cf. Art. 4 No. 2 GDPR).

The responsible party for processing is the natural person or legal entity, authority, institution, or other body that, alone or jointly with others, decides on the purposes and means of processing personal data (cf. Art. 4 No. 3, clause 1 GDPR).

A processor is a natural person or legal entity, authority, institution, or other body that processes personal data on behalf of the responsible party (cf. Art. 4 No. 8 GDPR).

A third party is a natural person or legal entity, public authority, agency, or body other than the data subject, the controller, the processor, and the persons who, under the direct responsibility of the controller or the processor, are authorized to process the personal data (cf. Art 4 No. 10 GDPR).

2 Responsibility / Contact

The responsible authority for the collection, processing, and use of personal data within the meaning of the GDPR is:

Airtime Software AG
Schauenburgerstrasse 10
20095 Hamburg
Germany

Phone: +49 40 573 093 730
E-mail: [email protected]
Internet: www.airtime-software.com

Accordingly, with this data privacy statement, we comply with our information obligations regarding the type, scope, and purposes of the processing of personal data as laid out in Art. 12 - 14 GDPR.

If you would like to view and/or update your personal data or have any questions about data privacy in our online services, please contact us at any time via our email address, [email protected] or by mail at the address above.

3 Data processing when visiting our online services

The scope and type of collection, processing, and use of your personal data differ depending on whether you are interested in or register for an event via our platform in your personal customer area, make a research request, or use your personal customer area on our platform purely for information. With regard to the data processing processes described below, you can assert your rights as a data subject at any time (see section 9).

3.1 Collection of data with your participation

3.1.1 Interest in or participation in an event

If you are interested in or would like to participate in a local or virtual event via our personal customer area, we will process your personal data in this context. Depending on the selected event, this includes, in particular, your master data stored when you registered for the customer account. If you are not registered on our platform and register for an event, the processing of the following personal data is required:

First name and surname
E-mail address
Position

This personal data is processed exclusively for the purpose of organizing and conducting the respective event (legal basis: Art. 6 Para. 1 (b) GDPR) and for the provision of your information to the issuers also after the event (see section 3.1.2.1).

The data concerning you will be deleted if it is no longer required for the respective purpose or if you have objected to the data processing (Art. 21 GDPR), and we are not legally obliged or entitled to store your personal data.

3.1.2 Organisation and implementation of an event

As part of the organization and implementation of an event, it is necessary for us to share your personal data as a registered participant of this event with third parties.

3.1.2.1 Transmission of information to issuers

As hosts of the platform and event organizer, we will also share your personal data with issuers. Issuers are contractually obliged to treat the information they receive confidentially and to use it only within the scope of the contractual purpose, i.e. within the scope of using the platform and to conduct the events commissioned by the issuer. At the same time, you will receive all the information provided by the issuer about the issuer and the event they have commissioned.

We share the following personal data with issuers:

If you register via our platform as a participant in an issuer's event and/or access research publications from an issuer, the personal data that you have stored in your profile (e.g. profile photo, first and last name, company, position, email address, telephone number, and information about the event you participated in) is also shared via the platform with the respective issuer of the event or the issuer of the research publication. In the form of histories, the issuer also receives information about which other events of the issuer you have already taken part in or which research publications of the issuer you have accessed. If you register for an event without being registered on our platform, only the personal data you provide (see section 3.1.1.) will be shared with the issuer, and after the event has taken place, histories are also made available for the issuer.

The disclosure of your personal data in the context of preparing and implementing events and providing our platform services is therefore carried out to provide the contractual service (Art. 6 Para. 1 (b) GDPR). After the event, your personal data will be stored and made available on the basis of our legitimate interest (legal basis: Art. 6 Para. 1 (f) GDPR) in being able to offer the issuer and you a comprehensive service. This also includes the presentation of the events that have taken place and the storage of the participant lists. The respective issuer thus has the opportunity to contact you as a participant again at a later point in time. If you do not want your personal data to be stored on the platform after the event has taken place, you can object to the processing at any time, e.g. by sending an email to [email protected] (Art. 21 GDPR).

3.1.2.2 Service providers for the implementation of events

In addition, it may be necessary for us to disclose your personal data and company data to service providers (e.g. operators of the location for local events, service providers for the implementation of a virtual event, etc.) who help organize the event in which you would like to participate.

The disclosure of the data to the respective service provider is necessary for the provision of the contractual service and is only carried out to the extent necessary for this purpose. The legal basis for the disclosure of data is Art. 6 Para. 1 (b) GDPR.

3.1.2.3 Service providers for the implementation of virtual events

To hold our virtual events, we use video conferencing systems that process various types of data. The scope of the data depends on what information you provide before or when participating in virtual events.

The following personal data may be the subject of processing by the video conferencing system we use:

User information: first name, last name, telephone (optional), email address
Meeting metadata: topic, description (optional), participant IP addresses, device/hardware information
for recordings: MP4 file of all video, audio, and presentation recordings, M4A file of all audio recordings, text file of the online meeting chat
when dialling in by telephone: details of the incoming and outgoing number, country name, start and end time; If necessary, further connection data such as the IP address of the device can be stored.
Text, audio and video data: You may have the opportunity to use chat, question, or poll functions during a virtual event. In this context, the text you enter will be processed to display in the virtual event and logged if necessary. To enable the display of video and the playback of audio, the data from your end device's microphone and any video camera on the end device are processed accordingly for the duration of the event. You can switch off or mute the camera or microphone at any time yourself.

To participate in a virtual event, you must regularly provide at least your name. You may need to create a user account with the respective provider. In this case, the provider regularly uses the customer data for their own purposes.

We record virtual events and inform you transparently in advance. The fact that the virtual event is recorded will also be displayed to you during the event. The recorded virtual event is then made available to the issuer. Details on the recording and transcription, including the legal basis, can be found in section 4.

In the case of virtual events, we can also process the questions asked by participants for the purpose of recording and following up on this event.

The legal basis for data processing when holding virtual events is Art. 6 Para. 1 (b) GDPR, insofar as the events are held within the framework of contractual relationships.

We have concluded the required data protection agreements with the video conferencing providers we use, which also meet the requirements of Art. 28 GDPR, and, where necessary to ensure a level of data protection equivalent to that of the EU, the EU standard contractual clauses (Art. 46 Para. 2 (c) GDPR).

The communication-related metadata will be deleted as soon as the storage is no longer required to provide or maintain the service.

Further information on the purpose and scope of data collection and its processing by the video conferencing provider can be found in the respective data privacy statement.

3.1.3 Contact initiation on the part of AIRTIME after your registration

If you participated in an event and provided your email address, we can also use it to send emails to obtain feedback or to extend invitations to future events. The legal basis for sending these emails is Art. 7 Para. 3 Unfair Competition Act (UC) and Art. 6 Para. 1 (f) GDPR. In this case, you can unsubscribe from the distribution list for these emails at any time (Art. 21 GDPR). To do this, either click the unsubscribe link in the respective email or send us an email to [email protected].

3.2 Collection of information without your participation

We collect and use personal data generated automatically by your visit to our online services for the technical provision of our online services. When using our online services and logging into the personal customer area, our server temporarily lists the following personal data in so-called log files:

IP address assigned by the provider
File request from the client (file name and URL)
http status code
the website from which you are visiting us.

This data is technically necessary for the functioning and operation of our online services. In addition, the short-term storage of log files is useful to subsequently track attempts to attack the web server or any misuse. Our legitimate interest in this data processing is, therefore, the provision of our offer to you on the basis of these circumstances (legal basis: Art. 6 Para. 1 (f) GDPR). The data will be deleted when it is no longer required for this.

In addition, we use so-called "cookies" in several places in our online services, which serve to make our offer more user-friendly and effective. Cookies are small text files that we would like to place on your computer or other internet-enabled devices, such as tablets or smartphones, provided your browser settings accept cookies.

Cookies do not damage your computer and do not contain viruses. Most of the cookies used in our online services are so-called session cookies, which are automatically deleted once you close your browser. They create a so-called session ID for your browser, with which various requests from your browser can be assigned to a session so that you are recognized when you return to our online services with the browser. The session cookies are deleted when you close the browser. You can set your browser so that these cookies are not saved in the first place or that the cookies are deleted at the end of your internet session. Please note, however, that in this case, you may not be able to use all the functions of our online services.

You can object to the future processing of your data using cookies at any time (Art. 21 GDPR). Please note, however, that you may no longer be able to use all the functionalities of our online services.

4 Recording and transcription of virtual events

For all virtual events held via the platform, a written transcript is created automatically from the audio recordings. The recording and the creation of the transcript are an integral part of the virtual event.

The recording and the transcript are made available to the hosting company via the platform after their creation. The hosting company can object to the additional publication of the recording and the transcript on the platform. Such an opt-out prevents neither the creation of the recording and the transcript nor their provision to the hosting company nor their use for the event analyses described below.

The processing takes place for the purpose of documenting and following up on the event, creating subtitles and a searchable transcript, providing the recording and the transcript to the hosting company and – unless the publication has been objected to – making them accessible to the authorized platform users.

In addition, we use the transcript and the interaction data arising in the course of the event to create event analyses. For this purpose, in particular the participation in the Q&A session, the identity or attribution of the persons asking questions, the number, content and topics of the questions as well as the tonality of the contributions can be evaluated.

The legal basis is Art. 6 Para. 1 (f) GDPR. Our legitimate interest and the legitimate interest of the hosting company lie in documenting the content conveyed in a professional investor event in a comprehensible manner, in making it more accessible and in keeping it available after the live event has ended.

In designing the recording, we take the interests and rights of the data subjects into account, in particular by ensuring that

events to be recorded are clearly marked in advance;
as a rule, only company representatives, moderators and other active speakers are recorded;
private chat messages are not captured.

The recording and the transcript are made available to the hosting company and – unless the publication has been objected to – made accessible to the platform users authorized for the event.

We retain the recordings in compliance with the statutory retention obligations and regulations.

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data on the basis of Art. 6 Para. 1 (f) GDPR.

5 Analysis of interaction data

We analyze certain information about your use of the platform in order to suggest events, company information and issuers to you that may correspond to your identifiable interests.

For this purpose, we may use the following personal data in particular:

the industries, topics and company interests you have stated in your user account;
companies you have saved, subscribed to or accessed;
your registrations for and participation in events;
the access to transcripts, recordings of past events and research;
the visits to event and company tiles within the platform;
search queries and navigation processes within the platform;
your response to recommendations already displayed;
other comparable interactions with the functions and content of the platform.

The purpose of the processing is to make the platform more user-friendly and more relevant, to make it easier for you to find potentially interesting events and companies and to reduce the amount of searching you have to do yourself.

The legal basis is Art. 6 Para. 1 (f) GDPR. Our legitimate interest is to align the platform offering with the identifiable interests of its users, to improve the findability of relevant content and to develop the platform further in an economical and user-friendly way. Users also benefit from being shown a pre-selection of potentially relevant content on the basis of their previous interests.

The recommendations have no legal effect and do not affect you in a similarly significant manner. You can continue to search for other events, companies and content independently of the recommendations.

We store the interaction data used for personalization for as long as your user account exists and the data is required for the purposes described.

You also have the right to object at any time, on grounds relating to your particular situation, to the processing on the basis of Art. 6 Para. 1 (f) GDPR. After an effective objection, your interaction data will no longer be used for personalized recommendations, unless there are compelling legitimate grounds for the processing.

Insofar as the personalized recommendations qualify as direct advertising, you can object to the processing carried out for this purpose at any time without giving reasons. After your objection, your personal data will no longer be processed for these purposes.

6 Sharing data with processors

We must share some data with third parties in strict compliance with applicable data protection laws.

6.1 Recipients and service providers

To provide our services, we partly use external service providers and other contractors. These may include, in particular, providers of IT and hosting services, software and cloud services, communication services as well as other technical and organizational service providers.

Insofar as these service providers process personal data on our behalf, the processing is carried out on the basis of a data processing agreement in accordance with Art. 28 GDPR. Transmission to other recipients only takes place insofar as this is necessary to fulfil our contractual or legal obligations, a corresponding legal basis exists, or you have consented to it.

6.2 For content-technical support and design of our online services

For the content and technical support of our online services, external service providers must have access to personal data (in particular, IT service providers).

In this case, your personal data will be handled exclusively in accordance with our express instructions and on the basis of an agreement on order processing in accordance with Art. 28 GDPR. With this agreement, the service provider guarantees that the service provision is in accordance with applicable data protection laws. The involvement of professional providers of corresponding services is expressly provided for by law and serves our legitimate interest in professionalizing our offer for you and being able to offer it in an economically sensible way (legal basis: Art. 6 Para. 1 (f) GDPR). In this case, too, we remain responsible for the protection of your data.

6.3 Disclosure due to legal obligation

We also reserve the right to disclose your personal data if we are demonstrably legally obliged to do so or if the authorities or law enforcement agencies require us to release it in a legally compliant manner.

In addition, personal data may be transmitted to authorities, courts or other public bodies insofar as we are legally obliged or entitled to do so.

7 Serverside Tracking

In our online services, we use the Google Tag Manager technology from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to analyse the usage behaviour in our online services. The legal basis is Art. 6 Para. 1 (f) GDPR. Our legitimate interest lies in the analysis, optimization, and economic operation of our online services and of the services provided through them. As a security measure, the server-side configuration ensures that no user data is passed on to Google and that it remains exclusively on AIRTIME servers.

8 Place of data processing and data security

The processing of your data takes place mainly in Germany. Your data will only be transferred to a country outside the European Union or the European Economic Area if there is an appropriate level of protection within the meaning of Art. 45 GDPR et seq. or if there are suitable guarantees within the meaning of Art. 46 Para. 2 GDPR. Data collected in our online services may be forwarded to the United States on this basis. To protect your data from unauthorized access and misuse, we have taken extensive, state-of-the-art technical and organizational security precautions in accordance with European data protection law (Art. 32 GDPR).

9 Data subject rights

You can contact us by email ([email protected]) anytime to exercise the following rights.

Right to information: You can request information about the scope, origin, and recipient of the stored data and the purpose of storage at any time, free of charge (Art. 15 GDPR). If you wish to exercise your right to information, you can contact an AIRTIME employee anytime.

Right to data portability: You can receive the personal data that you have provided to us in a structured, common, and machine-readable format (Art. 20 GDPR), provided that (1) the processing is based on consent in accordance with Art. 6 Para. 1 (a) GDPR or Art. 9 Para. 2 (a) GDPR or on a contract under Art. 6 Para. 1 (b) GDPR and (2) the processing is conducted using automated procedures.

Right to rectification: Every person affected by the processing of personal data has the right to demand the immediate correction of incorrect personal data concerning them (Art. 16 GDPR). Furthermore, the data subject has the right, taking into account the purposes of the processing, to request the completion of incomplete personal data.

Right to delete (right to be forgotten): Every person affected by the processing of personal data has the right to demand that the person responsible delete the personal data concerning them immediately if one of the following reasons applies and if the processing is not necessary (Art. 17 GDPR): (1) The personal data was collected or otherwise processed for purposes for which they are no longer necessary. (2) The data subject revokes their consent on which the processing was based, and there is no other legal basis for the processing. (3) The data subject objects to the processing, and there are no overriding legitimate grounds for the processing. (4) The personal data was processed unlawfully. (5) The deletion of personal data is necessary to fulfil a legal obligation.

Right to objection: Any person affected by the processing of personal data has the right to object at any time to the processing of personal data concerning them (Art. 21 GDPR).

We no longer process the personal data in the event of an objection unless we can demonstrate compelling legitimate grounds for the processing that outweigh the interests, rights, and freedoms of the data subject, or the processing serves to assert, exercise, or defend legal claims. If we process personal data to operate direct advertising, the person concerned has the right to object to the processing of personal data for the purpose of such advertising at any time.

Right to revoke consent under data protection law: Any person affected by the processing of personal data has the right to revoke consent to the processing of personal data at any time (Art. 7 Para. 3 GDPR).

Right to lodge a complaint with a supervisory authority: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state where you live, work, or where the alleged infringement took place if you believe that the processing of your personal data violates the GDPR (Art. 77 GDPR).

When asserting your claims against us, we will examine this claim and comply with it if there is no other legal basis for further processing. We will inform you about the result.

As a rule, compliance with a certain form is not required to assert your rights as a data subject; write to us, for example, by email at [email protected].

10 Updating and changes

We may change or update parts of the data privacy statement without informing you in advance. Please review the data privacy statement in each case before using our online services to be up to date with possible changes or updates.