Privacy Policy
Privacy Policy
1. Controller Details
The data controller for the processing described in this Privacy Policy is:
Company Name: AirMighty
Address: Grasdrogerijweg 27, 3833 BZ Leusden
Contact Email: niels@airmighty.com
Website:
https://airmightyshow.com
2. Scope
This unified policy governs the processing of personal data across:
Our Website:
airmightyshow.com Our Mobile Application: The “AirMighty Show 2027” companion app for iOS and Android.
3. Data Processing Overview
| Data Category | Platform | Purpose | Legal Basis (GDPR) | Primary Retention | Third-Party Recipients / Categories |
| Server & Security Logs (IP, User Agent, Timestamp) | Website & App API | Network security, threat prevention, anti-abuse | Legitimate Interest (Art. 6(1)(f)) | 30–60 days | Hosting provider, Cloud security provider |
| Contact Form Inquiries (Name, Email, Message) | Website | Customer support and event inquiries | Pre-contractual / Contract (Art. 6(1)(b)) | 12 months after resolution | Hosting provider |
| Newsletter Subscription (Email, Name) | Website | News, event announcements, marketing | Consent (Art. 6(1)(a)) | Until unsubscribed | Hosted internally |
| Device Voting ID (Randomized UUID, Car Choice) | Mobile App | Enforcing one vote per device for awards | Legitimate Interest (Art. 6(1)(f)) | Duration of event / Admin purge | Hosting provider |
| Push Token (FCM Token, Topic Subscription) | Mobile App | Event alerts & announcements | Consent (Art. 6(1)(a)) | Until app uninstalled / revoked | Google Firebase |
| Ticket Details (Name, Barcode) | Mobile App | On-screen event entry verification | Contract Performance (Art. 6(1)(b)) | Stored locally on device | None (User’s personal cloud backup only) |
| Camera Feed | Mobile App | Scanning event QR codes | Consent (Art. 6(1)(a)) | Real-time processing only (not saved) | None |
4. Website Data Processing
4.1 System Operation & Security
When you visit our website, our web infrastructure and security services automatically log standard technical data (IP address, browser type, operating system, and request timestamps). This data is processed strictly to maintain system stability, diagnose errors, and defend against malicious cyber activity.
4.2 Contact & Inquiries
Data submitted via communication forms on our website (such as name, contact details, and message contents) is processed solely to handle and respond to your request.
4.3 Newsletter
If you subscribe to our newsletter, we process your email address to send you updates. We operate a double opt-in verification process. You may withdraw your consent at any time using the unsubscribe link included in every newsletter.
5. Mobile Application Data Processing
The AirMighty Show mobile app operates on a local-first architecture. It does not require account creation, logins, or social profile integration. It contains no third-party behavioral analytics or crash-tracking SDKs.
5.1 Account-Free Infrastructure & Local Processing
Event Tickets: Ticket files (PDFs) imported into the app are parsed and stored exclusively on your physical device. We do not upload or store your ticket details on our servers.
App Features: Saved schedule items, discovered vehicles, and garage progress remain on your device.
Device Cloud Backups: Note that standard operating system backups (such as Google Cloud Backup or Apple iCloud) may include local app data as part of your personal account backup configuration.
5.2 Server Interactions
The app connects to our servers for two purposes only:
Content Synchronization: Fetching public event schedules, announcements, and public social feeds.
Public Choice Award Voting: Submitting your vote transmits an app-generated, anonymous Device Identifier (UUID) and your chosen entry to our server. This identifier is used strictly to prevent duplicate voting.
5.3 System Permissions
Camera: Used only when scanning QR codes at the event. Camera data is processed in temporary device memory and is never recorded or transmitted.
Notifications: Used to deliver broad venue alerts and schedule updates. No individually targeted messaging is conducted.
6. Cookies & Embedded Media
6.1 Cookies
Our website uses essential technical cookies required for system performance and security. Non-essential tracking cookies are not deployed without prior consent.
6.2 Embedded Video Content
Our website and app may display embedded videos hosted by YouTube (Google Ireland Ltd. / Google LLC). Embedded videos load in a privacy-enhanced configuration or require cookie consent prior to playback. Interacting with embedded videos causes technical playback data (such as IP address) to be processed by Google in accordance with
7. Data Sharing & Third-Country Transfers
We do not sell or monetize personal data. Data is shared only with service providers bound by Data Processing Agreements pursuant to GDPR Article 28:
Hosting & Cloud Infrastructure: Providers operating servers within the EU.
Security & Distribution Partners: External web security and push notification networks (e.g., Google Firebase).
Where service providers process data outside the European Economic Area (EEA)—specifically in the United States—transfers are protected under standard GDPR transfer mechanisms, including the EU-US Data Privacy Framework and Standard Contractual Clauses (SCCs).
8. Data Security
We implement technical and organizational measures to safeguard personal data:
All network communications use standard TLS/SSL encryption.
API endpoints are protected by rate-limiting and anti-abuse safeguards.
Mobile app data is isolated within the operating system’s secure application sandbox.
9. Your Legal Rights (GDPR / UAVG)
Under European and Dutch data protection law, you have the following rights:
Access & Portability: Request a copy of your personal data.
Correction & Erasure: Request correction or deletion of your personal data. (To request deletion of a voting record, contact us with your app-generated Device UUID found in the app settings).
Restriction & Objection: Object to or restrict processing based on legitimate interests.
Withdrawal of Consent: Withdraw consent at any time without affecting prior lawful processing.
Regulatory Authority Complaint Right
You have the right to lodge a complaint regarding our processing activities with the Dutch Data Protection Authority:
Autoriteit Persoonsgegevens
Postbus 93374, 2509 AJ Den Haag
10. Contact Details
For privacy queries or to exercise your legal rights, contact:
AirMighty
Attn: Niels Timmerman
Email: niels@airmighty.com