Effective from 22 October 2026
1. Controller
The controller of personal data processed through shop.airteam.eu, the website airteam.eu (including the AIR TEAM intel pages) and in connection with quotes and orders of AIR TEAM, s.r.o. is AIR TEAM, s.r.o., Masarykovo náměstí 354, 664 71 Veverská Bítýška, Czech Republic, Company ID 28287517 (“we”). Contact for all data-protection matters: airteam@airteam.eu. We have not appointed a data protection officer.
This policy applies to customers, visitors of the shop and of airteam.eu, people who send us an enquiry or job application, newsletter subscribers and contact persons of business customers. It is issued under Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll.
2. What we process, why and for how long
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Orders, delivery, payment, customer account | name, delivery and billing address, e-mail, telephone if given, company name, company ID and VAT ID, order and payment details | performance of a contract, Art. 6(1)(b) | for the duration of the contract and the account, then as below |
| Accounting and tax records | invoice data | legal obligation, Art. 6(1)(c) | 10 years from the end of the tax period |
| Export-control and sanctions screening | name, company, address, destination, end-use information | legal obligation, Art. 6(1)(c), and legitimate interest, Art. 6(1)(f) | 5 years after the transaction |
| Claims, returns, withdrawals, defence of legal claims | order data, correspondence, photographs | legal obligation and legitimate interest, Art. 6(1)(c) and (f) | 4 years after the contract ends |
| Customer service, chat and contact forms | name, e-mail, message content | pre-contractual steps and legitimate interest, Art. 6(1)(b) and (f) | 3 years after the last contact |
| Fraud prevention and payment security | order, device and payment data | legitimate interest, Art. 6(1)(f) | 3 years |
| Newsletter | e-mail address, language, market, subscription source | consent, Art. 6(1)(a) | until consent is withdrawn |
| E-mails about similar products and review invitations to customers | name, e-mail address, purchased products | legitimate interest, Art. 6(1)(f), and Section 7(3) of Act No. 480/2004 Coll.; you can refuse them free of charge when the e-mail address is collected and in every e-mail | until you object, at the latest 3 years after the last purchase; published reviews until deleted |
| Business relationships with organisations | name, position, business contact details of contact persons, obtained from the person, their organisation or public registers | legitimate interest, Art. 6(1)(f) | for the duration of the relationship and 3 years after |
| Enquiries, quote and document requests through forms on airteam.eu | name, e-mail, company, country, telephone if given, aircraft type, message, role and fleet size where asked | pre-contractual steps and legitimate interest, Art. 6(1)(b) and (f) | 3 years after the last contact |
| Online purchases on airteam.eu (e.g. MST-70B) | as for orders; card payment through Stripe | performance of a contract, Art. 6(1)(b) | as for orders |
| Measuring the effectiveness of our advertising | e-mail, telephone and address in hashed form, advertising click identifier, date and value of the enquiry or order | legitimate interest, Art. 6(1)(f); you may object at any time | until you object, at the latest 540 days |
| Job applications | CV, contact details, correspondence | pre-contractual steps, Art. 6(1)(b); consent to keep the data for future positions, Art. 6(1)(a) | for the selection process; with consent up to 2 years |
| Analytics and marketing cookies | online identifiers, browsing data | consent, Art. 6(1)(a) | according to the cookie settings, at most 13 months |
Providing data for an order is necessary to conclude and perform the contract. Without it, we cannot accept the order.
Measuring advertising. When you send an enquiry through a form on our websites, or when you become our customer, we may share your e-mail address, telephone number and address with Google in hashed (encrypted, one-way) form, together with the advertising click identifier if you arrived through one of our ads. Google uses this only to tell us whether our advertising led to the enquiry or to a later order, so that we can measure and optimise our campaigns. Google does not receive the content of your enquiry. We do this on the basis of our legitimate interest in measuring the effectiveness of our advertising. You can object at any time by writing to airteam@airteam.eu, and we will stop sharing your data for this purpose.
3. Recipients
We share personal data only with providers who process it on our behalf or who are necessary to perform the contract:
- Shopify (shop platform, checkout and data hosting in the EU; Shopify International Limited, Ireland, and the Shopify group, Canada);
- Shopify Inbox (customer messages);
- Shopify Payments and Stripe (card payments and fraud screening);
- HubSpot, Inc. (customer relationship management, forms, newsletter, chat and website analytics);
- Google Ireland Limited and Google LLC (hosting of airteam.eu on Firebase, Google Tag Manager, Google Analytics and Google Ads; hashed contact data for measuring advertising as described in section 2);
- Meta Platforms Ireland Limited, Seznam.cz, a.s. (Sklik) and Microsoft Ireland Operations Limited (Clarity) (measurement of advertising and website usage on airteam.eu);
- Stripe Payments Europe, Ltd. (online payments on airteam.eu);
- Judge.me and Trusted Shops SE (review invitations and publication of reviews);
- providers of shop functions for core deposits (Canteen), shipping-rate calculation (Railway, used for our AIR TEAM Shipping service) and data import (Matrixify);
- carriers DPD, PPL and DHL (delivery);
- tax advisers, auditors, lawyers and public authorities where the law requires it.
Carriers, Shop Pay and Trusted Shops process some data also as independent controllers under their own privacy policies.
We do not sell personal data.
AIR TEAM, s.r.o. and its sister company AIR TEAM service, s.r.o. (Company ID 02489643) use a shared customer relationship management system and shared advertising accounts. For this shared processing they act as joint controllers: AIR TEAM, s.r.o. answers your requests for both companies at airteam@airteam.eu, and you may exercise your rights against either of them.
4. Transfers outside the EU and EEA
Shopify belongs to a group based in Canada, for which an adequacy decision of the European Commission applies. Stripe, HubSpot, Google, Meta and Microsoft belong to groups based in the United States. Where data is transferred outside the EU or EEA, the transfer is based on an adequacy decision, including the EU–US Data Privacy Framework for certified companies, or on the standard contractual clauses adopted by the European Commission. A copy of the safeguards is available on request at airteam@airteam.eu. For deliveries outside the EU, the delivery data is transferred to the carrier and the customs authorities of the destination country, as necessary to perform the contract.
5. Automated decisions
Payment providers screen orders for fraud automatically. An order flagged by the screening is reviewed by a person. We do not make decisions with legal or similarly significant effects based solely on automated processing.
6. Cookies
The shop uses cookies and similar technologies:
- necessary cookies for the cart, checkout, login, security and storing your cookie choice; these do not need consent;
- analytics cookies to measure how the shop is used;
- marketing cookies to measure campaigns and show relevant offers;
- preference cookies to remember settings such as language and market.
Cookies set by Shopify for analytics, marketing and preferences are used only with your consent, which you can change or withdraw at any time through Cookie settings in the footer of every page. The HubSpot script for the chat and website analytics sets its own cookies (for example hubspotutk, __hstc, __hssc and messagesUtk); you can block them in your browser settings.
On airteam.eu, Google Tag Manager loads Google Analytics, Google Ads, Meta, Sklik and Microsoft Clarity, and the HubSpot tracking code runs, on the basis of our legitimate interest in operating and promoting our business, Art. 6(1)(f). You can block or delete these cookies in your browser settings at any time; the website and the enquiry forms remain available.
7. Your rights
You have the right to access your data, to rectification, to erasure, to restriction of processing and to data portability.
Right to object. You may object at any time to processing based on our legitimate interest, and to direct marketing without giving reasons. Where processing is based on consent, you may withdraw it at any time; withdrawal does not affect processing before it. You can unsubscribe from e-mails through the link in every e-mail.
Send requests to airteam@airteam.eu. We reply within one month. You also have the right to lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz, or with the supervisory authority in your country of residence.
8. Children
The shop is not intended for persons under 16. We do not knowingly collect their data.
9. Changes
We may update this policy. The current version is always published on this page.