Legal information
Privacy policy
These notes explain which data is processed when you visit our website, why it is needed and the rights available to you.
Last updated:
Who is responsible
The controller for this website is WF Steuerungstechnik GmbH, Zeppelinstraße 7–9, 75446 Wiernsheim, Germany. Contact: info@airleader.de or +49 (0) 7044 911 100.
This notice covers the public Airleader website, including its test address. Further processing within personal portal accounts, of plant and customer data and within the separate software download portal is outside the scope of this notice.
Visiting pages and downloading files
Your browser sends connection data needed to deliver a page or download. This includes your IP address, the time and requested address, browser and device information and, where applicable, the referring page. Content cannot be delivered without the data necessary for the connection.
We use Amazon Web Services (AWS), including Amazon S3 and the Amazon CloudFront content delivery network. The website origin is in the Frankfurt AWS region. CloudFront uses a global network; this does not mean that all connection data is processed exclusively in Germany or the EU.
The purposes are secure, reliable and fast delivery and the detection and prevention of faults and misuse. The legal basis is Article 6(1)(f) GDPR, reflecting our legitimate interest in securely operating this information service. The website and downloads cannot be retrieved without the data necessary for the connection.
Providers and international processing
Our hosting provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg (AWS). Processing on our behalf is governed by the AWS Data Processing Addendum (DPA) and supplementary data protection provisions incorporated into the AWS contractual terms. AWS also uses affiliated companies and subprocessors to provide its services.
Global CloudFront delivery and the provision of AWS services may involve processing connection data outside the European Economic Area, particularly in the United States. Where a transfer is not covered by an applicable European Commission adequacy decision, the AWS contractual terms provide for EU Standard Contractual Clauses as safeguards under Article 46 GDPR. You may request information about the safeguards relevant to our processing, and a copy of them, at info@airleader.de. Links to the AWS data processing agreement and subprocessor list are provided below.
Links to the customer portal
The website links directly to the Airleader customer portal in a new tab. It does not request or display your portal sign-in status.
When you open a portal link, your browser connects to the portal. The portal handles sign-in, secure sessions and additional authentication. The account and operational data involved are separate from simply visiting this public website.
Local language preferences and course progress
The interactive fundamentals course stores completed modules and answers in your browser's local storage under airleader-fundamentals-progress. This function does not send them to our server. Course calculations also run in your browser. Progress remains until you delete the site's browser data; the course still works without available local storage.
The purpose is to resume the course you opened on the same device. Where personal data is processed, we rely on Article 6(1)(f) GDPR; our legitimate interest is a resumable course. You can delete your progress by clearing this website’s browser data or restrict local storage in your browser settings.
The region and language selector determines which website version you see. Your choice is stored locally under airleader-region-v1; airleader-language remains for older language preferences. It is used on a later general entry on the same device until you change it or clear website data. Direct page links take precedence. Without a stored choice, the homepage may request a coarse country code from our own CloudFront endpoint /__region/. CloudFront derives that code from the IP address already used for the connection. It is used only for an optional region suggestion, never an automatic country redirect, and this feature does not store the result. We use neither GPS data nor an external geolocation provider. Dismissing the suggestion is remembered for the current tab under airleader-region-dismissed in session storage. All versions remain accessible through direct links if storage is blocked or country information is unavailable.
Optional audience measurement with Google Analytics
If you allow analytics in the consent banner, we use Google Analytics 4 provided by Google Ireland Limited, Ireland. We analyse visitor numbers, sources, page views and engagement time, and clicks on contact options, training registration, public documents and the portal, to improve our information. Without your consent, the Google script and analytics are not loaded.
After consent, data processed includes a cookie identifier, browser and device details, approximate location data, the content pages visited, a sanitised referring address and approved campaign information. Technical connection data, including your IP address, is transmitted to Google to establish the connection. Our analytics does not send names, email addresses, phone values, message contents, calculator values, quiz answers or your portal sign-in status. Google signals, advertising personalisation and user-provided data collection are disabled for this analysis.
Analytics is based on your consent under Article 6(1)(a) GDPR; storage and access to analytics cookies is based on your consent under Section 25(1) TDDDG. Google cookies (_ga and a session-related identifier starting with _ga_) are limited to the website host and configured to last no longer than 180 days, without automatically extending their lifetime on every visit. User and event detail retention in Google Analytics is set to two months. This setting does not limit aggregated standard reports.
We store your choice, version, timestamp and expiry in your browser for 180 days under airleader-analytics-consent. This storage only manages your choice and is not sent to Google. If storing a choice fails, the necessary airleader-analytics-disabled cookie may additionally be set for up to 180 days to block analytics. Consent management is necessary to implement your privacy choice (Section 25(2)(2) TDDDG); any associated personal data is processed to fulfil our data protection duties under Article 6(1)(c) GDPR.
You can disable or allow analytics at any time using “Privacy settings” in the footer. Withdrawal stops new measurements and removes the known analytics cookies; it does not retroactively delete data already sent to Google. Contact info@airleader.de to exercise your further rights. Clearing browser data or switching devices causes your choice to be requested again.
Google may process data through affiliated companies and subprocessors outside the European Economic Area, particularly in the United States. Google's data processing terms cover processing on behalf of customers and international transfers, including standard contractual clauses. Contact info@airleader.de for information about applicable safeguards for our use and a copy. Further information about Google's processing is available through the links below.
Contact and training enquiries
Phone and email links open your phone or email application. Clicking does not send a message. Training dates can prefill an email with the course type and date; you choose what to add and whether to send it.
When you contact us, we process your contact details, message and any documents you provide to handle your enquiry. Article 6(1)(b) GDPR applies where processing is necessary for a contract with you or steps taken at your request before entering into a contract. For other enquiries and communication with company representatives, we rely on Article 6(1)(f) GDPR; our legitimate interest is handling business enquiries. An enquiry does not subscribe you to a newsletter.
Access is limited to the people handling your request and the providers supporting communication and IT operations, as needed. Providing this information is voluntary. Without sufficient contact details and information about your request, we may be unable to help. Please send only information required for the request. In particular, remove unnecessary personal information and access credentials from support data archives before sending them.
Retention and deletion
Data is processed only as long as necessary for its purpose or required by statutory retention duties. Enquiries are deleted when completed unless further handling, a legal duty or legitimate defence of claims requires retention. Relevant criteria are the content of the correspondence, the resulting business relationship and applicable statutory retention and limitation periods. Statutory retention is based on Article 6(1)(c) GDPR; necessary retention to protect legal claims is based on Article 6(1)(f) GDPR.
Classic CloudFront access logs are disabled in the reviewed website configuration. This does not mean AWS processes no technical data. Portal function logs are scheduled for deletion after 7 or 30 days depending on the function; these are not deletion periods for portal accounts or business correspondence. Where technical data is needed to investigate a fault or security incident, further retention depends on the necessary investigation and, where applicable, the protection of legal claims.
Links to other services
The website links to demonstrations, software downloads and further information. External content is not automatically embedded by these links. When you open a link, the destination provider processes connection data under its own terms. The existing software download portal still requires separate credentials; signing into the Airleader portal does not automatically sign you in there.
Your rights and right to object
Subject to the GDPR, you may request access, rectification, erasure or restriction of processing. You have a right to data portability where its conditions apply. You may withdraw consent at any time with effect for the future.
Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. You may object to processing for direct marketing at any time. Contact info@airleader.de to do so.
You may complain to a supervisory authority, particularly in the country of your residence, workplace or the alleged infringement. The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg is a contact for our company in Baden-Württemberg.
Visiting the public website does not involve automated decisions with legal or similarly significant effects. These notes will be reviewed when functions or providers change.
Supervisory authority: complaints ↗AI compressed-air assistant
Our optional AI assistant answers questions about compressed air, compressor controls and Airleader. It generates answers automatically; these may contain errors and do not replace individual technical advice. You can use the website and our contact options without the assistant. Please do not enter personal data, credentials or confidential plant data. Any personal information entered despite this notice is processed together with your question.
We process your questions, selected language, generated answers and limited conversation context, as well as technical session and request identifiers and timestamps. The connection also involves technical data such as your IP address. To limit abusive requests, the chat service stores derived hashes with short-lived counters. These values are pseudonymised, not fully anonymous. The chat function keeps the conversation display and session identifier in the open page's memory; it does not create its own cookies or persistent browser-storage entries for this purpose.
The purposes are to answer your technical questions, maintain the conversation and operate the service securely and economically, including abuse prevention and cost control. The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are to provide a user-friendly technical information service and protect it against abuse and excessive use. Providing your input is voluntary. Without the necessary input and technical data, the assistant cannot answer your question.
The chat service and its session storage run on Amazon Web Services EMEA SARL (AWS) in Frankfurt, Germany. To generate an answer, we send your question, limited conversation context and selected technical excerpts to the OpenAI API. Under OpenAI's standard terms, the provider for customers in the European Economic Area is OpenAI Ireland Ltd., Ireland. Processing is governed by the respective data processing agreements with AWS and OpenAI. Supplementary web research processes a technical search query derived from your question through OpenAI's search function. This research request does not include the full conversation history or our internal technical excerpts. Your question is sent to OpenAI only after you submit it, not merely by opening the chat window.
OpenAI uses affiliated companies and subprocessors. Data may also be processed outside the European Economic Area, particularly in the United States. We do not promise exclusively European processing by OpenAI for this service. OpenAI's contractual terms provide for an applicable adequacy decision or EU Standard Contractual Clauses as transfer safeguards. The contractual documents and subprocessor list are linked below; information about the applicable safeguards and a copy can be requested at info@airleader.de. The section “Providers and international processing” also applies to AWS.
Session context can no longer be used after 30 minutes without a new question and no later than two hours after the conversation starts. “New conversation” clears the display and requests deletion of the server-side session context. Individual request results, including answers and technical identifiers, remain stored separately and are marked for automatic deletion no later than two hours after the conversation starts. Expired session records are also marked for automatic deletion; physical deletion by AWS may take several days. Closing the chat window or leaving the page does not immediately delete server-side data.
IP-related protection counters are marked for automatic deletion after approximately two minutes; physical deletion may also take several days. Technical application logs contain error identifiers, not questions or answers; their retention period is seven days. Individual technical usage-accounting records without conversation content are marked for deletion after 90 days. Answers to predefined standard questions without individual conversation context may be cached in memory for up to 24 hours. Chat content is not sent to Google Analytics.
At OpenAI, we disable storage of retrievable responses. Technical prompt caching may nevertheless last up to 24 hours. Security and abuse logs may contain questions and answers and are generally retained for up to 30 days according to OpenAI, or longer where required by law or necessary to prevent harm. OpenAI states that API content is not used for model training by default; voluntary data sharing for this purpose is disabled in our company account. Our session limits and “New conversation” do not shorten this separate OpenAI retention.
The rights explained in “Your rights and right to object” also apply to this processing. In particular, you may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation. For privacy requests, contact info@airleader.de. We do not link the chat to your portal account. The assistant does not make decisions about you that have legal or similarly significant effects.