Your data,
only where needed.

1. Who is responsible

The controller for ayr.amsterdam is:

• AYR Studio B.V., trading as AYR
• Amsterdam, the Netherlands
• Chamber of Commerce (KvK) no. 42175249
• VAT id NL870041605B01
• E-mail info@ayr.amsterdam
• Phone +31 20 550 0006

2. What we process and why

Per situation we process the following:

• Order: name, e-mail address, phone number, delivery and billing address, your order and payment status, and any note. Needed to perform the contract: making, delivering, installing, invoicing and keeping you informed. Basis: performance of the contract and our statutory retention duty.
• Enquiry or quote: name, e-mail address, phone number, your question, and if you send them, photos of your room and air conditioner and the dimensions or model of your unit. Basis: performance of the contract or steps taken at your request before it.
• Newsletter: e-mail address. Only if you sign up yourself; you can unsubscribe through the link at the bottom of every e-mail. Basis: consent.
• Fit check ("Does it fit my air conditioner?"): the brand, model or dimensions you entered and the outcome. We store this without your name, e-mail or IP address, so we can extend our list of models. This is not personal data.
• Price survey (/survey): your answers (favourite cover, the amounts you name, whether you would buy, the score and any comment) and which link you came through. Your name only if you choose to give it; if you stay anonymous we store nothing that identifies you (no name, e-mail or IP address). Basis: consent. If you leave your e-mail address for the launch, it becomes a newsletter sign-up (with a confirmation e-mail) and is not linked to your answers.
• Security and abuse: IP address and technical details of your request, briefly, to prevent abuse of forms and the checkout. Basis: legitimate interest.
• Cookies and statistics: only with your consent, see our cookie statement at ayr.amsterdam/en/cookies.

3. Who we share data with

We never sell your data. We share it only with parties we need to run the site and your order, under a data processing agreement or as controllers in their own right:

• Mollie B.V. (Amsterdam): payments. Mollie is itself responsible for processing your payment details.
• Vercel Inc.: hosting of the site. Our servers run in Frankfurt.
• Neon Inc.: the database with orders and enquiries, stored in Frankfurt.
• Resend Inc.: sending confirmation and service e-mails.
• Google (Tag Manager and Analytics): only after consent to statistics or marketing cookies.
• A delivery or installation partner, where needed for your order: name, address and phone number.
• The tax authority or another government body where the law requires it.

4. Transfers outside the EU

Our data is stored in the EU. Some suppliers (Vercel, Resend, Google) are US companies; the EU standard contractual clauses are in place with them and they are certified under the EU-US Data Privacy Framework.

5. How long we keep data

No longer than needed:

• Orders and invoices: 7 years, because of the tax retention duty.
• Enquiries and quotes that do not lead to an order: 2 years after the last contact.
• Newsletter: until you unsubscribe.
• Technical security logs: at most 30 days.

6. Security

The connection to the site is encrypted (https). Access to orders is limited to staff who need it for their work, with two-step verification. Passwords and keys are stored encrypted or hashed.

7. Your rights

You may access, correct or erase your data, restrict processing, object, and have your data transferred. Consent you have given can be withdrawn at any time. E-mail info@ayr.amsterdam; we reply within a month. If you disagree with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

8. Changes

If we change this statement, we publish the new version here with the date at the top.