Privacy Policy concerning the processing of customer and website user personal data
AEROBAG (hereinafter ‘we’, ‘us’ and ‘our’) understands the importance of the privacy of its customers and users of its website visitors and the protection of their personal data. This policy sets out how we handle and process your personal data.
Scope
AEROBAG BV, with its registered office at Slachthuisstraat 96, 2300 Turnhout, KBO (Crossroads Bank for Enterprises) number 1023.599.131 manages this website. We act as the data controller when we process our customers’ and website users’ personal data.
We believe it is important to create and maintain an environment where our customers can be confident that their data will not be misused. We comply with the regulations applicable to data protection such as the Regulation (EU) 2016/679 (also referred to as the General Data Protection Regulation, hereinafter “GDPR”) and the Belgian Data Protection Act. The aforementioned regulations concern the protection of personal data and provide you with rights over the said personal data.
The objective of this policy is to indicate what personal data we collect when you visit our website (aerobag.eu), purchase our products, use our connected devices, and use our mobile application, how we use your data and to assure you that we process your data appropriately.
This privacy policy and the terms and conditions of use apply when we process your personal data and when you visit our website. The application of terms and conditions other than those set out herein is explicitly prohibited unless we have provided express permission in writing in advance. In the latter case, this policy applies alongside the specific agreement. The use of this website, the platform and the content contained therein is only permitted subject to compliance with the full text of this policy.
Why do we collect your personal data and on what legal basis?
It is not necessary to provide personal data to use most of our website. We collect your personal data for various specific purposes which are further elaborated in the table below where we describe for each purpose the corresponding personal data to be processed, its legal bases and the retention period.
| Purpose | Personal Data | Legal basis | Data retention period |
| Client relationship management to meet contractual obligations following the sales of products on our website and webshop: Processing of your order, handle payments, delivery, first-line support, warranty claims. | Name and contact details (email; phone). Shipping & billing address. Payment info. Browsing data. | Processing required for the performance of the agreement. Legitimate interest. Consent for analytics. | Ten years after the termination of the commercial relationship. |
| Processing of personal data following out of the use of the AEROBAG Device with the APP & Connected Device and providing OTA software/firmware updates to ensure optimal safety. | Account information. Identification data (name, e-mail, encrypted password). Device data: Airbag serial / PCB number, firmware version. Equipment usage details (e.g. brand of bib short). | Processing required for the performance of the agreement by providing the information to the customer. | As soon as reasonably possible after the termination of the commercial relationship or right to object. |
| Processing of personal data following out of the use of the AEROBAG Device without the App | Sensor data related to the crash, such as: time of crash. | Consent: In case of a crash, the sensor data can be retrieved if the device is returned to Aerobag and explicit user consent is given. | No local sensor data is stored on the device over longer periods than 10 seconds. These data are retained for 10 years (after anonymisation). |
| Improving of AEROBAG devices and safety technology by retrieving and analysing crash sensor data. | Sensor data related to the crash, such as: time of crash. | Consent. Legitimate interest. | No local sensor data is stored on the device over longer periods than 10 seconds. These data are retained for 10 years (after anonymisation). |
| Responding to your (online) questions regarding our products or services. | Name and contact details. Company. Address. | Consent. | 1 year. |
| Improving our products and services, possibly, by contacting you from time to time for market research. | Name and contact details. Company. | Legitimate interest. | Ten years after the termination of the commercial relationship. |
| Investigating complaints on our products, services or website. | Name and contact details. Position. Work address. | Legitimate interest. | Ten years after the termination of the commercial relationship. |
| Checking of identity and financial data regarding payments and meeting legal/regulatory obligations. | Name and contact details. Address. | Legitimate interest. Legal obligation. | Ten years after the termination of the commercial relationship. |
| Supplier management to meet contractual obligations. | Name and contact details. Position. Work address. | Processing required for the execution of the agreement. Legitimate interest. Legal obligation. | Ten years after the termination of the commercial relationship. |
| Direct marketing towards clients via e-mail for promotional purposes. | Name and contact details (email). | Legitimate interest. | 2 years after the termination of the commercial relationship. |
| Direct marketing towards prospects via e-mail for promotional purposes. | Name and contact details (email). | Consent. | 1 year after obtaining consent and without any interaction from the data subject. |
| Cookies when browsing the website | Please read our cookie policy. | Please read our cookie policy. | Please read our cookie policy. |
We may also collect data from publicly available sources (social media, crossroad bank of enterprises) to check data previously collected or to manage or broaden our activities, based on our legitimate interests to conduct our business.
How will your data be used and shared?
We can share your personal data with:
Affiliate and subsidiary companies; or
Third parties with whom you have asked us to share your personal data, such as Facebook or other social media if you have asked us to link these to your account;
Logistics & Payment: Shipping partners and secure payment gateways to fulfill your webshop orders.
App Backend: Our app infrastructure is hosted by our partner Minerva-AS (MASE) on servers located in Germany. We have strict data processing agreements in place to ensure your information is handled securely and remains fully within the European Union, in compliance with GDPR.
We do not transfer your personal data to third parties outside the European Economic Area.
Based on our legitimate interest, we may also share your personal data with third parties that assist us with our products and services. Some examples of third-party activities include the hosting of web servers, data analysis, marketing support providers and customer service. These companies have access to your personal data but only when this is required to perform their activities. They are not permitted to use your data for any other purposes.
Your personal data may not be sold or leased to third parties. We may publish your personal data to enforce our policy, to comply with our legal obligations or in the interest of safety, in the public interest or for the purposes of legal enforcement in any country where we have entities or subsidiaries. We may follow up a request from a law enforcement agency, regulatory authority or government agency. We may also publish data for the purposes of current or scheduled court cases or to protect our property, safety, people or other rights and interests.
Should AEROBAG be sold or merge with another company, your data will be accessible to the advisor of the potential buyer and transferred to the new company owners. In that case, we will take the appropriate measures to guarantee the integrity and confidentiality of your personal data. The use of your personal data will always be subject to this policy.
Rights of the data subject
Data protection legislation provides various rights for the data subject with regard to the processing of personal data to ensure the data subject has sufficient control over the processing of their personal data.
You are entitled to:
Right of access/inspection: Receive confirmation from us of whether your personal data is processed by us and to view it.
Right to rectification: Should you determine that the personal data on our records is incomplete or incorrect, you are entitled to notify us to rectify it.
Right to be forgotten: Request we delete your personal data should the processing not be in accordance with the data protection legislation.
Right to restriction of processing: Request we limit the processing of your personal data under specific conditions.
Right to data portability: Receive the data you have provided to us in a structured, standard and machine-readable format.
Right to object: Where your personal data is processed for direct marketing purposes (including profiling), you remain entitled to object to the said processing.
Automated individual decision-making: AEROBAG does not use automated individual decision making when processing your personal data.
Right to withdraw consent: If you have consented to the processing of your personal data, you are entitled to withdraw your consent by sending an email or via your account.
Procedure to exercise rights and other provisions
We can request you verify your identity to ensure your request is lawful. For further information on the processing of your personal data or if you wish to exercise your rights, please contact us at info@aerobag.eu. You are entitled to lodge a complaint with the competent supervising authority. In Belgium, the Data Protection Authority, Drukpersstraat 35, 1000 Brussels (contact@apd-gba.be).
Security
We make every effort to guarantee the security of your data. We have implemented reasonable technical and organisational measures to guarantee your personal data against accidental or unlawful destruction, loss, modification, unauthorised disclosure and/or unauthorised access. Please note that the internet is an open network; we cannot therefore guarantee that unauthorised third parties will not be able to circumvent these measures.
Terms and conditions of use and liability Our website and the materials available thereon are protected by intellectual property rights. Visitors to the website are permitted to consult the website and the material for their own purposes. Any other use is prohibited.
Prohibited use of the website and material
You undertake as follows: not to use the website and the material (1) illegally and/or for illegal purposes; (2) not to damage, modify, interrupt, stop it or impair its efficiency; (3) to disseminate or install computer viruses; (4) not to infringe third-party or our rights to privacy; (5) to disseminate material for marketing without prior approval.
Liability
We shall make every effort to ensure the information we add to our website is as complete, correct and current as possible, although we cannot guarantee that the information provided does not include any errors. The information must not be considered professional or legal advice. The website and the content thereof is provided “as is” and we do not accept any liability for issues resulting from the use of our website or the content thereof.
Applicable legislation and jurisdiction
Belgian law is applicable to our website, this policy and disputes that may arise with regard to these. In the event of a dispute, only the courts competent for the jurisdiction of Turnhout shall have jurisdiction.
Amendments to this policy
AEROBAG may amend or update this policy to ensure the provision of information on how we process your personal data at that time. The updated version of this policy is available on the same website and will take effect upon publication.
Version July 2026