Draft, pending approval. This page is not final.
Last updated: 6 November 2026.
The site airnate.com is operated by Dnysus OÜ (registry code 16003621), Akadeemia tee 68-70, 12614 Tallinn, Estonia. Dnysus OÜ decides how your personal data is used. It is the “controller” under the EU General Data Protection Regulation (GDPR). Contact for all privacy questions: [email protected].
The site has no user accounts and no newsletter. We do not sell your data and we do not use it for advertising.
When you open a page, your browser sends technical data: your IP address, the date and time, the page that you request, the page that you came from, and your browser and device type. Our hosting provider (DigitalOcean) and our content delivery and security provider (Cloudflare) process this data to show you the site and to protect it from attacks. The data is also written to logs.
We use the logs only to operate the site and to keep it secure. Legal basis: our legitimate interest in a site that works and is secure (Article 6(1)(f) GDPR).
The site uses Google Analytics 4 only if you click Accept in the cookie banner. Before you accept, the site loads nothing from Google and sets no analytics cookies. If you click Reject, the site works in the same way.
If you accept, Google Analytics 4 (provided by Google Ireland Limited) counts visits and shows us which pages and links are used. It records:
Google receives your IP address with each request and uses it to find the approximate location. Google states that Google Analytics 4 does not log or store the IP addresses of users in the EU. Google signals and ad personalisation are off.
Legal basis: your consent (Article 6(1)(a) GDPR). You can withdraw it at any time (see “Change your choice”).
| Name | Purpose | Type | Kept for |
|---|---|---|---|
_ga | Google Analytics: tells one browser from another, to count visitors. | Analytics cookie. Only with your consent. | Up to 2 years |
_ga_<id> | Google Analytics: keeps the state of your visit. <id> is our Google Analytics ID. | Analytics cookie. Only with your consent. | Up to 2 years |
analytics-consent | Remembers your Accept or Reject choice. It stays in your browser and is not sent to us. | Necessary. Local storage, not a cookie. No consent needed. | Until you or your browser clear the site data |
The site itself sets no other cookies. If Cloudflare must check that a request is not an attack, it can set a security cookie (for example cf_clearance or __cf_bm). This cookie is strictly necessary to protect the site.
The site has no contact form. If you write to us, we receive your e-mail address and the content of your message. We use this data only to answer you and to handle your request. Legal basis: our legitimate interest in answering messages (Article 6(1)(f) GDPR). If your message is about a contract with us, the legal basis is that contract or the steps before it (Article 6(1)(b) GDPR).
You can reserve an Airnate One with a refundable payment. The payment page is not on our site. It is on the site of our payment provider, Stripe.
What Stripe collects: on the payment page you enter your name, your e-mail address, your billing address and your payment details (for example your card number). Stripe also collects technical data, such as your IP address and data about your browser and device. Stripe uses cookies on its own page, mainly to prevent fraud.
What we receive from Stripe: your name, your e-mail address, your billing address, the amount, the date and status of the payment and of any refund, limited card details (card brand, last four digits, expiry date and country) and the result of Stripe's fraud check. We never receive your full card number or the security code.
We use this data:
You must give this data to reserve. Without it we cannot take or refund your payment. We do not use reservation data for advertising. The e-mails about your reservation are service messages, not a newsletter.
The role of Stripe: our contract is with Stripe Payments Europe, Limited (Ireland). When Stripe handles your payment and keeps the reservation record for us, it is our “processor”. It acts on our instructions under its data processing agreement. Stripe also uses payment data for its own purposes: to prevent fraud, to follow the laws and card network rules that apply to it, and to improve its services. For these uses Stripe decides alone how the data is used. It is then an independent “controller”, and the Stripe privacy policy applies.
Transfers: Stripe processes data in Ireland, in the USA (Stripe, Inc.) and in other countries. Stripe, Inc. is certified under the EU-U.S. Data Privacy Framework. For other transfers, the data processing agreement of Stripe includes the EU standard contractual clauses.
How long we keep it: we keep your reservation record while your reservation is open. After a refund or a purchase, we delete the data that we no longer need within 12 months. Payment records that are accounting documents stay for 7 years after the end of the financial year. Stripe keeps its own records under its privacy policy.
If you live in Canada: when you reserve, you consent to the collection, use and disclosure of this data for the purposes above. We collect only what we need for them. You can withdraw your consent by cancelling your reservation. We then keep only the records that the law requires. We and our providers store and process your data outside Canada, in the European Union and in the USA. Courts and authorities in those countries can get access to it under their laws. You can ask us for access to your data, for a correction, or for information about our providers outside Canada. Write to [email protected]. We answer within 30 days. You can also complain to the Office of the Privacy Commissioner of Canada (www.priv.gc.ca) or, in Alberta, to the Office of the Information and Privacy Commissioner (www.oipc.ab.ca).
We use these service providers. Except for Stripe in the cases described below, they process the data for us under their data processing terms:
Their privacy policies: DigitalOcean, Cloudflare, Google, Microsoft, Stripe. We also give data to authorities if the law requires it.
Transfers outside the EU/EEA: some of these providers process data in the USA and in other countries. DigitalOcean, LLC, Cloudflare, Inc., Google LLC, Microsoft Corporation and Stripe, Inc. are certified under the EU-U.S. Data Privacy Framework. The European Commission decided that this framework gives adequate protection (Implementing Decision (EU) 2023/1795). For other transfers, the data processing terms of the providers include the EU standard contractual clauses. You can ask us for more information or for a copy of these safeguards.
Use at any time. You can also find “Cookie settings” in the footer of the site. If you reject after you accepted, measurement stops and the Google Analytics cookies are deleted. The measurement before you rejected stays lawful.
You can also clear the site data in your browser settings. The banner then asks you again.
If you live in Canada, see also “If you live in Canada” under “Reservations and payments”. Under the GDPR you can:
To use your rights, write to [email protected]. We answer within one month. If a request is complex, the law allows up to two more months, and we tell you about this. This is free of charge, unless a request is clearly unfounded or excessive.
You can also complain to a data protection authority. In Estonia this is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, [email protected], www.aki.ee. You can also complain to the authority in the EU/EEA country where you live or work, or where the problem occurred.
Your browser must send technical data, such as your IP address, to load the site. All other data is your choice: analytics needs your consent, you decide if you write to us, and you decide if you reserve. We do not make automated decisions that have a legal or similar effect on you.
We use server logs and e-mails, and reservation data to handle payment disputes and fraud, on the basis of our legitimate interest. You can object to this use at any time, for reasons related to your situation. Write to [email protected]. We then stop, unless we have compelling reasons to continue or we need the data for legal claims.
If we change how we use data, we update this page and the date at the top.