Vulnerability Reporting and Disclosure Policy

Introduction

getAir GmbH places great importance on the security of its products, including wireless systems, WiFi-enabled controllers, and the SmartControl app. We encourage security researchers, customers, and partners to report vulnerabilities to us responsibly so that we can address them in a timely manner.

Reporting Process

Please report a suspected vulnerability through one of the following contact channels:

• E-Mail: info@getair.eu
• Contact form: https://www.getair.eu/kontakt/

Please describe the vulnerability as precisely as possible, including the affected application and the steps to reproduce it. Please keep the information confidential until it has been resolved and do not share it with third parties.

Acknowledgment and Processing

We will acknowledge receipt of your report within 7 calendar days and will keep you regularly updated on the status of processing thereafter, at least every 30 days. If needed, we will contact you for follow-up questions or additional information.

Resolution and Closure

We review every report, assess its impact, and work on a solution that preserves the functionality of our products. Once a fix is available, we will transparently inform affected customers to an appropriate extent about the vulnerability and its resolution.

Confidentiality and Good-Faith Reports

Reports made in good faith and within the scope necessary to identify the vulnerability will not be pursued legally by us. We process personal data from your report confidentially and in accordance with the GDPR. Disclosure to third parties will only occur if we are legally obligated to do so.

General Note

This vulnerability reporting and disclosure policy is reviewed regularly and may be adapted or amended as needed to reflect technological developments, relevant regulations, or recommended practices.