Privacy policy

1. general information and principles of data processing

We are pleased that you are visiting our website. The protection of your privacy and the protection of your personal data, so-called personal data, when using our website is an important concern for us.

According to Art. 4 No. 1 of the GDPR, personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as their first and last name, their address, their telephone number, their e-mail address, but also their IP address.

Data for which no reference to your person can be established, such as through anonymisation, is not personal data. Processing (e.g. collecting, storing, reading, querying, using, transmitting, deleting or destroying) according to Art. 4 No. 2 DS-GVO always requires a legal basis or your consent. Processed personal data must be deleted as soon as the purpose of the processing has been achieved and there are no longer any legally prescribed retention obligations to uphold.

Here you will find information on how we handle your personal data when you visit our website. In order to provide the functions and services of our website, it is necessary for us to collect personal data about you.

We also explain to you the type and scope of the respective data processing, the purpose and the corresponding legal basis and the respective storage period.

This data protection declaration only applies to this website. It does not apply to other websites to which we merely refer by means of a hyperlink. We cannot accept any responsibility for the confidential handling of your personal data on these third-party websites, as we have no influence on whether these companies comply with data protection regulations. Please inform yourself about the handling of your personal data by these companies directly on these websites.

2. responsible body

Responsible for the processing of personal data on this website is (see imprint):

3. provision and use of the website/server logfiles

a) Type and scope of data processing

• IP address

• Date and time of the request

• Name and URL of the retrieved file

• Website from which the access is made (referrer URL)

• Access Status/HTTP Status Code

• Browser type

• Language and version of the browser software

• Operating system

b) Purpose and legal basis

This processing is technically necessary in order to display our website to you. We also use the data to ensure the security and stability of our website.

The legal basis for this processing is Art. 6 para. 1 lit. f) DS-GVO. The processing of the aforementioned data is necessary for the provision of a website and thus serves to protect a legitimate interest of our company.

c) Storage period

As soon as the aforementioned personal data is no longer required to display the website, it is deleted. The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object to this aspect. Further storage may take place in individual cases if this is required by law.

4. use of cookies

a) Type, scope and purpose of data processing

We use cookies. Cookies are small files that are sent by us to the browser of your terminal device during your visit to our website and stored there.

Some functions of our website cannot be offered without the use of technically necessary cookies. Other cookies, on the other hand, enable us to carry out various analyses. For example, some cookies can recognise the browser you are using when you visit our website again and transmit various information to us. We use cookies to facilitate and improve the use of our website. Among other things, cookies enable us to make our website more user-friendly and effective for you by, for example, tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. However, cookies do not cause any damage to your end device. They cannot execute any programmes and cannot contain viruses. Various types of cookies are used on our website, the type and function of which are explained below.

Temporary cookies/ session cookies

Our website uses so-called temporary cookies or session cookies, which are automatically deleted as soon as you close your browser. This type of cookie makes it possible to record your session ID. This allows various requests from your browser to be assigned to a common session and makes it possible to recognise your terminal device during subsequent website visits.

Permanent cookies

So-called permanent cookies are used on our website. Permanent cookies are cookies that are stored in your browser for a longer period of time and can transmit information. The respective storage period differs depending on the cookie. You can delete permanent cookies independently via your browser settings.

Third-party cookies

We use analytical cookies to monitor anonymised user behaviour on our website.

We also use advertising cookies. These cookies allow us to track user behaviour for advertising and targeted marketing purposes.

Social media cookies allow you to connect to your social networks and share content from our website within your networks.

Configuration of the browser settings

Most web browsers are preset to automatically accept cookies. However, you can configure your respective browser so that it only accepts certain cookies or no cookies at all. However, we would like to point out that you may then no longer be able to use all the functions of our website.

You can also delete cookies already stored in your browser via your browser settings. Furthermore, it is possible to set your browser to notify you before cookies are stored. Since the various browsers can differ in their respective functions, we ask you to use the respective help menu of your browser for the corresponding configuration options.

Deactivating the use of cookies may require the storage of a permanent cookie on your computer. If you subsequently delete this cookie, you will have to deactivate it again.

b) Legal basis

Based on the purposes described, the legal basis for the processing of personal data using cookies is Art. 6 (1) lit. f) DS-GVO. If you have given us your consent to the use of cookies on the basis of a notice we have issued on the website ("cookie banner"), the legal basis is additionally Art. 6 para. 1 lit. a) DS-GVO.

c) Storage period

As soon as the data transmitted to us via the cookies is no longer required for the purposes described above, this information is deleted. Further storage may take place in individual cases if this is required by law.

5. data collection for the implementation of pre-contractual measures and for the fulfilment of the contract

a) Type and scope of data processing

In the pre-contractual area and when concluding the contract, we collect personal data about you. This concerns, for example, your first and last name, address, e-mail address, telephone number or bank details.

b) Purpose and legal basis of the data processing

We collect and process this data exclusively for the purpose of executing the contract or fulfilling pre-contractual obligations.

The legal basis for this is Art. 6 para. 1 lit b) DS-GVO. If you have also given your consent, the additional legal basis is Art. 6 para. 1 lit. a) DS-GVO.

c) Storage period

The data will be deleted as soon as they are no longer necessary for the purpose of their processing.

In addition, there may be legal storage obligations, for example, storage obligations under commercial or tax law in accordance with the German Commercial Code (HGB) or the German Fiscal Code (AO). If such retention obligations exist, we will block or delete your data at the end of these retention obligations.

6. order form

There is an order form on our website which can be used for electronic pre- orders.

a) Type and scope of data processing

Our data collection is limited to the following data:

• First and last name

• Telephone number

• E-mail address

• Account details

• Product name

The purpose of the data processing is to be able to process your order properly.

The legal basis for this is Art. 6 para. 1 lit. b) DS-GVO. The processing of the data serves the fulfilment of a contract, or is necessary for the implementation of a pre-contractual measure, which has taken place at the request of the data subject.

c) Storage period
The data will be deleted as soon as they are no longer needed to achieve the

purpose of the processing.

In addition, there may be legal storage obligations, for example, storage obligations under commercial or tax law in accordance with the German Commercial Code (HGB) or the German Fiscal Code (AO). If such retention obligations exist, we will block or delete your data at the end of these retention obligations.

7. registration possibility

a) Type and scope of data processing

You can register on our website. When you register, we collect and store the data you enter in the input mask (e.g. last name, first name, e-mail address). This data will not be passed on to third parties.

b) Purpose and legal basis of the data processing

Your registration is necessary for the use of certain content and services on our website or for the performance of a contract or for the implementation of pre-contractual measures. After registration, you are free to change the personal data provided during registration at any time or to have it completely deleted from the data stock of the controller.

In the case of consent, the legal basis for processing is Art. 6 (1) a) DS-GVO. If your registration serves to prepare the conclusion of a contract, Art. 6 para. 1 lit. b) DS-GVO is the additional legal basis.

c) Storage period

The data collected during registration will be stored by us for as long as you are registered on our website and will then be deleted. Legal retention periods remain unaffected. In addition, your registered personal data will be deleted if you

8. data transmission

We will only share your personal data with third parties if:

a) you have given your express consent to this in accordance with Art. 6 (1) a) DS-GVO.

b) this is legally permissible and necessary according to Art. 6 para. 1 lit. b) DS-GVO for the fulfilment of a contractual relationship with you or the implementation of pre-contractual measures.

c) there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 lit. c) DS-GVO.

We are legally obliged to transmit data to state authorities, e.g. tax authorities, social insurance carriers, health insurance companies, supervisory authorities and law enforcement agencies.

d) the disclosure is necessary in accordance with Art. 6 (1) f) DS-GVO for the protection of legitimate business interests, as well as for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data.

e) in accordance with Art. 28 of the Data Protection Regulation, we use external service providers for processing, who are obliged to handle their data with care.

We use such service providers in the areas of:

When transferring data to external bodies in third countries, i.e. outside the EU or EEA, we ensure that these bodies treat your personal data with the same care as within the EU or EEA. We only transfer personal data to third countries where the EU Commission has confirmed an adequate level of protection or if we ensure the careful handling of personal data through contractual agreements or other suitable guarantees.

9. application possibility

a) Type and scope of data processing

You can apply on our website or by e-mail. When you apply, we collect and store the data that you enter in the input mask or that you send us by e-mail.

b) Purpose and legal basis

We process your data only for the purpose of processing your application. Data will not be passed on to third parties. The legal basis for the processing is Art. 88 (1) DS-GVO in conjunction with Art. 26 BDSG. § If you give us your consent to be included in our applicant pool, the legal basis is Art. 6 para. 1 lit. a) DS-GVO.

c) Storage period

If we are unable to offer you a job, we will store your data for a maximum of six months after the end of the application process, taking into account § 61b para. 1 ArbGG in conjunction with. § SECTION 15 AGG. The start of the period is the receipt of the rejection letter. If you have given us consent to include you in our applicant pool, we will store your data for a maximum of two years.

d) Data transfer

Your data will only be disclosed to the bodies involved in the decision (responsible personnel or specialist departments, management, works council). In addition, we are obliged to disclose your data to public bodies and institutions (e.g. public prosecutor's office, police, supervisory authorities, tax office, social insurance institutions, etc.).

Further data recipients may be those bodies for which you have given us your consent to transfer data.

10. comment function

a) Type and scope of data processing

You can comment on articles on our website. When you comment on a post, we collect and store the data you enter in the input mask. In addition to the comments you leave, information on the time of comment entry and possibly the user name (pseudonym) you have chosen will also be stored and published. Furthermore, the IP address assigned by the Internet service provider (ISP) of the person concerned is stored. This information is not passed on to third parties.

b) Purpose and legal basis

The data transmitted by you (e.g. the IP address) is used for security reasons and in the event that the person concerned infringes the rights of third parties by posting a comment or posts illegal content.

There will be no disclosure of this collected personal data to third parties, unless such disclosure is required by law or serves the legal defence of the controller.

The legal basis for the processing of personal data transmitted when using the comment function is, if and insofar as you have given your consent, Art. 6 para. 1 lit. a) DS-GVO. You can revoke this consent at any time. The legality of the data processing operations already carried out remains unaffected by the revocation.

Further legal basis is Art. 6 para. 1 lit. f) DS-GVO.

We have a legitimate interest in processing if third party rights are violated or illegal content is posted. This is for security purposes in case someone writes unlawful content in comments and posts (insults, prohibited political propaganda, etc.).

c) Storage period

The comments and the associated data (e.g. IP address) are stored and remain on our website until the commented content has been completely deleted or the comments have to be deleted for legal reasons.

11. contact form

a) Type and scope of data processing

On our website, we offer you the opportunity to contact us via a form provided. During the process of sending your enquiry via the contact form, reference is made to this data protection declaration in order to obtain your consent.

If you make use of the contact form, the following personal data will be processed:

• - Salutation - First name - Surname
• - Title
• - Company - Branch
• - Function - Street
• - Street number - Postcode
• - Place
• - Country
• - E-mail address
• - Phone number
• - Subject
• - Message content

b) Purpose and legal basis

The purpose of providing your e-mail address is to send you a reply to your enquiry by e-mail. When using the contact form, your personal data will not be passed on to third parties.

The legal basis for the processing is consent in accordance with Art. 6 Para. 1 lit. a) DS-GVO on the basis of the declaration of consent voluntarily submitted by you in the following and which can be revoked at any time for the future:

c) Storage period

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after we have completed processing your enquiry).

Mandatory legal provisions - in particular retention periods according to the German Commercial Code (HGB) or the German Fiscal Code (AO) - remain unaffected.

12. contact possibilities by e-mail

On our website you can contact us by e-mail.

a) Type and scope of data processing

You can contact us by e-mail. Our data collection is limited to the e-mail address of the e-mail account you use to contact us as well as the personal data you provide as required when contacting us.

b) Purpose and legal basis

The purpose of the data processing is to be able to answer your request appropriately. The legal basis for this is Art. 6 para. 1 lit. f) DS-GVO. There is a legitimate interest in processing the above-mentioned personal data in order to be able to deal with your request appropriately.

c) Storage period

The duration of the storage of the above-mentioned data depends on the background of your contact. Your personal data will be deleted regularly if the

purpose of the communication no longer applies and storage is no longer necessary. This may result, for example, from the processing of your request.

13 Newsletter

a) Type and scope of data processing

On our website you have the option of subscribing to a free regular e-mail newsletter. In order to be able to send you the newsletter on a regular basis, we need your e-mail address.

For the newsletter dispatch we use the so-called double opt-in procedure.

This means that we will only send you an e-mail newsletter once you have expressly confirmed that you consent to receiving the newsletter. We will then send you a confirmation e-mail asking you to confirm that you wish to receive future newsletters from us by clicking on a corresponding link.

This serves to ensure that only you, as the owner of the specified email address, can subscribe to the newsletter. Your confirmation must take place promptly after receipt of the confirmation email, otherwise your newsletter registration will be automatically deleted from our database.

When you subscribe to the newsletter, we collect and store the data you enter in the input mask (e.g. last name, first name, email address).

When you register for the newsletter, we also save the IP address entered by your Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. In the case of the confirmation e-mail sent for control purposes (double opt in e-mail), we also save the date and time of the click on the confirmation link and the IP address entered by the Internet service provider (ISP).

b) Purpose and legal basis

The data we collect when you register for the newsletter will be used exclusively for the purpose of advertising in the newsletter.

The processing of your e-mail address for the newsletter dispatch is based, in accordance with Art. 6 para. 1 lit. a) DS-GVO and § 7 para. 2 no. 3 UWG, on the declaration of consent voluntarily submitted by you below, which can be revoked at any time for the future.

In addition, the processing is based on Art. 6 para. 1 lit f) DS-GVO due to legitimate interests of us to document the proof of the required consent.

c) Storage period

Your e-mail address will be stored for as long as you have subscribed to the newsletter. After unsubscribing from the newsletter, your email address will be deleted unless you have expressly consented to further use of your data.

14. tracking and analysis tools

You can also find an exact overview of the web analysis and social media tools we use here.

Web analysis tools and social media

Amazon Pay

We offer the possibility to process the payment via the payment service provider Amazon Payments Europe S.C.A. 5, Rue Plaetis - 2338 Luxembourg.

The legal basis for this is our legitimate interest in ensuring efficient and secure payment processing. Art. 6 para. 1 lit. f DSGVO. In this context, we pass on the following data to Amazon Pay, insofar as it is necessary for the fulfilment of the contract (Art. 6 para. 1 lit b. DSGVO): Name, address, account details, any credit card number, invoice amount, currency and transaction number. Your data will only be passed on for the purpose of payment processing with the payment service provider Amazon Payments and only insofar as it is necessary for this purpose.

Amazon carries out a credit check for various services such as payment by direct debit in order to ensure your willingness and ability to pay. This corresponds to the legitimate interest of Amazon Pay (pursuant to Art. 6 para. 1 lit. f DSGVO) and serves the execution of the contract (pursuant to Art. 6 para. 1 lit. b DSGVO). For this purpose, your data (name, address and date of birth, bank account details) are passed on to credit agencies. We have no influence on this process and only receive the result of whether the payment has been made or rejected or a check is pending.

For more information about Amazon Pay privacy, please visit:

https://pay.amazon.com/de/help/201751600

Adyen

If you choose a payment method from the payment service provider Adyen, the payment will be processed via the payment service provider Adyen N.V. German Branch, Friedrichstraße 63, Eingang Mohrenstraße 17, 10117 Berlin, to whom we will pass on the information you provided during the ordering process, together with information about your order (name, address, account number, bank sort code, credit card number if applicable, invoice amount, currency and transaction number) in accordance with Art. 6 (1) lit. b DS-GVO. Your data will only be passed on for the purpose of processing payments with the payment service provider and only to the extent necessary for this purpose. You can find more information on data protection at Adyen at:

https://www.adyen.com/de_DE/richtlinien-und-haftungsausschluss/privacy- policy

Doubleclick by Google

We use Doubleclick, a service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: "Google") on some of our websites. Doubleclick uses cookies to show you personalised advertising. The cookies do not contain any personal information.

The information generated by the cookies about your use is usually transferred to a Google server in the USA and stored there.

The data transmitted by your browser as part of Doubleclick will not be merged with other Google data.

You can prevent cookies from being stored by setting your browser software accordingly. You can deactivate the display of personalised advertising with the help of a browser plug-in. You can install this here: https://www.google.com/settings/ads/plugin

You can also deactivate the display of personalised advertising here.
The legal basis for the processing of data using Double Click is Art. 6 (1) lit. f

DS-GVO.
You can find more information on data protection at Google here:

https://www.google.de/intl/de/policies/technologies/ads/

Facebook

If you access our Facebook fan page, Facebook Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 D02 X525, Ireland, collects, stores and processes your personal data in accordance with Facebook's privacy policy. You can find the privacy policy here:

https://de-de.facebook.com/policy.php

Within the framework of the "Facebook Insights" function, Facebook may provide us with the following data categories, among others, in anonymised / statistical form for the purpose of performance measurement and optimisation of our Facebook presence:

• Predefined interactions on our fan page

• Timestamp

• Country/city of the user

• HTTP language code

• Age/gender group

• Previously visited website (so-called referral URL)

With regard to the processing of insights data, there is a joint responsibility between Facebook and us, under which Facebook has assumed primary responsibility. This concerns the processing of insights data and the implementation of data subject rights. Please therefore contact Facebook directly regarding all obligations under the GDPR with regard to the processing of insights data. We will forward any requests we receive in this regard to Facebook. Further details are set out in the Joint Controller Addendum, which can be found here:

www.facebook.com/legal/terms/page_controller_addendum

You can find more information about Facebook Insights here:

https://analytics.facebook.com/features/list#automated_insights www.facebook.com/legal/terms/information_about_page_insights_data

Facebook Custom Audience / Facebook Pixel

We use the visitor action pixel of the provider Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2 D02 X525, Ireland ("Facebook") within our website. The remarketing tag or tracking pixel was implemented by Facebook. Facebook and we are jointly responsible for data processing.

The Facebook pixel makes it possible for Facebook to determine the visitors to our online offer as a target group for the display of advertisements (so-called "Facebook ads"). The tracking of a user can also take place across several websites. We use the Facebook pixel to display Facebook ads placed by us only to Facebook users who have shown an interest in our online offer or who have certain characteristics (e.g. interest in certain topics or products determined on the basis of the websites visited), which we transmit to Facebook (so-called "Custom Audiences").

With the help of the Facebook pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes ("Audience Insights") by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion").

The Facebook pixel is a javascript code that sends the following data to Facebook:

• HTTP header information: including IP address, web browser information, page location, document, URL of the web page and end device of the web browser (computer, smartphone, tablet, other) as well as day and time of use

• Pixel-specific data: Pixel ID and Facebook cookie data including your Facebook ID (these are used to link events to a specific Facebook advertising account and thus associate them with a Facebook user).

• Additional information about the visit and about standard and custom data events.

You can find more information here.

We also use the additional function "automatic extended matching". Here, data such as first and last name, place of residence, email addresses, telephone numbers or Facebook IDs of users are transmitted to Facebook in encrypted form to form target groups ("Custom Audiences" or "Look Alike Audiences"). This also includes data from non-Facebook users and from users who are not logged into Facebook when they visit our website. This can also identify website visitors who have deactivated the storage of third-party cookies.

If no Facebook cookies are stored in your browser, you will not be assigned to one of the user groups known as "Custom Audience". However, if the Facebook ID contained in the Facebook cookie has been assigned to a Facebook user, Facebook will assign this user to a so-called "Custom Audience" based on the rules defined by us.

According to the case law of the European Court of Justice, we are jointly responsible with Facebook for the operation of the tracking pixel with regard to compliance with data protection regulations. In this context, Facebook provides the associated IT infrastructure as well as the website of the social network and is basically the primary contact when it comes to the processing of your data on the pages of the social network (e.g. information or deletion). However, you can also assert your legal rights against us. In this case, we will forward your requests to the operator of the social network.

If data is transferred outside the European Union (EU) or the signatory states to the Agreement on the European Economic Area (EEA), Facebook obliges the recipients (including the US company Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA) to comply with an appropriate data protection standard on the basis of so-called EU standard contractual clauses. In addition, a transfer to a third country can also take place due to the recognition of an adequate level of data protection by the European Commission.

We use the Facebook pixel to display the "Facebook ads" we place to Facebook users who have shown an interest in our online offering or who have certain characteristics that we transmit to Facebook (so-called "custom audiences").

The legal basis for the use of Facebook Custom Audience is your consent in accordance with Art. 6 para. 1 lit. a) DS-GVO. You can find more information on this here and in Facebook's privacy policy.

Google AdSense

We use the online advertising service Google AdSense, through which you can be presented with advertisements tailored to your interests. Google AdSense is a web analytics service provided by Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

We do this in the interest of showing you advertising that may be of interest to you, in order to make our website more interesting for you. For this purpose, statistical information about you is collected and processed by our advertising partners. These advertisements are recognisable by the reference "Google ads" in the respective advertisement.

By visiting our website, Google receives the information that you have accessed our website. For this purpose, Google uses a web beacon to set a cookie on your computer. If you are logged in with your Google account, your data can be directly assigned to it. If you do not wish your data to be associated with your Google profile, you must log out. It is possible that this data will be passed on to third parties and authorities to contractual partners of Google. This website also has Google AdSense third-party ads enabled. The aforementioned data may be transferred to these third-party providers (named at https://support.google.com/dfp_sb/answer/94149).

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also deactivate interest- based ads on Google via the link: www.google.de/ads/preferences

Please note that this setting will be deleted when you delete your cookies. You can also permanently disable interest-based advertising on Firefox, Chrome and Internet Explorer browsers by downloading and installing the browser plugin available at the following link:

www.google.com/settings/ads/plugin

Contact details from Google: Google Dublin, Google Ireland Ltd. Gordon House, 4 Barrow Street Dublin Ireland
Phone: +353 (1) 436 1000
Fax: +353 (1) 436 1001

You can find more information on data protection at Google here:

http://www.google.com/intl/de/policies/privacy

Advertising Privacy Policy:

www.google.de/intl/de/policies/technologies/ads

Google Ads Conversion Tracking

We use Google Ads to display advertisements to you on Google and other third party websites. Google Ads is a web analytics service provided by Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

With conversion tracking, we can determine how successful the individual advertising measures are. The purpose of this is to show you advertising that is of interest to you and to make our website more interesting for you. The advertising is delivered by Google via so-called "ad servers". We use cookies for this purpose, which can be used to measure certain parameters for measuring success, such as the display of ads or clicks by users. If you access our website via a Google ad, Google Adwords will store a cookie on your PC. These cookies usually lose their validity after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie.

These cookies enable Google to recognise your internet browser. If a user visits certain pages of the website of an Adwords customer and the cookie stored on his computer has not yet expired, Google and the customer can recognise that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Adwords customer. Cookies can therefore not be tracked via the website of Adwords customers. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. These evaluations enable us to recognise which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media; in particular, we cannot identify the users on the basis of this information.

Due to the marketing tools used, your browser automatically establishes a direct connection to Google servers. We have no influence on the scope and further use of the data collected by Google and inform you according to our state of knowledge: Through the integration of AdWords conversion tracking, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by

downloading and installing the browser plugin available under the following link:

http://www.google.com/settings/ads/plugin

Contact details from Google:

Google Dublin, Google Ireland Ltd.

Gordon House, 4 Barrow Street

Dublin Ireland

Phone: +353 (1) 436 1000

Fax: +353 (1) 436 1001

You can find more information on data protection at Google here: https://business.safety.google/gdpr/

Google Ads Remarketing

We use Google Ads Remarketing. Google Ads Remarketing is a web analytics service provided by Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

This application can be used to display advertising from us on other websites after you have visited our website. This is done by means of cookies stored in your browser, via which your usage behaviour when visiting various websites is recorded and evaluated by Google. In this way, Google can determine your previous visit to our website. According to its own statements, Google does not combine the data collected in the course of remarketing with your personal data that may be stored by Google. In particular, according to Google, pseudonymisation is used in remarketing.

The legal basis for data processing is your consent according to Art. 6 para. 1 lit. a DS-GVO.

Contact details from Google:

Google Dublin, Google Ireland Ltd Gordon House, 4 Barrow Street Dublin Ireland
Phone: +353 (1) 436 1000

Fax: +353 (1) 436 1001
You can find more information on data protection at Google here:

https://business.safety.google/gdpr/

Google Analytics

Some of our websites use Google Analytics to analyse and improve their use.

Google Analytics is a web analytics service provided by Google, Inc ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymisation is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The legal basis for the processing of data with the help of Google Analytics is your consent in accordance with Art. 6 (1) lit. a DS-GVO. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

The legal basis for data processing is your consent according to Art. 6 para. 1 lit. a DS-GVO.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link:

http://tools.google.com/dlpage/gaoptout?hl=de

We use Google Analytics with the extension "_anonymizeIp()". This shortens the IP addresses (so-called IP masking). A reference to specific persons can thus be excluded.

Information about Google: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001

More information on Google's terms of use:

www.google.com/analytics/terms/de.html

Google Fonts

We use Google Fonts on some of our websites. This allows us to integrate certain fonts into our website. These fonts are provided by Google via servers in the USA. When calling up our website, the visitor's web browser establishes a direct connection to these servers. Among other things, the visitor's IP address is transmitted to Google and stored there.

Further information about Google: Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA

Further information on data protection at Google:

https://www.google.com/policies/privacy/

Google Maps

We use the Google Maps service on some of our websites. This allows us to show you interactive maps directly on our website and enables you to use the map function conveniently. By using Google Maps, data is transmitted to Google in the USA, including your IP address.

You can prevent the transmission of data to Google by deactivating JavaScript in your browser settings. In this case, however, you will not be able to use Google Maps on our website.

The legal basis for the processing of your data is Art. 6 para. 1 lit. f DS-GVO. Information about Google:

Google Inc, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA

More information on Google's terms of use:

www.google.com/analytics/terms/de.html

More information on the Google Maps Terms of Use:

www.google.com/intl/de_US/help/terms_maps.html

Google reCAPTCHA

In order to ensure sufficient data security when submitting forms, in certain cases we use the reCAPTCHA service, a service provided by Google LLC, 1600 Amphitheater Parkway, Mountainview, California 94043, USA.

This enables us to distinguish whether the input is made by a human being or abusively by automated computer programs (bots). Through the use of reCAPTCHA, the user's IP address and possibly other data required by Google for the reCAPTCHA service are transmitted to Google. The data protection provisions of Google LLC apply here.

The legal basis for the use of reCAPTCHA is Art. 6 para. 1 lit. f DS-GVO. The verification of form entries as to whether they were created by a human being represents a legitimate interest of the website operator.

European contact details of Google:

Google Dublin, Google Ireland Ltd. Gordon House, 4 Barrow Street Dublin D04 E5W5
Ireland

Phone: +353 1 543 1004

For more information on Google LLC.'s privacy policy, please visit http://www.google.de/intl/de/privacy or https://www.google.com/intl/de/policies/privacy/.

Google Tag Manager

Google Tag Manager is a solution that allows marketers to manage website tags through one interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager. http://www.google.de/tagmanager/use-policy.html

Instagram

If you visit our Instagram channel, personal data will be stored and processed by Facebook Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 D02 X525, Ireland, as the provider of Instagram, in accordance with Instagram's privacy policy. You can find the privacy policy here:

https://help.instagram.com/519522125107875

We use the statistics service Instagram Insights for the purpose of needs- based design and ongoing optimisation of our pages. This service records your activity on our site and makes it available to us in anonymised statistics. This provides us with information about, among other things, the interactions of our fan page visitors, the views of our page, the reach of posts, information about the activity of our subscribers as well as information about which countries and locations our visitors come from and statistics about the gender ratios of our visitors. It is not possible for us to draw conclusions about individual users or access individual user profiles.

Paypal

We offer the option of processing the payment transaction via the payment service provider PayPal, PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered

- "Purchase on account" via PayPal, we pass on your payment data to PayPal as part of the payment processing. PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" via PayPal. PayPal uses the result of the credit check with regard to the statistical probability of non- payment for the purpose of deciding whether to provide the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, these have their basis in a scientifically recognised mathematical- statistical procedure. Address data, among other things, is included in the calculation of the score values.

For further information on data protection law, including information on the credit agencies used, please refer to PayPal's data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Pinterest

On our site, we use social plugins of the social network Pinterest, which is operated by Pinterest Inc., 808 Brannan Street San Francisco, CA 94103-490, USA ("Pinterest"). When you call up a page that contains such a plugin, your browser establishes a direct connection to the Pinterest servers. The plugin transmits log data to the Pinterest server in the USA. This log data may contain your IP address, the address of the websites visited that also contain Pinterest functions, the type and settings of the browser, the date and time of the request, how you use Pinterest and cookies.

Further information on the purpose, scope and further processing and use of the data by Pinterest, as well as your rights in this regard and options for protecting your privacy, can be found in the Pinterest data protection information: https://about.pinterest.com/de/privacy-policy

Shopify

We host our website with Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.We use Shopify on a processing basis on our behalf.

When you visit our website, Shopify collects your IP address and information about the device and browser you are using. Furthermore, Shopify analyses user behaviour and creates user statistics. When you make a purchase from our website, Shopify collects your name, email address, shipping and billing addresses, payment information and other data related to the purchase (e.g. phone number, amount of sales made, etc.). For the analyses, Shopify stores cookies in your browser.

All data collected on our website is processed on Shopify's servers. In case of transfer of data to Shopify Inc. in Canada, the adequate level of data protection is guaranteed by adequacy decision of the European Commission. For further information on Shopify's data protection, please visit the following website: https://www.shopify.de/legal/datenschutz.

Shopify Payments

We use the payment service provider "Shopify Payments", If you choose a payment method offered via the payment service provider Shopify Payments, the payment processing is carried out via the technical service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on your information provided during the ordering process.

The transfer of your data to Stripe is based on Art. 6 para. 1 lit. a DSGVO (consent) and Art. 6 para. 1 lit. b DSGVO (processing for the performance of a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the validity of past data processing operations. All data required for payment processing are used exclusively for the execution of payments and are transmitted via the "SSL" procedure. Stripe is certified according to PCI DSS.

Stripe may transfer, process and store personal data outside the EU. In this case, Stripe has agreed to EU standard contractual clauses for data transfers outside the EU/EEA, which ensure a level of data protection comparable to the GDPR.

For more information about Shopify Payments' privacy practices, please visit https://www.shopify.com/legal/privacy.

You can find more information about Stripe's data protection at: https://stripe.com/de/privacy.

Social Plug-ins

We currently use the following social media plug-ins: Facebook, Google+, Twitter, Xing, LinkedIn, Snapchat, Tik Tok. In doing so, personal data is transmitted to the respective plug-in provider with the help of a button and stored there.

The respective plug-in provider stores the data collected about you as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of needs-based advertising and to inform other users of the social network about your activities on some of our websites. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Via the plug-ins, we offer you the opportunity to interact with the social networks and other users so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 lit. f DS-GVO.

The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, the data we collect is directly assigned to your account with the plug- in provider. In the case of US providers, transmission takes place in the USA;

Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the data protection declarations of these providers communicated below. There you will also receive further information on your rights in this regard and setting options for protecting your privacy:

https://www.tiktok.com/legal/privacy-policy?lang=de-DE

Snapchat

On our Snapchat channel, we present our services in short form and inform you about ongoing promotions. In doing so, personal data of the user is processed by Snap Group Limited, 77 Shaftesbury Avenue, London, W1D 5DU, United Kingdom ("Snapchat"). Snapchat's privacy policy can be found at:

https://snap.com/de-DE/privacy/privacy-policy

Snapchat's analytics features allow us to measure the performance of our channel. For this purpose, Snapchat provides us with the following information in statistical form: Audiences (e.g. characteristics of target groups such as age, gender and region), interactions (e.g. number of views, duration of video

playback). It is not possible for us to draw conclusions about individual users or access individual user profiles.

For more information on Snapchat's analytics features, please visit:

https://support.snapchat.com/de-DE/article/public-profiles

Tik Tok

On our TikTok channel, we present our services in short form and inform you about ongoing promotions. In doing so, the user's personal data is processed by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland ("TikTok"). TikTok's privacy policy can be found at:

https://www.tiktok.com/legal/privacy-policy?lang=de-DE

TikTok's analytics features allow us to measure the performance of our channel. For this purpose, TikTok provides us with the following information in statistical form: Audiences (e.g. characteristics of target groups for the delivery of advertisements such as age, gender and country), interactions (e.g. likes, duration of playback of videos), referral information (e.g. from where the users have accessed the video), conclusions about individual users as well as access to individual user profiles by us are not possible.

For more information on TikTok's Analytics features, please visit:

https://ads.tiktok.com/marketing_api/docs?rid=bfu8bedbv2c&id=100509

Vimeo videos

We have integrated Vimeo videos into our online offer, which are stored on http://www.vimeo.com and can be played directly from some of our websites.

By visiting the website, Vimeo receives the information that you have
accessed the corresponding sub-page of our respective website. Log files are also transmitted. This occurs regardless of whether Vimeo provides a user account via which you are logged in or whether no user account exists. If you are logged in to Vimeo, your data will be directly assigned to your account. If you do not want your data to be associated with your Vimeo profile, you must log out before activating the button. Vimeo stores your data as usage profiles and uses them for the purposes of advertising, market research and/or designing its website in line with requirements. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Vimeo to exercise this right.

For more information on the purpose and scope of data collection and processing by Vimeo, please see the privacy policy. There you will also find further information on your rights and setting options to protect your privacy:

https://vimeo.com/privacy. Vimeo also processes your personal data in the USA.

Further information about Vimeo: Vimeo LCC, 555 West 18th Street, New York, New York 10011, USA

WIX

We host the content of our website with the following provider: WIX

The provider is Wix.com Ltd, 40 Namal Tel Aviv St, Tel Aviv 6350671, Israel (hereinafter "WIX").

WIX is a tool for creating and hosting websites. When you visit our website, WIX is used to analyse user behaviour, visitor sources, the region of website visitors and visitor numbers. WIX stores cookies on your browser that are necessary for the presentation of the website and to ensure security (necessary cookies).

The data collected via WIX can be stored on various servers worldwide. The WIX servers are located in the USA, among other places.

For details, please refer to the WIX privacy policy: https://de.wix.com/about/privacy.

According to WIX, data transfer to the USA and other third countries is based on the standard contractual clauses of the EU Commission or comparable guarantees according to Art. 46 DSGVO. Details can be found here: https://de.wix.com/about/privacy-dpa-users.

The use of WIX is based on Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in ensuring that our website is presented as reliably as possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.

Job processing

We have concluded a contract on order processing (AVV) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that this service only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

YouTube videos

On our YouTube channel you can find videos or helpful tips about our offer. The customer service team also professionally answers users' questions and comments on YouTube.

Personal data is stored and processed by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 D04 E5W5, Ireland ("Google"), as operator of YouTube, in accordance with Google's privacy policy. You can find the privacy policy here: https://policies.google.com/privacy?hl=de&gl=de

With the help of YouTube's analytics functions, it is possible for us to carry out certain statistical evaluations to optimise our channel. This includes, in particular, details on the most popular videos (e.g. user dwell time, ranking of videos), target groups (e.g. countries, language settings, age and gender, activity times) and the reach of our channel (e.g. where users were redirected to a video from) and impressions (e.g. how many users have seen a certain ad). It is not possible for us to draw conclusions about individual users or access individual user profiles.

For more information on YouTube's Analytics features, please visit:

https://support.google.com/youtube/answer/9002587?hl=de

Munich, 12.12.2022
Law 24/7 Schröder Rechtsanwaltsgesellschaft mbH

15. data security and backup measures

We are committed to protecting your privacy and treating your personal data confidentially. To this end, we take extensive technical and organisational security precautions, which are regularly reviewed and adapted to technological progress.

This includes, among other things, the use of recognised encryption procedures (SSL or TLS). However, data disclosed in unencrypted form, for example by unencrypted e-mail, may be read by third parties. We have no influence on this. It is the responsibility of the respective user to protect the data he or she provides against misuse by encrypting it or in any other way.

16. changes to the privacy policy

We reserve the right at all times to update this statement as necessary.

17. your rights

Here you will find your rights in relation to your personal data. Details can be found in Articles 7, 15-22 and 77 of the GDPR. You can contact the controller in this regard (point 2).

Right to revoke your data protection consent according to Art. 7 para. 3 p. 1 DS-GVO

You can revoke your consent to the processing of your personal data at any time with effect for the future. However, the lawfulness of the processing carried out until the revocation is not affected by this.

a) Right of access according to Art. 15 DS-GVO

You have the right to request confirmation as to whether we are processing personal data relating to you. If this is the case, you have the right to be informed about this personal data and to receive further information, e.g. the purposes of processing, the categories of personal data processed, the recipients and the planned duration of storage or the criteria for determining the duration.

b) Right to rectification and completion according to Art. 16 DS-GVO

You have the right to request the rectification of inaccurate data without delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete data.

c) Right to erasure ("right to be forgotten") according to Art. 17 DS-GVO

You have a right to erasure insofar as the processing is no longer necessary. This is the case, for example, if your data is no longer necessary for the

original purposes, you have revoked your declaration of consent under data protection law or the data was processed unlawfully.

d) Right to restriction of processing according to Art. 18 DS-GVO

You have a right to restrict processing, e.g. if you believe the personal data is inaccurate.

e) Right to data portability according to Art. 20 DS-GVO

You have the right to receive the personal data concerning you in a structured, common and machine-readable format.

f) Right of objection according to Art. 21 DS-GVO

You have the right to object at any time, on grounds relating to your particular situation, to the processing of certain personal data concerning you. In the event of direct marketing, you as the data subject have the right to object at any time to the processing of personal data concerning you for the purposes of

such marketing; this also applies to profiling, insofar as it is related to such direct marketing.

g)Automated decision in individual cases including profiling according to Art. 22 DS-GVO

You have the right not to be subject to a decision based solely on automated processing, including profiling, except in the exceptional circumstances mentioned in Article 22 of the GDPR.

Decision-making based exclusively on automated processing - including profiling - does not take place.

h) Complaint to a data protection supervisory authority pursuant to Art. 77 DS-GVO

You can also lodge a complaint with a data protection supervisory authority at any time, for example if you believe that the data processing does not comply with data protection regulations.

Google Fonts

a) Type and scope of data processing

We use external fonts from Google on this website. Google Fonts is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, Email: support-deutschland@google.com ("Google").

Through the interactive integration of Google Fonts, fonts can be used without having to upload them to your own server. In order to prevent the IP address of your end device from being transmitted to Google servers in the USA through the integration of Google Fonts, as well as information about which of our Internet pages you have visited being passed on, we integrate Google Fonts locally.

b) Purpose and legal basis

The purpose of using Google Fonts is the uniform presentation of fonts. The legal basis is your consent in accordance with Art. 6 para. 1 lit. a) DS-GVO.

c) Right of objection

You have the right to object to the creation of these user profiles. This must be addressed to Google.

Updated on: 15.12.2022