is responsible for data processing according to Art. 4 No. 7 General Data Protection Regulation (GDPR)

1. Log Files: When you visit our website certain access data will be stored and processed. Mainly, this consists of the IP address of the terminal device, device-ID, type of device, data names and volume transferred, date and time, type of browser and, possibly, of operating system used, domain name and name of access provider, browser history and, to the extent not deactivated by you in your settings, possibly location information. Such log files are stored for 7 days on the basis of Art. 6 Sec. 1 Sentence 1f GDPR for security reasons (e.g. in case of fraud investigatons). Only data, which are still required for the investigation of a security incident, will not be deleted thereafter.

2. Cookies: Cookies are bits of information, which are transferred as small text files to the user´s device while he uses our website and which are stored there for later retrieval. Some cookies are deleted immediately after leaving our website, others remain for a predefined period of time so that they can recognize your browser at its next visit. Our website uses this information on the basis of Art. 6 Sec. 1 Sentence 1f GDPR exclusively in order to make your visit as customer friendly and as effective as possible. Note: You can delete cookies at any time in the settings of your browser. Furthermore, you can set your browser in a way, that a storage is excluded from the outset or that it only occurs after your prior consent. Deactivating cookies may however cause certain functions of our website not to operate properly.

3. Newsletter: We will send our newsletter only upon prior consent of the recipient according to Art. 6 Sec. 1 Sentence 1a, Art. 7 GDPR. If you would like to subscribe to our newsletter on our website, we need your email address and confirmation that you are the owner of this email address and agree to receive the newsletter. These data are collected on the basis of Art. 6 Sec. 1 Sentence 1f GDPR for the sole purpose of documenting your respective consent. We will not transfer this information to third parties. You may revoke the newsletter order and your consent to the storage of the data you have provided in this context anytime.

4. Processing of personal data other than mentioned above:

• If you contact us (e.g. via the contact form on our website), we will process the data you have shared with us (e.g. your email address and your request) based on Art. 6 Sec.1 Sentence 1b GDPR to answer your request.
• If you enter into a contract with us or with our partners which we have named to you beforehand we will process your contact- and payment data, contract data as well as any communication in relation to the contract based on Art. 6 Sec.1 Sentence 1b GDPR to provide our contractual services. Without this information, a contract cannot be concluded.
• If you have given us your consent, we will process the data that you have given to us in this context based on Art. 6 Sec.1 Sentence 1a GDPR.
• If we have legitimate interests according to Art. 6 Sec.1 Sentence 1f GDPR and you have no conflicting interests or rights which prevail we will process your personal data for purposes of developing our business with interested parties and keeping in touch as well as for protecting and asserting our rights (e.g. in fraud cases).
• Note: We do not use automated decision making and profiling mechanisms as mentioned in Art. 22 GDPR.

5.  Pass-on to third parties: We only pass on your data to third parties, if you have given us your consent to do so, if this is necessary for pre-contractual or contractual purposes in accordance with Art. 6 Sec.1 Sentence 1b GDPR or if there are legitimate interests to do so in accordance with Art. 6 Sec.1 Sentence 1f GDPR. In the above cases, we also pass on data to partners in other countries, which we have named to you beforehand, in each case in compliance with Art. 45 Sec.1 Sentence 1 GDPR.

6. Deletion of data: To the extent not stated expressly in this data privacy declaration, we delete data, as soon as (1) they are no longer required for their original purpose and (2) legal preservation requirements have expired. Note: There is an obligation to preserve certain business documents for a period of 6 years according to commercial legislation; taxation relevant documents need to be preserved for a period of 10 years.

7. Your rights:

• We will inform you at any time upon your request, if and which of your personal data have been stored by us (Art. 15 GDPR). We will provide you with your personal data in accordance with Art. 20 GDPR, also for transfer to third parties.
• You can ask us to correct false data as well as to complete incomplete data stored by us (Art. 16 GDPR).
• You can ask us (1) to restrict the processing of your personal data in accordance with Art. 18 GDPR or (2) to delete your personal data in accordance with Art. 17 GDPR.
• According to Art. 21 GDPR you can file an objection to our processing of your personal data. Upon such objection, we will stop processing your data to the extent that there are no conflicting rights of our company which prevail. In a case where we process your data for direct marketing purposes based on Art. 6 Sec.1 Sentence 1f GDPR, we will respect your objection in any case for the future.
• You can revoke your consent to our processing of your personal data at any time in accordance with Art. 7 Sec. 3 GDPR.
• You can file a complaint with a supervisory authority (Art. 77 GDPR).

Version June 2024