Privacy

We are pleased that you are visiting our website and thank you for your interest.

In the following, we inform you about the handling of your personal data when using our website. Personal data is any data that can be used to identify you personally.

The responsible party of data processing on this website within the meaning of

the General Data Protection Regulation (GDPR) is T&B Distribution GbR,

Raiffeisenstraße 2b, 67373 Dudenhofen, Germany, Tel.: 017672131341, e-mail:

tb.distribution.d@gmail.com. The person responsible is the natural or legal person

who alone or jointly with others determines the purposes and means of the

processing of personal data.

This website uses SSL or TLS encryption for security reasons and to protect the

transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible). You can recognize an encrypted connection by the string

"https://" and the lock symbol in your browser line.

During the mere informational use of our website, i.e. if you do not register or

otherwise transmit information to us, we only collect data that your browser

transmits to our server (so-called "server log files"). When you call up our website,

we collect the following data, which is technically necessary for us to display the

website to you:

• Our visited website
• Date and time at the time of access
• Amount of data sent in bytes
• Source/reference from which you reached the page
• Browser used
• Operating system used
• IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO based on our legitimate interest in improving the stability and functionality of our website. A transfer or other use of the data does not take place. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

To make visiting our website more attractive and to enable the use of certain

functions, we use so-called cookies on various pages. These are small text files that are stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and allow your browser to be recognized the next time you visit (so-called persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. The duration of the respective cookie storage can be found in the overview of the cookie settings of your web browser.

In part, the cookies serve to simplify the ordering process by storing settings (e.g.

remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b DSGVO either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a DSGVO in the case of consent

given, or in accordance with Art. 6 para. 1 lit. f DSGVO to protect our legitimate

interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:

Internet Explorer:

https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Firefox:

https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Chrome:

https://support.google.com/chrome/answer/95647?hl=de&hlrm=en

Safari:

https://support.apple.com/de-de/guide/safari/sfri11471/12.0/mac/10.14

Opera:

https://help.opera.com/de/latest/web-preferences/#cookiesPlease note that if you do not accept cookies, the functionality of our website may be

limited.

When contacting us (e.g. via contact form or e-mail), personal data is collected.

Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration. The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Art. 6 (1) lit. f DSGVO. If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) lit. b DSGVO. Your data will be deleted after the final processing of your request. This is the case when the circumstances indicate that the matter has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

Pursuant to Art. 6 para. 1 lit. b DSGVO, personal data will continue to be collected

and processed if you provide it to us for the performance of a contract or when

opening a customer account. Which data is collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to the above address of the person responsible. We store and use the data provided by you for the purpose of processing the contract. After complete processing of the contract or deletion of your customer account, your data will be blocked regarding tax and commercial law retention periods and deleted after expiration of these periods, unless you have expressly consented to a further use of your data or a legally permitted further use of data was reserved on our part.

6.1 Subscription to our e-mail newsletter

If you subscribe to our e-mail newsletter, we will send you information about our

offers on a regular basis. Mandatory information for sending the newsletter is only

your e-mail address. The provision of further data is voluntary and will be used to

address you personally. For sending the newsletter we use the so-called double opt-in procedure. This means that we will only send you an e-mail newsletter after you have expressly confirmed that you consent to receiving newsletters. We will then send you a confirmation e-mail asking you to confirm that you wish to receive the newsletter in the future by clicking on an appropriate link.

By activating the confirmation link, you give us your consent for the use of your

personal data in accordance with Art. 6 para. 1 lit. a DSGVO. When you register for the newsletter, we store your IP address entered by your Internet service provider (ISP) as well as the date and time of registration to be able to trace any possible misuse of your e-mail address at a later date. The data collected by us when you register for the newsletter is used exclusively for the purpose of addressing you in an advertising manner by way of the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the person responsible mentioned at the beginning. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use your data in a manner that goes beyond this, which is permitted by law and about which we inform you in this declaration.

Sending the e-mail newsletter to existing customers

If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services, such as those already purchased from our range by e-mail. In accordance with Section 7 (3) of the German Unfair Competition Act (UWG), we do not need to obtain your separate consent for this. In this respect, the data processing is carried out solely based on our legitimate interest in personalized direct advertising in accordance with Art. 6 Para. 1 lit. f DSGVO. If you have initially objected to the use of your e-mail address for this purpose, no e-mails will be sent by us. You are entitled to object to the use of your e-mail address for the aforementioned advertising purpose at any time with effect for the future by notifying the responsible person named at the beginning. For this, you will only incur transmission costs according to the prime rates. After receipt of your

objection, the use of your e-mail address for advertising purposes will cease

immediately.

6.3 Newsletter distribution via Episerver Campaign

Our email newsletters are sent via the technical service provider Episerver

Campaign, Wallstraße 16, 10179 Berlin ("Episerver"), to whom we pass on the data you provided when registering for the newsletter. This transfer takes place in

accordance with Art. 6 (1) lit. f DSGVO and serves our legitimate interest in using a

newsletter system that is effective in advertising, secure and user-friendly. The data entered by you for the purpose of receiving the newsletter (e.g. e-mail address) will be stored on Episerver's servers in the EU.

Episerver uses this information to send and statistically evaluate the newsletters on our behalf. For the evaluation, the sent emails contain so-called web beacons or tracking pixels, which are single-pixel image files that are stored on our website. This makes it possible to determine whether a newsletter message has been opened and which links, if any, have been clicked on. With the help of so-called conversion tracking, it can also be analyzed whether a predefined action (e.g. purchase of a product on our website) has taken place after clicking on the link in the newsletter. In addition, technical information is collected (e.g. time of retrieval, IP address, browser type and operating system). The data is collected exclusively pseudonymously and is not linked to your other personal data. A direct reference to a person is excluded. This data is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.

If you wish to object to data analysis for statistical evaluation purposes, you must

unsubscribe from the newsletter.

We have entered into an order processing agreement with Episerver, with which we oblige Episerver to protect our customers' data and not to pass it on to third parties.

You can view Episerver's privacy policy here

:https://www.episerver.de/produkte/plattform/episerver-campaign/sicherheit

6.4 Newsletter dispatch via Klaviyo

Our e-mail newsletters are sent via the technical service provider "Klaviyo", 225

Franklin St, Boston, MA 02110, USA (http://www.klaviyo.com/), to whom we pass on the data you provided when registering for the newsletter. This transfer takes place in accordance with Art. 6 (1) lit. f DSGVO and serves our legitimate interest in using a newsletter system that is effective in advertising, secure and user-friendly. Please note that your data is usually transferred to a Klaviyo server in the USA and stored there.

Klaviyo uses this information to send the newsletter on our behalf. Klaviyo does not use the data of our newsletter recipients to write to them itself or to pass it on to third parties.

To protect your data in the USA, we have a data processing agreement with Klaviyo ("Data Processing Agreement"), in which Klaviyo undertakes to protect the data of our users, to process it on our behalf in accordance with its data protection provisions and, in particular, not to pass it on to third parties.

Klaviyo is also certified under the US-European data protection agreement "Privacy Shield" and thus undertakes to comply with the EU data protection requirements.

You can view Klaviyo's privacy policy here: https://www.klaviyo.com/privacy

6.5 Goods availability notification by e-mail

If we offer the possibility in our online store for selected, temporarily unavailable

items to inform you by e-mail about the time of availability, you can subscribe to our e-mail notification service for the availability of goods. If you subscribe to our

availability notification e-mail service, we will send you a one-time e-mail message

about the availability of the item you have selected. Mandatory information for

sending this notification is only your e-mail address. The provision of further data is voluntary and may be used to address you personally. For sending this notification we use the so-called double opt-in procedure. This means that we will only send you a corresponding notification once you have expressly confirmed that you consent to receiving such a message. We will then send you a confirmation e-mail asking you to confirm that you wish to receive such a notification by clicking on an appropriate link.

By activating the confirmation link, you give us your consent for the use of your

personal data in accordance with Art. 6 para. 1 lit. a DSGVO. When you register for our e-mail notification service for the availability of goods, we store your IP address entered by the Internet service provider (ISP) as well as the date and time of registration to be able to trace a possible misuse of your e-mail address at a later date. The data we collect when you register for our goods availability e-mail notification service is used solely for the purpose of informing you of the availability of a particular item in our online store. You can unsubscribe from the goods availability e-mail notification service at any time by sending a message to the responsible person mentioned at the beginning. After unsubscribing, your e-mail address will be deleted immediately from our distribution list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this statement.

7.1 To process your order, we work together with the service provider(s) listed

below, who support us in whole or in part in the execution of concluded contracts.

Certain personal data is transmitted to these service providers in accordance with

the following information.

The personal data collected by us will be passed on to the transport company

commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the

commissioned credit institution within the framework of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we will inform you explicitly about this below. The legal basis for the transfer of data is Art. 6 para. 1 lit. b DSGVO.

7.2 Use of special service providers for order processing and handling

- Easybill

The order processing (in particular the invoicing) is carried out by the service

provider "easybill" (easybill GmbH, Düsselstr. 21, 41564 Kaarst). Name, address and, if applicable, other personal data will be passed on to easybill in accordance with Art. 6 Para. 1 lit. b DSGVO exclusively for the purpose of processing the online order. Your data will only be passed on to the extent that this is necessary for processing the order. Details on easybill's data protection and easybill's privacy policy can be viewed on easybill's website at easybill.de.

7.3 Use of payment service providers (payment services)

- Adyen

If you choose a payment method of the payment service provider Adyen, the

payment is processed via the payment service provider Adyen, Simon

Carmiggeltstraat 6 - 50, 1011 DJ Amsterdam, Netherlands, to whom we pass on your information provided during the ordering process together with information about your order (name, address, IBAN, BIC, invoice amount, currency and transaction number) in accordance with Art. 6 para. 1 lit. b DSGVO. The transfer of your data takes place exclusively for the purpose of payment processing with the payment service provider Adyen and only insofar as it is necessary for this purpose.

- Amazon Pay

If you select the payment method "Amazon Pay", the payment will be processed via the payment service provider Amazon Payments Europe s.c.a., 38 avenue J.F.

Kennedy, L-1855 Luxembourg (hereinafter: "Amazon Payments"), to whom we will

pass on the information you provided during the ordering process, together with

information about your order, in accordance with Art. 6 (1) lit. b DSGVO. The transfer of your data takes place exclusively for the purpose of payment processing with the payment service provider Amazon Payments and only insofar as it is necessary for this purpose. You can obtain further information about the data protection provisions of Amazon Payments at the following Internet address: https://pay.amazon.com/de/help/201751600

-Apple Pay

If you opt for the "Apple Pay" payment method of Apple Distribution International

(Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment processing is carried out via the "Apple Pay" function of your terminal device operated with iOS, watchOS or macOS by charging a payment card deposited with "Apple Pay". Apple Pay uses security functions integrated into the hardware and software of your device to protect your transactions. For the release of a payment, the entry of a code previously defined by you as well as the verification by means of the "Face ID" or "Touch ID" function of your terminal device is therefore required.

For the purpose of payment processing, the information you provide during the

ordering process, together with information about your order, is passed on to Apple in encrypted form. Apple then encrypts this data again with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay to carry out the payment. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction-specific, dynamic security code to the source website to confirm the success of the payment. If personal data is processed during the described transmissions, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 (1) lit. b DSGVO.

Apple retains anonymized transaction data, including the approximate purchase

amount, the approximate date and time, and whether the transaction was completed successfully. The anonymization completely eliminates any reference to individuals. Apple uses the anonymized data to improve Apple Pay and other Apple products and services. When you use Apple Pay on iPhone or Apple Watch to complete a purchase made through Safari on Mac, the Mac and the authorization device communicate over an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that can identify you personally. You can disable the ability to use Apple Pay on your Mac in your iPhone settings. Go to "Wallet & Apple Pay," and uncheck "Allow payments on Mac." For more information about Apple Pay privacy, please visit the following web address:

https://support.apple.com/de-de/HT203027

- Klarna

If you select Klarna payment service, payment processing will be carried out by

Klarna Bank AB (publ) [https://www.klarna.com/de], Sveavägen 46, 111 34

Stockholm, Sweden (hereinafter "Klarna"). In order to enable the processing of the

payment, your personal data (first and last name, street, house number, postal code, city, gender, e-mail address, telephone number and IP address) as well as data related to the order (e.g. invoice amount, article, delivery type) will be forwarded to Klarna for the purpose of identity and credit checks, provided that you have expressly consented to this in accordance with Art. 6 para. 1 lit. a DSGVO during the ordering process. You can see which credit agencies your data may be forwarded to

here:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The creditworthiness information may contain probability values (so-called score

values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. Klarna uses the information obtained about the statistical probability of non-payment for a weighed decision on the reason, implementation or termination of the contractual relationship.

You can revoke your consent at any time by sending a message to the data controller or to Klarna. However, Klarna remains entitled to process your personal data, if applicable, insofar as this is necessary for the processing of payments in accordance with the contract. Your personal data will be processed in accordance with the applicable data protection regulations and as specified in Klarna's Privacy Policy for Data Subjects located in Germany

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy

or for Data Subjects located in Austria

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy

- Paypal

When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. The transfer takes place in accordance with Art. 6 para. 1 lit. b DSGVO and only insofar as this is necessary for the payment processing.

PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f DSGVO based on PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check in terms of the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The creditworthiness information may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. For further information on data protection, including information on the credit agencies used, please refer to PayPal's privacy policy:

https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

- Shopify Payments

We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered via the payment service provider Shopify Payments, the payment processing is carried out by the technical service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on your information provided during the ordering process together with information about your order (name, address, account number, bank code, credit card number if applicable, invoice amount, currency and transaction number) in accordance with Art. 6 (1) lit. b DSGVO. Your data will only be passed on for the purpose of payment processing with Stripe Payments Europe Ltd. and only insofar as it is necessary for this purpose. You can find more information on the data protection of Shopify Payments at the following Internet address: https://www.shopify.com/legal/privacy

Data protection information on Stripe Payments Europe Ltd. can be found here:

https://stripe.com/de/privacy

- SOFORT

If you select the payment method "SOFORT", the payment will be processed via the

payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich,

Germany (hereinafter "SOFORT"), to whom we will pass on the information you

provided during the ordering process, together with information about your order, in

accordance with Art. 6 (1) lit. b DSGVO. Sofort GmbH is part of the Klarna Group

(Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data will

only be passed on for the purpose of payment processing with the payment service provider SOFORT and only insofar as it is necessary for this purpose. You can obtain more information about SOFORT's privacy policy at the following Internet address: https://www.klarna.com/sofort/datenschutz

- Skrill

If you choose a payment method of the payment service provider Skrill, the payment is processed via the payment service provider Skrill Ltd, Floor 27, 25 Canada Square, London, E14 5LQ, England, to whom we pass on your information provided during the ordering process together with information about your order (name, address, account number, bank routing number, credit card number, if applicable, invoice amount, currency and transaction number) in accordance with Art. 6 para. 1 lit. b DSGVO. The transfer of your data takes place exclusively for the purpose of payment processing with the payment service provider Skrill Ltd. and only insofar as it is necessary for this purpose.

- Stripe

If you choose a payment method of the payment service provider Stripe, the

payment is processed via the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on your information provided during the ordering process together with information about your order (name, address, account number, bank routing number, credit card number if applicable, invoice amount, currency and transaction number) in accordance with Art. 6 (1) lit. b DSGVO. Your data will only be passed on for the purpose of payment processing with the payment service provider Stripe Payments Europe Ltd. and only to the extent necessary for this purpose. You can find more information about Stripe's data protection at the URL

https://stripe.com/de/privacy#translation

Own rating reminder (no dispatch by a customer rating system)

We use your email address for a one-time reminder to submit a rating of your order for the rating system we use, if you have given us your express consent to do so during or after your order in accordance with Art. 6 (1) lit. a DSGVO. You can revoke your consent at any time by sending a message to the data controller.

Rating reminder by Trusted Shops

If you have given us your express consent to this during or after your order in

accordance with Art. 6 (1) lit. a DSGVO, we will transmit your e-mail address to the rating platform Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne

(www.trustedshops.de), so that they can send you a rating reminder by e-mail.

You can revoke your consent at any time by sending a message to the data controller or to the rating platform.

Youtube video use

This website uses the Youtube embedding function to display and play videos from the provider "Youtube", which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

The extended data protection mode is used here, which, according to the provider, only starts up the storage of user information when the video(s) is/are played. If the replay of embedded Youtube videos is started, the provider "Youtube" uses cookies to collect information about user behavior. According to information from "Youtube",these are used, among other things, to collect video statistics, to improve user-friendliness and to prevent abusive behavior. If you are logged in to Google, your data is directly assigned to your account when you click on a video. If you do not want the assignment with your profile at YouTube, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation is carried out in particular in accordance with Art. 6 (1) lit. f DSGVO based on Google's legitimate interests in the insertion of personalized advertising, market research and/or needs-based design of its website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. The use of YouTube may also result in the transmission of personal data to the servers of Google LLC. in the USA.

Regardless of a replay of the embedded videos, a connection to the Google network is established each time this website is called up, which may trigger further data processing operations without our influence.

If personal data is transferred to Google LLC., which is based in the USA, Google LLC. has certified itself for the US-European data protection agreement "Privacy Shield",which ensures compliance with the level of data protection applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list

For more information on data protection at "YouTube", please refer to the provider's privacy policy at: https://www.google.de/intl/de/policies/privacy

As far as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future. To exercise your

revocation, please follow the option described above to make an objection.

10.1 Facebook Pixel for the creation of Custom Audiences with extended matching of data

Within our online offer, the so-called "Facebook Pixel" of the social network Facebook is used in the mode of extended matching of data, which is operated by Facebook Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Facebook"). Based on his explicit consent, when a user clicks on an advertisement played on Facebook and placed by us, an addition is added to the URL of our linked page by Facebook Pixel. Then, after redirection, this URL parameter is inscribed in the user's browser via a cookie that our linked page sets itself. In addition, this cookie collects specific customer data, such as the mail address, which we collect on our website linked to the Facebook ad during transactions such as purchase transactions, account logins or registrations (extended matching of data). The cookie is then read by Facebook Pixel and allows the data, including specific customer data, to be forwarded to Facebook.

With the help of the Facebook Pixel with extended matching of data, it is possible for Facebook to precisely determine the visitors to our online offer as a target group for the display of advertisements (so-called "Facebook Ads"). Accordingly, we use the Facebook pixel with advanced matching of data to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited), which we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook pixel with advanced data matching, we also want to ensure that our Facebook ads correspond to the potential interest of users and do not have a harassing effect. This allows us to further

evaluate the effectiveness of the Facebook ads for statistical and market research

purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion"). Compared to the standard variant of Facebook Pixel, the extended matching of data feature helps us to better measure the effectiveness of our advertising campaigns by capturing more attributed conversions.

All submitted data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own

advertising purposes, in accordance with Facebook's data usage policy

(https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to place advertisements on and off Facebook.

These processing operations are carried out exclusively upon the granting of explicit consent in accordance with Art. 6 (1) a DSGVO. Consent to the use of the Facebook Pixel may only be declared by users older than 13 years of age. If you are younger, we ask you to ask your legal guardians for permission.

The information generated by Facebook is usually transmitted to a Facebook server and stored there; this may also involve transmission to the servers of Facebook Inc. in the USA. Facebook Inc. with headquarters in the USA is certified for the US-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU. You can revoke your consent at any time by deactivating the Facebook pixel tracking. For this purpose, you can set an opt-out cookie by clicking on the link below, which disables Facebook pixel tracking: Disable Facebook Pixel

This opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you must click the above link again.

10.2 Google AdSense

This website uses Google AdSense, a web advertising service Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses so-called cookies, which are text files placed on your computer, to help the website analyze how users use the site. In addition, Google AdSense also uses so-called "web beacons" (small invisible graphics) to collect information, through which simple actions such as visitor traffic on the website can be recorded, collected and analyzed. The information generated by the cookie and / or web beacon (including your IP address) about your use of this website is usually transmitted to a Google server and stored there. This may also result in a transmission to the servers of Google LLC. in the USA.

Google uses the information obtained in this way to perform an evaluation of your

usage behavior regarding the AdSense ads. The IP address transmitted by your

browser as part of Google AdSense will not be merged with other data from Google.

The information collected by Google may be transferred to third parties if this is

required by law and/ or if third parties process this data on behalf of Google.

The described processing of data is carried out in accordance with Art. 6 (1) lit. f

DSGVO for the purpose of targeted advertising addressing of the user by advertising third parties, whose ads are displayed on this website based on the evaluated user behavior. This processing also serves our financial interest in exploiting the economic potential of our website by displaying personalized third-party advertising content in return for payment.

If personal data is transferred to Google LLC., which is based in the USA, Google LLC. has certified itself for the US-European data protection agreement "Privacy Shield",which ensures compliance with the level of data protection applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list You can obtain more information about Google's privacy policy at the following Internet address: https://www.google.de/policies/privacy/

You can permanently disable cookies for ad preferences by preventing them by

setting your browser software accordingly or you can download and install the

browser plug-in available at the following link

https://www.google.com/settings/ads/plugin?hl=de

Please note that certain functions of this website may not be available or may be

restricted if you have deactivated the use of cookies.

As far as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future. To exercise your

revocation, please follow the option described above to make an objection.

11.1 Hotjar (hotjar Ltd.)

This website uses the web analytics service Hotjar of Hotjar Ltd. Hotjar Ltd. is a

European company based in Malta (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe Tel.: +1 (855) 464-6788). This tool can be used to track movements on the websites on which Hotjar is used (so-called heat maps). For example, it is possible to see how far users scroll and how often they click on which buttons. Furthermore, with the help of the tool it is also possible to obtain feedback directly from the users of the website. In this way, we obtain valuable information to make our websites even faster and more customer friendly. The above analysis is carried out based on our legitimate interests in optimization and marketing purposes and the interest-based design of our website in accordance with Art. 6 para. 1 lit. f DSGVO. We pay particular attention to the protection of your personal data when using this tool. For example, we can only track which buttons you click and how far you scroll. Areas of the websites in which personal data of you or third parties are displayed are automatically hidden by Hotjar and are therefore not traceable at any time.

Hotjar offers every user the option of using a "Do Not Track header" to prevent the

use of the Hotjar tool so that no data is recorded about the visit to the respective

website. This is a setting that supports all common browsers in the respective current version. For this purpose, your browser sends a request to Hotjar with the instruction to deactivate the tracking of the respective user. If you use our website with different browsers/computers, you must set up the "Do Not Track header" separately for each of these browsers/computers. Detailed instructions with information about your browser can be found at:

https://www.hotjar.com/opt-out

Further information about Hotjar Ltd. and about the Hotjar tool can be found at:

https://www.hotjar.com

The Privacy policy of Hotjar Ltd. can be found at:

https://www.hotjar.com/privacy

As far as legally required, we have obtained your consent for the processing of yourdata as described above in accordance with Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future. To exercise your

revocation, please follow the option described above to make an objection.

11.2 Jetpack (formerly WordPress.com Stats)

This offer uses the web analytics service Jetpack (formerly WordPress.com-Stats),

which is operated by Automattic Inc, 60 29th Street #343, San Francisco, CA 94110-4929, USA, using tracking technology provided by Quantcast Inc, 201 3rd St, Floor 2, San Francisco, CA 94103-3153, USA. With the help of Jetpack, pseudonymized visitor data is collected, evaluated and stored on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes pursuant to Art. 6 (1) lit. f DSGVO. Pseudonymized usage profiles can be created and evaluated from this data for the same purpose. Jetpack uses so-called cookies, which are small text files that are stored locally in the cache of the site visitor's Internet browser. These cookies are used, among other things, to recognize the browser and thus enable a more accurate determination of statistical data. The data of the user's IP address is also collected, but it is pseudonymized immediately after collection and

before storage to exclude any personal reference.

The information generated by the cookie about your use of this website (including

the pseudonymized IP address) will be transmitted to and stored by Automattic Inc. on a server in the USA to protect the interests mentioned above.

Automattic Inc., based in the USA, is certified for the US-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.

To object to data collection and storage of your visitor data for the future, you can

download an opt-out cookie from Quantcast at the following link, which will have the effect that no visitor data from your browser will be collected and stored by Jetpack in the future: https://www.quantcast.com/opt-out

The opt-out cookie is set by Quantcast.

As far as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future. To exercise your

revocation, please follow the option described above to make an objection.

Google Ads Remarketing

Our website uses the functions of Google Ads Remarketing, with which we advertise for this website in Google search results, as well as on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). For this purpose, Google sets a cookie in the browser of your terminal device, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you visit. The processing is based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6 para. 1 lit. f DSGVO.

Additional data processing only takes place if you have consented to Google linking your internet and app browsing history to your Google account and using information from your Google account to personalize ads you view on the web. In this case, if they are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, Google temporarily links your personal data with Google Analytics data to form target groups. While using Google Ads Remarketing, personal data may also be transmitted to the servers of Google LLC. in the USA. You can permanently deactivate the setting of cookies for ad preferences by downloading and installing the browser plug-in available at the following link:

https://www.google.com/settings/ads/onweb/

Alternative you can find out more about the setting of cookies and make settings for this at the Digital Advertising Alliance at the internet address www.aboutads.info. Finally, you can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. If you do not accept cookies, the functionality of our website may be limited. If personal data is transferred to Google LLC. based in the USA, Google LLC. has certified itself for the US-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU. A current certificate can be viewed here:

https://www.privacyshield.gov/list

Further information and the data protection provisions regarding advertising and

Google can be viewed here:

https://www.google.com/policies/technologies/ads/

If legally required, we have obtained your consent pursuant to Art. 6 para. 1 lit. a

DSGVO for the processing of your data as outlined above. You can revoke your

consent at any time with effect for the future. To exercise your revocation, please

follow the option described above to make an objection.

Tidio Chat (Tidio Ltd.)

This website uses technology provided by Tidio Ltd. 220C Blythe Road, W14 0HH, London, United Kingdom (www.tidiochat.com) to collect and store anonymized data for the purposes of web analytics and to operate the live chat system used to respond to live support requests. Usage profiles can be created from this anonymized data under a pseudonym. Cookies can be used for this purpose. Cookies are small text files that are stored locally in the cache of the site visitor's Internet browser. The cookies enable the recognition of the Internet browser. If the information collected in this way has a personal reference, the processing is carried out in accordance with Art. 6 (1) lit. f DSGVO based on our legitimate interest in effective customer service and the statistical analysis of user behavior for optimization purposes. The data collected using TidioChat technologies will not be used to personally identify the visitor of this website without the separately granted consent of the data subject and will not be merged with personal data about the bearer of the pseudonym. To avoid the storage of TidioChat cookies, you can set your Internet browser so that in the future no cookies can be stored on your computer or already stored cookies are deleted. However, switching off all cookies may mean that some functions on our Internet pages can no longer be executed. You can object to the collection and storage of data for the purpose of creating a pseudonymized user profile at any time with effect for the future by sending us your objection informally by e-mail to the e-

mail address given in the legal notice.

14.1 The applicable data protection law grants you comprehensive data subject

rights (rights of information and intervention) vis-à-vis the responsible party with

regard to the processing of your personal data, which we inform you about below:

Right to information pursuant to Art. 15 DSGVO: You have the right

to information about your personal data processed by us, the processing

purposes, the categories of personal data processed, the recipients or

categories of recipients to whom your data have been or will be disclosed,

the planned storage period or criteria for determining the storage period.

the criteria for determining the storage period, the existence of a right to

rectification, erasure, restriction of processing, objection to processing,

complaint to a supervisory authority, the origin of your data if it has not

been collected from you by us, the existence of automated decision-

making, including profiling, and, if applicable, meaningful information

about the logic involved and the scope and intended effects of such

processing that concern you, as well as your right to be informed about

what guarantees exist in accordance with Art. 46 DSGVO when your data

is transferred to third countries;

Right to rectification pursuant to Art. 16 DSGVO: You have a right to

the immediate rectification of any incorrect data relating to you and/or

completion of any incomplete data stored by us;

Right to erasure pursuant to Art. 17 DSGVO: You have the right to

request the erasure of your personal data if the requirements of Art. 17

(1) DSGVO are met. However, this right does not exist in particular if the

processing is necessary for the exercise of the right to freedom of

expression and information, for compliance with a legal obligation, forreasons of public interest or for the assertion, exercise or defense of legal

claims;

• Right to restriction of processing pursuant to Art. 18 DSGVO: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you dispute, is being verified, if you refuse the deletion of your data due to unlawful data processing and instead request the restriction of the processing of your data, if you require your data for the assertion, exercise or defense of legal claims after we no longer need this data or if you have lodged an objection for reasons relating to your particular situation as long as it has not yet been determined whether our legitimate grounds prevail;

• Right to information pursuant to Art. 19 DSGVO: If you have asserted the right to rectification, erasure or restriction of processing against the responsible party, the responsible party is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.

• Right to data portability pursuant to Art. 20 DSGVO: You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another responsible party, insofar as this is technically feasible;

• Right to revoke consent given in accordance with Art. 7 (3) DSGVO: You have the right to revoke consent to the processing of data once given at any time with effect for the future. In the event of revocation, we will delete the data concerned without delay, unless further processing can be based on a legal basis for processing without consent. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until the revocation;

• Right of complaint pursuant to Art. 77 GDPR: If you consider that the processing of personal data concerning you infringes the GDPR, you have - without prejudice to any other administrative or judicial remedy - the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement.

15.2 RIGHT OF OBJECTION

IF WE PROCESS YOUR PERSONAL DATA WITHIN THE FRAMEWORK OF A WEIGHING UP OF INTERESTS ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION. IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA

CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

16) DURATION OF THE STORAGE OF PERSONAL DATA

The duration of the storage of personal data is determined on the basis of the

respective legal basis, the purpose of processing and - if relevant - additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).

When processing personal data based on explicit consent pursuant to Art. 6 (1) a

DSGVO, this data is stored until the data subject revokes his or her consent.

If there are legal retention periods for data that is processed within the scope of legal business or similar obligations based on Art. 6 Para. 1 lit. b DSGVO, this data will be routinely deleted after the retention periods have expired if it is no longer required for the fulfillment of the contract or the initiation of the contract and/or there is no legitimate interest on our part to continue storing it.

When processing personal data based on Art. 6(1)(f) DSGVO, this data is stored until the data subject exercises his or her right to object pursuant to Art. 21(1) DSGVO,

Unless we can demonstrate compelling legitimate reason for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims. When processing personal data for the purpose of direct marketing based on Art. 6 (1) lit. f DSGVO, this data is stored until the data subject exercises his or her right to object pursuant to Art. 21 (2) DSGVO.

Unless otherwise stated in the other information in this statement about specific

processing situations, stored personal data will otherwise be deleted when it is no

longer necessary for the purposes for which it was collected or otherwise processed.