Privacy Policy

The data privacy policy is only valid in German. Last updated 01.12.2022

Please note, that the Privacy Policy is only valid in German. Privacy Policy for U.S Customers can be found here.

1. information on the collection of personal data and contact details of the person responsible.

We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data here are all data with which you can be personally identified.

2. responsible for data processing on this website in the sense of the Data Protection Regulation (DSGVO) is:

TFJ Buycycle Ltd.

Ansbacher Str. 5

80796 Munich

Germany

Phone: +49 89 628 24621

E-mail: [email protected] (mailto:[email protected]@[email protected])

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible). You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.

2. data collection when visiting our website

During the mere informational use of our website, i.e. if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called "server log files"). When you call up our website, we collect the following data, which is technically necessary for us to display the website to you:

* Our visited website

* Date and time at the time of access

* Amount of data sent in bytes

* Source/reference from which you reached the page

* Browser used

* Operating system used

* IP address used (if applicable: in anonymized form).

The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website. A transfer or other use of the data does not take place. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

3. hosting

Hosted by Amazon Web Services, Inc. (AWS)

We use the system of Amazon Web Services, Inc. , 410 Terry Avenue North, Seattle WA 98109, United States, for the purpose of hosting and displaying the site content on the basis of processing on our behalf. All data collected on our website is processed on the servers of AWS. Within the scope of the aforementioned services, data may also be transmitted to servers of AWS in the USA as part of further processing on behalf. We have concluded an order processing agreement with AWS in which we oblige the provider to protect our users' data and not to pass it on to third parties.

For more information about AWS's privacy practices, please visit the following website: https://d1.awsstatic.com/legal/privacypolicy/AWS_Privacy_Notice__German_Translation1.pdf.

Further processing on servers other than the aforementioned AWS servers will only take place to the extent communicated below.

4. cookies

In order to make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and allow your browser to be recognized the next time you visit (so-called persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie. The duration of the respective cookie storage can be found in the overview of the cookie settings of your web browser.

In part, the cookies serve to simplify the ordering process by storing settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b DSGVO either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a DSGVO in the case of consent given, or in accordance with Art. 6 para. 1 lit. f DSGVO to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet explorer-delete-manage-cookies

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac

Opera: https://help.opera.com/de/latest/web-preferences/#cookies

Please note that if you do not accept cookies, the functionality of our website may be limited.

5. contact

1. personal data is collected when contacting us (e.g. via contact form or e-mail). Which data is collected in the case of the use of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration. The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Art. 6 (1) lit. f DSGVO. If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) lit. b DSGVO. Your data will be deleted after final processing of your request. This is the case when the circumstances indicate that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

2. WhatsApp business

We offer visitors to our website the opportunity to contact us via the messaging service WhatsApp of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called "business version" of WhatsApp.

If you contact us via WhatsApp on the occasion of a specific transaction (for example, an order placed), we store and use the mobile phone number you use on WhatsApp and - if provided - your first and last name pursuant to Art. 6 para. 1 lit. b. DSGVO to process and respond to your request. On the basis of the same legal basis, we may ask you to provide further data (order number, customer number, address or email address) via WhatsApp in order to be able to assign your request to a specific process.

If you use our WhatsApp contact for general inquiries (such as about the range of services, availability or our website), we store and use the mobile phone number you use on WhatsApp and - if provided - your first name and surname in accordance with Art. 6 (1) lit. f DSGVO based on our legitimate interest in the efficient and timely provision of the requested information.

Your data will only be used to respond to your request via WhatsApp. A transfer to third parties does not take place.

Please note that WhatsApp Business obtains access to the address book of the mobile device we use for this purpose and automatically transfers phone numbers stored in the address book to a server of the parent company Facebook Inc. in the USA. For the operation of our WhatsApp Business account, we use a mobile device in whose address book only the WhatsApp contact data of those users who have also contacted us via WhatsApp are stored.

This ensures that each person whose WhatsApp contact data is stored in our address book has already consented to the transmission of his WhatsApp telephone number from the address books of his chat contacts pursuant to Art. 6 (1) lit. a DSGVO when using the app on his device for the first time by accepting the WhatsApp terms of use. A transmission of data of such users who do not use WhatsApp and/or have not contacted us via WhatsApp is excluded in this respect.

For the purpose and scope of the data collection and the further processing and use of the data by WhatsApp, as well as your rights in this regard and setting options for protecting your privacy, please refer to WhatsApp's privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy

6. registration with the portal

You can register on our website by providing personal data. Which personal data is processed for the registration can be seen from the input mask used for the registration. We use the so-called double-opt-in procedure for the registration, i.e. your registration is only completed if you have previously confirmed your registration via a confirmation e-mail sent to you for this purpose by clicking on the link contained therein. If your confirmation is not received within 24 hours, your registration will be automatically deleted from our database. The provision of the aforementioned data is mandatory. You can provide all other information voluntarily by using our portal.

If you use our portal, we store your data required for the fulfillment of the contract, including any information on the method of payment, until you finally delete your access. Furthermore, we store the voluntary data you provide for the time of your use of the portal, unless you delete it beforehand. You can manage and change all information in the protected customer area. The legal basis is Art. 6 para. 1 lit. f DSGVO.

7. data processing when opening a customer account and for contract processing

Pursuant to Art. 6 para. 1 lit. b DSGVO, personal data will continue to be collected and processed if you provide it to us for the performance of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to the above address of the person responsible. We store and use the data provided by you for the purpose of processing the contract. After complete processing of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial law retention periods and deleted after expiration of these periods, unless you have expressly consented to further use of your data or a legally permitted further use of data was reserved by us.

8. use of single sign-on procedures

1. Facebook Connect

On our website, you can log in to create a customer account or register using the social plugin "Facebook Connect" of the social network Facebook, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), within the framework of the so-called single sign-on technique, if you have a Facebook profile. You can recognize the social plugins from "Facebook Connect" on our website by the blue button with the Facebook logo

and the words "Connect with Facebook" or "Log in with Facebook" or "Sign in with Facebook".

When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser and integrated into the page. Through this integration, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is transmitted by your browser directly to a server of Facebook Inc. in the USA and stored there. These data processing operations are carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of Facebook's legitimate interest in displaying personalized advertising based on your surfing behavior.

By using this "Facebook Connect" button on our website, you also have the option of logging in or registering on our website using your Facebook user data. Exclusively if, prior to the registration process, you have

on the basis of a corresponding notice about the exchange of data with Facebook give your express consent in accordance with Art. 6 (1) lit. a DSGVO, we receive when using the "Facebook Connect" button from Facebook, depending on your personally made privacy settings on Facebook, the general and publicly accessible information stored in their profile. This information includes the user ID, name, profile picture, age and gender.

We would like to point out that, following changes to Facebook's data protection conditions and terms of use, there may also be a transfer of your profile pictures, the user IDs of your friends and the friends list if these have been marked as "public" in your privacy settings on Facebook when you give your consent. The data transmitted by Facebook will be stored and processed by us for the creation of a user account with the necessary data (title, first name, last name, address data, country, e-mail address, date of birth), if these have been released by you at Facebook for this purpose. Conversely, data (e.g. information on your surfing or purchasing behavior) may be transferred from us to your Facebook profile based on your consent.

The consent given can be revoked at any time by sending a message to the responsible person named at the beginning of this privacy policy.

For the purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your rights in this regard and setting options for protecting your privacy, please refer to Facebook's privacy policy: https://www.facebook.com/policy.php

If you do not want Facebook to assign the data collected via our website directly to your Facebook profile, you must log out of Facebook before visiting our website. You can also prevent the loading of the Facebook plugins with Add-.

Ons for your browser completely, e.g. with "Adblock Plus".

(https://adblockplus.org/de/).

2. google sign-in

On our website, you can log in to create a customer account or register via the "Google Sign-In" service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") using the so-called single sign-on technology if you have a Google profile. You can recognize the Google login function on our website by the button "Sign in via Google" "Sign in with Google account" or "Sign in with Google".

When you call up a page of our website that contains a Google login function, your browser establishes a direct connection to Google's servers. The content of the login button is transmitted by Google directly to your browser and integrated into the page. Through this integration, Google receives the information that your browser has called up the corresponding page of our website, even if you do not have a Google profile or are not currently logged in to Google. This information (including your IP address) is transmitted by your browser directly to a Google server and stored there; this may also involve transmission to the servers of Google LLC. in the USA. These data processing operations are carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of Google's legitimate interest in displaying personalized advertising based on browsing behavior.

By using the Google login button on our website, you also have the option of logging in or registering on our website using your Google user data. Only if you give your express consent in accordance with Art. 6 (1) lit. a DSGVO before the registration process on the basis of a corresponding notice about the exchange of data with Google, we receive when using the Google button from Google, depending on your personally made privacy settings at Google, the general and publicly accessible information stored in their profile. This information includes the user ID, name, profile picture, age and gender.

We would like to point out that, following changes to Google's data protection conditions and terms of use, there may also be a transfer of your profile pictures, the user IDs of your friends and the friends list if these have been marked as "public" in your privacy settings at Google. The data transmitted by Google will be stored and processed by us to create a user account with the necessary data (title, first name, last name, address data, country, e-mail address, date of birth), if these have been released by you at Google for this purpose. Conversely, data (e.g. information on your surfing or purchasing behavior) may be transferred from us to your Google profile on the basis of your consent.

The consent given can be revoked at any time by sending a message to the responsible person named at the beginning of this privacy policy.

For the purpose and scope of the data collection and the further processing and use of the data by Google, as well as your rights in this respect and setting options for protecting your privacy, please refer to Google's privacy policy: https://policies.google.com/privacy?hl=de≷=en

You can view the terms of use for the use of "Google Sign-In" here: https://policies.google.com/terms

If you do not want Google to assign the data collected via our website directly to your Google profile, you must log out of Google before visiting our website. You can also completely prevent the loading of Google plugins with add-ons for your browser, e.g. with "Adblock Plus".

(https://adblockplus.org/de/).

9. comment function

In the context of the comment function on this website, in addition to your comment, information on the time of the creation of the comment and the commentator name selected by you will be stored and published on this website. Furthermore, your IP address is logged and stored. This storage of the IP address is done for security reasons and in case the person concerned violates the rights of third parties or posts illegal content through a submitted comment. Your e-mail address

We need this data to contact you if a third party objects to your published content as illegal. The legal basis for the storage of your data is Art. 6 para. 1 lit. b and f DSGVO. We reserve the right to delete comments if they are objected to by third parties as illegal.

10. use of customer data for direct advertising

1. subscribe to our email newsletter

If you subscribe to our e-mail newsletter, we will send you information about our offers on a regular basis. Mandatory information for sending the newsletter is only your e-mail address. The provision of further data is voluntary and will be used to address you personally. For the dispatch of the newsletter we use

the so-called double opt-in procedure. This means that we will only send you an e-mail newsletter after you have expressly confirmed that you consent to receiving newsletters. We will then send you a confirmation e-mail asking you to confirm that you wish to receive the newsletter in the future by clicking on an appropriate link.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 para. 1 lit. a DSGVO. When registering for the

newsletter, we store your IP address entered by your Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data we collect when you register for the newsletter will be used exclusively for the purposes of the

used for advertising purposes by means of the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the responsible person named at the beginning. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes,

permitted by law and about which we inform you in this statement.

2. goods availability notification by email

If we offer the possibility in our online store for selected, temporarily unavailable items to inform you by e-mail about the time of availability, you can subscribe to our e-mail notification service for the availability of goods. If you subscribe to our availability notification e-mail service, we will send you a one-time e-mail message about the availability of the item you have selected. Mandatory information for sending this notification is only your e-mail address. The provision of further data is voluntary and may be used to address you personally. For sending this notification we use the so-called double opt-in procedure. This means that we will only send you a corresponding notification once you have expressly confirmed that you consent to receiving such a message. We will then send you a b

estification e-mail asking you to confirm that you wish to receive such notification by clicking on an appropriate link.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 para. 1 lit. a DSGVO. When you register for our e-mail notification service for the availability of goods, we store your IP address entered by your Internet service provider (ISP) as well as the date and time of registration in order to be able to trace a possible misuse of your e-mail address at a later date. The data we collect when you register for our goods availability e-mail notification service is used solely for the purpose of informing you about the availability of a particular item in our online store. You can unsubscribe from the goods availability e-mail notification service at any time by sending a message to the responsible person mentioned at the beginning. After unsubscribing, your e-mail address will be deleted immediately from our distribution list set up for this purpose,

unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

11. data processing for order processing

1. - Transmission of image files for order processing via upload function.

On our website, we offer customers the opportunity to order the personalization of products by submitting image files via an upload function. The submitted image motif is used as a template for the personalization of the selected product.

Using the upload form on the website, the customer can transmit one or more image files from the memory of the end device used directly to us via automated, encrypted data transmission. We then record, store and use the transmitted files exclusively for the production of the personalized product as defined in the respective service description on our website. If the transmitted image files are passed on to special service providers for the production and processing of the order, you will be explicitly informed about this in the following paragraphs. Any further transfer will not take place. If the transmitted files or the digital motifs contain personal data (in particular images of identifiable persons), all of the processing operations just mentioned will be carried out exclusively for the purpose of processing your online order in accordance with Art. 6 Para. 1 lit. b DSGVO. After final processing of the order, the transmitted image files will be automatically and completely deleted.

2. in order to process your order, we work together with the service provider(s) listed below, who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution within the framework of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we will inform you explicitly about this below. The legal basis for the transfer of data is Art. 6 para. 1 lit. b DSGVO.

3. transfer of personal data to shipping service providers

- Paket.ag & Easylox GmbH

If the goods are delivered by Paket.ag & Easylox GmbH (Paket.ag & Easylox GmbH, Mühlweg 3 A , in 67105 Schifferstadt)

we will forward your e-mail address to Paket.ag & Easylox GmbH in accordance with Art. 6 Para. 1 lit. a DSGVO prior to delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided that you have given your express consent to this in the order process.

have given their consent. Otherwise, we will only pass on the name of the recipient and the delivery address to Paket.ag & Easylox GmbH for the purpose of delivery in accordance with Art. 6 (1) lit. b DSGVO. The disclosure is made only to the extent necessary for the delivery of goods. In this case, prior coordination of the delivery date with Paket.ag & Easylox GmbH or delivery notification is not possible.

The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis Paket.ag & Easylox GmbH.

4. use of payment service providers (payment services)

- Adyen N.V.

If you choose a payment method of the payment service provider Adyen, the payment will be processed by Adyen N.V., Friedrichstraße 63, Eingang Mohrenstraße 17, 10117 Berlin, to whom we pass on your information provided during the ordering process together with information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 para. 1 lit. b DSGVO. You can find more information about Adyen's data protection at the URL

https://www.adyen.com/de_DE/richtlinien-und-haftungsausschluss/privacy-policy

Adyen reserves the right to perform a credit check based on mathematical-statistical methods in order to safeguard the legitimate interest in determining the User's ability to pay. The personal data necessary for a credit check and received in the course of payment processing may be transmitted by Adyen to selected credit agencies, which Adyen discloses to users upon request. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, these have their basis in a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. Adyen uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the authorization to use the selected payment method.

You can object to this processing of your data at any time by sending a message to Adyen or the commissioned credit agencies.

However, Adyen may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

12. contacting the evaluation reminder

Rating reminder through Trustpilot

If you have given us your express consent to do so during or after your order in accordance with Art. 6 para. 1 lit. a DSGVO, we will transmit your email address to the Trustpilot rating platform of Trustpilot A/S, Pilestræde 58, 1112 Copenhagen K, Denmark (www.trustpilot.com), so that it sends you a rating reminder by email.

You may withdraw your consent at any time by sending a message to the data controller or to the rating platform.

13. use of social media: videos

Youtube video use

This website uses the Youtube embedding function to display and play videos from the provider "Youtube", which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

The extended data protection mode is used here, which, according to the provider, only triggers the storage of user information when the video(s) is/are played. If the playback of embedded Youtube videos is started, the provider "Youtube" uses cookies to collect information about user behavior. According to information from "Youtube", these are used, among other things, to collect video statistics, to improve user-friendliness and to prevent abusive behavior. If you are logged in to Google, your data is directly assigned to your account when you click on a video. If you do not want the assignment with your profile at YouTube, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation is carried out in particular in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of Google's legitimate interests in displaying

personalized advertising, market research and/or needs-based design of its website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. The use of YouTube may also result in the transmission of personal data to the servers of Google LLC. in the USA.

Independently of a playback of the embedded videos, a connection to the Google network is established each time this website is called up, which may trigger further data processing operations without our influence.

For further information on data protection at "Youtube", please refer to the Youtube Terms of Use at https://www.youtube.com/static?template=terms and Google's privacy policy at https://www.google.de/intl/de/policies/privacy.

Insofar as legally required, we have obtained your consent pursuant to Art. 6 (1) lit. a DSGVO for the processing of your data as described above. You can revoke your

Revoke consent at any time with effect for the future. To exercise your revocation, deactivate this service in the "Cookie Consent Tool" provided on the website.

14. online marketing

1. google AdSense

This website uses Google AdSense, a web advertising service Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses so-called cookies, which are text files placed on your computer, to help the website analyze how users use the site. In addition, Google AdSense also uses so-called "web beacons" (small invisible graphics) to collect information, through the use of which simple actions such as visitor traffic on the website can be recorded, collected and analyzed. The information generated by the cookie and / or web beacon (including your IP address) about your use of this website is usually transmitted to a Google server and stored there. This may also result in a transmission to the servers of Google LLC. in the USA.

Google uses the information obtained in this way to perform an evaluation of your usage behavior with regard to the AdSense ads. The IP address transmitted by your browser as part of Google AdSense will not be merged with other data from Google. The information collected by Google may be transferred to third parties if this is required by law and/ or if third parties process this data on behalf of Google.

The described processing of data is carried out in accordance with Art. 6 (1) lit. f DSGVO for the purpose of targeted advertising addressing of the user by advertising third parties, whose ads are displayed on this website based on the evaluated user behavior. This processing also serves our financial interest in exploiting the economic potential of our website by displaying personalized third-party advertising content in return for payment.

You can obtain more information about Google's privacy policy at the following Internet address: https://www.google.de/policies/privacy/

You can permanently disable cookies for ad preferences by preventing them by setting your browser software accordingly or you can download and install the browser plug-in available at the following link:

https://www.google.com/settings/ads/plugin?hl=de

Please note that certain functions of this website may not be available or may be restricted if you have deactivated the use of cookies.

As far as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the option described above to make an objection.

2. use of Google Ads conversion tracking

This website uses the online advertising program "Google Ads" and within the scope of Google Ads the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the offer of Google Ads to draw attention to our attractive offers with the help of advertising media (so-called Google Adwords) on external websites. We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. In this way, we pursue the aim of displaying advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of the advertising costs incurred.

The cookie for conversion tracking is set when a user clicks on an ad placed by Google Ads. Cookies are small text files that are stored on your terminal device. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked across Google Ads customers' websites. The information obtained using the conversion cookie is used to generate conversion statistics for Google Ads customers who have opted in to conversion tracking. Customers learn the total number of users who clicked on their ad and went to a website tagged with a conversion tracking tag.

page were forwarded. However, they do not receive any information with which users can be personally identified. If you do not wish to participate in the tracking, you can block this use by deactivating the Google conversion tracking cookie via your Internet browser under the keyword "User settings". You will then not be included in the conversion tracking statistics. We use Google Ads based on our legitimate interest in targeted advertising pursuant to Art. 6 (1) lit. f DSGVO. The use of Google Ads may also result in the transmission of personal data to the servers of Google LLC. in the USA.

You can obtain more information about Google's privacy policy at the following Internet address: https://www.google.de/policies/privacy/

You can permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the Google browser plug-in available at the following link:

https://www.google.com/settings/ads/plugin?hl=de

Please note that certain functions of this website may not be available or may be restricted if you have deactivated the use of cookies.

As far as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the "Cookie Consent Tool" provided on the website or alternatively follow the option described above to make an objection.

3. google marketing platform

This website uses the online marketing tool Google Marketing Platform of the operator Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("GMP").

GMP uses cookies to serve ads that are relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads more than once. Via a cookie ID, Google records which ads are displayed in which browser and can thus prevent them from being displayed more than once. The processing is based on our legitimate interest in the optimal marketing of our website according to Art. 6 para. 1 lit. f DSGVO.

In addition, GMP can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a GMP ad and later, using the same browser, calls up the advertiser's website and makes a purchase via this website. According to Google, GMP cookies do not contain any personal information.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our knowledge as follows: Through the integration of GMP, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider may obtain and store your IP address. In the context of the use of GMP, personal data may also be transmitted to the servers of Google LLC. in the USA.

If you wish to object to participation in this tracking process, you can disable cookies for conversion tracking by setting your browser so that

Cookies are blocked from the domain www.googleadservices.com, (see https://www.google.de/settings/ads), whereby this setting is deleted when you deactivate your cookies. Alternatively, you can obtain information about the setting of cookies from the Digital Advertising Alliance at the Internet address www.aboutads.info and make your desired settings. Finally, you can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. If you do not accept cookies, the functionality of our website may be limited.

You can obtain more information about the GMP by Google privacy policy at the following Internet address: https://www.google.de/policies/privacy/

15. web analytics services

Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.

This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures an anonymization of the IP address by shortening and excludes a direct personal reference. Through the extension, your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google LLC.server in the USA and shortened there. On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. In this context, the IP address transmitted by your browser as part of Google (Universal) Analytics will not be merged with other Google data.

Google Analytics also enables the creation of statistics with statements about the age, gender and interests of site visitors on the basis of an evaluation of interest-based advertising and with the inclusion of third-party information via a special function, the so-called "demographic characteristics". This allows the definition and differentiation of user groups of the website for the purpose of targeting marketing measures. However, data records collected via the "demographic characteristics" cannot be assigned to a specific person.

All processing described above, in particular the setting of Google Analytics cookies for the reading of information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) a DSGVO. Without this consent, Google Analytics will not be used during your visit to the site.

You can revoke your given consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website. We have concluded an order processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our site visitors and not to pass it on to third parties.

For the transfer of data from the EU to the USA, Google refers to so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.

You can find more information about Google (Universal) Analytics here:

https://policies.google.com/privacy?hl=de≷=en

16. tools and miscellaneous

1 - Debitoor

We use the cloud-based accounting software of Debitoor GmbH, Grunerstr. 13, 10179 Berlin ("Debitoor") to handle our accounting. Debitoor processes incoming and outgoing invoices and, if applicable, also the bank transactions of our company in order to automatically record invoices, match them to transactions and create the financial accounting from this in a partially automated process.

Insofar as personal data is also processed in this context, the processing is carried out in accordance with Art. 6 (1) lit. f DSGVO on the basis of our legitimate interest in the efficient organization and documentation of our business transactions.

For more information about Debitoor, the automated processing of data and data protection regulations, please visit https://debitoor.de/datenschutz.

2. cookieBot

This website uses the cookie consent tool of Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark ("CookieBot"), which sets technically necessary cookies to store your cookie preferences. This data processing is carried out pursuant to Art. 6 (1) lit. f DSGVO on the basis of our legitimate interest in providing a cookie consent management service to website visitors.

3rd - Google Maps

On our website, we use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Maps is a web service for displaying interactive (land) maps to visually display geographical information. By using this service, our location is shown to you and a possible approach is facilitated.

Already when calling up those sub-pages in which the map of Google Maps is integrated, information about your use of our website (such as your IP address) is transmitted to Google servers and stored there, this may also result in a transmission to the servers of Google LLC. in the USA. This occurs regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. The collection, storage and evaluation are carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of Google's legitimate interest in the display of personalized advertising, market research and / or needs-based

Design of Google websites. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. If you do not agree to the future transmission of your data to Google in the context of the use of Google Maps, you also have the option of completely deactivating the Google Maps web service by switching off the JavaScript application in your browser. Google Maps and thus also the map display on this website can then not be used.

You can read Google's terms of use at

https://www.google.de/intl/de/policies/terms/regional.html, the additional terms of use for Google Maps can be found at

https://www.google.com/intl/de_US/help/terms_maps.html

Detailed information on data protection in connection with the use of Google Maps can be found on the Google website ("Google Privacy Policy"): https://www.google.de/intl/de/policies/privacy/

Insofar as legally required, we have obtained your consent pursuant to Art. 6 (1) lit. a DSGVO for the processing of your data as described above. You can revoke your

Revoke your consent at any time with effect for the future. To exercise your revocation, please follow the option described above to make an objection.

17. rights of the data subject

(1) The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, which we inform you about below:

* Right of access pursuant to Art. 15 DSGVO: In particular, you have the right to obtain information about your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or criteria for determining the storage period. the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it has not been collected from you by us, the existence of automated decision-making, including profiling, and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing that concern you, as well as your right to be informed about what guarantees exist in accordance with Article 46 of the GDPR when your data is transferred to third countries;

* Right to rectification pursuant to Art. 16 DSGVO: You have a right to the immediate rectification of any incorrect data relating to you and/or completion of any incomplete data stored by us;

* Right to erasure pursuant to Art. 17 DSGVO: You have the right to request the erasure of your personal data if the requirements of Art. 17 (1) DSGVO are met. However, this right does not exist in particular if the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims; * Right to restriction of processing pursuant to Art. 18 DSGVO: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you dispute, is verified, if you refuse the erasure of your data due to unlawful data processing and instead request the restriction of the processing of your data, if you need your data for the assertion, exercise or defense of legal claims after we no longer need this data after the purpose has been achieved or if you have filed an objection for reasons relating to your particular situation as long as it has not yet been determined whether our legitimate grounds prevail;

* Right to information pursuant to Art. 19 GDPR: If you have exercised the right to rectification, erasure or restriction of processing vis-à-vis the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this turns out to be

impossible or is associated with a disproportionate effort. You have the right to be informed about these recipients.

* Right to data portability pursuant to Art. 20 DSGVO: You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller, insofar as this is technically feasible; * Right to revoke consent given pursuant to Art. 7 (3) DSGVO: You have the right to revoke consent to the processing of data once given at any time with effect for the future. In the event of revocation, we will immediately delete the data concerned, unless further processing can be based on a legal basis for processing without consent. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until the revocation;

* Right to lodge a complaint pursuant to Art. 77 GDPR: If you consider that the processing of personal data concerning you infringes the GDPR, you have - without prejudice to any other administrative or judicial remedy - the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement.

2. right of objection

If, in the context of a balancing of interests, we process their personal data on the basis of our overriding legitimate interest, they have the right to object to this processing with effect for the future at any time on grounds arising from their particular situation.

If you exercise your right to object, we will stop processing the data concerned. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing which override their interests, fundamental rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims.

If their personal data is processed by us for the purpose of direct marketing, they have the right to object at any time to the processing of personal data concerning them for the purpose of such marketing. They can exercise the objection as described above.

If they exercise their right to object, we will stop processing the data concerned for direct marketing purposes.

18. duration of the storage of personal data

The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of processing and - if relevant - additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).

When processing personal data on the basis of explicit consent pursuant to Art. 6 (1) a DSGVO, this data is stored until the data subject revokes his or her consent.

If there are statutory retention periods for data that is processed within the scope of legal or quasi-legal obligations on the basis of Art. 6 Para. 1 lit. b DSGVO, this data will be routinely deleted after expiry of the retention periods, insofar as it is no longer required for the fulfillment of the contract or the initiation of the contract and/or there is no continued legitimate interest on our part in the continued storage.

When processing personal data on the basis of Art. 6(1)(f) DSGVO, this data is stored until the data subject exercises his or her right to object pursuant to Art. 21(1) DSGVO, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct marketing on the basis of Art. 6 (1) lit. f DSGVO, this data is stored until the data subject exercises his or her right to object pursuant to Art. 21 (2) DSGVO.

Unless otherwise stated in the other information in this statement about specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Status: 19.05.2021

Our social media presences

Data processing through social networks

We maintain publicly accessible profiles on social networks. The social networks used by us in detail can be found below.

Social networks such as Facebook, Twitter, etc. can usually analyze your user behavior extensively if you visit their website or a website with integrated social-

media content (e.g. like buttons or advertising banners). Visiting our social media presences triggers numerous processing operations relevant to data protection. In detail:

If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected under certain circumstances if you are not logged in or do not have an account with the respective social media portal. In this case, this data collection takes place, for example, via cookies that are stored on your end device or by recording your IP address.

With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside the respective social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are or were logged in.

Please also note that we cannot track all processing operations on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and data protection provisions of the respective social media portals.

Legal basis

Our social media presences are intended to ensure the most comprehensive presence possible on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO. The analysis processes initiated by the social networks may be based on different legal bases, which are to be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 para. 1 lit. a DSGVO).

Responsible person and assertion of rights

If you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. In principle, you can assert your rights (information, correction, deletion, restriction of processing, data portability and complaint) both against us and against the operator of the respective social media portal (e.g. against Facebook).

Please note that despite the joint responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are largely determined by the corporate policy of the respective provider.

Storage duration

The data collected directly by us via the social media presence will be deleted from our systems as soon as you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies. Stored cookies remain on your terminal device until you delete them. Mandatory legal provisions - in particular retention periods - remain unaffected.

We have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

Social networks in detail

Facebook

We have a profile on Facebook. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. According to Facebook, the collected data is also transferred to the USA and other third countries.

We have entered into a joint processing agreement (Controller Addendum) with Facebook. This agreement specifies which data processing operations we or Facebook are responsible for when you visit our Facebook page. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.

You can adjust your advertising settings independently in your user account. To do so, click on the following link and log in:

https://www.facebook.com/settings?tab=ads.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:

https://www.facebook.com/legal/EU_data_transfer_addendum and https://de en.facebook.com/help/566994660333381.

For details, see Facebook's privacy policy:

https://www.facebook.com/about/privacy/.

Instagram

We have a profile on Instagram. The provider is Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:

https://www.facebook.com/legal/EU_data_transfer_addendum,

https://help.instagram.com/519522125107875 and https://de

de.facebook.com/help/566994660333381.

For details on how they handle your personal data, please see Instagram's privacy policy: https://help.instagram.com/519522125107875.

YouTube

We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For details on how they handle your personal data, please refer to YouTube's privacy policy: https://policies.google.com/privacy?hl=de.