Privacy policy

1. OUR PRIVACY POLICY

{{whitelabelName}} is operated by {{whitelabelCompanyName}} ("{{whitelabelName}}" / "we" /"us").

The protection of your personal data is a central concern for us. Within the framework of this dataprotection declaration, we therefore inform you about the type, scope and purpose of the collection, processing and use of your personal data.

We collect, process and use your personal data exclusively in accordance with the principles described below and the requirements of the EU General Data Protection Regulation ("GDPR") and the Federal Data Protection Act.

Personal data is any information relating to an identified or identifiable natural person (hereinafter "data subject"). This includes in particular so-called inventory data such as your name, email address and phone number, which are collected by {{whitelabelName}} on the web or in the app during registration, but also usage data, such as information about the time of platform use, browser, the app version you use, and other data generated during use.

2. WHO ARE WE?

{{whitelabelName}} is operated by {{whitelabelCompanyName}}, {{whitelabelCompanyAddress}}.

If you have any questions regarding data protection at {{whitelabelName}}, you can contact us at info@{{whitelabelDomain}} or via our data protection officer:
{{whitelabelCompanyAddress}}, e-mail: {{whitelabelCompanyMail}}

The competent supervisory authority for {{whitelabelName}} is:
The Hamburg Commissioner for DataProtection and Freedom of Information
Ludwig-Erhard-Straße 22, 7th floor
20459 Hamburg
Germany
Phone: +49 40/42854-4040
Fax: +49 40/42854-4000
E-mail: mailbox@datenschutz.hamburg.de
Homepage: https://datenschutz-hamburg.de/

3. TO WHOM DOES THE PRIVACY POLICY APPLY?

This privacy policy is intended for visitors to our {{whitelabelName}} portal (web, app) as well as visitors who access our services via third-party websites that embed our service, regardless of the system they use to access them (mobile, desktop).

4. WHAT PERSONAL DATA DO WE COLLECT FROM YOU?

We collect your personal data when you create an account with us.

When you use our services, we collect, use, store and transfer various types of personal data. As a matter of policy, we do not collect or ask you to provide "special categories of personal data," i.e., specially protected information such as sensitive data about ethical origin, health, religion, political opinions, sexual preferences or sexual orientation. Intentionally, therefore, we do not collect any Sensitive Data from you. However, we cannot control what content you post on {{whitelabelName}}, send via {{whitelabelName}}, or exchange in chats with content creators. Although we strive to protect your privacy, we cannot distinguish a message you post with particularly sensitive content from less sensitive messages. Please note that we do not offer any additional protection to such messages accordingly.

The data we collect depends on which of our services you use and how you use them. We process the following types of your personal data:

4.1 Personal data provided by you

When you use our services, you provide or are asked to provide us with certain information. In particular, we collect:

Your account details: To use our services, you need to create an account. This allows you to use our services on different devices. When you create your account, we collect your login details (email address, password, date of birth, fan/creator name/avatar name) and additional profile data that you provide to us to personalise your profile (e.g. the chosen look of your avatar). This data is linked to their account.

Data due to the use of our online shop: When you purchase content, virtual goods or subscriptions on {{whitelabelName}}, we process this information together with your account details in order to provide you with our services.

Transaction data: We also collect and process information provided in connection with content and virtual goods transactions and payments, in particular the type and number of virtual goods purchased, data on the duration and type of subscriptions, order data). In addition, we collect transaction data, such as payment method, status and date. We do not collect credit card data, this is forwarded to an external payment service provider for the processing of your payment, we only receive the details of the payment confirmation from our payment service provider.

Creator-Fan Interactions: We store all interactions between creators and fans in our secure database. This includes, in particular, all messages and content exchanged via WhatsApp or iMessage. This is necessary to enable communication between creators and fans through our service.

Public chats and forums: Chat, forum and community environments or other tools are offered through our services that are not restricted to a particular audience. If you provide personal information when using any of these features, that personal information may be publicly posted and otherwise disclosed without restriction as to its use by us or any third party. If you choose to post personal information in public forums on our Service, you must be aware that, as noted above, such information will be visible to others. To request the removal of your personal data from a public forum of one of our services, please contact customer support at: info@{{whitelabelDomain}}

Private Chat Messages: Information sent either individually or within a limited group via our message, chat, post or similar function.

Please note that when using the chat function, the information you share can be read, copied, collected or used by other users. Never share information or personal data that could be detrimental to yourself or others.

Correspondence with our customer service and data and information provided in connection there with: When you contact customer service, we collect your contact information (email address or phone number), information about your request, i.e. subject, description of your request, your relationship with {{whitelabelName}}, whether you are a fan, creator or parent of a fan, the username/account that specifically relates to your request, and any other information provided in connection there with.

4.2 Personal data we receive or generate through your use of our services

When you use our services, we also process device-related data and information about how you interact withour services, in particular:

Technical information: We collect information about your device/settings for the purposes described below. The information we receive from your devices includes device type, device IDs, online identifiers (IP address), timestamps, geolocation data (based on your IP address), URLs visited, browser settings, screen resolution and other technical data.

Cookie Data: As described in more detail in our Cookie Notice, we use cookies and similar technologies such as pixels or local storage and allow third parties to use cookies and similar technologies for the purposes described below. You can find out all about the exact process of placing cookies and the scope of the data that can subsequently be processed in our Cookie Notice.

Data about your individual use of our services: We collect information about your use of our services. This includes the actions you take on the portal, e.g. participation in content creator interactions such as voting and predictions, the energy you use when participating in interactions and the rewards you receive (stars), the time and duration of your activity and your interaction with advertising (clicks, conversions and creative views). In addition, we collect information about the websites that referred you to our service. Some of this information is stored in your account (e.g. the status of your Energy and Stars).

4.3 Personal data we receive from third parties

In certain cases, we also receive your personal data from third parties in strict compliance with applicable data protection laws and regulations. Your personal data may be provided by the following third parties:

Payment service providers:: For payments made using our service, within the app or on the website, an external payment service provider processes the transaction. This is done in accordance with the privacy policies of the respective provider. We do not receive full financial data (such as credit card numbers), but only information about the transaction (e.g., payment method, status, and date).

Third Party Social Networks and Connected Platforms: For example, when you connect our Service to your Instagram, Facebook, Google, Microsoft or Apple account using your logincredentials in our login process, we receive certain information about you from third party platforms, such as your social network identifier, first and lastname, email address, age group, and authentication token.

Other third party providers: We also receive information about your approximate geolocation (the country you are in) from third parties (e.g. Google). We use this information to comply with our legal obligations when processing your personal data, to customise certain services to your location and to prevent fraud or abuse in connection with our services.

5. Cookies

6. DATA OF MINORS

Our Services are not directed at or intended for use by anyone under the age of 13. Our Terms of Use prohibit users under the age of 18 from accessing and using {{whitelabelName}}. If we learn that we have collected personal information from a user under 18, we will delete that information immediately.

7. FOR WHAT PURPOSE DO WE PROCESS YOUR PERSONAL DATA?

We process your personal data for the following purposes:

Providing and improving our services to help you
▪ to enable the use of our services,
▪ facilitate communication on the platform (e.g. via chat),
▪ to allow you to create and manage your account,
▪ enable the recovery of your customer account should your access data be lost,
▪ To facilitate purchases in the online shop, as well as to verify and confirm your payment,
▪ facilitate the sharing of content on social networks,
▪ provide technical support and respond to your enquiries.

Furthermore, from atechnical point of view, in particular to
▪ Identify and correct bugs/errors,
▪ indicate the popularity of our services,
▪ assess the quality of our services,
▪ Understand and improve your online experience.

For the purpose of personalising your user experience on the Platform in order to
▪ Save your preferred user settings,
▪ recognise you the next time you visit one of our services.

For marketing and analysis purposes to
▪ Play appropriate (personalised) third-party advertising to you onour services and measure its effectiveness,
▪ Show you (personalised) advertisements for our services on other websites or apps and measure their effectiveness,
▪ Pay our business partners for advertising our services
▪ Send you - subject to your consent - advertisements, including newsletters and push notifications, informing you of new content and offersfrom {{whitelabelName}},
▪ attract new users (followers) on social media platforms.

For contractual reasons or prevention of illegal activities on or in connection with {{whitelabelName}}, inparticular in order to
▪ Prosecute fraud and illegal behaviour in our services,
▪ Enforce our terms of use and policies,
▪ to fulfil our legal or regulatory obligations,
▪ Determine the legal requirements for processing your personal data (based on your location and age),
▪ Keep records in relation to purchases made in the online shop,
▪ To respond to your enquiries regarding your rights as a data subject,
▪ to fulfil our legal (record-keeping) obligations in tax or accounting terms,
▪ Inform you of any changes to this privacy policy,
▪ prevent offensive language and abusive behaviour when communicating on the platform.

8. PROFILING

If you give your consent, we use tracking mechanisms to track your personal data for profiling purposes. This allows us to provide you with relevant content and tailor our services and ads to your interests. You have the right to object to this type of processing. You can also check your privacy choices in relation to this type of processing at any time in your customer account or cookie settings and change them if you wish.

9. WHATDO WE USE YOUR DATA FOR AND ON WHAT LEGAL BASIS?

We only process your personal data in compliance with the relevant data protection regulations. This means that your data will only be processed if we have legal permission to do so.

This is particularly the case if the data processing isnecessary for the provision of our contractual services or is required by law, if the users have given their consent, and if it is also based on our legitimate interests (i.e. interest in the analysis, optimisation and economi coperation and security of our online offer within the meaning of Art. 6 Para. 1lit. f. DSGVO, in particular in the case of range measurement, creation of profiles for advertising and marketing purposes and collection of access data and use of third-party services).

Consent has been given or if it is necessary for the protection of our legitimate interests within the meaning of Article 6(1)(f) of the GDPR. 6 para. 1 lit. b. DSGVO, the legal basis for processing to fulfil our legal obligations Art. 6 para. 1 lit.c. DSGVO, and the legal basis for processing to protect our legitimate interests Art. 6 para. 1 lit. f. DSGVO are.

Specifically, we refer to:

Your consent to data use by {{whitelabelName}}: We process your personal data if you have given your consent for a specific purpose. We ask for your consent to data processing in the context of sending newsletters, personalised advertising, analytics and profiling. We also regularly display contextual notifications and consent pop-ups to obtain your consent for further processing activities. You have the right to withdraw your consent at any time, for example by changing your account or cookie settings. You can also unsubscribe from newsletters at any time either by using the link in our emails or in your email settings at the player account. The revocation is only effective for the future and does not affect the legality of data processing carried out before the revocation.

We also process special categories of personal data—i.e., sensitive information such as ethnic origin, health, religion, political opinions, sexual orientation, or preferences—based on your consent (Art. 9(2)(a) GDPR). You may revoke this consent at any time with effect for the future. Please note that in such a case, you will no longer be able to use our services.Contract performance by {{whitelabelName}}: We process your personal data to perform or to take steps prior to the conclusion of a contract to which you are a party, e.g. when it is necessary for the creation and management of your account, to process your purchases in the online shop and related payments, as part of your support requests, to support the operation of the platform or to facilitate the delivery of requested services. If you win a non-cash prize on our platform, we also need your address to be able to deliver it to you.

Compliance with legal obligations by {{whitelabelName}}: We process your personal data to comply with our legal obligations. (Age verification, accounting/tax obligations, litigation). For example, when you purchase virtual goods in our online shop and the facilitation of interactions between creators and users, this interactionis processed via third-party payment services. If a purchase was successful, we receive this information in the form of a digital invoice with details of the date, price and type of item purchased, payment method, VAT, etc.) . We store this to fulfil our legal record keeping obligations and to be able to produce it in the event of a dispute. Please note: We do not have access to credit cardnumbers or Card Verification Code (CVC) numbers. It is not possible to processor pass on corresponding data to third parties.

Legitimate interests of {{whitelabelName}} as well as third parties: We also process your personal data to the extent that the processing is necessary for our legitimate interests or the interests of third parties. In doing so, we take appropriate protective measures to protect your privacy.

To ensure the security of our website and prevent fraud, we store data such as your IP address and device information when you access our website. Your device data and IP address are stored and logged to enable forensic fraud and privacy investigations. Your IP address is also automatically processed by our network devices - this process is necessary to provide our website, but also to deny access to IP addresses identified as dangerous. We cannot offer to prevent this process as it would undermine the purpose (and in some cases is technically impossible - for example, we cannot prevent your IP address from being processed by our network devices). If you wish to object to this process, please do not use our website.

In order to optimise our marketing campaigns and our website, we collect information about your behaviour and preferences. This data is pseudonymised and stored separately from your account data. Although this data is stored individually, it is only accessible to the staff who need to work with it and reports that rely on the data do so in aggregate form only. In the course of campaign optimisation, we share some of this data with third-party trackers via a tracking pixel on our website. For more information on trackers and how to object to their processing, please see the Web and App Analytics section.

10. HOW LONG DO WE STORE YOUR DATA?

We will retain your personal data only for as long as is necessary to fulfil the purposes for which the data was collected or to comply with our legal obligations or to establish, exercise or defend legal claims or settle disputes. Thereafter, we will delete or anonymise your personal data.

We store data that we hold for legal reasons for as longas we are legally required to do so (up to ten years).

Data related to legal disputes: generally 3 years, in individual cases up to 30 years.

Network log data: Deletion occurs regularly, depending on configuration, backup status, and storage cycle – however, retention is limited to a maximum of 2 years.

User accounts and associated data: until your account is deleted, provided there is no legal basis for further processing (e.g., statutory retention obligations).

Transaction data: stored for a period of up to 10 years in accordance with statutory retention obligations (e.g. tax and commercial law), and deleted thereafter unless required for legal claims or other legitimate interests.

11. WHERE DO WE STORE AND PROCESS YOUR DATA, HOW DO WE PROTECT IT AND WITH WHOM DO WESHARE IT?

Generally, your personal data is stored on servers within the European Union (EU)/European Economic Area (EEA).

If, in individual cases, your personal data is stored or processed on servers outside the European Union (EU)/European Economic Area(EEA), we have taken appropriate security measures to protect your personal data when it is transferred to countries outside the EU/EEA. This includes, in particular, the application of the European Commission's standard data protection clauses.

We have implemented appropriate technical and organisational security measures to protect your personal data against accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure or use. The technical and organisational security measures are reviewed on an ongoing basisand updated as necessary. In addition, we ensure contractually, among other things by concluding order processing agreements, etc., that third parties to whom we pass on your personal data guarantee sufficient protection of thepersonal data.

Your personal data within {{whitelabelName}}: Your personal data will onlybe processed by persons who need it to pursue our legitimate interests or to fulfil our contractual or legal obligations.

Your personal data outside {{whitelabelName}}: We only share your data where it is legally permissible to do so either when it isfor the performance of contracts you have with us (Article 6(1)(b) DSGVO) or on the basis of legitimate interests (Article 6(1)(f) DSGVO). Your personal data is only shared to the extent necessary for the provision of our services or for other purposes specified under Sections 7 and 9, and where there is a legal basis for doing so. Primarily, we share your personal data with trusted service providers acting on our behalf.

We share data with providers in the following categories:

Hosting providers and content distribution networks. They generally do not have direct access to our systems, but provide network infrastructure that must process your IP address to deliver our assets.

Payment providers. When you make a payment through a payment provider, we receive billing information from them. Any payment details required to make an actual payment on your behalf will only beprocessed by the payment providers, not by us.

Collection service. If you cancel a payment you have made, we may share the information we have with the collection agencies so that they can contact you on our behalf.

Email marketing serviceproviders. We share your email address, ad name and location information and whether you are currently subscribed to our newsletter with our email marketing service providers so that they can send you relevant emails.

Single sign-on providers. These are only relevant if you play our games via their websites or deliberately use single sign-on options offered. In this case, our interaction with the providers enables youto sign on to our gaming platform. If you change your mind, the providers will usually offer a way to unlink your single sign-on account from our website (by removing our access to your metadata). You can find more information in the documentation of the respective provider.

Business intelligence. We use providers that help us analyse our own tracking data in a structured way.

Crash reports. Our mobile games integrate crash reporting features. The crash reports only contain anonymous information. However, you can object to this in the settings of the apps.

Partners, brands and performance marketing. To enable brands, partners and campaigns to measure theirown effectiveness, we integrate various trackers on our website. For more information, please see the Web and App Analytics section of this Privacy Policy.

Address verification. Before we send prizes to a postal address, we first ensure that the address is correct by having it processed by an address verification service.

Geolocation. We receive data from geo-location services about the approximate geographic location of IP addresses.(We do not share any information with these services, we are only consumers of this data).

Support ticketing system. We use an external provider to handle our support ticketing for us. Every support ticket you write to us via official channels is stored with this provider.

Video streaming. In some cases, we use video streaming services to show you advertisements. Your impression of these videos is recorded by these services.

The providers we use are either located in the European Union, in a country that is considered safe according to the European Union's data protection standards, or contractually agree to treat your data with the utmost care. If the process allows, we anonymise or pseudonymise your data.

Under no circumstances do we sell your data to third parties.

We also share contact information between creators and users to enable communication via WhatsApp or iMessage. {{whitelabelName}} provides the technical infrastructure to facilitate communication between creators and users and to enable the sharing of content, potentially in exchange for payment by the user. The creator is solely responsible for managing access to their account and keeping their password confidential. Please note that creators may have employees or service providers who assist them in communicating with fans through our services. {{whitelabelName}} is not involved in this.

12. INFORMATION ON YOUR RIGHTS

We are based in Hamburg, Germany, i.e. in the European Union. We are committed to complying with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act. This gives you several inherent rights to your personal data.

You have the right
▪ request access to your personal data (Article 15 GDPR) and receive it in a commonly used, machine-readable format (Article 20 GDPR),
▪ request a correction of your personal data (Article 16 GDPR),
▪ request a restriction of the processing of your personal data(Article 18 GDPR),
▪ request the erasure of your personal data (Article 17 GDPR),
▪ object to the processing of your data if the lawfulness of the data processing is based on our legitimate interest (Article 7 (3) and Article21 DSGVO),
▪ lodge a complaint with a supervisory authority (Article 77 GDPR).

You can easily request the deletion of your data in the settings for your account. For all other enquiries, please contact us either via the support widget on our platform or contact us by email (info@{{whitelabelDomain}}). If you contact us via a channel other than the support widget, please note that we may need to ask you to prove your identity - after all, neither you nor we want a stranger to have access to your data.

Please note that it may takeup to 30 days for us to process your request. If there are any delays, we will inform you immediately.

13. INSTRUCTIONS FOR DELETING YOUR DATA OR YOUR GAMING ACCOUNT ON THE WEB AND IN THE APP

* Log in with your access data for the applicable game account

* Open your profile

* Scroll to the item"Delete account" and click on it.

* Confirm the deletion

Please note that deletion maytake a few days.

14. YOUR RIGHT TO INFORMATION, CORRECTION AND DELETION OF YOUR PERSONAL DATA

You may at any time request to be informed whether and how your personal data is processed by {{whitelabelName}}, the purposes of such processing and to receive a copy of your personal data. Specifically, you can request information about:

▪ the purposes for which the data are processed,

▪ the categories of personal data that are processed,

▪ the categories of recipients with whom we have shared the data,

▪ the intended storage period,

▪ Your rights in relation to this data (rectification, erasure, restriction, withdrawal of consent and lodging a complaint with the supervisory authority),

▪ the source of the data in cases where we have not obtained the data directly from you,

▪ and the existence of automated decision-making based on that data, including profiling, and your right to request meaningful information about the algorithms used.

If you make this request electronically, the information will be provided in a common electronic format. In principle, the information will be provided free of charge. If you make this request more than once, {{whitelabelName}} may charge you a fee to cover administrative costs.

You also have the right,

▪ request a correction from us if your data is incorrect or incomplete.

▪ request us to delete your personal data,

▪ if they are no longer necessary for the purposes for which they were collected or processed;

▪ where consent which served as the basis for the processing has been withdrawn and there is no other basis which would justify such processing;

▪ your personal data have been processed unlawfully;

▪ your personal data is to be deleted in accordance with a legal requirement;

If we delete data that we have passed on to third parties, we will also contact these third parties and ensure that your data is deleted there as well.

If we delete information that we have disclosed in the course of providing our services to you, we will contactthird party service providers who may have cached that information and forward your request for deletion to them.

15. RIGHT TO RESTRICT THE PROCESSING OF PERSONAL DATA (ARTICLE 18 GDPR)

You can exercise your right to restrict the processing of your personal data if:

you dispute the accuracy of your personal data for the time necessary to verify the accuracy of that data;

the processing of your personal data is unlawful, but you refuse erasure and request restriction of processing instead;

we no longer need your personal data, but you still need such personal data for the establishment,exercise or defence of legal claims.

16. RIGHT TO DATA PORTABILITY (ARTICLE 20 GDPR)

You have the right to receive the personal data we hold about you in a structured, commonly used and machine-readable format and to have this data transferred unhindered from {{whitelabelName}} to another responsible party.

Where technically feasible, you may request that your personal data be transferred directly to another controller by {{whitelabelName}}.

17. RIGHT TO WITHDRAW CONSENT (ARTICLES 7(3) AND 21 OF THE GDPR)

We will only process your personal data with your consent unless the data processing is otherwise necessary.

If you have registered an account with us, you can withdraw your consents at any time by changing the settings associated with your account (or by deleting your account directly if you prefer). If you do not have a registered account with us, please see the Web and App Analytics section for information on how to opt out of other data collection.

Please note that withdrawal of your consent does not affect the lawfulness of the processing prior to the withdrawal.

18. RIGHT TO COMPLAIN TO YOUR SUPERVISORY AUTHORITY (ARTICLE 77 GDPR)

If, despite our efforts to protect the confidentiality of your personal data, you believe that your rights have not been respected, you have the right to lodge a complaint with the data protection supervisory authority competent in your country.

19. OBJECTION TO THE PROCESSING OF YOUR DATA FOR DIRECT MARKETING PURPOSES

When you register an account with us, you have the option to subscribe to our newsletters. You can unsubscribe from our newsletters at any time using the unsubscribe links in the email footer or in your account settings.

20. WEB AND APP ANALYTICS

In order to improve our website and app, correct errors, optimise the platform and promote our campaigns, we store pseudonymised data about the behaviour of our visitors on our website and use various tracking services (based on Article 6 (1) lit. f DSGVO).

These services use either cookies (desktop) or device IDs (mobile) so that they can correlate the behavioural data they collect from you (for example, to determine how long the average user has spent on our website or the proportion of users who have visited our website and registered with us).

The data exchanged may include information about when you registered with us, where you came from (which banner you clicked or which game page you play our games on), your device parameters (e.g. operating system, brand), your user ID in our games, page impressions (time and page ID) or payments you make.

The trackers use this data either to create approximate behavioural profiles of you (to provide better marketing targeting to users of their services) or to enable us to pay for our campaigns through registration events or paying users rather than impressions ("performance marketing").

21. USE OF COOKIES AND RELATED FUNCTIONS /TECHNOLOGIES

21.1 Right of objection

If you object to the use of this pseudonymised processing of your data, your opt-out options are as follows:

, for tracking to endpoints controlled by us: http://www.{{whitelabelDomain}}/trackingoptout

Your browser must accept cookies for the opt-out process to work.

For mobile devices, for tracking towards endpoints controlled by us, you can adjust the settings in the app itself.

We use:

Sentry.io (FunctionalSoftware, Inc. dba Sentry, with registered office: 132 Hawthorne Street, SanFrancisco, CA 94107; email: security@sentry.io; web: https://sentry.io/welcome/) for error reporting.

You can also deactivate this error reporting in the settings.

21.2. Cookies (general)

Background: We sometimes use so-called cookies on our website. Cookies do not cause any damage to yourcomputer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure and to enable the provision of certain functions. Cookies are small text files that are stored on your computer and saved by your browser. A cookie contains a characteristic string of characters that enables your browser to be uniquely identified when you return to the website.

Most of the cookies we use are so-called "session cookies". They are automatically deleted after the end of your visit or browser session (so-called transient cookies). Other cookies remain stored on your end device for a specified period of time or until you delete them (so-called persistent cookies). These cookies enable us to recognise your browser on your next visit. Upon written request, we will be happy to provide further information on the functional cookies used. Please contact us using the above contact details.

You can set your browser sothat you are informed about the setting of cookies and only allow cookies inindividual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. You can regularly obtain the procedure for deactivating cookies via the "Help" function of your Internet browser. If cookies are deactivated, the functionality and/or complete availability of this website maybe limited. For further cookie-specific setting and deactivation options, please also see below the individual explanations of the cookies and associated functions/technologies specifically used when visiting our website.

Some of the cookies we use onour website come from third parties that help us analyse the impact of our website content and the interests of our visitors, measure the performance of our website or serve ads and other content to our website or other websites. As part of our website, we use both first party cookies (only visible from the domain you are visiting) and third party cookies (visible across domains and regularly set by third parties).

The cookie-based data processing is carried out on the basis of your consent pursuant to Art. 6 (1)sentence 1 lit. a DSGVO (legal basis) or on the basis of Art. 6 (1) sentence 1 lit. f DSGVO (legal basis) to protect our legitimate interests. In particular, our legitimate interests lie in being able to provide you with a technically optimised website that is user-friendly and tailored to your needs, and to ensure the security of our systems. You can revoke the consent you have given us at any time, e.g. by deactivating the cookie-based tools/plugins listed in detail in the following overview. By making the appropriate settings, you can also object to processing based on legitimate interests.

In detail, the following cookie-based tools/plugins are used within the framework of this website:

This website uses the functions of Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, on the basis of the consent you have given us (Art. 6 (1) sentence 1 lit. a DSGVO).You can give us your consent voluntarily when you call up our website by clicking on the corresponding button in the "cookie banner". Data is also regularly transmitted to Google LLC (1600 Amphitheatre Parkway, MountainView, CA 94043, USA) as part of the processing described below. Google Ireland Limited and Google LLC are herein after jointly referred to as"Google". Google Analytics uses cookies (first-party cookies), which enable an analysis of your use of the website. However, this does not mean that we gain direct knowledge of your identity. Google uses the information generated by the cookies on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity and providing others ervices relating to website activity and internet usage. This enables us to improve the quality of our website and its content. We learn how the website is used on the basis of statistical analyses and can thus continuously optimise our offer.

The information generated by the Google Analytics cookies about your use of this website (for example, time, place and frequency of your website visit including IP address) is transmitted to a Google server in the USA and stored there. We have set the storage period at Google for corresponding data at user and event level to 14 months (shortest possible setting option).

IP anonymisation

We have activated the IP anonymisation function on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it istransmitted to the USA, there by making it anonymous. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. According to Google's own information, the IP address transmitted by your browser within the scope of Google Analytics will not be merged with other Google data relating to your person.

Browser plugin

You can prevent Google Analytics cookies from being stored by setting your browser software accordingly (see above). You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data collection

Alternatively, you can activate/deactivate the collection of your data by Google Analytics, especially on mobile devices, by clicking on the following link:

Deactivate Google Analytics

If you deactivate this, a cookie will be set which prevents the collection of your data during future visits to this website.

Specifically, the following tracking cookies are used by Google Analytics:__utmz, __utma, __utmb, __utmc,__utmt.

More information on the handling of user data at Google Analytics and the security and data protection principles as well as setting and objection options can be found in Google's privacy policy, available via the following link: https://support.google.com/analytics/answer/6004245?hl=de.

Since you may also interact with the other trackers we use on other websites that are not operated by us, disabling these trackers on a single website will probably not meet your preferences. To help you effectively stop tracking from these providers, this section provides an overview of all trackers we use and where you can disable them.

You can also find the opt-out options for many tracking services at http://youronlinechoices.eu, which provides a consistent and centralised way to object to tracking by many tracking services. http://youronlinechoices.eu can also assist you if you wish to object to tracking by other providers that are not specifically used by us.

Unless otherwise stated(whether here or on our tracking partners' opt-out pages), your browser must accept cookies for the opt-out process to work.

21.3 Privacy and Cookie Settings with Cookiebot

We use the consent management service Cookiebot, of CybotA/S, Havnegade 39, 1058 Copenhagen, Denmark (Cybot). This enables us to obtain and manage the consent of website users for data processing. The processing is necessary to comply with a legal obligation (Art. 7 para. 1DSGVO) to which weare subject (Art. 6 para. 1 p. 1 lit. c DSGVO). For this purpose, the following data is processed with the help of cookies:

Date and time of consent. Browser information URL from which the consent was sent. An anonymous, random and encrypted key. Your end-user consent status, as proof of consent.

The key and consent status are stored for 12 months in the browser using the cookie "CookieConsent". This ensures that your cookie preference is retained for subsequent page requests. With the help of the key, your consent can be proven and traced.

If you activate the service function "collective consent" to activate consent for multiple websites through a single end-user consent, the service additionally stores a separate, random, unique ID with your consent. If all of the following criteria are met, this key is stored in encrypted form in the third-party cookie "CookieConsentBulkTicket"in your browser: You enable the collective consent function in the service configuration. You allow third-party cookies via browser settings. You have disabled" Do not track" via browser settings. You accept all or at least certain types of cookies when you give consent.

The functionality of the website is not guaranteed without the processing.

Cybot is a recipient of your personal data and acts as a processor on our behalf.

The processing takes place in the European Union. For more information on how to object to and opt out of Cybot, please visit: https://www.cookiebot.com/de/privacy-policy/

Your personal data will be deleted continuously after 12 months or immediately after the termination of the contract between us and Cybot.

Please see our general comments above about deleting and disabling cookies.

Cookie list

22. SECURITY

In the course of our web presence, we use the widespread SSL procedure (Secure Socket Layer) in conjunction with the highest encryption level supported by your browser.

You can see whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the status bar of your browser.

We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

23. PRIVACY POLICY UPDATE

There may be a need to amend and update this document. Therefore, we recommend that you read this privacy policy regularly.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

24. FURTHER INFORMATION

If you have any questions or concerns about data protection,you can contact us at {{whitelabelCompanyMail}}.

****

Status: 01.10.2022