Privacy disclaimer

About

Privacy Policy

Wibe Srl

Last updated: August 2024

This Privacy Policy describes our
policies and procedures regarding the collection, use and disclosure
of your personal data when you use our website or one of the
our shopping apps, you are interested in our products, contact us
through various channels (by telephone, email, social media or other channels) or
you are already our customers. It informs you of your rights in terms of
data protection and how the law protects you.

Responsible

First name
and contact details

The data controller under the GDPR
(General Data Protection Regulation), national laws on
data protection laws of the Member States and other data protection laws
data is:

Wibe Srl

Mainero Road, 58

10131 Turin

Italy

Email: info@wibeflavor.com

These data protection provisions apply
apply to the Internet offer of Wibe Srl, accessible under this domain and
the various subdomains ("our websites" or "presence on the
web") and purchasing apps.

Responsible
of data protection

For inquiries regarding data protection and
to exercise your rights (see point XXV), please contact
our data protection officer at info@wibeflavor.com
or by mail to the address above with the addition of "attn.
data protection officer".

General information on data processing

III. What are personal data?

Personal data is any information relating to a
identified or identifiable natural person ("subject
This includes individual data relating to circumstances
personal or factual such as name, address, telephone number, date
of birth, email address or health data (e.g. information about
current or chronic illnesses, intolerances, allergies, blood sugar levels
blood). However, information for which we cannot provide information is not personal data.
establish a connection with your person (or we can do it only with one
disproportionate effort).

Scope
of the processing of personal data

In principle, we collect and use data
personal data of our users only to the extent that this is necessary for the
providing functional websites, our shopping apps, and our
content, as well as for the provision of our services. We use your
personal data to provide our products and services, to inform you about
news and offers, to answer your questions and to manage and improve
our websites, apps and offerings.

The collection and use of our personal data
users only occurs on the basis of the corresponding legal basis pursuant to the
GDPR, for example with prior consent. Further details on the various operations of
processing are reported below in this privacy policy,
in correspondence with the respective treatments.

Your personal data will not be used for any
other purpose. Without your consent, your personal data will not be
transferred to third parties or used for advertising purposes, except in cases
described below, unless we are required by law to disclose the
data.

Base
legal information for the processing of personal data

To the extent that we obtain the consent of the data subject
for the processing of personal data, Art. 6 (1) lit. a GDPR serves as the basis
legal. For the processing of health data, explicit consent
is obtained pursuant to Art. 9 (2) letter a GDPR (e.g. by ticking a
box or selecting technical settings).

For the processing of personal data necessary
to the performance of a contract to which the interested party is party (e.g. the order
of our products), Art. 6 (1) lit. b GDPR serves as the legal basis. This
This also applies to treatments necessary for the implementation of measures
pre-contractual.

To the extent that the processing of personal data is
necessary for compliance with a legal obligation to which our company is subject
subject (e.g. accounting obligation), Art. 6 (1) lit. c GDPR serves as the basis
legal.

If the processing is necessary to protect an interest
legitimate interest of our company or third parties (e.g. fraud prevention,
direct advertising, IT security) and the interests, rights and
fundamental freedoms of the interested party do not prevail over the primary interest,
Art. 6 (1) lit. f GDPR serves as the legal basis for the processing.

Cancellation
of the data and retention period

The personal data of the interested party are deleted or
blocked as soon as the purpose of the conservation ceases to exist. The conservation
it may also occur if this has been provided for by the European or national legislator
in Union regulations, laws or other provisions to which the
responsible for the processing. The data will also be blocked or deleted at the
expiry of the retention period provided for by the above-mentioned provisions, unless
that there is no need to continue to retain the data for the
conclusion or performance of a contract, or for the claim,
the exercise or defense of legal claims.

Collection and use of your personal data when
use our website and shopping apps

If you wish to use the contents and services from us
offered on our website and shopping apps, such as ordering
our products, you need to provide additional data. The details are
reported below in the description of the specific procedures of
data processing.

VII. Provision of websites and creation of log files

When you access our website, the browser you use
on your terminal automatically sends information to our server
website. This information is temporarily stored in a
so-called log file.

The following information is collected and retained until
to automatic cancellation:

Address
IP of the requesting computer,

Date
and time of access,

First name
and URL of the recovered file,

Volume
of data transferred,

Message
which indicates whether the recovery was successful,

Site
web from which the access was made (referrer URL),

browser
used and, if applicable, the computer's operating system, as well as the

First name
of the access provider.

Log files contain IP addresses or other data that
allow you to assign a user. This data is not stored together
to other personal data of the user.

The above data will be processed by us for the following purposes:
purpose:

Ensure
a smooth connection of websites,

Guarantee
comfortable use of our websites,

To examine
and ensure system security and stability.

For
other administrative purposes.

Under no circumstances do we use the data collected to draw
conclusions about your person.

The legal basis for temporary data storage
and log files is Art. 6 (1) lit. f GDPR. Our legitimate interest
interest derives from the purposes of data collection mentioned above. We delete
this data at the latest after 30 days. The collection of this data is
absolutely necessary for the functioning of the website. Consequently,
the user does not have the possibility to object.

VIII. Website and Shopping Apps

We offer you the possibility to order our products on
our websites and shopping apps. To process an order, we process your
your personal data. The data is entered into an input mask,
transmitted to us and stored. During the ordering process, data is
the following data was collected:

Surname,
first name

Address
e-mail

Country/Region

Agency
(optional)

Address
of delivery

Address
of the invoice

Number
by phone (optional)

Data
on orders (transaction or order data)

Method
of payment

Pec
(optional)

Code
SDI (optional)

Code
tax

The data you provide for ordering products are
used exclusively for the fulfillment and processing of your order.
As part of your order, you will receive a confirmation as well as further
documents and information via email, in order to fulfill our obligations
legal information for an effective conclusion of the contract with you.

Your data will be transmitted to the forwarder
responsible for delivery, to the extent that this is necessary for the
delivery of the goods (see the following point XVIII).

Payments are processed by credit institutions and
payment service providers. The credit institution or payment provider
payment services in charge of the payment uses your data
payment. These companies can only use your data for
order processing and not for other purposes (see point XVIII). We
Let's just see which payment method you have selected.

If the processing of personal data is necessary for
the performance of a contract to which the data subject is party, Art. 6 (1) letter b
GDPR serves as the legal basis. If the processing of personal data is necessary
for the fulfillment of a legal obligation (for example the fulfillment of obligations of
information in the case of contracts with consumers or obligations of
retention of tax legislation), also Art. 6 (1) letter c GDPR
constitutes the legal basis for the processing of data.

Your data will be retained for 3 years after your
(last) order and subsequently until the expiry of the periods of
conservation required by law. The conservation period begins on
01.01. of the year following the order or cancellation. After that your
data will be deleted unless you have expressly consented to the
their further use.

Reviews,
comments and other customer contributions

To make our website more interactive, we offer you
the opportunity to share experiences and evaluations, as well as to leave
comments and other contributions and we invite you to do so.

If you make a contribution, we will collect the following data
personal:

First name

Address
e-mail

The
your message

Therefore, we also process the personal data you provide to us.
voluntarily within the scope of the contribution. The processing of personal data
is based on your consent pursuant to Art. 6 (1) lit. a GDPR. You can
revoke your consent at any time, free of charge and without providing
reasons, by sending an email to info@wibeflavor.com or cancel your
contribution. This does not affect the lawfulness of the processing carried out up to the
revocation of consent.

After revoking your consent, your personal data will be
retained for another 6 months for legal defense purposes. The legal basis is
Art. 6 (1) letter f GDPR.

The stored data can be used for
identify the user in case his posts contain illegal content
(insults, harassment, hate speech, prohibited political propaganda, etc.)

Collection and use of your personal data in the
Customer relationship management

We process your personal data when you have ordered or
you are interested in our products and have contacted us. The management of
Customer Relationship Management (“CRM”) includes practices, policies and
computer systems used to manage and analyze interactions and data
of customers throughout the entire life cycle. The following describes the
specific data processing operations and further details.

Management
of customers, order management and processing

In the context of customer management and management and
order processing, your personal data is processed for the
following purposes:

Support
and management of customers who order products via the webshop (D2C -
direct to consumer) and commercial customers (B2B - business to business)

Management
of potential customers and business opportunities

Preparation
of the offers

Implementation
and management of deliveries or services contractually agreed with
the help of a customer database, including the use of management systems
of the goods.

Deliveries
and shipments of goods with the help of logistics service providers

Management
of the contracts

Prevention
of frauds

Claim,
exercise or defense of legal rights

Contact
with the customer

Support
for exhibition stands

Relationships
on customer contacts and related management reports
activities and business development

The data processed can be grouped into the following
categories:

Surname,
first name

Address
e-mail

Country/Region

Agency
(optional)

Address
of delivery

Address
of the invoice

Number
by phone (optional)

Historical
of purchases and orders, including data on the exchange of goods and
other order data (e.g., transaction data)

Method
of payment

Data
additional data provided directly by the user via questionnaires ,
such as age, gender, family size, behavioral data
of water consumption and other consumption habits (e.g., consumption of
caffeine, beverage preferences, favorite flavors) and any conditions
medically relevant (e.g., diabetes, etc.).

For the processing of personal data necessary for
the fulfillment of a contract or for the implementation of pre-contractual measures,
Art. 6 (1) lit. b GDPR serves as the legal basis. The legal basis for the
processing of personal data when using (extended) features
of the customer database and other CRM software is the legitimate interest
prevailing of our company, pursuant to Art. 6 (1) letter f GDPR, to a
customer management as efficiently as possible. Technical and manual procedures
for fraud prevention are performed in order to protect us and
our users from the improper use of your data, in particular through
fraudulent orders. Our company has an overriding legitimate interest
in the implementation pursuant to Art. 6 (1) letter f GDPR. If you provide us with
voluntarily provide health data in the context of surveys ( questionnaires ),
data processing is based on your consent pursuant to Art. 6 (1)
letter a in conjunction with Art. 9 (2) letter a GDPR. A Finally,
We process your personal data to exercise our rights and for the
legal defense on the basis of our overriding legitimate interest pursuant to
of Art. 6 (1) letter f GDPR or Art. 9 (2) letter f GDPR. To exercise the
right of opposition, simply send an email to info@wibeflavor.com
(see point XXIV).

Your data will be retained for 3 years after collection
or until your justified objection, and beyond until the expiry of the
retention periods provided by law. In the case of a relationship
commercial in progress, your data will be stored until the end of the
business relationship and beyond for 3 years. The retention period begins on
01.01. of the year following the collection or termination of the relationship
commercial.

To the extent that the processing of personal data is
based on your consent pursuant to Art. 6 (1) lit. a GDPR, you may revoke
your consent at any time free of charge, without indicating the
reasons, by sending an email to info@wibeflavor.com. The lawfulness of the processing
carried out until the revocation of consent is not affected. After the revocation of the
consent, personal data will be stored for another 6 months for the purposes of
legal defense. The legal basis is Art. 6 (1) lit. f GDPR.

Distribution,
including customer loyalty and advertising measures

We process personal data for the preparation and
implementation of marketing and advertising activities, in particular for
advertise the services offered, maintain existing business contacts and
prepare for the start of future contracts. As part of our activities
sale, we process the following data:

Surname,
first name

Address
e-mail

Country/Region

Agency
(optional)

Address
of delivery

Address
of the invoice

Number
by phone (optional)

Historical
of purchases and orders, including data on the exchange of goods and
other order data (e.g., transaction data)

Method
of payment

The legal basis for the processing of your data is the
our prevailing interest in accordance with Art. 6 (1) letter f GDPR. This is
of acquiring new customers and maintaining relationships with existing ones
existing customers, in order to be able to market and distribute the products and
the services offered.

Your data will be retained for 3 years after the last
contact us or until your justified objection, and beyond until the
expiry of the retention periods provided by law. To exercise the
right of opposition, simply send an email to info@wibeflavor.com (see
point XXIV). The retention period begins on 01.01. of the following year
at the last contact with us.

As regards our customer loyalty measures,
customers and advertising which must be considered as direct advertising,
see points XIV through XVI below.

We also process your data to compile statistics.
in order to improve our products and services. In this treatment the
Your data is pseudonymised and is not evaluated on an individual basis.
customer or used to predict your personal preferences. This
processing is therefore based on our prevailing legitimate interest (Art. 6
(1) letter f GDPR). To exercise the right to object, it is sufficient
send an email to info@wibeflavor.com (see point XXIV).

XII. Customer Service and Contacts

As part of customer support services, the
Processing of personal data is necessary for the following purposes:

Maintain
customer relations

Service
of customer consultancy

Communication
and customer support

Measures
of customer loyalty and acquisition

Management
of complaints

Complaints and Cancellations Management

Providing information to data subjects and fulfilling
other rights of the same

Recording of customer calls for marketing purposes
training and quality assurance

You have the possibility to contact us in different ways. If you
contact us by email, telephone or post, we use the personal data that you provide to us
you have voluntarily provided in this context, as well as data relating to the
contact (e.g. contact channel, transaction categorization), to
in order to contact you and process your request.

You can contact us through the help center on
mail info@wibeflavor.com. This also requires the processing of data
personal. When using the contact form, we process the following data:

First name

Address
e-mail

Number
by phone (optional)

Address
(street, house number, postal code, city, country)

Details
of the order (order number and additional information)

The
your message for us

Information
additional (optional)

The above data are processed for the purpose of
respond to your requests. The processing is based on our legitimate
interest in clarifying your questions and doubts and in documenting the
result of the processing in case of questions (Art. 6 (1) letter f GDPR). For
exercise the right of opposition, simply send an email to info@wibeflavor.com
(see point XXIV).

If the request is aimed at fulfillment,
to the processing or initiation of a contract, Art. 6 (1) lit. b GDPR is also
the legal basis for the processing. If we are required by law to respond
and/or document your requests, for example in the case of requests pursuant to
of the data protection law, Art. 6 (1) lit. c GDPR is the basis
relevant legal basis. Furthermore, in the event of recording of calls of
customers, we ask for your consent (Art. 6 (1) lit. a GDPR).

Your data will be deleted after 3 years in the case of
requests for information relating to products, after 1 year from the response in
case of information procedures and claims of other rights
of the interested party, and after the matter has been dealt with in the case of other
contact requests via the web form.

Collection and use of your personal data in
our marketing activities

We offer our customers and other users of our
website and Apps for purchasing personalized information on various topics.
Furthermore, on our website you can find additional content and offers that
are used to market our products. In order to offer them, we have
need your personal data. Details are given below in the
description of specific data processing procedures.

XIV. Personalized News

On our website there is the possibility to subscribe
free of charge to the newsletter. When you sign up, your data will be
input mask are transmitted to us. In order to keep you regularly
updated with interesting and personalized news, we need the
following personal data:

Surname,
first name

Date
by birth (optional)

Address
e-mail

Address
Delivery address Billing address

Number
phone

Chronology
of purchases and orders, including data on the exchange of goods and
other order-related data (e.g. transaction data)

Method
of payment

Address
IP of the requesting computer

Date
and time of registration

Behavior
of use (e.g. newsletter opening and click rates, reactions to
campaigns, use of our website)

We may send you direct marketing communications,
Product information and promotional offers:

- If you have consented to receive such communications from us
our (the processing of personal data occurs voluntarily on the basis of
of your consent pursuant to Art. 6 (1) lit. a GDPR).

- If you are in a country where the law allows us to
send you offers for similar products from our range by email, if we have
received your email address in connection with the sale of a product or
of a service and if you have not objected. This is to safeguard our
interests, predominantly legitimate, in a promotional approach to our
clients.

As long as the law requires it, we use the so-called
double opt-in procedure for registration, i.e. we will send you news
only if you first confirm your registration via a confirmation email
sent for this purpose using the link contained therein. In this way
We want to ensure that only you can register as owners
of the email address you indicated. Your confirmation to this effect must
take place promptly after receiving the confirmation email, otherwise
Your registration will be automatically deleted from our bank
data.

We will regularly send you information about offers
interesting, ongoing promotions, products, services, quizzes, challenges and competitions
via email, SMS, MMS, push messages, messages via apps and messengers,
as well as by post, based on your interests. In addition, we may contact you for
customer surveys (e.g. post-purchase surveys and inquiries)
customer satisfaction) and in the area of customer service (for example
example, reminders, product availability messages), invite you to
send reviews and wish you a happy birthday. Marketing communications
that we send will be in relation to our products or services; your data
personal data will not be used for direct marketing to third parties, unless
no separate explicit consent has been collected for this or that you are
a country where the laws permit such treatment.

We optimize and personalize our information on
offers, products and services, as well as surveys and other messages in the context
of customer support. For personalization purposes, we analyze your
usage behavior with automated data processing procedures for
gain new knowledge. This procedure constitutes a profiling of the
data pursuant to Article 4, paragraph 4, of the GDPR. By creating a user profile
personal, we want to adapt our advertising approach to yours
interests and make our offers more relevant to you. This means that
you will only receive information compiled specifically for you. Therefore, you will not
We will send you content that you are unlikely to be interested in.

To improve our website and campaigns
advertising and to inform you about interesting offers, current promotions,
products, services, quizzes, challenges and competitions, we collaborate with partners of
selected marketing (see point XVIII).

The data will be deleted as soon as they are no longer
necessary to achieve the purpose for which they were collected. Consequently,
will be kept for as long as you are subscribed to our
news.

You can withdraw your consent at any time.
moment, free of charge and without stating the reasons, by sending an email
at info@wibeflavor.com or via the cancellation link provided
in the respective message. The lawfulness of the processing carried out up to the
revocation of consent is not affected. After the revocation of consent, the data
personal data will be retained for another 6 months for legal defense purposes.
legal basis is the art. 6 paragraph 1 letter. f GDPR.

You can object to the use of your email address for purposes
direct marketing at any time, free of charge and without providing
reasons, by sending an email to info@wibeflavor.com or by clicking
on the unsubscribe link in the respective message (see point XXIV).

XVII. Tracking, analytics and plugins

Cookies, embedded content and scripts

Our websites use a variety of technologies to
to offer the user an optimal experience, in particular cookies, scripts and
embedded content (hereinafter: technologies).

Cookies are files that do not cause any damage to the terminal.
of the user. They are stored temporarily for the duration of a session
(session cookies) or permanently (permanent cookies) on your
end device. Session cookies are automatically deleted when you
end of the visit. Permanent cookies remain stored on your device
end user until they are deleted by the user himself or
until they are automatically deleted by your web browser.

Additionally, we also use scripts on our websites to
provide other functions, such as the statistical evaluation of our
websites or for bot protection.

In some cases, when you access our site, you may
Cookies and company scripts can also be stored on the user's terminal
third parties (e.g. third-party cookies). These allow us or you to
use certain services of the third-party company (for example, cookies for the
measurement of reach or integration of third-party content). Furthermore,
We integrate third-party content to offer you a wide range of services on our
websites (e.g. videos, streaming, etc.).

The technologies mentioned have different functions. Many
technologies are technically necessary, as some functions of the website
could not function without them (for example, the shopping cart function
of purchases or viewing videos). Other technologies are
used to evaluate user behavior or to display
advertising. Technically necessary technologies are stored on the
basis of Art. 6 (1) letter f GDPR, unless another basis is specified
legal. The website operator has a legitimate interest in the use of
these technologies for technically error-free and optimised delivery
of its services.

For technically unnecessary technologies,
consent required (Art. 6 (1) letter a GDPR). If consent has been requested
consent to the storage of cookies, the cookies in question are
stored exclusively on the basis of such consent. Consent may be
revoked at any time with effect for the future. Further information
on cookie consent are available below.

You can set your browser to be
informed about the setting of cookies and allow cookies only in individual cases
cases, exclude the acceptance of cookies for certain cases or in general and
enable automatic deletion of cookies when closing the browser. If
disable cookies, the functionality of our websites may be impaired.
limited. To know this option for the most used browsers, it is
You can consult the following links:

Microsoft
Internet Explorer and Microsoft Edge: https: //support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Mozilla
Firefox: https: //support.mozilla.org/de/kb/Cookies-blockieren

Google
Chrome: https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3D Desktop&hl=en

Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac

Analysis of website usage, use of Apps
purchase and statistics

To understand how our websites are used, to
to optimize our offer and to be able to display specific content for you
the user, we use technologies to analyze usage.

We use Google Analytics, a tracking service
web provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4,
Ireland ("Google"). The purpose of our use of this tool
is to allow the analysis of user interactions on websites and
in apps and to improve our offering through statistics and
reports obtained and make it more interesting for users.

We mainly record interactions between the user of the
website and our website using cookies, device/browser data,
IP addresses and website or app activity. Google Analytics collects
also your IP addresses to ensure the security of the service and to
provide us, as website operators, with information about the country, the
region or location from which the respective user comes (the so-called
"IP location determination"). For your protection,
However, we naturally use the anonymization function
("IP masking"), meaning that Google truncates IP addresses
of the last octet within the EU/EEA.

Google acts as an order processor and
we have entered into a corresponding contract with Google. The information
generated by the cookie and the IP addresses (usually abbreviated) on the use
of this website by the user are usually transmitted to a
Google servers in the USA and processed there. Google has voluntarily agreed
to the EU-US Data Privacy Framework, which ensures compliance with the level
European data protection authority on the basis of an adequacy decision by
part of the European Commission (Art. 45 GDPR). We have also agreed with
Google so-called standard contractual clauses, the purpose of which is to
ensure compliance with an adequate level of data protection in the country
third (see point XIX).

The legal basis for the collection and further processing
of the information (which occurs for a maximum of 14 months) is your consent
(Art. 6 (1) letter a GDPR). The revocation of consent is possible at any time.
moment, without this affecting the lawfulness of the processing until the
revoke. In apps, you can reset your advertising ID in
Android or iOS settings. The easiest way to revoke consent is
via our consent management platform (see above) or by installing
Google's browser add-on, accessible at the following link
link: https: //tools.google.com/dlpage/gaoptout?hl=de/.

Learn more about the scope of services provided by
Google Analytics is available at
https://marketingplatform.google.com/about/analytics/terms/de/. Google provides
information on data processing when using Google Analytics at
following link: https://support.google.com/analytics/answer/6004245?hl=de/ .

General information on data processing, which
According to Google they also apply to Google Analytics, they are available
in Google's privacy policy at
https://policies.google.com/privacy?hl=de&gl=de.

The legal basis for the collection and further processing
of the information (which occurs for a maximum of 14 months) is your consent
(Art. 6 (1) lit a GDPR). The revocation of consent is possible at any time.
moment without this affecting the lawfulness of the processing until revocation.
In apps, you can reset your advertising ID in your app settings.
Android or iOS. The easiest way to revoke consent is via the
our consent management platform (see above) or by installing the
Google browser add-on, accessible at the following link:
https://tools.google.com/dlpage/gaoptout?hl=de/.

Targeted advertising

We and our marketing partners use your
data for personalized advertising presented to you on our site
web and on the websites and apps of other providers (ad optimization)
onsite and in-app).

In the case of online advertising, your data may be
transmitted to social network providers and other marketing partners (see
point XVIII). The main technologies and services we currently use
I am:

Google
AdSense: This website uses the Google online advertising service
AdSense, through which banners can be displayed
personalized advertising based on your interests, in order to
inform you about our products. The advertisements are recognizable by the
"Google Ads" wording present in the respective advertisement.
The legal basis for the processing of your data is Art. 6 (1) lit.
to GDPR, meaning that the integration only takes place with your
consent.

By visiting our website, Google receives the information
that you have visited our website. For this purpose, Google uses a short
text in the website source code ("code snippet") to set
a cookie on your computer. The above basic data is transmitted,
such as IP address and timestamp. We allow Google to collect the
user information necessary for appropriate advertising, but for the
We are not aware of the extent of the data collection and its duration.
of storage. If you are signed in with your Google account, the
your data can be assigned directly to it. If you do not wish
that your data is associated with your Google profile, you must do
the logout. It is possible that this data will be transmitted to contractual partners
by Google, third parties and authorities. This site does not publish third-party ads
via Google AdSense.

You can withdraw your consent at any time.
without prejudice to the lawfulness of the processing until revocation. The most
simple to revoke consent is through our management platform
of consent or through the following functions: a) by setting the software of the
browser appropriately, in particular the suppression of third-party cookies
parties will prevent you from receiving third-party ads; b) by disabling the
Google interest-based ads via the link www.google.com/settings/ads ,
setting that will be deleted when cookies are deleted; c)
by opting out of interest-based ads from providers that are part of
of the About Ads self-regulation campaign via the link
www.aboutads.info/choices, a setting that will be deleted with the
deleting cookies; d) permanently deactivating them in browsers
Firefox, Internet Explorer or Google Chrome at the link
www.google.com/settings/ads/plugin. It is specified that in this case the user
You may not be able to fully utilize all the features of this
offer.

Google also processes your personal data in the United States
United States. Google has voluntarily adhered to the EU-US Data Privacy
Framework, which ensures compliance with the European level of data protection
data on the basis of an adequacy decision by the Commission
European (Art. 45 GDPR). We have also agreed with Google the so-called
standard data protection clauses, the purpose of which is to ensure the
compliance with an adequate level of data protection in the third country (see
point XIX).

Learn more about the purpose and scope of the
data processing, as well as further information on your rights and the
setting options to protect your privacy can be
obtained from Google Ireland Limited, Gordon House, Barrow Street Dublin 4,
Ireland. Available at
https://policies.google.com/privacy?hl=de&gl=de,
https://policies.google.com/ technologies/ads?hl=en e
https://business.safety.google/adsservices/.

Ads
by Google: We use the Google Ads service to attract attention
about our offers with the help of advertisements. If you access the
our website via a Google ad, Google Ads will store a
cookies in your terminal. The legal basis for processing
your data is Art. 6 (1) letter a GDPR, i.e. the integration
It only happens with your consent.

The advertising material is provided by Google via the
so-called "ad servers". For this purpose, we and other websites
we use so-called "ad server cookies", which can be
used to measure certain parameters to measure success, such as
display of ads or user clicks. Google Ads cookies
stored on our website allow us to obtain information about the
success of our advertising campaigns. These cookies are not intended
to personally identify the user. For this cookie, usually
stored as analysis values the unique cookie ID, the number of
ad impressions by placement (frequency), last impression
(relevant for post-view conversions) and the
opt-out information (indicating that a user no longer wishes to be
addressed).

Cookies set by Google allow Google to
recognize the user's Internet browser. If a user visits certain
pages of an Ads customer's website and the cookie stored on their computer
has not expired yet, Google and the customer can recognize that the user has
clicked on the ad and was redirected to that page. Every customer
of Ads a different cookie is assigned, so that cookies cannot
be tracked on the websites of other Ads customers. Through integration
of Google Ads, Google receives the information that the user has called up the part
correspondent of our website or clicked on one of our advertisements. If
you are registered with a Google service, Google can assign the visit to the
your account. Even if you are not registered with Google or have not made
login, it is possible that the provider obtains and stores your address
IP.

Thanks to the marketing tools used, your
browser automatically establishes a direct connection to the server
Google. We ourselves do not independently collect personal data in the context of
of the above advertising measures, but we only provide Google with the possibility
to collect data. We only receive statistical evaluations from Google that
provide information on which ads have been clicked with which intent
frequency and at what prices. We do not receive any further data from the use of advertising media;
In particular, we cannot identify users on the basis of these
information.

You can withdraw your consent at any time.
without prejudice to the lawfulness of the processing until revocation. The most
simple to revoke consent is through our management platform
of consent or through the following functions: a) by setting the software of the
your browser accordingly, in particular the suppression of cookies
third parties will prevent you from receiving third-party advertisements; b)
by setting your browser to block cookies from the domain "www.googleadservices.com", www.google.de/settings/ads ,
by deleting this setting when you delete cookies; c) by disabling
interest-based ads from providers that are part of the campaign
self-regulation "About Ads" via the link
www.aboutads.info/choices, clearing this setting when you opt-out
cookies; d) permanently disabling them in Firefox browsers,
Internetexplorer or Google Chrome at the link www.google.com/settings/ads/plugin. Yes
Please note that in this case you may not be able to use
fully use all the functions of this website.

Google also processes your personal data in the United States
United States. Google has voluntarily adhered to the EU-US Data Privacy Framework, which
ensures compliance with the European level of data protection on the basis of
an adequacy decision by the European Commission (Art. 45 GDPR).
We have also agreed with Google on so-called standard contractual clauses.
data protection, the purpose of which is to ensure compliance with a certain level
adequate data protection in the third country (see point XIX).

Further information on data protection at
Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland, am
available here: https://policies.google.com/privacy?hl=de&gl=de ,
https://policies.google.com/technologies/ads?hl=de, and https://business.safety.google/
adsservices/ .

Google
Conversion Tracking: We use Google Ads with the additional application
"Google Conversion Tracking". This is a procedure that we
allows you to check the success of our advertising campaigns. A
To this end, advertisements are provided with a provision
technique, for example an ID, with which we can determine how a
user interacts after clicking on the ads and if one of our
services are actually used. This gives us information
in statistical form on the total number of readers of our ads, on
which ads are particularly popular and, if applicable, further
information on the consequences of the announcement.

The legal basis for the processing of your data is also
Art. 6 (1) letter a GDPR, i.e. the integration only takes place after the
your consent. You can prevent or no longer use the function of
conversion tracking in the same manner as described above in relation to
Google Ads.

Google
Remarketing: We use Google Ads with the additional application
"Google Remarketing". With this procedure we can create
advertisements based on existing information about you and
contact you again when you continue to use the Internet. This
This usually happens through cookies that are set when you visit
our offers, through which your usage behavior
when you call up different websites it is recorded by Google and evaluated
in a pseudonymized form. According to its own statements, Google does not
combines the data collected during remarketing with your data
personal, which can be stored by Google.

The legal basis for the processing of your data is also
Art. 6 (1) letter a GDPR, i.e. the integration only takes place with the
your consent. You can prevent or no longer use the function of
remarketing in the same manner described above in relation to Google Ads.

Google
Customer Match: We use Google Ads with the additional application
"Google Customer Match", among other things for "Similar
Audiences" and remarketing. For the use of Customer Match,
uploaded lists with encrypted user data (e.g. email addresses). After
loading, the system checks which data is already known and classifies
these users in a list. After creating customer lists, the
encrypted customer data is automatically deleted. Suppliers
they don't get new addresses like that.

The legal basis for the processing of your data is also
Art. 6 (1) letter a GDPR, i.e. the integration only takes place with the
your consent. You can prevent or no longer use this function in the
same way as described above in relation to Google Ads. Learn more
on "Customer Match" are available on the site
https://support.google.com/google-ads/answer/6334160.

Google Optimize: We use Google Ads with the application
additional "Google Optimize" and we use data from Google Analytics
to improve areas of our online offering and better align our
marketing efforts with potential user interests.

Google
Tag Manager: We use Google Tag Manager ("GTM"), a system
tag management to manage the JavaScript and HTML tags used for
track and analyze websites. Tags are small pieces of code
used to measure traffic and visitor behavior, including
the other things: to understand the impact of online advertising and
social channels; to set up remarketing and targeting; to test and
optimize websites. GTM allows us to easily integrate and manage
our tags.

The legal basis for the processing of your data is also
Article 6 (1) letter a GDPR, i.e. that the integration only takes place after
your consent. If you have deactivated your consent, GTM will take into account
such deactivation. Further information on data protection at
Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland, am
available here: https://policies.google.com/privacy?hl=de&gl=de
and https://marketingplatform.google.com/
about/analytics/tag-manager/use-policy/ .

Half:
Facebook and Instagram (Pixels, Conversion Tracking and Remarketing):
We use advertising measures from Meta Platforms Ireland Limited, 4
Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
("Meta"). By integrating the so-called "Meta Pixel" on the
our website, we can display our advertising measures
("Facebook Ads" and "Instagram Ads") to users of the
our website and social networks Facebook and Instagram and measure and
evaluate its success ("Conversion Tracking"). This
connection between Facebook or Instagram and our website occurs
technically via the "Meta Pixel". The legal basis for the
processing of your data is Art. 6 (1) lit. a GDPR, i.e. that
Integration only occurs with your consent.

Thanks to the marketing tools used, your
browser automatically establishes a direct connection to the server
Meta when you visit our website. We have no influence on the
scope and further use of the data collected by Meta through the use of
this tool and therefore we present you the processes known to us: Through
the integration of the Meta pixel, Meta receives the information that the user has
called up the corresponding web page of our website or clicked on one
our advertising. If you are registered with a Meta service, Meta may assign
the visit to your account. Even if you are not registered with Facebook or
Instagram or you are not logged in, it is possible that the provider learns
your IP address and other identifying characteristics and uses them for
create your profile.

The information collected is stored on the servers of
Meta, also in the United States. Meta has voluntarily joined the EU-US Data
Privacy Framework, which guarantees compliance with the European level of protection
of data on the basis of an adequacy decision by the Commission
European (Art. 45 GDPR). We have also agreed with Meta the so-called
standard data protection clauses, the purpose of which is to ensure compliance
of an adequate level of data protection in the third country.

Consent may be revoked at any time without
that this affects the lawfulness of the processing until revocation. The most
simple to revoke consent is through our platform
consent management. Furthermore, (only for users who have logged in
login) can object via the provider's platform at the following link: www.facebook.com/settings/?tab=ads#_möglich or https://help.instagram.com/
478880589321969/?helpref=hc_fnav.

We also use the remarketing function "Custom
Audiences", which also uses the Facebook Pixel and displays ads
interest-based advertising when you visit our website or other websites.
websites that have integrated the Facebook Pixel. This allows us to
show you advertisements that are of interest to you, in order to make the
our website more interesting for you and to market our
offer.

For more information about the Meta Pixel and its
operation, see the Meta help section at https://www.facebook.com/business/help/742478679120153?
id=1205376682832142 and the Meta data information
at https://www.facebook.com/privacy/policy/ ?entry_point=data_policy_redirect&entry=0.

Ads
from Twitter: In connection with our website, we use the services of
Twitter International Unlimited Company, One Cumberland Place, Fenian
Street, Dublin 2, D02 AX07, Ireland, to analyze, measure success
and optimise our online offering. This connection between Twitter and
Our website is technically operated via the "cookie pixel".
Twitter".

We use the services to analyze and optimize
the effectiveness of our advertising measures and to further develop the
our offer. The legal basis for the processing of your data is Art. 6
(1) letter a GDPR, meaning that the integration only takes place after your
consent.

Twitter also processes your personal data in the United States
United and set a standard that corresponds to the previous Privacy Shield
EU-US. We have also agreed with Twitter on the so-called standard clauses
of data protection, the purpose of which is to ensure compliance with a
adequate level of data protection in the third country (see point XIX).

You can withdraw your consent at any time, but
This revocation does not affect the lawfulness of the data processing carried out up to
at that time. The simplest way to withdraw consent is through the
our consent management platform. Additionally, (only for users who
have logged in) it is possible to object via the platform of the
provider at the following link: https://help.twitter.com/en/safety-and-security/privacy-controls-for-tailored-ads .
The user can also refuse the use of cookies by selecting the appropriate setting
appropriate on your browser, but please note that in this case it may
not be able to use all the features of this site
web.

More detailed information on data processing by
part of Twitter are available in the data protection declaration
at https://twitter.com/en/privacy and
in the additional communications on data protection at
https://help.twitter.com/en/rules-and-policies/data-processing-legal-bases, https://privacy.twitter.com/en/for-our-partners/global-dpa and
https://gdpr.twitter.com/en/controller-to-controller-transfers.html.

Ads
TikTok: We use the TikTok Advertising service. TikTok Advertising is
an online advertising program provided by TikTok Information
Technologies UK Limited, One London Wall, London EC2Y 5EB
("TikTok"). Through the use of cookies and similar technologies, such as
device identifiers, information about your use of our
apps (for example, information about the items you viewed) are
collected and transmitted to TikTok by us and TikTok under the sole responsibility
joint in this context.

When you use our application, we determine the ID
of the user's device and transmit tracking data to TikTok on
this basis. Further processing of the data transmitted to TikTok is the exclusive
TikTok's liability under data protection law. The
information transmitted to TikTok can be attributed to the person
of the user with the help of other information that TikTok has stored about you
him, for example because of having an account on the social network
"TikTok". Based on the information collected, it is possible that in
your TikTok account to be shown advertisements related to
our offers (retargeting). The information collected may also be
aggregated by TikTok and the aggregated information may be used by
TikTok for its own advertising purposes and the advertising purposes of third parties.
For example, TikTok can infer certain interests from the behavior of
user navigation on this website and may use this information
to promote third-party offers. TikTok may also combine information
collected with other information that TikTok has collected about you through
other websites and/or in relation to the use of the social network "TikTok",
so that a profile about the user can be stored on TikTok. This
profile can be used for advertising purposes. The legal basis for the
processing of your data is Art. 6 (1) lit. a GDPR, i.e. that
Integration only occurs after your consent.

To the extent that TikTok processes user data in
as the sole data controller, there is the possibility that the data
of the user are transferred from TikTok to the United States. We have agreed
with TikTok the so-called standard data protection clauses, the purpose of which
is to ensure that an adequate level of data protection is respected in the country
third (see point XIX).

Further information on data protection at
TikTok can be found in the data protection declaration: https://www.tiktok.com/legal/page/eea/privacy-policy/de-DE .
Here you can also assert your rights (for example the right to
cancellation) in relation to the data that TikTok processes about you as a
responsible for the processing. It is possible to revoke the consent given in
regarding the use of TikTok advertising here: https://support.tiktok.com/en/account-and-privacy/personalized-ads-and-data/
personalization-and-data .

Pinterest Ads: We use Pinterest advertising services.
Pinterest Europe Limited, Palmerston House, 2nd Floor, Fenian Street, Dublin,
Ireland ("Pinterest"). Through the use of cookies, identifiers of
devices or similar technologies, information about your use of our website
(e.g. information about the items you have viewed) is collected by us and by
Pinterest under our joint responsibility and transmitted to
Pinterest.

A Pinterest pixel is integrated into our websites, which
allows Pinterest to save a cookie in the user's browser and therefore
transmit browser tracking data. Further processing of the
data transmitted to Pinterest is the sole responsibility of Pinterest pursuant to
of the data protection law. This information transmitted to
Pinterest can be attributed to you with the help of other
information that Pinterest has stored about you, for example because of the
your possession of an account on the social network "Pinterest".
information collected on the website may be used to show you in the
your Pinterest account advertising related to our offers (retargeting).
The information collected may also be aggregated by Pinterest and the
aggregate information may be used by Pinterest for its own
advertising purposes and for third-party advertising purposes. For example, Pinterest may
infer certain interests from your browsing behavior on the
our websites and may use this information to advertise offers
third parties. Pinterest may also combine the information collected through the
our website with other information Pinterest has collected about you
via other websites and/or in relation to the use of the social network
"Pinterest", so you can store a profile about yourself on
Pinterest. This profile can be used for advertising purposes. The basis
legal basis for the processing of your data is Art. 6 (1) letter a GDPR, i.e.
to say that the integration only occurs with your consent.

To the extent that Pinterest processes your data as
sole data controller, there is the possibility that your data
be transferred from Pinterest to the United States. We have agreed with
Pinterest so-called standard data protection clauses, the purpose of which
is to ensure compliance with an adequate level of data protection
in the third country (see point XIX).

Further information on data protection in
Pinterest is available at the following address: https://policy.pinterest.com/de/privacy-policy .
Here you can also assert your rights as a data subject (e.g. right
(to cancellation) in relation to the data that Pinterest processes about you in
as data controller. You can revoke the consent you have
data for using Pinterest Ads here: https://help.pinterest.com/en/article/personalization-and-data .

Ads
Snapchat: We use Snapchat's so-called "Snap Pixel",
operated by Snap Inc., 2772 Donald Douglas, Loop North Santa Monica, CA
90405, USA ("Snapchat"), on our websites for analysis purposes
and optimization.

With the help of the Snap Pixel it is possible for Snapchat, from a
side, determine website visitors as a target group for the
displaying ads (so-called "Snapchat Ads").
As a result, the Snapchat Pixel is used to display Snapchat Ads
Switch only to those Snapchat users who have also shown interest
for our website or that have certain characteristics (for example,
interests in certain topics or products determined on the basis of the sites
websites visited) that we transmit to Snapchat (so-called "Custom
Audiences").

With the help of the Snap Pixel, we want to ensure that the
our Snapchat ads match the potential interest of users and
do not have an annoying effect. In addition, the Snap Pixel allows us to
monitor the effectiveness of Snapchat ads for statistical and research purposes
market, checking whether users were redirected to the website after
clicking on a Snapchat ad (so-called "conversion").

The legal basis for the processing of your data is
Art. 6 (1) letter a GDPR, i.e. the integration only takes place with the
your consent. There is a possibility that your data will be transferred from
Snapchat in the United States. Snapchat has voluntarily joined the EU-US Data
Privacy Framework, which guarantees compliance with the European level of protection
of data on the basis of an adequacy decision by the Commission
European (Art. 45 GDPR). We have agreed with Snapchat the so-called clauses
data protection standards, the purpose of which is to ensure compliance with a
adequate level of data protection in the third country (see point XIX).

Snapchat's data processing is regulated
from Snapchat's Data Usage Policy. General guidance on
displaying Snapchat ads are contained in the information
on Snapchat's data usage: https://values.snap.com/de-DE/privacy/privacy-center .
You can withdraw your consent to the use of Snap Pixel here:
https://help.snapchat.com/hc/en-us/articles/7012345515796.

Ads
from LinkedIn: We use the so-called LinkedIn Insight tag (or LinkedIn
Pixel) of LinkedIn Ireland Unlimited Company ("LinkedIn") on
our websites. By integrating this JavaScript tag,
The user of our website may be shown advertisements
interest-based advertising (“Ads”) which are
relevant to the user when he visits the social network LinkedIn or other
websites that use the same method, and we receive statistics on the
website visitors and demographic data. Additionally, we may evaluate
your use of our advertising on LinkedIn and your interest in
our offers, through a tracking function of the
conversions and also show you LinkedIn ads on other websites
through retargeting. In this way, we pursue the interest of
improve the effectiveness of LinkedIn ads and make our
most interesting website for you.

By integrating the LinkedIn Insight tag, your browser
automatically establishes a direct connection to the LinkedIn server,
both when you visit the LinkedIn website and websites that have the tag
LinkedIn Insights integrated. LinkedIn and we are jointly responsible
of the collection of user usage data when visiting our site
web and transmission to the provider, but LinkedIn is solely responsible for the
related treatment for the achievement of the objectives described once
that the data has been transmitted. We have no influence on the scope and
on the nature of LinkedIn's use of data, therefore
We inform based on our state of knowledge: Through the integration of the
LinkedIn Insight tag, LinkedIn receives the information that the user has called up
the corresponding web page of our site or clicked on one of our
advertising. If you are registered with a LinkedIn service, LinkedIn may
assign the visit to your account. Even if you are not registered on LinkedIn
or you are not logged in, it is possible that the provider learns the
your IP address, time zone and other identifying characteristics and
you connect them to the actions assigned to you.

Disabling the LinkedIn Insight tag and more
Objections to advertising are possible in the ad settings
at www.linkedin.com/help/linkedin/answer/
62931?trk=microsites-frontend_legal_privacy-policy&lang=en and in
added to address
www.linkedin.com/psettings/guest-controls/retargeting-opt-out. Learn more
Setting options and information are available in the LinkedIn Privacy Policy
Center: https: //privacy.linkedin.com/de-de?lr=1/.

The legal basis for the processing of your data is
Art. 6 (1) letter a GDPR, i.e. the integration only takes place after the
your consent. You can withdraw your consent at any time, in
very simple way through our consent management platform.
LinkedIn also processes your personal data in the United States. LinkedIn has
voluntarily joined the EU-US Data Privacy Framework, which guarantees the
compliance with the European level of data protection on the basis of a decision
of adequacy by the European Commission (Art. 45 GDPR). We have
also agreed with LinkedIn the so-called standard protection clauses
of the data, the purpose of which is to ensure compliance with an adequate level of
data protection in the third country (see point XIX).

Further information on data processing by
LinkedIn can be requested from the provider, LinkedIn Ireland Unlimited
Company, Attn: Legal Dept. (Privacy Policy and User Agreement), Wilton Plaza,
Wilton Place, Dublin 2, Ireland; information on the LinkedIn Insight tag: https://business.linkedin.com/de-de/marketing-solutions/insight-tag?lr=1/ and
Privacy information: https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy/ .

Ads
Microsoft: Our websites use the Microsoft Advertising service.
Microsoft Advertising is an online advertising program provided by
Microsoft Ireland Operations Limited (One Microsoft Place, South County
Business Park, Leopardstown, Dublin 18, D18 P521).
("Microsoft").

We use the so-called Universal Event Tracking (UET)
within the Microsoft Advertising service, which collects and stores the
data from this website for marketing and optimization purposes. For this purpose,
Your browsing behavior on our website is analyzed, for example
example the offers displayed. For this purpose, Microsoft stores a cookie in the
user's browser. Visits are recorded via this cookie. The
cookie is used to uniquely identify the user's web browser
and not to identify you personally. Microsoft processes the data collected on
this website as the sole controller of the data
data.

The legal basis for the processing of your data is
Art. 6 (1) letter a GDPR, i.e. the integration only takes place after the
your consent. You can withdraw your consent at any time, in
very simple way via our consent management platform or
here: https://about.ads.microsoft.com/en-us/resources/policies/personalized-ads .

Microsoft also processes your personal data in
United States. Microsoft has voluntarily adhered to the EU-US Data Privacy
Framework, which ensures compliance with the European level of data protection
data on the basis of an adequacy decision by the Commission
European (Art. 45 GDPR). A. We have also agreed with Microsoft the
so-called standard data protection clauses, the purpose of which is to ensure
compliance with an adequate level of data protection in the third country (see
point XIX).

Learn more about Microsoft's policy in
privacy policy can be found at: https://privacy.microsoft.com/de-DE/privacystatement .
Here you can also assert your rights as a data subject against
Microsoft (for example, the right to erasure).

Reddit Ads: We place ads on the
Reddit platform (Reddit, Inc. 548 Market St. #16093 San Francisco,
California 94104) and we use analytics and tracking technology
platform conversions to verify the effectiveness of such ads. The
The purpose of data processing is to inform the user about our
offer and make it clear and easy to use for the user.

Reddit's representative in the EU is Reddit Ireland
Limited, Attn: Reddit EU Data Inquiries, Georges Quay Plaza, Floor 2 - 101,
Dublin D02 F856 Ireland.

When you visit our website, a cookie is established
direct connection between your browser and the Reddit server via a
"Reddit Conversion Pixel". Reddit thus receives, among other things,
the information from your browser that our website has been accessed from
your end device. We would like to point out that we do not have any
influence the scope of the transmitted data and their further use by
part of Reddit and therefore we inform you based on our state of knowledge:
By integrating Reddit conversion pixels, Reddit receives
the information that the user has called up the corresponding website of ours
site or clicked on one of our advertisements. If you are registered with a
Reddit service, Reddit can assign the visit to your account. Even if you don't
are you registered on Reddit or are not logged in, it is possible that the
provider learns and stores your IP address and other characteristics
identifying.

The information collected by the pixel is used to
generate conversion statistics for Reddit Ads customers who have
opted for conversion tracking. Reddit Ads customers learn
of the total number of users who clicked on their ad and were
redirected to a web page with a conversion tracking tag.

The legal basis for the processing of your data is
Art. 6 (1) letter a GDPR, i.e. the integration only takes place after the
your consent. You can withdraw your consent at any time, in
very simple way through our consent management platform.
As a logged in Reddit user, you can object to the storage and
to the use of data in a Reddit cookie by accessing the link https://www.reddit.com/personalization and
selecting the settings you prefer. If you choose this option, in the
your browser will set a new cookie (opt-out cookie) that
will inform Reddit that no data may be stored on your
browsing behavior. Please note that the setting must be made
for all browsers used. If all cookies of a browser are
deleted, this will also affect the Reddit opt-out cookie.

Reddit also processes your personal data in the United States
United. We have agreed with Reddit on the so-called standard clauses of
data protection, the purpose of which is to ensure compliance with a
adequate level of data protection in the third country (see point XIX).

For more information about privacy and your choices
of the user in this regard, consult the information on
Reddit's privacy policy at https://www.reddit.com/policies/
privacy-policy .

Ads
Apple Search: We use the Apple Search advertising platform
Ads to optimize the effectiveness of our advertising efforts. This
service is provided by Apple Distribution International Ltd, Hollyhill
Industrial Estate, Hollyhill, Cork, Ireland (see
https://searchads.apple.com/de/terms-of-service).

Account data, App Store data, App data
app transactions and contextual information (for example, the type of
device, iOS version, time of day, location of the
device, search query) are used to serve ads
relevant advertising. Apple creates segments to deliver advertising
customized in the App Store, Apple News, and the Stocks app. Segments are
groups of people with similar interests. Your personal data is
used to determine the segments to which it is assigned and the ads that
are proposed to him.

The legal basis for the processing of your data is
Art. 6 (1) letter a GDPR, i.e. the integration only takes place after the
your consent. You can withdraw your consent at any time, but
This revocation does not affect the legitimacy of the data processing carried out
until then. The easiest way to withdraw consent is our
consent management platform. In addition, you can disable the
interest-based ads as described at https://support.apple.com/en-us/HT202074.

Apple also processes your personal data in the United States
United States. We have agreed with Apple the so-called standard clauses of
data protection, the purpose of which is to ensure compliance with a
adequate level of data protection in the third country (see point XIX).

For further information on how we process your data,
data from Apple, see Apple Search Ads and Privacy at
https://searchads.apple.com/de/privacy, Apple Advertising & Privacy
at https://www.apple.com/de/legal/privacy/data/de/apple-advertising/ and
the Privacy Policy at
https://www.apple.com/de/legal/privacy/de-ww/.

Outbrain
Amplify: We use various tools from Outbrain UK Ltd on our website
(5 New Bridge Street, London, EC4V6JA, United Kingdom, hereinafter referred to as
such as: "Outbrain"). Outbrain uses cookies that allow us to
analyze how users use our website. To
To optimize our website we also use "Outbrain
Amplify" as well as "Outbrain Pixel". These tools there
allow us to analyse your usage behaviour and improve
our offer.

Outbrain allows us to direct you to further
contents of our website that may be of interest to you, as well as
to third-party websites. Reading recommendations, for example, are determined
based on the content read up to that point. The content viewed by
Outbrain are automatically controlled and provided by Outbrain in terms of
content and technology. The display of reading recommendations by
Outbrain based on the information transmitted by cookies is only
pseudonymized, that is, by a generated character string that is assigned
to the user. Personal data is not stored. Outbrain records
the origin of the device, the browser type and the anonymous IP address
of the user. To anonymize the IP address, the last octet of the address
IP is removed. Outbrain and we are jointly responsible for the
collection of user usage data when you visit our website and
of their transmission to the provider, but Outbrain is solely responsible for the
related treatment for the achievement of the objectives described once
that the data has been transmitted.

The European Commission has decided that the United Kingdom offers a
adequate level of protection with respect to the GDPR. The transfer of data
occurs on the basis of this adequacy decision (see point XIX). In the
extent to which data is provided to Outbrain and/or transferred to Outbrain Inc.
or to another recipient outside the EU/EEA, Outbrain will ensure that
the transfer complies with EU data protection laws
providing an adequate level of protection and that safeguards are in place
appropriate to protect data. See
https://www.outbrain.com/legal#amplify-dpa-us.

Further information on data processing by
Outbrain are available here: https://www.outbrain.com/privacy/ .

Lucky
Orange: On our website we use the service of the company Lucky
Orange (represented in the EU by: Lucky Orange, EU Business Partners, 10
Ashe Street, Clonakilty, County Cork, P85 E4303, Ireland, hereinafter:
"Lucky Orange"). We use the web analysis tool to
improve the functionality and usability of our website. Lucky Orange
analyzes the behavior of users who visit our website and
helps us to derive and make improvements to our website on
based on the collected data and evaluations in the form of so-called
"heat maps".

In this context, Lucky Orange stores cookies on your device.
user's computer, which are used to collect information
relating, among other things, to the start and end time of the visit, the duration
of the visit, the number of visits, the click, scroll and click movements
mouse, the keys pressed, as well as information transmitted by the browser
of the user, such as browser and version, geo-localization (country,
state, city), operating system and version, language, screen resolution
screen, the referring URL (via UTM tags in the URL), the features
behavioral triggered by Javascript or feature rules
behavioral, the Internet service provider's IP address, etc.

The legal basis for the processing of your data is
Art. 6 (1) letter a GDPR, i.e. the integration only takes place after the
your consent. You may withdraw your consent at any time,
very simply via our consent management platform.
You can also prevent the use of Lucky Orange cookies by setting
an opt-out cookie at the following link: https://privacy.luckyorange.com/ (click
on "Do Not Track Me").

Lucky Orange also processes your personal data in
United States. Lucky Orange has voluntarily adhered to the EU-US Data Privacy
Framework, which ensures compliance with the European level of data protection
data on the basis of an adequacy decision by the Commission
European (Art. 45 GDPR). We have also agreed with Lucky Orange the
so-called standard data protection clauses, the purpose of which is to ensure
compliance with an adequate level of data protection in the third country (see
point XIX).

For further information on data processing
transmitted, please see Lucky Orange's privacy policy: https://www.luckyorange.com/legal/privacy .

Social nets

We manage profile pages (also known as "pages")
fans") in various social networks and integrate social network functions into the
our website. These may be messenger services and so-called
social plug-ins. As a rule, social networks are able to analyse in a
complete user behavior. This is especially true if
use the corresponding networks to visit our social media sites.

We process your data based on our interest
prevailing legitimate interest pursuant to Art. 6 (1) letter f GDPR to provide you with this
functionality, to make our company known and to communicate with the
active social network customers and with other users (e.g. by responding
to users' questions).

If personal data is processed by a social network and
from us in relation to our profile pages or content from you
sent, and whether we have a say in the purposes and means of this
processing, we and the respective social network are jointly responsible for the
processing pursuant to Art. 26 GDPR (e.g. Facebook Page data
Insights).

We have no influence on the data processing.
personal data from social networks. Furthermore, we are not able to trace
all data processing operations within social networks and,
As a rule, we do not even have access to this data. Therefore, we provide you with
always this information with the help of the data protection declarations
data of the respective networks. In them you will find information on the purpose and
on the scope of data collection and further processing and use
of the data by the respective provider, as well as on your rights in this regard
and the setting options for protecting your privacy.
Below is information on data protection and
opt-out options of the respective networks.

We currently use fan pages and social plug-ins from
following social networks, as well as the messaging service
Whatsapp:

Facebook
(Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal
Harbour, Dublin 2, Ireland) - privacy policy: https: //www.facebook.com/about/privacy/,
Meta Shared Responsibility Agreement for Page Insights: https://www.facebook.com/legal/terms/information_about_page_insights_data ;
opt-out: https://www.facebook.com/settings?tab=ads e
http://www.youronlinechoices.com.

Instagram
(Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal
Harbour, Dublin 2, Ireland) - Privacy Policy / Opt-Out: http://instagram.com/about/legal/privacy/ .

TikTok
(TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380,
Ireland) - Privacy Policy / Opt-out: https: //www.tiktok.com/legal/page/eea/privacy-policy/de-DE.

YouTube
(Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) -
Privacy Policy
https://policies.google.com/privacy?hl=de&gl=de; Opt-Out: https://adssettings.google.com/authenticated .

LinkedIn
(LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland) -
Privacy Policy https://www.linkedin.com/legal/privacy-policy,
Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out .

Whatsapp
(WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour,
Dublin 2, Ireland) - Privacy Policy
https://www.whatsapp.com/legal/privacy-policy-eea, Opt-Out: https://faq.whatsapp.com/1285115568956956/ .

Profile Pages:

We use the technical platform and services of the suppliers
of these information services. We would like to point out that the use of the
Our appearances on social networks and their functions take place under the
own responsibility. This applies in particular to the use of the functions
interactive (e.g. commenting, sharing, rating). When you visit the
Our websites, social network providers collect, among other things, the
your IP address and other information that is stored in the form of
cookies on your terminal. This information is used to provide
to us, as account managers, statistical information
on interacting with us.

The data collected about you in this context are
processed by social networks and may be transferred to countries outside
of the European Union, particularly in the United States. According to their own
declarations, all the above suppliers maintain an adequate level of
data protection that corresponds to that of the previous Privacy Shield
EU-US, some providers have voluntarily joined the privacy framework
of EU-US data, which ensures compliance with the European level of protection
of data on the basis of an adequacy decision by the European Commission
(art. 45 GDPR) and we have stipulated the standard clauses with the companies
data protection (see point XIX).

We are not aware of how social media platforms
media use the data resulting from the visit to our account and
from interacting with our posts for their own purposes, how long these
data is stored and whether it is transmitted to third parties. The processing of data
may vary depending on whether the user is registered and connected to the social network
or that you visit the site as an unregistered and/or unlogged in user. When
access a post or account, the IP address assigned to your terminal is
transmitted to the social network provider. If the user is currently logged in
as a user, a cookie on your terminal device can be used to
track your movements within the network. The buttons embedded in the
websites allow platforms to record the user's visits to such
sites and assign them to the respective profile. This data can be
used to deliver content or advertising tailored to you. To avoid
for this to happen, you need to log out or disable the feature
"stay connected", delete cookies on your device and
restart your browser.

Furthermore, as an information service provider,
We only process data relating to the use of our service that you provide to us
and that require interaction. For example, if you ask us a question at
which we can only respond to by email, we will store your data in
compliance with the general principles of our data processing, which
we describe in this privacy policy. The legal basis for the
processing of your data on the respective social networks is Art. 6 (1) lit.
f GDPR.

To exercise your data protection rights,
you can contact both us and the social network provider. To the extent that
where one of the two parties is not responsible for the response or needs to
obtain the information from the other party, we or the supplier will forward the
your request to the respective partner. For questions regarding profiling
and the processing of your data while using the website, please
to contact the social network provider directly. For questions
on the processing of your interaction with us on our site, please write to
contact details we have provided to you (see point XX).

The information that the respective social networks receive and
The methods of use are described by the providers in their declarations
on data protection (see list above). There you will also find
information about contact options and settings options for
advertising. Learn more about social networks and how to protect your
Your own data is also available at https://www.youngdata.de/.

Social Plugins:

Social plugins are only loaded if the user has
previously activated the function by giving your consent. Through the
plug-ins, we allow you to interact with social networks and other users.
The legal basis for the use of the plug-ins is Art. 6 (1) lit. a GDPR, i.e.
to say that the integration occurs only after your consent.

The respective plug-in provider stores the collected data
about the user as usage profiles and uses them for advertising purposes,
market research and/or demand-oriented design of your site
web. This evaluation is carried out in particular (also for users who
(have not logged in) for the display of advertising based on
on your needs and to inform other users of the social network about your
activities on our website. You have the right to object to the creation of
these user profiles; to exercise this right you must contact the
respective plug-in provider. The data transfer takes place
regardless of whether or not you have an account with the provider
of the plug-in and that you are logged in. If you are logged in to the
plug-in provider, your data collected by us will be assigned
directly to your account with the plug-in provider. If you click on the
button activated and, for example, you connect to the page, the provider of the
plug-in also saves this information in your user account and
share publicly with your contacts. It is recommended to do so
regularly log out after using a social network, but above all
before activating the button, to avoid being assigned to your own
profile at the plug-in provider.

The information collected is stored on the servers of
suppliers, in the case of international suppliers also outside Europe.
In these cases, according to their own statements, the suppliers have
set a standard corresponding to the previous EU-US Privacy Shield, some
suppliers have voluntarily adhered to the data privacy framework
EU-USA, which ensures compliance with the European level of data protection
on the basis of an adequacy decision by the European Commission (Article 45
GDPR) and have committed to complying with data protection laws
applicable in international data transfer. We also have
agreed with suppliers the so-called standard protection clauses
data, the purpose of which is to ensure compliance with an adequate level of protection
of the data in the third country (see point XIX).

You can withdraw your consent at any time.
without this affecting the lawfulness of the processing until revocation. The way
The easiest way to withdraw consent is via our platform
consent management (see above) or via the functions of the providers of
social networks.

For more information on the purpose and scope of the
data collection and processing by the plug-in provider,
Please refer to the data protection declarations of these providers.
suppliers (see list above). There you will also receive further information
about your rights in this regard and your settings options for protection
of your privacy.

Video integration

YouTube:

To optimize our website, cookies are used on our website.
integrated YouTube components ("YouTube plugins"). YouTube is a
Internet video portal where videos can be viewed, rated,
commented and uploaded for free. The processing of personal data during
The use of YouTube is carried out by Google Ireland Limited, Gordon House,
Barrow Street, Dublin 4, Ireland, as controller. Further
Information about YouTube can be found at https://www.youtube.com/yt/about/de/.

When you visit a website that contains a video of
YouTube, the corresponding video is loaded from YouTube. By visiting the site
web, YouTube receives the information that the user has visited the corresponding
subpage of our website. In addition, basic data is transmitted
above, such as the IP address and time. We have no influence on this
data transmission. The legal basis for displaying videos is
Art. 6 (1) letter a GDPR, i.e. the integration only takes place with the
your consent.

This occurs regardless of whether YouTube provides
a user account through which the user is logged in or that no account exists
user account. If the user is logged in to Google, his data
will be assigned directly to your account. If you do not want your data
are associated with your YouTube profile, you must log out before
activate the button. YouTube stores your data as usage profiles
and uses them for advertising, market research and/or design purposes
of your website based on your needs. This assessment is carried out
in particular (even for users who are not logged in) for
provide needs-based advertising and to inform other users of the
social networks about your activities on our website. The user has the
right to object to the creation of these user profiles and to exercise
this right must contact YouTube.

The information collected is stored on the servers of
Google, even in the United States. In these cases, according to its own
information, the provider has voluntarily adhered to the privacy framework
of EU-US data, which ensures compliance with the European level of protection
of data on the basis of an adequacy decision by the European Commission
(Art. 45 GDPR). We have also agreed with Google the so-called clauses
data protection standards, the purpose of which is to ensure compliance with a
adequate level of data protection in the third country (see point XIX).

Further information on the processing of user data
are available in YouTube's privacy settings at
https://www.youtube.com/intl/ALL_at/howyoutubeworks/user-settings/privacy/,
in YouTube Help under "App Privacy Basics
from YouTube", available at
https://support.google.com/youtube/answer/10364219?hl=de, and in the information
on Google's privacy at or
https://policies.google.com/privacy?hl=de&gl=de. Information about a
possible opt-outs are available at
https://adssettings.google.com/authenticated.

Vimeo:

Our websites use video portal plugins
Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York
10011, USA.

Some of our Internet pages contain videos of
Vimeo. When you visit such a website, a cookie is established
connection to the Vimeo servers. This transmits to the Vimeo server which of the
our websites you have visited. In addition, Vimeo obtains your IP address.
This also applies if the user is not logged in to Vimeo.
or do not have a Vimeo account. We have no influence on this
data transmission. The legal basis for displaying videos is
Art. 6 (1) letter a GDPR, i.e. the integration only takes place with the
your consent.

If you log in to Vimeo as a member, Vimeo assigns these
information to your personal user account. When you click the button
of starting a video, this information can also be assigned to a
existing user account. You can prevent this assignment
by logging out of your Vimeo user account before using our
website and deleting the corresponding cookies from Vimeo.

The information collected by Vimeo is transmitted to the
Vimeo servers in the United States. Vimeoa has voluntarily joined the EU-US
Data Privacy Framework, which ensures compliance with the European level of
data protection on the basis of an adequacy decision by the
European Commission (Art. 45 GDPR). We have also agreed with Vimeo the
so-called standard data protection clauses, the purpose of which is to ensure
compliance with an adequate level of data protection in the third country (see
point XIX).

Further information on the processing of user data
are available in Vimeo's privacy policy: https://vimeo.com/privacy .

Your personal data may be transferred to third parties
in the following situations

When transmitting your personal data, we always guarantee
the highest possible level of safety and therefore we only work with
service providers and contractual and cooperation partners carefully
selected and forced.

XVIII. Categories of recipients

Navigation Company

For the delivery of orders we work with suppliers
external shipping services (e.g. I-dika Srl, BRT, UPS, DHL,
etc.).

These service providers receive personal data from us.
necessary for the execution of the respective order. In particular, these are the
your

Surname,
first name

Address
of delivery

Number
postal, if applicable (if you want your order to be delivered to
a DHL packing station).

Address
e-mail, if applicable (if the shipping service provider
would like to inform you by email about the expected delivery date).

Number
by telephone, if applicable (e.g. for forwarding communications).

The transmission takes place on the basis of our legitimate interest.
interest pursuant to Art. 6 (1) letter f GDPR, in order to be able to offer you
our customers a notification service and thus make sending as easy as possible
as convenient as possible for the customer.

IT Service Provider

We work with technical service providers and tools
information technology providers to provide our services to you. These providers
services include, for example, external IT service providers who enable
the technical provision of our website and shopping apps (e.g. Shopify).
The main service providers are:

Web presence:

Shopify:
Our web presence and our shopping apps, including the
provision of the site and webshop, is managed by Shopify. Shopify offers
a complete e-commerce platform that enables merchants to
create an online store and unify their business activities.
Shopify (platform and app) is also used for retail businesses
marketing (e.g. personalized messages,) and for the management and
customer support (e.g. back in stock emails, confirmation emails,
reactivation, web push notifications). Learn more about the provider and
on the apps are available at https://www.shopify.com/de and
https://apps.shopify.com/.

The Service Provider for Europe is Shopify International
Limited, 2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32,
Ireland, with VAT number IE 3347697KH (see point 13 of the Terms and
Shopify Terms, https://www.shopify.de/legal/agb).

Your personal data (e.g. name, address,
billing, shipping address, email address, phone number and
payment information, as well as information on how to access the
our websites, our account and our platform) are processed
from Shopify International Limited, the Shopify company in Ireland. During
of the provision of the Services, this personal data may be transferred to
other regions, including Canada and the United States. Your personal data is
protected by Canadian law when sent to Canada. The Commission
EU has determined that this provides adequate protection for your data. If then
we send such personal data to a country outside of Canada (for example, to
subprocessors), such data are protected by similar contractual obligations to
those provided for by the Commission's standard contractual clauses
European Union (https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de ).

Learn more about data collection and use
personal data are available in the "Privacy Policy for
customers (for customers who purchase from stores that use Shopify)"
at https://www.shopify.com/de/legal/privacy/customers,
in Shopify's Privacy Policy at https://www.shopify.com/de/legal/datenschutz and
in the Addendum on data processing at the address
https://www.shopify.com/de/legal/dpa.

REVIEWS.io:
To receive your experiences and reviews, we use REVIEWS.io.
When you create a review on the site or page (Collector Page) that
is sent to you by email,, your data is collected by REVIEWS.io
2020 GmbH, Skalizer Straße 104, 10997 Berlin, Germany and broadcast
to us. Your comment will then be published on our website.
We may contact you by email to request information or
documentation to prove your experience. For further information
information on privacy, including how to delete your data
reviews, please see REVIEWS.io's privacy policy: https://www.reviews.io/front/user-privacy-policy .

reCaptcha:
Furthermore, on our websites we use the Google reCaptcha service
to determine whether to submit a particular entry in our form
comment is a human or a computer. Google uses the following data
to verify whether the user is a human or a computer: IP address
of the terminal used, the website visited with us in which it is
incorporated the captcha, the date and duration of the visit, the data of
recognition of the browser and the type of operating system used, the account
Google if you are logged in to Google, mouse movements on the
reCaptcha areas and activities that require image identification.
The legal basis for the data processing described is Art. 6 (1)
letter f GDPR. The data processing has a legitimate interest on the part of
ours to ensure the security of our website and to protect us from
Automatic Inserts (Attacks). An Overview of Basic Usage
of data by Google is available in the privacy policy
at www.google.com/intl/de/policies/privacy/. Information on
a possible opt-out is available at the address
https://adssettings.google.com/authenticated.

Typeform:
We use the Typeform service to display online surveys on
our website. Typeform is operated by TYPEFORM SL, C/Bac de Roda, 163,
08018 Barcelona, Spain (https://www.typeform.com/).

In this context the following data are collected and processed
data: IP address, e-mail address, duration of visit, date and time of
visit and, if applicable, further data collected as part of the survey (see
points XIV and XV).

As part of processing via Typeform, the data
can be transferred to the United States. The security of the transfer is
regularly guaranteed by the so-called standard contractual clauses, which
ensure that the processing of personal data is subject to a level of
GDPR compliant security (see point XIX).

For more information on the collection and use of
personal data and your options to object to and remove such data from Typeform,
Please see Typeform's privacy policy at
https://admin.typeform.com/to/dwk6gt.

Microsoft
Business Central: for customer management, sending invoices and
transport document management.

Payment Service Provider

We offer several payment options, such as cash payment
advance payment, payment by credit card and payment by PayPal. For
process payments, we pass your payment data to the payment institution
credit or to the payment service provider responsible for the payment. These
companies may use your data only for order processing and
not for other purposes. For further information on data processing
personal data from these service providers, please see the
their privacy policies:

Shop
Pay: On our website and our shopping apps we use Shop Pay,
an online payment solution service from Shopify. The part
Shopify's contractor for Europe is Shopify International Limited, 2nd
Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32,
Ireland, with VAT number IE 3347697KH (see point 13 of the Terms and
Shopify Terms and Conditions, https://www.shopify.de/legal/agb). Shopify processes
the payment information provided by the user at checkout
(for example, the number of the card used for payment or the number
of the bank account) and other data provided by the user (for example, name,
address, email address and telephone number). This data may
be used to determine whether the user is entitled to
certain offers or payment methods. For more information
on the collection and use of personal data, see the entry
"Privacy Notice for Shopify App Users (for
users of apps, customer-facing services or tools
Shopify free business templates)" at
https://www.shopify.com/de/legal/privacy/app-users, the Privacy Policy
Shopify privacy at
https://www.shopify.com/de/legal/datenschutz and the Addendum on
Shopify data processing at https://www.shopify.com/de/legal/dpa.

Amazon
Pay: We allow the payment process to be handled via the
payment service provider Amazon Pay (Amazon Payments Europe
sca, 38 avenue JF Kennedy, L-1855 Luxembourg). In this context,
We transmit the following data to Amazon Payments: name, surname, address,
email address and telephone number. Amazon Payments Europe reserves the right
the right to have a credit check performed to ensure the
availability and the user's ability to pay. For more information,
see the Amazon Pay privacy policy: https://pay.amazon.de/help/201212490?ld=NSGoogle and https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010& ref_=footer_privacy&ld=NSGoogle&language=en_DE¤cy=EUR.

Google
Pay: The payment process is handled by the payment service provider.
Google Pay payment (Google Ireland Limited, Gordon House, Barrow Street,
Dublin 4, Ireland). For payment processing purposes, the
information provided by the user during the ordering process,
together with your order information, will be transmitted to Google.
Google reserves the right to collect, store and analyze
certain transaction-specific information for each transaction
made through Google Pay. In addition, Google reserves the right,
within the scope of its privacy policy, to transmit the data
collected from third-party suppliers and affiliates. For more information,
Please see the Google Pay privacy policy and related policies.
Terms of Use and Policies, available at
https://support.google.com/googlepay/answer/9039712?hl=de.

Payments
Shopify: We use the payment service provider "Shopify
Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt
Street, Dublin 2. If you choose a payment method offered through the
payment service provider Shopify Payments, in particular the
credit and debit card payment, payment processing
is carried out through the technical service provider Stripe Payments
Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland,
to which we transmit the information you provide during the process
of ordering, along with your order information (name,
address, account number, bank selection code, card number
of credit, if applicable, invoice amount, currency and number
transaction) pursuant to Art. 6 (1) letter b GDPR. Your data will be
transmitted only for the purpose of processing payments with Stripe Payments
Europe Ltd. and only to the extent necessary for this purpose.
Learn more about Shopify Payments data protection.
available at the following Internet address: https://www.shopify.com/legal/privacy .
Stripe Payments Europe Ltd. data protection information.
are available at the following address: https://stripe.com/de/privacy .

Klarna
- Pay now or pay later: In collaboration with Klarna Bank AB (publ),
Sveavägen 46, 111 34 Stockholm, Sweden, we offer several options
payment.

If you choose the Sofortüberweisung payment method, yes
pay without further registration via online banking with PIN and TAN.
The insertion of this data takes place after the completion of the order on
pages of Sofort GmbH as part of the Klarna Group. For the transfer
We send the following personal data relating to your order to Klarna: Order number
order, payment amount, country.

If you have opted for the "Klarna Invoice" or
for “Purchase by Installments”, for processing your payment
purchase and for identity and credit checks by Klarna
we need the following data: Name and surname, address, date of birth,
email address and order data, such as invoice amount,
article, delivery method. Klarna also collects and uses information
on previous payment behavior and the probability values of such
behavior in the future.

In this regard, please take note of the
Klarna's General Terms and Conditions and Data Protection Information,
available at https://www.klarna.com/de/agb/ and
https://www.klarna.com/de/datenschutz/.

Social networks and other marketing partners

As part of advertising campaigns, we share your
data with social network providers. You can find further information
at point XVII.

Authorities and other third parties

If we are obliged to do so by an official decision or
judicial or if we are entitled to do so, for example because it is necessary for
the prosecution of criminal offences or for the exercise and enforcement of our
rights and claims, we will transmit your data to law enforcement agencies or
to other third parties, if necessary.

XIX. Legal basis for the transmission

We do not transfer your personal data to third parties for purposes
other than those indicated in this privacy policy.
We will disclose your personal data to third parties only if:

you have
given your explicit consent pursuant to Art. 6 (1) lit. a GDPR
(e.g. social media networks),

that is
it is legally permitted and necessary for the processing of reports
contractual with you (e.g. shipping companies, service providers
(payment) pursuant to Art. 6 (1) letter b GDPR,

In the
where there is a legal obligation to disclose pursuant to Art. 6
(1) letter c GDPR (e.g. authorities),

there
disclosure is necessary pursuant to Art. 6 (1) lit. f GDPR for
protect legitimate interests and there is no reason to believe that the user
has a prevailing interest worthy of protection in not disclosing their
data (e.g. notification service by shipping companies;
exercise and enforcement of our rights and claims)
or

This
is carried out by a service provider (e.g. service provider
technicians) acting on our behalf and under our sole instructions, which
we have carefully selected (Art. 28 (1) of the GDPR) and with which
we have entered into a corresponding contract on the processing
commissioned (Art. 28 (3) GDPR), which obliges our contractor, among others
the other, to implement adequate security measures and grants us broad
powers of control.

Service providers and other contractual partners and
cooperation may transfer your personal data to other countries. If the
your data is processed outside the European Economic Area (EEA),
This may involve transferring your data to a country with a
data protection standards lower than those of the European Union. This may
lead, for example, to the processing of your data by the authorities
public, for control and monitoring purposes, possibly even without
possibility of legal recourse.

We put in place appropriate safeguards, including
entering into EU standard data protection clauses (see text
of the contract to the address
https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de), in case
personal data are processed outside the EU and no specific directive has been adopted
no adequacy decision by the European Commission.

The European Commission's adequacy decisions are
available, for example, for Canada, the United Kingdom and Switzerland (the list
is available at the address
https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en).

Your rights

Who
to contact?

If you have any questions, please feel free to contact us at any time.
moment (see point I). You are welcome to contact us by email: info@wibeflavor.com

XXI. Security of personal data

The security of your personal data is important to us,
but please note that no method of transmission on
The Internet or electronic storage is secure. Therefore, we cannot
guarantee the absolute security of your personal data.

When you visit our website, we use the widespread
SSL/TLS (Secure Socket Layer / Transport Layer Security) procedure in relation
at the highest encryption level supported by your browser. By default
This is a 256-bit encryption. If your browser does not support
256-bit encryption, we use 128-bit v3 technology instead. For
know if a single page of our website is transmitted in
encrypted, just display the key or padlock symbol
in the browser status bar.

We also use technical security measures and
adequate organizational measures to protect your data from manipulation
accidental or intentional, partial or complete loss, destruction or access
unauthorized by third parties. We continuously adapt our security measures
safety in line with technical developments.

XXII. Links to external websites

Our service may contain links - so-called
hyperlink - to websites not operated by us. If you click on a third-party link,
you will be redirected from one of our websites directly to the site or sites
web of the other provider. You will recognize it, among other things, by the change of
URL.

We assume no responsibility for the content, the
confidential treatment of your data or other practices of these sites and services
of third parties, as we have no influence on them. We invite you to
inform you about the processing of your personal data by these companies
directly on their respective websites.

XXIII. Right of withdrawal in case of
processing based on consent

If your personal data is collected on the basis of
consent pursuant to Art. 6 (1) lit. a GDPR (cf. point V) (e.g.
personalized news), you have the right to withdraw your consent at any time
any time and without stating the reasons. This has the consequence that no
we will no longer be able to continue processing the data based on this consent for the
future. However, the revocation of consent does not affect the lawfulness of the
processing carried out on the basis of consent until revocation. To exercise
the right of revocation, simply send an email to info@wibeflavor.com.

XXIV. Right to object

To the extent that your personal data is collected
on the basis of legitimate interests pursuant to Art. 6 (1) lit. f GDPR (cf.
point V), you have the right to object to the processing of your personal data
pursuant to Art. 21 GDPR, provided that there are reasons arising from the
your particular situation. If your objection is directed against the
direct advertising, you have a general right of objection; in these cases
no justification is required. To exercise the right to object, it is
simply send an email to info@wibeflavor.com.

XXV. The rights of the interested party

As a data subject affected by data processing
personal, you have the right to,

to request
information about your personal data processed by us pursuant to Art.
15 GDPR. In particular, you can request information on the purposes of the
processing, on the category of personal data, on the categories of
recipients to whom your data has been or will be communicated, on
expected retention period, on the existence of a right of
rectification, erasure, limitation of processing or
opposition, on the existence of a right of complaint, on the origin of the
your data if they have not been collected by us, as well as on the existence of a
automated decision-making, including profiling and, where applicable,
case, significant information on the related details;

to request
without delay the correction of incorrect or incomplete personal data by us
stored, pursuant to Art. 16 GDPR;

to the
pursuant to Art. 17 GDPR to request the deletion of your data
personal data stored by us, unless the processing is necessary
for the exercise of the right to freedom of expression and information,
for the fulfillment of a legal obligation, for reasons of public interest or
for the establishment, exercise or defence of legal rights;

Of
request the limitation of the processing of your personal data to
pursuant to Art. 18 of the GDPR, to the extent that you contest the accuracy
of the data, the processing is unlawful, we no longer need the data and
you oppose their cancellation because you need them to enforce,
exercise or defend legal claims. You also have the right under
Article 18 of the GDPR if you have objected to the processing in accordance with
to Article 21 of the GDPR;

in
In accordance with Art. 20 GDPR, to receive your personal data that we
you have provided in a structured, common and machine-readable format
machine or to request its transfer to another person in charge of the
treatment; and

present
a complaint to a supervisory authority pursuant to Art. 77 GDPR. Of
Normally, you can contact the supervisory authority of your place
habitual place of residence or work or to our registered office. In Italian,
the supervisory authority is the Privacy Authority, GDPD, Piazza
Venice 11, 00187 - Rome (Italy), telephone: +39 06.696771,
e-mail:protocollo@gpdp.it, website: https://www.garanteprivacy.it/home.

To exercise your data protection rights,
exception of the right to lodge a complaint with a supervisory authority, is
simply send an email to info@wibeflavor.com.

XXVI. Data protection for children

Our services are not intended for persons under the age of
to 14 years of age. We do not knowingly collect personal information from individuals
under the age of 14. If you are a parent or guardian and you know that
your child has provided us with personal information, please
contact us. If we learn that we have collected personal information from you,
persons under the age of 14 without having verified the consent of their
parents, we will remove such information from our servers.

If we are to rely on consent as a basis
legal basis for the processing of your data and your country requires the
parental consent, we may obtain your parent's consent
before collecting and using such data.

Updating and modifying this privacy policy
privacy

This privacy policy is updated as of
February 2024. We may update our privacy policy from time to time.
much. Changes may be necessary due to further
development of our websites, applications and offers
or due to changes in legal or regulatory requirements.

We will inform you of any changes by posting the new
version of the privacy policy on this page. You can access
and print the current version of the privacy policy at any time.
moment on this page.

It is recommended that you check this regularly.
privacy policy to check for any changes. Changes
will come into effect when they are published on this page.