Pick8ship Technology AG (hereinafter also referred to as "we", "us") obtains and process-es personal data concerning you or other persons (so-called "third parties"). We use the term "data" here synonymously with "personal data" or "personal information".

Personal data" refers to data that relates to specific or identifiable persons, i.e. it is possi-ble to draw conclusions about their identity based on the data itself or with correspond-ing additional data. "Particularly sensitive personal data" is a category of personal data that is particularly protected by the applicable data protection law. For example, data re-vealing racial and ethnic origin, health data, information on religious or ideological be-liefs, biometric data for identification purposes and information on trade union member-ship are considered to be particularly sensitive personal data. In para. 3 you will find de-tails of the data that we process within the scope of this privacy policy. "Processing" means any handling of personal data, e.g. obtaining, storing, using, adapting, disclosing and deleting.

In this Privacy Policy, we describe what we do with your data when you visit www.pick8ship.com/ or other websites of ours (hereinafter collectively referred to as the "Website"), our services or products, are otherwise in contact with us under a contract, communicate with us or otherwise deal with us. Where appropriate, we will provide you with timely written notice of additional processing activities not mentioned in this Privacy Policy. In addition, we may inform you separately about the processing of your data, e.g. in declarations of consent, contractual terms and conditions, additional data protection declarations, forms and notices.

If you transmit or disclose data about other persons, such as family members, work col-leagues, etc., we assume that you are authorised to do so and that this data is correct. By transmitting data about third parties, you confirm this. Please also ensure that these third parties have been informed about this privacy policy.

This privacy policy is designed to meet the requirements of the EU General Data Protec-tion Regulation and the Swiss Data Protection Act. However, whether and to what extent these laws are applicable depends on the individual case.

Pick8ship Technology AG (UID CHE-458.749.318), Sonnentalstrasse 8, 8600 Dübendorf ("Pick8ship Technology"), is responsible under data protection law for the data processing described in this Privacy Policy, unless otherwise communicated in individual cases.

For every data processing operation, there are one or more bodies that are responsible for ensuring that the processing complies with the requirements of data protection law. This body is called the controller. It is responsible, for example, for responding to requests for information (para. 11) or ensuring that personal data is secured and not used in an unauthorized manner.

Other bodies may also be jointly responsible for the data processing described in this pri-vacy policy if they are involved in deciding on the purpose or organization. If you would like information on the individual controllers for a specific data processing operation, you can request this from us within the scope of the right to information (para. 11) to request information. Pick8ship Technology remains your primary contact, even if there are other joint controllers.

In no. 3, in no. 7 and in no. 12 you will find further information on third parties with whom we work and who are responsible for their processing. If you have any questions or wish to exercise your rights vis-à-vis these third parties, please contact them directly.

You can contact us for your data protection concerns and to exercise your rights in accord-ance with para. 11 as follows:

Pick8ship Technology AG
Switzerland Innovation Park Zurich
Sonnentalstrasse 8
8600 Duebendorf (Zurich)
E-mail: office@pick8ship.com

We process various categories of data about you. The most important categories are as follows:

• Technical data: When you use our website or other electronic services, we collect the IP address of your end device and other technical data to ensure the function-ality and security of these services. This data also includes logs in which the use of our systems is recorded. To ensure the functionality of these offers, we can also as-sign you or your end device an individual code (e.g. in the form of a cookie, cf. 12). The technical data itself does not allow any conclusions to be drawn about your identity. However, in the context of user accounts, registrations, access controls or the processing of contracts, they can be linked to other data categories (and thus possibly to your person).

The technical data includes, among other things, the IP address and information about the operating system of your end device, the date, region and time of use as well as the type of browser you use to access our electronic offers. This can help us to transmit the correct formatting of the website. Although we know from the IP address which provider you are using to access our offers (and therefore also the region), we cannot usually deduce who you are from this. This changes if you cre-ate a user account, for example, because personal data can then be linked to tech-nical data (e.g. we can see which browser you are using to access an account via our website). Examples of technical data include logs that accumulate in our sys-tems (e.g. the log of user logins on our website).

• Registration data: Certain offers and services can only be used with a user account or registration, which can be done directly with us or via our external login service providers. In doing so, you must provide us with certain data and we collect data on the use of the offer or service. Registration data may be collected during access controls to certain systems; depending on the control system, biometric data may also be collected. Registration data includes the information you provide when you create an account on our website (e.g. user name, password, name, e-mail ad-dress).

• Communication data: If you are in contact with us via the contact form, by e-mail, telephone or chat, by letter or other means of communication, we collect the data exchanged between you and us, including your contact details and the marginal data of the communication. If we want or need to establish your identity, e.g. if you request information, apply for media access, etc., we collect data to identify you (e.g. a copy of an identity document).

Communication data includes your name and contact details, the manner, place and time of communication and, as a rule, its content (i.e. the content of emails, letters, chats, etc.). This data may also contain information about third parties. For the purpose of identification, we may also process your ID number or a password set by you.

• Master data: We define master data as the basic data that we require in addition to the contract data (see below) for the processing of our contractual and other business relationships or for marketing and advertising purposes, such as name, contact details and information, e.g. about your role and function, your bank ac-count(s), your date of birth, customer history, powers of attorney, signature au-thorisations and declarations of consent. We process your master data if you are a customer or other business contact or work for one (e.g. as a contact person of the business partner), or because we want to contact you for our own purposes or the purposes of a contractual partner (e.g. in the context of marketing and advertising). We receive master data from you yourself (e.g. when a contract is concluded or as part of a registration), from organizations for which you work or from third parties such as our contractual partners, associations and address dealers and from public-ly accessible sources such as public registers or the Internet (websites, social me-dia, etc.). We generally store this data for 10 years from the last exchange with you, but at least from the end of the contract. This period may be longer if this is neces-sary for reasons of proof or to comply with legal or contractual requirements or for technical reasons .

Master data includes, for example, data such as name, address, e-mail address, tel-ephone number and other contact details, gender, date of birth, nationality, de-tails of associated persons, websites, social media profiles, photos and videos, cop-ies of ID cards; furthermore, details of your relationship with us (customer, suppli-er, visitor, service recipient, etc.). We also collect information about your relation-ship with us (customer, supplier, visitor, service recipient, etc.), information about your status with us, allocations, classifications and distribution lists, information about our interactions with you (possibly a history of these with corresponding en-tries), reports (e.g. from the media) or official documents (e.g. extracts from the commercial register, authorizations, etc.) that relate to you. We collect payment details such as your bank details, account number and credit card details. Consent or blocking notices are also part of the master data, as is information about third parties.

For contact persons and representatives of our customers, suppliers and partners, we process master data such as name and address, information on role, function in the company, qualifications and, if applicable, information on superiors, employ-ees and subordinates and information on interactions with these persons.

Master data is not collected comprehensively for all contacts. Which data we col-lect in detail depends in particular on the purpose of the processing.

• Contract data: This is data that arises in connection with the conclusion or pro-cessing of a contract, e.g. information about contracts and the services to be pro-vided or provided, as well as data from the run-up to the conclusion of a contract, the information required or used for processing and information about reactions. We generally collect this data from you, from contractual partners and from third parties involved in the fulfilment of the contract, but also from third-party sources (e.g. providers of creditworthiness data) and from publicly accessible sources. We generally store this data for 10 years from the last contractual activity, but at least from the end of the contract. This period may be longer if this is necessary for rea-sons of proof or to comply with legal or contractual requirements or for technical reasons.

Contract data includes information about the conclusion of the contract, about your contracts, e.g. type and date of conclusion of the contract, information from the application process (such as an application for our products or services) and in-formation about the contract in question (e.g. its duration) and the processing and administration of the contracts (e.g. information in connection with invoicing, cus-tomer service, support with technical matters and the enforcement of contractual claims). Contract data also includes information on defects, complaints and ad-justments to a contract, as well as information on customer satisfaction, which we can collect e.g. by means of surveys. Contract data also includes financial data such as information on creditworthiness (i.e. information that allows conclusions to be drawn about the likelihood of claims being settled), reminders and debt collec-tion. We receive some of this data from you (e.g. when you make payments), but also from credit agencies and debt collection agencies and from publicly accessible sources (e.g. a commercial register).

• Behavioural and preference data: Depending on the relationship we have with you, we try to get to know you and better tailor our products, services and offers to you. To do this, we collect and use data about your behavior and preferences. We do this by evaluating information about your behavior in our area, and we can also supplement this information with data from third parties, including from pub-licly accessible sources. Based on this, we can, for example, calculate the probabil-ity that you will use certain services or behave in a certain way. Some of the data processed for this purpose is already known to us (e.g. when you use our services), or we obtain this data by recording your behavior (e.g. how you navigate our web-site). We anonymize or delete this data when it is no longer relevant for the pur-poses pursued. This period may be longer if this is necessary for reasons of proof or to comply with legal or contractual requirements or for technical reasons. We describe how tracking works on our website in section 12.

• Other data: We also collect data from you in other situations. In connection with official or court proceedings, for example, data is collected (such as files, evidence, etc.) that may also relate to you. We may also collect data for health protection reasons (e.g. as part of protection concepts). We may receive or produce photos, videos and audio recordings in which you may be recognisable (e.g. at events, through security cameras, etc.). We may also collect data about who enters certain buildings and when, or who has the corresponding access rights (including during access controls, based on registration data or visitor lists, etc.), who takes part in events or campaigns and when, or who uses our infrastructure and systems and when. Finally, we collect and process data about our shareholders and other inves-tors; in addition to master data, this includes information for the relevant regis-trars, regarding the exercise of their rights and the organisation of events (e.g. gen-eral meetings). The retention period for this data depends on the purpose and is limited to what is necessary. Data about you as a shareholder or other investor will be retained in accordance with the requirements of company law, but in any case for as long as you are invested.

Many of the items listed in this para. 3 you disclose to us yourself (e.g. via forms, as part of communication with us, in connection with contracts, when using the website, etc.). You are not obliged to do so, subject to individual cases, e.g. as part of binding protection concepts (legal obligations). If you wish to conclude contracts with us or make use of ser-vices, you must also provide us with data as part of your contractual obligation in accord-ance with the relevant contract, in particular master data, contract data and registration data. When using our website, the processing of technical data is unavoidable. If you wish to gain access to certain systems or buildings, you must provide us with registration data. In the case of behavioral and preference data, however, you always have the option of objecting or not giving your consent.

Insofar as this is not unauthorized, we also obtain data from publicly accessible sources (e.g. debt collection registers, land registers, commercial registers, media or the internet, including social media) or receive data from other companies within our group, from au-thorities and from other third parties (such as credit agencies, address dealers, associa-tions, contractual partners, internet analysis services, etc.).

We process your data for the purposes explained below. Further information for the online area can be found in para. 12 and –. These purposes and the underlying objectives represent legitimate interests of us and, where applicable, of third parties. You will find further information on the legal basis of our processing in Section 0.

We process your data for purposes in connection with communication with you, in par-ticular to respond to enquiries and assert your rights (para. 11) and to contact you in the event of queries. In particular, we use communication data and master data for this pur-pose and, in connection with offers and services used by you, also registration data. We retain this data in order to document our communication with you, for training purposes, for quality assurance and for enquiries.

This concerns all purposes in connection with which you and we communicate, whether in customer service or counselling, authentication in the event of use of the website or for training and quality assurance (e.g. in the area of customer service). We further process communication data so that we can communicate with you by e-mail and telephone, as well as messenger services, chat, social media, letter and fax. Communication with you usually takes place in connection with other processing purposes, e.g. so that we can provide services or respond to a request for information. Our data processing also serves as proof of communication and its content.

We process data for the establishment, administration and fulfilment of contractual relationships.

We conclude contracts of various kinds with our business and private customers, with suppliers, subcontractors or other contractual partners, such as partners in projects or with parties in legal disputes. In particular, we process master data, contract data and communication data and, depending on the circumstances, registration data of the cus-tomer or the persons to whom the customer provides a service.

As part of the business initiation process, personal data - in particular master data, contract data and communication data - is collected from potential customers or other contractual partners (e.g. in an order form or contract) or results from communication. We also process data in connection with the conclusion of the contract to check creditworthiness and to open the customer relationship. In some cases, this information is checked for compliance with legal requirements.

As part of the processing of contractual relationships, we process data for the administration of the customer relationship, for the provision and collection of contractual services (which also includes the involvement of third parties, such as logistics companies, advertising service providers, banks, insurance companies or credit agencies, which may in turn provide us with data), for consulting and for customer support. The enforcement of legal claims arising from contracts (debt collection, legal proceedings, etc.) is also part of processing, as are accounting, contract termination and public communication.

We process data for marketing purposes and to maintain relationships, e.g. to send our customers and other contractual partners personalized advertising about our products and services. This may take the form of newsletters and other regular contacts (electronically, by post, by telephone), via other channels for which we have contact information from you, but also as part of individual marketing campaigns. You can refuse such contacts at any time (see at the end of this section). 4) or refuse or revoke your consent to be contacted for advertising purposes. With your consent, we can target our online advertising on the Internet more specifically to you (see section. 12).

We continue to process your data for market research, to improve our services and operations and for product development.
We may also process your data for security purposes and for access control.
We process personal data to comply with laws, instructions and recommendations from authorities and internal regulations ("compliance").
We also process data for the purposes of our risk management and as part of prudent corporate governance, including business organization and corporate development.
We may process your data for other purposes, e.g. as part of our internal processes and administration.

If we ask for your consent for certain processing, we will inform you separately about the corresponding purposes of the processing. You can revoke your consent at any time with effect for the future by sending us a written notification (by post) or, unless otherwise stated or agreed, by email; our contact details can be found in Section 2. 2. For the revocation of your consent in the case of online tracking, see para. 12. If you have a user account, you may also be able to withdraw your consent or contact us via the website or other service in question. Once we have received notification of the withdrawal of your consent, we will no longer process your data for the purposes to which you originally consented, unless we have another legal basis for doing so. The withdrawal of your consent does not affect the lawfulness of processing based on consent before its withdrawal.

Where we do not ask for your consent for processing, we base the processing of your personal data on the fact that the processing is necessary for the initiation or execution of a contract with you (or the entity you represent) or that we or third parties have a legitimate interest in it, in particular in order to fulfil the purposes described above in Section 4. 4 described above and the associated objectives and to be able to implement corresponding measures. Our legitimate interests also include compliance with statutory provisions, unless this is already recognized as a legal basis by the applicable data protection law (e.g. in the case of the GDPR, the law in the EEA and Switzerland).

If we receive sensitive data (e.g. health data, information on political, religious or ideological views or biometric data for identification purposes), we may also process your data based on other legal grounds, e.g. in the event of disputes due to the necessity of processing for any legal proceedings or the enforcement of or defense against legal claims. In individual cases, other legal grounds may apply, which we will communicate to you separately if necessary.

We may use certain of your personal characteristics for the purposes set out in para. 4 based on your data (section 3) automatically ("profiling") if we want to determine preference data , but also to determine risks of misuse and security risks, to carry out statistical analyses or for operational planning purposes. For the same purposes, we can also create profiles, i.e. we can combine behavioral and preference data, but also master and contract data and technical data assigned to you in order to better understand you as a person with your different interests and other characteristics.

In both cases, we pay attention to the proportionality and reliability of the results and take measures to prevent misuse of these profiles or profiling. If these can have legal consequences or significant disadvantages for you, we always provide for a manual review.

In connection with our contracts, the website, our services and products, our legal obligations or otherwise to safeguard our legitimate interests and the other data protection requirements set out in para. 4 we also transfer your personal data to third parties, in particular to the following categories of recipients:

• Service providers: We work with service providers in Switzerland and abroad who process data about you on our behalf or under joint responsibility with us or who receive data about you from us under their own responsibility (e.g. IT providers, mail order companies, advertising service providers, login service providers, cleaning companies, banks, insurance companies, debt collection companies, credit agencies or address verifiers). For information on the service providers used for the website, see section. 12. Our central service providers in the IT sector are Microsoft (Office, Teams), Aut O'Mattic A8C Ireland Ltd (web hosting, contact form), Zoom Video Communications, Inc (Zoom). Our central service provider in the area of office infrastructure is the Zurich Innovation Park Foundation.

To enable us to provide our products and services efficiently and focus on our core competences, we procure services from third parties in numerous areas. These services include IT services, the dispatch of information, marketing, sales, communication and printing services, facility management, security and cleaning, the organization and staging of events and receptions, debt collection, credit agencies, address verifiers (e.g. to update address databases in the event of relocations), antifraud measures and services from consulting firms, lawyers, banks, insurers and telecommunications companies. We provide these service providers with the data required for their services, which may also concern you. These service providers may also use such data for their own purposes, e.g. information about outstanding debts and your payment behavior in the case of credit agencies or anonymized information to improve services. In addition, we conclude contracts with these service providers that include provisions for the protection of data, insofar as this does not arise from the law. Our service providers may also process data on how their services are used and other data generated in the course of using their services as independent controllers for their own legitimate interests (e.g. for statistical analyses or billing). Service providers provide information about their independent data processing in their own data protection declarations.

You can find more information on how Microsoft processes data here: https://privacy.microsoft.com/en-us/privacystatement; for the use of Microsoft Teams in particular here: https://learn.microsoft.com/en-us/microsoftteams/teams-privacy.

You can find more information on how the Innovation Park Zurich Foundation processes data here: https://www.switzerland-innovation.com/zurich/privacy-policy.

More information on how Aut O'Mattic A8C Ireland Ltd. processes data can be found here: https://automattic.com/privacy/.

More information on how Zoom Video Communications, Inc. processes data can be found here: https://explore.zoom.us/en/privacy/.

• Contractual partners including customers: This initially refers to customers (e.g. service recipients) and other contractual partners of ours, because this data transfer arises from these contracts. If you work for such a contractual partner yourself, we may also transfer data about you to them in this context. The recipients also include contractual partners with whom we cooperate or who advertise for us and to whom we therefore transmit data about you for analysis and marketing purposes (these may in turn be service recipients, but also sponsors and providers of online advertising, for example).

• Authorities: We may disclose personal data to offices, courts and other authorities in Switzerland and abroad if we are legally obliged or authorized to do so or if this appears necessary to protect our interests. This may also include health data. The authorities process data about you that they receive from us under their own responsibility.

• Other persons: This refers to other cases where the inclusion of third parties arises from the purposes set out in para. 4.

-

All these categories of recipients may in turn involve third parties, so that your data may also become accessible to them. We can restrict processing by certain third parties (e.g. IT providers), but not by other third parties (e.g. authorities, banks, etc.).

We reserve the right to disclose this data even if it concerns confidential data (unless we have expressly agreed with you that we will not disclose this data to certain third parties, unless we are legally obliged to do so). Irrespective of this, your data will continue to be subject to appropriate data protection even after disclosure in Switzerland and the rest of Europe. For disclosure to other countries, the provisions of para. 8. If you do not wish certain data to be disclosed, please let us know so that we can check whether and to what extent we can accommodate you (para. 2).

As in no. 7 we also disclose data to other organizations. These are not only located in Switzerland. Your data may therefore be processed both in Europe and in the USA; in exceptional cases, however, in any country in the world.

If a recipient is located in a country without adequate statutory data protection, we contractually oblige the recipient to comply with the applicable data protection regulations, unless the recipient is already subject to a legally recognized set of rules to ensure data protection and we cannot rely on an exemption clause. An exception may apply in particular in the case of legal proceedings abroad, but also in cases of overriding public interests or if the fulfilment of a contract requires such disclosure, if you have given your consent or if the data in question has been made generally accessible by you and you have not objected to its processing.

Many countries outside of Switzerland, the EU and the EEA do not currently have laws that guarantee an adequate level of data protection from the perspective of the FADP or the GDPR. The contractual precautions mentioned above can partially compensate for this weaker or missing legal protection. However, contractual precautions cannot eliminate all risks (in particular from state access abroad). You should be aware of these residual risks, even if the risk may be low in individual cases and we take further measures (e.g. pseudonymization or anonymization) to minimize it.

Please also note that data exchanged via the Internet is often routed via third countries. Your data may therefore be sent abroad even if the sender and recipient are located in the same country.

We process your data for as long as our processing purposes, the statutory retention periods and our legitimate interests in processing for documentation and evidence purposes require it or storage is technically necessary. Further information on the respective storage and processing periods can be found under the individual data categories in Section 3 or for the cookie categories in para. 12. If there are no legal or contractual obligations to the contrary, we will delete or anonymize your data after the storage or processing period has expired as part of our normal processes.

We take appropriate security measures to protect the confidentiality, integrity and availability of your personal data, to protect it against unauthorized or unlawful processing and to counteract the risks of loss, unintentional modification, unwanted disclosure or unauthorized access.

Security measures of a technical and organizational nature may include, for example, measures such as the encryption and pseudonymization of data, logging, access restrictions, the storage of backup copies, instructions to our employees, confidentiality agreements and controls. We protect your data transmitted via our website in transit using suitable encryption mechanisms. However, we can only secure areas that we control. We also oblige our contract processors to take appropriate security measures. However, security risks cannot be completely ruled out; residual risks are unavoidable.

Under certain circumstances, the applicable data protection law grants you the right to object to the processing of your data, in particular for the purposes of direct marketing, profiling for direct advertising and other legitimate interests in processing.

To make it easier for you to control the processing of your personal data, you also have the following rights in connection with our data processing, depending on the applicable data protection law:
– The right to request information from us as to whether and which of your data we process;
– the right to have us correct data if it is incorrect;
– the right to request the deletion of data;
– the right to obtain from us the personal data concerning you in a commonly used electronic format or to transmit those data to another controller;
– the right to withdraw consent where our processing is based on your consent;
– the right to receive, upon request, further information necessary for the exercise of these rights;

If you wish to exercise the above rights against us, please contact us in writing, at our premises or, unless otherwise stated or agreed, by e-mail; our contact details can be found in Section. 2. So that we can rule out misuse, we must identify you (e.g. with a copy of your ID card, if this is not otherwise possible).

Please note that these rights are subject to conditions, exceptions or restrictions under the applicable data protection law (e.g. to protect third parties or business secrets). We will inform you accordingly if necessary.

If you do not agree with our handling of your rights or data protection, please let us know (para. 2) please let us know. In particular, if you are located in the EEA, the United Kingdom or Switzerland, you also have the right to lodge a complaint with the data protection supervisory authority in your country. A list of authorities in the EEA can be found here: https://edpb.europa.eu/about-edpb/about-edpb/members_en. You can contact the UK supervisory authority here: https://ico.org.uk/global/contact-us/. You can contact the Swiss supervisory authority here: https://www.edoeb.admin.ch/edoeb/en/home/deredoeb/kontakt.html.

We use various technologies on our website with which we and third parties engaged by us can recognize you when you use our website and, under certain circumstances, track you over several visits. We will inform you about this in this section.

In essence, we want to be able to distinguish between access by you (via your system) and access by other users so that we can ensure the functionality of the website and carry out analyses and personalization. We do not want to draw conclusions about your identity, even if we can, insofar as we or third parties engaged by us can identify you by combining this with registration data. Even without registration data, however, the technologies used are designed in such a way that you are recognized as an individual visitor each time you visit the website, for example by our server (or the servers of third parties) assigning you or your browser a specific identification number (so-called "cookie").

Cookies are individual codes (e.g. a serial number) that our server or a server of our service provider or advertising contract partner transmits to your system when you connect to our website and that your system (browser, mobile) receives and stores until the programmed expiry date. Each time you access our website again, your system transmits these codes to our server or the server of the third party. This allows you to be recognized, even if your identity is unknown.

We use such technologies on our website and allow certain third parties to do the same. However, depending on the purpose of these techniques, we may ask for your consent before using them. You can program your browser to block or deceive certain cookies or alternative technologies or to delete existing cookies. You can also add software to your browser that blocks tracking by certain third parties. You can find more information about this on the help pages of your browser (usually under the heading "Data protection") or on the websites of the third parties listed below.

A distinction is made between the following cookies (technologies with comparable functions such as fingerprinting are also included here):

– Necessary cookies: Some cookies are necessary for the functioning of the website as such or for certain functions. For example, they ensure that you can switch between pages without losing the information entered in a form. They also ensure that you remain logged in. These cookies are only temporary ("session cookies"). If you block them, the website may not work. Other cookies are necessary so that the server can save decisions or entries made by you beyond a session (i.e. a visit to the website) if you use this function (e.g. selected language, consent given, the function for automatic log-in, etc.). These cookies have an expiry date of up to 24 months.

– Performance cookies: In order to optimize our website and corresponding offers and to better tailor them to the needs of users, we use cookies to record and analyze the use of our website, possibly even beyond the session. We do this by using third-party analytics services. We have listed these below. Before we use such cookies, we will ask for your consent. You can withdraw your consent at any time. Performance cookies also have an expiry date of up to 24 months. Details can be found on the websites of the third-party providers.

– Marketing cookies: We and our advertising contract partners have an interest in targeting advertising to specific groups, i.e. only displaying it to those we want to address. We have listed our advertising contract partners below. For this purpose, we and our advertising contract partners - if you consent - also use cookies with which the content accessed or contracts concluded can be recorded. This enables us and our advertising contract partners to display adverts that we can assume are of interest to you on our website, but also on other websites that display adverts from us or our advertising contract partners. Depending on the situation, these cookies have an expiry period of a few days to 12 months. If you consent to the use of these cookies, you will be shown the relevant adverts. If you do not consent to these cookies, you will not see fewer adverts, but simply any other adverts.

-

In addition to marketing cookies, we use other techniques to control online advertising on other websites and thereby reduce wastage. For example, we can transmit the email addresses of our users, customers and other people to whom we want to display adverts to operators of advertising platforms (e.g. social media). If these people are registered there with the same email address (which the advertising platforms determine through a comparison), the operators display the adverts we have placed to these people in a targeted manner. The operators do not receive personal email addresses of people who are not already known. In the case of known email addresses, however, they will learn that these people are in contact with us and what content they have accessed.

We may also integrate other third-party offers on our website, in particular from social media providers. These offers are deactivated by default. As soon as you activate them (e.g. by clicking a button), the relevant providers can recognize that you are on our website. If you have an account with the social media provider, they can assign this information to you and thus track your use of online services. These social media providers process this data on their own responsibility.

We currently use offers from the following service providers and advertising contract partners (insofar as they use data from you or cookies set by you for advertising purposes):

– Google Ireland (based in Ireland) is the provider of the Google Analytics, Monster insights and Google Drive services and acts as our processor. Google Ireland relies on Google LLC (based in the USA) as its processor (both "Google"). Google uses performance cookies (see above) to track the behavior of visitors to our website (duration, frequency of pages accessed, geographical origin of access, etc.) and compiles reports for us on the use of our website on this basis. We have configured the services so that the IP addresses of visitors are truncated by Google in Europe before being forwarded to the USA and therefore cannot be traced. We have switched off the "Data sharing" and "Signals" settings. Although we can assume that the information we share with Google is not personal data for Google, it is possible that Google can use this data for its own purposes to draw conclusions about the identity of visitors, create personal profiles and link this data to the Google accounts of these persons. If you agree to the use of Google services, you explicitly consent to such processing, which also includes the transfer of personal data (in particular us-age data for the website and app, device information and individual IDs) to the USA and other countries. You can find information about Google's data protection here: https://policies.google.com/privacy?hl=en-US.

We may operate pages and other online presences ("fan pages", "channels", "profiles", etc.) on social networks and other platforms operated by third parties and provide the services described in para. 3 and below about you. We receive this data from you and the platforms when you come into contact with us via our online presence (e.g. when you communicate with us, comment on our content or visit our presence). At the same time, the platforms evaluate your use of our online presence and link this data with other data about you known to the platforms (e.g. about your behavior and preferences). They also process this data for their own purposes under their own responsibility, in particular for marketing and market research purposes (e.g. to personalize advertising) and to control their platforms (e.g. which content they display to you).

We receive data about you when you communicate with us via online presences or view our content on the corresponding platforms, visit our online presences or are active on them (e.g. publish content, make comments). These platforms also collect technical data, registration data, communication data, behavioral data and preference data from you or about you (for the terms, see section. 3). These platforms regularly statistically analyze the way in which you interact with us, how you use our online presences, our content or other parts of the platform (what you view, comment on, "like", share, etc.) and link this data with other information about you (e.g. information on age and gender and other demo-graphic information). In this way, they also create profiles about you and statistics on the use of our online presences. They use this data and profiles to show you our or other advertising and other content on the platform in a personalized way and to control the behavior of the platform, but also for market and user research and to provide us and other bodies with information about you and the use of our online presence. We can partially control the analyses that these platforms create regarding the use of our online presence.

We process this data for the purposes described in para. 4 in particular for communication, marketing purposes (including advertising on these platforms, see section 12) and for market research. You will find information on the relevant legal bases in Section 0. We may redistribute content published by you (e.g. comments on an announcement) ourselves (e.g. in our advertising on the platform or elsewhere). We or the operators of the platforms can also delete or restrict content from or about you in accordance with the usage guidelines (e.g. inappropriate comments).

For further information on the processing carried out by the platform operators, please refer to the platforms' data protection notices. There you can also find out in which countries they process your data, which rights of access, erasure and other rights of data subjects you have and how you can exercise these or obtain further information. We currently use the following platforms:

– YouTube: We operate a channel here. The entity responsible for processing personal data on YouTube is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Information about data processing at YouTube can be found here: https://policies.google.com/privacy?hl=en-US.

– LinkedIn: We operate a profile page here. The controller for the processing of personal data at LinkedIn is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Information about data processing by LinkedIn can be found here: https://www.linkedin.com/legal/privacy-policy .

– X (Twitter): We operate a profile here. The controller for the processing of personal data at Pinterest is X Corp, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA and for users from Europe Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin D02 AX07 IRELAND. Information about da-ta processing by X (Twitter) can be found here: https://twitter.com/en/privacy.

This privacy policy is not part of any contract with you. We may amend this privacy policy at any time. The version published on this website is the current version.

Last updated: 5 December 2023