Le responsable du traitement des données conformément au règlement général sur la protection des données et aux autres lois nationales sur la protection des données des États membres de l'UE.
de données, ainsi que d'autres réglementations en matière de protection des données, est:

Ledlenser GbH & Co. KG
Kronenstr. 5 – 7
42699 Solingen
Allemagne

ledlenser.com

Le délégué à la protection des données du responsable du traitement est:

Christoph Strieder
Ahrstrasse 1
42655 Solingen
Phone: +49 212 3820860

[email protected]

L1) Champ d'application du traitement des données à caractère personnel

Nous collectons et utilisons les données personnelles de nos utilisateurs uniquement dans la mesure où cela est nécessaire à la fourniture d'un site opérationnel et
de notre contenu et de nos services. de notre contenu et de nos services. La collecte et l'utilisation des données personnelles de nos utilisateurs ne se font régulièrement qu'avec le
consentement de l'utilisateur. de l'utilisateur. Une exception s'applique dans les cas où le consentement préalable ne peut être obtenu pour des raisons juridiques ou factuelles et où l'utilisateur n'est pas en mesure de donner son consentement
le traitement des données est autorisé par la loi.

2) Base juridique du traitement des données à caractère personnel

Dans la mesure où nous obtenons le consentement de la personne concernée pour le traitement des données à caractère personnel, l'art. 6 para. 1 (a) du traité UE
Le règlement général sur la protection des données (RGPD) sert de base juridique.

Lors du traitement de données à caractère personnel nécessaires à l'exécution d'un contrat auquel la personne concernée est partie, l'art. 6 para. 1 (b)
Le GDPR sert de base juridique. Ceci s'applique également au traitement nécessaire à l'exécution de mesures précontractuelles.

Dans la mesure où le traitement des données à caractère personnel est nécessaire pour remplir une obligation légale à laquelle notre société est soumise, l'art. 6
para. 1 (c) GDPR sert de base juridique.

Si les intérêts vitaux de la personne concernée ou d'une autre personne physique exigent le traitement de données à caractère personnel, l'art. 6
para. 1 (d) GDPR sert de base juridique.

Si le traitement est nécessaire à la sauvegarde d'un intérêt légitime de notre société ou d'un tiers et si les intérêts, les principes fondamentaux et les droits de l'homme sont respectés.
les droits et libertés de la personne concernée ne l'emportent pas sur l'intérêt supérieur, art. 6 para. 1 (f) GDPR sert de base légale au traitement. base juridique du traitement.

3) Effacement des données et durée de conservation

Les données à caractère personnel d'une personne concernée seront effacées ou bloquées dès que la finalité du stockage cessera d'exister.

Si vous nous envoyez des données de candidature non sollicitées par l'intermédiaire de notre site web ou par voie électronique, nous supprimerons ces données
immédiatement si nous n'entamons pas de procédure de candidature. Si nous entamons une procédure de candidature ou si vous nous envoyez
Nous supprimerons vos données au plus tard 4 mois après la fin de la procédure de candidature, si
il n'y a pas de relation de travail. Une conservation plus longue a lieu si vous avez expressément donné votre accord.
à cette.

En outre, les données peuvent être stockées si le législateur européen ou national l'a prévu dans les règlements, lois ou règlements d'application de l'UE.
d'autres dispositions auxquelles le responsable du traitement est soumis. Le verrouillage ou l'effacement des données sera également effectué si un
le délai de conservation prévu par les normes référencées expire, sauf si la conservation des données est une nécessité pour la conclusion ou l'exécution d'un contrat.
l'exécution d'un contrat.

4) Catégories de bénéficiaires

Sauf indication contraire ci-dessous, le destinataire des données à caractère personnel traitées via notre site web est généralement le responsable du traitement.
(see § I above).Les données personnelles ne seront généralement pas communiquées à des tiers. Une transmission à des tiers,
se fait toutefois dans le respect des dispositions du GDPR et du BDSG ainsi que d'autres réglementations relatives à la protection des données,
si et dans la mesure où cela est nécessaire dans le cadre d'un contrat conclu par l'intermédiaire de notre site web (le contrat
l'initiation, l'exécution du contrat (même si vous commandez des services qui sont fournis en tout ou en partie par des tiers) et
le traitement des contrats (par exemple, les prestataires de services de paiement externes), dans la mesure où cela est prescrit par la loi, dans le cadre de la politique de l'Union européenne en matière de protection des données.
les exigences spécifiées par la loi respective et, le cas échéant, la prise en compte des intérêts concernés. Ces cas peuvent
Les enquêtes criminelles, par exemple, font partie de cette catégorie. Une telle transmission a également lieu si vous avez donné un consentement légalement valable.

Si vous nous communiquez vos données afin de poser votre candidature à notre entreprise en tant qu'employé, les données ne seront transférées qu'à l'autorité compétente.
département ou des départements de notre entreprise.

1) Description et portée du traitement des données

Chaque fois que vous visitez notre site web, notre système recueille automatiquement des données et des informations à partir du système informatique de l'ordinateur
. de l'ordinateur qui accède au site.

Pour ce faire, les données suivantes sont collectées :

Informations sur le type et la version du navigateur utilisé
Le système d'exploitation de l'utilisateur
L'adresse IP de l'utilisateur
Date et heure d'accès
Les données sont également stockées dans les fichiers journaux de notre système. Ces données ne sont pas stockées avec d'autres données personnelles de l'utilisateur.

2) Base juridique du traitement des données

La base juridique pour le stockage temporaire des données et des fichiers journaux est l'art. 6 para. 1 (f) du GDPR.

3) Finalité du traitement des données

Le stockage temporaire de l'adresse IP par le système est nécessaire pour permettre la livraison du site web à l'ordinateur de l'utilisateur. Pour
Pour ce faire, l'adresse IP de l'utilisateur doit rester stockée pendant toute la durée de la session. Les données sont stockées dans des fichiers journaux afin de garantir
la fonctionnalité du site web. Les données sont également utilisées pour optimiser le site web et pour assurer la sécurité de nos informations.
les systèmes technologiques. Aucune évaluation des données à des fins de marketing n'est entreprise dans ce contexte.

Ces objectifs englobent également notre intérêt légitime à traiter les données conformément à l'art. 6 para. 1 (f) du GDPR.

4) Durée de stockage

Les données seront supprimées dès qu'elles ne seront plus nécessaires à la réalisation de l'objectif pour lequel elles ont été collectées. En
dans le cas des données collectées pour fournir le site web, cela se produit une fois que la session respective est terminée. Si les données sont
stockées dans des fichiers journaux, au plus tard dans les 14 jours, sauf indication contraire dans la présente déclaration de confidentialité.

5) Possibilité d'opposition et de suppression

La collecte de données pour la mise à disposition du site web et le stockage de données dans des fichiers journaux sont absolument nécessaires pour les raisons suivantes
le fonctionnement du site web. Par conséquent, l'utilisateur n'a pas la possibilité de s'y opposer.

a) Description et portée du traitement des données

Notre site web utilise des cookies. Les cookies sont des fichiers texte qui sont stockés dans le navigateur internet ou par le navigateur internet sur le système informatique de l'utilisateur. Lorsqu'un utilisateur visite un site web, un cookie peut être stocké sur le système d'exploitation de l'utilisateur.
Ce cookie contient
une chaîne de caractères distinctive qui permet l'identification unique du navigateur lors d'un nouvel accès au site web. Nous utilisons
des cookies pour rendre notre site web plus convivial. Certains éléments de notre site web requièrent que le navigateur qui les demande soit
identifiables même après avoir changé de page. Les données suivantes sont stockées et transmises dans les cookies :

Paramètres linguistiques

Nous utilisons également des cookies sur notre site web pour analyser le comportement de navigation des utilisateurs. Les données suivantes peuvent être transmises de cette manière:

Termes de recherche spécifiés

Fréquence de consultation des pages

Utilisation des fonctions du site web

Durée de la session jusqu'à 20 minutes

Suivi des campagnes

Analyse de l'origine de l'utilisateur

Zones sur lesquelles l'utilisateur clique le plus

Bounce rate

Consultation des données de contact

Lecture de médias

Mise à jour des pages

Ajouter aux favoris

Partage de contenu (médias sociaux)

Adresse IP, le cas échéant

Données relatives à l'adresse électronique, le cas échéant - Type de navigateur, version, nombre et extensions

Paramètres du fuseau horaire

Système d'exploitation

Plate-forme, y compris la date et l'heure

ID de l'appareil

Les données des utilisateurs ainsi collectées sont pseudonymisées par des précautions techniques. Il n'est donc plus possible d'attribuer
les données à l'utilisateur accédant. Les données ne sont pas stockées avec les autres données personnelles des utilisateurs.

Lorsqu'ils accèdent à notre site web, les utilisateurs sont informés par une bannière d'information de l'utilisation de cookies à des fins d'analyse et sont renvoyés à la présente déclaration de confidentialité. Dans ce contexte, une note est également incluse sur la façon dont les utilisateurs peuvent désactiver le stockage des cookies
dans les paramètres du navigateur.

b) Base juridique du traitement des données

La base juridique du traitement des données à caractère personnel à l'aide de cookies est l'art. 6 para. 1 (f) du GDPR.

c) Finalité du traitement des données

L'utilisation de cookies techniquement essentiels a pour but de simplifier l'utilisation des sites web pour les utilisateurs. Certaines fonctionnalités de notre site web
ne peuvent être offertes sans l'utilisation de cookies. Dans ce cas, il est nécessaire que le navigateur soit reconnaissable même après
avoir changé de page. changement de page.

Nous avons besoin de cookies pour les applications suivantes :

Copie des paramètres linguistiques
Copie des données pour les formulaires de contact
Résultats de la recherche
Conseils sur les produits
Comparaison des produits

Les données utilisateur collectées par les cookies techniquement essentiels ne sont pas utilisées pour créer des profils d'utilisateur.

The analytics cookies are used to improve the quality of our website and its content. Grâce aux cookies analytiques, nous apprenons comment le site web est utilisé et pouvons ainsi optimiser en permanence notre service.

Tout en rendant vos données anonymes, nous enregistrons les zones de notre site web et les médias fournis qui sont particulièrement utilisés par nos utilisateurs dans les domaines suivants
en termes de contenu et/ou de conception et présentent donc un intérêt particulier pour eux afin de s'assurer qu'une telle offre puisse être
continuellement trouvés et mis à jour.

À ces fins, notre intérêt légitime réside également dans le traitement des données à caractère personnel conformément à l'art. 6 para. 1 (f) GDPR.

e) Durée de l'option de stockage, d'objection et d'enlèvement

Les cookies sont stockés sur l'ordinateur de l'utilisateur et transmis à notre site. Par conséquent, en tant qu'utilisateur, vous avez un contrôle total sur l'utilisation des cookies
de cookies. En modifiant les paramètres de votre navigateur Internet, vous pouvez désactiver ou restreindre la transmission des cookies. Les cookies
qui ont déjà été enregistrés peuvent être supprimés à tout moment. Cela peut également se faire automatiquement. Si les cookies sont désactivés pour
notre site web, il se peut qu'il ne soit plus possible d'utiliser pleinement toutes les fonctionnalités du site web.

Description and scope of data processing

In certain cases, personal data may also be transferred to and processed by entities based in countries outside the EU where
European data protection law does not apply or where a lower level of data protection exists, in particular to entities in the
United States.

This is the case with us for the services described below, which are described individually in the data protection declaration:

MailChimp
Google Analytics
Sizmek
Doubleclick Ad Exchange Buyer
Google Tag Manager
Form auto-complete and validation

There is no legal or contractual permission to transfer personal data. There is no so-called adequacy decision or other
guarantee regarding the handling of personal data which ensures that your data is processed with the same level of protection
as in Europe in accordance with the DSGVO or other European data protection regulations. There is therefore a risk that your
data may be used in third countries in a way that would be inadmissible under European law. This includes, among other things,
statements on the duration of storage, as well as objection and removal options or other legal remedies against any legal
infringements resulting from the use of your personal data in these countries.

b) Legal basis for data processing

The legal basis for the processing of personal data is Art. 49 I lit. a) DSDGVO (Consent).

A data protection banner will be displayed on the start page of our website when you access the website. In this banner, you
can individually configure the data protection settings or your consent to data transfer or accept all settings. By clicking on
the button "Accept all" or by individual settings of the cookie rights "Performance, Functional and Advertising", you also
expressly consent to the transfer of data to locations outside the EU where the DSGVO does not apply or where an appropriate
level of data protection does not exist.

c) Purpose of data processing

The purpose of data processing is the use of our e-mail service for advertising purposes, the design and execution of functions
on our website and the collection and analysis of marketing data to improve our offer.

1) Description and scope of data processing

On our website there is the possibility to subscribe to a free newsletter. Consent to receive a newsletter can also be agreed
as consideration for services that we provide to you, e.g. in the context of competitions. In this case, the data from the
input mask is transmitted to us when you subscribe to the newsletter.

Email address
First name

Last name
Selection of dealer or end customer
Date of birth (voluntary)
The following data will also be collected upon subscription:
IP address of accessing computer
Date and time of registration

During the registration process, your consent for the data processing is obtained and reference to this privacy statement is
made.

2) Mailchimp

The newsletter is sent via the provider "MailChimp" (provider: Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000,
Atlanta, GA 30308, USA). In so doing, we transmit the following data, which is also stored by this provider on a server in the
USA, to the provider as our contractual partner for sending newsletters:

Email Address
First Name
Last Name

The data is also evaluated by the provider in order to improve its own services, e.g. by technical optimization of the dispatch
under presentation of newsletters. However, under no circumstances does the provider use the transmitted data to pass it on to
third parties or to address the person behind the personal data itself.

We have concluded a so-called contract on order data processing with the provider, according to which the provider is obliged
to protect the data of our users and to insure an appropriate level of protection and to process it on our behalf, in
particular also not to pass the data on to third parties.

3) Legal basis for data processing

The legal basis for the processing of data after registration for the newsletter by the user is the consent of the user, see
VII of this privacy policy.

4) Purpose of data processing

The user's email address is collected in order to deliver the newsletter. The collection of other personal data as part of the
subscription process ensures the prevention of misuse of the services or of the used email address.

5) Storage duration

The data will be deleted as soon as they are no longer necessary to fulfill the purpose for which they had been collected.
Therefore, the user's email address will be stored for as long as the newsletter subscription is active.

6) Objection and deletion option

The newsletter subscription can be cancelled by the user at any time. A link to unsubscribe can be found in every newsletter.
This also allows for withdrawal of consent to the storage of personal data collected during the subscription process.

1) Description and scope of data processing

By entering personal data, we offer users the option to register on our website. The data is entered into an input screen,
transmitted to us, and stored. These data will not be transferred to third parties.

The following data is collected during the registration process:

Serial number, date of purchase, dealer information (location, name of dealer), first name, last name, zip code, city, street,
house number, country, date of birth (optional), email address. optional newsletter registration or participation in market
research (survey and collection of individual views on our products and services, their presentation and distribution).

In the online shop, the following data is collected for registration

Email address
Password
Private customer/Company
Title
First name
Last name
Phone number
Street and house number
Zip code/City
Country
Delivery address: title, company name, if applicable; department, first name, last name, street/house number; zip code/city;
country

The following data is also stored during registration:

The IP address of the user
Date and time of registration
For product registration: first name, last name, address, email address, gender, serial numbers of purchased products, seller
name, date of purchase

The user's consent to processing this data is obtained during the registration process.

2) Legal basis for data processing

If the user's consent has been obtained, the legal basis for processing the data is Art. 6 para. 1 (a) GDPR. If registration is
for fulfillment of a contract to which the user is a party or for execution of pre-contractual measures, an additional legal
basis for the data processing is Art. 6, para. 1 (b) GDPR.

3) Purpose of data processing

User registration is sensible for the guarantee processing of our manufacturer's guarantee and for the product management of
the products manufactured by us as well as necessary for the execution and processing of contracts in the context of the online
shop. It is subject to the user's consent. If and to the extent that a registration option for the creation of a user account
is offered on our website, it is also possible via this user account to register products in order to extend the warranty
conditions for certain products of which we are the manufacturer (manufacturer's warranty). The specified data will be used by
us as part of a purchase transaction contract related to the execution and processing of your order. They are used to create
the user account, which you can use to retrieve contract-related information. In this respect, there is also a usage
relationship from which you can access your customer data via our website at any time by logging in with your blog in data, as
long as these are processed (stored) within the framework of the user relationship.

4) Storage duration

The data will be deleted as soon as they are no longer necessary to fulfill the purpose for which they had been collected. This
is the case during the registration process for the fulfillment of a guarantee contract (manufacturer's guarantee) if the data
for the execution of a contract, e.g. a purchase contract and the usage relationship (access to your customer accounts) are no
longer required.

Even after conclusion of the contract, it may still be necessary to store personal data of the contractual partner in order to
fulfill contractual or legal obligations.

5) Objection and deletion option

As user, you have the option of canceling the registration at any time. You can have the data stored about you changed at any
time.

Please use the contact form provided on our website to send us an email with the email address used for registration. We will
then verify your request by contacting you, after which we will delete or amend your request if it is positively verified.

If the data is required for the fulfillment of a contract, early data deletion is only possible insofar as contractual or legal
obligations do not preclude deletion.

1) Description and scope of data processing

Our website provides contact forms which can be used for electronic contact. If the user takes advantage of these forms, the
data that is entered in the input mask will be transmitted to us and stored. These data is (depending on the type of contact
form used):

General contact form:

General contact form: name, email address, request, questions about purchased products, support,

Spare part inquiries and warranty: name, email address, address, product, serial number, request, date of purchase

Sales and advertising materials: request, email address, company, address

The web shop also provides a general contact form:

Title
First name
Last name
Email address
Phone number
Subject
Comment: Your details in the free text comment field, enter them there and submit them to us.

Contact form "technical inquiries"

Title
First name
Last name
Email address
Phone number
Subject
Comment: Your details in the free text comment field, enter them there and submit them to us.
Other personal data:
The IP address of the user
Date and time of registration
Alternatively, you may contact us via the provided email address. In this case, the user's personal data that is transmitted
along with the email will be stored.

This data will not be disclosed to third parties in this context. The data is used exclusively for processing the conversation.

2) Legal basis for data processing

If the user's consent has been obtained, the legal basis for processing the data is Art. 6 para. 1 (a) GDPR. The legal basis
for processing the data transmitted in the course of sending an email is Art. 6 para. 1 (f) GDPR. If you send us an email with
the intention to enter into a contract with us, this creates an additional legal basis for its processing per Art. 1 (b) GDPR.

3) Purpose of data processing

The processing of personal data from the input mask is used by us only for processing the contact request. In the event that a
contact request is sent by email, this also constitutes the necessary legitimate interest in processing the data.

The processing of other personal data during the sending process is done for the purpose of preventing the abuse of the contact
form and ensuring the security of our information technology systems.

4) Storage duration

The data will be deleted as soon as they are no longer necessary to fulfill the purpose for which they had been collected. For
personal data that was taken from the contact form input mask and data that was sent by email, this is the case when the
respective conversation with the user has been completed. The conversation will have ended when it is evident from the
circumstances that the matter at hand has been conclusively resolved.

Personal data that was additionally collected during the sending procedure will be deleted at the latest after a period of
seven days.

5) Objection and deletion option

The user has the option of revoking his or her consent to the processing of personal data, at any time. A user who has
contacted us by email can object at any time to the storage of his or her personal data. It will not be possible to continue
the conversation in this case. All personal data stored in the course of making contact will be deleted in this case if and
insofar as this is not contrary to statutory provisions, e.g. under the German Commercial Code or the Tax Code, or any other
justification under data protection regulations, which requires storage after weighing all interests.

1) Description and scope of data processing

1.1) Through our online shop, we record your personal data in the context of the ordering process, which is described in detail
on our website, as far as you provide us with these by input in corresponding form fields, to the extent that the reasoning,
execution or processing of a contractual relationship about the purchase of individual goods offered by us in the online shop
is required.

To do this, you must create a customer account using a form for entering your personal data, whereby your personal data will be
stored by us after your submission (see "Registration" above). Here you can also specify whether you would like to receive our
newsletter (see "Newsletter" above).

(1.2) When concluding the purchase contract via our online shop, you also choose your desired payment method which we offer for
the product purchase. If you use the PayPal or PayPal Plus payment service, the following data will be sent via an interface
directly to the service provider of this payment service

(PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal L-2449 Luxembourg E-Mail: [email protected])

by us. Use of the payment service requires that you have previously entered into an agreement about the use with this service
provider. The respective service provider is responsible for the use of this service and related handling of your data in line
with data protection laws, except for the present transmission of your data by us. The privacy policy of the provider can be
found on the respective website of the service provider.

With the agreement of the PayPal or PayPal plus payment service, we transfer according to agreement after completion of the
purchase contract to the service provider who maintains this payment service your

First name and last name,
Purchase price of the products
and the short description of the purchased product(s),

whereby they are forwarded automatically to the website via which provides the payment service. You can then continue to make
the payment as agreed with the payment service provider.

After payment has been processed via this payment service provider, we will immediately receive an electronic message about the
execution of the payment according to the payment data transmitted by us. We do not receive any further data from the provider
of this payment service.

(1.3) If you choose the credit card payment method (Visa card/Mastercard), then the settlement data will be forwarded to an
external company, heidelpay GmbH (https://www.heidelpay.com/de/impressum/) based in Heidelberg, Germany (provider). This
company carries out the payment processing of your purchase contract for us as ordered based on contractual agreements with the
providers of the respective credit cards.

In doing so, the provider will store your first and last name, your home country, your address data, your email address,
possibly an IP address and, if applicable, a provided phone number, the type of card you are using, your bank details, the
purchase price from your order, the designated use of your order and, if applicable, a note about processing, which you have
provided us with the purchase. We can access these data via our customer account, which we maintain with the provider. In the
event of the termination of the contractual relationship with the provider, we can export this data to us in a generally
readable format. The provider requests the purchase price resulting from your order on our behalf with your credit card
provider, and forwards it electronically to us.

We have entered into a Data Processing Agreement (DPA) with the provider in accordance with the General Data Protection
Regulation.

2) Legal basis for data processing

If the user's consent has been obtained, the legal basis for processing the data is Art. 6 para. 1 (a) GDPR. The legal basis
for the processing of data concerning the execution of a purchase contract is Art. 6 para. 1 (b) GDPR, alternatively Art. 6
para. 1 (f) GDPR

3) Purpose of data processing

The purpose of the data processing is the efficient execution of a contractual relationship with you, which is completed via
our online platform. The processing of the payment for your order is done fast in this way, efficient and quite safe, and leads
to the fact that the purchase contract is completed in your interest quickly and with a low error rate and that the goods are
delivered to you quickly and promptly. Herein lies also the legitimate interest in data processing.

4) Storage duration

The data, which are processed for the execution of a contract by us, are deleted according to legal regulations, e.g. according
to storage periods of the German Tax Code (AO) or the German Commercial Code (HGB). In addition, the deletion takes place when
storage according to the respective purpose of the contract is no longer required.

5) Objection and deletion option

A right to objection and deletion according to Art. 21 GDPR does not apply to data processed via the sales process in the
online shop, insofar as this concerns data which is required for the execution of the purchase contract in commercial, tax or
otherwise accounting terms.

1) Scope of the processing of personal data

We use the "Google Analytics" software (Google LLC, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on our website to
analyze the surfing behavior of our users. The use of this software makes it possible to assign user behavior to a user's
pseudonym ID, even across devices.

Terms of use of Google Inc. for Google Analytics:

www.google.com/analytics/terms/de.htmlpolicies.google.com

We have concluded a so-called contract on order data processing with the provider, according to which the provider is obliged
to protect the data of our users and to insure an appropriate level of protection and to process it on our behalf, in
particular also not to pass the data on to third parties. The software places one or more cookies on the user's end device (see
above for cookies). If individual pages of our website are accessed, the following data is stored.

Two bytes of the IP address of the accessing system of the user
The visited web page
The website from which the user came to the accessed web page (referrer)
The subpages, which are accessed from the accessed web page
The length of stay on the website
The frequency of accessing the website
The user behavior information stored in such cookies is automatically transferred to a server of the software provider (Googl
e), which is usually located in the USA, i.e. in a so-called third country outside the EU and the EEA. However, we use the
anonymization of the IP address provided by the software on our website. This will shorten your IP address, which would
otherwise have made it possible to identify the respective user, within the member states of the EU and the EEA, before such a
transmission, whereby in exceptional cases a truncation can also take place after such a transmission. Under no circumstances
will your IP address be combined with other data in order to record and analyze profiles and user behavior. Google only
analyses and displays your website activity in relation to our website as part of our order data processing in order to make
information collected in this way available to us as a service. This is also our legitimate interest in data processing.

2) Legal basis for the processing of personal data

The legal basis for the use of Google Analytics is your consent, see VII of this privacy policy.

3) Purpose of data processing

The processing of users' personal data enables us to analyze the surfing behavior of our users. We are in a position to compile
information about the use of the individual components of our website by evaluating the data obtained. This helps us to
continuously improve our website and its user-friendliness. For these purposes, our legitimate interest also lies in the
processing of personal data pursuant to Art. 6 para. 1 (f) GDPR. By anonymizing the IP address, users' interest in protecting
their personal data is sufficiently taken into account.

4) Storage duration

The data processed by us when using our website via the "Google Analytics" service is automatically deleted after 14 months.
Data exceeding storage duration limits are deleted automatically once a month.

5) Objection and deletion option

Cookies are stored on the user's computer and transmitted to our site. Therefore, as a user you have full control over the use
of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies
that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for
our website, it may no longer be possible to fully use all of the website's features.

We offer our users the possibility of an opt-out from the analysis procedure on our website. To do this, you must follow the
corresponding link. In this way, another cookie is placed on your system, which signals to our system not to store the user's
data. If the user deletes the corresponding cookie from his or her system in the meantime, the opt-out cookie must be reset
again.

By changing the security settings of your Internet browser, you can prevent cookies from being stored in the devices it uses.
However, this can lead to restrictions in the use of Internet pages.

You can also prevent the processing of your data collected in cookies by the Google Analytics software by using software
provided by Google Inc. (browser add-on for deactivating Google Analytics), which you can download and use at the following
link tools.google.com/dlpage/gaoptout. The provider is exclusively Google Inc. so that its terms of use and, where applicable,
restrictions must be observed. It cannot be guaranteed that the software provider makes this software available for all
operating systems and/or devices.

1) Description and scope of data processing

We use on the Internet information about the service "Google Ads Remarketing". Google Ads Remarketing is a function within
Google Ad services (Google Ads) that enables us to display advertisements to a user of our homepage also on other Internet
pages provided by Google (e.g. YouTube or Google Search) when you visit these Internet pages. For this purpose, we analyze the
use of our website, e.g. type of products called up and page areas (e.g. product information). This information is stored in
cookies (see above V of the Privacy Policy) on your local device when you access Google services including Google internet
pages in the Google Display Network. Contain information with which your internet browser can be uniquely identified.

When using Google services (e.g. Google search, YouTube or calling up pages in the Google Display Network), personal data may
also be transferred to a third country, usually to the provider's headquarters in the USA.

2) Legal basis for data processing

The legal basis for the use of Google Ads Remarketing is your consent , see VII of this Privacy Policy. Insofar as so-called standard contractual clauses are agreed with the provider in accordance with Art. 46 DSGVO, the legal basis also arises from this if transfers to so-called third countries take place.

3) Purpose of the data processing

So that we can evaluate marketing data on our ads when we adapt and optimize the ads and their advertising content.

4) Duration of storage

The content of the cookies and thus the cookies usually lose their validity after 180 days. The content can then no longer be utilized by Google and also by us.

5) Possibility of objection and removal

Cookies are stored on the user's computer and transmitted from it to our site. Therefore, you as a user also have full control
over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of
cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are
deactivated for our website, it may no longer be possible to use all the functions of the website in full (item V e) of this
data protection declaration).

You can also install a plug-in provided by Google under the link: https://www.google.com/settings/ads/plugin to prevent
tracking.

1) Description and scope of data processing

The website uses a so-called conversion tracking function provided by Microsoft Corporation One Microsoft Way, Redmond, WA
98052-6399, USA. ("Microsoft Advertising"), provides. For this purpose, we embed a small code from Microsoft Advertising in our
website (tracking tool). In this way, we can recognize when you have reached our website via a Microsoft Advertising. In this
way, we can see which keyword you used to call up a Microsoft advertisement, which advertisement you used to reach our website,
how long you stay on our website and which sub-pages of our website you called up. We also learn how many people in total have
accessed our website via the advertisement, the location of the access, device data, access duration and time, navigation
behavior, click behavior. We are not able to establish a personal reference in this regard. We only receive abstract
information from which we can infer user behavior without being able to identify the user.

The information is also stored at Microsoft. If you have a Microsoft account, Microsoft can link the collected data to this
account and thus also establish a personal reference to you, e.g. via your IP address.

If you click on a Microsoft advertisement with a redirect to our website, several cookies will be set, from which we can
extract the information as stated above (for cookies, see point V above).

2) Legal basis for data processing

The legal basis for the processing of data is consent of the user, Art. 6 (1) lit. a DSGVO. We have concluded so-called
standard contractual clauses (Art. 46 II,III DSG VO) with Microsoft to ensure that the European level of data protection is
maintained when data is transferred to an insecure third country (see also https://learn.microsoft.com/en-us/complianc
/regulatory/offering-eu-model-clauses ).

3) Purpose of data processing

The purpose of data processing is to improve the design of advertisements, which we can set up and improve in line with the
interests of users. At the same time, it also serves to check the effectiveness of such an advertisement.

4) Duration of storage

The data we collect via conversion tracking is stored by us for 18 months and then automatically deleted.

We also have no influence on the duration of storage at the provider Microsoft. If you submit search queries via the Bing
search engine, Microsoft stores the data for six months. Cookie IDs are made unrecognizable after 18 months.

5) Objection and elimination possibility

You can disable Microsoft Advertising's conversion tracking at any time by clicking on the link https://account.microsoft.co
/privacy/ad-settings/signedout?lang=de-DE. You can also manage all cookies via your web browser, and thus also deactivate or
delete them (see V lit c above).

1) Scope of the processing of personal data

We use the "Ad Exchange Buyer" software (Google LLC, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on our website to
analyze the surfing behavior of our users. The use of this software enables us to effectively design advertising material and
advertisements on Internet pages based on your interests and your user behavior. Privacy Policy of Google Inc policies.google
.com/privacy

We have concluded a so-called contract on order data processing with the provider, according to which the provider is obliged
to protect the data of our users and to insure an appropriate level of protection and to process it on our behalf, in
particular also not to pass the data on to third parties.

The software sets one or more cookies on the user's end device (see above for cookies), which determine what advertising
reference the user has when accessing Internet pages and to which advertising a user reacts.

If individual pages of our website are accessed, the following data is recorded and stored in a non-personal or non-referable
manner:

Information about the Internet browser you are using
Keyword of product searches
(Previously) visited websites
The user behavior information stored in such cookies is automatically transferred to a server of the software provider (Googl
e), which is usually located in the USA, i.e. in a so-called third country outside the EU and the EEA. A personal reference is
not established. Under no circumstances will your data be merged in order to be able to record and analyze individual profiles
and user behavior in this way.

2) Legal basis for the processing of personal data

The legal basis for the use of the service of Google Ad Exchange Buyer is your consent see VII of this privacy policy.

3) Purpose of data processing

The processing of users' personal data enables us to analyze the surfing behavior of our users. By evaluating the data obtained
, we are in a position to design our advertising media and advertisements in a targeted manner and to measure and statistically
evaluate the success of advertisements. This helps us to continuously improve our website and its user-friendliness. For these
purposes, our legitimate interest also lies in the processing of personal data pursuant to Art. 6 para. 1 (f) GDPR. By
anonymizing the IP address, users' interest in protecting their personal data is sufficiently taken into account.

4) Storage duration

The data processed by us when using our website via the "Google Analytics" service is automatically deleted after 14 months.
Data exceeding storage duration limits are deleted automatically once a month. In all other respects, data is only stored to
the extent and as long as this is necessary in the context of the use of the service.

5) Objection and deletion option

As user, you have full control over the use of cookies used by Google as part of the "Ad Exchange Buyer" service. By changing
the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been
saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no
longer be possible to fully use all of the website's features. You can also set your browser to block cookies from the
"googleadservices.com" domain so that cookies from other providers remain permitted by you.

By changing the security settings of your Internet browser, you can prevent cookies from being stored in the devices it uses.
However, this can lead to restrictions in the use of Internet pages.

1) Scope of the processing of personal data

This website occasionally uses Google DoubleClick cookies (floodlights) for certain campaigns. Doubleclick is a service of
Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This involves placing cookies, not text files, in your
browser cache (i.e. in the cache of your Internet browser) when an advertising banner that links to our website is displayed on
the Internet as part of our campaign. If you reach our website via this advertising banner, we can register this via the cookie
, but cannot assign it to an individual person. These cookies are technically designed in such a way that they are
pseudonomized and their content is not suitable for establishing a personal connection to you. A pseudonymous identification
number (ID) is assigned to your browser. DoubleClick cookies therefore do not contain any personal data. They are only
coleected when we evaluate the use of this website as part of our campaign. The data collected is only evaluated by us for
statistical purposes and in anonymized form.

The data is stored with the provider of the tracking tool, with whom we have concluded a so-called contract on order data
processing, according to which the provider is obliged to protect the data of our users and to insure an appropriate level of
protection and to process the data on our behalf, in particular not to pass the data on to third parties.

2) Legal basis for the processing of personal data

The legal basis for the use of the DoubleClick cookie service is Art 6 Paragraph 1 lit a) DSGVO if consent has been given,
otherwise Art 6 Paragraph 1 lit f) DSGVO (legitimate interest)

3) Purpose of data processing

The processing of users' personal data enables us to analyze the surfing behavior of our users. By evaluating the data obtained
, we are able to design our advertising material and advertisements in a targeted manner and to measure and statistically
evaluate the success of advertisements.

This helps us to constantly improve our website and its user-friendliness. In these purposes also lies our legitimate interest
in the processing of data according to Art. 6 para. 1 lit. f DSGVO. The anonymization of cookie contents takes sufficient
account of the users' interest in their protection of personal data.

4) Duration of storage

The data processed by us when using our website via the "Google Analytics" service are automatically deleted as cookies after
540 days (cookie runtime). The data stored by us (general Kampaganenkennzahlen) are deleted one month after collection.
Otherwise, data will only be stored to the extent and for as long as necessary in the context of using the service. With the
provider of the tracking tool if the data is stored up to 180 days.

5) Possibility of objection and removal

You can prevent the use of cookies by downloading and installing the browser plugin available at the following link (https
://adssettings.google.com/u/0/authenticated?hl=en-GB) under the DoubleClick opt-out extension Alternatively, you may disable
the Doubleclick cookies on the Digital Advertising site by clicking the following link (http://optout.aboutads.info/?c=2&lang
=EN).

1) Scope of the processing of personal data

We use the "Google Tag Manager" service on our website (provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA
94043, USA).The Tag Manager is a service with which we can manage so-called website tags (e.g. tracking code) via an interface.
The tool provides the administration of other "tags" (e.g. Google Analytics), which in turn may collect data. The Google Tag
Manager does not access this data. If disabled at the domain or cookie level, it will remain in effect for all tracking tags
implemented with Google Tag Manager.

2) Legal basis for the processing of personal data

The legal basis for the use of Google Tag Manager is, with your consent, see VII of this Privacy Policy.

3) Purpose of data processing

The use of the "Google Tag Manager" service improves the programming and administration of our website with regard to so-called
text (e.g. tracking code, Google Analytics) and the functionality of the website.

4) Storage duration

No personal data is collected via the service, but possibly via the managed day (with us Google Analytics, see Web analysis by
Google Analytics above).

5) Objection and deletion option

You can exclude the Service by deactivating the JavaScript function within the software you are using on the end device with
which you are accessing our website. If disabled at the domain or cookie level, it will remain in effect for all tracking tags
implemented with Google Tag Manager.

1) Scope of the processing of personal data

For marketing purposes, we collect personal data via the analysis software "Facebook Pixel", which is provided by Facebook Inc.
1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are located in the EU, Facebook Ireland Ltd. 4 Grand Canal Square, Grand
Canal Harbour, Dublin , Ireland (hereinafter also referred to as "Provider"), if you call up our website via an advertisement
or other advertising measure by forwarding it to Facebook. We record and analyze the connection between the advertisement and
the call and use of our website. For this purpose, we set and write a cookie (first-party cookie) when you click on one of our
advertisements on Facebook and are redirected to the website stored by us there. At the same time, contact is then made with a
server operated by Facebook, this data is transmitted to Facebook and made available to us for analysis purposes. In particular
, the IP address, information on the web browser and on visits to our website, a pixel ID, button click data are recorded.
Facebook also assigns the information to your Facebook user account and, if necessary, the provider links this information to
other data, including data on your visit to other websites. However, we are not provided with any information about this. We
receive exclusively statistical data from Facebook, which concern the call of our website via our advertisements on Facebook.

We use Facebook pixels only in the standard version, not in the so-called mode via extended data synchronization.

2) Legal basis for the processing of personal data

The legal basis for the use of the service faceboo pixel is, with your consent, Art 6 para. 1 lit. a DSGVO, i.Ü. Art. 6
paragraph 1 lit. f . DSGVO.

3) Purpose of the data processing

By using the "Facebook Pixel" service, advertising information about our products is displayed in a targeted manner on suitable
websites, thus serving our marketing and your interest in information about our products. This is also our legitimate interest.

4) Duration of storage
The data is stored by us only statistically and without allocation to a specific person. After one year, we will check whether
further storage for marketing purposes is necessary and delete it if not.

5) Possibility of objection and removal

You can object to the use of Facebook pixels by clicking on the following LINK, which will disable (opt-out) the writing of the
cookie and the tracking via Facebook pixels. You can also make settings in your Facebook account to limit or specify the data
processing www.facebook.com/help/568137493302217.

1) Scope of the processing of personal data

For marketing purposes, we may collect additional personal data via a so-called "affiliate program" (affiliate marketing
campaign) through ad pepper media GmbH, Webgains Deutschland, Frankenstraße 150C, 90461 Nuremberg www.webgains.com/public/de/
(provider) (you can access the provider's privacy policy at www.webgains.com/public/de/datenschutzerklaerung/) when you access
our website. The provider makes a network of advertising partners (so-called referrers) available to us, via whose Internet
pages our products are advertised. If you click on such an advertisement, you will be directed to our website via the
provider's Internet server. A cookie, a small text file, and/or a hexadecimal code for assigning a device ID are generated via
the provider's Internet server and stored on your device. If you arrive at our website from such an internet page by clicking
within this advertisement via the internet server of the provider, and if you actually purchase a product on the basis of the
advertisement and the redirection to our website, the transfer of certain information (including the net value of the goods for
the order) is triggered via a small graphic file, a pixel, to the provider for the purpose of billing the advertising measure
with the advertising partner, which compares the order with the cookie and/or the device ID, assigns it to the advertising
partner and thus enables the billing with the advertising partner. In this case, we can use this "tracking pixel" procedure to
track which website of such an advertising partner you have used to access our website. In this way, we are able to track which
third-party website, app or other technology provider has referred potential customers to our websites and apps and pay them a
commission in return for these referrals. We receive Personal Data from the provider and referrer in the following categories:
Cookie data, product information including product value, currency, billing details, data related to the website, app or
technology from which a potential customer was referred to us and technical information about the device you are using.

This data thus transmitted is also stored with the provider with whom we have concluded a commissioned processing agreement in
accordance with Art. 28 DSGVO.

In some cases, the provider may maintain a restricted profile that relates to you. However, this will not reveal your identity,
online behavior or other personal characteristics. The sole purpose of this profile is to track whether a referral was started
on one device and completed on another.

In some cases, Webgains and the referrer of the potential customer may receive and process your personal data in order to
implement the affiliate marketing campaign together with us.

2) Legal basis for the processing of personal data.

The legal basis for the use of affiliate marketing, if you have given your consent, is Art 6 para 1 lit. a DSGVO, i.Ü. Art. 6
para 1 lit. f . DSGVO

3) Purpose of data processing

Through the use of the "Affiliate Marketing" service, promotional information about our products is specifically displayed on
suitable Internet pages, and thus serves our marketing as well as your information interest in our products. This is also our
legitimate interest.

4) Duration of storage

The stored cookies and/or device IDs are stored by us, insofar as necessary for billing purposes, in accordance with the
provisions of tax and commercial law. They are otherwise deleted 30 days after billing. At the provider, the data from tracking
cookies are stored for up to 2 weeks since creation, if and to the extent that a longer storage is not required under the
provisions of tax and commercial law.

5) possibility of objection and elimination

You can exclude the service by deactivating the display function of graphics and the execution of Java script on your end
device with which you access our website within the software you use for this purpose. You also have the option of deactivating
the function that allows third parties to store and write cookies on your terminal device in the settings of the Internet
browser you use. You can find details in the help function or from the support of the provider of your respective Internet
browser.

Trusted Shops widgets are integrated on this website to display Trusted Shops services (e.g. seal of approval, collected
ratings) and to offer Trusted Shops products to buyers after they have placed an order.

This serves to protect our legitimate interests in optimal marketing by enabling secure shopping, which prevail in the context
of a balancing of interests in accordance with Art. 6 para. 1 p. 1 lit. f DSGVO. The Trustbadge and the services advertised
with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany, with whom we are jointly responsible
for data protection pursuant to Art. 26 DSGVO. Within the scope of this data protection notice, we inform you in the following
about the essential contractual contents according to Art. 26 (2) DSGVO.

The trust badge is provided as part of a joint responsibility by a US CDN provider (content delivery network). An appropriate
level of data protection is ensured by standard data protection clauses and other contractual measures. Further information on
the data protection of Trusted Shops GmbH can be found in their privacy policy.

When the Trustbadge is called up, the web server automatically saves a so-called server log file, which also contains your IP
address, the date and time of the call-up, the amount of data transferred and the requesting provider (access data) and
documents the call-up. The IP address is anonymized immediately after collection so that the stored data cannot be assigned to
your person. The anonymized data is used in particular for statistical purposes and for error analysis.

After order completion, your e-mail address, which is hashed by cryptological one-way function, is transmitted to Trusted Shops
GmbH. The legal basis is Art. 6 para. 1 p. 1 lit. f DSGVO. This serves to check whether you are already registered for services
with Trusted Shops GmbH and is therefore necessary for the fulfillment of our and Trusted Shops' overriding legitimate
interests in the provision of the buyer protection linked to the specific order in each case and the transactional evaluation
services pursuant to Art. 6 para. 1 p. 1 lit. f DSGVO. If this is the case, further processing will be carried out in
accordance with the contractual agreement between you and Trusted Shops. If you have not yet registered for the services, you
will be given the opportunity to do so for the first time. Further processing after registration also depends on the
contractual agreement with Trusted Shops GmbH. If you do not register, all transmitted data is automatically deleted by Trusted
Shops GmbH and a personal reference is then no longer possible.

Trusted Shops uses service providers in the areas of hosting, monitoring and logging. The legal basis is Art. 6 para. 1 lit. f
DSGVO for the purpose of ensuring trouble-free operation. Processing may take place in third countries (USA and Israel). An
adequate level of data protection is ensured in the case of the USA by standard data protection clauses and further contractual
measures and in the case of Israel by an adequacy decision.

Within the framework of the joint responsibility existing between us and Trusted Shops GmbH, please prefer to contact Trusted
Shops GmbH with data protection questions and to assert your rights using the contact options provided in the data protection
information linked above. Irrespective of this, however, you can always contact the responsible person of your choice. Your
inquiry will then, if necessary, be forwarded to the other responsible party for a response.

1) Scope of the processing of personal data

To simplify the procedures for entering your address data in our forms on the homepage (for example, contact form and order
form for ordering products in the online shop), we use additional software that when entering part of your address data in a
contact form compares these with address databases of the company Google LLC (Google LLC, (1600 Amphitheatre Parkway Mountain
View, CA 94043, USA)) who stores and maintains these for the Google Maps service. As far as such a comparison leads to a result
that can be concluded to your entered address, the corresponding address data is taken from the database and automatically
entered in the contact form. For this purpose, all or part of your address data will be transmitted to Google Inc. as part of
the performance of these services. Your data will not be stored by Google Inc. as part of this service. The software also
checks abstractly whether the data entry is complete and gives an error message in the Internet browser used if the data entry
is incomplete.

2) Legal basis for the processing of personal data

The legal basis for the use of the plugin tool is your consent see VII of this privacy policy. (data query of Google Maps).

3) Purpose of data processing

The use of the auto-complete service considerably simplifies the entry of address data, thus speeding up the data transfer and
the execution of orders, also in the interest of the customer, and avoiding incorrect entries. Herein also lies our legitimate
interest.

4) Storage duration

Storage of the data with third parties does not take place. The duration of the storage of such data with us is based on the
information contained in this privacy policy for the storage of data from forms.

5) Objection and deletion option

There is no object or delete option for the execution of the auto-complete and validation tool.

1) Description and scope of data processing

Through the software of the provider Endereco (manufacturer: Endereco UG (Haftungsbeschränkt) - Gesellschaft für Master Data Quality Management Balthasar-Neumann-Str. 4b, 97236 Randersacker, Germany), the address details in the check-out area for the submission of an order by you are checked online in real time during the input process for possible incorrect entries or incomplete details, whereby the software makes suggestions for changes which you can adopt in the input field. In addition to address details (including the e-mail address), bank details and the telephone number that you enter can also be checked and changed in accordance with the suggestions that the software displays to you during the entry process. In doing so, the enquiry process is stored with the manufacturer. The data is processed separately and is not merged with other data. Name details or other data that could be used to identify you will not be transmitted. The validation of such data initiated by the software takes place exclusively on servers within the scope of application of the GDPR, unless otherwise expressly covered by your consent or the other requirements of the GDPR.

2) Legal basis for data processing

The legal basis for the processing of data is Art. 6 (1) lit. a DSGVO if the user has given his consent. The legal basis for the processing of data relating to the execution of a purchase contract is Art. 6 para. 1 lit. b DSGVO, otherwise Art. 6 para. 1 lit. f DSGVO. The manufacturer is a processor (contractor) for us in the execution of the query; we have concluded a contract on processing with the provider.

3) Purpose of data processing

The purpose of the data processing is the efficient handling of a contractual relationship with you, which is concluded via our online platform. The software validates your address entries and corrects any incorrect entries so that the order address you provide is plausible and the risk of incorrect dispatch is minimised. At the same time, the address entry by you is made more convenient, as support is provided during the entry process. Overall, the software serves to simplify the ordering process and thus the smooth processing of the purchase contract initiated by you via the online shop.

4) Duration of storage

The data processed by us for the purpose of processing a contract will be deleted in accordance with the statutory provisions, e.g. in accordance with the retention periods of the German Fiscal Code (AO) or the German Commercial Code (HGB). Furthermore, the deletion takes place when the storage is no longer necessary according to the respective purpose of the contract. The search query transmitted to the manufacturer is deleted by the manufacturer after the validation has been carried out, otherwise after 30 days at the latest.

5) Possibility of objection and removal

You can only prevent the data processing by not entering any address data in the address field in the check out area before placing an order. In this case, please send us an e-mail with your order request. There is no right of objection and removal in accordance with Art. 21 DSGVO for data processed via the sales process in the online shop, insofar as it is data that is required for the processing of the sales contract for commercial, tax or accounting purposes. Such data is the contract data of the purchase contract entered and transmitted by you also within the scope of the validation by the software.

1) Scope of processing personal data

On our website, we use technical functions of the “converify” tool (converify GmbH, Hofmannstr). 25-27, D-81379 Munich, as well
as the technical service provider “AdNet” (provider). These functions enable us to adapt our website to your user behaviour by
collecting statistical data on surfing behaviour and to provide targeted, individualised advertising when you use our website.
To that end cookies are set as part of the converify functions (see above Paragraph V. “Cookies”), some of which are deleted
when you close your browser (so-called session cookies), as well as those that are only deleted after a specified period of
time or by using the function of your Internet browser that deletes all cookies. We receive technical devices and access data
transmitted by your browser. We receive and analyse your IP address/Internet Protocol address) assigned to your computer
connection when you connect to the internet: logins, e-mail addresses where applicable, information about the computer and
connection to the internet such as browser type, version, number and extensions, time zone settings, operating system and
platform, including date and time, cookie or Flash cookie number, information about products you have accessed or searched for
on our website. During your visits to our website, we may on occasion use “JavaScript” (a software code designed, among other
things, to analyse user interactions on the internet) to collect information about page interaction (e.g. scrolling, clicking,
mouse-overs) and page abandonment. We can also collect technical information that helps us identify your device to prevent
misuse or to diagnose errors. At no time will your data be permanently merged with other personal data stored by us.

2) Legal basis for the processing of personal data

The legal basis for the use of affiliate marketing is the existence of your consent Art. 6 para 1 lit. a GDPR.

3) Data processing purpose

By using the “converify” service, advertising information aboutand recommendations for our products is displayed in a targeted
manner on our website and therefore serves our marketing and your information interest in our products. This enables us to
provide you with the right offer at the right time and to improve the shopping experience and make it more customer-friendly
and individual for you. The data is not used for personal identification but only for pseudonymous evaluation of your use of
the website (e.g. scrolling, clicking, mouse-over) or when you leave the website.

4) Storage duration

When you visit our website, a so-called first-party cookie is installed on your local device memory via the functions of
converify, which is deleted on your device during a subsequent visit to our website when a software expiry date for this copy
is reached. In this case, however, a new first party cookie can be written to the local memory of your device. In addition,
converify and AdNet use so-called session cookies, which are automatically deleted when the browser is closed, as well as
permanent cookies, which remain on the end device until they are deleted.

You can delete the cookies stored on your device at any time by executing a function on your internet browser that deletes all
cookies on your device. To activate this function, please refer to the service information or operating instructions provided
by the provider of your respective internet browser.

In addition, your IP address and your device ID (unique ID) are recorded and stored by converify and by the service provider
AdNet, through which the functions of the converify software are partially executed and administered, and with which we have
entered into an order data processing agreement, but in anonymised form so that the data cannot be attributed to your person.
Your personal data (stored in anonymised form) will be deleted from the provider within 30 days after storage.

5) Option of withdrawing consent and rectification

You can deactivate the cookies used by converify and AdNet at any time via the following link:

https://ledlenser.com/en/#ConvOptOut

You can also exclude the converify service by deactivating the display function of graphics and the execution of Java script
within the software you use for this purpose on your terminal with which you access our website. In addition, you can set your
internet browser in such a way that you are informed about the setting of cookies in advance, allow the setting of cookies for
individual cases or generally exclude them and activate the automatic deletion of cookies when closing the browser.

1) Description and scope of data processing

On our website, we use online marketing services of Criteo GmbH, Gewürzmühlenstraße 11, 80538 Munich, Germany (service provider
).

The technology of Criteo GmbH makes it possible for us to display advertisements for our website and on our website in a user
-related manner, so that we only present advertisements to the users of our website that correspond to their possible interests
, if possible. This is a so-called "remarketing". In such "remarketing", we display products to the user that the user has
already been interested in on other websites. When our website is called up or other websites on which Criteo is also executed
are called up, an invisible graphic or a code (re)marketing tag is integrated into the respective website by means of Criteo
technology. Through this technology, an individual cookie is stored on your device (see above for an explanation of cookies
under section V). This cookie records which websites the user has visited, which content the user is interested in and which
offers the user has clicked on. It also contains technical data: Browser, operating system, visiting times, referring websites
as well as additional information on the use of the Internet pages. Such information can also be linked by Criteo with other
information from other sources. In this case, your data is pseudonomized. No name data or other data directly attributable to
you is processed. Your IP address is also recorded in a shortened form. Rather, a technical identification designation is
assigned to the user for the pseudonymous assignment of the online transaction. Criteo does not collect or store any names,
addresses, telephone numbers or other comparable personal data of the users.

We have concluded an order processing agreement with the provider.

2) Legal basis for data processing

The legal basis for the processing of the data is the consent of the user, Art. 6 para. 1 lit. a DSGVO.

3) Purpose of the data processing

The purpose of the processing is the possibility to provide the user with targeted advertising in his area of interest.

4) Duration of storage

We retain personal data for a maximum of 13 months from the time of collection. The same duration applies to cookies placed in
your web browsers by Criteo for advertising purposes.

5) Possibility of objection and elimination

You can exclude the data collection by deactivating it under this at https://www.criteo.com/de/privacy/disable-criteo-services
-on-internet-browsers/. Further information about Criteo as well as Criteo's privacy policy can be found at https://www.criteo
.com/de/privacy/ .

1) Description and scope of data processing

On our website, we provide an automated chat service (chat bot) via the service Chat-Champ (Chatchamp UG (haftungsbeschränkt)
hereinafter "Chatchamp", further information on data protection at Chatchamp at https://www.chatchamp.com/privacy/) via an
additional software (widget) for direct, computer-controlled communication with us. In the process, the conversation data is
forwarded to Chatchamp's servers and evaluated there.

This may include the following data, among others:

- Conversation histories (content of text inputs transmitted by both parties)

- First and last names

The chat history, details of websites visited and products ordered are stored in cookies.

Your data will not be transferred to third countries or stored there.

2) Legal basis for data processing

The legal basis for the processing of data is Art. 6 para. 1 lit. a DSGVO if the user has given his consent. The legal basis
for the processing of data transmitted in the course of sending text content is also Art. 6 para. 1 lit. f DSGVO. If the chat
contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO. We
have concluded an order processing agreement with the operator of the Chatchamp service.

3) Purpose of data processing

This data is required to enable personalized communication via a chatbot through which user-related information is transmitted.
Via the chatbot, visitors to our website who use the chatbot receive tips about products they are looking for in the online
store or tips about suitable gifts/promotions.

4) Duration of storage

The data and the conversation data transmitted to Chat-Champ (see above Z. 1) are stored for four weeks and two days.

5) possibility of objection and elimination

You can object to the processing of data by Chatchamp by rejecting the privacy notice [in the chat/on the website]. In addition
, you can control the collection of data in cookies via the settings of your respective browser or software offered for this
purpose and completely reject the collection of such data and delete cookies.

1) Description and scope of data processing

Our website provides links (identified by a pictogram) to other websites of our Internet presence in social networks, enabling
us to access our respective website in these social networks.

(1) Facebook is a social network of Facebook Ireland Limited (operator) (Hanover Reach, 5-7 Hanover Quay, Dublin 2 Ireland). We
have integrated our company website into Facebook.

(2) YouTube is a social network of YouTube LLC (operator) (901 Cherry Ave. San Bruno, CA 94066 USA). We have integrated our
company website into YouTube.

(3) Instagram is a social network of Instagram LLC, (operator) (1601 Willow Rd, Menlo Park, CA, USA. We have integrated our
company website on Instagram.

(4) Pinterest is a social network of Pinterest Europe Ltd. (operator) (Palmerston House, 2nd Floor) Fenian Street Dublin 2,
Ireland). We have integrated our company website on Pinterest.

(hereinafter referred to as: social network)

a) By clicking on the link (hyperlink) on our website, which refers to the website of the respective social network, you access
the website of the operator of the social network. If necessary, you may need to log into your social network customer account
to fully access our website on the website of the respective social network. We may then have access to your public information
on the social network or information that you share for that particular application within the social network. The public
information can be viewed by any third party. Such information includes in particular your name, your profile, cover pictures
and photographs, gender, networks, user name (also called Facebook URL on Facebook) and user ID (also called Facebook ID on
Facebook), comments and contributions (user content). In accordance with contractual agreements between the operators of the
respective social networks, information may also be exchanged between these networks, e.g. on the social network Pinterest, if
you sign up for this service with a Facebook or Google account in accordance with the contractual conditions of the respective
operators. Details of personal data processed within the social network are decided by your contractual relationship with the
operator of the social network and its respective data protection regulations and data protection regulations to which
reference is made in this respect. These are available on the social network website. They are also used and processed by us
only within the social network within the framework of the functions and procedures offered there in each case. Personal data
that we use within our Internet presence on Facebook will not be transmitted by us to third parties unless and to the extent
that nothing to the contrary has been expressly agreed to or permission has been given for such transmission. This may be the
case, for example, if you request a newsletter (see "Newsletter" above) via our company pages.

b) Within the social network Facebook, we use the Facebook Insights service, which gives us marketing data about members of the
Facebook social network when using the services of this network provided by the operator. Among other things, we are provided
with information on the age group, gender, education, occupation, relationship status, interests and hobbies, user locations
and their interaction behavior on Facebook (e.g. reaction feedback on postings, number of average likes of postings and pages)
and linking of this information for marketing evaluation (target group and advertising analysis) and for targeted promotional
information. We do not receive any information about Facebook names, real names, addresses (including IP addresses) or any
other information that enables us to personalize the data provided to certain persons.

The data protection responsibility is regulated by an agreement between us and the operator of the Facebook platform according
to Art. 26 GDPR. Thereby, the operator of the Facebook platform has assumed and expressly assured to bear all rights and
obligations under the GDPR in connection with the provision and use of the Facebook Insights service next to us as the primary
data controller. The statement to this effect can be found under www.facebook.com/legal/terms/page_controller_addendum.

To the extent that this agreement provides that the Irish Data Protection Commission is the lead supervisory authority for
processing according to Art. 26 GDPR, any local complaint or breach of the GDPR may also be the responsibility of your local
regulatory authority if the breach or the subject matter the complaint is only related to a branch in your state (member state)
or only persons of your state (member state) are significantly impaired. In this case, the lead supervisory authority decides
on the competence of the respective supervisory authority, Art. 56 (3) GDPR.2) Legal basis for data processing

If the user's consent has been obtained, the legal basis for processing the data is Art. 6 para. 1 (a), alternatively Art. 6 (f
) GDPR.

3) Purpose of data processing

We use your personal data exclusively for the purpose of offering and making available the respective service in social
networks. Any further use will only take place if your legally effective consent is available or we are legally obliged to do
so.4) Storage duration

The data is stored for the duration of the link to our website in the social network and for the duration of the existence of
our website in the social network.

5) Objection and deletion option

The user has the option of revoking his or her consent to the processing of personal data, at any time. Such a revocation can
be given to us at any time electronically by email, by post, by fax or phone. You may also use the contact form provided on the
website or the contact data given in the About us section of the website as well as the contact data given next to the contact
form on our website.

All personal data stored by us in the course of using our services in social networks will be deleted in this case, provided
that data protection regulations which require legal storage or storage of the respective data that is necessary according to
the purpose of the contract do not conflict.

You can also remove or restrict a link between your data and our Internet service via settings in your social media account.

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights
with respect to the data controller:

1. Right to information

You can request that the data controller confirm whether we process personal data that concerns you.

If such processing is taking place, you can request to be informed by the data controller regarding the following information:

(1.1) the purposes for processing the personal data;

(1.2) the categories of personal data being processed;

(1.3) the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;

(1.4) the planned storage duration of personal data concerning you or, if specific information in this respect is not possible
, criteria for determining the storage period;

(1.5) the existence of a right of rectification or deletion of personal data that concerns you or of a restriction on
processing by the data controller or of a right to object to such processing;

(1.6) the existence of a right of appeal to a supervisory authority;

(1.7) any available information on the origin of the data if the personal data has not been collected from the data subject;

(1.8) the existence of automated decision-making, including profiling in accordance with Art. 22 para. 1 and 4 of the GDPR and
– at least in these cases – meaningful information on the logic involved and the scope and intended effects of such processing
for the data subject.

You have the right to request information regarding whether your personal information will be transmitted to a third-party
country or an international organization. In this respect, you can request the appropriate guarantees in accordance with Art.
46 of the GDPR in connection with the transmission.

2. Right to rectification

You have a right to correct and/or add to your personal data held by the data controller if the processed personal data that
concern you are incorrect or incomplete. The data controller shall make the correction immediately.

3) Right to limitation of processing

Under the following conditions, you may request that the processing of personal data concerning you be restricted if:

(3.1) you dispute the accuracy of the personal data concerning you for a period that enables the data controller to verify the
accuracy of the personal data;

(3.2) the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal
data be restricted;

(3.3) the data controller no longer needs the personal data for processing purposes, but you need it to establish, exercise, or
defend legal claims; or

(3.4) you object to the processing in accordance with Art. 21 para. 1 of the GDPR and it is not yet clear whether the legitimate
reasons of the data controller outweigh your reasons.

Where processing of the personal data that concerns you has been restricted, such data – apart from being stored – may be
processed only with your consent or for the purpose of asserting, exercising or defending rights or protecting the rights of
another natural or legal person or on the grounds of an important public interest of the Union or of a Member State.

If the processing restriction has been done in accordance with the above conditions, you will be informed by the data
controller before the restriction is lifted.

4. Right to deletion

a) Duty to delete

You may request that the data controller delete the personal data that concerns you immediately, and the data controller will
be obliged to delete this data immediately if one of the following reasons applies:

(4.1) the personal data that concerns you is no longer necessary for the purposes for which it was collected or otherwise
processed;

(4.2) you revoke your consent to the processing pursuant to Art. 6 para. 1 (a) or Art. 9 para. 2 (a) GDPR, and where there is no
other legal ground for the processing.

(4.3) you submit an objection to the processing pursuant to Art. 21 para. 1, GDPR, and there are no overriding legitimate
grounds for processing, or you submit an objection according to Art. 21 para. 2 GDPR to the processing;

(4.4) the personal data that concerns you has been processed unlawfully;

(4.5) the deletion of personal data is required to comply with legal obligations according to Union law or the laws of the
Member States to which the data controller is subject;

(4.6) the personal data that concerns you has been collected in connection with offered information society services pursuant
to Art. 8 para. 1 GDPR.

b) Information to third parties

If the data controller has made the personal data that concerns you public and if the data controller is obliged for its
deletion pursuant to Art. 17 para. 1 of the GDPR, the data controller shall take appropriate measures, including technical
means, while taking into account available technology and implementation costs, to inform the third parties processing your
data that you as the data subject have requested deletion of all links to such personal data or of copies or replications of
such personal data.

c) Exceptions

The right to deletion does not exist insofar as the processing is necessary

(1) to exercise the right of freedom of expression and information;

(2) for the performance of a legal obligation required for processing under the law of the Union or of the Member States to
which the data controller is subject or for the performance of a task in the public interest or in the exercise of official
authority conferred to the data controller;

(3) for reasons of public interest in the field of public health in accordance with Art. 9 para. 2 (h) and (i), as well as Ar.
9 para. 3 of the GDPR;

(4) for archiving purposes in the interest of public, scientific or historical research purposes or for statistical purposes
in accordance with Art. 89 Para. 1 GDPR, to the extent that the law referred to in (a) is likely to render impossible or
seriously prejudicial the attainment of the objectives of such processing; or

(5) to assert, exercise or defend legal claims.

5) Right to information
If you have exercised your right to have the data controller correct, delete, or limit the processing, he or she is obliged to
inform all recipients to whom the personal data that concerns you has been disclosed of this correction or deletion of the
data or restriction on processing, unless this proves impossible or involves a disproportionate effort.

It is your right to have the data controller inform you about these recipients.

6. Right to data portability

You have the right to obtain your personal data, which you have provided to the data controller, in a structured, commonly
used and machine-readable format. In addition, you have the right to pass this data on to another data controller without
obstruction by the data controller to whom the personal data was provided, insofar as

(1) the processing is based on consent pursuant Art. 6 para. (1) a of the DSGVO or Art. 9 para. (2) a of the DSGVO or on a
contract pursuant to Art. 6 para. 1 (b) of the GDPR and

(2) the processing is undertaken using automated procedures.

In exercising this right, you also have the right to request that the personal data concerning you be transferred directly
from one data controller to another data controller, insofar as this is technically feasible. The freedoms and rights of other
persons must not be affected by this.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the
public interest or in the exercise of official authority delegated to the controller.

7. Right to object

You have the right, for reasons arising from your specific situation, to object to the processing of personal data concerning
you at any time, which is carried out in accordance with Art. 6 para. 1 (e) or (f) GDPR, including profiling based on those
provisions;

The data controller will no longer process the personal data that concerns you, unless the party can prove compelling
legitimate reasons for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert,
exercise or defend legal claims.

If the personal data that concerns you is being processed for direct marketing purposes, you have the right to object at any
time to the processing of the personal data that concerns you for the purpose of such marketing; this also applies to
profiling, insofar as it is associated with such direct marketing.

If you object to processing that is for direct marketing purposes, the personal data that concerns you will no longer be
processed for these purposes.

In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your
right to object by automated means using technical specifications.

8) Right to revoke the data protection declaration of consent

You have the right at any time to revoke your data protection declaration of consent. The revocation of consent shall not
affect the legality of any processing undertaken on the basis of this consent before its withdrawal.

9) Automated decision on a case-by-case basis, including profiling
You have the right not to be subject to a decision based exclusively on automated processing – including profiling – that has
legal effect against you or significantly impairs you in a similar manner. This shall not apply if the decision:

(1) is necessary for the conclusion or fulfillment of a contract between you and the data controller;

(2) is permissible on the basis of legislation of the Union or the Member States, to which the data controller is subject, and
these laws contain adequate measures to safeguard your rights and freedoms, as well as your legitimate interests, or

(3) is undertaken with your express consent.

However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art.9
Para. 2 (a) or (g) and appropriate measures have been taken to protect your rights and freedom as well as your legitimate
interests.

In the cases referred to in (1) and (3), the data controller shall take reasonable measures to safeguard your rights, freedoms
and legitimate interests, including at least the right to obtain the intervention of a person on the part of the data
controller, to state his or her own position and to challenge the decision.

10) Right of appeal to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in
particular in the Member State where you reside, work or where the infringement is suspected, if you believe that the
processing of personal data that concerns you is in contravention of the GDPR.

The supervisory authority with which the appeal has been filed shall inform the appellant of the status and results of the
appeal, including the possibility of a judicial remedy under Art. 78 of the GDPR.