Data Protection Information

for the website, including the online shop, of EVE Energy Co., Ltd.

We, EVE Energy Co., Ltd., provide our website and our business-2-business (B2B) online shop under the web address https://emallevepower.com. In context with the provision of the website and our online shop, we process personal data.

The protection of personal data is important to us. We process personal data only in accordance with the applicable data protection requirements, to the extent it is applicable to the processing of personal data in context with the provision of our website and our online shop, in particular the EU General Data Protection Regulation (GDPR).

In Section A of this Data Protection Information we provide you with information about the controller responsible for the processing of your personal data and the controller’s contact person for data protection-related matters.

In Section B you find information about the processing of your personal data.

In Section C you find more detailed information on the use of cookies or similar technologies.

In Section D you further find information on your rights regarding the processing of your personal data.

The technical terms relating to data protection used in this Data Protection Information have the meaning used in the General Data Protection Regulation. You will find more detailed information about this in Section E.

TABLE OF CONTENTS

A....... Information on the controller 3

I. Identity and contact details of the controller 3

II. Contact person for data protection-related matters 3

B....... Information on the processing of personal data. 4

I. Informational use of our website. 4

II. Use of the online shop. 8

C....... Information on the use of cookies or similar technologies. 23

I. General information on cookies. 24

II. Management of the cookies used on our website. 25

III. Cookies used on our website. 26

D...... Information on the rights of data subjects. 27

I. Right of access. 27

II. Right to rectification. 27

III. Right to erasure (“right to be forgotten”) 27

IV. Right to restriction of processing. 28

V. Right to data portability. 28

VI. Right to object 28

VII. Right to withdraw consent 29

VIII. Right to lodge a complaint with a supervisory authority. 29

E....... Information about the technical terms of the General Data Protection Regulation used in this Data Protection Information. 30

F....... Effective date of and changes to this Data Protection Information. 31

A. Information on the controller

I. Identity and contact details of the controller

EVE Energy Co., Ltd.

NO.38, Huifeng 7th Road, Zhongkai Hi-Tech Zone, Huizhou, Guangdong

090409@evebattery.com

+86-0752-5751984

II. Contact person for data protection-related matters

Cen GuNO.38, Huifeng 7th Road, Zhongkai Hi-Tech Zone, Huizhou City, Guangdong Province

090409@evebattery.com

+86-0752-5751984

B. Information on the processing of personal data

I. Informational use of our website

When the use of our website is purely informational, certain information, for example your IP address, is sent to our server by the browser used on your device for technical reasons. We process this information in order to provide our website content requested by you and to ensure the security of the IT infrastructure used to provide our website.

For so called “load balancing”, the requests of different users of our website are distributed to different web servers in order to ensure the best possible performance of the provision of the content of our website that you have accessed. Information about the assignment to a specific web server is stored on our server.

In order to provide the search functions of our website, we process data that you enter into search forms on our website in order to provide you with search results for search terms that you have entered.

In order to provide the data protection setting functions for our website (e.g. for granting or withdrawing consent for the use of certain cookie-based technologies), information about your data protection settings is stored in cookies (à Section C) on your device. The cookies and the information stored in them can be read during your visit to our website in order to take account of your data protection settings when using our website.

You receive more detailed information on this below:

[For a multi-layer presentation of the information (“layered information”), the following information may be hidden at the first layer]

1. Details on the personal data which are processed

Categories of personal data processed

Personal data included in the categories

Sources of the data

Obligation of the data subject to provide the data

Storage duration

HTTP Data

Protocol data which accrue when visiting our website via the Hypertext Transfer Protocol (Secure) (HTTP(S)) for technical reasons:

These include IP address, type and version of your internet browser, operating system used, last site accessed before visiting the site (referrer URL), date and time of visit.

User of our website

The provision of the data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. There is no obligation of the data subject to provide the data.

If the data is not provided, we cannot provide the content of our website which you requested.

The data are stored in server log files for a maximum period of 7 days, unless a security-relevant event occurs (e.g. a DDoS attack).

If there is a security-relevant event, server log files are stored until the security-relevant event has been eliminated and completely resolved.

Load Balancing Data

Data used to control load balancing for the website:

This includes information about the assignment to a specific webserver that is used for load balancing and which we store on our server.

User of our website

The provision of the data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. There is no obligation of the data subject to provide the data.

If the data is not provided, we cannot perform load balancing. This means that the content of our website that you access may be provided more slowly.

We process the data only temporarily for the period of the visit of our website.

Search Function Data

Data that accrue when the search functions of our website are used:

These include all information that you enter as search terms in the respective search form on our website.

User of our website

The provision of the data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. There is no obligation of the data subject to provide the data.

If the data is not provided, you cannot use the search functions of our website.

The data are stored in server log files for a maximum period of 7 days, unless a security-relevant event occurs (e.g. a DDoS attack).

If there is a security-relevant event, server log files are stored until the security-relevant event has been eliminated and completely resolved.

Data Protection Setting Data

Data on data protection settings you have made for our website:

This includes information on whether you have given your consent and, if so, what consent you have given and when.

This data is stored in cookies on your device (à Section C) and can be read during your visit to our website.

User of our website

The provision of the data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. There is no obligation of the data subject to provide the data.

If the data is not provided, we cannot take your consents for our website into account. This means that we may not be able to provide you with certain functions of our website that require consent.

We process the data only temporarily for the period of the visit of our website.

(You can find more information on the validity period of the cookies used in Section C.III.)

2. Details on the processing of the personal data

Purpose of processing the personal data

Categories of personal data processed

Automated decision-making

Legal basis and, where applicable, legitimate interests

Recipient

Provision of content of our website requested by the user:

For this purpose, data are temporarily processed on our web server.

HTTP Data

No automated decision-making takes place.

Art. 6 (1) (f) GDPR (pursuing legitimate interests under balancing of interests):

Our legitimate interest is the provision of the content of our website requested by the user.

Hosting Provider

Ensuring the security of the IT infrastructure used for the provision of our website, in particular for the detection, elimination and conclusive documentation of incidents (e.g. DDoS attacks):

For this purpose, data are temporarily stored in log files on our web server and automatically evaluated.

HTTP Data

Search Function Data

No automated decision-making takes place.

Art. 6 (1) (f) GDPR (pursuing legitimate interests under balancing of interests):

Our legitimate interest is ensuring the security of the IT infrastructure used for the provision of our website, in particular for the detection, elimination and conclusive documentation of incidents (e.g. DDoS attacks).

Hosting Provider

Load balancing in the provision of the content of our website accessed by the user:

In order to ensure that our website is provided with the best possible performance, several different servers may be used for load balancing, to which the requests of different users of our website are distributed (so-called "load balancing").

HTTP Data

Load Balancing Data

No automated decision-making takes place.

Art. 6 (1) (f) GDPR (pursuing legitimate interests under balancing of interests):

Our legitimate interest is the best possible performance of the provision of the content of our website requested by the user.

Hosting Provider

Providing the search functions of our website:

For this purpose, data are temporarily processed on our web server.

HTTP Data

Search Function Data

No automated decision-making takes place.

Art. 6 (1) (f) GDPR (pursuing legitimate interests under balancing of interests):

Our legitimate interest is the provision of the search functions of our website requested by the user.

Hosting Provider

Provision of data protection setting functions for our website:

Certain features of our website (e.g. the use of certain cookie-based technologies) require your consent.

We provide data protection setting functions for our website to enable you to give and, if necessary, withdraw your consent.

For this purpose, information about your consent is stored in cookies (à Section C) on your device. The cookies and the information stored in them can be read during your visit to our website in order to determine whether you have given your consent and, if so, what consent you have given.

HTTP Data

Data Protection Setting Data

No automated decision-making takes place.

Art. 6 (1) (f) GDPR (pursuing legitimate interests under balancing of interests):

Our legitimate interest is the provision of data protection setting functions for our website.

Hosting Provider

3. Details on the recipients of personal data and the transfer of personal data to third countries and/or international organisations

Recipient

Recipient’s role

Transfers to third countries and/or international organisations

Adequacy decision or appropriate or suitable safeguards for transfers to third countries and/or international organisations

Hosting Provider:

Ali Cloud Co., Ltd.

Ali Shenzhen Base, Longgang Disctrict, Shenzhen City, Guangdong Province, China

Ali Frankfurt Base, Rüsselsheim am Main, Frankfurt, Hessen, Germany

Processor

The data is processed in China.

There is no adequacy decision by the European Commission within the meaning of Art. 45 (3) GDPR.

This transfer of personal data is subject to standard data protection clauses pursuant to Art. 46 (2.) (c) GDPR. A copy of the standard data protection clauses can be obtained from us (see contact details in Section A above).

II. Use of the online shop

On our website you have the possibility to use our business-2-business (B2B) online shop. We process personal data of users of our online shop for the following purposes:

· Provision of our online shop for informational use

· Provision of the product filter function

· Sending emails with product recommendations for own similar products

· Sending review reminders by email (with your consent)

· Administration of our purchase price claims in our internal debtor management system

· Recovery of our purchase price claims

· Storage for evidence purposes for any assertion, exercise or defence of legal claims

· Assertion, exercise or defence of legal claims

· Storage in order to meet statutory document retention obligations, in particular commercial and tax law document retention obligations

· Ensuring the security of the IT infrastructure used for the provision of the online shop, in particular for the detection, elimination and conclusive documentation of incidents (e.g. DDoS attacks)

· Anonymisation of information on purchases and product view in our online shop for anonymised evaluation and reporting in order to improve our online shop

. The cookies (à Section C)and the information stored in them can be read during your visit to our website in order to provide you with the relevant function.

You receive more detailed information on this below:

[For a multi-layer presentation of the information (“layered information”), the following information may be hidden at the first layer]

1. Details on personal data which are processed

Categories of personal data processed

Personal data included in the categories

Sources of the data

Obligation of the data subject to provide the data

Storage duration

Online Shop HTTP Data

Protocol data which accrue via the Hypertext Transfer Protocol (Secure) (HTTP(S)) for technical reasons when the online shop on our website is accessed:

This includes IP address, type and version of your internet browser, operating system used, site accessed before visiting the site (referrer URL), date and time of the visit.

User of the online shop

The provision of the data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. There is no obligation of the data subject to provide the data.

If the data is not provided, we cannot provide the content of our website which you requested.

The data are stored in server log files for a maximum period of 7 days, unless a security-relevant event occurs (e.g. a DDoS attack).

If there is a security-relevant event, server log files are stored until the security-relevant event has been eliminated and completely resolved.

Contact Data

Data that you provide us within the ordering process to contact you to process your order:

Including but not limited to first name, last name, company name, website, position, address (billing address), telephone number, email address, product application area, demand of our product. Delivery address, the chosen shipping method, Personal Favourites Data, payment method (e.g. bank details, credit card numbers, coupons).

User of the online shop

If you are using the online shop, this data will be taken from the contact form and chat, which send by user.

The provision of the data is a requirement necessary to enter into a purchase agreement. There is no obligation of the data subject to provide the data.

If the data is not provided, you cannot purchase any items via our online shop.

We store the data until the complete handling of your order, i.e. until shipping of the ordered items.

We store these data for evidence purposes for the assertion, exercise or defence of any legal claims and also for an interim period of three years commencing at the end of the year in which you provide the data to us and in the event of any legal disputes until such have been concluded.

We also store this data to the extent that statutory obligations to do so, in particular commercial and tax law document retention obligations exist.

Contact form Data

Data that you provide us within the ordering process to contact you to process your order:

Including but not limited to first name, last name, company name, website, position, address (billing address), telephone number, email address, product application area, demand of our product. Delivery address.

User of the online shop

If you are using the online shop, this data will be taken from your contact form and chat.

The provision of the data is a requirement necessary to enter into a purchase agreement. There is no obligation of the data subject to provide the data.

If the data is not provided, you cannot purchase any items via our online shop.

We store the data until the complete handling of your order, i.e. until shipping of the ordered items.

We store these data for evidence purposes for the assertion, exercise or defence of any legal claims and also for an interim period of three years commencing at the end of the year in which you provide the data to us and in the event of any legal disputes until such have been concluded.

We also store this data to the extent that statutory obligations to do so, in particular commercial and tax law document retention obligations exist.

Shipping Data

Data that you provide us with in the ordering process for shipping your ordered items:

This includes the chosen shipping method and, if applicable, the delivery address entered that differs from the billing address.

User of the online shop

If you do not mention it in the contact form or chat, we will not ask for relevant information.

The provision of the data is a requirement necessary to enter into a purchase agreement. There is no obligation of the data subject to provide the data.

If the data is not provided, you cannot purchase any items via chat funtion.

We store the data until the complete handling of your order, i.e. until shipping of the ordered items.

We store these data for evidence purposes for the assertion, exercise or defence of any legal claims and also for an interim period of three years commencing at the end of the year in which you provide the data to us and in the event of any legal disputes until such have been concluded.

We also store this data to the extent that statutory obligations to do so, in particular commercial and tax law document retention obligations exist.

Payment Data

Data that you provide to us as part of the ordering process for the payment of your ordered items:

This includes the chosen payment method and, depending on the chosen payment method, further information that must be provided for the respective payment method (e.g. bank details, credit card numbers, coupons).

User of the online shop

If you do not mention it in the contact form or chat, we will not ask for relevant information.

The provision of the data is a requirement necessary to enter into a purchase agreement. There is no obligation of the data subject to provide the data.

If the data is not provided, you cannot purchase any items via our online shop.

We store the data until the complete handling of your order, i.e. until shipping of the ordered items.

We store these data for evidence purposes for the assertion, exercise or defence of any legal claims and also for an interim period of three years commencing at the end of the year in which you provide the data to us and in the event of any legal disputes until such have been concluded.

We also store this data to the extent that statutory obligations to do so, in particular commercial and tax law document retention obligations exist.

Order Data

Information about your order:

This includes information about the purchased items (item name, item number, quantity, size, colour, price, currency, order number), store version used, date and time of purchase, status of your order.

If applicable, this also includes additional information that you provide to us as a comment on your order, such as requests for customisation or product-specific questions.

User of the online shop

If you are using the online shop, this data will be taken from your contact form and chat.

If you do not mention it in the contact form or chat, we will not ask for relevant information.

-

We store the data until the complete handling of your order, i.e. until shipping of the ordered items.

We store these data for evidence purposes for the assertion, exercise or defence of any legal claims and also for an interim period of three years commencing at the end of the year in which you provide the data to us and in the event of any legal disputes until such have been concluded.

We also store this data to the extent that statutory obligations to do so, in particular commercial and tax law document retention obligations exist.

Transactional Email Data

Data from transaction emails which we send for the (return) processing of contact form or chat.

This includes the content and time of the transaction emails.

User of the online shop

If you are using the online shop, this data will be taken from your contact form or chat.

-

We store the data until the complete handling of your order, i.e. until shipping of the ordered items.

We store these data for evidence purposes for the assertion, exercise or defence of any legal claims and also for an interim period of three years commencing at the end of the year in which you provide the data to us and in the event of any legal disputes until such have been concluded.

We also store this data to the extent that statutory obligations to do so, in particular commercial and tax law document retention obligations exist.

Google advertising anaslysis management data

Information regarding consents you gave for advertisement purposes as well as information regarding your potential objections to advertisements:

These include date and time of the consent, the IP-address of the device used to give consent, date and time of any withdrawal of consent or of an objection against the processing of personal data for advertisement purposes.

User of the online shop

The provision of the data is not a statutory or contractual requirement, or a requirement necessary to enter into a contract. There is no obligation of the data subject to provide the data.

If the data is not provided, we cannot process your consents to and /or objections regarding advertisements.

We store the data as long as we have your consent or as long as we carry out advertising activities without your consent based on the information we provided to you on the respective advertisement.

We store these data for evidence purposes for the assertion, exercise or defence of any legal claims and also for an interim period of three years commencing at the end of the year in which you withdrew your consent or in which we stopped the respective advertising activity and in the event of any legal disputes until such have been concluded.

Additionally, this includes documentation on the information we provided to you on a consent and/or on advertisement we carry out without your consent.

Generated by us

-

2. Details on the processing of the personal data

Purpose of the processing of personal data

Categories of personal data processed

Automated decision-making

Legal basis and, where applicable, legitimate interests

Recipient

Provision of our online shop for informational use:

For this purpose HTTP data are processed temporarily on our web server.

Online Shop HTTP Data

No automated decision-making takes place.

Art. 6 (1) (f) GDPR (pursuing legitimate interests under balancing of interests):

Our legitimate interest is the provision of our online shop requested by the user for informational use.

Hosting Provider

Provision of the product filter function

Online Shop HTTP Data

No automated decision-making takes place.

Art. 6 (1) (f) GDPR (pursuing legitimate interests under balancing of interests):

Our legitimate interest is the provision of the functions of our online shop requested by the user.

Hosting Provider

Sending emails with product recommendations for own similar products:

We send product recommendations for own similar products to customers, who provided their email address when ordering a product in the online shop and who we have clearly informed upon collection of their email address that they may object to the usage of their email address for this purpose at any time, without costs arising by virtue thereof, other than transmission costs pursuant to the basic rates.

We also point out this right to object again with each use of the email address, i.e. in each recommendation email.

To promote our own similar products, we will use the information about your previous purchases included in the Order Data, to ensure that you only receive advertisements for products that are similar to the ones you already ordered from us.

Contact Data

Order Data

Google advertising anaslysis management data

No automated decision-making takes place.

Art. 6 (1) (f) GDPR (pursuing legitimate interests under balancing of interests):

Our legitimate interest is the use of the email address for the promotion of our own similar products.

Hosting Provider

Sending review reminders by email (with your consent):

If you have consented to this, after completing an order, we ask you by email whether you want to leave a rating for the ordered products in our online shop.

Contact Data

Order Data

Google advertising anaslysis management data

No automated decision-making takes place.

Art. 6 (1) (a) GDPR (consent)

Hosting Provider

Sending advertisement by post to who leave contact information on our online shop:

We may send you interesting offers and information about our products by post, unless you have objected.

We may use your application area as well as information about your previous orders to design the content of this advertisement based on your interests.

Contact Data

Order Data

Google advertising anaslysis management data

No automated decision-making takes place.

Art. 6 (1) (f) GDPR (pursuing legitimate interests under balancing of interests):

Our legitimate interest is the promotion of our products to customer of our online shop

Hosting Provider

Storage for evidence purposes for any assertion, exercise or defence of legal claims

Contact Data

Shipping Data

Payment Data

Order Data

Transactional Email Data

Google advertising anaslysis management data

No automated decision-making takes place.

Art. 6 (1) (f) GDPR (pursuing legitimate interests under balancing of interests):

Our legitimate interest is the assertion, exercise or defence of legal claims.

Hosting Provider

Assertion, exercise or defence of legal claims, including the cooperation with external lawyers

Contact Data

Shipping Data

Payment Data

Order Data

Transactional Email Data

Google advertising anaslysis management data

No automated decision-making takes place.

Art. 6 (1) (f) GDPR (pursuing legitimate interests under balancing of interests):

Our legitimate interest is the assertion, exercise or defence of legal claims.

Courts

Lawyers

Storage in order to meet statutory document retention obligations, in particular commercial and tax law document retention obligations

Contact Data

Shipping Data

Payment Data

Order Data

Transactional Email Data

No automated decision-making takes place.

If our legal obligation arises from EU or EU member state law:

Art. 6 (1) (c) GDPR (compliance with a legal obligation)

If our legal obligation arises from other laws:

Art. 6 (1) (f) GDPR (pursuing legitimate interests under balancing of interests):

Our legitimate interest is the compliance with our legal obligations.

Hosting Provider

Ensuring the security of the IT infrastructure used for the provision of the online shop, in particular for the detection, elimination and conclusive documentation of incidents (e.g. DDoS attacks):

For this purpose, data are temporarily stored and evaluated in log files on our web server.

Information on the relevant session through contact form and chat. information will be stored in the cookie ( Section C). The cookies and the information stored in them can be read during your use of our online shop in order to maintain the relevant session.

Online Shop HTTP Data

No automated decision-making takes place.

Art. 6 (1) (f) GDPR (pursuing legitimate interests under balancing of interests):

Our legitimate interest is ensuring the security of the IT infrastructure used to provide the online shop, in particular to identify, eliminate and preserve evidence of disruptions (e.g. DDoS attacks).

Hosting Provider

Anonymisation of information on consulting and product view in our online shop for anonymised evaluation and reporting in order to improve our online shop.

Online Shop HTTP Data

Transactional Email Data

No automated decision-making takes place.

Art. 6 (1) (f) GDPR (pursuing legitimate interests under balancing of interests):

Our legitimate interest is to create anonymous reports that can be used for evaluation and reporting.

Hosting Provider

3. Details on the recipients of persona data and the transfer of personal data to third countries and/or international organisations

Recipient

Recipient’s role

Transfers to third countries and/or international organisations

Adequacy decision or appropriate or suitable safeguards for transfers to third countries and/or international organisations

Hosting Provider:

Alibaba Cloud Computing Co. Ltd

969 West Wen Yi Road, Yu Hang District, Hangzhou 311121, Zhejiang Province, China

Processor

The data is processed in China.

There is no adequacy decision by the European Commission within the meaning of Art. 45 (3) GDPR.

This transfer of personal data is subject to standard data protection clauses pursuant to Art. 46 (2.) (c) GDPR. A copy of the standard data protection clauses can be obtained from us (see contact details in Section A above).

C. Information on the use of cookies or similar technologies

We use cookies in connection with our website, including our online shop. In doing so, we use the processing and storage functions of your device’s browser and collect information from the memory of your device’s browser.

You will find more detailed information on this below.

[For a multi-layer presentation of the information (“layered information”), the following information may be hidden at the first layer]

I. General information on cookies

Cookies are small text files with information that can be placed on a user’s device through its browser when a website is visited. When the relevant website is visited again with the same device, the cookie and the information it contains can be retrieved.

1. First-party and third-party cookies

Depending on where a cookie comes from, a distinction can be made between first-party cookies and third-party cookies:

First-party cookies

Cookies that are placed and accessed by the operator of the website as the controller or by a processor engaged by the controller

Third-party cookies

Cookies that are placed and accessed by controllers other than the operator of the website that are not processors engaged by the operator of the website

2. Transient and persistent cookies

A distinction can be made between transient and persistent cookies depending on how long they remain active:

Transient cookies

(Session cookies)

Cookies that are automatically deleted when you close your browser

Persistent cookies

Cookies that remain stored on your device for a certain period of time after the browser is closed

3. Consent-free cookies and cookies requiring consent

Users’ consent is required for some cookies depending on their function and purpose of use. Thus, a distinction can be made between cookies that require users’ consent and those that do not:

Consent-free cookies

Cookies that have as their sole purpose to transmit a message using an electronic communication network

Cookies that are necessary so that the party offering a service that has been expressly requested by a participant or user can provide this service (“strictly necessary cookies”)

Cookies requiring consent

Cookies for all purposes of use other than the aforementioned

II. Management of the cookies used on our website

1. Granting and withdrawing consent to the use of cookies in the data protection settings of our website

If consent is necessary for the use of certain cookies, we only use these cookies if you have previously granted your consent to this. You can find information as to whether the use of a particular cookie requires consent in the information on the cookies used on this website in Section C.III. of this Data Protection Information.

When you first visit our website, we display a pop-up for data protection settings. In the data protection settings, you can give consent for the use of cookies that require consent and the processing of your personal data that this enables. However, you can also continue to use our website without consent. In this case, we will only use cookies for which consent is not required.

You can access the data protection settings of our website at any time via the link contained in this Data Protection Information and in the footer of our website. In the data protection settings, you can revoke or re-give the consent you have given at any time.

We store whether and, if applicable, which consents you have given in the form of a (strictly necessary) cookie (so-called "data protection settings cookie") on your device. The data protection setting cookie has a limited validity period of 12 months. After the expiration of the validity period, or if you delete the data protection settings cookie manually beforehand, we will display the banner for data protection settings for our website again the next time you visit our website.

You cannot deactivate cookies that are absolutely necessary in the data protection settings of our website. However, you can generally deactivate these cookies in your browser at any time.

2. Managing cookies using browser settings

You can also manage the use of cookies in your browser’s settings. Different browsers have different ways to configure cookie settings. You can find more extensive information on this, for example at http://www.allaboutcookies.org/manage-cookies/.

However, we would like to point out that some functions of our website may not work properly or at all if you deactivate cookies in general in your browser.

III. Cookies used on our website

Name

First party/third party

Purpose of use and content

Effective term

Consent necessary

Echat cookie

evemall / Echat soft

User of the online shop

Test whether cookies are supported.

Access source page.

Access source page timeout.

Visitor's last source page staging.

Guest encryption ID (temporary random unique ID).

Guest plaintext ID. Visitor landing page.

Landing page title.

Echat chat window display and hide status.

Visible height of echat chat window.

If you are using the online shop, this data will be taken from your contact form or chat.

These data will become invalid when the browser is closed.

Access source page and access source page timeout would be store for 24 hours.

No

D. Information on the rights of data subjects

As a data subject, you have the following rights with regard to the processing of your personal data:

· Right of access (Art. 15 GDPR)

· Right to rectification (Art. 16 GDPR)

· Right to erasure (“right to be forgotten”) (Art. 17 GDPR)

· Right to restriction of processing (Art. 18 GDPR)

· Right to data portability (Art. 20 GDPR)

· Right to object (Art. 21 GDPR)

· Right to withdraw consent (Art. 7 (3) GDPR)

· Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

You may chat us for the purpose of exercising your rights using the contact information in Section A.

Where applicable, you find information on any specific modalities and mechanisms which facilitate the exercise of your rights, in particular the exercise of your rights to data portability and to object, in the information on the processing of personal data in Section B of this Data Protection Information.

Below you find more detailed information on your rights with regard to the processing of your personal data:

[For a multi-layer presentation of the information (“layered information”), the following information may be hidden at the first layer]

I. Right of access

As a data subject, you have a right to obtain access and information under the conditions provided in Art. 15 GDPR.

This means in particular that you have the right to obtain confirmation from us as to whether we are processing your personal data. If so, you also have the right to obtain access to the personal data and the information listed in Art. 15 (1) GDPR. This includes information regarding the purposes of the processing, the categories of personal data that are being processed and the recipients or categories of recipients to whom the personal data have been or will be disclosed (Art. 15 (1) (a), (b) and (c) GDPR).

You can find the full extent of your right to access and information in Art. 15 GDPR, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

II. Right to rectification

As a data subject, you have the right to rectification under the conditions provided in Art. 16 GDPR.

This means in particular that you have the right to receive from us without undue delay the rectification of inaccuracies in your personal data and completion of incomplete personal data.

You can find the full extent of your right to rectification in Art. 16 GDPR, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

III. Right to erasure (“right to be forgotten”)

As a data subject, you have a right to erasure (“right to be forgotten”) under the conditions provided in Art. 17 GDPR.

This means that you have the right to obtain from us the erasure of your personal data and we are obliged to erase your personal data without undue delay when one of the reasons listed in Art. 17 (1) GDPR applies. This can be the case, for example, if personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed (Art. 17 (1) (a) GDPR).

If we have made the personal data public and are obliged to erase it, we are also obliged, taking account of available technology and the cost of implementation, to take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of those personal data (Art. 17 (2) GDPR) .

The right to erasure (“right to be forgotten”) does not apply if the processing is necessary for one of the reasons listed in Art. 17 (3) GDPR. This can be the case, for example, if the processing is necessary for compliance with a legal obligation or for the establishment, exercise or defence of legal claims (Art. 17 (3) (b) and (e) GDPR).

You can find the full extent of your right to erasure (“right to be forgotten”) in Art. 17 GDPR, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

IV. Right to restriction of processing

As a data subject, you have a right to restriction of processing under the conditions provided in Art. 18 GDPR.

This means that you have the right to obtain from us the restriction of processing if one of the conditions provided in Art. 18 (1) GDPR applies. This can be the case, for example, if you contest the accuracy of the personal data. In such a case, the restriction of processing lasts for a period that enables us to verify the accuracy of the personal data (Art. 18 (1) (a) GDPR).

Restriction means that stored personal data are marked with the goal of restricting their future processing (Art. 4 (3) GDPR).

You can find the full extent of your right to restriction of processing in Art. 18 GDPR, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

V. Right to data portability

As a data subject, you have a right to data portability under the conditions provided in Art. 20 GDPR.

This means that you generally have the right to receive your personal data with which you have provided us in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance from us if the processing is based on consent pursuant to Art. 6 (1) (a) or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and the processing is carried out by automated means (Art. 20 (1) GDPR).

You can find information as to whether an instance of processing is based on consent pursuant to Art. 6 (1) (a) or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR in the information regarding the legal basis of processing in Section B of this Data Protection Information.

In exercising your right to data portability, you also generally have the right to have your personal data transmitted directly from us to another controller if technically feasible (Art. 20 (2) GDPR).

You can find the full extent of your right to data portability in Art. 20 GDPR, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

VI. Right to object

As a data subject, you have a right to object under the conditions provided in Art. 21 GDPR.

At the latest in our first communication with you, we expressly inform you of your right, as a data subject, to object.

More detailed information on this is given below:

1. Right to object on grounds relating to the particular situation of the data subject

As a data subject, you have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on Art. 6 (1) (e) or (f), including profiling based on those provisions.

You can find information as to whether an instance of processing is based on Art. 6 (1) (e) or (f) GDPR in the information regarding the legal basis of processing in Section B of this Data Protection Information.

In the event of an objection relating to your particular situation, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

You can find the full extent of your right to objection in Art. 21 GDPR, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

2. Right to object to direct marketing

Where your personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.

You can find information as to whether and to what extent personal data are processed for direct marketing purposes in the information regarding the legal basis of processing in Section B of this Data Protection Information.

If you object to processing for direct marketing purposes, we no longer process your personal data for these purposes.

You can find the full extent of your right to objection in Art. 21 GDPR, which can be accessed using the following link: http://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

VII. Right to withdraw consent

Where an instance of processing is based on consent pursuant to Art. 6 (1) (a) or Art. 9 (2) (a) GDPR, as a data subject, you have the right, pursuant to Art. 7 3 GDPR, to withdraw your consent at any time. The withdrawal of your consent does not affect the legitimacy of the processing that occurred based on your consent until the withdrawal. We inform you of this before you grant your consent.

You can find information as to whether an instance of processing is based on Art. 6 (1) (a) or Art. 9 (2) (a) GDPR in the information regarding the legal basis of processing in Section B of this Data Protection Information.

VIII. Right to lodge a complaint with a supervisory authority

As a data subject, you have a right to lodge a complaint with a supervisory authority under the conditions provided in Art. 77 GDPR.

A list of each supervisory authority in the EU/EEA can be found here: https://edpb.europa.eu/about-edpb/about-edpb/members_en

E. Information about the technical terms of the General Data Protection Regulation used in this Data Protection Information

The technical terms relating to data protection used in this Data Protection Information have the meaning used in the General Data Protection Regulation.

The full scope of the definitions of the General Data Protection Regulation can be found in Art. 4 GDPR, which can be downloaded from the following link: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679.

You will find more detailed information on the most important technical terms of the General Data Protection Regulation used in this Data Protection Information below:

[For a multi-layer presentation of the information (“layered information”), the following information may be hidden at the first layer]

“Personal data” means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

“Data Subject” means the respective identified or identifiable natural person, to which the personal Data refers to;

“Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

“Profiling” means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements;

“Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;

“Processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;

“Recipient” means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;

“Third party” means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data;

“International organisation” means an organisation and its subordinate bodies governed by public international law, or any other body which is set up by, or on the basis of, an agreement between two or more countries;

“Third country” means a country which is not a member state of the European Union (“EU”) or the European Economic Area (“EEA”);

“Special categories of personal data” means personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.

F. Effective date of and changes to this Data Protection Information

The effective date of this Data Protection Information is [22nd. August 2022].

It may be necessary to modify this Data Protection Information due to technical developments and/or amendment of statutory or official requirements.