We are pleased about your use of our website. The protection of your personal data is important to us  and we want you to feel safe when using our website.  

1. Information concerning the collection of personal data
2. The following shall inform you about the collection, processing and utilization of personal  data on our website. Personal data means all data relating to a living individual who can be  identified.
3. Controller as per the EU General Data Protection Regulation (GDPR) is:

Name: DIBMat GmbH Address Wilhelm-Leuschner-Street 78 60329  

Frankfurt on the Main Germany

Email: privacy@emma-sleep.com

You can reach our data protection officer through the following contact details:  

Name: entplexit GmbH

Kölner Straße 12

65760 Eschborn

Email: privacy@emma-sleep.com

1. If we use contracted service providers for individual functions to present our services to you  or to your data for advertising purposes, we will inform you in detail about the respective  processes below.
2. Your rights as a data subject
3. You have the following rights against us with respect to the personal data concerning you: • Right of access by the data subject (Art. 15 GDPR):

You have the right to request information on the data we hold about you from us at any  time. This information includes, but is not limited to, the categories of data we process,  the purposes for which it is processed, the source of the data if not collected directly  from you, and, if applicable, the recipients with whom we have shared your data. You can  obtain a copy of your data from us free of charge. If you require additional copies, we  reserve the right to charge you for these copies.

Document Control  

Last updated: 04/15/2021 Version: 1

• Right to rectification (Art. 16 GDPR):

You have the right to request that we rectify inaccurate data relating to you. We will  take appropriate steps to keep the data we store and process on an ongoing basis  accurate, complete and current, based on the most up-to-date information available

• Right to erasure (Art. 17 GDPR):

You have the right to demand the deletion of your personal data stored with us, unless  the processing is necessary to exercise the right to freedom of expression and  information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise  or defend legal claims.

• Right to restriction of processing (Art. 18 GDPR):

You have the right to demand the restriction of the processing of your personal data if  the accuracy of the data is disputed by you, if the processing is unlawful but you refuse  to have it deleted and we no longer need the data, but you need it for the assertion,  exercise or defense of legal claims or if you have lodged an objection to the processing  pursuant to Art. 21 GDPR.

• Right to data portability (Art. 20 GDPR):

You have the right to request that we transfer your data – if technically possible – to  another responsible party. However, you may only enforce this right if data processing is  based on your consent or is necessary for the performance of a contract. Rather than  receiving a copy of your data, you may also ask us to submit the data directly to another  responsible party specified by you.

• Right to object (Art. 21 GDPR):

You have the right to object to the processing of your data at any time for reasons that  arise from your particular situation, as long as data processing is based on your consent,  on our legitimate interests or those of a third party. In this case, we will cease to process  your data. This does not apply if we can show that there are compelling legitimate  grounds for processing that outweigh your interests, or if we need your data for the  establishment, exercise or defense of legal claims.

• Right to withdraw consent (Art. 7 (3) GDPR):

You have the right to revoke your consent to us at any time. As a result, we are not  allowed to continue the data processing that was based on this consent in the future.

Document Control  

Last updated: 04/15/2021 Version: 1

1. If you have the feeling that we have not responded in an appropriate manner to your  complaints or you have further concerns, you additionally have the right to complain to a  data protection authority. Our lead supervisory authority is the “Hessische Beauftragte für  Datenschutz und Informationsfreiheit“: http://www.datenschutz.hessen.de.
2. You can send your inquiries regarding your rights as a data subject to us at privacy@emma sleep.com or by post to the controller’s postal address.
3. Collection of personal data when visiting our website

If you use the website simply for informational purposes, i.e. if you do not register yourself or send us  any information, we collect only the personal data which your browser sends to our server. If you wish  to view our website, we collect the following technical data which we need to enable us to show you our  website and ensure stability and security (the legal basis is Article 6 (1) (f) of the GDPR): a. IP address

1. date and time of the query
2. time zone difference relative to Greenwich Mean Time (GMT)
3. content of the query (specific site)
4. access status/HTTP status code
5. data volume transmitted in each case
6. website from which the request emanates
7. browser
8. operating system and its user interface
9. language and version of the browser software

The data mentioned above gets processed for the following purposes:

1. To ensure a smooth connection of the website;
2. Guarantee a comfortable use of our website;
3. Evaluation of system security and stability as well as for other administrative purposes.

This information is temporarily stored in so-called log files. This information is recorded without your  intervention and stored until it is automatically deleted.  

4. Cookies  
5. In addition to the beforementioned data categories we use cookies to make the experience  of visiting our website as user-friendly as possible and to allow you to make use of certain  functions. Cookies are little text files that are saved on your browser’s delegated hard drive,  through which certain information flows back to the person who sets the cookie (in this case  us). Cookies are used to improve the user experience and effectiveness of our website.
6. Kinds of Cookies

This website uses the following types of cookies:

• Transient Cookies

Document Control  

Last updated: 04/15/2021 Version: 1

Transient cookies are automatically deleted when you close your browser. These are  mostly session cookies, which save a so-called “session-ID”, which allows for the  assigning of different queries within your browser during a particular session. This can  be used to identify your device when one repeatedly visits a website during a session.  These cookies are deleted once you log out or the browser window is closed.

• Persistent Cookies

Persistent cookies enable the website to remember your information and settings on  your next visit. This gives you faster and more convenient access to the website, as you  do not have to change your language settings again, for example. How long the cookie  remains on your device depends on the duration or expiration date of the respective cookie and your browser settings. These cookies are automatically deleted after a set  period of time which can differ from cookie to cookie. Persistent cookies can be deleted  via the security settings in your browser at any time.  

1. Depending on the kind of cookie, we use cookies either on the basis of our legitimate  interests (technically necessary cookies) or on the basis of your consent (optional cookies),  according to your selection of the cookie banner displayed when you access the website.  You can also configure your browser settings according to your preferences and, for  example, refuse to accept third-party cookies or all cookies. This may result in a functional  limitation of our offers.
2. Recipients or categories of recipients of personal data
3. Within the scope of our activities and services, it may become necessary for us to disclose  the personal data stored about you to natural persons, legal entities or public authorities.  We conclude contracts with our service providers, which ensure that they may only process  your personal data in a way that we have explicitly instructed them to do so. Furthermore,  we ensure that they take the necessary technical and organizational measures to process  your data securely and store your personal data only as long as necessary. External service  providers who may receive personal data generally fall into the following categories of  recipients:

• Subsidiaries and affiliates
• IT service provider to maintain our IT infrastructure  
• Cloud provider
• Service provider for the optimization of the online offer

1. If data is processed in countries outside the European Union, we will ensure that your  personal data is processed in accordance with the European data protection level. In the  absence of a decision by the EU Commission, we only transfer data to service providers from  third countries that offer suitable guarantees in accordance with Art. 46 GDPR (usually EU  Standard Contract Clauses).

Document Control  

Last updated: 04/15/2021 Version: 1

6. Contact form
7. When you contact us (for example by e-mail or via the contact form), the information you  provide will be processed for the purpose of processing your request and for the event that  follow-up questions arise. The contact form is an additional service provided by us to enable  you to contact us quickly and easily and is based on Article 6 (1) (f) GDPR.
8. The personal data collected by us in this context will be deleted when the request associated  with the contact has been completely clarified and it is also not to be expected that the  specific contact will become relevant again in the future, unless legal storage obligations  stand against this.
9. Blog

In our blog, where we publish various articles on topics related to our activities, you can make public  comments. Your comment will be published with your given username right under the post. You can use  a pseudonym instead of your real name. You are required to provide your username and e-mail address while all further information is voluntary. If you leave a comment, we will continue to save your IP  address. The storage is necessary for us in order to be able to defend ourselves against liability claims in  cases of a possible publication of illegal content. We need your e-mail address in order to contact you if  a third party should object to your comment as illegal. The legal basis is Article 6 (1) (f) GDPR. Comments  are not checked before publication. We reserve the right to delete comments if third parties complain  that they are illegal.

8. Newsletter
9. We send newsletters, e-mails and other electronic notifications containing promotional  information. Our newsletters contain information about our products, offers, promotions  and our company. With the following notes we inform you about the contents of our  newsletter as well as the registration, dispatch and statistical evaluation procedure and your  right of objection.
10. For the subscription to our newsletter we use a logged Double-Opt-in procedure. This means  that after subscription you will receive an e-mail asking you to confirm your registration. This  confirmation is necessary so that nobody can register with foreign e-mail addresses.  Newsletter subscriptions are logged in order to be able to prove the registration process in  accordance with the legal requirements. This includes the storage of the registration and  confirmation time as well as the IP address. Changes to your data stored by the service  provider are also logged. The purpose of this procedure is to be able to prove your  registration and, if necessary, to clarify any possible misuse of your personal data.

Document Control  

Last updated: 04/15/2021 Version: 1

1. To subscribe to the newsletter, it is sufficient to enter your e-mail address. The provision of  further data is voluntary and is used to address you personally. After your confirmation we  will save your e-mail address for the purpose of sending the newsletter. The newsletter  dispatch and the measurement of performance are based on your consent in accordance  with Art. 6 (1) (a), Art. 7 GDPR.
2. You may withdraw your consent to receive our newsletter at any time and stop receiving the  newsletter. You can declare your revocation by clicking on the link provided in every  newsletter e-mail or by sending an e-mail to us at privacy@emma-sleep.com.  
3. Social-Media, portals  
4. We are represented in the social networks and employer evaluation portals mentioned  below. These presences are operated exclusively by the respective provider. They serve to  communicate directly with customers, interested parties and users. If you contact us via our  social media channels, we process the data that you provide us with as well as the data that  is necessary to process your request (Art. 6 para. 1 letter b GDPR). Insofar as you have given  your consent to the operators of the respective social media platforms (e.g. by means of a  checkbox opt-in), the processing is carried out on the basis of Art. 6 (1) (a) GDPR. You can  revoke your consent at any time with the operator of the respective platform with effect for  the future.
5. When you visit our social media pages, your user data is recorded and provided to us by the  operator. The exact types of data differ from provider to provider, but generally include the  following information:

• Follower: number and stored profiles; information about growth and development over a  defined time frame.
• Reach: number of people who see a specific contribution; number of interactions with a  contribution. From this, it can be deduced, for example, which content is better received  by the community than others.
• Ad performance: How many people were reached by a contribution or a paid ad and  have interacted with it?
• Demographics: Average age of visitors, gender, location, language.

1. Since our social media channels are operated by the providers of the respective social  network, there may be a supplementary use of your personal data by the respective  operator, over which we have no influence. This often involves the recording of your IP  address, the creation of static evaluations and the processing of further information stored in  the form of cookies. We have no influence on the generation and presentation of this data  and can neither turn off this function nor prevent the processing of the data.
2. The assertion of data subject rights and requests can most effectively be addressed directly  to the platform providers, since only they have access to your data and can take immediate

Document Control  

Last updated: 04/15/2021 Version: 1

action and provide information. Should our cooperation be necessary for this, we will  support you in enforcing your rights as a data subject.  

1. More detailed information about the terms of use of the respective platform as well as a  detailed description of further data processing and the respective possibilities of objection  can be found on the pages of the providers under:

• Facebook (Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA):  http://www.facebook.com/policy.php; weitere Informationen zur Datenerhebung:  http://www.facebook.com/help/186325668085084,

http://www.facebook.com/about/privacy/your-info-on-other#applications sowie  http://www.facebook.com/about/privacy/your-info#everyoneinfo.

• Instagram (Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA):  http://instagram.com/legal/privacy/
• YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland):  https://policies.google.com/privacy?hl=de&gl=de
• Twitter (The Academy, 42 Pearse Street, Dublin 2, Ireland):  

https://twitter.com/en/privacy

• Xing (Dammtorstrasse 30, 20354 Hamburg, Germany):  

https://privacy.xing.com/en/privacy-policy https://privacy.xing.com/en/privacy policy/printable-version

• LinkedIn (LinkedIn Ireland Unlimited Company): https://www.linkedin.com/legal/privacy policy
• Shopify (Shopify International Ltd.): https://www.shopify.com/legal/privacy 10. Social-Media Plug-ins

1. We have integrated Plug-ins on our web services. These plug-ins are indicated by the  respective button belonging to the service. With the help of the plug-ins, users can share or  post links to the corresponding websites in social networks such as Facebook or Twitter or  recommend the contents there. Through your active interaction with these plugins, e.g. by  clicking the respective button or leaving a comment, this information is transmitted directly  to the respective service and stored there.
2. When you visit one of our web services that contain an activated plugin, your browser  establishes a connection with the servers of the respective service, which in turn transmits  the content of the plugin to your browser, which then integrates it into the displayed page.  Thus, the information about the visit of our web services is forwarded to the respective  service. We do not collect personal data ourselves by means of the social plugins or about  their use and have no influence on which data an activated plugin collects and how these are  used by the provider. It must be assumed that at least the IP address and device-related  information is collected and used. It is also possible that the service provider will attempt to  store cookies on the computer used. If you are logged in to the respective service at the  same time as visiting our web services via your personal user account (e.g. via another

Document Control  

Last updated: 04/15/2021 Version: 1

browser session), the service provider can assign the visit to our web services to your  account.

1. Usual social media plug-ins transfer the above-mentioned user data to the operator of the  social network each time the website is accessed. This also applies when you the website  user is not logged in or a member of the network. In order to prevent the unconscious and  unintentional collection and transmission of personal data to the service provider, we use  the so-called “2-click solution” on our web services: In order to activate a desired plugin, it  must first be activated by clicking on the corresponding button. Only when the plugin is  activated, the collection of information and its transfer to the service provider is triggered.  Without activating the plugin, which is only done at your own request, you can therefore surf  our web services without transmitting personal data to the operators of social networks in a  data protection compliant manner. In this case, data processing is carried out on the basis of  Art. 6 (1) (f) GDPR and in the interest of preserving your freedom of opinion and making  contributions more easily (co-)shareable.

For data protection reasons, we use the so-called “Shariff solution” developed by c’t  magazine. The Shariff solution functions in a way that as a first step, all data and functions  required to display the buttons are provided by our web server. Only when you decide to  share an article via the corresponding button and click on it, data will be transferred to the  operator of the respective social media service. In this case, data processing is carried out on  the basis of Art. 6 (1) (f) GDPR and in the interest of preserving your freedom of opinion and  making contributions more easily (co-)shareable.  

1. The plug-ins used are limited to applications of the companies listed under “Social media,  portals”. We have no influence on the collected data and data processing procedures, nor  are we aware of the full scope of data collection, the purposes of processing, the storage  periods. We also have no information about the deletion of the collected data by the plug-in  provider. We make every effort to comply with our duty to inform and to offer those  affected maximum transparency of information. Should you require more detailed  information about data processing by these companies, we recommend that you contact the  controller of the respective service Should our cooperation be necessary, we will of course  support you in enforcing your rights as a data subject.  
2. Facebook Insights – “Facebook Fanpages”  
3. Upon a visit of our Facebook page collects Facebook among others your IP address as well as  other information, which is saved on your device in form of cookies. This information will be  used to provide us as the operator of the Facebook page with statistical information on  Facebook usage. We can access these statistics through so-called Facebook “insights”. These  statistics are collected and provided solely by Facebook. We as the operator of the page have

Document Control  

Last updated: 04/15/2021 Version: 1

no influence over their generation and presentation. We cannot either stop or prevent their  generation and data processing. You can find further information about “Insights” provided  by Facebook here: https://www.facebook.com/help/pages/insights.

1. Following information will be provided to us by Facebook through “Insights”: Number of  page views, “likes”, page activities, reach, impressions, video views, post clicks and reactions,  post reach, comments, shared content, answers, gender ratio, regional distribution of the  users (origin based on country and city), language, opens and clicks in the shop, clicks on the  address and on the telephone number.
2. The operation of this Facebook page and processing of personal data of the users arising out  of it is based on Art. 6 (1) (f) of the GDPR and our legitimate interest to inform and interact  with users and visitors of our Facebook page.
3. We as the operator of this fan page are responsible for data processing together with  Facebook. For this reason, we have agreed with Facebook under the framework of so-called  “Page Insights” addon, which party bears which obligations under the GDPR. The main  responsibility for processing of the insight data under the GDPR stays with Facebook.  Facebook is bound to duly fulfill all obligations under the GDPR connected to processing of  insight data (among others Art. 12 and 13, 15 to 22 and 32 to 34 GDPR). You can claim your  data subject rights under the GDPR either with us or with Facebook Ireland Limited  (“Facebook Ireland”). Should you as a data subject under the GDPR contact us with regard to  processing of the insight data and obligations of Facebook Ireland connected to “Page Insights” addon, we are obliged to forward all relevant information in this regard to  Facebook Ireland. You can find comprehensive information about page insights addon and  the obligations of the data controller here:

https://www.facebook.com/legal/terms/page_controller_addendum.  

1. Please find Facebook address and Facebook’s Privacy Policy below:

Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, EUA;  

http://www.facebook.com/policy.php; for more information about Facebook’s data  collection and processing: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications e  

http://www.facebook.com/about/privacy/your-info#everyoneinfo.  

12. Google Analytics  
13. This website uses Google Analytics, a web analysis service of Google LLC. The responsible  service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4,  Ireland (“Google”).

Document Control  

Last updated: 04/15/2021 Version: 1

1. We use Google Analytics to analyze the use of our website in order to improve it regularly.  With the statistics obtained, we can improve our offer, make it more interesting for you as a  user and increase the success of our marketing campaigns. For this purpose, your usage data  is recorded, e.g. your IP address, the pages you have called up (click path), conversions such  as newsletter registrations or downloads, clicks, length of stay, hashed email, region or the  technical information on your browser. For this Google Analytics uses “cookies”, which are  text files placed on your computer, to help the website analyze how users use the site. The  information generated by the cookie about your use of this website is usually transferred and  stored in a Google server in the US.
2. The legal basis for this data processing is according to Art. 6 (1) (a) GDPR your consent, which  you have given via the cookie banner. Processing is performed to analyze and optimize our  website. You can revoke your consent at any time with effect for the future by calling up the  cookie and changing your selection there. You can also prevent the storage of cookies by  changing the settings of your browser software. However, we would like to point out that in  this case you may not be able to use all functions of this website to their full extent. You can  also prevent the collection of data generated by the cookie and related to your use of the  website (including your IP address) to Google and the processing of this data by Google by  not giving your consent to the setting of the cookie or by downloading and installing the  browser plug-in available under the following link:

http://tools.google.com/dlpage/gaoptout?hl=de.

This website uses Google Analytics with the extension “anonymizeIp”. This means that IP  addresses are processed in abbreviated form, which means that it is not possible for us to  identify a person. Only in exceptional cases the full IP address is transferred to a Google  server in the USA and shortened there. The IP address transmitted by your browser within  the framework of Google Analytics is not merged with other data from Google.  

This website also uses Google Analytics for a cross-device analysis of visitor flows, which is  carried out via a user ID. You can deactivate the cross-device analysis of your usage in your  customer account under “My data”, “Personal data”.

1. Recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4,  Ireland as a processor. For this purpose, we have concluded a data processing agreement  with Google and concluded the EU standard data protection clauses. Google LLC, based in  California, USA, and, where applicable, U.S. authorities may have access to the data stored  by Google. Please see Google’s Privacy Policy for more information about the purpose and  scope of the data collected and processed by Google and for further information about your  privacy rights and setting options: www.google.com/policies/privacy,

http://www.google.com/analytics/terms/de.html, overview of data protection:  http://www.google.com/intl/de/analytics/learn/privacy.html, privacy policy:  http://www.google.de/intl/de/policies/privacy.

Document Control  

Last updated: 04/15/2021 Version: 1

13. Google Remarketing
14. Our website uses the Google Analytics Remarketing function in connection to the across  functions from Google AdWords and Google DoubleClick providers.
15. This function enables the advertising target groups, created with the Google Analytics  Remarketing-Tool, to be connected with the cross-device function of Google AdWords and  Google DoubleClick. In this way, interested-based, personalized advertising messages, that  have been adapted to you, depending on your previous usage and surfing behavior on one  device (e.g. mobile phone), can also be displayed on another of your devices (e.g. Tablet or  Laptop). Supporting this function, Google Analytics collects google-authenticated user IDs in  order to define and create target groups for cross-device advertising.
16. The legal basis for the processing of your data is Article 6 (1) (a) GDPR, your consent, which  you have given with the cookie banner. You can revoke your consent at any time with the  effect fort the future by calling up the cookie settings and modifying your selection there.  You can also prevent the storage of cookies by setting your browser-software accordingly. We would like to inform you, that in this case, you may not be able to use all the functions of  our website. You can also prevent Google from collecting the data generated by the cookie  and relating to your use oft the website (incl. your IP address) and from processing this data  by Google by not giving your consent to the setting of the cookie, or by permanently  contradicting the cross-device remarketing tool by deactivating personalized advertising in  your Google-Account, following this link: https://www.google.com/settings/ads/onweb/.  
17. The recipient of data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4,  Ireland as the processor. Weh ave concluded with Google an order processing contract for  this purpose. Google LLC, based in california, and possubly us american authorities, can  access the data stored by google. Further information and the data protection regulations  can be found in the google data protection declaration:  

https://www.google.com/policies/technologies/ads/.  

14. Facebook Custom Audiences
15. The Website also uses the remarketing-function of the Facebook Inc. (“Facebook”). This  allows users of the website to be shown interest-related advertisements, when visiting the  social network Facebook or other websites that also use the process. We are pursuing the  interest of showing you advertisements that are of interest to you in order to make our  website more interesting for you.
16. Due to the marketing-tools used, your browser automatically establishes a direct connection  with the Facebook server. We have no influence on the scope and further use of the data,  that is collected through the use of this tool by Facebook and therefore we inform you  according to our level of knowledge. By integrating Facebook Custom Audiences, Facebook

Document Control  

Last updated: 04/15/2021 Version: 1

receives information, that you have accessed our website or that you have clicked on an ad  from us. If you are registered with a Facebook service, Facebook can assign the visit of our  website to your account. Even if you are not registered or logged in to Facebook, there is a  

possibility, that Facebook will find out and save your IP address and other identification  features.

1. The function can be deactivated for logged-in users under the following link: https://www.facebook.com/settings/?tab=ads#_.  
2. The legal basis for the processing of your data is Article 6 (1) (f) GDPR. Further information is  available at the following: https://www.facebook.com/about/privacy.
3. Google AdWords
4. This website uses Google Adwords, a web service of Google LLC. The responsible service  provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland  (“Google”).
5. We use Google Adwords to draw attention to our offers by means of advertising material  (so-called Google Adwords) on external websites. We can determine in relation to the data  of the advertising campaigns, how successful the individual advertising measures are. With  this, we pursue the interest to show you advertising that is of interest to you, to make our  website more interesting and to achieve a fair calculation of advertising costs. These  advertising media are delivered by Google via so-called “Ad Servers”. For this purpose, we  use ad server cookies, which allow us to measure certain parameters to measure success,  such as the display of ads or clicks by users. If you reach our website via a Google ad, Google  Adwords will store a cookie on your device. The unique cookie ID, number of ad impressions  per placement (frequency), last impression (relevant for post-view conversions) and opt-out  information (marking that the user no longer wishes to be contacted) are usually stored as  analysis values for this cookie. These cookies enable Google to recognize your internet  browser. If a user visits certain pages of an AdWords client’s website and the cookie stored  on their computer has not expired, Google and the client can recognize that the user clicked  on the ad and was redirected to that page. A different cookie is assigned to each Adwords  client. Cookies cannot be tracked through the websites of Adwords clients.
6. We receive statistical evaluations from Google. By means of these evaluations we can  recognize which of the advertising measures used are particularly effective. We do not  receive any further data from the use of the advertising material, in particular we cannot  identify the users on the basis of this information. Due to the marketing tools used, your  browser automatically establishes a direct connection with the Google server. We have no  influence on the scope and further use of the data collected by Google through the use of  this tool and therefore inform you according to our state of knowledge: Through the  integration of AdWords Conversion, Google receives the information that you have called up

Document Control  

Last updated: 04/15/2021 Version: 1

the corresponding part of our website or clicked on an advertisement from us. If you are  registered with a Google service, Google can assign the visit to your account. Even if you are  not registered with Google or have not logged in, it is possible that the provider will find out  and save your IP address.

1. The legal basis for this data processing is according to Article 6 (1) (a) GDPR your consent,  which gets collected via the cookie banner. You can withdraw your consent at any time with  effect for the future by calling up the cookie settings and changing your selection there. You  can also prevent the storage of cookies by adjusting your browser software settings  accordingly; however, we would like to point out that in this case you may not be able to use  all the functions of this website to their full extent. Furthermore, you can prevent the  collection of the data generated by the cookie and related to your use of the website  (including your IP address) to Google as well as the processing of this data by Google by not  giving your consent to the setting of the cookie or by permanently contradicting the cross device remarketing/targeting by deactivating personalized advertising in your Google  account; follow this link to do so: https://www.google.com/settings/ads/onweb/.
2. Recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4,  Ireland as a processor. For this purpose, we have concluded a data processing agreement  with Google and concluded the EU standard data protection clauses. Google LLC, based in  California, USA, and, where applicable, U.S. authorities may have access to the data stored  by Google. Further privacy information on Google AdWords, Google Conversion Tracking and  the privacy policy can be found at: https://www.google.de/policies/privacy/.  
3. Google Tag Manager
4. This website uses Google Tag Manager, a tag management solution of Google LLC. The  responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow  Street, Dublin 4, Ireland (“Google”).
5. We use Google Tag Manager to manage our website tags. In order to monitor system  stability and performance, Google Tag Manager may collect some aggregated data about tag  firing. This data does not include user IP addresses or any user-specific identifiers that could  be associated with a particular individual. Other than data in standard HTTP request logs, all  of which is deleted within 14 days of being received, Google Tag Manager does not collect,  retain, or share any information about visitors to our customers’ properties, including page  URLs visited.
6. The legal basis for this data processing is according to Art. 6 (1)(a) GDPR your consent, which  you have given via the cookie banner. Processing is performed to analyze and optimize our  website. You can revoke your consent at any time with effect for the future by calling up the  cookie and changing your selection there. You can also prevent the storage of cookies by  changing the settings of your browser software. You can also prevent the collection of data

Document Control  

Last updated: 04/15/2021 Version: 1

generated by the cookie and related to your use of the website (including your IP address) to  Google and the processing of this data by Google by not giving your consent to the setting of  the cookie or by downloading and installing the browser plug-in available under the following  link: http://tools.google.com/dlpage/gaoptout?hl=de.  

1. Recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4,  Ireland as a processor. For this purpose, we have concluded a data processing agreement  with Google and concluded the EU standard data protection clauses. Google LLC, based in  California, USA, and, where applicable, U.S. authorities may have access to the data stored  by Google. Please see Google’s Privacy Policy for more information about the purpose and  scope of the data collected and processed by Google and for further information about your  privacy rights and setting options: www.google.com/policies/privacy, privacy policy:  https://support.google.com/tagmanager/answer/9323295?hl=en#:~:text=Data%20collected %20by%20Google%20Tag,associated%20with%20a%20particular%20individual.  
2. Microsoft Clarity
3. This website uses Microsoft Clarity. The responsible service provider is Microsoft  Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
4. We use Microsoft Clarity to understand how users interact with our website. Microsoft  Clarity captures the user interactions on your website such as how the page has rendered  and what interactions your user had on your website such as mouse movements, clicks,  scrolls, etc. By using Clarity’s robust analysis tools, we enhance your website for your clients  and your business.  
5. The legal basis for this data processing is according to Art. 6 (1)(a) GDPR your consent, which  you have given via the cookie banner. Processing is performed to analyze and optimize our  website. You can revoke your consent at any time with effect for the future by calling up the  cookie and changing your selection there. You can also prevent the storage of cookies by  changing the settings of your browser software. More information here  

https://docs.microsoft.com/en-us/clarity/faq.  

1. The recipient of personal data is Microsoft Corporation, One Microsoft Way, Redmond, WA  98052-6399, USA. More details and information about Microsoft’s specific privacy policy can  be found at https://privacy.microsoft.com/en-us/PrivacyStatement
2. Ometria  
3. This website uses Ometria to have a single and unified view of each customer in order to  increase sales through personalized content tailored to the respective segment. The

Document Control  

Last updated: 04/15/2021 Version: 1

responsible service provider is Ometria Ltd. 38 Park St, London, Greater London, W1K 2JF,  United Kingdom (“Ometria”).

1. The legal basis for this data processing is according to Art. 6 (1) (f) GDPR our legitimate  interest to make data-driven decisions about customer segmentation, product  

merchandising, marketing, and on-site customer experience.  

1. The recipient of the data is Ometria Ltd. 38 Park St, London, Greater London, W1K 2JF,  United Kingdom.
2. Please see Ometria’s Privacy Policy for more information about the purpose and scope of the  data collected and processed: https://ometria.com/privacy-policy.  
3. Facebook Pixel
4. This website uses Facebook Pixel. The responsible service provider is Facebook Ireland  Limited (“Facebook”) 4 Grand Canal Square, Grand Canal Harbor, Dublin, D02, Ireland.
5. When you browse this website, Facebook collects a limited amount of data relating to your  browsing, such as, but not limited to, the following: Facebook user ID, Browser information,  usage data, Non-sensitive custom data, Referrer URL, Pixel ID, user behavior, Ads viewed,  Interactions with advertising, services and products, Marketing information, Viewed content,  IP address, Device information, Success of marketing campaigns, Geographical location,  hashed email. Facebook uses the information to analyze whether customers take action after  seeing our Facebook ad, to reach to the same customers again by using a custom audience,  and to achieve customer optimization by delivering our ads to people who are more likely to  take certain actions.  
6. The legal basis for this data processing is according to Art. 6 (1) (a) GDPR your consent, which  you have given via the cookie banner. Processing is performed for marketing, retargeting,  tracking, analysis, and advertising. You can revoke your consent at any time with effect for  the future by calling up the cookie settings and changing your selection there.  
7. Recipient of the data is Facebook Ireland Limited (“Facebook”) 4 Grand Canal Square, Grand  Canal Harbor, Dublin, D02, Ireland and Facebook, Inc. as processors. Please note that this  service can transfer data outside of the European Union and the European Economic Area  and to a country that does not offer an adequate level of data protection. If the data is  transferred to the USA, there is a risk that your data may be processed by US authorities for  control and monitoring purposes without you possibly being able to redress.

Document Control  

Last updated: 04/15/2021 Version: 1

1. Please see Facebook’s Privacy Policy for more information about the purpose and scope of  the data collected and processed. https://www.facebook.com/privacy/explanation. Click  here to revoke on all of the processing company’s domains.  

https://www.facebook.com/ads/preferences/.  

20. Amazon Partnership-Program
21. We are is a participant in the Amazon Europe S.A.R.I. Partner Program and a partner of the  Advertising Program, which is designed to provide a medium for websites, that can be used  to earn reimbursement by placing advertisements and links to http://www.amazon.de advertising costs. With the program, we are interested in showing you advertisements, that  are of interest to you and that make our website more interesting for our users.  
22. For the provision of the advertisements, statistical information about you is collected, which  is processed by our advertising partners. By visiting the website, Amazon receives the  information that you have accessed the corresponding page of our website. For this purpose,  Amazon uses web beacons to determine your needs and, if necessary, to set a cookie on  your computer. The data referred to in Section 3 of this declaration will be transmitted. We  have no influence on the data collected, nor are we aware of the full extent of the data  collection and the storage period. If you are logged in to Amazon, your data can be assigned  directly to your account there. If you don’t want to be mapped to your Amazon profile, you’ll  need to log out. It is possible that your data will be shared with Amazon contractors and  government agencies. We have no influence on the data collected, nor are we aware of the  full extent of the data collection. The data is transferred to the USA and evaluated there. The  legal basis for the processing of your data is Art. 6 sec. 1 p. 1 lit. f GDPR.
23. You can prevent the installation of Amazon Partner Program cookies in a number of ways: i)  by setting your browser software accordingly, in particular, suppressing third-party cookies  will prevent you from receiving third-party advertisements; ii) by disabling amazon’s interest based ads via the link http://www.amazon.de/gp/dra/info; iii) by disabling the interest-based  ads of the providers that are part of the self-regulatory campaign “About Ads” via the link  http://www.aboutads.info/choices, whereby these settings are deleted when you delete  your cookies. We would like to point out that in this case you may not be able to use all  functions of this offer to the full extent.
24. Further information on the purpose and scope of the data collection and its processing, as  well as further information on your rights in this regard and setting options to protect your  privacy, can also be obtained from: Amazon EU S.A.R.l, Amazon Services Europe S.A.R.l. and  Amazon Media EU S.A.R.l., all three located 5, Rue Plaetis, L–2338 Luxembourg; Email: ad feedback@amazon.de. Amazon has submitted to the EU-US Privacy Shield,  

https://www.privacyshield.gov/EU-US-Framework. For more information about Amazon’s  data usage, please see the company’s privacy policy:

Document Control  

Last updated: 04/15/2021 Version: 1

http://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeI d=3312401 and http://www.amazon.de/gp/BIT/InternetBasedAds.

21. YouTube-Videos
22. For marketing purposes, we have embedded YouTube videos in our online offer, videos that  are saved on http://www.youtube.com and can be played directly from our website. These  videos are embedded using “privacy-enhanced mode”, i.e. YouTube does not set any cookies  to analyze user behavior, e.g. to personalize the video playback. Instead, video  recommendations are based on the current video. Videos played in enhanced privacy mode  do not affect which videos are recommended to a user on YouTube. The legal basis for this is  Art. 6 para. 1 letter f) GDPR. Our legitimate interest lies in improving the quality of our  Internet presence.  
23. By visiting the website, YouTube receives the information that you have called up the  corresponding subpage of our website. This results in the transmission of certain user data to  YouTube. A transmission of the data to YouTube takes place regardless of whether YouTube  provides a user account through which you are logged in or whether no user account exists.  If you are logged in at Google, your data will be assigned directly to your account. If you do  not want the assignment with your profile on YouTube, you have to log out before activating  the play button. For the purpose of functionality as well as for the analysis of usage behavior,  YouTube permanently stores cookies via your internet browser on your end device. If you do  not agree with this processing, you have the possibility to prevent the storage of cookies by  adjusting your internet browser settings. YouTube also stores your data as user profiles and  uses them for the purposes of advertising, market research and/or demand-oriented design  of its website. Such an evaluation is carried out in particular (even for users who are not  logged in) to provide advertising tailored to your needs and to inform other users of the  social network about your activities on our website. You have the right to object to the  creation of user profiles, but you must contact YouTube to exercise this right. YouTube may  process your personal data on servers in the US.
24. Further information on the purpose, scope of data collection, your rights, setting options to  protect your privacy and processing by YouTube is available under:  

https://www.google.de/intl/de/policies/privacy,  

https://policies.google.com/privacy?hl=de&gl=de,

https://www.youtube.com/static?gl=DE&template=terms&hl=de,

https://support.google.com/youtube/answer/171780?hl=de.

Document Control  

Last updated: 04/15/2021 Version: 1

‍

‍

‍

‍