1. Overview of Data Protection

General Information

The following notes provide a simple overview of what happens to your personal data when you visit our website. Personal data is any information that can be used to identify you personally. Detailed information on data protection can be found in our privacy policy provided below this text.

Data Collection on Our Website

Who is responsible for data collection on this website?

The data processing on this website is carried out by the website operator. You can find the contact details in the imprint of this website.

How do we collect your data?

Your data is collected partly by you providing it to us. This could, for example, involve data that you enter in a contact form.

Other data is collected automatically when you visit the website through our IT systems. This mainly involves technical data (e.g. internet browser, operating system, or time of access). These data are collected automatically as soon as you enter our website.

What do we use your data for?

Some of the data is collected to ensure a trouble-free provision of the website. Other data can be used to analyze your usage behavior.

What rights do you have regarding your data?

You have the right to obtain information free of charge at any time about the origin, recipients, and purpose of your stored personal data. You also have the right to request the rectification, blocking, or deletion of this data. For this purpose, and for further questions regarding data protection, you can contact us at any time at the address provided in the imprint. Furthermore, you have the right to lodge a complaint with the responsible supervisory authority.

Analysis Tools and Third-Party Tools

Your surfing behavior can be statistically evaluated when you visit our website. This is done mainly with cookies and so-called analysis programs. The analysis of your surfing behavior is usually done anonymously; the surfing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information can be found in the following privacy policy.

You can object to this analysis. We will inform you about the options to object in this privacy policy.

2. General Information and Mandatory Information

Data Protection

The operators of this site take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations as well as this privacy policy.

When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and how we use it. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the internet (e.g. when communicating by email) may have security gaps. A complete protection of the data from access by third parties is not possible.

Note on the Responsible Party

The responsible party for data processing on this website is:

VESCH DIGITAL GmbH
Virchowstraße 12-14
22767 Hamburg

Phone: 040-300 399 0
Email: hallo@vesch.de

The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g. names, email addresses, etc.).

Revocation of Your Consent to Data Processing

Many data processing operations are only possible with your explicit consent. You can withdraw your previously granted consent at any time. A simple notification by email to us is sufficient for this. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to Lodge a Complaint with the Responsible Supervisory Authority

In the event of data protection violations, the data subject has the right to lodge a complaint with the responsible supervisory authority. The responsible supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to Data Portability

You have the right to request that data, which we process automatically based on your consent or in fulfillment of a contract, be handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done if it is technically feasible.

SSL or TLS Encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser's address bar.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Right to Information, Blocking, Deletion

You have the right to obtain free information at any time about your stored personal data, their origin and recipients, as well as the purpose of the data processing and, if applicable, the right to rectification, blocking, or deletion of this data in accordance with the applicable legal provisions. For this purpose, and for further questions regarding personal data, you can contact us at any time at the address provided in the imprint.

3. Data Collection on Our Website

Cookies

The internet pages partially use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies serve to make our offering more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer and your browser saves.

Most of the cookies we use are so-called "session cookies". They are automatically deleted after your visit ends. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser during your next visit.

You can configure your browser to notify you when cookies are set and only allow cookies in individual cases, exclude the acceptance of cookies for specific cases or generally, and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.

Cookies that are necessary for the execution of the electronic communication process or for the provision of certain functions desired by you (e.g. shopping cart function) are stored based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of its services. If other cookies (e.g. cookies for analyzing your surfing behavior) are stored, this will be treated separately in this privacy policy.

Server Log Files

The provider of the pages collects and stores information automatically in so-called server log files, which your browser automatically transmits to us. This includes:

• Browser type and browser version

• Operating system used

• Referrer URL

• Hostname of the accessing computer

• Time of the server request

• IP address

A merging of this data with other data sources is not performed.

The basis for the data processing is Art. 6 para. 1 lit. f GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

4. Analysis Tools and Advertising

Google Analytics

This website uses features of the web analytics service Google Analytics. Provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called "cookies". These are text files that are stored on your computer and allow analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there.

The storage of Google Analytics cookies is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its web offering and its advertising.

IP Anonymization

We have activated the IP anonymization feature on this website. As a result, your IP address will be truncated by Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website usage and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

Browser Plugin

You can prevent the storage of cookies by adjusting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all features of this website in full. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to Data Collection

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set, which prevents the collection of your data on future visits to this website: Deactivate Google Analytics.

More information on handling user data with Google Analytics can be found in the privacy policy of Google: https://support.google.com/analytics/answer/6004245?hl=de.

Order Data Processing

We have concluded a contract with Google for order data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Facebook Pixel

Our website uses the Facebook visitor action pixel for conversion measurement, operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook").

This allows the behavior of page visitors to be tracked after they have been redirected to the provider's website by clicking on a Facebook advertisement. This enables the effectiveness of Facebook advertisements to be evaluated for statistical and market research purposes and future advertising measures to be optimized.

The data collected is anonymous for us as operators of this website; we cannot draw conclusions about the identity of the users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook data usage policy. This allows Facebook to enable the display of advertisements on Facebook pages as well as outside of Facebook. This use of data cannot be influenced by us as site operators.

In Facebook's privacy policy, you will find further information on protecting your privacy: https://www.facebook.com/about/privacy/.

You can also deactivate the remarketing feature "Custom Audiences" in the ad settings under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must be logged in to Facebook.

Perspective Software

Provision of the Online Offering

For the provision of our online offering, we use an external service provider: Perspective Software GmbH, Mailbox 659770, D-96035 Bamberg (hereinafter "Perspective"). Perspective itself stores your data exclusively on European servers. However, there is a possibility that your data may be accessible to entities in the United States, as Perspective uses subprocessors based in the USA. Since the European Commission has determined that the data protection laws of the United States do not ensure an adequate level of protection for personal data collected from individuals in the European Union, Perspective provides additional measures and guarantees for the transfer of data to the United States in accordance with the GDPR requirements to ensure an adequate level of protection. This is done, for example, by concluding standard contractual clauses between Perspective and its subprocessors.

I. Description and Scope of Data Processing

Perspective processes your data for us so that we can provide you with our online services. For this purpose, Perspective will automatically transmit your IP address to deliver the contents and functions of our online services to your browser or your end device.

The following data may be collected:

1. Information about the browser type and version used

2. The operating system of your computer

3. The internet service provider you are using

4. The IP address of your end device

5. Date and time of your access to the funnel

6. Websites from which you came to our website ("Referrer")

II. Legal Basis for Data Processing

Perspective stores the data mentioned in I. in so-called log files. This is done to ensure

• the proper establishment of a connection to the website,

• the comfortable use of our website,

• the evaluation of system security and stability, and

• other administrative purposes.

The temporary storage of the IP address by the system is also necessary to enable the delivery of the website to your computer. For this, your computer's IP address must remain stored for the duration of the session.

Our legitimate interest in data processing lies in these purposes. The legal basis for data processing is thus Art. 6 para. 1 sentence 1 lit. f GDPR.

III. Duration of Processing

The personal data processed by Perspective is deleted as soon as they are no longer necessary for the purpose of their collection:

• In the case of data collected to provide the website, this is the case when the respective session has ended.

• In the case of storing the IP address in log files, this occurs after a maximum of 7 days.

IV. Rights of the Data Subject

You have the right to obtain free information at any time about the origin, recipient, and purpose of your stored personal data. You also have the right to request the rectification, blocking, or deletion of this data. For this purpose, and for further questions regarding data protection, you can contact us at any time at the address provided in the imprint. Furthermore, you have the right to lodge a complaint with the responsible supervisory authority in case of violations of the GDPR.

Since the data processing is carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data for reasons arising from your particular situation at any time. If you lodge an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms or the processing is necessary for the establishment, exercise, or defense of legal claims (objection under Art. 21 para. 1 GDPR). Since the collection of data is necessary for the provision of the website and the storage of data in log files is essential for the operation of our website, it is likely that there will usually be no possibility for you to object.

You also have the right to request the restriction of the processing of your personal data under certain circumstances. The right to restriction of processing exists in the following cases:

• If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of processing your personal data.

• If the processing of your personal data is unlawful, you can request the restriction of data processing instead of deletion.

• If we no longer need your personal data, but you need them to exercise, defend, or assert legal claims, you have the right to request the restriction of processing your personal data instead of deletion.

• If you have lodged an objection under Art. 21 para. 1 GDPR, a balancing of your rights and our interests must be carried out. As long as it is not established whose interests outweigh, you have the right to request the restriction of processing your personal data.

• If you have restricted the processing of your personal data, these data may only be processed with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

Contact and Inquiry Management

For the provision of contact, inquiry, or application forms, we use an external service provider: Perspective Software GmbH, Mailbox 659770, D-96035 Bamberg (hereinafter "Perspective"). Perspective itself stores your data exclusively on European servers. However, there is a possibility that your data may be accessible to entities in the United States, as Perspective uses subprocessors based in the USA. Since the European Commission has determined that the data protection laws of the United States do not ensure an adequate level of protection for personal data collected from individuals in the European Union, Perspective provides additional measures and guarantees for the transfer of data to the United States in accordance with the GDPR requirements to ensure an adequate level of protection. This is exemplified by the conclusion of standard contractual clauses between Perspective and its subprocessors.

I. Description and Scope of Data Processing

When using the contact, inquiry, or application forms from Perspective, the following data is transmitted to the servers of Perspective:

• Date and time of access

• Websites from which you accessed our internet page ("Referrer")

• Context information (e.g. button clicks on the pages, selections made on the pages)

• Contents of all filled text fields (e.g. contact details, such as your name or address, or other personal data, depending on the question presented in the specific text field)

• Files you upload

II. Purpose and Legal Basis of Data Processing

The purpose of this data processing is to ensure the communication you have initiated.

The processing of your data from contact or inquiry or application forms is initially based on your consent. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR. If a contract is initiated via an inquiry form, the legal basis is also Art. 6 para. 1 sentence 1 lit. b GDPR. The legal basis for processing data in an application form can, in addition to Art. 6 para. 1 sentence 1 lit. f GDPR, also be Art. 88 GDPR in conjunction with Section 26 BDSG.

III. Duration of Processing

Your personal data will be stored as long as it is necessary for the fulfillment of the processing purpose or until you withdraw your consent. Exceptions to this principle are those data that Perspective must retain due to legal obligations. This includes, for example, commercial and tax retention obligations. These retention periods currently amount to up to ten years.

IV. Rights of the Data Subject

You have the right to obtain free information at any time about the origin, recipient, and purpose of your stored personal data. You also have the right to request the rectification, blocking, or deletion of this data. For this purpose, and for further questions regarding data protection, you can contact us at any time at the address provided in the imprint. Furthermore, you have the right to lodge a complaint with the responsible supervisory authority in case of violations of the GDPR.

You can withdraw your consent to data processing at any time by informal notification to us (e.g. by email). The legality of the processing carried out on the basis of the consent up to the revocation is not affected by the revocation.

You also have the right to request the restriction of the processing of your personal data under certain circumstances. The right to restriction of processing exists in the following cases:

• If you contest the accuracy of your personal data stored with us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of processing your personal data.

• If the processing of your personal data was or is unlawful, you can request the restriction of data processing instead of deletion.

• If we no longer need your personal data, but you need them to exercise, defend, or assert legal claims, you have the right to request the restriction of processing your personal data instead of deletion.

• If you have lodged an objection under Art. 21 para. 1 GDPR, a balancing between your and our interests must be made. As long as it is not determined whose interests outweigh, you have the right to request the restriction of processing your personal data.

If you have restricted the processing of your personal data, these data may only be processed with your consent or for the assertion, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of major public interest of the European Union or a Member State.

Hosting and Content Delivery Network (CDN) – Framer

Our website is hosted by Framer B.V., Sarphatistraat 50, 1018 GP Amsterdam, Netherlands. For hosting and delivering the content, Framer uses various technical domains, including in particular:

• framer.com
• framerstatic.com
• framerusercontent.com

When you access our website, a connection to these servers is automatically established. In this process, personal data such as IP address, browser information, access time, and the page requested are transmitted. This processing is technically necessary to reliably, securely, and performantly provide our website.

We have concluded a Data Processing Agreement (DPA) in accordance with Art. 28 GDPR with Framer. In this agreement, Framer commits to process the data exclusively according to our instructions and GDPR-compliant.

The legal basis for processing is Art. 6 para. 1 lit. f GDPR (legitimate interest in the secure provision of our website).

For more information, see Framer's privacy policy: https://www.framer.com/legal/privacy-policy/