1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we will share with you how we handle your personal data when you use our website. Personal data refers to any information that can be used to personally identify you.

1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Terje Pedersen, TP Group UG, Zugspitzstr. 15, 82049 Pullach, Germany, Tel.: +49 176 34234453, Email: info@n2tnutrition.com. The controller for the processing of personal data is the individual or legal entity that alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 When you use our website for informational purposes only, i.e., if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

• Our visited website
• Date and time of access
• Amount of data sent in bytes
• Source/reference from which you accessed the site
• Used browser
• Used operating system
• Used IP address (if applicable: in anonymized form)

Processing is carried out in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or otherwise used. However, we reserve the right to check the server log files subsequently if there are concrete indications of unlawful use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.

3) Hosting & Content Delivery Network

3.1 Shopify

To host our website and display the site content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"). Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada. All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with the provider to ensure the protection of our website visitors' data and prohibit unauthorized disclosure to third parties. An adequate level of data protection is ensured for data transfers to Canada by an adequacy decision of the European Commission.

4) Cookies

4.1 To make the visit to our website attractive and enable the use of certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are deleted automatically after you close your browser (so-called "session cookies"), while others remain on your device longer and allow us to recognize your browser on your next visit (so-called "persistent cookies"). You can find the storage duration in the overview of the cookie settings in your web browser.

If personal data is processed by individual cookies we use, processing is carried out in accordance with Art. 6 (1) lit. b GDPR for the performance of the contract, in accordance with Art. 6 (1) lit. a GDPR in the case of consent given, or in accordance with Art. 6 (1) lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

You can set your browser to inform you about the setting of cookies and decide individually whether to accept them or exclude the acceptance of cookies for certain cases or generally. Please note that if cookies are not accepted, the functionality of our website may be restricted.

Read more about the cookies we collect here

5) Contacting Us

5.1 Shopify Inbox

Within our online offering, we use the Shopify Inbox, a live chat function provided by Shopify Inc., 150 Elgin Street, Suite 800, Ottawa, ON, K2P 1L4, Canada ("Shopify"). This chat function allows us to interact with visitors on our website in real-time, answering questions and providing assistance directly through the website interface.

When you use Shopify Inbox, the data you provide (e.g., chat history, name, email address, if provided) will be processed by Shopify on our behalf. The legal basis for this processing is our legitimate interest in effective customer communication in accordance with Art. 6 (1) lit. f GDPR.

For more details on how Shopify handles your data, please refer to their privacy policy: https://www.shopify.com/legal/privacy

5.2 When you contact us (e.g., via contact form or email), personal data is processed exclusively for the purpose of processing and answering your request and only to the extent required. The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6 (1) lit. f GDPR. If your contact aims at concluding a contract, the additional legal basis for processing is Art. 6 (1) lit. b GDPR. Your data will be deleted once it can be inferred from the circumstances that the matter concerned has been conclusively clarified, provided that no statutory retention requirements conflict with this.

6) Use of Customer Data for Direct Marketing

6.1 Subscription to our Email Newsletter

When you subscribe to our email newsletter, we regularly send you information about our offers. The mandatory information for sending the newsletter is solely your email address. Providing additional data is voluntary and is used to address you personally. For newsletter dispatch, we use the double opt-in procedure, ensuring that you receive newsletters only after confirming your consent to receive the newsletter by clicking on a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. We store your IP address registered by the Internet service provider (ISP) and the date and time of registration to trace any potential misuse of your email address at a later point in time. The data collected during newsletter registration is used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by notifying the responsible party mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use data beyond that which is legally permitted, as described in this statement.

6.2 Sending the Email Newsletter to Existing Customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to send you regular offers for similar goods or services from our range by email. According to § 7 para. 3 UWG (German Act Against Unfair Competition), we are not required to obtain separate consent from you for this purpose. Data processing is based solely on our legitimate interest in personalized direct marketing pursuant to Art. 6 para. 1 lit. f GDPR. If you initially objected to the use of your email address for this purpose, we will not send emails for this purpose.

You have the right to object to the use of your email address for the aforementioned advertising purpose at any time by notifying the responsible party mentioned at the beginning. You will only incur transmission costs according to the basic tariffs. Upon receipt of your objection, the use of your email address for advertising purposes will be discontinued immediately.

6.3 Klaviyo

We use the services of Klaviyo, provided by Klaviyo, Inc., 125 Summer St, Boston, MA 02110, USA (“Klaviyo”), to send our email newsletters.

When you sign up for our newsletter, the data you provide (e.g., email address, name) will be stored on Klaviyo's servers in the USA. Klaviyo uses this information to send and analyze newsletters on our behalf. The legal basis for the processing is your consent in accordance with Art. 6(1)(a) GDPR.

You can withdraw your consent to receive the newsletter at any time by using the unsubscribe link provided in each newsletter or by contacting us directly. For more information on data processing by Klaviyo, please refer to their privacy policy: https://www.klaviyo.com/privacy.

For data transfers to the USA, Klaviyo is certified under the EU-US Data Privacy Framework, which ensures an adequate level of data protection according to the decision of the European Commission.

6.4 Email Availability Notification for Products

For temporarily unavailable items, you can sign up to receive email notifications about product availability. We will send you a one-time email message about the availability of the selected item. The mandatory information for sending this notification is solely your email address. Providing additional data is voluntary and may be used to address you personally. For email dispatch, we use the double opt-in procedure, ensuring that you receive a notification only after confirming your consent to receive such notifications by clicking on a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. We store your IP address registered by the Internet service provider (ISP) and the date and time of registration to trace any potential misuse of your email address at a later point in time. The data collected during registration for our email notification service on product availability is used strictly for the intended purpose.

You can unsubscribe from availability notifications at any time by notifying the responsible party mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our distribution list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond that which is legally permitted, as described in this statement.

6.5 Cart Reminder Emails

In case you abandon your shopping with us before completing the order, you have the option to receive a one-time email reminder about the contents of your virtual shopping cart. The mandatory information for sending this reminder is solely your email address. Providing additional data is voluntary and may be used to address you personally. For email dispatch, we use the double opt-in procedure, ensuring that you receive a reminder only after confirming your consent to receive such reminders by clicking on a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR for sending a cart reminder. We store your IP address registered by the Internet service provider (ISP) and the date and time of registration to trace any potential misuse of your email address at a later point in time. The data collected during registration for our email notification service is used strictly for the intended purpose.

You can unsubscribe from cart reminders at any time by notifying the responsible party mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our distribution list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond that which is legally permitted, as described in this statement.

6.6 Advertising by Postal Mail

Based on our legitimate interest in personalized direct marketing, we reserve the right to store your first and last name, your postal address, and – if we have received this additional information as part of the contractual relationship from you – your title, academic degree, year of birth, and professional, industry, or business designation pursuant to Art. 6 para. 1 lit. f GDPR and use them to send interesting offers and information about our products by postal mail.

You have the right to object to the storage and use of your data for this purpose at any time.

7) Data Processing for Order Processing

7.1 To the extent necessary for the processing of contracts for delivery and payment purposes, the personal data collected by us pursuant to Art. 6 Para. 1 lit. b GDPR will be passed on to the commissioned transport company and the commissioned bank.

If, based on a corresponding agreement, we owe updates for goods with digital elements or for digital products, we process the contact data provided by you (name, address, email address) during the order to inform you personally within the legally prescribed period, using a suitable means of communication (e.g., postal or email) pursuant to Art. 6 Para. 1 lit. c GDPR. Your contact details will be strictly used for communications about updates owed by us and will only be processed by us to the extent necessary for the respective information.

For the processing of your order, we also work with the following service provider(s) who support us in whole or in part in the execution of closed contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.

7.2 DHL Plugin

For order processing, we use the DHL plugin provided by Deutsche Post DHL Group, available on Shopify: https://apps.shopify.com/dhl-shipping. Name, address, and possibly other personal data will be forwarded to DHL exclusively for the purpose of processing the online order pursuant to Art. 6 Para. 1 lit. b GDPR. Your data will only be passed on to the extent necessary for processing the order.

7.3 Shopify's Order Printer Pro

For invoicing, we use Shopify's Order Printer Pro app, provided by FORSBERG+two ApS, available on Shopify: https://apps.shopify.com/order-printer-pro?surface_detail=orders-and-shipping-orders-invoices-and-receipts&surface_inter_position=1&surface_intra_position=1&surface_type=category&surface_version=redesign. Name, address, and possibly other personal data will be used exclusively for the purpose of generating invoices for the online order pursuant to Art. 6 Para. 1 lit. b GDPR. Your data will only be used to the extent necessary for generating and processing the invoice.

7.4 Disclosure of personal data to shipping service providers

• DHL

As a transport service provider, we use the following provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany. Before delivery of the goods, we will forward your email address and/or telephone number pursuant to Art. 6 Para. 1 lit. a GDPR to the provider for the purpose of coordinating a delivery date or for delivery notification, if you have given your explicit consent during the ordering process. Otherwise, we will only pass on the recipient's name and delivery address to the provider for the purpose of delivery pursuant to Art. 6 Para. 1 lit. b GDPR. The disclosure will only be made to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification is not possible.

You can revoke your consent at any time with effect for the future vis-à-vis the data controller named above or vis-à-vis the provider.

7.5 Use of payment service providers

• Apple Pay

If you choose the payment method "Apple Pay" from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing will be carried out via the "Apple Pay" function of your iOS, watchOS, or macOS operated device by charging a payment card stored with "Apple Pay." Apple Pay uses security features integrated into the hardware and software of your device to protect your transactions. To authorize a payment, entering a code previously set by you and verifying it using the "Face ID" or "Touch ID" function of your device is required.

For the purpose of payment processing, your information provided during the ordering process, along with information about your order, will be passed on to Apple in encrypted form. Apple then encrypts this data again with a developer-specific key before transmitting the data to the payment service provider of the payment card stored in Apple Pay to perform the payment. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm the success of the payment.

If personal data is processed in the described transmissions, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 Para. 1 lit. b GDPR.

Apple retains anonymized transaction data, including approximate purchase amount, approximate date and time, and whether the transaction was successfully completed. Anonymization completely excludes personal reference. Apple uses anonymized data to improve "Apple Pay" and other Apple products and services.

If you use Apple Pay on iPhone or Apple Watch to complete a purchase made through Safari on Mac, the Mac and the authorization device communicate over an encrypted channel to Apple's servers. Apple does not process or store any of this information in a format that can identify you. You can disable the option to use Apple Pay on your Mac in the settings of your iPhone. Go to "Wallet & Apple Pay" and disable "Allow Payments on Mac."

For further information on data protection with Apple Pay, please visit the following website: https://support.apple.com/de-de/HT203027

• Google Pay

If you choose the payment method "Google Pay" from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, payment processing will be carried out via the "Google Pay" function of your mobile device. Google Pay uses security features integrated into the hardware and software of your device to protect your transactions. To authorize a payment, entering a code previously set by you and verifying it using the security features of your device is required.

For the purpose of payment processing, your information provided during the ordering process, along with information about your order, will be passed on to Google in encrypted form. Google then encrypts this data again before transmitting it to the payment service provider of the payment card stored in Google Pay to perform the payment. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been made, Google sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm the success of the payment.

If personal data is processed in the described transmissions, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 Para. 1 lit. b GDPR. Google retains anonymized transaction data to improve "Google Pay" and other Google products and services. For further information on data protection with Google Pay, please visit the following website: Google Pay Privacy https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=en-GB .

• PayPal

On this website, one or more online payment methods of the following provider are available: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. When selecting a payment method of the provider where you make advance payments, your payment data provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) and information about the content of your order will be forwarded to the provider in accordance with Art. 6 Para. 1 lit. b GDPR. The transfer of your data is carried out exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.

When selecting a payment method where we make advance payments, you will also be prompted during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, possibly data regarding an alternative payment method).

To maintain our legitimate interest in determining your creditworthiness in such cases, we will forward this data to the provider for the purpose of a credit check in accordance with Art. 6 Para. 1 lit. f GDPR. The provider checks based on the personal data provided by you and other data (such as shopping cart, invoice amount, order history, payment experiences) whether the payment method selected by you can be granted with regard to payment and/or default risks.

The credit check may contain probability values (so-called score values). Insofar as score values are included in the result of the credit check, they are based on a scientifically recognized mathematical-statistical procedure. In the calculation of score values, among other things, but not exclusively, address data is included.

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

• Shopify Payments

On this website, one or more online payment methods of the following provider are available: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. When selecting a payment method of the provider where you make advance payments (e.g., credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) and information about the content of your order will be forwarded to the provider in accordance with Art. 6 Para. 1 lit. b GDPR. The transfer of your data is carried out exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.

• Visa, Mastercard, and American Express

On this website, one or more online payment methods of the following providers are available: Visa Inc., 900 Metro Center Blvd, Foster City, CA 94404, USA; Mastercard International Inc., 2000 Purchase Street, Purchase, NY 10577, USA; and American Express Company, 200 Vesey Street, New York, NY 10285, USA. When selecting a payment method of these providers where you make advance payments (e.g., credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) and information about the content of your order will be forwarded to the provider in accordance with Art. 6 Para. 1 lit. b GDPR. The transfer of your data is carried out exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.

7.6 Electronic Termination Option for Continuous Obligations with Consumers

Consumers who have entered into contracts for chargeable continuous obligations (such as subscription contracts) on this website have the option to terminate them via an electronic button, in accordance with applicable notice periods.

Activation of the button leads to a confirmation page where the consumer can provide further details regarding the termination, clearly identify themselves, and subsequently declare their termination electronically.

The collection of personal data and its transmission to us is carried out in accordance with Art. 6 Para. 1 lit. b GDPR and only to the extent necessary for the proper processing of the termination. Also based on Art. 6 Para. 1 lit. b GDPR, the personal data provided is used to confirm receipt of the termination declaration and the termination date electronically in text form. Another legal basis for processing is Art. 6 Para. 1 lit. c GDPR. We are legally obligated to provide an electronic termination option for consumer contracts concluded electronically for chargeable continuous obligations.

7.7 Use of Judge.me Reviews

We use the service "Judge.me Reviews" on our Shopify website to collect and display customer reviews. Judge.me Reviews may process personal data such as name, email address, order number, and product information to ensure the authenticity and quality of the reviews. The use of this service is in accordance with Judge.me's privacy policy, which you can view here: https://judge.me/privacy

The collection of personal data and its transmission to Judge.me Reviews is carried out in accordance with Art. 6 Para. 1 lit. b GDPR and only to the extent necessary for the proper processing of the reviews. By using our website, you agree to the processing of your data by Judge.me Reviews.

8) Web Analytics Services

8.1 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which allows us to analyze your use of our website.

By default, Google Analytics 4 sets cookies on your device when you visit the website, storing certain information. This includes your IP address, which Google truncates by removing the last digits to prevent direct personal identification.

The information collected is transmitted to and processed on Google's servers, including possible transfers to Google LLC in the USA. Google uses this information on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services related to website usage and internet usage.

The IP address, transmitted and truncated by your browser within Google Analytics 4, is not associated with other data from Google. Data collected through Google Analytics 4 is stored for a period of two months and then deleted.

All the described processing activities, particularly the setting of cookies on your device, occur only if you have given us your explicit consent under Art. 6 Para. 1 lit. a GDPR.

Google Analytics 4 will not be used during your visit if you do not give your consent. You can withdraw your consent at any time for the future. To exercise your right to withdraw consent, please disable this service using the "Cookie Consent Tool" provided on the website.

We have entered into a data processing agreement with Google to ensure the protection of our website visitors' data and to prohibit unauthorized disclosure to third parties.

For further legal information on Google Analytics 4, please visit:

• Privacy Policy: https://policies.google.com/privacy?hl=en&gl=en
• Partner Sites Information: https://policies.google.com/technologies/partner-sites

Demographic Features

Google Analytics 4 uses the "demographic features" function to create statistics about the age, gender, and interests of website visitors. This is done through the analysis of advertising and information from third parties, enabling the identification of target audiences for marketing activities. The collected data cannot be attributed to any specific individual and is deleted after being stored for two months.

Google Signals

As an extension to Google Analytics 4 on this website, Google Signals may be used to create cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google can analyze your usage behavior across devices and create database models, including cross-device conversions, subject to your consent for using Google Analytics under Art. 6 Para. 1 lit. a GDPR. We do not receive any personal data from Google; only statistics are provided. To stop cross-device analysis, you can disable "Personalized Ads" in your Google account settings. Follow the instructions here: https://support.google.com/ads/answer/2662922?hl=en

For more information on Google Signals, visit:

• https://support.google.com/analytics/answer/7532985?hl=en

UserIDs

As an extension to Google Analytics 4 on this website, the "UserIDs" function may be used. If you have consented to the use of Google Analytics 4 under Art. 6 Para. 1 lit. a GDPR, created an account on this website, and logged into this account on different devices, your activities, including conversions, can be analyzed across devices.

For data transfers to the USA, the provider has adhered to the EU-US Privacy Shield framework, ensuring compliance with the European data protection level.

8.2 Google Tag Manager

This website uses "Google Tag Manager," a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Google Tag Manager provides a technical foundation for bundling various web applications, including tracking and analytics services, and allows calibration, control, and conditional triggering through a unified user interface. Google Tag Manager itself does not store any information on user devices or retrieve such information. However, upon page load, Google Tag Manager transfers your IP address to Google and potentially stores it there. Transmission to Google LLC servers in the USA is possible.

This processing occurs only if you have given us your explicit consent under Art. 6 Para. 1 lit. a GDPR. Without this consent, Google Tag Manager will not be used during your visit. You can withdraw your consent at any time for the future. To exercise your right to withdraw consent, please disable this service using the "Cookie Consent Tool" provided on the website.

We have entered into a data processing agreement with the provider to ensure the protection of our website visitors' data and to prohibit unauthorized disclosure to third parties.

For data transfers to the USA, the provider has adhered to the EU-US Privacy Shield framework, ensuring compliance with the European data protection level.

9) Retargeting/Remarketing and Conversion Tracking

9.1 Meta Pixel

Within our online offering, we use the "Meta Pixel" service from the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta").

When a user clicks on an ad we have placed on Facebook and/or Instagram, the URL of our linked page is extended with a parameter using "Meta Pixel." This URL parameter is then entered into the user's browser through a cookie set by our linked page.

This allows Meta to determine the visitors of our online offering as a target group for displaying ads (so-called "Ads"). Accordingly, we use this service to display Facebook and/or Instagram ads that we place only to users who have shown interest in our online offering or who exhibit certain characteristics (e.g., interests in specific topics or products determined by the visited websites) which we transmit to Meta (so-called "Custom Audiences").

Additionally, the "Meta Pixel" enables tracking of whether users were redirected to our website after clicking on an ad and what actions they perform there (so-called "Conversion Tracking").

The collected data is anonymous to us, meaning we cannot draw any conclusions about the identity of the users. However, Meta stores and processes the data, allowing a connection to the respective user profile and enabling Meta to use the data for its own advertising purposes.

All the above-described processing, especially the setting of cookies for reading information on the used end device, is only carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with future effect by deactivating this service in the "Cookie-Consent-Tool" provided on the website.

We have entered into a data processing agreement with the provider, ensuring the protection of our site visitors' data and preventing unauthorized disclosure to third parties.

The information generated by Meta is usually transmitted to and stored on a Meta server, which may also involve a transfer to Meta Platforms Inc. servers in the USA. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, ensuring compliance with European data protection levels based on an adequacy decision by the European Commission.

9.2 Google Ads Remarketing

This website uses retargeting technology from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

For this purpose, Google sets a cookie in your device's browser, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit. Additional data processing only occurs if you have agreed with Google that your internet and app browsing history will be linked to your Google account and that information from your Google account will be used to personalize ads you view on the web. If you are logged into Google during your visit to our website in this case, Google uses your data along with Google Analytics data to create and define target audience lists for cross-device remarketing. Your personal data will be temporarily linked by Google with Google Analytics data to form target groups. Within the use of Google Ads Remarketing, personal data may also be transmitted to Google LLC. servers in the USA.

All the above-described processing, especially the setting of cookies for reading information on the used end device, is only carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. Without this consent, the use of retargeting technology does not occur during your site visit.

You can revoke your consent at any time with future effect. To exercise your revocation, please deactivate this service using the "Cookie-Consent-Tool" provided on the website.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, ensuring compliance with European data protection levels based on an adequacy decision by the European Commission.

9.3 Microsoft Advertising

This website uses retargeting technology from the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

This allows us to specifically target visitors to our website with personalized, interest-based advertising who have already shown interest in our shop and our products. The advertising material is displayed based on a cookie-based analysis of previous and current usage behavior, although no personal data is stored. In cases of retargeting technology, a cookie is stored on your computer or mobile device to collect pseudonymized data about your interests and thus customize the advertising to the stored information. These cookies are small text files stored on your computer or mobile device. This allows you to be shown advertising that is highly likely to correspond to your product and information interests.

All the above-described processing, especially the setting of cookies for reading information on the used end device, is only carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. Without this consent, the use of retargeting technology does not occur during your site visit.

You can revoke your consent at any time with future effect. To exercise your revocation, please deactivate this service using the "Cookie-Consent-Tool" provided on the website.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, ensuring compliance with European data protection levels based on an adequacy decision by the European Commission.

9.4 Google Ads Conversion Tracking

This website uses the online advertising program "Google Ads" and, within the framework of Google Ads, the conversion tracking service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

We use the Google Ads offer to draw attention to our attractive offers on external websites with the help of advertising materials (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. We pursue the interest of showing you advertisements that are of interest to you, making our website more interesting for you, and achieving a fair calculation of advertising costs.

The conversion tracking cookie is set when a user clicks on an ad placed by Google. These cookies are small text files placed on your end device and typically expire after 30 days. They are not intended for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot thus be tracked across the websites of different Google Ads customers. The information collected using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers are informed of the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that personally identifies users.

All the above-described processing, especially the setting of cookies for reading information on the used end device, is only carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. Without this consent, the use of conversion tracking technology does not occur during your site visit.

You can revoke your consent at any time with future effect. To exercise your revocation, please deactivate this service using the "Cookie-Consent-Tool" provided on the website.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, ensuring compliance with European data protection levels based on an adequacy decision by the European Commission.

In the context of using Google Ads, personal data may also be transferred to the servers of Google LLC. in the USA.

Details about the processing initiated by Google Ads conversion tracking and Google's handling of website data can be found here: https://policies.google.com/technologies/partner-sites

All of the processing described above, especially the setting of cookies to read information on the end user's device, will only occur if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future by disabling this service using the "Cookie Consent Tool" provided on the website.

Furthermore, you can permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the browser plugin available at the following link: https://www.google.com/settings/ads/plugin?hl=en

To target users who we have obtained data from within the scope of business or business-like relationships with more relevant advertising, we use a customer match function within Google Ads. To do this, we electronically transmit one or more files containing aggregated customer data (primarily email addresses and phone numbers) to Google. In this process, Google does not gain access to clear data but automatically encrypts the information in the customer files using a special algorithm during the transmission process. Google can then only use the encrypted information to assign it to existing Google accounts that the individuals have set up. This allows for personalized advertising across all Google services linked to the respective Google account.

The transfer of customer data to Google only occurs if you have given us explicit consent in accordance with Art. 6(1)(a) GDPR. You can revoke this consent at any time with effect for the future. Further information on Google's data protection measures regarding the customer match function can be found here: https://support.google.com/google-ads/answer/6334160?hl=en&ref_topic=10550182

Google's privacy policy can be viewed here: https://www.google.de/policies/privacy/

For data transfers to the USA, the provider has joined the EU-US Privacy Shield Framework, which ensures compliance with the European level of data protection based on a European Commission adequacy decision.

9.5 Google Ads Conversion Tracking without Cookies

This website uses the online advertising program "Google Ads" and, within Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

We use Google Ads to draw attention to our attractive offers on external websites using advertising materials (so-called Google AdWords). With respect to the data of advertising campaigns, we can determine how successful the individual advertising measures are. Our goal is to show you advertising that is of interest to you, to make our website more interesting for you, and to achieve a fair calculation of the advertising costs incurred.

This website uses Google Ads Conversion Tracking exclusively without the use of cookies, meaning that the service does not set cookies on your device at any time. Instead, your browser's local storage is used to store an individual ID assigned by Google, which allows for an analysis of your use of the website. For this purpose, certain user information is processed via the ID.

The ID is set when a user clicks on an Ads advertisement placed by Google. If the user visits certain pages of this website, Google and we can recognize that the user clicked on the advertisement and was redirected to this page. Each Google Ads customer receives a different cookie. Therefore, cookies cannot be tracked across the websites of Google Ads customers. The information obtained through the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their advertisement and were redirected to a page with a conversion tracking tag.

However, you will not receive any information that personally identifies users. In the context of using Google Ads, personal data may also be transferred to the servers of Google LLC. in the USA. Details about the processing initiated by Google Ads conversion tracking and Google's handling of website data can be found here: https://policies.google.com/technologies/partner-sites

If the information collected has personal reference, the processing will be carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in the statistical evaluation of the success of our advertising campaigns.

Google's privacy policy can be viewed here: https://www.google.de/policies/privacy/

For data transfers to the USA, the provider has joined the EU-US Privacy Shield Framework, which ensures compliance with the European level of data protection based on a European Commission adequacy decision.

9.6 Google Ads Conversion Tracking

This website uses the online advertising program "Google Ads" and within Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to draw attention to our attractive offers on external websites using advertising materials (so-called Google Adwords). We can determine how successful the individual advertising measures are based on the data of the advertising campaigns. Our goal is to show you advertisements that are of interest to you, to make our website more interesting for you, and to achieve a fair calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on an ad served by Google Ads. Cookies are small text files that are stored on your device. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked through the websites of Google Ads customers. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive information that personally identifies users. As part of the use of Google Ads, personal data may also be transferred to Google LLC servers in the USA. Details on the processing initiated by Google Ads conversion tracking and Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites

All processing described above, particularly the setting of cookies to read information on the device used, only occurs if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

9.7 Microsoft Advertising Universal Event Tracking

This website uses conversion tracking technology from the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. For the implementation of Universal Event Tracking, a tag is embedded on every page of our website that interacts with the conversion cookie set by Microsoft. This interaction makes user behavior on our website traceable and sends the collected information to Microsoft. The purpose is to statistically capture and evaluate certain predefined goals such as purchases or leads in order to make the alignment and content of our offerings more relevant to the interests of users. The tags are never used for personal identification of users.

All processing described above, particularly the setting of cookies to read information on the device used, only occurs if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, the use of retargeting technology during your visit to our site will not be implemented.

You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service using the "Cookie Consent Tool" provided on the website.

For data transfers to the USA, the provider has joined the EU-US Privacy Shield, ensuring compliance with the European data protection level based on an adequacy decision by the European Commission.

9.8 TikTok Pixel and Enhanced Data Sharing

This website uses the conversion tracking and enhanced data sharing technologies of the following provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. If you have reached our website via an advertisement on the provider's domain, the success of the advertisement can be tracked using cookies and/or comparable technologies (tracking pixels, web beacons, pings, HTTP requests) in combination with advanced data-sharing methods such as the TikTok Events API and Advanced Matching.

Through these tracking technologies and enhanced data-sharing methods, specific device and browser information, including possibly your IP address, as well as additional data such as hashed customer information (e.g., email addresses), is collected to capture and evaluate predefined user actions (e.g., completed transactions, leads, searches on the website, visits to product pages). This data enables us to create detailed statistics on user behavior on our website after redirection from an advertisement, helping us to optimize our offerings and improve ad performance.

All processing described above, particularly the setting of cookies and the sharing of data through the Events API and Advanced Matching, only occurs if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

We have entered into a data processing agreement with the provider to ensure the protection of data from our website visitors and to prohibit unauthorized disclosure to third parties.

10) Site functionalities

10.1 Youtube

This website uses plugins for displaying and playing videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Data may also be transmitted to: Google LLC., USA. When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the provider's servers to load the plugin. In doing so, certain information, including your IP address, is transmitted to the provider.

If playback of embedded videos through the plugin is started, the provider also uses cookies to collect information about user behavior, create playback statistics, and prevent abusive behavior. If you are logged into a user account with the provider during your visit to our site and click on a video, your data will be directly assigned to your account. If you do not wish this assignment to your account, you must log out before activating the playback button.

All of the above processing, particularly the setting of cookies to read information on the device used, only occurs if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service via the "Cookie Consent Tool" provided on the website.

For data transfers to the USA, the provider has joined the EU-US Privacy Shield, ensuring compliance with the European data protection level based on an adequacy decision by the European Commission.

10.2 Google Web Fonts

This page uses so-called web fonts provided by the following provider for the uniform display of fonts: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. When you access a page, your browser loads the required web fonts into its browser cache to display texts and fonts correctly and establishes a direct connection to the provider's servers. In doing so, certain browser information, including your IP address, is transmitted to the provider.

Data may also be transmitted to: Google LLC, USA. Processing of personal data in connection with the connection to the provider of the fonts is only carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service via the "Cookie Consent Tool" provided on the website. If your browser does not support web fonts, a default font will be used from your computer.

For data transfers to the USA, the provider has joined the EU-US Privacy Shield, ensuring compliance with the European data protection level based on an adequacy decision by the European Commission.

10.3 Google reCAPTCHA

On this website, we use the CAPTCHA service from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Data may also be transmitted to: Google LLC, USA. For the visual design of the CAPTCHA window, the provider uses "Google Fonts," i.e., fonts loaded from the internet by Google. This does not involve processing additional information beyond what is already transferred to Google through the functionality of reCAPTCHA.

The service checks whether an input is made by a natural person or is abusive through machine and automated processing, and blocks spam, DDoS attacks, and similar automated harmful access attempts. To ensure that an action is performed by a human and not by an automated bot, the provider collects the IP address of the device used, recognition data of the browser and operating system type, as well as the date and duration of the visit, and transmits this information to the provider's servers for evaluation.

The legal basis is our legitimate interest in determining individual responsibility on the Internet and preventing abuse and spam in accordance with Art. 6 para. 1 lit. f GDPR.

We have entered into a data processing agreement with the provider to ensure the protection of data from our website visitors and to prohibit unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Privacy Shield, ensuring compliance with the European data protection level based on an adequacy decision by the European Commission.

11) Tools and Miscellaneous

11.1 Cookie Consent Tool

This website uses a so-called "Cookie Consent Tool" to obtain effective user consent for consent-required cookies and cookie-based applications. The "Cookie Consent Tool" is presented to users in the form of an interactive user interface upon visiting the site, allowing them to grant consent for specific cookies and/or cookie-based applications by checking boxes. Through the use of this tool, all consent-required cookies/services are only loaded if the respective user grants consent by checking the appropriate boxes. This ensures that such cookies are only set on the user's device if consent is given.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed in this context. However, in individual cases where personal data (such as IP addresses) is processed for the purpose of storing, associating, or logging cookie settings, this is done in accordance with Art. 6 para. 1 lit. f GDPR, based on our legitimate interest in legally compliant, user-specific, and user-friendly consent management for cookies, and thus in legally compliant design of our website.

Another legal basis for processing is Art. 6 para. 1 lit. c GDPR. As controllers, we are legally obligated to make the use of technically unnecessary cookies dependent on the respective user's consent.

Where necessary, we have entered into a data processing agreement with the provider to ensure the protection of data from our website visitors and to prohibit unauthorized disclosure to third parties.

Further information about the operator and the settings available in the Cookie Consent Tool can be found directly in the corresponding user interface on our website.

12) Rights of the Data Subject

12.1 The applicable data protection law grants you the following rights as a data subject (rights to information and intervention), with reference to the legal basis cited for each right of exercise:

• Right to information pursuant to Art. 15 GDPR;
• Right to rectification pursuant to Art. 16 GDPR;
• Right to erasure ("right to be forgotten") pursuant to Art. 17 GDPR;
• Right to restriction of processing pursuant to Art. 18 GDPR;
• Right to notification pursuant to Art. 19 GDPR;
• Right to data portability pursuant to Art. 20 GDPR;
• Right to withdraw consent granted pursuant to Art. 7 para. 3 GDPR;
• Right to lodge a complaint pursuant to Art. 77 GDPR.

12.2 Right to Object

If we process your personal data based on our overriding legitimate interest within the framework of a balancing of interests, you have the right to object at any time, for reasons arising from your particular situation, to such processing with effect for the future.

If you exercise your right to object, we will cease processing the relevant data. However, further processing may be permissible if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

If your personal data is processed by us for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing. You can exercise your objection as described above.

If you exercise your right to object, we will cease processing the relevant data for direct marketing purposes.

13) Duration of Storage of Personal Data

The duration of storage of personal data is determined by the respective legal basis, the purpose of processing, and, if applicable, additionally by the respective statutory retention period (e.g., commercial and tax retention periods).

• Personal data processed based on explicit consent pursuant to Art. 6 para. 1 lit. a GDPR will be stored until you withdraw your consent.
• If there are statutory retention periods for data processed in the context of contractual or similar legal obligations based on Art. 6 para. 1 lit. b GDPR, these data will be routinely deleted after expiration of the retention periods, provided they are no longer necessary for contract performance or initiation, and/or there is no longer a legitimate interest on our part for further storage.
• Personal data processed based on Art. 6 para. 1 lit. f GDPR will be stored until you exercise your right to object under Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.
• Personal data processed for direct marketing purposes based on Art. 6 para. 1 lit. f GDPR will be stored until you exercise your right to object under Art. 21 para. 2 GDPR.
• Unless otherwise indicated in specific processing situations in this statement, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.