Privacy Notice

This Privacy Notice was created on November 14, 2023.

I. Summary

We take your privacy very seriously and are committed to being transparent with how we use your information. This website (the “Website”) is controlled by Titel Media GmbH, Genthiner Strasse 32–34, 10785 Berlin, Germany (collectively “we”, “us” or “Highsnobiety”).

Please note that Highsnobiety and Messe München GmbH, Am Messesee 2, 81823 Munich (“ISPO”) are jointly responsible for certain data collecting and processing activities on this website in the meaning of Art. 26 GDPR. You can find more information about it in Subchapter “Joint Controllers” of this Notice.

Data controller and responsible body. Data Protection Officer.

Titel Media GmbH, Genthiner Strasse 32–34, 10785 Berlin, Germany

Duly represented by David Fischer, Jürgen Hopfgartner

Data Protection Officer, [email protected]

For all questions about data protection in connection with our products/services or the use ofour website, you can also contact our Data Protection Officer at any time. This person can be reached at the above postal address and at the e-mail address given above (keyword: "to the attention of the Data Protection Officer"). We expressly point out that if you use this e-mail address, the contents will not be exclusively noted by our data protection officer. If you wish to exchange confidential information, please therefore first contact us directly via this e-mail address.

Joint controllers

We are joint controllers together with ISPO within the meaning of Art. 26 GDPR for the data processing activities in the context of “Newsletter” and “Processing data for marketing purposes”. This means that Highsnobiety will share your personal data with ISPO, for example, the information required for newsletter subscription and your answers to the form, for above-mentioned purposes. ISPO can then process this data within the defined scope for joint purposes, for example, sending you marketing newsletter which includes the information about ISPO or processing your answers to the form to better understand the audiences of ISPO. Highsnobiety has therefore concluded joint controllership agreement with ISPO. This agreement regulates the mutual obligations of Titel Media and ISPO. In particular, it is stipulated which party fulfils the rights of the data subject and complies with the information obligations. In principle, the data protection information in the context of data collection is provided by Highsnobiety who is a controller for the provision of this website. ISPO should also refer to this Privacy Notice which is available under the following link: https://messe- muenchen.de/en/privacy-policy/

Highsnobiety is also responsible for answering the data subject requests as stipulated in Chapter 6 “Your data subject rights”. If necessary, we will send your request to ISPO to ensure that the necessary requirements of Art. 15-22 GDPR are met.

Purposes of data collection, data processing and data use

Titel Media collects and processes personal data for the following purposes: ● Operation of this Website, including provision of Website content; ● statistical analysis of the use of the Website, Website improvement and optimisation; ● advertising and market research on the basis of use consent; ● answering your inquiries and communication with you; ● sending newsletter to newsletter subscribers; ● conducting customer surves based on your consent; ● other purposes on the basis of your of your consent. Groups of data subjects concerned and the categories of personal data We process personal data of website visitors, newsletter subscribers and event guests insofar it is needed to fulfil the processing purposes. The following data categories are processed: ● Contact details ● Messages, conversation content ● Site data/access data ● Tracking data ● Newsletter consent data ● Answers to the website form ● Social network data ● Event invitations data.

Recipients or groups of recipients to whom data may be disclosed

We may share your data with public authorities in connection with an overriding legal regulation, contractors in connection with a partnership in accordance with Article 28 of the General Data Protection Regulation (GDPR), for example, technical service providers, external partners (for example, consultancies, marketing agencies, law companies) and internal departments of Titel Media GmbH, Zalando Group companies to fulfil the purposes of data processing (for more information please see “Purposes of data collection, data processing and data use”). As mentioned above, we also share data with ISPO for the processes where Highsnobiety and ISPO are jointly responsible in the meaning of Art. 26 GDPR.

Time limits for the deletion of data

Under statutory provisions, a variety of obligations and periods apply with regard to the data retention. We only store personal data for as long as necessary to fulfil the purposes for which we collected the data. Once these retention periods have expired, the corresponding data must be erased as a matter of routine, unless we still need the data until the expiry of the statutory limitation period for evidence purposes for claims under civil law, due to statutory retention obligations or there is another legal basis under data protection law for the continued processing of your data in the specific individual case.

For evidence purposes, we must retain contractual data for three years from the end of the calendar year in which the business relationship with you ends. Any claims become statute-barred at this point at the earliest in accordance with the standard statutory limitation period.Even after this period, we still have to store some of your data for accounting reasons. We are obliged to do so due to the obligations that may arise from the German Commercial Code, the German Fiscal Code, the German Banking Act, the German Money Laundering Act and the German Securities Trading Act. The periods specified therein for the retention of documents are two to ten years.

Transfer of data to third countries

As explained in this Privacy Notice, we use services whose providers are partly located in so-called third countries (outside the European Union or the European Economic Area) or process personal data there, i.e., in countries whose level of data protection does not correspond to that of the European Union. If this is the case and the European Commission has not issued an adequacy decision for these countries (Art. 45 GDPR), we have taken appropriate precautions to ensure an adequate level of data protection for any data transfers. These include the Standard Contractual Clauses of the European Union or binding corporate rules.

Where this is not possible, we base the data transfer on derogations under Art. 49 GDPR, in particular your explicit consent or the necessity of the transfer for the fulfillment of the contract or for the implementation of pre-contractual measures. If a transfer to a third country is planned and there is no adequacy decision or suitable guarantees, it is possible and there is a risk that authorities in the respective third country (e.g., secret services) may gain access to the transferred data in order to collect and analyse it, and that the enforceability of your data subject rights cannot be guaranteed. When obtaining your consent via the consent banner, you will also be informed of this.

Legal basis for the collection and processing of personal data

We may process your personal data on the basis of your consent pursuant to Article 6 (1)(a) GDPR, for example, for Newsletter subscription (see Subchapter “Newsletter”). Furthermore, we may process your personal data which is necessary for the conclusion or performance of a contract entered in your interest pursuant Article 6 (1)(b) GDPR. This legal basis also applies to the implementation of pre-contractual measures.

We may also process your personal data which is required to fulfil our legal obligations pursuant to Article 6 (1)(c) GDPR.

Legal basis for the processing of personal data which is necessary in order to realise our or third party’s legitimate interest, except where such considerations are overridden by the need to protect your interests or fundamental rights, is Article 6 (1)(f) GDPR.

II. Personal data we collect

We collect information for example to answer customers’ requests and to provide better services to our users and customers as well as to improve our business. The list of purposes of data collection and data processing are provided in Chapter “Purpose of data collection, data processing and data use”. We collect information in following ways: Accessing our website / connection data

When you access our Website or view content provided by us, we may automatically collect and store certain information in server logs. This information may include: ● Details of how you used our service, such as your navigation paths and search queries. ● Mobile related information if you access our Website using your mobile device. ● Internet protocol address. ● Device event information such as crashes, system activity, hardware settings, browser type, browser language, the date and time of your request and referral URL. ● Browser type, operating system, and other technical information.

Data processing of Website access data is necessary in order to enable the visit of the Website or App, to guarantee the permanent operability and security of our systems as well as for the general administrative maintenance of our Website. The access data is also temporarily stored in internal log files for the purposes described above, temporarily and limited to the most necessary content, for example in order to find the cause of repeated or criminal calls that endanger the stability and security of our Website and to take action against them. The legal basis is Art. 6 (1)(b) GDPR, insofar as the page call is made in the course of initiating or executing a contract, and otherwise Art. 6 (1)(f) GDPR on the basis of our legitimate interest in enabling the Website call and the permanent functionality and security of our systems. Some of our website content, including visual and interactive elements, are also built and deployed via our service provider Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. With Vercel, we concluded a data processing agreement and standard contractual clauses.

Contact enquiries via the Website or social networks

When you contact us, either by email, live chat or by using our contact forms, we collect the data you have submitted with your request (including name, email, message content, IP address) and may keep a record of your communication to help solve any issues you might be facing. Legal basis for such data processing is Article 6 (1)(b) GDPR, if the request is related to the conclusion or execution of a contract, and otherwise Article 6 (1)(f) GDPR. Unless statutory provisions govern otherwise, the data will be deleted if the purpose of processing ceases to apply, e.g. if we have fulfilled your request. We work with social networks including Facebook, X, Snapchat, Instagram, and YouTube to communicate with our customers. We have access to information you directly provide and information through those social networking services based on your privacy settings on those networks when you visit or contact us on our social pages. Please see Chapter V below for further details. Such information serves to enhance the usability of our services. Legal basis for such data processing is Article 6(1)(f) GDPR. Unless statutory provisions provide otherwise, the data will be deleted if the purpose ceases to apply.

Information we get from your use of our services

We may collect usage information when you visit different parts of our Website. We may also automatically collect certain technical information such as device-specific information (such as your hardware model, operating system version, device type, unique device identifiers, and mobile information if you use a mobile device to access the Website). If this information is necessary to provide our services, the legal basis is Article 6 (1)(b) and (f) GDPR. In other cases, we ask you for your consent and process your information on the basis of Article 6 (1)(a) GDPR. Please see section I. below for details.

Newsletter

You have the opportunity to receive a newsletter containing targeted information via our web service or new products. In this case we must collect and save your email address, which we will only use to send the newsletter. Please note that Highsnobiety and ISPO are joint controllers in the meaning of Art. 26 GDPR for this processing activity. This means that both Highsnobiety and ISPO process your personal data for the purposes of newsletter subscription, including preparation of newsletter content, as well as analyse your interactions with newsletter. For more information about joint controllership please see Chapter “Summary”.

If you have expressly consented to receiving our newsletter, the legal basis for such processing of personal data is Article 6 (1)(a) GDPR. In case we are entitled to send a newsletter based on your previous purchase of goods or services, legal basis for such processing of personal data is § 7 (3) of the German Act Against Unfair Competition (UWG). In this case, the legal basis for the processing of personal data for the advertising purposes is our legitimate interest (Article 6(1)(f) GDPR) in advertising similar products or services.

We use standard market technologies in our newsletters, with which the interactions with the newsletters can be measured (e.g., opening of the newsletter, links clicked on). We use this data in pseudonymous form for general statistical analysis and to optimise and further develop our content and customer communication. This is done with the help of small graphics embedded in the newsletter (so-called pixels). The data is only collected pseudonymously and is not linked to your other personal data. The legal basis for this is your consent in accordance with Art. 6 (1)(a) GDPR. We want to share content that is as relevant as possible for our customers via our newsletter and better understand what readers are actually interested in. If you do not want the analysis of usage behaviour, you can unsubscribe from the newsletters or deactivate graphics in your email programme by default.

We use the tool Formspree provided by Formspree, Inc. to collect the information (name, email, company, how did you hear about 520M, Role) in forms in order to subscribe you for our newsletter. The collected data in Formspree’s forms are transferred to our tool Mailchimp provided by Rocket Science Group LLC, a company of Intuit Inc. 2700 CoastAvenue,Mountain View, CA 94043, USA to send our newsletter and whitepaper to subscribed users, and to perform the above-mentioned newsletter tracking. We entered into a data processing agreement and standard contractual clauses with Intuit Inc., a company certified under the Data Privacy Framework, so that the transfer to the USA is based on a adequacy decision.

You can unsubscribe from the newsletter at any time. At the end of the newsletter you will find a link intended for this purpose and provides a simple way to cancel the newsletter or, alternatively, you can reach out to us via [email protected]. In this case your data will be deleted.

Unless statutory provisions provide otherwise, the data will be deleted if the purpose ceases to apply, e.g. if you unsubscribe from the newsletter.

Guest Management Platform

We may collect information about you when you use our guest management platform. Those data can include your name, event date and time, contact data, and other submitted data. With this platform, we can invite guests to our events and inform them about important event’s news. Legal basis for such data processing is Article 6 (1)(b) GDPR, the necessity to perform the event contract.

We use the tool Launchmetrics provided by Fashion GPS Inc., dba Launchmetrics, 110 E 25th Street, Suite 416, New York NY 10010, USA, to manage the event invitation process. We concluded a data processing agreement with Fashion GPS, Inc.

Processing data for marketing research purposes

We can process further information, for example your questions from the website form, for marketing research purposes upon your consent. This concerns the information about your company, your role and how you discovered us. We use the results of these surveys to improve our service.

Please note that Highsnobiety and ISPO are joint controllers in the meaning of Art. 26 GDPR for this processing activity. This means that both Highsnobiety and ISPO process your personal data collected though the website forms, such as information about your company, your role and how you discovered us, for the marketing research purposes. For more information about joint controllership please see Chapter “Summary”.

The legal basis for data processing when answering our information on the website form is your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent with effect for the future without incurring any costs other than the transmission costs according to the basic rates. You can reach out to us via [email protected].

III. Your Tracking Consent Management

When visiting our Website, we will ask you for your consent to use certain cookies and similar tracking technologies.

You can at any time revoke your consent for either all cookies and similar tracking technologies or for individual ones by clicking the button below. If you have any questions or concerns on this process, please send an email to [email protected].

Edit Consent https://www.highsnobiety.com/en-de/pages/privacy/

Cookies and similar tracking technologies (“Tools”)

A cookie is a small text file that is stored on your device by the browser. Cookies are not used to run programs or download viruses onto your computer. Similar tracking technologies are in particular web storage (local / session storage), fingerprints, tags or pixels. Most browsers are set by default to accept cookies and similar technologies. However, you can usually adjust your browser settings so that cookies or comparable technologies are rejected or only stored with your prior consent. If you reject cookies or comparable technologies, it is possible that not all of our offers will function properly for you.

Some cookies are automatically deleted when you end your browser session ("session cookies"). Some cookies will remain stored on your device (“persistent cookies”), for example, to recognize you as a returning user, to gather information about the use of our services and our audience or to display information or advertising tailored to your interests on our Website or on other websites. These cookies will be deleted automatically after a certain period of time.

IV. Tools we use on our Website

Detailed information about the cookies and other similar tracking technologies used on our Website, including information on the data processed, recipients, retention period and location of processing, can be found under Edit Consent https://www.highsnobiety.com/en-de/pages/privacy/ , where you can also manage your consent.

In addition, users can control the use of cookies and other similar technologies at the individual browser level by changing your browser settings (mostly found under “Options” or “Settings” in the browser menu). You have the choice of accepting all cookies, being informed about each cookie or refusing all. If you choose not to accept cookies and similar technologies on our Website, it is possible that the functionality of our Website may be limited and some services may not be usable.

We use the following types of Tools:

Essential Tools

These Tools are absolutely necessary for the functionality of our Website and the provision of our services. Legal basis for their use is Article 6(1)(b) GDPR, if Tools are used to enable the ordering process, or Article 6(1)(f) GDPR, for example, if Tools are used for fraud prevention. Access to and storage of information in the device is in these cases strictly necessary and takes place on the basis of the implementation laws of the EU member states of the Art. 5 (3) of the ePrivacy Directive, as example in Germany according to § 25 (2) No. 2 TTDSG.

Currently the following necessary local storage are deployed on the website:

"pusherTransportTLS" "vid-https://st-microsite-520m-ispo-git-develop-highsnobiety.vercel.app" "vercel-toolbar-experiment-uuid-https://st-microsite-520m-ispo-git-develop- highsnobiety.vercel.app" Currently the following necessary local storage are deployed on the website: “vercel-experiment-uuid"

Marketing Tools

Marketing Tools are used by our advertising partners to serve advertisements based on your interests and usage behaviour. We will only use such Tools with your prior consent. Legal basis for such data processing is Article 6(1)(a) GDPR. Access to and storage of information in the device is then done on the basis of the implementation laws of the EU member states of Art. 5 (3) of the ePrivacy Directive, as example in Germany the § 25 (1) TTDSG.

Google Analytics

Our website uses the service Google Analytics 4 ("Google Analytics"), which is offered for persons from Europe, the Middle East and Africa (EMEA) by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and for all other persons by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (together "Google").

Google Analytics uses JavaScript and pixels to read information on your end device and cookies to store information on your end device. This serves to analyze your usage behavior and improve our website. We will process the information obtained to evaluate your use of the website and to compile reports on website activity for the website operator. The data collected in this context may be transmitted by Google to a server in the USA for analysis and stored there.

As part of the evaluation, Google Analytics also uses AI such as machine learning to automatically analyze and enrich the data. This is done in particular for forecast metrics on the future behavior of visitors based on structured event data, such as predicted sales, purchase probability and churn probability. The forecast metrics can also be used for forecast target groups. You can find out more about this at: https://support.google.com/analytics/answer/9846734

In addition, Google Analytics models conversions if there is not enough data available to optimize the analysis and reports. Information on this can be found at: https://support.google.com/analytics/answer/10710245.

Data analysis is automated with the help of AI or on the basis of specific, individually defined criteria. You can find out more at: https://support.google.com/analytics/answer/9443595

We have made the following data protection settings for Google Analytics:

  • IP anonymization (shortening of the IP address before evaluation);

  • Automatic deletion of old visit logs by limiting the storage period to 2 months;

  • No resetting of the retention period for new activity;

  • Deactivation of the collection of precise location and position data;

  • Deactivation of the collection of precise device data;

  • Disabled advertising function (including target group remarketing by GA Audience);

  • Deactivated remarketing;

  • Disabled cross-device and cross-page tracking (Google Signals);

  • Disabled data sharing with other Google products and services, benchmarking, technical support, account manager. The following data is processed by Google Analytics:

  • IP address;

  • User ID, Google ID (Google Signals) and/or device ID;

  • Referrer URL (previously visited page);

  • Pages accessed (date, time, URL, title, duration of visit);

  • Events (e.g. scrolling activity, downloaded files, clicked links to other websites, interaction with videos and forms, search queries);

  • if applicable, achievement of certain goals (conversions);

  • Technical information: Operating system; browser type, version and language; device type, make, model and resolution;

  • Approximate location (country and, if applicable, city, based on anonymized IP address). Google Analytics sets the following cookies for the specified purpose with the respective storage duration

  • "_ga" (2 years), "_gid" (24 hours): Recognition and differentiation of visitors by a user ID;

  • "ga{GA-ID}" (2 years): Retention of the information of the current session;

  • "gac_gb{GA-ID}" (90 days): Storage of campaign-related information and link to Google Ads Conversion Tracking, if applicable;

  • "IDE" (390 days), if applicable: Recognition and differentiation of visitors through a user ID, recording of interaction with advertising, playout of personalized advertising. You can find more information about Google Analytics cookies at: https://support.google.com/analytics/answer/11397207?hl=de

The legal basis for this data processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR. Access to and storage of information in the end device then takes place on the basis of the implementation laws of the ePrivacy Directive of the EU member states, in Germany according to § 25 para. 1 TTDSG.

We have concluded an data processing agreement with Google Ireland Limited. Your personal data may also be transferred by Google Ireland Limited to Google LLC in the USA. Google LLC has joined the EU-US Data Privacy Framework, which is why the transfer in this case is based on the adequacy decision for the USA in accordance with Art. 45 GDPR. In addition, Google Ireland Limited and Google LLC have concluded standard contractual clauses (Implementing Decision (EU) 2021/914, Module 3) in accordance with Art. 46 para. 2 lit. c GDPR. Further information can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245

LinkedIn Insight Tag

Our website uses the LinkedIn Insight Tag service, which is provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland for users from the European Economic Area and Switzerland and by LinkedIn Corporation, 2029 Stierlin Ct. Ste. 200 Mountain View, California 94043, USA (together "LinkedIn") for all other users. This enables us to collect and analyze statistical data about your visit and use of our website.

This enables us to show you interest-based and relevant offers, recommendations and advertising on LinkedIn (retargeting). The effectiveness of advertisements is also analyzed in this context (conversion tracking). LinkedIn uses cookies, pixel and JavaScript for this purpose.

The following cookies are set and read by LinkedIn:

  • "long" (session): Saves the language setting;
  • "lidc" (24 hours): Optimization of data center selection;
  • "lissc" (1 year): Cookie that allows all cookies in the same browser to use the same SameSite attribute;
  • "bcookie" (365 days): Prevents improper use;
  • "UserMathHistory" (30 days): Usage analysis, synchronization of IDs with LinkedIn Ads;
  • "li_gc" (180 days): Storage of the user's consent;
  • "AnalyticsSyncHistory" (30 days): Storage for synchronization of information on LinkedIn members. Further information on cookies can be found at: https://www.linkedin.com/legal/l/cookie-table.

The legal basis for this data processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR. The access to and storage of information in the terminal device is then based on the implementation laws of the ePrivacy Directive of the EU member states, in Germany according to Section 25 para. 1 TTDSG.

If you are logged in to LinkedIn while you visit our website, LinkedIn may link the information collected to your member account and use it to target advertising on LinkedIn. You can view your privacy settings on LinkedIn at the following link: https://www.linkedin.com/psettings/enhanced-advertising.

We have concluded a data processing agreement with LinkedIn. Your personal data may also be transferred by LinkedIn Ireland Unlimited Company to LinkedIn Corporation in the USA. For this purpose, we have concluded standard contractual clauses (Implementing Decision (EU) 2021/914, Module 2) with LinkedIn Corporation in accordance with Art. 46 para. 2 lit. c GDPR.

For further information, please refer to LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy.

V. Social media profiles

Our Website includes links to social networks. Apart from this, we maintain profiles in social media. Please note that Titel Media is not liable for the privacy policies of these companies. We recommend you read the privacy policies of social media networks for further information.

Facebook and Instagram Social Media Profile (“Fanpages”)

When you visit our Facebook or Instagram Fanpage, Facebook collects personal data, even if you are not a member of Facebook. Please note that we have no control over the type and scope of such data processing. The users' data is usually processed by Facebook for market research and advertising purposes. In this way, behavior profiles can be created based on the interests of the users. For this purpose, cookies and other identifiers are stored on the users' computers.

Facebook provides us with aggregated, anonymous demographic data only that helps us to better understand our audience (so-called “Page Insights”).

The legal basis for data processing is Article 6 (1)(f) GDPR, based on our legitimate interest in providing effective information to users and communicating with users, or Art.6 (1)(b)GDPR, in order to stay in contact with and inform our customers and to carry out pre- contractual measures with future customers and interested parties.

Highsnobiety and Facebook share responsibility for processing your data for providing Page Insights. For this purpose, we and Facebook have defined an agreement about which company fulfils the data protection obligations under the GDPR with regard to Page Insights data processing. You can view the agreement with Facebook here: https://www.facebook.com/legal/terms/page_controller_addendum

For the information on the legal basis of the data processing carried out by Facebook under its own responsibility the purpose and scope of data collection and procession by Facebook, as well as your rights against Facebook including the right to object to data processing in this respect and settings options for protecting your privacy please visit: Facebook Insights.

You may find more detailed information about your right to object data processing (Opt-Out) under the following pages: https://www.facebook.com/settings?tab=ad and https://www.youronlinechoices.com/

We would like to point out that data protection requests can be made most efficiently with Facebook, as Facebook have access to the data and can take appropriate measures directly.

For more information about the data processing by Facebook please refer to Facebook Privacy Policy. https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&amp%3Bentry=0

X social media profile

We maintain a social media profile in X (by X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA (“X”)) in order to communicate with our customers and interested parties and to inform them about our products and services. The users' data is usually processed by Twitter for market research and advertising purposes. In this way, behavior profiles can be created based on the interests of the users. For this purpose, cookies and other identifiers are stored on the users' computers.

As part of the operation of our X social media page, it is possible that we may access information such as statistics on the use of our online presences provided by the social networks. These statistics are aggregated and may include, in particular, demographic information and data on interaction with our online presences and the posts and content distributed via them.

The legal basis for data processing by Twitter social media profile is Article 6 (1)(f) GDPR, based on our legitimate interest in providing effective information to users and communicating with users, or Art. 6 (1)(b) GDPR, in order to stay in contact with and inform our customers and to carry out pre-contractual measures with future customers and interested parties.

For further information regarding the purpose and scope of data collection, and regarding the further processing and use of your data by X, see X Privacy Policy There you will find, amongst other things, information regarding settings for the protection of your privacy and regarding your further rights regarding the collecting, processing and use of your data by X.

Snapchat social media profile

We also maintain a social media profile in Snapchat (Snapchat, Inc., Attn: copyright Agent, 63 Market Street, Venice, CA 90291, USA (“Snapchat”)) in order to communicate with our customers and interested parties and to inform them about our products and services by using our video channel. The users' data is usually processed by Snapchat for market research and advertising purposes. In this way, behavior profiles can be created based on the interests of the users. For this purpose, cookies and other identifiers are stored on the users' computers.

As part of the operation of our Snapchat social media page, it is possible that we may access information such as statistics on the use of our online presences provided by the social networks. These statistics are aggregated and may include, in particular, demographic information and data on interaction with our online presences and the posts and content distributed via them.

The legal basis for data processing by Snapchat social media profile is Article 6 (1)(f) GDPR, based on our legitimate interest in providing effective information to users and communicating with users, or Art. 6(1)(b) GDPR, in order to stay in contact with and inform our customers and to carry out pre-contractual measures with future customers and interested parties. For further information regarding the purpose and scope of data collection, and regarding the further processing and use of your data by Snapchat, see Snapchat’s own privacy rules. There you will find, amongst other things, information regarding settings for the protection of your privacy and regarding your further rights regarding the collecting, processing and use of your data by Snapchat.

YouTube social media profile

Our Website has links to our YouTube social media profile. The sole responsibility for YouTube and its website lies with Google Ireland Limited, Gordon House, Barrow Street Dublin 4., Ireland (for EU, EEA and Switzerland) and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). We maintain a social media profile in YouTube in order to communicate with our customers and interested parties and to inform them about our products and services by using our video channel. The users' data is usually processed by Google for market research and advertising purposes. In this way, behaviour profiles can be created based on the interests of the users. For this purpose, cookies and other identifiers are stored on the users' computers. As part of the operation of our YouTube social media page, it is possible that we may access information such as statistics on the use of our online presences provided by the social networks. These statistics are aggregated and may include, in particular, demographic information and data on interaction with our online presences and the posts and content distributed via them.

The legal basis for data processing by YouTube social media profile is Article 6 (1)(f) GDPR, based on our legitimate interest in providing effective information to users and communicating with users, or Art. 6(1)(b) GDPR, in order to stay in contact with and inform our customers and to carry out pre-contractual measures with future customers and interested parties.

For further information regarding the purpose and scope of data collection, and regarding the further processing and use of your data by Google, see Google Privacy Policy. There you will find, amongst other things, information regarding settings for the protection of your privacy and regarding your further rights regarding the collecting, processing and use of your data by YouTube.

VI. Your data subject rights

To exercise following rights, please contact us as set forth in Chapter “Summary” above.

You are entitled to the data subject rights stipulated in Art. 15 - 21, Art. 77 GDPR at any time:

● Right to withdraw your consent; ● Right to object to the processing of your personal data (Art. 21 GDPR); ● Right to information about your personal data processed by us (Art. 15 GDPR); ● Right to rectification of your personal data stored by us which is incorrect (Art. 16 GDPR); ● Right to erasure of your personal data ("right to be forgotten") (Art. 17 GDPR); ● Right to restrict the processing of your personal data (Art. 18 GDPR); ● Right to data portability of your personal data (Art. 20 GDPR); ● Right to not be subject to automated decision-making (Art. 22 GDPR); ● Right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

To exercise your rights described here, you can contact us at any time using the contact details above (see Chapter "Summary”). This also applies if you would like to receive copies of guarantees to prove an adequate level of data protection under Art. 46 GDPR in case of third country data transfer. Provided that the respective legal requirements are met, we will comply with your data protection request.

Your enquiries regarding the exercise of data protection rights and our responses to them are stored for documentation purposes for a period of up to three years and, in individual cases, for the assertion, exercise or defense of legal claims even longer. The legal basis is Art. 6(1)(f) GDPR, based on our interest in defending against any civil claims under Art. 82 GDPR, avoiding fines under Art. 83 GDPR and fulfilling our accountability obligation under Art. 5(2) GDPR.

You have the right to revoke your consent at any time. This means that we will no longer process the data based on this consent in the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

Insofar as we process your data on the basis of legitimate interests, you have the right to object to the processing of your data at any time on grounds relating to your particular situation. If it concerns an objection to data processing for direct marketing purposes, you have a general right of objection, which will also be implemented by us without giving reasons.

If you wish to make use of your right of revocation or objection, it is sufficient to send an informal message to the contact details above.

Finally, you have the right to complain to a data protection supervisory authority. You can exercise this right, for example, with a supervisory authority in the member state of your residence, your place of work or the place of the alleged infringement. In Berlin, where we are based, the competent supervisory authority is: Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59-61, 10555 Berlin.

VII. Changes

We may update our Privacy Notice from time to time. Thus, we advise you to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Notice on this page. These changes are effective immediately after they are posted on this page.

We use tracking tools that store or access information on your device and process your personal data based on your consent. This helps us to recognize you as a visitor, to analyse your use of our website as well as to create usage profiles about your interests, to recognize you on other websites and to retarget you with advertisement campaigns. Second Layer “Cookie Categories” Your data will be shared with our service providers, including those outside of the European Economic Area, which we list in more detail in the Cookies Policy. Your consent also includes the transfer of your data to the US. Hence, there is a risk that local authorities may access and evaluate your data and that your data subject rights may not be enforceable. By clicking "Accept", you consent to the use of the optional tools. You can withdraw it anytime for the future.”