Data Protection

1. Data Protection at a Glance

General Notes The following notes provide a simple overview of what happens with your personal data when you visit our website. Personal data is all data with which you can be personally identified. You can find detailed information on the theme of data protection in our data protection declaration found beneath this text. General Data Processing Information Affected data: Personal data is only collected when you provide it to us voluntarily. No personal data beyond this is collected. Any processing of your personal data extending beyond the legal permissions only takes place on the basis of your express consent. Long term saving of data: The duration of data storage is oriented to the legal obligation to preserve records and is generally ten years.

Data Collection on Our Website

Who is responsible for recording data at this website? Data processing at this website is carried out by the website operator. You can find its contact data in the legal notice of this website. How do we record your data? First, your data is recorded in that you provide it to us. This can involve data, for example, you enter in a contact form. Other data is automatically recorded by our IT systems when you visit the website. This primarily involves technical data (e.g., Internet browser, operating system, or time of day during which the page is accessed). This data is recorded automatically as soon as you enter our website. What do we use your data for? A portion of the data is collected to ensure the error-free provision of the website. Other data can be used for the analysis of your user behavior. What rights do you have with regard to your data? You have the right at any time and at no cost to receive information concerning the origin, recipients, and purpose of your saved personal data. You also have a right to demand the correction, locking, or deletion of this data. With regard to this and to other questions involving the subject of data protection, you can contact us at any time at the address provided in the legal notice. You also have a right of complaint with the responsible regulating authority. You also have the right, under certain circumstances, to demand the limitation of the processing of your personal data. You can find details on this subject in the data protection declaration under “Right to Limitation of Processing.” Analysis Tools and Tools of Third-Party Providers Your surfing behavior can be statistically analyzed during your visit to our website. This primarily takes place with cookies and with so-called analysis programs. The analysis of your surfing behavior generally takes place anonymously; the surfing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. You an find detailed information on this in the following data protection declaration. You can object to this analysis. We will inform you of the possibilities for objection in this data protection declaration. Google Analytics This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses cookies. These are text files that are saved on your computer and enable an analysis of your use of the website. The information generated by the cookie concerning your usage of this website is generally transmitted to a server of Google in the USA and saved there. The saving of Google Analytics cookies and the use of this analysis tool take place on the basis of article 6, paragraph 1, point (f), of the GDPR. The website operator has a justified interest in the analysis of user behavior in order to optimize both its web offering and its advertising. We have activated the IP anonymization function for this website. This means that your IP address is abbreviated by Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area prior to transfer to the USA. The full IP address is only transferred to a Google server in the USA and abbreviated there in exceptional cases. Google will use this information on behalf of the operator of this website to analyze your use of the website, to compile reports on website activity, and to provide further services relating to website and Internet use to the website operator. The IP address transmitted by Google Analytics from your browser is not merged together with other data of Google. You can prevent the saving of cookies with a corresponding setting of your browser software. However, we remind you that you may not be able to use all functions of this website in their full scope in this case. In addition to this, you can prevent the recording of the data generated by the cookie and relating to your usage of the website (incl. your IP address) by Google, as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de. You can prevent the recording of your data by Google Analytics by clicking on the following link: An opt-out cookie is set, which prevents the recording of your data during future visits to this website: Deactivate Google Analytics. You will find more information concerning the handling of user data by Google Analytics in the data protection declaration of Google: https://support.google.com/analytics/answer/6004245?hl=de. We have concluded an agreement with Google concerning order processing and implement the strict specifications of the German data protection authorities for the use of Google Analytics. User and event-level data stored with Google that is linked with cookies, user IDs, or advertising IDs (e.g., DoubleClick cookies, Android advertising ID) is anonymized or deleted after a period of 14 months. You can find more detailed information on this subject under the following link: https://support.google.com/analytics/answer/7667196?hl=de Google AdWords and Google Conversion Tracking This website uses Google AdWords. AdWords is an online advertising program of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”). We use conversion tracking in the context of Google AdWords. When you click on an advertisement placed by Google, a cookie is set for conversion tracking. Cookies are small text files that are filed by the Internet browser on the computer of the user. These cookies become invalid after 30 days and do not serve the purpose of personal identification of users. If the user visits certain pages of this website and the cookie has not yet expired, Google and ourselves can recognize that the user has clicked on the advertisement and has been forwarded to this page. Each Google AdWords customer receives a different cookie. The cookies cannot be traced via the websites of AdWords customers. The information gathered with the help of the conversion cookie serves the purpose of creating conversion statistics for AdWords customers that have decided in favor of conversion tracking. Customers are provided with the total number of users who have clicked on their advertisement and have been redirected to a page equipped with a conversion tracking tag. However, they receive no information with which users can be personally identified. If you do not wish to participate in tracking, you can object to this usage by easily deactivating the Google conversion tracking cookie by way of your Internet browser under user settings. You will then not be included in the conversion tracking statistics. The saving of conversion cookies and the use of this analysis tool take place on the basis of article 6, paragraph 1, point (f), of the GDPR. The website operator has a justified interest in the analysis of user behavior in order to optimize both its web offering and its advertising. You will find more information about Google AdWords and Google conversion tracking in the data protection provisions of Google under https://policies.google.com/privacy?hl=de. You can set your browser so that you are informed when cookies are set and only allow cookies in individual cases, refuse the acceptance of cookies in particular cases or in general, or activate the automatic deletion of cookies when closing the browser. Deactivating cookies can inhibit the functionality of this website.

2. General and Mandatory Information

Data Protection The operators of these pages take the protection of your personal data very seriously. We handle your personal data confidentially and in accordance with the legal data protection regulations, as well as with this data protection declaration. Various personal data is collected when you use this website. Personal data is data with which you can be personally identified. This data protection declaration explains which data we collect and what we use it for. It also explains how and to what purpose this happens. We point out that data transmission in the Internet (e.g., communication with e-mail) can involve security gaps. Gap-free protection of data against access by third parties is not possible. Note on the Responsible Entity The entity responsible for data processing at this website is: Felss Group GmbH Dieselstrasse 2 75203 Königsbach-Stein Germany Tel.: +49-7232-4020 E-mail: datenschutz@felss.com The responsible entity is the natural or legal person who makes decisions, alone or together with others, concerning the purpose and means of processing personal data (e.g., name, e-mail address, etc.). Withdrawal of Consent to the Processing of Data Many data processing procedures are only possible with your express consent. You can withdraw consent at any time. An informal notification by e-mail to us is adequate for this purpose. The legality of the data processing that has taken place up until the withdrawal of consent remains unaffected by this.

Your Right to Withdraw Your Consent to the Collection of Data in Special Cases and to

Direct Advertising (Article 21 of the GDPR) When data processing takes place on the basis of article 6, paragraph 1, points (e) or (f), of the GDPR, you have the right at any time, for reasons resulting from your particular situation, to object to the processing of your personal data; this also applies to profiling based on these provisions. The respective legal basis upon which processing is based can be derived from this data protection declaration. Should you wish to object, we will no longer process your relevant personal data unless we can provide compelling reasons worthy of protection for processing that take priority over your interests, rights, and freedoms, or when processing serves the purpose of the assertion, exercise, or defense of legal claims (objection pursuant to article 21, paragraph 1, of the GDPR). If your data is processed to pursue direct advertising, you have the right to object at any time to the processing of data involving your person for the purpose of such advertising; this also applies to profiling, to the extent it is related to direct advertising. Should you object, your personal data will no longer be used for the purpose of direct advertising (objection pursuant to article 21, paragraph 2, of the GDPR). Right of Complaint with the Responsible Regulating Authority In the event of violations of the GDPR, the affected person is entitled to register a complaint with a regulating authority, especially in the Member State of their habitual residence, of their place of work, or in which the alleged violation took place. The right of complaint exists irrespective of any other administrative law or judicial legal remedies. Right to Data Transferability You have the right to have data we process automatically on the basis of your consent or for the purposes of contractual fulfillment handed over to you or a third party in a well-established, machine-readable format. Should you demand direct transmission of the data to another responsible person, this only takes place to the extent that it is technically feasible. SSL or TLS Encoding For security reasons and for the protection of the transmission of confidential content, such as orders or inquiries you send to the operator of the site, this page uses SSL or TLS encoding. You can recognize an encoded connection in that the address line of the browser changes from “http://” to “https://” and a lock symbol appears in your browser line. When the SSL or TLS encoding has been activated, the data you transmit to us cannot be read by third parties. Security In order to protect your personal data kept with us from unauthorized access and misuse, we have taken extensive technical and operational precautions. Our security procedures are checked regularly and adapted to reflect technological progress. Our employees are obligated to maintain confidentiality. Links to Other Websites Should you access an external Internet page from our page (external link), the external provider may receive the information from your browser as to which of our Internet pages you came from. The external provider is responsible for this data. Like any other provider of Internet sites, we are not able to influence this process. Information, Locking, Deletion, and Correction In the context of the valid legal provisions, you have the right at any time and at no cost to receive information concerning your saved personal data, its origin and recipients, and the purpose of the data processing, and – possibly – a right to correction, locking, or deletion of this data. With regard to this and to other questions involving the subject of personal data, you can contact us at any time at the address provided in the legal notice. Right to Limitation of Processing You have the right to demand the limitation of the processing of your personal data. With regard to this, you can contact us at any time at the address provided in the legal notice. The right to limitation of processing exists in the following cases:

• When you dispute the accuracy of your personal data saved with us, we generally need time to check this. You have the right to demand the limitation of the processing of your personal data for the duration of the checking process.
• When the processing of your personal data took/is taking place wrongfully, you can demand the limitation of data processing instead of deletion.
• When we no longer require your personal data, but you require it to exercise, defend, or assert legal claims, you have the right to demand the limitation of processing of your personal data instead of its deletion.
• When you have submitted an objection pursuant to article 21, paragraph 1, of the GDPR, a consideration of priority between your and our interests must take place. As long as it has not been determined which interests have priority, you have the right to demand the limitation of processing of your personal data. When you have limited the processing of your personal data, this data – with the exception of saving – may only be processed with your consent or to assert, exercise, or defend legal claims, or to protect the rights of another natural or legal person, or for reasons involving a particular public interest of the European Union or of a Member State.

Objection to Advertising E-mails The usage of contact data published in the context of the legal notice obligation for the transmission of not expressly requested advertising and information material is herewith objected to. The operators of the pages expressly reserve the right to legal measures in the event of the unrequested delivery of advertising information – for example, through spam e-mails.

3. Data Collection on Our Website

Cookies In some cases, the Internet pages use cookies. Cookies cause no damage to your computer and contain no viruses. Cookies serve the purpose of making our offering more user-friendly, effective, and secure. Cookies are small text files that are filed on your computer and saved by your browser. Most of the cookies we use are so-called session cookies. They are automatically deleted when you conclude your visit. Other cookies remain saved on your end device until you delete them. These cookies make it possible for us to recognize your browser again during your next visit. You can set your browser so that you are informed when cookies are set and only allow cookies in individual cases, refuse the acceptance of cookies in particular cases or in general, or activate the automatic deletion of cookies when closing the browser. Deactivating cookies can inhibit the functionality of this website. Cookies required to carry out the electronic communication process or to provide certain functions possibly desired by you (e.g., shopping cart function) are saved on the basis of article 6, paragraph 1, point (f), of the GDPR. The website operator has a justified interest in the saving of cookies for the technically error-free and optimized provision of its services. When other cookies (e.g., cookies for the analysis of your surfing behavior) are saved, these are dealt with separately in this data protection declaration. Server Log Files The provider of the pages automatically collects and saves information in so-called server log files, which your browser automatically transmits to us. These are:

• browser type and browser version
• operating system used
• referrer URL
• host name of the accessing computer
• time of day of the server query
• IP address.

The merging together of this data with other data sources does not take place. The recording of this data takes place on the basis of article 6, paragraph 1, point (f), of the GDPR. The website operator has a justified interest in the technically error-free representation and the optimization of its website – the server log files must be recorded for this purpose. Contact Form If you send us inquiries using the contact form, we will save your entries from the inquiry form, including the contact data, for the purpose of processing the inquiry and for any subsequent questions. We will not forward this data without your consent. The processing of the data entered in the contact form thus takes place exclusively on the basis of your consent (article 6, paragraph 1, point [a], of the GDPR). You can withdraw this consent at any time. An informal notification by e-mail to us is adequate for this purpose. The legality of the data processing operations that have taken place up until the withdrawal of consent remains unaffected by this. The data you enter in the contact form remains with us until you demand that we delete it, you withdraw your consent to saving it, or the purpose for saving the data no longer applies (e.g., following the conclusion of processing your inquiry). Compelling legal provisions, especially periods of retention, remain unaffected. Inquiry per E-mail, Telephone, or Fax When you contact us by e-mail, telephone, or fax, we save and process your inquiry, including all personal data originating from this (name, inquiry) for the purpose of processing your request. We will not forward this data without your consent. This data is processed on the basis of article 6, paragraph 1, point (b), of the GDPR, insofar as your inquiry is related to the fulfillment of a contract or is necessary to carry out precontractual measures. In all other cases, processing is based on your consent (article 6, paragraph 1, point [a], of the GDPR) and/or on our justified interests (article 6, paragraph 1, point [f], of the GDPR), because we have a justified interest in the effective processing of the inquiries submitted to us. The data you send to us in contact inquiries remains with us until you demand that we delete it, you withdraw your consent to saving it, or the purpose for saving the data no longer applies (e.g., following concluded processing of your inquiry). Compelling legal provisions, especially legal periods of retention, remain unaffected.

4. Plug-ins and Tools

YouTube with Expanded Data Protection

Our website uses plug-ins of the YouTube website. The operator of the pages is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube in the expanded data protection mode. According to YouTube, this mode means that YouTube saves no information about the visitors to this website before they view the video. The forwarding of data to YouTube partners, on the other hand, is not absolutely excluded by the expanded data protection mode. YouTube thus establishes a connection with the Google DoubleClick network, irrespective of whether you watch a video or not. A connection with the YouTube servers is established as soon as you start a YouTube video on our website. In the process, the YouTube server is informed of which of our pages you have visited. When you are logged into your YouTube account, you make it possible for YouTube to directly assign your surfing behavior to your personal profile. You can prevent this by logging off from your YouTube account. YouTube can also save various cookies on your end device after the start of a video. With the help of these cookies, YouTube can receive information about visitors to our website. This information is used to, among other things, compile video statistics, improve user-friendliness, and combat attempts at fraud. The cookies remain on your end device until you delete them. Other data processing procedures may be initiated following the start of a YouTube video, upon which we have no influence. The use of YouTube takes place in the interest of an attractive representation of our online offerings. This represents a justified interest as defined by article 6, paragraph 1, point (f), of the GDPR. You can find more information on data protection at YouTube in their data protection declaration under https://policies.google.com/privacy?hl=de.