1. General information on data processing

1.1 Scope of the processing of personal data

Thank you for your interest in our company. Data protection has a particularly high priority for Collomix GmbH. The following information provides a simple overview of what happens to your personal data when you visit our website or use the services of our company.

"Personal data" means any information relating to an identified or identifiable natural person ("data subject"), such as a data subject's name, address, email address, telephone number or user behavior.

The processing of personal data is always in accordance with the provisions of the General Data Protection Regulation (GDPR) and in compliance with the country-specific data protection regulations that are applicable to us. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject.

Your data is collected on the one hand when you provide it to us. This could be, for example, data that you enter in a contact form. Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data (e.g., internet browser, operating system or time of page view). The collection of this data takes place automatically as soon as you access our website.

1.2 Purpose of the processing

Certain data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior. If we use contracted service providers for individual features of our website or wish to use your data for advertising purposes, we will inform you in detail about the respective processes below. In doing so, we will also state the defined criteria for the data storage period

1.3 Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject to process their personal data, Art. 6 (1) lit. a GDPR serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

Insofar as the processing of personal data is necessary for the fulfillment of a legal obligation to which our company is subject, Art. 6 (1) lit. c GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person make it necessary to process personal data, Art. 6 (1) (d) GDPR serves as the legal basis. If the processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Art. 6 (1) f GDPR serves as the legal basis for the processing.

1.4 Your rights

You have the following rights with respect to us regarding the personal data concerning you:

• Right to information about your stored personal data, its origin and recipient and the purpose of data processing
• Right to correction or deletion
• Right to restriction of processing
• Right to object to processing
• Right to data portability: You have the right to have data that we process automatically on the basis of your consent or in the performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request a direct transfer of your data to another data controller, this transfer will only take place insofar as it is technically feasible.
• Without prejudice to any other administrative or judicial remedy, you have the right under Article 77 GDPR to appeal to a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR. The supervisory authority to which the appeal has been submitted shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 GDPR

If you have any further questions on the subject of data protection and personal data, you can contact us at any time at datenschutz@collomix.de .

1.5. Supervisory authority

Information on the data protection authority responsible for you can be found at: www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html You can reach the responsible lead supervisory authority at:

Bavarian State Office for Data Protection Supervision (BayLDA) Promenade 27 91522 Ansbach Phone: +49 (0) 98153 1300 email: poststelle@lda.bayern.de

1.6. Name and address of the data controller

The data controller in accordance with Art. 4 para.7 GDPR is: Collomix GmbH, Daimlerstrasse 9, 85080 Gaimersheim, Germany, Phone: +49 (0) 8458 32 98-0 email: info@collomix.de CEO: Alexander Essing (see our Legal Notice).

1.7. Contact details of the data protection officer

You can reach our data protection officer by post at: Fa. Intersoft consulting services AG, Beim Strohhause 17, 20097 Hamburg, Germany, or by email at datenschutz@collomix.de Website: www.www.intersoft-consulting.de

1.8 Data deletion and storage periods

The personal data concerning the data subject shall be deleted or blocked as soon as the purpose of the storage no longer applies. Storage may also take place if this is required under the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Blocking or deletion of data also takes place when a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

1.9. Objecting to or withdrawing your consent to the processing of your data

If you have given your consent to the processing of your data, you can revoke this consent at any time by sending an email to us at info@collomix.de. This revocation of your consent will mean we are no longer permitted to process your personal data after you have communicated it to us.

Insofar as we base the processing of your personal data on the balance of interests, you can object to the processing. This is the case if the processing is not necessary, in particular, for the performance of a contract with you, which is shown by us in each case in the following description of the respective functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have hitherto done. In the event of your justified objection, we will review the situation and either discontinue or adjust the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.

Of course, you can object to the processing of your personal data for purposes of advertising and data analysis at any time. You can inform us of your objection to our advertising using the following contact data: info@collomix.de

2. Collection of personal data when you visit our website

2.1 Description and scope of data processing

Each time you access our website, our system automatically collects and stores data and information in so-called server log files from the computer system of the accessing end device, which are technically necessary for us to display our website and to ensure its stability and security. The following data is collected:

• Browser type and version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

This data is not merged with other data sources.

2.2 Legal basis for and purpose of the data processing

The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. f GDPR.

2.3 Purpose of the data processing

Data is stored in log files to ensure the functionality of the website. We also use the data to optimise the website and to ensure the security of our information technology systems. There is no evaluation of the data for marketing purposes in this context.

These purposes also constitute our legitimate interest in processing the data in accordance with Art. 6 para. 1 lit. f GDPR.

2.4 Storage duration

For the data stored as log files, this is the case after seven days at the latest. Storage for longer periods is possible. In this case, the IP addresses of the users are deleted or altered, so that they can no longer be assigned to the accessing client.

2.5 Objection and possible remedies

The collection of data for the provision of the website and the storage of the data in log files is mandatory for proper operation of the website. Consequently, there is no possibility of objection on the part of the user.

3. Use of cookies

3.1 Description and scope of data processing

In addition to the previously mentioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using, and via which certain information is sent to the cookie's originator (in this case, us). Cookies cannot execute programs or transfer viruses to your computer. They serve to make the website as a whole more user-friendly and effective.

Use of cookies: a) This website uses the following types of cookies, the scope and functionality of which are explained below:

• Transient cookies (for see b)
• Persistent cookies (see c)

b) Transient cookies are automatically deleted when you close the browser. These include in particular the session cookies, which store a so-called session ID via which various requests from your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.

c) Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie. You can delete the cookies via your browser's security settings at any time.

d) You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all features of this website if you do so.

3.2 Storage duration, optional objection and removal

Cookies are stored on the user's computer and transmitted from it to our web server. Therefore, as a user you also have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. They can also be deleted automatically. If cookies are disabled for our website, it may no longer be possible to use all features of the website in full.

4. Service providers, customers and suppliers or business partners

We therefore process the personal data of our service providers, customers, suppliers or our business partners, which we have received in the course of contacting you or which you make available to us in the course of the resulting business relationship, exclusively on the basis of the statutory provisions.

4.1. Purpose of the data processing

Personal data is collected for the following purposes:

• to be able to identify you as our business contact
• to be able to advise you appropriately
• to correspond with you
• to fulfill our contractual obligations

4.2 Categories of personal data

When you contact us or enter into a business relationship with us as a customer, supplier, or prospective customer, we collect the following information:

• Salutation, first name, last name
• a valid email address
• name of the company (employer)
• Role/position in the company
• Telephone number (landline and/or mobile)
• other personal data that we need to fulfill our contractual obligations

4.3 Legal basis for the processing

The legal basis for our processing of your personal data is:

• Art. 6 para. 1 lit. a GDPR (consent of the data subject)
• Art. 6 para. 1 lit. b GDPR (for pre-contractual measures or for the fulfillment of a contract)
• Art. 6 para. 1 lit. f GDPR (legitimate interest of the data controller)

4.4 Processing of your personal data on the basis of a legitimate interest

If we process your personal data on the basis of our legitimate interests, then those interests are:

• to store and process your contact details and to communicate with you
• to send you information about our company and our products and/or services

4.5 Categories of recipients of your personal data

We forward your personal data to other companies and external contractors who carry out certain activities on our behalf in the context of order processing in accordance with Art. 28 GDPR. These activities are, for example, IT services, maintenance activities and shipping activities. In addition, we also forward your data to external bodies if we are obliged to do so for legal reasons.

4.6 Storage duration

Personal data that is stored due to our statutory retention obligations will be deleted as soon as the retention obligation in question ceases to apply. Otherwise, personal data will be deleted when the purpose of the processing no longer applies. Data that we store on the basis of consent given by the data subject pursuant to Art. 6 (1) a GDPR will be deleted if the purpose of the processing no longer applies or if the consent is revoked.

4.7 Data subjects' rights / Right of appeal

Insofar as Collomix GmbH processes your personal data, as the data subject you are entitled to the rights set forth in sections 1.4 and 1.9 of the Privacy Policy under the conditions set out in the data protection legislation

5. Additional website features and services

In addition to the purely informational use of our website, we offer various services that you can use if you are interested. For this purpose, you usually have to provide further personal data, which we use to provide the respective services and for which the aforementioned data processing principles apply.

In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.

Furthermore, we may pass on your personal data to third parties if we offer promotions, competitions, or wish to conclude a contract with you or offer similar services together with our partners. You will receive more information on this when you provide your personal data or underneath the descriptions of the respective offers.

If our service providers or partners are located in a country outside the European Economic Area (EEA), we will inform you about the consequences of this in the offer description.

5.1. Contact

When contacting us (e.g., by email, telephone or via social media), the data you provide will be processed for the purpose of handling the contact request and its processing pursuant to Art. 6 para. 1 lit. b) GDPR. The user's details may be stored in a customer relationship management system ("CRM system") or comparable inquiry processing system. We delete the inquiries if they are no longer necessary or restrict their processing in the absence of any statutory retention obligations. We review the necessity of storing this data every two years.

5.2 Contact form – Submit story (Collomix Blog)

If you submit a blog post to us using the form, the information you provide in the inquiry form, including the contact information you provide there, will be stored by us for the purpose of publishing the blog post and for communication between us and you regarding your blog post. By submitting your blog post, you agree that it will be published on the blog "Collomix Champions Know-How" for an indefinite period. We will not share this data without your consent.

5.3 Contact form (colorTEC inquiry)

If you send us inquiries via the contact form, your data from the inquiry form including the contact data you provided there will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We will not pass on this data to third parties without your consent. The processing of the data entered in the contact form is therefore based exclusively on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. For this purpose, an informal communication by email to us is sufficient. The legality of the data processing operations carried out until the revocation will remain unaffected by the revocation. The data you entered in the contact form will remain stored by us until you request us to delete it, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g., after we have completed processing your request). Mandatory legal provisions – in particular retention periods – remain unaffected.

5.4 Registration on this website – warranty extension

You can register on our website to use additional features of the site. We use the data entered for this purpose only for the purpose of providing the respective offers or services for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise we will reject your registration.

For important changes, for example regarding the scope of the offer or in the case of technically necessary changes, we use the email address provided during registration to inform you accordingly.

The processing of the data entered during registration is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time. For this purpose, an informal communication by email to us is sufficient. The legality of the data processing already carried out will remain unaffected by the revocation.

The data collected during registration will be stored by us for as long as you are registered on our website and will then be deleted. Any statutory retention periods will remain unaffected.

6. Newsletter

Our email newsletters are sent via the technical service provider CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede ("CleverReach"), to whom we pass on the data provided by the user when they register for the newsletter. The data entered by users for the purpose of newsletter subscription (e.g., their email address) is stored on CleverReach's servers in Germany or Ireland.

Our newsletters sent via CleverReach allow us to analyze the behavior of newsletter recipients. Among other things, we can analyze how many recipients have opened the newsletter message and how often which link in the newsletter was clicked. With the help of so-called conversion tracking, it can also be determined whether a predefined action has taken place after clicking on the link in the newsletter. For more information on data analysis by CleverReach newsletters, please visit:https://www.cleverreach.com/de/funktionen/reporting-und-tracking/ .

The legal basis for the processing of the users' personal data is Art. 6 (1) lit. f GDPR. The disclosure of the users' personal data enables us to use effective advertising as part of a secure and user-friendly newsletter system, which can be further optimized.

These purposes are also based on our legitimate interest in the processing of the data according to Art. 6 para. 1 lit. f GDPR. Any other use, including merging the data with other data or its disclosure to third parties is not carried out by us.

For more details, please refer to the privacy policy of CleverReach at:https://www.cleverreach.com.In accordance with Art. 7 (3) GDPR, you can revoke your consent to receive the newsletter at any time with effect for the future. To do so, you simply need to inform us of your revocation or click on the unsubscribe link contained in each newsletter.

7. Plugins and tools

We use social plugins ("plugins") form social networks and employ content or service offers of third-party providers to integrate their content and services, based on our legitimate interests (i.e., our interest in the analysis, optimization and economic operation of our website within the meaning of Art. 6 (1) lit. f GDPR).

7.1 YouTube

Our website uses plugins from the YouTube site operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. To view an embedded video, your active consent is required. As soon as you give this consent and thus start a YouTube video on this website, a connection to the YouTube servers is established. This tells the YouTube server which pages of our website you have visited. If you are logged into your YouTube account, you will thus enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

If you are logged into your YouTube account, you will thus enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used in the interest of ensuring an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

For more information on the handling of user data, please refer to YouTube's privacy policy at:https://www.google.de/intl/de/policies/privacy , Opt-Out:https://adssettings.google.com/authenticated

7.2 My Fonts

This website uses web fonts from http://myfonts.com on the basis of Art. 6 para. 1 f GDPR. The web fonts are hosted locally on our server.

Due to licensing requirements, page-view tracking is performed by counting the number of visits to our website for statistical purposes and transmitting them to MyFonts. MyFonts Counter is a service of MyFonts Inc, 500 Unicorn Park Drive, Woburn, MA 01801, USA.

More information about MyFonts' privacy policy can be found via the following link:https://www.myfonts.com/legal/terms-of-use.

To prevent the execution of Java Script code from MyFonts altogether, you can install a Java Script blocker.

7.3 MapBox

The website uses interactive maps in various places. For this purpose, the MapBox map service from Mapbox, Inc. is used. By using MapBox, information about the use of this website, including your IP address, is transmitted to MapBox.

When you access this website, your personal data is automatically transferred to the service provider.

The processing of your personal data is carried out in accordance with Art. 6 para. 1 letter f) – the processing is necessary for the protection of our legitimate interests.

When you call up the map, your data is transmitted to MapBox Inc (740 15th St Nw Suite 500 Washington, DC 20005 United States). MapBox may transfer your data to third parties if this is required by law or if third parties process this data on your behalf. It cannot be ruled out that the recipients may associate your IP address with other data.

It is technically possible that the recipients could identify at least individual users on the basis of the data received. We have no influence on the fact that personal data and personality profiles of users of the website are processed for other purposes.

Storage periods and, if applicable, criteria for determining the storage periods.

We do not know how long the recipient stores the above data.

Transfers to a third country and existence of the adequacy decision.

The personal data is transmitted to the company Mapbox Inc., 740 15th St NW, Washington, USA in a third country. Access to this data by government authorities cannot be ruled out.

For more information, please see MapBox's privacy policy.

7.4 Facebook Plugins

Plugins from the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA are integrated on our web pages. You can recognize the Facebook plugins by the Facebook logo or the "Like" button on our site. You can find an overview of the Facebook plugins here: developers.facebook.com/docs/plugins

When you visit our website, a direct connection between your browser and the Facebook server is established via the plugin. Facebook is thus informed that you have visited our site via your IP address. If you click the Facebook "Like" button while logged into your Facebook account, you can link the content of our website to your Facebook profile. This allows Facebook to link your visit to our website to your user account. We wish to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook. For more information, please refer to the privacy policy of facebook at de-de.facebook.com/policy.php.

If you do not want Facebook to be able to associate your visit to our website with your Facebook user account, please log out of your Facebook user account. It is also possible to block Facebook social plugins with add-ons for your browser, for example with the "Facebook Blocker".

7.5 Instagram

On our website, features and content of the Instagram service, offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA, are integrated. If the users are members of the Instagram platform, Instagram can assign the retrieval of content such as images, videos or texts, and functions to the user's profiles on its platform. For a detailed description of the related processing – including the privacy policy and the opt-out options – please refer to the following linked information from the providers: http://instagram.com/about/legal/privacy/

8. Processing of your data when creating a customer account or when participating in the "My Collomix" program

8.1 What data is processed?

If you want to create a customer account or participate in the "My Collomix" program, Collomix GmbH requires your full name and address data (basic data). Without providing your basic data, we cannot create your customer account with full functionality. In addition, you can voluntarily provide further data (voluntary data).

8.2 Purpose of the processing

Collomix GmbH processes the basic data and any voluntary information for your registration and for the processing of the "My Collomix" program. The purpose of the processing is to be able to provide information and offers that are individually tailored to the customer and to provide comprehensive personalized support.

8.3 Legal basis

The legal basis for the processing described above is Art. 6 para. 1 lit. GDPR

8.4 Use and disclosure of personal data

We process the personal data collected from you exclusively for the creation of your customer account or for the purpose of the "My Collomix" program. We do not disclose your personal data to third parties unless you have consented to such disclosure of your data or we are obliged to disclose data due to statutory provisions and/or official or court orders.

In the provision of our services, we are supported by contract processors as IT service providers and within the scope of hosting services. These entities have their company headquarters in Germany. If other processors are commissioned with a maintenance activity, these processors may gain access to your data in the course of their work. In such cases, Collomix GmbH contractually obligates the processors to comply with the applicable data protection provisions, as well as the provisions on data protection and confidentiality under the contract. Under no circumstances will Collomix GmbH disclose your personal data to third parties without authorization for advertising, marketing or other purposes.

8.5 Processing of your data for advertising purposes

If you have given appropriate consent for advertising/newsletters, your personal data listed in Section 8.1. may be used for advertising purposes. You may receive advertising, e.g., marketing promotions, information about special offers, competitions, product tests and discount promotions by mail and/or email. These advertisements may be targeted to your specific needs and requirements based on your recent purchases from our store.

The legal basis for the processing of personal data is, in the presence of a relevant consent of the customer, Art. 6 para. 1 lit. a GDPR.

For the processing of your data, in particular for sending information by mail to the contact data confirmed by you, the personal information required for this purpose is processed on a case-by-case basis by commissioned service companies (order processing, e.g., letter shop, newsletter agency).

If you no longer wish to receive product recommendations or promotional messages from us, you can revoke your consent at any time with effect for the future. You can declare your revocation by email to datenschutz@collomix.de.

9. Analysis tools and advertising

The use of analytics to evaluate the use of one's own website is now standard practice. Website operators want to know, for example, how many users visit their site, what information is most in demand, how users found the website. In this way, the offers can be designed in a user-friendly way and the turnover of the companies can be increased. The term "web analytics" is commonly used, but terms such as "web tracking" or "data traffic analysis" are also used regularly. These terms describe any collection of access data on websites and the evaluation of visitors' behavior. The analysis tools require the identification of individual visitors in order to evaluate individual behavior. Personal identification, on the other hand, is generally not required, as only statistical data is compiled. It is therefore customary, in part due to the work of the data protection supervisory authorities, that the user's IP address is only collected in abbreviated form and is directly shortened by the last octet, so that the previously personal user data is directly anonymized and no identification of individual users is possible. The supervisory authorities have established various requirements for the use of web analytics under the data protection legislation. These requirements can be transferred to the GDPR, but must be expanded to include various requirements. In the following, descriptions of a data protection declaration are presented as a possible supplement to the basic declaration presented above for services that are frequently used in practice and the further requirements are described.

9.1 Use of Retail Connect

The tracking pixel is activated at the request of the trading partner; it can also be deactivated.

If the tracking pixel is activated and if an order is actually triggered (last step of the ordering process in the store), data about the order is transmitted. If no order is triggered, no data is transmitted. The transmitted data includes personal data within the meaning of the GDPR.

If a customer (data subject within the meaning of the GDPR) is redirected directly to the store page of a dealer (the data controller within the meaning of the GDPR) via the detail page of a product in the product catalog of the Collomix website, a transaction number is transferred to the dealer.

This transaction number is transmitted to the supplier, Collomix, in the event of an actually triggered order. The technical transmission path is via the retail Connect interface provided by nexMart GmbH & Co. KG, which serves as a commissioned contract data processor pursuant to Art. 28 GDPR for the execution of this process. The following data is transmitted.

• Transaction number
• Item number or GTIN of the ordered items
• Order quantity per item (if the dealer has enabled this)
• Total order value (if the dealer has activated this)

The transaction number establishes the link between the retrieval of item information in the Collomix catalog and the actual order placed with the dealer. It allows the supplier (Collomix) to determine the share of purchases resulting from the dealer link within the total order volume, to identify popular and neglected product categories in this type of order; and thus to assess the profitability of this software licensed by nexMart GmbH & Co. KG.

Further personal data of the customer, in particular their name and address, will not be transmitted to Collomix.

9.2 Use of Google Analytics

a) This website uses Google Analytics, a web analytics service provided by Google, Inc ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will your full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

b) The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other data from Google.

c) You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in that is available via the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

d) This website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are processed in abbreviated form, which means that personal references can be ruled out. Insofar as the data collected about you is related to a person, this is therefore immediately ignored and the personal data is thus immediately deleted.

(e) We use Google Analytics to analyze and regularly improve the use of our website. The statistics thus obtained enable us to improve our website and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has subjected itself to the requirements of the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.The legal basis for the use of Google Analytics is Art.6 para. 1 p. 1 lit. f GDPR.

(6) Third-party Provider Information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: http://www.google.com/analytics/terms/de.html,Privacy Policy overview: http: //www.google.com/intl/de/analytics/learn/privacy.html,and Privacy Policy: http: //www.google.de/intl/de/policies/privacy.

9.3 Use of Facebook Remarketing Function

a) This website uses the "Custom Audiences" remarketing function from Facebook Inc ("Facebook"). This allows users of the website to be shown interest-based advertisements ("Facebook Ads") when visiting the Facebook social network or other websites that also use this tool. In this way, we pursue our interest in showing you advertising that is of interest to you in order to make our website more interesting for you.

b) Due to the marketing tools used, your browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and further use of the data collected by Facebook through the use of this tool and therefore inform you about this to the best of knowledge: Through the integration of Facebook Custom Audiences, Facebook receives the information that you have called up the corresponding web page of our website or clicked on an ad from us. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, it is possible that the provider will learn and store your IP address and other identifying features.

c) The "Facebook Custom Audiences" function can be disabled [here and] by logged-in users at https://www.facebook.com/settings/?tab=ads#_möglich.

d) The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. f GDPR. For more information on data processing by Facebook, please visit https://www.facebook.com/about/privacy.

9.4 Use of Matomo (formerly Piwik)

We use a locally installed version of Matomo. You can block this by using the appropriate tools if you wish to do so. Our Matomo installation stores your IP address anonymously and respects DoNotTrack. It does not share any data with third parties.

We use the analysis tool Matomo from InnoCraft Ltd. (150 Willis St, 6011 Wellington, New Zealand; "Matomo") on our website.

The corresponding data processing serves the purpose of analyzing the website and its visitors. Cookies may be used for this purpose, which enable recognition of the user's internet browser. In the process, the following information may be collected, among other data: IP address, information about the browser you are using and about the device (device) you are using, files you have clicked on or downloaded, clicks on links to third-party websites, referrer URL (website from which you accessed our website), URL of our website, number of visits, time of your first visit, date and time of visit, time zone, location data. From this data, usage profiles can be created under a pseudonym. The data collected using Matomo technologies will not be used to personally identify the visitor to this website without the separately granted consent of the data subject and will not be merged with personal data about the bearer of the pseudonym.

The data processing, in particular the setting of cookies, is based on Art. 6 (1) lit. f GDPR, i.e., our overriding legitimate interest in the demand-oriented and targeted design of the website. You have the right to object to this processing of your personal data based on Art. 6 (1) (f) GDPR at any time for reasons arising from your particular situation.

The use of Matomo and the associated data collection and storage can be blocked at any time with effect for the future:

9. Job applications

9.1 Purpose of the data collection

Collomix GmbH collects your personal data in order to process your job application. The data you provide as part of your application will be processed solely for the purpose of selecting applicants.

9.2 What data is collected?

For the processing of your application, Collomix GmbH collects from you only the personal data – in particular your first name, last name, address, email, the position applied for, details from the application – which are necessary for the application process. For a complete review of your application to our company, it is necessary that you also provide us with information about your previous professional career. We also store the written, electronic communication that takes place between you and our company as part of the application process. In the context of your application, we undertake to use only data that originated directly from you. This may also include data that you provide online for the purpose of ensuring a professional presentation, e.g., on business networks such as Xing or LinkedIn. You are welcome to refer us to further information about your professional career that is available online.

9.3 Use and disclosure of personal data

We use the personal data you provide exclusively to process your application for the advertised position. Your personal data will only be disclosed to persons involved in the application process. All employees entrusted with data processing are obliged to maintain the confidentiality of your data. We do not pass on your personal data to third parties unless you have consented to the data being passed on or we are obliged to pass on data due to statutory provisions and/or official or court orders. In the provision of our services, we are supported by contract processors as IT service providers and providers in the context of hosting services. These entities have their company headquarters in Germany. If other processors are commissioned with a maintenance activity, these processors may gain access to your data in the course of their work. In such cases, Collomix GmbH contractually obligates the processors to comply with the applicable data protection provisions, as well as the provisions on data protection and confidentiality under the contract. Under no circumstances will Collomix GmbH disclose your personal data to third parties without authorization for advertising, marketing or other purposes.

9.4 Retention and deletion of data

Personal data concerning rejected applicants will be stored for a maximum period of six months, starting from the date of rejection of the application. After this period, your data will be automatically deleted. In the case of a paper application, in the event of rejection after the expiry of the above-mentioned period, your original documents will be returned to you by mail as we will no longer require it. Your application documents will only be stored beyond this period if legal provisions prevent their deletion, further storage is necessary for the purpose of evidence or you have expressly consented to longer storage.

9.5 Your rights regarding stored data

You have the right to request information from us at any time about the data we have stored about you, as well as about its origin, recipients or categories of recipients to whom this data is disclosed and the purpose for which it is stored.

10. Terms of use for our Facebook fan page

10.1 Scope of this Disclaimer

For the use of our Facebook fan page (https://www.facebook.com/CollomixRuhrUndMischgerateGmbh), the following terms of use apply between the user and the operator of the fan page (hereinafter referred to as "provider").

The use is only permitted if you, as a user, accept these terms of use.

10.2 Liability information regarding content on our Facebook fan page

The contents of our Facebook fan page (https://www.facebook.com/CollomixRuhrUndMischgerateGmbh) are created with the greatest possible care. However, the provider does not guarantee the accuracy, completeness and/or timeliness of the content provided. Use of the contents of the Facebook fan page (https://www.facebook.com/kindermittyp1blog) is at the user's own risk. Contributions identified by name reflect the opinion of the respective authors and not always the opinion of the provider.

10.3 External links on our Facebook fan page

Our Facebook fan page (https://www.facebook.com/CollomixRuhrUndMischgerateGmbh) contains links to third-party websites ("external links"). Liability for these websites rests with the respective operators. When the external links were first created, the provider checked the third-party content for any legal violations. At that time, no legal violations were apparent. The provider has no influence on the current and future design and content of the linked pages. The inclusion of external links does not imply that the provider adopts the content behind the reference or link as its own. It is not reasonable for the provider to constantly monitor the external links without concrete evidence of legal violations. However, in the event of knowledge of legal violations, such external links will be deleted immediately.

10.4 Your obligations as a user of our Facebook fan page

(1) As a user, you agree that you will not publish any posts / comments on our Facebook fan page (https://www.facebook.com/CollomixRuhrUndMischgerateGmbh) that violate these rules, morality or otherwise violate the applicable German laws. In particular, you are prohibited from,

• publish insulting or untrue content;
• using content protected by law, in particular by copyright and trademark law, without authorization;
• performing anti-competitive actions;
• advertising on the Facebook fan page (https://www.facebook.com/CollomixRuhrUndMischgerateGmbh) without the express written permission of the provider. This also applies to so-called surreptitious advertising, such as in particular the linking of one's own fan page or website with or without post text in comments or within posts.

(2) The provider has the right to delete posts and comments that might violate the law.

(3) As a user, you undertake to check your contributions and comments before publishing them to see whether they contain information that you do not wish to publish. Your contributions and topics may be recorded in search engines and thus become accessible worldwide. Any claims for deletion or correction of such search engine entries vis-a-vis the provider are hereby ruled out.

(4) If third parties or other users make claims against the provider due to possible legal violations that a) result from the content posted by you as a user on the Facebook fan page and/or b) result from the use of the provider's fan page by you as a user, you agree as a user to indemnify the provider against any claims, including claims for damages, and to reimburse the provider for any costs incurred due to a possible legal infringement. In particular, the provider shall not be required to cover the costs of any necessary legal defense. The provider is entitled to demand an appropriate advance payment from you as the user for this purpose. As a user, you are obligated to support the provider in good faith by providing information and documents for use in its legal defense against third parties. All further rights as well as claims for damages asserted by the provider remain unaffected. If you, as a user, are not responsible for the possible infringement, the aforementioned obligations do not apply.

10.5 Copyrights and ancillary copyrights

(1) The content published on our Facebook fan page (https://www.facebook.com/CollomixRuhrUndMischgerateGmbh) is subject to German copyright and ancillary copyright law. Any use not permitted under German copyright and ancillary copyright law requires the prior written consent of the provider or the respective rights holders. This applies in particular to the copying, editing, translation, storage, processing or reproduction of content in databases or other electronic media and systems. Contents and rights of third parties are marked as such. The unauthorized reproduction or distribution of individual content or complete pages is not permitted and is punishable by law. Only the production of copies and downloads for personal, private and non-commercial use is permitted.

(2) The presentation of this website in external frames is only permitted with our written permission.

10.6 Data protection on Facebook / with the "Like" button

(1) The provider of our Facebook fan page (https://www.facebook.com/CollomixRuhrUndMischgerateGmbh) uses plugins from the provider Facebook.com, which are provided by the company Facebook Inc., 1601 S. California Avenue, Palo Alto, CA 94304 in the USA. Users of our website on which the Facebook plugin is installed are hereby informed that a connection to Facebook is established through the plugin, whereby data is transmitted to your browser so that the plugin appears on the website.

(2) Furthermore, data is forwarded to the Facebook servers via use of the plugin, which contains information about your visits to our website. For logged-in Facebook users, this means that their usage data is assigned to their personal Facebook account. As soon as you actively use the Facebook plugin as a logged-in Facebook user (e.g., by clicking the "Like" button or using the comment function), this data is transferred to your Facebook account and published. You can only avoid this by logging out of your Facebook account beforehand.

(3) We do not know exactly what data Facebook stores and uses. As a user of the fan page, you must therefore expect that Facebook will also seamlessly store your actions on the fan page.

(4) Facebook receives your IP address, processor type and browser version when you click on the "Like" button. Via your IP address, Facebook can therefore determine your identity and habits based on this profile in conjunction with other data, as well as your real name, if you have specified this in your Facebook profile. If you always log in to Facebook via this user profile, Facebook can in particular learn about your preferences, contacts and lifestyle.

10.7 Cookiebot

When you access the website, we inform you about the types of cookies we use and give you the option to agree (or not) to the use of specific types of cookies. We do not load non-essential cookies until you have consented to their use by type.

Our website uses the cookie consent technology of Cookiebot to obtain your consent within the meaning of Art. 6 (1) p. 1 lit. a GDPR to store certain cookies in your browser and to document this in accordance with data protection law. The provider of this technology is Cookiebot – Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter "Cookiebot").

When you access our website, a Cookiebot cookie is stored in your browser, in which the consent you have given, or the revocation of this consent, is stored. This data is not shared with the Cookiebot provider.

The collected data will be stored until you request us to delete it or delete the Cookiebot cookie yourself, or until the purpose for storing the data no longer applies. Mandatory legal retention periods remain unaffected. Details on data processing by Cookiebot can be found athttps://www.cookiebot.com/de/privacy-policy/ .

The use of the Cookiebot cookie consent technology takes place in order to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 p. 1 lit. c GDPR.

10.8 Other regulations

(1) In all other respects, the General Terms of Use of Facebook Ireland Limited, Hanover Reach, 5-7 Hanover Quay, Dublin 2, Ireland at https://www.facebook.com/terms.phpshall apply.

(2) With regard to data protection on Facebook, please note the following privacy policy of Facebook Ireland Limited: https://www.facebook.com/about/privacy/

(3) When you visit our fan page, data may be collected for market research and advertising purposes and stored in user profiles using pseudonyms. Cookies are set for this purpose. Based on this, we can perform statistical evaluations (for example). This serves our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR in optimizing the presentation of our website. The data processing takes place on the basis of an agreement between the jointly responsible parties pursuant to Art. 26 GDPR, which you can view here: https://www.facebook.com/legal/terms/page_controller_addendum.