DATA PROTECTION

I. Definitions

“Personal data” is all information that relates to an identified or identifiable natural person; A natural person is regarded as identifiable who can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, an identification number, location data, an online identifier or one or more special features that express the physical , physiological, genetic, psychological, economic, cultural or social identity of this natural person;

"Processing" is any process or series of processes carried out with or without the help of automated processes in connection with personal data such as the collection, recording, organization, ordering, storage, adaptation or modification, reading, querying, the Use, disclosure by transmission, distribution or any other form of provision, comparison or linking, restriction, deletion or destruction;

"Responsible" is the natural or legal person, authority, institution or other body that alone or jointly with others decides on the purposes and means of processing personal data; If the purposes and means of this processing are specified by Union law or the law of the member states, the person responsible or the specific criteria for his appointment can be provided for in accordance with Union law or the law of the member states;

“Recipient” is a natural or legal person, authority, institution or other body to which personal data is disclosed, regardless of whether it is a third party or not. Authorities that may receive personal data as part of a specific investigation according to Union law or the law of the member states are not considered recipients; The processing of this data by the named authorities takes place in accordance with the applicable data protection regulations in accordance with the purposes of the processing.

II. General information

1. Responsible for data processing

Thermodyne Systems GmbH, Esperantostr. 8B, 70197 Stuttgart, Tel: +49 (0) 711 38934024, E-Mail info@tvape.de

2. Contact details of the company data protection officer

Ramona Herzog, Esperantostr. 8B, 70197 Stuttgart r.herzog@thermodynesytems.com

3. Legal bases

We process personal data on the basis of at least one of the following legal bases:

- Consent of the data subject to the processing of their personal data for one or more specific purposes (Art. 6 Para. 1 S. 1 lit. a GDPR);

- Fulfillment of a contract with the data subject or for the implementation of pre-contractual measures, which take place at the request of the data subject (Art. 6 Para. 1 S. 1 lit. b GDPR);

- Fulfillment of a legal obligation to which we are subject (Art. 6 Para. 1 S. 1 lit. c GDPR);

- to protect the vital interests of the data subject or another natural person (Art. 6 Para. 1 S. 1 lit. d GDPR);

- Safeguarding our legitimate interests or those of a third party (Art. 6 Para. 1 S. 1 lit.f GDPR)

In this data protection declaration, we refer to the respective legal basis of individual processing operations.

4. Transfer of data to recipients

We only pass on personal data to recipients (processors or other third parties) to the extent necessary and only under one of the following conditions:

- The data subject has consented to the disclosure;

- The transfer serves the fulfillment of contractual obligations or pre-contractual measures at the instigation of the data subject;

- We are legally obliged to pass on;

- The transfer takes place on the basis of legitimate interests of us or a third party.

5. Third countries

The transfer of personal data to a country or an international organization outside the European Union (EU) or the European Economic Area (EEA) is subject to legal or contractual permissions only in accordance with the requirements of Art. 44 ff. GDPR. This means that the EU Commission has issued an adequacy decision in accordance with Art. 45 GDPR for the country in question, there are suitable guarantees for data protection under Art. 46 GDPR or binding internal data protection regulations under Art. 47 GDPR.

6. Rights of data subjects

As a data subject, you have the following rights:

- In accordance with Art. 15 GDPR, you can request information about your personal data processed by us; You can also request information regarding the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the origin of your data, if they have not been collected from you, the existence of automated decision-making including profiling and, if necessary, meaningful information on their details such as logic, scope and effects, the existence of a right to correction or deletion of the data relating to you, the right to restrict processing or to object to this processing, the right to lodge a complaint with the supervisory authority; Finally, you have the right to information as to whether personal data has been transferred to a third country or to an international organization and - if this is the case - about the appropriate guarantees in connection with the transfer;

- In accordance with Art. 16 GDPR, you can request the immediate correction of incorrect personal data or the completion of your personal data stored by us;

- In accordance with Art. 17 GDPR, you can request the deletion of your personal data stored by us, unless processing to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend of legal claims is necessary;

- In accordance with Art. 18 GDPR, you can request the restriction of the processing of your personal data if you dispute the correctness of the data, the processing is unlawful, but you refuse to delete it and we no longer need the data, you do not need us require more data to assert, exercise or defend legal claims or you have objected to processing in accordance with Art. 21 GDPR, but it has not yet been determined whether our legitimate reasons for data processing outweigh your interest;

- According to Art. 20 GDPR, you can request the transfer of your personal data that you have provided to us in a structured, common and machine-readable format or the transfer to another person responsible;

- According to Art. 21 GDPR, you can object to the processing of your personal data if there are reasons for this that arise from your particular situation or if the objection is directed against direct mail and the legal basis for the processing of personal data is legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit.f GDPR;

- In accordance with Art. 7 Para. 3 GDPR, you can revoke your once given consent to us at any time. As a result, we are no longer allowed to continue the data processing based on this consent in the future;

- According to Art. 77 GDPR you can complain to a supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged violation.

If you would like to assert the aforementioned rights of data subjects, you can contact us or our data protection officer at any time using the contact details above.

7. Deletion and restriction of personal data

Unless otherwise regulated in this data protection declaration for individual cases, personal data will be deleted if this data is no longer necessary for the purposes for which it was collected or otherwise processed and the deletion does not conflict with any statutory retention requirements. We also delete the personal data processed by us in accordance with Art. 17 GDPR on request if the conditions provided there are met. If personal data are required for other and legally permissible purposes, they are not deleted, but their processing is restricted in accordance with Art. 18 GDPR. In the event of a restriction, the data will not be processed for other purposes. This applies, for example, to personal data, which must be kept by us for commercial or tax law reasons. Documents according to § 257 Paragraph 1 No. 2 and 3 HGB and § 147 Paragraph 1 No. 2, 3, 5 AO for 6 years, documents according to § 257 Paragraph 1 No. 1 and 4 HGB and § 147 Para. 1 No. 1, 4, 4a AO kept for 10 years.

8. Cookies

We use cookies as part of our website. Cookies are small text files that your browser automatically creates and that are saved on your device (laptop, tablet, smartphone, PC, etc.) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses or other malware. Information is stored in the cookie that results in connection with the specific device used. However, this does not mean that we are immediately aware of your identity. Cookies are mainly used to make the website more user-friendly, more effective and safer.

We use session cookies to recognize during your visit to our site that you have already visited individual pages on our website. Such cookies also provide certain functionalities. Session cookies are deleted after the end of your visit to our website or after the end of the browser session.

In addition, we also use temporary cookies to optimize user-friendliness and the statistical evaluation of the use of our offer, which are stored on your end device for a specific period of time. If you visit our site again to use our services, it will automatically recognize that you have already been with us at an earlier point in time and which entries and settings you have made so that you do not have to enter them again. These cookies are automatically deleted after 3 years.

The data processed by cookies are required for the purposes mentioned to safeguard our resulting legitimate interests and those of third parties in accordance with Art. 6 Para. 1 S. 1 lit.f GDPR.

Most browsers accept cookies automatically. If you do not want this, however, you can configure your browser so that no cookies are stored on your device or a message always appears before a new cookie is created. A general objection to the use of cookies used for online marketing purposes can be declared for a large number of services, e.g. at http://www.youronlinechoices.com/ or the deactivation page of the network advertising initiative http://optout.networkadvertising.org . Deactivating cookies can, however, mean that you cannot use all the functions of our website.

III. Individual processing operations

1. Hosting

To provide our website, we use the services of hosting companies, such as the provision of web servers, storage space, database services, security services and maintenance services. In doing so, we or our hosting provider process personal data from users of our website on the basis of our legitimate interests in an efficient and secure provision of this online service in accordance with Article 6 (1) (f) GDPR.

2. Access data and log files

When you visit our website or the individual pages, the browser on your device automatically sends information to the server of our website. This information is stored in so-called log files by us or our hosting provider and deleted after 6 months at the latest.

The following information is saved:

- IP address of the requesting computer,

- date and time of access,

- Name and URL of the file called up,

- Website from which access is made (referrer URL),

- the browser used and, if applicable, the operating system of your computer,

- status codes and amount of data transferred,

- type of device used,

- Search terms that led to the website

- Name of your access provider.

These data are processed for the following purposes:

1. Provision of the internet offer including all functions and contents,

2. Ensuring a smooth connection to the website,

3. Ensuring comfortable use of our website,

4. Ensuring system security and stability,

5. Anonymized statistical evaluation of the accesses,

6. optimization of the website,

7. Disclosure to law enforcement authorities if there has been an illegal interference / attack on our systems,

8. other administrative purposes.

The legal basis for data processing is Art. 6 Para. 1 S. 1 lit.f GDPR. Our legitimate interest follows from the data collection purposes set out above. In no case do we use the collected data for the purpose of drawing conclusions about a person.

3. Registration / user account

You have the option of registering on our website by providing personal data. Registration is voluntary and takes place in accordance with Art. 6 Paragraph 1 Clause 1 lit. a GDPR on the basis of your voluntarily given consent. Which personal data is transmitted is determined by the respective input mask that is used for registration. The collected personal data are used for the purposes of our offer and to contact you for information relevant to the offer and registration. You can view your personal data and make changes to this data via a personal user account. Your data will be stored until you delete the user account or ask us to delete your data.

If you register on our website or use the user account, we save the IP address and the time of the respective use. The storage takes place on the basis of our legitimate interests according to Art. 6 Abs. 1 S. 1 lit.f DSGVO for the provision of our offer. The user account and the data stored in this context are used to make shopping easier, to enable access to historical orders and the writing of customer reviews. A transfer of this data to third parties does not take place, unless it is necessary for the fulfillment of contractual obligations according to Art. 6 Para. 1 lit. 1 lit. c GDPR.

4. Contract data

In connection with and for the purpose of fulfilling pre-contractual measures and contractual obligations via our website, which are made at the request of the person concerned, we process the data required from the person concerned to fulfill the contract. These include:

- Data of the contractual partner, such as name, address and contact details, possibly deviating delivery or billing addresses or recipients and the date of birth;

- Contract data, such as the subject of the contract, duration, customer category;

- Payment data such as bank details, credit card details, payment history.

The legal basis for data processing is Art. 6 Para. 1 S. 1 lit. b GDPR.

The data will only be passed on to third parties to the extent that this is necessary to fulfill pre-contractual measures and contractual obligations, e.g. to banks, payment service providers, credit card companies to process payments and shipping service providers to send goods.

We also use a merchandise management system that is hosted by a provider of such systems and with which our business processes are processed and stocks are managed.

We also use service providers for customer inquiries and customer support who process the relevant inquiries and process the personal data you have provided for this purpose.

5. Reviews

If you leave reviews on our website, your IP address will be stored on the basis of our legitimate interests within the meaning of Article 6 (1) (f) GDPR and then anonymized. The purpose of storing your IP address is so that we can take action against spam in order to protect our website.

IV. Communication

1. Contact form / other contact

If you use the contact form, you will be asked to provide your name and email address and, if necessary, further contact details so that we can contact you personally. Further information can be provided voluntarily. The data processing for the purpose of contacting us and answering your request takes place in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR on the basis of the consent you have given voluntarily. All personal data collected in connection with the contact form will be deleted after your request has been dealt with, unless storage is necessary for the documentation of other processes (e.g. subsequent conclusion of a contract).

If you contact us using the contact data published on our website (e.g. by e-mail) and send us personal data, we will only use this data to process your request. Here, too, all personal data will be deleted after one year at the latest after your request has been dealt with, unless storage is necessary for the documentation of other processes (e.g. subsequent conclusion of a contract).

We use the Zendesk ticket system to answer your inquiries via this website quickly and professionally. The provider is Zendesk, Inc, 1019 Market Street, San Francisco, California 94103, USA (hereinafter "Zendesk"). The data may also be processed on servers in the USA. We have concluded an order processing contract with Zendesk. Zendesk has joined the EU / US Privacy Shield Agreement, has committed itself to complying with European data protection standards and thus meets the requirements of the EU to legitimize the transfer of personal data to the USA. Information on Zendesk's commitment can be found at: https://www.privacyshield.gov/participant?id=a2zt0000000TOjeAAG&status=Active
Further information on how Zendesk handles personal data can be found in Zendesk's data protection declaration at: https://www.zendesk.de/company/customers- partners / privacy-and-data-protection /

2. Email direct mail to customers

If you are a customer of ours and have received your e-mail address in connection with the sale of a product or service, we can use your e-mail address for direct advertising for our own similar goods or services. This only applies if you have not objected and we clearly point out the possibility of objection when collecting the e-mail address and each time it is used. The legal basis for processing is our legitimate interest in direct marketing in accordance with Article 6 (1) (f) GDPR.

3. Newsletter

If you would like to receive our newsletter, we need your email address. The data processing for the purpose of sending the newsletter takes place in accordance with Art. 6 Paragraph 1 Sentence 1 lit. The email address is used and stored for this purpose until you revoke your consent or unsubscribe from receiving the newsletter. You can unsubscribe at any time, for example via a link at the end of each newsletter. Alternatively, you can send your cancellation / unsubscribe request at any time to the e-mail address given under Section II.

We send our newsletters with a so-called tracking pixel. A tracking pixel is a miniature graphic that is embedded in the HTML format of the newsletter sent to enable an analysis of reader behavior. In this context, we save whether and at what time a newsletter was opened by you and which of the links contained in the newsletter were accessed by you. We use this data to create statistical evaluations of the success or failure of a marketing campaign in order to optimize the sending of newsletters and to better tailor the content of future newsletters to your interests. The collected data is passed on to dotmailer and deleted after the statistical evaluation.

4. dotmailer

Our website uses the dotmailer service. The provider is dotmailer Limited, No.1 London Bridge, London, SE1 9BG, United Kingdom (hereinafter "dotmailer"). dotmailer is used to send and evaluate the reach of our newsletters / advertising emails. For this purpose, your e-mail address and any other data required by dotmailer for the provision of the newsletter / advertising e-mail will be processed on our behalf. The legal basis for processing by dotmailer is Article 6 (1) (f) GDPR and our legitimate interest in using a user-friendly and secure newsletter system or system for e-mail direct marketing.

Further information on how dotmailer handles your personal data can be found in the relevant data protection declaration: https://www.dotmailer.com/neur/terms/privacy-policy/

5. Olark

We also use the Olark service to communicate with you. The provider is Habla, Inc 205 1⁄2 N Main St. Ann Arbor, Michigan 40104, USA (hereinafter "Habla"). Olark is an instant LiveChat service with which you can contact us or we can contact you directly. When using Olark, personal data is processed by Habla to provide the service. The data may also be processed on servers in the USA. The legal basis for processing by Habla is Article 6 (1) (f) GDPR and our and your legitimate interest in a simple, quick and uncomplicated contact with us.

Habla has joined the EU / US Privacy Shield Agreement, has pledged to comply with European data protection standards and thus meets the requirements of the EU to legitimize the transfer of personal data to the USA. For information on Habla's commitment, see

https://www.privacyshield.gov/participant?id=a2zt000000000eaAAA&status=Active

Further information on how Habla handles your personal data can be found in the relevant data protection declaration: https://www.olark.com/privacy-policy

V. Age verification

1. DHL presbyopia test

This website uses DHL age verification to verify the recipient's age. The provider is the Deutsche Post DHL Group, Charles-de-Gaulle-Str. 20, 53113 Bonn, Germany (hereinafter "DHL"). When offering goods or services, we carry out an age check with DHL in accordance with the statutory provisions (in particular the Youth Protection Act (JuSchG)). Recipient and buyer must be identical and of legal age. In the case of a presbyopia check, the deliverer checks the age of the recipient (recipient or other person authorized to receive) using an official photo document. This can be dispensed with if the deliverer can clearly assume, based on the overall circumstances, that the recipient has reached the minimum age. There is no delivery to neighbors or house residents.

Please have a photo document (ID card or driver's license) ready. Further information on how DHL handles your personal data can be found in the relevant data protection declaration:

https://www.dhl.de/de/toolbar/footer/datenschutz.html

2. DHL Ident-Check

This website uses DHL Ident-Check for documented and ID-based identification of the recipient. The provider is the Deutsche Post DHL Group, Charles-de-Gaulle-Str. 20, 53113 Bonn, Germany (hereinafter "DHL"). When offering goods or services that are subject to strict age restrictions, we carry out an identity and age check with DHL in accordance with the statutory provisions (in particular the Youth Protection Act (JuSchG)). Recipient and buyer must be identical and of legal age. The goods are only handed over personally to the recipient. A handover to an authorized representative is not possible. During the identification check, the surname, first name, address and date of birth of the recipient are checked against the information provided by the sender. In addition, the type of ID, ID number and nationality are recorded.

Please have your ID card or passport ready for verification. Further information on how DHL handles your personal data can be found in the relevant data protection declaration:

https://www.dhl.de/de/toolbar/footer/datenschutz.html

3. Immediate Ident

This website uses SOFORT-Ident for age verification. The provider is Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden or Klarna GmbH, Theresienhöhe12, 80339 Munich, Germany (hereinafter “Klarna”). When offering goods or services that are subject to age restrictions, we perform in accordance with the legal
Regulations (in particular the Youth Protection Act (JuSchG)) an identity and age check with SOFORT-Ident. The recipient and the purchaser must be identical and of legal age. The goods can only be delivered to the address that has been confirmed by the age check and printed on your identity card. The age verification can be carried out with the electronic identity card or the Schufa registration of your current account. In connection with the age verification, we do not transmit any personal data to SOFORT-Ident, but after the verification process has been carried out, SOFORT-Ident transmits additional information on your date of birth and age. The legal basis for data processing is Article 6 Paragraph 1 Clause 1 lit. b and lit. c GDPR.

Please have your ID card or the login data for your online banking including your PIN ready to check. Further information on how Klarna handles your personal data can be found in the relevant data protection declaration:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy .

VI. Payment service provider

1. PayPal

This website uses PayPal as a payment service provider. The provider is PayPal (Europe) S.à rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). PayPal assumes the function of an online payment service provider as well as a trustee and offers buyer and seller protection services. When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - purchase on account via PayPal, your name, email address, purchased products, invoice amount and billing and delivery address are passed on to PayPal as part of the payment process. When using the payment methods credit card via PayPal, direct debit via PayPal or - if offered - purchase on account via PayPal, PayPal leads to the decision about the approval of the payment process. a credit check to check creditworthiness and minimize payment defaults. In the credit check, probability values ​​are used (so-called score values), the calculation of which includes address data. The calculation of these scoring values ​​is based on a scientifically recognized mathematical-statistical procedure. If the creditworthiness is insufficient, PayPal can reject the selected payment method. The legal basis for processing is Article 6 (1) (b) GDPR. If the creditworthiness is insufficient, PayPal can reject the selected payment method. The legal basis for processing is Article 6 (1) (b) GDPR. If the creditworthiness is insufficient, PayPal can reject the selected payment method. The legal basis for processing is Article 6 (1) (b) GDPR.

If you do not agree to the data transfer or you are of the opinion that your credit rating is not suitable for the selected payment method, please use another payment method. Further information on how PayPal handles your personal data can be found in the relevant data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE

2. Payengine

This website uses Payengine from Concardis as a payment service provider. The provider is Concardis GmbH, Helfmann-Park 7, 65760 Eschborn, Germany (hereinafter “Concardis”). Concardis takes on the function of an online payment service provider. When paying via Concardis, your name, purchased products or services, the invoice amount and the invoice and delivery address will be passed on to Concardis as part of the payment process. The legal basis for processing is Article 6 (1) (b) GDPR. Further information on how Concardis handles your personal data can be found in the relevant data protection declaration:

https://www.concardis.com/datenschutzerklaerung

3. Paydirect

This website uses Paydirekt from paydirekt GmbH as a payment service provider. The provider is paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main, Germany (hereinafter "Paydirekt"). Paydirekt takes on the function of an online payment service provider. When paying via Paydirekt, your name, purchased products or services, invoice amount, and billing and delivery address will be passed on to Paydirekt as part of the payment process. The legal basis for processing is Article 6 (1) (b) GDPR. Further information on how Paydirekt handles your personal data can be found in the relevant data protection declaration:

https://www.paydirekt.de/agb/index.html .

VII. Google services

The provider of the following Google services is Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google").

The legal basis for the use of the following Google services are our legitimate interests according to Art. 6 Paragraph 1 lit.f GDPR.

Google has joined the EU / US Privacy Shield Agreement, has committed itself to complying with European data protection standards and thus fulfills the requirements of the EU to legitimize the transfer of personal data to the USA. For information on Google's commitment, see

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Further information on how Google handles your personal data can be found in Google's data protection declaration: https://www.google.com/intl/de/policies/privacy/ You can find information on the use of data for advertising purposes by Google, setting and objection options on this website:

https://www.google.de/policies/privacy/partners/

https://www.google.de/policies/technologies/ads/

http://www.google.de/settings/ads

http://www.google.com/ads/preferences/

1. Google Analytics

This website uses Google Analytics from Google. Google Analytics uses cookies. Google collects data about the visits of users of our website and their usage behavior. This data serves the purpose of ensuring that our website is designed in line with requirements and that it is continuously optimized, to measure the success of marketing measures and to create statistical evaluations. In this context, pseudonymised usage profiles are created and cookies are used. The information generated by the cookie about your use of this website such as browser type / version, operating system used, referrer URL (the previously visited page), host name of the accessing computer (IP address), time of the server request are sent to a server by Transferred to Google in the USA and stored there. User and event data will be deleted after 36 months. This information may also be passed on to third parties if this is required by law or if third parties process this data on behalf of us or Google. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized so that an assignment is not possible. You can prevent the storage of cookies by setting your browser software accordingly. However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website and from processing this data by Google.https://tools.google.com/dlpage/gaoptout?hl=de . You can prevent Google Analytics from collecting data by clicking the Deactivate Google Analytics link to obtain an opt-out cookie. This cookie ensures that in future no visitor data from your browser will be collected and stored by Google Analytics when you visit this website. Warning: If you delete your cookies, the opt-out cookie will also be deleted and you may have to reactivate it.

2. Demographic characteristics in Google Analytics

This website uses the “demographic characteristics” function as part of Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of our site visitors. This data comes from interest-based advertising from Google as well as from visitor data from third-party providers. These data cannot be assigned to a specific person. The legal basis for the use of the following Google services are our legitimate interests in optimizing our website and marketing it in the best possible way in accordance with Art. 6 Paragraph 1 lit.f GDPR.

You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as shown above.

3. reCAPTCHA

This website uses reCAPTCHA from Google. reCAPTCHA serves to ensure that the forms made available are used by a natural person and not misused by machine or automated processes. This service records your IP address and possibly other data required by Google for reCAPTCHA. The information generated about your use of this website is stored on a server in the USA. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of us or Google.

VIII. Other media content

As part of our website, we sometimes use third-party content that is loaded directly from the servers of the providers named below. The purpose of integrating this content is to make our website more attractive. In order to make our website more attractive, there is also our legitimate interest in using such third-party content. The legal basis for the use of the following social media plug-ins are our legitimate interests in accordance with Art. 6 Paragraph 1 lit.f GDPR.

1. YouTube

Our website uses media content from the YouTube platform. The provider is Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”). The purpose is to display content from the YouTube platform as part of our website. This service records your IP address and possibly other data required by Google for YouTube. The information generated about your use of this website is stored on a server in the USA. This information may also be passed on to third parties if this is required by law or if third parties process this data on behalf of us or Google. If you are logged in to YouTube at the same time, Google can assign your visit to the page on our website directly to your user account there.

Google has joined the EU / US Privacy Shield Agreement, has committed itself to complying with European data protection standards and thus fulfills the requirements of the EU to legitimize the transfer of personal data to the USA. For information on Google's commitment, see

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active .

Further information on how Google handles your personal data can be found in the relevant data protection declaration: https://www.google.com/intl/de/policies/privacy/ .