1) Information on the Collection of Personal Data and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.

1.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the character string https:// and the lock symbol in your browser line.

2) Data Collection When You Visit Our Website

When using our website for information only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:

• Our visited website
• Date and time at the moment of access
• Amount of data sent in bytes
• Source/reference from which you came to the page
• Browser used
• Operating system used
• IP address used (if applicable: in anonymized form)

Data processing is carried out in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently, if there are any concrete indications of illegal use.

3) Cookies

In order to make your visit to our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your terminal and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process specific user information such as browser and location data as well as IP address values according to individual requirements. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

In some cases, cookies are used to simplify the ordering process by saving settings (e.g. remembering the content of a virtual shopping basket for a later visit to the website). If personal data are also processed by individual cookies set by us, the processing is carried out in accordance with Art. 6 (1) point b GDPR either for the execution of the contract or in accordance with Art. 6 (1) point f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
We work together with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). You will be informed individually and separately about the use of such cookies and the scope of the information collected in each case within the following sections.

3.1. Web push notifications

We engage third-party providers to deliver updates to customers via web push notifications. These notifications include website updates and marketing purposes.

Our third-party provider Insider (Eerste Weteringplantsoen 8, 1017SK Amsterdam) collects personal data needed to perform their functions. To view the information collected and to view the compliance for push website notifications.

If you have accepted to receive notifications from your browser and wish to unsubscribe from web push notifications, please follow your browser’s instructions to delist from push notifications you have consented to.

Information Collection and Use

Triumph via Insider may collect and process the following information:

• Contact information
• Location
• Purchase and visit history
• The version of operating system, browser, device, screen resolution
• Information gathered when you visited our website

Triumph use the above information for the following purposes:

• To send you information, news, and offers about our products.
• To remind you of any task which remains uncompleted (e.g., incomplete orders, abandoned baskets).
• To notify you when a product is back in stock or low in stock.
• To provide, update, maintain, improve, and protect our website, business, and services.
• To deliver relevant website content and online advertisements.

3.2. Web Beacons

In addition to cookies, our website and emails may also contain "web beacons" (also known as "web bugs"). These are small, invisible images or pieces of code embedded within emails or web pages that allow us to collect information about how our content is received and interacted with.

Data collected through web beacons may include:

• Subjects and total count of newsletters sent
• Address files used
• Delivery status, such as which addresses successfully received or did not receive the newsletter
• Opening status and times, including information on addresses where the newsletter was opened
• Unsubscription details, including addresses removed from our mailing list
• Technical information such as time of access, IP address, browser type, and operating system
• Interaction data (e.g., which links were clicked within the email), for understanding user engagement with specific content.

We use this information for statistical analysis and to enhance the relevance of future marketing communication by adapting content to align more closely with your interests. Data is also synchronized across other systems, allowing us to refine our marketing strategies and improve customer experience on our platform.

You have the option to withdraw your consent at any moment. This can be done by modifying your cookie preferences, opting out of the newsletter, or altering your email settings to block HTML content, thereby disabling web beacons.

4) Contacting

In the context of contacting us (e.g. via contact form or e-mail), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. These data are stored and used exclusively for the purpose of responding to your request or for establishing contact and for the associated technical administration. The legal basis for processing data is our legitimate interest in responding to your request in accordance with Art. 6 (1) point f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) point b GDPR. Your data will be deleted after final processing of your enquiry; this is the case if it can be inferred from the circumstances that the facts in question have been finally clarified, provided that there are no legal storage obligations to the contrary.

5) Data Processing When Opening a Customer Account and for Contract Processing

Pursuant to Art. 6 (1) point b GDPR, personal data will continue to be collected and processed if you provide them to us for the execution of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. It is possible to delete your customer account at any time. This can be done by sending a message to the above-mentioned address of the controller. We store and use the data provided by you for contract processing. After complete processing of the contract or deletion of your customer account, your data will be blocked in consideration of tax and commercial retention periods and deleted after expiry of these periods, unless you have expressly consented to further use of your data or a legally permitted further use of data has been reserved by our site, about which we will inform you accordingly below.

6) Use of Your Data for Direct Advertising

6.1 If you subscribe to our e-mail newsletter, we will send you regular information about our offers. The only mandatory information for sending the newsletter is your e-mail address. The indication of additional possible data is voluntary and is used to be able to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will not send you an e-mail newsletter, unless you have expressly confirmed to us that you agree to the sending of the newsletter. We will then send you a confirmation e-mail asking you to confirm that you wish to receive future newsletters by clicking on an appropriate link.

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 (1) point a GDPR. When you register for the newsletter, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration so that we can trace any possible misuse of your e-mail address at a later time. The data collected by us when registering for the newsletter will be used exclusively for the purpose of advertising by means of the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the responsible person named above. After your cancellation, your e-mail address will immediately be deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use data in excess thereof, which is permitted by law and about which we inform you in this declaration.

6.2 Based on our legitimate interest in personalized direct mail, we reserve the right to store your first and last name, your postal address and - if we have received this additional information from you within the framework of the contractual relationship - your title, academic degree, year of birth and your professional, industry or business name in accordance with Art. 6 (1) point f GDPR and to use them for sending interesting offers and information on our products by letter post.

You can object to the storage and use of your data for this purpose at any time by sending an appropriate message to the controller.

7) Web Analysis Services

7.1 Google (Universal) Analytics

Google Analytics 4 (GA4)
Our website uses the Google Analytics 4 (“Google Analytics 4”) service, which is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (collectively referred to as “Google”).
Google Analytics 4 uses JavaScript to read information on your device and cookies to store information on your device. This helps analyze your usage behavior and improve our website. Obtained information will be used to evaluate your use of the website and compile reports on website activity for the website operator. The data generated in this context can be transmitted by Google to a server in the USA for evaluation and storage.
Google Analytics 4 also uses machine learning for automated analysis and data enrichment. This is done for forecasting measurements on the future behavior of visitors based on structured event data, such as forecast turnover, the probability of purchase, and the probability of churn. The forecast metrics can also be used to forecast audiences. You can find out more about this at: https://support.google.com/analytics/answer/9846734.
Additionally, Google Analytics 4 models conversions if there is not enough data available to optimize the evaluation and reports. You can find information on this at: https://support.google.com/analytics/answer/10710245.
The data evaluations are automated with the help of machine learning or based on specific, individually defined criteria. You can find more about this at: https://support.google.com/analytics/answer/9443595.
We have made the following data protection settings for Google Analytics 4: IP address anonymization, deactivated cross-device and cross-site tracking (Google Signals), and disabled data sharing (especially Google products and services, benchmarking, technical support, account specialist).
The following data is processed by Google Analytics 4: IP address; user ID and device ID; referrer URL (previously visited page); pages accessed (date, time, URL, title, length of stay); downloaded files; clicked links to other websites; achievement of certain goals (conversions); technical information (operating system; browser type, version, and language; device type, brand, model, resolution, and other); approximate location of the internet service provider (country, region, city, based on an anonymized IP address).
Google Analytics 4 sets the following cookies for the specified purpose with the respective storage period: “_ga” (2 years) and “_gid” (24 hours) for recognition and differentiation of visitors through a user ID; “ga[GA4-ID]” (2 years) for keeping the information of the current session. For more information about Google Analytics 4 cookies, visit: https://support.google.com/analytics/answer/11397207?hl=en.
The legal basis for this data processing is your consent in accordance with Article 6 (1) (a) of the GDPR.
You can opt out from Google collecting data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
More information on how Google Analytics handles user data can be found in Google's privacy policy at: https://support.google.com/analytics/answer/6004245?hl=en.

7.2  fraud0

We, Triumph Intertrade AG, as the website provider use fraud0, a service provided by fraud0 GmbH, Sendlinger Straße 7, 80331 Munich, to detect invalid traffic and low-quality traffic and to prevent fraud on our website. By using the fraud0 service we can detect invalid traffic on our site, improve our online marketing efforts, clean marketing-relevant statistics and improve the usability of our website.

The data obtained from this service is only used for analysis and mitigation of invalid and low-quality traffic. fraud0 processes data on our behalf and is contractually committed to measures to ensure the confidentiality of the processed data. A data processing agreement with fraud0 has been concluded.

The fraud0 technology uses JavaScript pixels. During your website visit, the following data are collected by or through the use of this service:

Browser and device information, such as the device type and model, manufacturer, operating system type and version (e.g. iOS or Android), web browser type and version (e.g., Chrome or Safari), user-agent, flash version, location information, IP address, JavaScript support, pages visited, time zone, the network connection type, hardware-based identifiers (e.g. MAC address), referrer URL, number of fonts, fonts hash, number of plugins, plugins hash, screen height and width, colour depth, platform, whether the resolution has been tampered, language or OS, whether ad blocking is enabled, whether do not track is enabled.

End-user’s behaviour on Controller’s sites, information, such as click path, session ID, session start/stop time, timezone offset, date and time of visit, usage and behavioural data.

In our admin interface from fraud0 we receive a classification for invalid and low quality traffic, no personal data. There is no transfer of data to third parties - except as otherwise stated in fraud0's privacy policy. When invalid or low quality traffic is detected, we generate invalid audience lists using our tag manager to automatically de-targeted this traffic across all our major buying channels like GoogleAds, Facebook, DV360 etc. Data processing by fraud0 only continues until a classification is done

Tracking across websites does not happen at any time. We process data by using the fraud0 bot detection service based on Art. 6 lit. f GDPR. It is in the interest of the website operator to classify the users of its website as valid or as invalid traffic. First and foremost, we are preventing fraud (recital 47 of the GDPR), but we can also correct the website statistics by removing invalid traffic shares from our statistics. This will allow us to use our online marketing budget more efficiently and therefore continue to provide our services as usual. In case of using additional fraud0 services, we may process your data on another legal basis such as your consent, see further information: https://fraud0.com/de/privacy-policy/ .

The data processing is performed exclusively in the European Union and Data is stored on Google's servers within the European Union and will not be transferred to Google servers in the USA. The User may object to the processing by fraud0 at any time. The privacy policy and contact details of fraud0's data protection officer can be found at the following link https://fraud0.com/privacy-policy/ .

7.3  Snowplow Analytics

We use a web-tracking solution by Snowplow Analytics Limited, 32-38 Scrutton Street, London, UK (“Snowplow”). We use data collected by Snowplow exclusively for statistical purposes. In addition to this, we store a cookie in your browser in order to recognize returning users as such. The Snowplow cookie contains a date and a non-traceable, random combination number (“hash”), as well as the number of the current session.

Each time a page is requested, the following data is transmitted to and stored by Snowplow:

- Current timestamp
- URL of the target website (“target URL”) and the URL of the website you are coming from (“referrer URL”)
- Contents of the cookies
- IP address, which is anonymized before reaching the Snowplow server, and your browser port
- Name, version, and language of your browser and operating system as transmitted by the browser of the website visitor, i.e. you

The legal basis for the data processing described above is formed by Art. 6 (1) (b) GDPR (essential requirement to perform data processing to fulfil the contract).

Further information relating to this can be found in Snowplow’s privacy policy:
https://snowplowanalytics.com/privacy-policy/.

7.4  Amplitude

Amplitude is an analysis service of Amplitude Inc. (631 Howard Street, Suite 300, San Francisco, CA 94105, U.S.A.). This tool collects pseudonymised technical information, such as the type of your device (e.g., iPhone 7) and the operating system used (e.g., iOS 10.3), when you visit and use our website. In addition, Amplitude tracks location data (e.g. country) and internal data (e.g. language, session ID) that occur during your interactions with our website. These events may include information such as the duration of your visit to our website and the country from which you accessed it.

The purpose of collecting this information is to help us understand how users interact with our website and to improve the user experience. By analyzing the collected data, we can identify patterns, trends, and areas for improvement. This information enables us to optimize our website's performance, enhance its features, and provide a better service to our users.

The legal basis for the data processing described above is formed by Art. 6 (1) (b) GDPR (essential requirement to perform data processing to fulfil the contract).

Please refer to the privacy policy from Amplitude for further information about Amplitude:
https://amplitude.com/privacy.

8) Retargeting/Remarketing/ Referral Advertising

Bing Ads (Microsoft Corporation)
This website uses the conversion tracking technology "Bing Ads" from Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). Microsoft Bing Ads will place a cookie on your computer if you access our website via a Microsoft Bing ad. Cookies are small text files that are stored on your computer system. These cookies lose their validity after 180 days. They are not meant for personal identification. If the user visits certain pages of this website and if the cookie has not yet expired, we and Microsoft are able to recognize that the user has clicked the ad and has been forwarded to this page (conversion page). If personal data are processed in this context, this is done in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in effective marketing.
The information collected via the conversion cookie is meant to compile conversion statistics, i.e. to register how many users have arrived at a conversion page after clicking the ad. We hereby learn the total number of users who clicked our ad and were forwarded to a conversion tracking tag page. However, we do not obtain any information by which users can be personally identified.
Microsoft Corporation, based in the United States, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.
If you do not wish to participate in tracking, you may object to this usage by easily deactivating the Bing Ads conversion tracking cookie via your internet browser and your user settings. In this case, you will not be included in the conversion tracking statistics. Alternatively, you can use the deactivation page for consumers from the EU http://www.youronlinechoices.com/uk/your-ad-choices/
to check whether Microsoft advertising cookies are set in your browser and, if so, to deactivate them.
For more information about Microsoft Bing Ads' privacy policy, please visit: https://privacy.microsoft.com/en-US/

Criteo (Criteo SA)
This website uses the technology of Criteo SA, 32 Rue Blanche, 75009 Paris, France ("Criteo"), to collect, store and evaluate information about the surfing behavior of website visitors in pseudonymized form using cookie text files. This is done on the basis of our legitimate interest in the insertion of personalized advertising pursuant to Art. 6 (1) (f) GDPR. Criteo analyses the navigation behavior with the help of algorithms and is subsequently able to display product recommendations in form of personalized advertising banners on other websites (so-called publishers). Under no circumstances, those data will be used to personally identify the visitor to this website. No other use or disclosure to third parties is envisaged.
If you want to object to the collection of data and the creation of pseudonymized user profiles for the future, you can obtain the following so-called opt-out cookie: Criteo Exercise (https://www.criteo.com/privacy/)
For more information about Criteo's technology, please view Criteo's Privacy Policy at: https://www.criteo.com/privacy/

Facebook Pixel
This website uses the "Facebook Pixel" of Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). This process is designed to evaluate the impact of Facebook ads for statistical and market research purposes and may help to optimize future advertising efforts.
Data collected shall remain anonymous and cannot be used to draw any conclusion about the identity of the user. However, those data are stored and processed by Facebook to enable a connection to the respective user profile and to allow Facebook to use those data for its own advertising purposes in accordance with the Facebook Privacy Policy (https://www.facebook.com/about/privacy/). You may allow Facebook and its partners to place ads on and outside of Facebook. A cookie may also be stored on your computer for these purposes. Facebook Inc., based in the United States, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.
If you want to disable the use of cookies on your computer, you can set your Internet browser so that cookies can no longer be stored on your computer in the future and/or cookies that have already been stored will be deleted. However, when disabling all cookies, some functions of our internet pages may no longer be able to be executed. You can also disable the use of cookies by third parties such as Facebook on the following Digital Advertising Alliance website: http://www.aboutads.info/choices/

Google AdWords Remarketing
Our website uses the functions of Google AdWords Remarketing, which enable us to advertise our website in Google search results, as well as on third-party websites. Provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). To this end, Google places a cookie in the browser of your terminal device, which automatically uses a pseudonymous cookie ID on the basis of pages you visited to allow interest-based advertising. Processing is based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6 (1) point f GDPR.
Any additional processing will only take place if you have agreed with Google that your Google Internet and app browsing history will be linked to your Google Account and information from your Google Account will be used for personalized ads you view on the web. If you are logged in to Google while visiting our website, Google will use your data in connection with Google Analytics data to create and define target group lists for cross-device remarketing. To this end, Google temporarily links your personal data with Google Analytics data to create target groups.
You can permanently disable the setting of cookies for advertising preferences. You may download and install the browser plug-in available at the following link: https://www.google.com/settings/ads/onweb/
Alternatively, you can contact the Digital Advertising Alliance at www.aboutads.info to find out how to set cookies and to make the relevant settings. Finally, you can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. If cookies are not accepted, the functionality of our website may be limited.
Google LLC, based in the United States, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.
Further information and the data protection regulations regarding advertising and Google can be viewed at:
http://www.google.com/policies/technologies/ads/

Custom Audiences
Our website also uses communication tools from Facebook (see further details also in § 8 of this policy) and Google, in particular Facebook Custom Audiences, Facebook Lookalike Audiences and Google Customer Match. A non-reversible and non-personal hash code is generated from your usage data, which can be transmitted to Facebook and Google for analysis and marketing purposes. For further information about the purpose and scope of data collection and the further processing and use of the data as well as your setting options for the protection of your privacy, please refer to the data protection guidelines of Facebook at https://en-gb.facebook.com/policy.php or of Google https://policies.google.com/privacy?hl=en. If you wish to object to the use of Facebook Website Custom Audiences, you can do so in the Facebook privacy settings. Google users can control the ads they see on Google services, including Customer Match ads, in their Google Ads Settings.

Trbo
trbo GmbH Römerstraße 6 (www.trbo.com) , 80801 München, collects and stores data from our website. This data is converted into pseudonym user profiles to offer you personalized customer benefits. For this purpose, cookies may be used in order to recognize your browser and to link it to your previous visit of our website. The user profiles are used to analyse the online behaviour of customers and to improve the user friendliness and personal customization of our website. Without your explicit consent, your personalized data will not be matched with the pseudonym user profiles. You can object to the collection and storage of data by trbo GmbH any time by clicking on the following link: https://track2.trbo.com/optout.php?redirect=http%3A%2F%2Fuk.triumph.com%2Fcompany-legal%2FContact_PrivacyPolicy.html

Pinterest-Tag Conversion-Tracking
This website uses the conversion tracking technology "Pinterest Tag" of Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest").
If you have reached our website from a pin on Pinterest, we set a cookie on your computer which interacts with an implemented "tag" in the form of a JavaScript code from Pinterest. Cookies are small text files that are stored on your terminal device. These cookies lose their validity after 180 days and are not used for personal identification.
If the user is forwarded from a pin to Pinterest on pages of this website and the cookie has not yet expired, the tag records certain user actions predefined by us and can track them (e.g. completed transactions, leads, search queries on the website, calls to product pages). When such an action is performed, your browser sends an HTTP request from the cookie to the Pinterest server via the Pinterest tag, which contains certain information about the action (including type of action, time, browser type of device).
Through this transmission, Pinterest can generate statistics about the usage behavior on our website after forwarding a Pinterest Pin, which serve to optimize our offer.
If personal user data is processed, this is done in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in the statistical evaluation of the success of product ads on Pinterest and the purchasing behavior of the user and thus serves to optimize our online offering.
However, we do not receive any information with which users can be personally identified.
If you do not wish to participate in tracking, you can object to this by deactivating the Pinterest Tag Conversion Tracking cookie in your Internet browser under User Settings. You will then not be included in the conversion tracking statistics. Alternatively, you can use the deactivation page for EU consumers at https://www.youronlinechoices.com/uk/your-ad-choices
Check whether Microsoft advertising cookies are set in your browser and deactivate them.
For more information about Pinterest's privacy policy, please visit the following Web address: https://policy.pinterest.com/en/privacy-policy
To the extent required by law, we have obtained your consent to the processing of your data as described in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time with effect for the future. In order to exercise your right of withdrawal, please follow the procedure described above.

9) Tools and Miscellaneous

9.1 Google Maps

Our website uses Google Maps (AP’I) of Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Maps is a web service for displaying interactive (country) maps in order to display geographical information visually. Using this service will show you our location and will make it easier for you to find us.

When you access the sub-pages that contain the Google Maps map, information about your use of our website (such as your IP address) is transmitted to and stored by Google on servers in the United States. This is regardless of whether Google provides a user account that you are logged in with or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google saves your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation takes place according to Art. 6 (1) point f GDPR on the basis of the legitimate interests of Google in the insertion of personalized advertising, market research and/or demand-oriented design of its website. You have the right to object to the creation of these user profiles. If you want to do so, you must contact Google to exercise this right.

Google LLC, based in the United States, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.

If you do not agree to the future transmission of your data to Google in the context of using Google Maps, you may completely deactivate the Google Maps web service by switching off the JavaScript application in your browser. In this case, Google Maps as well as the map display on this website cannot be used.
The Google terms of use can be found at: https://policies.google.com/terms?hl=en. The additional terms of use can be found at: https://www.google.com/intl/en-US_US/help/terms_maps.html.

You can find detailed information on data protection in connection with the use of Google Maps on Google's website ("Google Privacy Policy") at: https://policies.google.com/privacy?hl=en.

9.2 Friendly Captcha (Bot/Spam Protection).

We use the "Friendly Captcha" service on our website (www.friendlycaptcha.com).

This service is provided by Friendly Captcha GmbH, Am Anger 3-5, 82237 Woerthsee, Germany.

Friendly Captcha is a new type of privacy-friendly security solution to make it increasingly difficult for automated programs and scripts (so-called "bots") to use our website.

For this purpose, we have integrated a program code from Friendly Captcha into our website (e.g. for contact forms) so that the visitor's end device can establish a connection to Friendly Captcha's servers in order to receive a computational task from Friendly Captcha. The visitor's end device solves the computational task, which requires certain system resources, and sends the computational results to our web server. Our server contacts the Friendly Captcha server via an API and receives a response stating whether the puzzle was solved correctly by the end device. Depending on the result, we can apply security rules to requests via our website and thus, for example, further process or reject them.

The data is used exclusively for the protection against spam and bots as described above.

Friendly Captcha does not set or read cookies on the visitor's end device.

IP addresses are only stored in hashed (one-way encrypted) form and do not allow us and Friendly Captcha to draw any conclusions about an individual person.

If personal data is stored, this data will be deleted after 30 days.

The legal basis for the processing is our legitimate interest pursuant to Art. 6 (1) lit. f GDPR in protecting our website against abusive access by bots, i.e. spam protection and protection against attacks (e.g. mass requests).

Further information on data protection when using Friendly Captcha can be found at https://friendlycaptcha.com/legal/privacy-end-users/

9.2 RIGHT TO OBJECT

IF, WITHIN THE FRAMEWORK OF A CONSIDERATION OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON THE GROUNDS THAT ARISE FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING REASONS WORTHY OF PROTECTION FOR PROCESSING WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA WHICH ARE USED FOR DIRECT MARKETING PURPOSES. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.

17) Duration of Storage of Personal Data

The duration of the storage of personal data is determined by the respective legal retention period (e.g. commercial and tax retention periods). After expiry of this period, the corresponding data will be routinely deleted, provided they are no longer necessary for the performance or initiation of the contract and/or there is no longer any legitimate interest on our part in the further storage.

As of: May 2023