General

As the operator of this website and as a company, we come into contact with your personal data. This refers to all data that provides information about you and with which you can be identified. In this privacy policy, we would like to explain to you how, for what purpose, and on what legal basis we process your data.

The entity responsible for data processing on this website and in our company is:

Jarkas
Ludwigsfelderstrasse 18
12629 Berlin
Phone: 015731078835
Email: Motaz.Jarkas@gmail.com

General Information

SSL or TLS Encryption

When you enter data on websites, place online orders, or send emails over the internet, you must always be aware that unauthorized third parties may access your data. There is no complete protection against such access. However, we do everything we can to protect your data as best as possible and to close security gaps as far as it is possible for us.

An important protection mechanism is the SSL or TLS encryption of our website, which ensures that data you transmit to us cannot be read by third parties. You can recognize the encryption by the lock icon in front of the entered web address in your browser and by the fact that our web address starts with https:// instead of http://.

Encrypted Payment Transactions

Payment data, such as account or credit card numbers, are particularly sensitive. Therefore, payment transactions with common payment methods are also carried out exclusively via an encrypted SSL or TLS connection.

How long do we store your data?

In some places in this privacy policy, we inform you about how long we or the companies that process your data on our behalf store your data. If such information is missing, we store your data until the purpose of the data processing no longer applies, you object to the data processing, or you revoke your consent to the data processing.

In the event of an objection or revocation, however, we may continue to process your data if at least one of the following conditions is met:

- We have compelling legitimate reasons for continuing the data processing that outweigh your interests, rights, and freedoms (only in the case of an objection to data processing; if the objection is directed against direct advertising, we cannot present legitimate reasons).
- The data processing is necessary to assert, exercise, or defend legal claims (does not apply if your objection is directed against direct advertising).
- We are legally obliged to retain your data.

In this case, we will delete your data as soon as the condition(s) no longer apply.

Data Transfer to the USA

We also use tools on our website from companies that transfer your data to the USA, store it there, and possibly further process it. The European Commission has adopted an adequacy decision for the EU-US Data Privacy Framework. This determines that the USA ensures an adequate level of protection for personal data from the EU that is transferred to US companies. This decision is based on new guarantees and measures introduced by the USA to meet data protection requirements. The adequacy decision includes, among other things, restrictions and guarantees regarding the access of US intelligence services to the data. Binding guarantees have been introduced to limit the access of US intelligence services to what is necessary and proportionate to protect national security. In addition, enhanced oversight of the activities of US intelligence services has been established to ensure that the restrictions on surveillance activities are adhered to. An independent redress mechanism has also been established to handle and resolve complaints from European citizens regarding access to their data. The EU-US Data Privacy Framework thus allows European companies to transfer data to certified US companies without having to introduce additional data protection guarantees. You can view a list of all certified companies at the following link: [https://www.dataprivacyframework.gov/s/participant-search](https://www.dataprivacyframework.gov/s/participant-search)

A change in the European Commission's decision cannot be ruled out.

Your Rights

Objection to Data Processing

IF YOU READ IN THIS PRIVACY POLICY THAT WE HAVE LEGITIMATE INTERESTS FOR PROCESSING YOUR DATA AND THEREFORE BASE THIS ON ART. 6 PARA. 1 SENTENCE 1 LIT. F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THIS UNDER ART. 21 GDPR. THIS ALSO APPLIES TO PROFILING BASED ON THE MENTIONED PROVISION. THE PREREQUISITE IS THAT YOU PROVIDE REASONS FOR THE OBJECTION THAT ARISE FROM YOUR PARTICULAR SITUATION. NO REASON IS REQUIRED IF THE OBJECTION IS DIRECTED AGAINST THE USE OF YOUR DATA FOR DIRECT ADVERTISING.

THE CONSEQUENCE OF THE OBJECTION IS THAT WE MAY NO LONGER PROCESS YOUR DATA. THIS DOES NOT APPLY IF ONE OF THE FOLLOWING CONDITIONS IS MET:

- WE CAN DEMONSTRATE COMPELLING LEGITIMATE REASONS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS.
- THE PROCESSING IS NECESSARY TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS.

THE EXCEPTIONS DO NOT APPLY IF YOUR OBJECTION IS DIRECTED AGAINST DIRECT ADVERTISING OR PROFILING CONNECTED WITH IT.

Further Rights

Revocation of Your Consent to Data Processing

Many data processing operations are based on your consent. You give this, for example, by ticking a corresponding box in online forms before sending the form or by allowing certain cookies when you visit our website. You can revoke your consent at any time without giving reasons (Art. 7 Para. 3 GDPR). From the time of revocation, we may no longer process your data. The only exception: We are legally obliged to retain the data for a certain period. Such retention periods exist, in particular, in tax and commercial law.

Right to Complain to the Supervisory Authority

If you believe that we have violated the General Data Protection Regulation (GDPR), you have the right to lodge a complaint with a supervisory authority under Art. 77 GDPR. You can contact a supervisory authority in the member state of your residence, your workplace, or the place of the alleged violation. The right to complain exists in addition to administrative or judicial remedies.

Right to Data Portability

Data that we process automatically based on your consent or in fulfillment of a contract must be provided to you or a third party in a common machine-readable format upon request. We can only transfer the data to another controller if this is technically feasible.

Right to Information, Deletion, and Correction

You have the right under Art. 15 GDPR to obtain free information about which personal data we have stored about you, where the data comes from, to whom we transmit the data, and for what purpose it is stored. If the data is incorrect, you have the right to correction (Art. 16 GDPR), and under the conditions of Art. 17 GDPR, you can request that we delete the data.

Right to Restriction of Processing

In certain situations, you can request under Art. 18 GDPR that we restrict the processing of your data. The data may then—apart from storage—only be processed as follows:

- With your consent
- To assert, exercise, or defend legal claims
- To protect the rights of another natural or legal person
- For reasons of important public interest of the European Union or a member state

The right to restriction of processing exists in the following situations:

- You have contested the accuracy of your personal data stored with us, and we need time to verify this. The right exists for the duration of the review.
- The processing of your personal data is unlawful or was unlawful in the past. The right exists as an alternative to deletion of the data.
- We no longer need your personal data, but you need it to assert, exercise, or defend legal claims. The right exists as an alternative to deletion of the data.
- You have objected under Art. 21 Para. 1 GDPR, and now your and our interests must be weighed against each other. The right exists as long as the outcome of the weighing is not yet clear.

Hosting and Content Delivery Networks (CDN)

External Hosting

Our website is hosted on a server of the following internet service provider (host):

Aut O'Mattic A8C Ireland Ltd.
Business Centre
No.1 Lower Mayor Street
International Financial Services Centre
Dublin 1, Ireland

How do we process your data?

The host stores all data of our website. This also includes all personal data that is automatically recorded or entered by you. This may include in particular: Your IP address, accessed pages, names, contact data and inquiries, as well as meta and communication data. In data processing, our host adheres to our instructions and processes the data only insofar as this is necessary to fulfill its obligations to us.

On what legal basis do we process your data?

Since we address potential customers through our website and maintain contacts with existing customers, the data processing by our host serves the initiation and fulfillment of contracts and is therefore based on Art. 6 Para. 1 lit. b) GDPR. In addition, it is our legitimate interest as a company to provide a professional internet presence that meets the necessary requirements for security, speed, and efficiency. In this respect, we also process your data on the basis of Art. 6 Para. 1 lit. f) GDPR.

Data Collection on This Website

Use of Cookies

Our website places cookies on your device. These are small text files that serve different purposes. Some cookies are technically necessary for the website to function at all (necessary cookies). Others are needed to perform certain actions or functions on the site (functional cookies). For example, it would not be possible to use the advantages of a shopping cart in an online shop without cookies. Still other cookies are used to analyze user behavior or optimize advertising measures. When we use third-party services on our website, e.g., to process payment transactions, these companies may also place cookies on your device when you visit the website (so-called third-party cookies).

How do we process your data?

Session cookies are only stored on your device for the duration of a session. As soon as you close the browser, they disappear on their own. Permanent cookies, on the other hand, remain on your device if you do not delete them yourself. This can, for example, lead to your user behavior being analyzed permanently. You can influence how your browser handles cookies through the settings:

- Do you want to be informed when cookies are set?
- Do you want to generally exclude cookies or for certain cases?
- Do you want cookies to be automatically deleted when you close the browser?

If you disable or do not allow cookies, the functionality of the website may be limited.

If we use cookies from other companies or for analysis purposes, we inform you about this in this privacy policy. We also ask for your consent in this regard when you visit our website.

On what legal basis do we process your data?

We have a legitimate interest in ensuring that our online offerings can be used by visitors without technical problems and that all desired functions are available to them. The storage of necessary and functional cookies on your device is therefore based on Art. 6 Para. 1 lit. f) GDPR. All other cookies are set on the basis of Art. 6 Para. 1 lit. a) GDPR, provided you give us your consent. You can revoke this consent at any time with effect for the future. If you have consented to the placement of necessary and functional cookies, the storage of these cookies is also based exclusively on your consent.

Server Log Files

Server log files record all requests and accesses to our website and log error messages. They also include personal data, in particular your IP address. However, this is anonymized by the provider after a short time, so we cannot assign the data to your person. The data is automatically transmitted by your browser to our provider.

How do we process your data?

Our provider stores the server log files to track activities on our website and to identify errors. The files contain the following data:

- Browser type and version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address (possibly anonymized)

We do not merge this data with other data but use it only for statistical analysis and to improve our website.

On what legal basis do we process your data?

We have a legitimate interest in ensuring that our website runs without errors. It is also our legitimate interest to obtain an anonymized overview of the accesses to our website. The data processing is therefore lawful under Art. 6 Para. 1 lit. f) GDPR.

Analysis Tools and Advertising

We use the following tools to analyze the behavior of our website visitors and to show you advertising.

Google Tag Manager

What is Google Tag Manager?

Tag management system for integrating tracking codes and conversion pixels from Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Where can you find more information about data protection at Google Tag Manager?

https://policies.google.com/privacy

On what basis do we transfer your data to the USA?

Based on the adequacy decision of the European Commission and the corresponding certification of the company.

How do we process your data?

We use Google Tag Manager. The tool helps us to integrate, manage, and play out tracking codes and conversion pixels on our website. Google Tag Manager itself does not create user profiles, does not place cookies on your device, and does not analyze your behavior as a user. However, it does record your IP address and transmits it to Google servers in the USA.

On what legal basis do we process your data?

We have a legitimate interest in a quick and uncomplicated integration and management of various tools on our website. The use of Google Tag Manager is therefore lawful under Art. 6 Para. 1 lit. f) GDPR. If you have consented to the transfer of your IP address, we process your data exclusively on the basis of Art. 6 Para. 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future.

Google Analytics

What is Google Analytics?

Tool for analyzing user behavior from Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Where can you find more information about data protection at Google Analytics?

https://support.google.com/analytics/answer/6004245?hl=de

On what basis do we transfer your data to the USA?

Based on the adequacy decision of the European Commission and the corresponding certification of the company.

How can you prevent data collection?

Among other things, with a browser plugin: https://tools.google.com/dlpage/gaoptout?hl=de

How do we process your data?

We are always interested in optimizing our web offering for visitors to our website and placing advertising optimally. Google Analytics helps us with this, a tool that analyzes user behavior and thus provides us with the necessary data basis for adjustments. Through the tool, we receive information about the origin of our visitors, their page views, their dwell time on the pages, and the operating system they use.

Standard Processing

To collect the data, Google Analytics uses cookies, device fingerprinting, or other technologies to recognize users. The data is transmitted to Google servers in the USA and, using the also recorded IP address, summarized in a profile that can be assigned to you or your device.

You can prevent Google from processing your data by installing a browser plugin provided by Google itself: https://tools.google.com/dlpage/gaoptout?hl=de

E-Commerce Tracking

We use the "E-Commerce Tracking" function of Google Analytics. This allows us to analyze the purchasing behavior of our website visitors and improve our online marketing campaigns. In e-commerce tracking, for example, your orders, average order values, shipping costs, and the time from viewing to purchasing a product are recorded. Google can summarize the data under a transaction ID and assign it to you or your device.

How long do we store your data?

User and event-level data stored with cookies, user IDs (e.g., user IDs), or advertising IDs is deleted or anonymized by Google after 50 months (see https://support.google.com/analytics/answer/7667196?hl=de).

On what legal basis do we process your data?

As a website operator, we have a legitimate interest in analyzing user behavior to optimize our web offering and the advertising placed there. The data processing is therefore lawful under Art. 6 Para. 1 lit. f) GDPR. If you have, for example, consented to the storage of cookies or otherwise consented to data processing by Google Analytics, the legal basis is exclusively Art. 6 Para. 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future.

IONOS WebAnalytics

What is IONOS WebAnalytics? Tool for analyzing user behavior
Who processes your data?

1&1 IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany

Where can you find more information about data protection at IONOS WebAnalytics?

https://www.ionos.de/terms-gtc/index.php?id=6

How do we process your data?

We are always interested in optimizing our web offering for users and placing advertising optimally. IONOS WebAnalytics helps us with this. The tool records how many people visit our website and how they behave, from which website they come to our website, where they are located, and which browser and operating system versions they use. In particular, the following data is stored:

- Referrer (previously visited website)
- Requested website or file
- Browser type and version
- Operating system used
- Device type used
- Time of access
- IP address in anonymized form (only used to determine the location of access)

All data is collected by IONOS WebAnalytics completely anonymously, according to its own statement. You cannot be identified. No cookies are placed on your device.

On what legal basis do we process your data?

As a website operator, we have a legitimate interest in the anonymized analysis of user behavior to optimize our web offering and the advertising placed there. The data processing is therefore lawful under Art. 6 Para. 1 lit. f) GDPR. If you have consented to data processing by IONOS WebAnalytics, the legal basis is exclusively Art. 6 Para. 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future.

WP Statistics

How do we process your data?

We are always interested in optimizing our web offering for users and placing advertising optimally. The WP Statistics plugin helps us with this, which analyzes user behavior and thus provides us with the necessary data basis for adjustments. The provider is Veronalabs, ARENCO Tower, 27th Floor, Dubai Media City, Dubai, Dubai 23816, United Arab Emirates. WP Statistics records, among other things, the following data:

- IP address
- Referrer
- Browsers used
- Origin of the user
- Search engine used
- Clicks, page views, and other actions

The data is stored exclusively locally.

On what legal basis do we process your data?

As a website operator, we have a legitimate interest in analyzing user behavior to optimize our web offering and the advertising placed there. The data processing is therefore lawful under Art. 6 Para. 1 lit. f) GDPR. If you have, for example, consented to the storage of cookies or otherwise consented to data processing, the legal basis is exclusively Art. 6 Para. 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future.

Google Ads

What is Google Ads?

Online advertising program from Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Where can you find more information about data protection at Google Ads?

https://policies.google.com/privacy?hl=de&gl=de

On what basis do we transfer your data to the USA?

Based on the adequacy decision of the European Commission and the corresponding certification of the company.

How do we process your data?

We use Google Ads. Google's advertising program allows us to display advertisements in the Google search engine or on third-party websites when visitors to our website enter certain search terms on Google (keyword targeting). Furthermore, we can place targeted advertisements based on user data available at Google (e.g., location data and interests) (audience targeting). We evaluate the collected data quantitatively by, for example, analyzing which search terms led to the display of our advertisements and how many advertisements resulted in corresponding clicks.

On what legal basis do we process your data?

As a website operator, we have a legitimate interest in placing and evaluating advertisements. The data processing is therefore lawful under Art. 6 Para. 1 lit. f) GDPR. If you have, for example, consented to the storage of cookies or otherwise consented to data processing by Google, the legal basis is exclusively Art. 6 Para. 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future.

Google Analytics Remarketing

What is Google Analytics Remarketing?

Tool for personalized advertising from Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Where can you find more information about data protection at Google Analytics Remarketing?

https://www.google.de/intl/de/policies/privacy/ and https://policies.google.com/technologies/ads

On what basis do we transfer your data to the USA?

Based on the adequacy decision of the European Commission and the corresponding certification of the company.

How can you prevent data processing?

By opting out of personalized advertising in your Google account or on this page: https://www.google.com/settings/ads/onweb/

How do we process your data?

We are always interested in placing our advertising optimally. The remarketing function of Google Analytics helps us with this.

Standard Processing

Remarketing means that we analyze your behavior on our website to assign you to a specific advertising target group and then show you suitable advertising messages when you visit other websites. In addition, we link the advertising target groups with cross-device functions of Google. This allows us to display interest-based, personalized advertising messages that are tailored to your usage and surfing behavior on one device (e.g., your mobile phone) also on another device (e.g., a tablet or PC).

Opting Out of Personalized Advertising

You can adjust the advertising settings in your Google account. To do this, click on the following link and log in: https://adssettings.google.com/authenticated. Outside of your Google account, you can opt out of personalized advertising at the following link: https://www.google.com/settings/ads/onweb/ (the setting then only applies to the currently used device and browser).

On what legal basis do we process your data?

As a website operator, we have a legitimate interest in the effective marketing of our services and products. The data processing is therefore lawful under Art. 6 Para. 1 lit. f) GDPR. If you have, for example, consented to the storage of cookies or otherwise consented to data processing by Google Analytics Remarketing, the legal basis is exclusively Art. 6 Para. 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future.

Google Conversion Tracking

What is Google Conversion Tracking?

Tool for analyzing user behavior from Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Where can you find more information about data protection at Google Conversion Tracking?

https://www.google.de/intl/de/policies/privacy/

On what basis do we transfer your data to the USA?

Based on the adequacy decision of the European Commission and the corresponding certification of the company.

How do we process your data?

We are always interested in optimizing our web offering for users and placing advertising optimally. For this purpose, we also use Google Conversion Tracking. With its help, we can record whether and how often visitors have clicked on certain buttons on our website and which products were viewed and purchased most frequently (conversion statistics). In the course of data collection and storage, we do not receive any information with which we can personally identify individual visitors. Google itself uses cookies or similar recognition technologies for identification.

On what legal basis do we process your data?

As a website operator, we have a legitimate interest in analyzing user behavior to optimize our web offering and the advertising placed there. The data processing is therefore lawful under Art. 6 Para. 1 lit. f) GDPR. If you have, for example, consented to the storage of cookies or otherwise consented to data processing by Google Conversion Tracking, the legal basis is exclusively Art. 6 Para. 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future.

Google Ads Remarketing

What is Google Ads Remarketing?

Online advertising program from Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Where can you find more information about data protection at Google Ads Remarketing?

https://policies.google.com/privacy?hl=de&gl=de

On what basis do we transfer your data to the USA?

Based on the adequacy decision of the European Commission and the corresponding certification of the company.

How do we process your data?

We use Google Ads Remarketing. Remarketing is an online marketing function in which advertisements are displayed to users who have already interacted with a website or online shop. Google Remarketing uses data from the Google advertising platform and Google Ads tracking to target advertising campaigns specifically at users who have already shown interest in a particular product or service. Google's advertising program allows us to display advertisements in the Google search engine or on third-party websites when visitors to our website enter certain search terms on Google (keyword targeting). Furthermore, we can place targeted advertisements based on user data available at Google (e.g., location data and interests) (audience targeting). We evaluate the collected data quantitatively by, for example, analyzing which search terms led to the display of our advertisements and how many advertisements resulted in corresponding clicks.

You can adjust the advertising settings in your Google account. To do this, click on the following link and log in: https://www.google.com/settings/ads/onweb/

On what legal basis do we process your data?

As a website operator, we have a legitimate interest in placing and evaluating advertisements. The data processing is therefore lawful under Art. 6 Para. 1 lit. f) GDPR. If you have, for example, consented to the storage of cookies or otherwise consented to data processing by Google, the legal basis is exclusively Art. 6 Para. 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future.

Newsletter

Mailchimp

What is Mailchimp?

Service for sending newsletters and analyzing recipient behavior Who processes your data?

Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA
Where can you find more information about data protection at Mailchimp?

https://mailchimp.com/legal/privacy and https://mailchimp.com/de/gdpr/

On what basis do we transfer your data to the USA?

Mailchimp has so-called standard contractual clauses that allow data transfer to the USA: https://mailchimp.com/legal/data-processing-addendum/#9._Jurisdiction-Specific_Terms

How do we process your data?

For our newsletter dispatch, we use Mailchimp. The service manages the data of our newsletter subscribers for us, sends our newsletter, and analyzes our newsletter campaigns.

If you want to receive our newsletter, we need your email address. We will also verify with a confirmation email (double opt-in procedure) whether you are really the owner of this email address. We do not collect any further data or only on a voluntary basis. We use your data exclusively for sending the newsletter. They are stored on a Mailchimp server in the USA.

When we send a newsletter via Mailchimp and you open it, a file contained in the newsletter automatically connects to the Mailchimp servers. This way, the service learns that the newsletter has been opened and registers all clicks on the links contained therein. In addition, Mailchimp collects technical information such as the time of retrieval, IP address, browser type, and operating system.

You can unsubscribe from the newsletter at any time.

How long do we store your data?

After you unsubscribe, the data will be deleted from the newsletter distribution list. Under certain circumstances, we may also add your email address to a blacklist; this is necessary, for example, if we have received an objection to advertising from you. The legal basis for storage in this case is Art. 6 Para. 1 lit. f) GDPR.

In addition, we reserve the right to delete the data at any time after the purpose of collection has ceased to exist or at our own discretion.

On what legal basis do we process your data?

By subscribing to the newsletter, you consent to data processing by Mailchimp. This is therefore lawful on the basis of Art. 6 Para. 1 lit. a) GDPR. You can revoke your consent by unsubscribing from the newsletter or by sending us an informal message. For us, this means that we may no longer send you newsletters from this point on.

Plugins and Tools

Google Fonts (Local Hosting)

We use fonts from the US company Google on our website. The fonts are installed locally, so no connection to Google's servers is made when you visit our website.

Further information about Google Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=de

Google reCAPTCHA

What is Google reCAPTCHA?

Test tool to distinguish between humans and computers from Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Where can you find more information about data protection at Google?

https://policies.google.com/privacy?hl=de

On what basis do we transfer your data to the USA?

Based on the adequacy decision of the European Commission and the corresponding certification of the company.

How do we process your data?

With Google reCAPTCHA, we check whether data entered in forms on our website comes from a human or a computer. For you, this means that the test tool analyzes your behavior as a visitor to our website based on various characteristics. The analysis does not start only when you use the test tool but already when you visit our website. Various data is collected, e.g., the IP address, the dwell time on our website, and mouse movements made. The data is forwarded to Google.

On what legal basis do we process your data?

As a company, we have a legitimate interest in protecting our web offerings from spam and abusive spying. The data processing is therefore lawful under Art. 6 Para. 1 lit. f) GDPR.

If you have consented to data processing, we process your data exclusively on the basis of Art. 6 Para. 1 lit. a) GDPR. You can revoke your consent at any time. From the time of revocation, we may no longer process your data.

hCaptcha

What is hCaptcha?

Test tool to distinguish between humans and computers
Who processes your data?

Intuition Machines, Inc., 2211 Selig Drive, Los Angeles, CA 90026, USA
Where can you find more information about data protection at hCaptcha?

https://www.hcaptcha.com/privacy

On what basis do we transfer your data to the USA?

hCaptcha adheres to the standard contractual clauses of the European Commission (https://www.hcaptcha.com/privacy)

How do we process your data?

With hCaptcha, we check whether data entered in forms on our website comes from a human or a computer. For you, this means that the test tool analyzes your behavior as a visitor to our website based on various characteristics. The analysis does not start only when you use the test tool but already when you visit our website. Various data is collected, e.g., the IP address, the dwell time on our website, and mouse movements made. The data is forwarded to the USA.

On what legal basis do we process your data?

As a company, we have a legitimate interest in protecting our web offerings from spam and abusive spying. The data processing is therefore lawful under Art. 6 Para. 1 lit. f) GDPR.

If you have consented to data processing, we process your data exclusively on the basis of Art. 6 Para. 1 lit. a) GDPR. You can revoke your consent at any time. From the time of revocation, we may no longer process your data.

Wordfence

What is Wordfence?

Firewall and security scanner for WordPress websites
Who processes your data?

Defiant Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA

Where can you find more information about data protection at Wordfence?

https://www.wordfence.com/privacy-policy/

On what basis do we transfer your data to the USA?

On the basis of standard contractual clauses of the European Commission (see https://www.wordfence.com/help/general-data-protection-regulation/)

How do we process your data?

To protect our website from malicious traffic, we use the Wordfence plugin. It identifies and blocks data that contains malicious code or content and checks core files, themes, and plugins for malware, faulty URLs, backdoors, SEO spam, malicious redirects, and code injections. To carry out these measures, our website is permanently connected to the servers of Defiant Inc. in the USA. On these, the accesses to our website are compared with the data stored in the Wordfence database and, if necessary, blocked.

On what legal basis do we process your data?

As a website operator, we have a legitimate interest in protecting ourselves from malicious traffic. The data processing is therefore lawful under Art. 6 Para. 1 lit. f) GDPR.

If you have consented to data processing, we process your data exclusively on the basis of Art. 6 Para. 1 lit. a) GDPR. You can revoke your consent at any time. From the time of revocation, we may no longer process your data.

eCommerce and Payment Providers

## Customer and Contract Data

How do we process your data?

When we conclude a contract with you, we need certain personal data from you. We collect, process, and use this data only insofar as it is necessary to establish, structure, or amend our legal relationship. If you can only use our services via our website or if the services are billed via the website, we also collect usage data, provided this is necessary to enable you to use our offer or to bill the service used.

How long do we store your data?

We store your data until our legal relationship ends, unless we are legally obliged to retain the data for a longer period.

On what legal basis do we process your data?

We store your data to fulfill the contract with you or to carry out pre-contractual measures. The basis for data processing is therefore Art. 6 Para. 1 lit. b) GDPR.

Data Transfer for Goods Delivery

How do we process your data?

If you order goods from us, we transmit your data to companies that we commission with the delivery and/or through which we process the payment. Only data that is necessary for the commissioned company to execute the specific order is transmitted. If we want to pass on data beyond this, we will obtain your consent. We do not pass on your data for advertising purposes.

On what legal basis do we process your data?

We pass on your data to fulfill the contract we have concluded with you. The basis for data processing is therefore Art. 6 Para. 1 lit. b) GDPR.

Data Transfer for Use of Services and Digital Content

How do we process your data?

For the processing of the payment, we transmit your data to a payment service provider or the bank commissioned with the payment processing. We only pass on data that is absolutely necessary for the payment process. If we want to pass on data beyond this, we will obtain your consent.

On what legal basis do we process your data?

We pass on your data to fulfill the contract we have concluded with you. The basis for data processing is therefore Art. 6 Para. 1 lit. b) GDPR. If you have consented to the transfer of your data, the data processing is based on Art. 6 Para. 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future.

Payment Services

To make it convenient for you to pay for your purchases on our website, we use the services of payment service providers, i.e., external companies that process payments for us. You can find out which ones these are in the list at the end of this section.

How do we process your data?

For the payment process, you must provide certain personal data, e.g., your name, your account details, or credit card number. We pass this data on to the respective payment service provider. For the transaction itself, the respective contractual and data protection provisions of the respective services apply.

On what legal basis do we process your data?

We pass on your data to fulfill the contract we have concluded with you. The basis for data processing is therefore Art. 6 Para. 1 lit. b) GDPR. In addition, we have a legitimate interest in processing purchases as quickly, conveniently, and securely as possible. The legal basis is therefore also Art. 6 Para. 1 lit. f) GDPR. If you have consented to the transfer of your data, the data processing is based on Art. 6 Para. 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future.

Which payment services do we use?

Stripe

What is Stripe?

Online payment service
Who processes your data?

Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland
Where can you find more information about data protection at Stripe?

https://stripe.com/de/privacy

On what basis do we transfer your data to the USA?

Based on the adequacy decision of the European Commission and the corresponding certification of the company.