Privacy statement and Data protection

The protection of your personal data is our top priority. Therefore, we inform you about the processing of your personal data on our website and in the company. The processing of personal data is carried out in accordance with the provisions of the General Data Protection Regulation (GDPR), the new Federal Data Protection Act (BDSG-new) and the Telemedia Act (TMG).

A. Name and address of the person responsible

F&G Digitalspezialist GmbH

Sutthauser Str. 76

49080 Osnabrück

Represented by the management:

Dr. Hans-Hermann Graen (CEO)

Phone: +49 541 2028170

Email: service@digitalspezialist.de

B. Contact details of the data protection officer

Mr. Matthias Wöstemeyer, C&S Consulting, Oberbergstraße 45, 49124 Georgsmarienhütte (Germany)
E-Mail: datenschutz@digitalspezialist.de

C. Processing of personal data on our website

1. Provision of the website and creation of log files

Simply visiting our website and accessing the information it contains does not require you to provide personal data. During your visit to our website, we only collect and use data that your internet browser automatically transmits to us:

• Date and time of access to one of our Internet pages

• Your browser type

• Your browser settings

• Your IP address

• The pages you have visited

• Host name of the accessing computer

• Referring URL

We use this data to technically enable you to visit our website. Furthermore, we use this data for statistical purposes and to improve the design and layout of our website. We store the IP address for the purpose of guaranteeing and maintaining IT security (e.g. detection and defense against so-called DOS attacks) and functionality.

The legal basis for the temporary storage of the data is Article 6 Paragraph 1 Letter f GDPR.

2. Personal data

Personal data is only recorded if you voluntarily provide it in the context of a contact request, a newsletter registration or an online order.

3. Inquiries by email, telephone, fax or contact form

If you contact us by e-mail, telephone or contact form, your request including all personal data resulting therefrom (e.g. name, e-mail address, telephone number, address data) will be stored and processed by us for the purpose of processing your request, recipient of this data are those departments / employees who need your data to fulfill your request.

This data is processed on the basis of Article 6 (1) (b) GDPR, provided that your request is related to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries sent to us (Art. 6 Para. 1 lit. f GDPR) or on your consent (Art. 6 Para. 1 lit. a GDPR) if this was queried.

The data you send to us via contact requests will remain with us until you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

4. Online order / customer account

When using our web shop, the following data is transmitted to us and stored

• First name

• Last name

• E-mail address

• Billing address

• Shipping address

The data sent through the form are transmitted to us in encrypted form.

Legal basis:

For orders in the web shop / setting up a customer account, the legal basis for processing is Art. 6 Paragraph 1 Letter b GDPR.

Storage period:

Your order and image data are stored on our in-house servers and archived in accordance with the statutory retention periods. Your image data will be kept accessible for up to 6 weeks and then permanently deleted. The storage of the image data is used to answer your queries about orders competently and quickly, in order to prevent data loss and to be able to process additional services for you easily, quickly and conveniently.

With your consent, after your digitization order has been completed, your image data will be made accessible to you in a protected area with a personal access code, so that you can view your images online immediately after completion. You will receive the access data with the personal dispatch notification. Here, too, your image data will be kept accessible for up to 6 weeks and then permanently deleted. The image data is stored in a cloud service operated by us on a server at STRATO AG, Pascalstrasse 10, 10587 Berlin in Germany.

You will receive the data carrier with the digital copies commissioned by post. The data carriers supplied are unencrypted and not copy-protected.

When you register for the newsletter, your email address will only be used for our own advertising purposes with your consent until you unsubscribe from the newsletter. Unsubscribing is free and possible at any time. After the contract has been fully processed, all personal data will initially be stored taking into account retention periods under tax and commercial law and then deleted after the deadline, unless you have consented to further processing and use.

When data recovery jobs are commissioned, an attempt is made to restore all of the data on the commissioned data carrier. The data carrier analysis is used to assess the technical possibilities and the associated effort for a recovery. When the order is placed, the restored data is temporarily stored and transferred to a new data carrier of the appropriate type and size. After completing the order, all restored data will be completely deleted from our systems after 6 weeks, unless you have consented to further processing and use. The storage of the data is used to help you quickly and easily in the event of problems and to prevent data loss.

D. Processing of personal data in the company

We process personal data that we receive from you as part of the request for information, an inquiry, business initiation, contract processing, orders via the web shop or our business relationship. To the extent necessary for the performance of the contract, we process personal data that we have legitimately received from other companies or from other third parties (e.g. for the execution of orders, for the fulfillment of contracts or on the basis of your consent). Relevant personal data are personal details (name, address and other contact details, birthday, etc.). In addition, this can also be order data, data from the fulfillment of our contractual obligations, advertising and sales data, documentation data, as well as other data comparable to the categories mentioned.

1 Purposes and legal basis of the processing

The purposes of processing are primarily based on the service you have commissioned or requested. The processing is necessary for the fulfillment of a contract or for the implementation of pre-contractual measures (Art. 6 Paragraph 1 Letter b GDPR).

• The processing of personal data takes place for the provision and brokering of commercial transactions, in particular for the execution of our contracts or pre-contractual measures with you and the execution of your orders. Furthermore, for the execution of inquiries or orders when using our web shop.

The processing takes place within the scope of the balancing of interests (Art. 6 Para. 1 Letter f GDPR). If necessary, we process your data beyond the actual fulfillment of the contract to safeguard our legitimate interests or those of third parties.

• Data exchange with credit agencies (SCHUFA, Creditreform) to determine creditworthiness and default risks

• Advertising or market and opinion research, provided you have not objected to the use of your data

• Handling inquiries and requests for information

• Assertion of legal claims and defense in legal disputes

• Guarantee of IT security

• Prevention and investigation of criminal offenses

• Measures for business management and further development of services and products.

You have given your consent to the processing of your personal data for one or more specific purposes (Art. 6 Paragraph 1 Letter A GDPR).

• Insofar as you have given us your consent to the processing of personal data for certain

Purposes (e.g. advertising, newsletter dispatch, publication of photos or personal data), the legality of this processing is given on the basis of your consent.

• A given consent can be revoked at any time. This also applies to the

Revocation of declarations of consent that were given to us before the GDPR came into force, i.e. before May 25, 2018.

• The revocation is only effective for the future. Processing that took place before the revocation,

are not affected.

The processing is necessary to fulfill a legal obligation to which we are subject (Art. 6 Paragraph 1 Letter C GDPR).

• As a company, we are subject to various legal obligations in the context of tax and social security control and reporting obligations. Further requirements can arise from the prevention of fraud and money laundering and the fulfillment of the requirements of the EU Anti-Terrorism Regulation, among others.

2 recipients or categories of recipients of the data

Within the company, those departments receive your data that need it to fulfill our contractual and legal obligations. Processors employed by us (Art. 28 GDPR) can also receive data for these purposes. These are companies in the categories of billing services, IT services, printing services, postal services, telecommunications, document archiving / disposal as well as sales and marketing.

Outside the company, companies may receive your data that they need to fulfill our contractual obligations. Under these conditions, recipients of personal data can e.g. B. be:

• Tax advisors, auditors, consultants

• Lawyers (disputes, debt collection, etc.)

• Technicians / craftsmen (maintenance, repair measures)

• Transport and logistics companies

• Debt collection companies

• Banks / savings banks

• Credit agencies (SCHUFA, Creditreform)

3 Duration of storage or criteria for determining the duration

If necessary, we process and store your personal data for the duration of our business relationship, which also includes, for example, the initiation and processing of a contract. In addition, we are subject to various retention and documentation obligations, which essentially result from the Commercial Code (HGB) and the Tax Code (AO). The periods for storage and documentation specified there are six to ten years.

Finally, the storage period is also assessed according to the statutory limitation periods, which, for example, according to Sections 195 et seq. Of the German Civil Code (BGB) are usually 3 years; if evidence is required to be preserved, e.g. in the context of legal proceedings, the limitation periods of the Civil Code (BGB) can be up to 30 years if a judicial title is available.

After the contractual relationship has ended, the data will be deleted after the statutory retention requirements have expired.

4 references to the rights of those affected

Every data subject has the following data protection rights under the GDPR:

• Right to information according to Art. 15 GDPR

• Right to correct incorrect data according to Art. 16 GDPR

• Right to deletion according to Art. 17 GDPR

• Right to restriction of processing according to Art. 18 GDPR

• Right to data portability according to Art. 20 GDPR

• Right to object according to Art. 21 GDPR

To exercise your above-mentioned rights and to revoke your consent, please contact the above-mentioned responsible body.

You have the right to lodge a complaint with a supervisory authority. You can assert this right with a supervisory authority in the member state of your place of residence, your place of work or the place of the alleged violation.

Before you contact the responsible supervisory authority with a complaint, we would like to ask you to clarify this matter with our data protection officer.

5 transfer to a third country

A transfer of your data to third countries (outside the EU or the EEA) takes place exclusively and with the assurance of suitable guarantees, insofar as this

• to carry out your orders or to fulfill the (pre-) contractual measures

• required by law

• legitimized by your consent

or the company's interest in processing outweighs the need for protection of your data (Art. 6 Para. 1 f) GDPR).

6 Voluntariness and obligation to provide personal data

As part of our business relationship, the personal data must be provided that is necessary for the establishment and implementation of a business relationship and the fulfillment of the associated contractual obligations or that we are legally obliged to collect. Without this data, we are unable to conclude or execute a contract.

7 Automated decision making including profiling

In principle, we do not use exclusively automated decision-making within the meaning of Art. 22 GDPR to establish and implement the business relationship.

E. Cookies / plugins / tools

We use so-called "cookies" on our website. These are small text files that are sent from our web server to your computer in order to identify it for the duration of your visit. We do not collect any personal data via these cookies.

Our website can also be displayed without storing cookies. You can deactivate the storage of cookies in the settings of your browser or set it so that it informs you about the intended storage by a website. In this case you decide whether to accept the cookie. For technical reasons, however, it is necessary for the full functionality of our website to allow the temporary cookies in full.

1 YouTube

Our website contains at least one plug-in or video player from YouTube, belonging to Google Inc., based in San Bruno / California, USA. As soon as you visit a page on our website that is equipped with a YouTube plug-in or video player, a connection to the YouTube servers is established (only if you have given your prior consent in accordance with Art. 6 Paragraph 1 Letter a). The YouTube server is informed which specific page of our website you have visited. If you are also logged into your YouTube account, you would enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this possibility of assignment if you log out of your account beforehand.

Further information on the collection and use of your data by YouTube can be found in the information on data protection there at www.google.de/intl/de/policies/privacy/.

2 payment service e.g. PayPal

We integrate payment services from third-party companies on our website. When you make a purchase from us, your payment data (e.g. name, payment amount, account details, credit card number) will be processed by the payment service provider for the purpose of payment processing. The respective contract and data protection provisions of the respective provider apply to these transactions. The use of payment service providers is based on Art. 6 Para. 1 lit. b GDPR (contract processing) and in the interest of a smooth, convenient and secure payment process (Art. 6 Para. 1 lit. f GDPR). Insofar as your consent is requested for certain actions, Article 6 (1) (a) GDPR is the legal basis for data processing; Consents can be revoked at any time for the future.

The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”).

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https: //www.paypal.com/de/webapps/mpp/ua/pocpsa-full.

Details can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

3 ad4mat

We use "ad4mat", a service of advanced store GmbH, Alte Jakobstrasse 79/80, 10179 Berlin, Germany (hereinafter referred to as: "advancedstore") on our website. ad4mat stores and processes information about your user behavior on our website. Among other things, ad4mat uses cookies for this, i.e. small text files that are stored locally in the cache of your web browser on your end device and that enable an analysis of your use of our website.

We use ad4mat for marketing and optimization purposes, in particular to analyze the use of our website and to continuously improve individual functions and offers as well as the user experience. Through the statistical evaluation of user behavior, we can improve our offer and make it more interesting for you as a user. This also includes our legitimate interest in the processing of the above data by the third party provider. The legal basis is Article 6, Paragraph 1, Sentence 1, Letter f) GDPR. Insofar as your consent is requested for certain actions, Article 6 (1) (a) GDPR is the legal basis for data processing; Consents can be revoked at any time for the future.

https://www.ad4mat.com/de/adchoices/

http://www.youronlinechoices.com/de/praferenzmanagement/

Please note that this setting will be deleted if you delete your cookies. You can object to the collection and forwarding of personal data or prevent the processing of this data by deactivating the execution of Java Script in your browser. You can also prevent the execution of JavaScript code altogether by installing a JavaScript blocker (e.g. https://noscript.net/orhttps: //www.ghostery.com). We would like to point out that in this case you may not be able to use all functions of our website to their full extent.

Third-party information: advanced store GmbH, Alte Jakobstraße 79/80, 10179 Berlin, Germany. Further information from the third-party provider on data protection can be found on the following website: https://www.ad4mat.com/de/datenschutz/

4 adition

We use "ADITION" on our website, a behavioral targeting service from ADITION technologies AG, Oststrasse 55, D-40211 Düsseldorf, Germany ("ADITION"). Among other things, ADITION uses cookies, i.e. small text files that are stored locally in the cache of your web browser on your device. ADITION enables us to display interest-related advertisements. ADITION also uses the information stored in the cookies for statistical surveys. ADITION does not save any personal data by setting cookies. All information is anonymized. The cookies only contain statistical information, such as the frequency with which an advertisement is displayed, the display date, the web browser you are using or the operating system you are using. The information transmitted to ADITION is stored on servers in the European Union.

We use ADITION for marketing and optimization purposes, in particular to analyze the use of our website in order to be able to continuously improve individual functions and offers as well as the user experience and to place relevant and interesting ads for you. This also includes our legitimate interest in the processing of the above data by the third party provider. The legal basis is Article 6, Paragraph 1, Sentence 1, Letter f) GDPR. Insofar as your consent is requested for certain actions, Article 6 (1) (a) GDPR is the legal basis for data processing; Consents can be revoked at any time for the future.

You can prevent the installation of cookies by deleting existing cookies and deactivating the storage of cookies in the settings of your web browser. We would like to point out that in this case you may not be able to use all functions of our website to their full extent. You can also prevent ADITION from collecting the aforementioned information by setting an opt-out cookie on one of the websites linked below: http://www.adition.com/kontakt/datenschutz/? Optout = trueoderhttps : //www.adition.com/kontakt/datenschutz/

5 DoubleClick

We use "DoubleClick" on our website, an online marketing tool from Google IrelandLimited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as "Google"). Among other things, DoubleClick uses cookies, i.e. small text files that are stored locally in the cache of your web browser on your device. Google uses a cookie ID to record which advertisements are placed in which web browser. This can prevent advertisements from being displayed multiple times. DoubleClick can also use the cookie IDs to record what are known as conversions that relate to ad requests. This is the case, for example, if you see a DoubleClick ad and later go to the advertiser's website with the same web browser and buy something there. According to information from Google, the aforementioned cookies do not contain any personal data. By using DoubleClick, your browser automatically establishes a direct connection to the Google server. We have no influence on the extent and further use of the data that is collected by Google through the use of DoubleClick. To the best of our knowledge, Google receives the information that you have accessed the relevant part of our website or clicked on an ad from us. If you have a user account with Google and are registered, Google can assign the visit to your user account. Even if you are not registered with Google or have not logged in, there is a possibility that Google will find out your IP address and save it.

We use DoubleClick for marketing and optimization purposes, in particular to show you relevant and interesting ads, to improve campaign performance reports or to avoid seeing the same ads multiple times. This also includes our legitimate interest in the processing of the above data by the third party provider. The legal basis is Article 6, Paragraph 1, Sentence 1, Letter f) GDPR. Insofar as your consent is requested for certain actions, Article 6 (1) (a) GDPR is the legal basis for data processing; Consents can be revoked at any time for the future.

You can prevent the installation of cookies by deleting existing cookies and deactivating the storage of cookies in the settings of your web browser. We would like to point out that in this case you may not be able to use all functions of our website to their full extent. It is also possible to prevent the storage of cookies by setting your web browser so that cookies from the domain “www.googleadservices.com” are blocked (https://adssettings.google.de). Please note that this setting will be deleted if you delete your cookies. You can also deactivate interest-based ads via the linkhttps: //optout.aboutads.info. We would like to point out that this setting will also be deleted if you delete your cookies.

Third party information: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland.

Further information on the use of data by Google, on setting and objection options as well as on data protection can be found on the following Google website:

Data protection declaration: https: //policies.google.com/privacy? Hl = de & gl = de

6 AppNexus

This website uses AppNexus, a service from AppNexus Inc., 28 W 23rd Street, 4th floor, New York, New York - 10010, USA. AppNexus uses cookies, among other things, which are stored on your computer and which enable an analysis of the use of the website, and tracking pixels. In the context of use, data, in particular the IP address and activities of the user, can be transmitted to a server operated by AppNexus Inc. and stored there. AppNexus Inc. may transfer this information to third parties if this is required by law or if this data is processed by third parties.

The legal basis for this processing is your consent in accordance with Article 6 (1) (a) GDPR.

You can prevent the collection and forwarding of personal data (in particular your IP address) and the processing of this data by deactivating the execution of Java Script in your browser or by installing a tool such as 'NoScript'. Further information can be found in the data protection declaration of AppNexus. You can also opt-out for AppNexus.

7 Bidswitch

We use BidSwitch, a service from BidSwitch 19 West 24th Street, 6th Floor, New York, NY 10010, USAU. BidSwitch uses cookies and tracking pixels. As part of the use of the website, data such as the IP address and activities of the users can be transmitted to a BidSwitch server and stored there. It cannot be ruled out that Bidswitch may transfer this information to third parties. In particular if this is required by law.

The legal basis for this processing is your consent in accordance with Article 6 (1) (a) GDPR.

You can object to the collection and forwarding of personal data or prevent the processing of this data by deactivating the execution of Java Script in your browser or installing a tool such as "Ghostery". Further information can be found in the data protection declaration fromBidSwitch. You can also set an opt-out for BidSwitch.

8 Improve Digital

Improve Digital (www.indexexchange.com) uses technology to present advertisements that are relevant to you. Improve Digital is provided by Improve Digital GmbH, based in Nussbaumstrasse 10, 80336 Munich.

The legal basis for this processing is your consent in accordance with Article 6 (1) (a) GDPR.

If you do not want Improve Digital to continue collecting anonymized data, please click on the opt-out link below. This opt-out cookie deletes the information stored so far and prevents further collection of information.

Opt-out: www.improvedigital.com/opt-out-page/

9 Proven Expert

Our website uses plugins from the provenexpert.com website operated by Expert Systems AG. The operator of the website is Expert Systems AG, Quedlinburger Straße 1, 10589 Berlin.

If you visit one of our pages equipped with a ProvenExpert plug-in, a connection to the servers of Expert Systems AG will be established. The ProvenExpert server is informed which of our pages you have visited.

ProvenExpert is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Article 6 (1) (f) GDPR. If your consent is requested for certain actions, Article 6 (1) (a) GDPR is the legal basis for data processing; Consents can be revoked at any time for the future.

Further information on the handling of user data can be found in ProvenExpert AG's data protection declaration at: https://www.provenexpert.com/de-de/datenschutzbestektiven/.

10 Adcell Affiliate Program

Adcell is a German affiliate network that offers affiliate marketing. Affiliate marketing is an internet-based form of sales. It enables commercial operators of websites (so-called merchants or advertisers) to place advertisements on third-party websites (so-called affiliates or publishers). This advertising is usually remunerated through click or sale commissions. The merchant provides an advertising medium (e.g. an advertising banner or other suitable means of Internet advertising) via the affiliate network. These advertising materials are then integrated into their own websites by an affiliate or advertised via other channels (e.g. keyword advertising or email marketing).

Adcell is operated by Firstlead GmbH, Rosenfelder Str. 15-16, 10315 Berlin, Germany.

Adcell places a cookie on your computer. What cookies are has already been explained above. Adcell's tracking cookie does not store any personal data. Only the identification number of the affiliate, i.e. the partner referring the potential customer, as well as the order number of the visitor to a website and the clicked advertising material are saved. The purpose of storing this data is to process commission payments between a merchant and the affiliate, which are processed via the affiliate network, i.e. Adcell.

The legal basis for this processing is your consent in accordance with Article 6 (1) (a) GDPR.

You can prevent the setting of cookies by our website, as already shown above, at any time by means of a corresponding setting in the Internet browser used and thus permanently object to the setting of cookies.

Such a setting in the internet browser used would also prevent Adcell from setting a cookie on your computer. In addition, cookies already set by Adcell can be deleted at any time via your Internet browser or other software programs.

Adcell's current data protection regulations can be viewed at https://www.adcell.de/news/mektiven/dsgvo/datenschutz-grundverordnung-bei-adcell.

F. Security Measures

We use technical and organizational security measures to protect personal data, especially against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons. Our security measures are continuously improved in line with technological developments. We would like to point out that when data is transmitted on the Internet, despite all security measures, third parties may take note of or falsify this data.

G. Contact

If you have any questions or suggestions about this data protection declaration, please contact the contact address given in the legal notice.

H. Updates to our privacy policy

The ongoing technical development in the field of IT technology and the Internet also requires an adaptation of the existing data protection declaration. We therefore reserve the right to make additions or changes to this data protection declaration.

Status: 15.04.2022