Data Pri­vacy State­ment In the following we provide you with information about how we collect personal data when you use our website. Personal data is all data which relates to you personally, such as your name, your address, your email addresses and your user behaviour. Personal data is all data which relates to you personally, such as your name, your address, your email addresses and your user behaviour. We have put extensive technical and operational precautions in place to protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security procedures are regularly reviewed and updated to keep pace with technological developments. 1 Controller responsible for data processing The controller in accordance with Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is ALBIS Distribution GmbH & Co. KG Mühlenhagen 35 20539 Hamburg Telephone: +49 (0) 40 78 10 50 Email: info@albis.com 2 How to contact our data privacy officer You can contact our external data privacy officers at dataprotection@albis.com or at our postal address, addressed to ‘The Data Privacy Officer’. 3 Your rights You have the following rights vis-à-vis us regarding your personal data: 3.1 General rights You have the right to be provided with information about your personal data, to have your personal data corrected or erased, to restrict the scope of processing of your personal data or to object to the processing of personal data concerning you and to data transferability. If data is processed with your consent, you have the right to revoke your consent at any time with future effect. 3.2 Rights where there is a legitimate interest in processing data Under Art. 21 (1) GDPR you have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is pursued on the basis of Art. 6 (1) (e) GDPR (data processing in the public interest) or Art. 6 (1) (f) GDPR (data processing pursued for purposes of legitimate interest); this also applies to any profiling based on this regulation. If you object, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. 3.3 Rights for direct marketing If we process your data for direct marketing purposes you have the right under Art. 21 (2) GDPR to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object to our processing for direct marketing purposes, we will no longer process your personal data for these purposes. 3.4 Right to complain to a supervisory authority You also have the right to complain to a competent data protection supervisory authority about the processing of your personal data by us. 4 What personal data do we collect when you visit our website? If you visit our website for purely informational purposes and do not register or transmit your data to us in any other way, we will collect only the personal data which your browser transmits to our server. If you wish to view our website, we collect the data detailed below, which is needed by us for technical reasons so that we can display our website to you and to guarantee stability and security. The legal basis for this is Art. 6 (1) (f) GDPR. –IP-address, date and time of your enquiry, time zone difference from Greenwich Mean Time (GMT), content of request (specific page), access status/HTTP status code, data volume transmitted in each instance, website from which the request originates, browser, operating system and its interface, language and version of the browser software. ALBIS Distribution GmbH & Co. KG is not able to attribute this data to any particular person. We do not combine this data with other data sources. The data is erased after statistical evaluation and is used exclusively to enhance the attractiveness, content and functionality of our web pages. 5 Contacting us by email or using the contact form When you contact us by email or using a contact form, the data transmitted by you (your email address and your name and the text of your communication) are stored by us to enable us to reply to your enquiry. If we request the input of details on our contact form which are not necessary for contacting us, we always state that providing such details is optional. We can use these details to concretise your enquiry and to enable us to deal better with the matter for you. We stress that transmitting these details is purely voluntary and with your consent – see Art. 6 (1) (a) GDPR. If these details concern channels of communication (such as email address or telephone number) you also give your consent to our contacting you using this channel of communication to reply to your enquiry. You may of course revoke this consent at any time with future effect. We erase data gathered in this connection once storage is no longer required, or, if there is a statutory obligation to keep the data, we restrict the extent of processing. 6 Newsletter 6.1 General information By giving your consent pursuant to Art. 6 (1a) GDPR, you can subscribe to our Newsletter in which we inform you regarding our current offers. The dispatch and administration of the Newsletter are handled by a service provider. We use a service provider because this provider guarantees that the emails are sent reliably and, in all probability, will not end up in your spam filter. The use of the service provider also enables optimisation of the registration and de-registration procedure. The service provider is therefore used on the basis of our justified interest pursuant to Art. 6 (1) (f) GDPR, and undertakes to comply with the GDPR. Our service provider, a company from the USA, uses several computing centres in Europe. The data do not leave the European Economic Area. We use the so-called double opt-in procedure for subscribing to our Newsletter. This means that, following your registration, we send an email to the email address provided, in which we request your confirmation that you wish to receive the Newsletter. We also store the respective IP addresses used by you as well as the time of registration and confirmation. The purpose of this procedure is to enable us to verify your registration and to clarify any misuse of your personal data. In order to receive the newsletter, you must provide your email address and your language preference. Following your confirmation, we store your email address and language preference for the purpose of sending the Newsletter. The legal basis is Art. 6 (1a) GDPR. You can revoke your consent to sending of the Newsletter at any time and unsubscribe to our Newsletter. You can declare revocation by clicking on the link provided in each Newsletter email, or via contact request to the Data Protection Officer stated above. Your registration data will however remain stored for a further 3 years, so that we can provide evidence of the consent issued by you, as required by the law. This is a justified interest as defined in Art. 6 (1) (f) GDPR. Nevertheless, the processing of these data will be restricted to the purpose of possible defence against claims. You can request complete erasure at any time, if the previous existence of consent is confirmed at the same time. 6.2 Newsletter Tracking We draw your attention to the fact that we evaluate your user patterns when sending the Newsletter. For the purpose of this evaluation, the emails sent contain so-called web beacons or tracking pixels that are stored on our website. We link the said data and the web beacons to your email address and an individual ID for these evaluations. Links included in the Newsletter also contain this ID. We use the data obtained in this way to create a user profile, so that we can tailor the Newsletter to your individual interests. In doing so, we register when you read our Newsletter, which links you click on and deduce your personal interests from these. The information is stored for as long as you remain subscribed to the Newsletter. Following un-subscription, we store the data purely for statistical purposes and in anonymised manner. In addition, this form of tracking is not possible if you have deactivated the display of pictures as a default setting in your email program. In this case, the Newsletter will not be displayed in full, and you may not be able to use all functions. If you have the pictures displayed manually, the above tracking will take place. 7 Job applications You may apply for jobs with our company by electronic means such as email or web forms. We will of course only use your data for the purpose of processing your application and will not pass it on to any third party. Please note that emails sent without encryption are not protected against unauthorised access. You may also apply for jobs with our company using our online job application portal. Your online application will be forwarded direct to our personnel department via an encrypted connection and will of course be treated in confidence. We will of course use your data exclusively for the purpose of processing your application and will not pass it on to any third party. For more information on data processing in the job application process please consult the data privacy statement on our job application portal. If you have applied for a particular job and it has already been filled or if we think that a different job would be more suited to you or would be even better for you, we would be happy to pass on your application within the company. Please let us know if you do not consent to our forwarding your application in this way. Your personal data will be erased immediately, but at any rate after no more than six months, once the application process has been completed unless you have given us your express consent to store your data for longer or unless we enter into a contract. The legal basis for this is Art. 6 (1) (a), (b) and (f) GDPR and Sec. 26 of the German Federal Data Protection Act (BDSG – Bundesdatenschutzgesetz). 8 Digital signature We use DocuSign software from DocuSign Inc., 221 Main St., Suite 1000, San Francisco, CA 94105, USA ("DocuSign") to digitally sign contracts and documents. For this purpose, DocuSign processes the data entered by you when using the Service, as well as the usage data of your end device and transaction-related data. DocuSign stores all personal data on servers within the EU. The legal basis for data processing is points (b) and (f) of Article 6 (1) GDPR. We have concluded an order processing agreement with DocuSign via Telekom Deutschland GmbH. Further information on DocuSign's data processing can be found in DocuSign’s Privacy Policy. In order to ensure a high level of data protection and appropriate guarantees, DocuSign has established binding internal data protection regulations in line with Article 47 of GDPR, which can be viewed here. 9 Use of cookies When you visit our website cookies are stored on your computer Cookies are small text files which are stored on your hard disk, attributed to the browser being used by you, and allow the site placing the cookie to obtain certain information. When you visit our website cookies are stored on your computer Cookies are small text files which are stored on your hard disk, attributed to the browser being used by you, and allow the site placing the cookie to obtain certain information. Cookies cannot execute any programs or transmit viruses on to your computer. Their purpose is to make the overall internet offering more user friendly and effective. This website uses various kinds of cookies, the scopes and functions of which are set out below. 9.1 Transient cookies These cookies are automatically erased when you close your browser. They include in particular session cookies, which store a session ID, by which various enquiries by your browser can be attributed to the same session. They include in particular session cookies, which store a session ID, by which various enquiries by your browser can be attributed to the same session. This enables us to recognise your computer when you return to our website. Session cookies are erased when you log out or close your browser. 9.2 Persistent cookies These cookies are erased after a set time, which can vary depending on the kind of cookie. You can erase cookies yourself at any time in your browser’s security settings. 9.3 Blocking cookies You may configure your browser settings as you wish, for instance refusing to accept third party cookies or all cookies. We would point out that if you do so you may then not be able to use all the functions of this website. 9.4 Legal bases and duration of storage The legal basis for possible processing of personal data and how long it is stored varies and is explained in the following paragraphs. 10 Website analysis For purposes of analysis and optimisation of our web pages we use various services which are explained below. This enables us, for instance, to analyse how many users are visiting our site, what information is most enquired about and how users come to our site. The data we collect tells us, among other things, what website a person has come to an internet site from (known as a referrer), what subpages of the internet site are accessed and how often and for how long a subpage has been looked at. This helps us to make our offerings more user-friendly and to improve them. The data collected in this connection is not used to identify individual users personally; the data collected is anonymous or at most pseudonymised. The data collected in this connection is not used to identify individual users personally; the data collected is anonymous or at most pseudonymised. The legal basis for this is Art. 6 (1) (f) GDPR. 10.1 Google Analytics This website uses Google Analytics, a web analysis service of Google Ireland Limited, (Gordon House, Barrow Street, Dublin 4, Ireland). This use includes the operating mode Universal Analytics. This allows data, sessions and interactions to be attributed to a pseudonymised user ID over several devices so that the activities of a user on all her or his devices can be analysed. Google Analytics uses cookies to enable us to analyse your use of this website. The information about your use of this website generated by the cookie is as a rule transmitted to a Google server in the USA and stored there. If the IP anonymisation option has been activated on this website, your IP address will, however, be abbreviated by Google within the Member States of the European Union or in other signatory countries to the European Economic Area Treaty. Only in exceptional cases will the full IP address will be transmitted to a Google server in the USA and abbreviated there. The IP address transmitted from your computer in connection with Google Analytics will not be linked with any other data held by Google. Google will use this information on behalf of the operator of this website to analyse your use of the website, to compile reports on website activity and to provide other services to the website operator in connection with the use of the website and the Internet. These purposes constitute our legitimate interest in processing the data. The legal basis for the use of Google Analytics is Sec. 15 (3) of the German Telemedia Act (TMG, Telemediengesetz) and Art. 6 (1) (f) GDPR. The data transmitted by us and linked with cookies, user IDs or application IDs will be automatically erased after 14 months. You can find more information about conditions of use and data protection at https://www.google.com/analytics/terms/de.html or at https://policies.google.com/?hl=de You may prevent cookies from being stored on your computer by using your browser software settings, but we would draw your attention to the fact that by doing so you may be unable to use all the functions of this website to the full extent. You may also prevent the data created by the cookie related to your use of the website (including your IP address) from being recorded and transmitted to Google and being processed by Google by downloading and installing the browser plug-in available from this link: http://tools.google.com/dlpage/gaoptout?hl=de. Opt-out cookies block your data from being collected when you visit our website in future. To block collection over several devices by Universal Analytics you must implement the opt-out on all the systems you use. If you click here, the opt-out cookie will be placed: Deactivate Google Analytics 11 Advertising We use cookies for marketing purposes to send our users advertising tailored to their interests. We also use cookies to limit the probability of any one advertisement being displayed and to measure the effectiveness of our advertising. This information may be shared with third parties such as ad networks. The legal basis for this is Art. 6 (1) (a) and (f) GDPR The legitimate interest existing for the purposes pursued with the data processing is that of direct marketing. The legal basis for this is Art. 6 (1) (a) and (f) GDPR The legitimate interest existing for the purposes pursued with the data processing is that of direct marketing. You have the right to object at any time to the processing of your data for the purposes of such marketing. For this purpose, we provide you with the opt-out possibilities detailed below for the various services. Alternatively you may configure your browser to block the placing of cookies. 12 Data transmission Your data will as a matter of course not be transmitted to third parties unless we are obliged by law to do so or the forwarding of data is necessary for the implementation of the contractual relationship or you have previously expressly consented to your data being passed on. To the extent that external service providers may come into contact with your personal data, we give our assurance within the scope of contract processing under Art. 28 GDPR that such processors comply in the same way with data protection regulations. You should also take note of the data privacy notices of the respective provider. The respective provider is responsible for the content of external services; within the scope of what can reasonably be expected of us we check that services comply with statutory requirements. 13 Data security We have put extensive technical and operational precautions in place to protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security procedures are regularly reviewed and updated to keep pace with technological developments. Last amended April 2021