Privacy Policy

From July 2024

1 Identity and contact details of the data controller

2 Contact details of the Data Protection Officer

3 General information on data processing

4 Rights of the data subject

5 Provision of the website and creation of logs

6 Use of cookies

7 Contact by email

8 Contact form

9 Use of the company's social media presence

10 Use of company presentations in professional networks

11 Hosting

12 Content delivery networks

13 Using plugins

1 Identity and contact details of the data controller

The data controller responsible under the European Union's General Data Protection Regulation (GDPR) and other data protection regulations is:

Masterflex Česko s.r.o.

Průmyslová 917

348 15, Planá

ID: 27970205,

Tel: +420 725 509 410, (hereinafter referred to as "Company" or "Controller"),

2 Contact details of the Data Protection Officer:

Jitka Dachová, e-mail: odbyt@masterflex-cesko.cz or the address of the controller's registered office.

3 General information on data processing

3.1 Scope of personal data processing

We only process the personal data of our users to the extent necessary to ensure the functionality of the website with our content and services. The normal processing of personal data only takes place with the consent of the user. Exceptions include cases where prior consent cannot technically be obtained and where the processing is permitted by law .

3.2 Legal basis for data processing

Article 6(1)(a) of the GDPR serves as the legal basis for obtaining the data subject's consent to the processing of their data.

For processing of personal data necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual activities.

If it is necessary to process personal data in order to comply with a legal obligation to which our company is subject, Article 6(1)(c) GDPR applies.

If the processing of personal data is required by the vital interests of the data subject or another natural person, Article 6(1)(d) GDPR.

If the processing of the data is necessary to safeguard the legitimate interests of our company or a third party and the fundamental rights and freedoms of the data subject do not override the interests of the former, Art. 6(1)(f) GDPR serves as the legal basis for the processing of the data.

3.3 Data deletion and storage period

The personal data of the data subject will be erased or limited as soon as the purpose of storage has been fulfilled. Further storage may take place if the European or national legislator has provided for it in theEU regulations, laws or other relevant regulations to which the data controller is subject. The restriction or deletion of data shall also take place after the expiry of the retention period set out above.the retention period referred to in the above-mentioned standards, unless it is necessary to extend the retention period in order to conclude or perform the relevant contract.

4 Rights of the data subject

When processing your personal data, you are subsequently a data subject within the meaning of the GDPR and have the following rights :

4.1 Right to information

You may request information under Article 15 of the GDPR about your personal data that we process.

4.2 Right to object

You have the right to object on certain grounds (see section 4.8).

4.3 Right to rectification

If the information relating to you is not (or is no longer) accurate, you may request rectification in accordance with Article 16 of the GDPR. If your information is incomplete, you can request that it be completed.

4.4 Right to erasure

You may request the erasure of your personal data in accordance with Article 17 of the GDPR.

4.5 Right to restriction of processing

You have the right under Article 18 GDPR to request restriction of the processing of your personal data.

4.6 Right to lodge a complaint with a supervisory authority

If you believe that the processing of your personal data violates the Data Protection Actdata protection law, you have the right to lodge a complaint with the data protection supervisory authority of your choice in accordance with Art. 77(1) GDPR. This includes the data protection supervisory authority responsible for the controller: https://uoou.gov.cz/media/formulare/form-stiznost-zpracovani-ou1.pdf

4.7 Right to data portability

Where the requirements of Article 20(1) GDPR are met, you have the right to have the data that we process automatically on the basis of your consent or in the performance of a contract transferred to you or to third parties. The collection of data for the provision of the website and the storage of log files is mandatory for the operation of the website. They are therefore not based on consent pursuant to Article 6(1)(1)(a) GDPR or on contract pursuant to Article 6(1)(1)(b) GDPR, but are justified pursuant to Article 6(1)(1)(f) GDPR. The requirements under Article 20(1) GDPR are therefore not met.

4.8 Right to object under Article 21(1), GDPR

You have the right to object at any time to the processing of your personal data on the basis of Art. 6(1)(f) GDPR on grounds relating to your particular situation. The controller will then no longer process the personal data unless it demonstrates compelling legitimate grounds for the processingthat override the interests and rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims. The collection of data for the provision of the website and the storage of log files is mandatory for the operation of the website.

5 Provision of the website and provision of logs

5.1 Description and scope of data processing

Each time you access our website, our system automatically collects data from the data collection system.data and relevant information from the computer system of the calling device. The following data is collected:

o the type and version of the browser used

o the user's operating system

o the user's internet service provider

o IP address of the user

o date and time of access

o The website from which the user's system accessed our website

o Websites that the user's system accessed through our website

This data is stored in the log files of our system. This data is not stored together with other personal data of the user.

5.2 Purpose of data processing

The temporary storage of the IP address by the system is necessary for the delivery of the website to the user's computer. For this purpose, the user's IP address must be stored for the duration of the session.

The storage in log files is carried out in order to ensure the functionality of the website. This data is also used to optimise the website and to ensure the security of our IT systems. Data analysis for marketing purposes is not carried out.

5.3 Legal basis for data processing

The legal basis for the temporary storage of data and log files is Article 6(1)(f) GDPR. Our legitimate interest lies in the purposes of the data processing set out in section 5.2.

5.4 Duration of storage

The data will be deleted as soon as it is no longer required for the purpose of its collection. The session is terminated as soon as the collection of data for the provision of the website is completed.

If the data is stored in log files, this is after a maximum of seven days. Storage after this period is possible. In this case, the IP addresses of the users are deleted or stolen so that it is not possible to match the calling client.

5.5 Objection and deletion

The collection of data for the provision of the website and the storage of data in log files is necessary for the operation of the website. The user may object to this. Whether the objection is successful will be decided after an evaluation of the interests. For this purpose, please send an informal email to: odbyt@masterflex-cesko.cz

6 Use of cookies

6.1 Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the internet browser or in the internet browser on the user's computer system. If the user calls up a website, a cookie may be stored on the user's operating system. These cookies contain a string of characters that allows the browser to uniquely identify the user when the website is reopened.

We use cookies to make our website more user-friendly. Some elements of our website require the caller's browser to be identified even after the page has been interrupted. The following information is stored and transmitted in cookies:

o login details

o cookie settings

o search queries

o Other information that is necessary for the provision of the website.

The user data collected in this way is pseudonymised using technical measures. Therefore, it is not possible to associate the data with the user who accesses the website. The data is not stored together with other personal data of users.

We also use cookies on our website to enable us to analyse user browsing behaviour. As a result, the following data is transmitted:

about user behaviour on our website

o other information used for marketing purposes

For more information on the use of analytics cookies, please refer to our privacy policy in the section "Use of plugins".

6.2 Purpose of data processing

The purpose of using technical cookies is to make it easier for users to use the website. Some functions of our website cannot be offered without the use of cookies. These require the browser to be recognised even after a page change.

The user data collected by means of technical cookies is not used to create user profiles.

Analytical cookies are used to improve the quality of our website and its content. We use analytics cookies to find out how the website is used so that we can continuously optimise our offer.

6.3 Legal basis for data processing

The legal basis for storing analytics cookies on the user's end device is the user's consent pursuant to § 25 (1) no. 2 TTDSG. The legal basis for the processing of personal data using analytical cookies is Article 6 (1) (a) GDPR. The legal basis for the storage of strictly necessary cookies on the user's terminal device is Section 25 (1) No. 2 TTDSG. The legal basis for the processing of personal data using technically necessary cookies is Article 6(1)(f) GDPR.

6.4 Storage period and possibility to object and remove them

Cookies are stored on the user's computer and transferred from it to our website. Therefore, as a user, you also have full control over the use of cookies. You can disable or restrict the transmission of cookies by changing the settings in your internet browser. Cookies already stored can be deleted at any time. This can also be done automatically. If cookies for our website are deactivated, it may no longer be possible to use all functions of the website to their full extent. If you use the Safari browser from version 12.1 onwards, cookies will be deleted automatically after seven days. This also applies to opt-out cookies that are set to prevent tracking measures.

You can also prevent the collection and processing of your personal data by preventing third-party cookies from being stored on your computer.browser, using the "Do Not Track" feature in a supporting browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com).

You also have the option in the privacy settings to select and deactivate various tags/trackers/analytics tools on this website. To do this, click on the fingerprint icon in the bottom left corner of the screen.

7 Contact via email

7.1 Description and scope of data processing

You can contact us via the email address provided on our website. In this case, the user's personal data transmitted with the e-mail will be stored.

This data will be used exclusively for the processing of the conversation.

7.2 Purpose of data processing

If you contact us via e-mail, this is also a necessary legitimate interest for data processing.

7.3 Legal basis for data processing

The legal basis for the processing of data transmitted when sending an email is Article 6 (1) (f) GDPR. If the purpose of the email contact is to conclude a contract, another legal basis for processing is Article 6(1)(b) GDPR.

7.4 Storage period

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of personal data sent by email, this will happen after the end of the relevant conversation with the user. The conversation ends when it can be concluded from the circumstances that the matter has been finally resolved.

7.5 Objection and removal

If a user contacts us by email via odbyt@masterflex-cesko.cz, he may object to the storage of his personal data at any time. In this case, the conversation cannot be continued.

8 Contact form

8.1 Description and scope of data processing

• A contact form is available on our website which can be used for electronic contact. If the user uses this option, the data entered in the input mask will be transmitted to us and stored.
• The following data will also be stored when the message is sent:
• o e-mail address
• o Surname
• o First name
• o Company
• o Address
• o Telephone
• o IP address of the user's device
• o Date and time of contact

8.2 Purpose of data processing

The processing of the personal data from the input mask serves us solely for the purpose of making contact. If you contact us by email, this is also our necessary legitimate interest in processing the data.

Other personal data processed during the sending process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.

8.3 Legal basis for data processing

The legal basis for the processing of the transmitted data is the conclusion of a contract at the request of the user, Article 6 (1) (b) GDPR. The legal basis for the processing of data transmitted when sending an email is Article 6(1)(f) GDPR.

8.4 Storage period

Data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collectedcollected and the statutory retention periods no longer require the data to be retained.

8.5 Objection and deletion

If the user contacts us by email at odbyt@masterflex-cesko.cz, he or she may object to the retention of his or her personal data at any time. In this case, the conversation cannot be continued. All personal data stored during the contact will be deleted in this case.case.

9 Use of company presentations on social media

The use of social media platforms with servers located in the USA may lead to the processing of personal data outside the EU. In order to provide appropriate safeguards to protect the transfer and processing of personal data outside the EU, we are transferring data to social media operators outside the EU and processing it on the basis of appropriate safeguards under Art. 46 et seq. GDPR, in particular by concluding so-called standard data protection clauses pursuant to Article 46(2)(c) GDPR.

9.1 Twitter: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland

On our website we provide information and offer Twitter users the opportunity to communicate. If you take an action on our company website on Twitter (e.g. comments, posts, likes, etc.), you may disclose personal data (e.g. a clear name or photo of your user profile). However, as we generally or largely have no influence on the processing of your personal data by Twitter, which is jointly responsible for the appearance of our company, we cannot make a binding statement on the purpose and scope of the processing of your data.

Our company's social media presence is used to communicate and exchange information with (potential) customers. We use our corporate presence to inform you about our products and services. Publications on the corporate presence may contain the following content:

o Product information

o Information about services

o Competitions

o Advertising

o Customer contact

Every user has the opportunity to disclose personal information through activities. The legal basis for the processing of data is Article 6(1)(a) GDPR. The data created on the company's appearance is not stored in our own systems. You can object at any time to the processing of your personal data that we collect as part of youryour use of the company's web appearance on Twitter and exercise your data subject rights as set out in point 4. of this privacy policy. Please send us an informal email to odbyt@masterflex-cesko.cz

For more information about Twitter's processing of your personal data and the relevant opportunities to object, please click here: https://twitter.com/en/privacy

9.2 YouTube: Google Ireland Limited, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland

We provide information on our company profile and offer YouTube users the opportunity to communicate. If you take an action (e.g. comments, posts, likes, etc.) on our corporate YouTube profile, you can post personal information (e.g. a clear name or photo of your user profile). Our company profile on social media is used to communicate and exchange information with (potential) customers. We use the company profile to provide information about products and services.

To improve the user experience, we have also embedded YouTube videos on our website. The videos are embedded in such a way that only the preview image of the video is visible and YouTube does not set any cookies. If you click on the preview image of a YouTube video, you will be taken directly to a YouTube page that does not set any cookies (youtube-nocookie.com) in a new tab. It cannot be ruled out that YouTube will change this in the future and set cookies after all. We will periodically review this situation for reasonableness and appropriateness.

If you are logged in to your YouTube account during your visit, Google may associate your visit to the website with this account. This information is transmitted directly to Google and stored there.

The legal basis for the data processing is Article 6 (1) (f) GDPR.
You can object at any time to the processing of your personal data that we collect as part of youryour use of our corporate YouTube web profile and exercise your data subject rights as set out in section IV. of this privacy policy. For more information about YouTube's processing of your personal data and the relevant objection options, please click here: https://policies.google.com/privacy?gl=DE&hl=en

10 Use of corporate presentations on professional networks

10.1 Scope of data processing

We use corporate presentations on professionally oriented networks. We maintain a corporate presence on the following professionally oriented networks:

o LinkedIn: LinkedIn, Unlimited Company Wilton Place, Dublin 2, Ireland.

o XING: XING SE, Dammtorstraße 30, 20354 Hamburg, Germany.

On our website we provide information and offer users the opportunity to communicate. The corporate presence is used for job applications, information/PR and active search.

We do not have any information about the processing of your personal data by the companies jointly responsible for the corporate presentation. For further information, please refer to our privacy policy:

• LinkedIn: https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv
• XING: https://privacy.xing.com/en/privacy-policy

By using LinkedIn with servers located in the USA, personal data may be processed outside the EU. In order to provide appropriate safeguards to protect the transfer and processing of personal data outside the EU, wehe transfer and processing of data to LinkedIn outside the EU is subject to appropriate safeguards pursuant to Art. 46 et seq. GDPR, in particular by concluding so-called standard data protection clauses pursuant to Article 46(2)(c) GDPR.

If you take an action on our company website (e.g. comments, posts, likes, etc.), you may disclose personal data (e.g. a clear name or photo of your user profile).

10.2 Legal basis for data processing

The legal basis for the processing of your data in connection with the use of our corporate website is Article 6(1)(f) GDPR.

10.3 Purpose of data processing

Our corporate website is used to inform users about our services. Any user is free to disclose personal data through activities.

10.4 Storage period

We store our activities and personal data published via our corporate website until you withdraw your consent. In addition, we comply with the statutory retention periods.

10.5 Objection and removal

You may object at any time to the processing of your personal data that we collect as part of youryour use of our corporate website and exercise your data subject rights as set out in section IV. of this privacy policy. Please send us an informal email to odbyt@masterflex-cesko.cz. For more information about objection and removal options, please click here:

• LinkedIn: https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv
• XING: https://privacy.xing.com/en

11 Hosting

The website is hosted on the servers of our authorised service provider. Our service provider is: ALL-INKL.COM - Neue Medien Münnich, Hauptstr. 68, 02742 Friedersdorf, Germany. The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The information stored is as follows:

o browser type and version

o the operating system used

o the URL of the link

o The host name of the computer from which it is accessed

o Time and date of the request to the server

o IP address of the user's device

This data will not be merged with other data sources. The data is collected on the basis of Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website, for this purpose, server log files must be recorded. The website server is geographically located in Germany.

12 Content delivery networks

We use certain plug-ins on our website via external service providers in the form of content delivery networks. When you visit our website, you will be connected to the servers of the provider we use to retrieve the content and cache it in the user's browser. As a result, personal data may be stored and analysed in server log files, in particular device and browser information (in particular IP address and operating system). We use the content delivery network KeyCDN of the provider proinity LLC, Faerberstrasse 9, CH-8832 Wollerau, Switzerland.

12.1 Purpose of data processing

The use of KeyCDN network functions is used to deliver and accelerate online applications and content.

12.2 Legal basis for data processing

The data is collected on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website - and therefore server log files are recorded.

12.3 Storage period

Your personal data will be stored for the period necessary to fulfil the purposes described in this Privacy Policy or as required by law.

12.4 Objection and removal

Information about objection and removal options relating to KeyCDN can be found at: https://www.keycdn.com/privacy

13 Use of plug-ins

When using plug-ins, some of your personal data is sent to the USA or other third countries outside the EU. In order to ensure adequate safeguards to protect the transfer and processing of personal data outside the EU, the transfer of personal data isdata and its processing by our plug-in operators is based on appropriate safeguards pursuant to Art. 46 et seq. GDPR, in particular by concluding so-called standard data protection clauses pursuant to Article 46(2)(c) GDPR.

We use plug-ins for various purposes. The plugins used are listed below:

13.1 Use of Google Analytics including Google Analytics Remarketing

13.1.1 Scope of personal data processing

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics examines, among other things, the origin of visitors, the length of time they stay on each page of the website andand the use of search engines, thereby enabling better monitoring of the success of advertising campaigns. Google places a cookie on your computer. This allows personal data in particular to be stored and evaluated:

o User activity (which pages were visited and which elements were clicked on),

o device and browser information (IP address and operating system),

data on the ads displayed (which ads were displayed and whether the user clicked on them); and

advertising partner data (pseudonymised user IDs).

We use Google Analytics to evaluate the use of our online presence, to compile reports on your activities and toand other Google services related to your use of our online presence and internet usage. The IP address transmitted by your browser within the scope of Google Analytics is not combined with any other Google data.

Within Google Analytics, we also use Google Analytics Remarketing, which uses the data collected and evaluated about you to play targeted advertising. By using this service offered by Google, we link the data to our Google Ads or Display & Video 360 accounts. Google Ads and Display & Video 360 are also provided by Google.

We have activated IP anonymization, whereby Google will truncate your IP address as soon as technically possible. Only in exceptional cases is the entire IP address transferred to a Google server in the USA and shortened there. Google may transfer your personal data to Google affiliates and other processors.

For more information about the collection and storage of data by Google, please click here: https://policies.google.com/privacy?hl=en-GB

13.1.2 Purpose of data processing

We use Google Analytics, including Google Analytics Remarketing, to evaluate the use of our online presence and to enable you toWe use our online presence to evaluate the effectiveness of our online advertising and to evaluate the effectiveness of our online advertising and to evaluate the effectiveness of our online marketing.

13.1.3 Legal basis for processing personal data

The legal basis for the processing of personal data is the consent given by the user in accordance with Article 6(1)(a) GDPR.

13.1.4 Storage period

Your personal data will be stored for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law. The advertising data in the server logs is anonymised by Google's own declarations in order to remove parts of the IP address and cookie information after 9 or 18 months.

13.1.5 Possibility of revocation

According to the Data Protection Act, you have the right to withdraw your declaration of consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent until it is withdrawn.

For more information on how to object and withdraw from Google, please visit: https://policies.google.com/privacy?gl=EN&hl=en

You can also prevent the collection of data generated by the cookie and related to your use of the online presence (including yourIP address) to Google and Google's processing of this data by downloading and installing the browser plug-in available at the following link

: https://tools.google.com/dlpage/gaoptout?hl=en.

You can deactivate Google's use of your personal data by using the following link: https://adssettings.google.com.

13.2 Use of LUX

13.2.1 Scope and processing of personal data

To identify visitors to the website, to generate leads and to develop potentialWe use the LUX self-service marketing optimization tool from in2code GmbH to develop leads (nurturing). The following data can be collected using LUX:

Analytics data:

o Visit data: pages visited, content downloaded, keywords used, links clicked (link shortener and link listener), variant selected (A/B testing).

o Local storage: consent to tracking (yes/no), email4link already used (yes/no)

Personal data:

o IP address in anonymised form o Form data (surname, first name, business email address) Further information on data processing by in2code GmbH can be found here: https://www.in2code.de/

13.2.2 Purpose of data processing

After your first visit to the website, LUX tries to recognize your return visits by your behaviorand the hardware you use in order to offer you appropriate content according to your preferences and to simplify the usability of the website. For this purpose, "LUX" creates a so-called "browser" from some of the characteristics of your terminal device transmitted by your browser. This is a hash value (including browser type, language settings, colour depth, some parameters of the hardware used) that can be used for recognition during future visits to the website.

13.2.3 Legal basis for the processing of personal data

The legal basis for the processing of users' personal data is in principle the user's consent in accordance with Article 6(1)(a) GDPR.

13.2.4 Retention period

The data will be deleted as soon as they are no longer used for the purposes of processing, but no later than 3 years after the last visit

13.2.5 Possibility of revocation and deletion

You have the right to withdraw your declaration of consent at any time in accordance with the Data Protection Act. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of consent until the withdrawal.

13.3 Use of Inxmail

13.3.1 Scope and processing of personal data

We use the functionalities of the newsletter tool Inxmail Professional of Inxmail GmbH, Wentzigerstraße 17, 79106, Freiburg, Germany (hereinafter: Inxmail). Inxmail is a software for personalized newsletters and automated e-mail campaigns. Using so-called web beacons or tracking pixels, interactions with newsletters can be measured. Cookies are stored by Inxmail on your end device.

In particular, Inxmail processes the following personal data:

o Name

o First name

o Email address

o Meta and communication data

o Device information

o IP address

o Usage data

o Interests

o Access times For more information about Inxmail's data processing, click here:

https://www.inxmail.de/datenschutz

13.3.2 Purpose of data processing

We use Inxmail to register interested parties for newsletters and to analyse and evaluate newsletter campaigns.

13.3.3 Legal basis for processing personal data

The legal basis for the processing of users' personal data is generally the user's consent in accordance with Article 6(1)(a) GDPR.

13.3.4 Storage period

Your personal data will be retained for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law, e.g. for tax and accounting purposes. Similarly, this data may be deleted at the request of the operator at Inxmail. The storage of cookies is not within the scope of Inxmail.

13.3.5 Possibility of revocation

You have the right to withdraw your declaration of consent at any time in accordance with the Data Protection Act. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal.

For more information on the possibilities of objection and removal against Inxmail, please visit: https://www.inxmail.de/datenschutz.

13.4 Use of LinkedIn Insight Tag

13.4.1 Scope of processing of personal data

The LinkedIn Insight Tag service (branded LinkedIn Insight by LinkedIn Ireland Unlimited Corporation, Wilton Place, Dublin 2, Ireland) helps us measure the actions taken by on our website, such as filling out a form or downloading content after one of our ads is viewed or clicked. na. LinkedIn Insight Tag creates a cookie on the web browsers of our website users when they visit the website. These are first-party cookies and help us determine how to improve the results of our campaigns and measure the effectiveness of our ads. First party cookies are a small piece of code that the web browser stores in a file in the number ofthe user's computer to remember the user's activity on the site, such as when the user visited a page or downloaded an article from our site. The first party cookie comes from the domain (or website) that the member is viewing. You can provide your consent to activate this feature through our cookie banner. For more information about the cookies we use, please visit: https://www.linkedin.com/legal/cookie-policy.

In particular, LinkedIn processes the following personal data:

o URL

o URL of the referring page

o IP address truncated or hashed

o Device and browser characteristics

(User Agent) and timestamps LinkedIn does not share any personally identifiable information with us, but only provides aggregate reports on traffic and advertising. LinkedIn also offers a remarketing feature that allows us to show targeted personalized advertising outside of our website without revealing your identity. In the process, data may be transferred to LinkedIn servers in the USA. For more information on how LinkedIn processes data, please click here: https://www.linkedin.com/legal/privacy-policy

13.4.2 Purpose of data processing

We use the LinkedIn Insight Tag to collect information about visitors to our website.

13.4.3 Legal basis for processing personal data

The legal basis for the processing of personal data is the consent given by the user in accordance with Article 6 (1) (a) GDPR.

13.4.4 Storage period

Direct identifiers of members will be deleted within seven days in order to pseudonymise the data. This remaining pseudonymised data will then be deleted within 180 days.

13.4.5 Possibility of revocation

You have the right to withdraw your data protection declaration of consent at any time. Withdrawal of your consent does not affect the lawfulness of the processing that has taken place on the basis of your consent up to the time of withdrawal.

For more information on the possibilities to object and remove against Linked Insight Tag, please visit: https://www.linkedin.com/legal/privacy-policy.

13.5 Use of Google Tag Manager

13.5.1 Scope of processing of personal data

We use the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google Tag Manager"). The Google Tag Manager allows you to manage tags from Google and third party services and embed them in a package on your online presence. Tags are small code elements on an online presence that are used, among other things, to measure visitor numbers and behaviour, to track the impact of online advertising and social channels, to use remarketing and targeting, and to test and optimise online presence. When a user visits the online presence, the current brand configuration is sent to the user's browser. It contains instructions on which brands to run. Google Tag Manager handles the launching of other tags, which in turn can collect data. Information about this can be found in the passages on the use of the corresponding services in this privacy policy. The Google service manager does not have access to this data.

Further information about the Google Service Manager can be found at: https://support.google.com/tagmanager/?hl=en-GB#topic=15191151 and the Google Privacy Policy: https://policies.google.com/privacy?hl=en

13.5.2 Purpose of data processing

The purpose of the processing of personal data is the collected and clear administration as well as the effective integration of third-party services.

13.5.3 Legal basis for the processing of personal data

The legal basis for the processing of personal data is the consent given by the user in accordance with Article 6 (1) (1) (a) GDPR.

13.5.4 Storage period

Your personal data will be retained for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law. The advertising data in the server logs is anonymised by Google's own declarations to remove parts of the IP address and cookie information after 9 and 18 months.

13.5.5 Possibility of revocation

You have the right to withdraw your declaration of consent at any time in accordance with the Data Protection Act. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of consent until the withdrawal. The collection of data generated by the cookie and related to your use of the online presence (including your IP address) to Google and the processing of this data by Google can be prevented by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=com.

To deactivate the use of your personal data by Google , use the following link: https://adssettings.google.com

For more information on how to object to and opt out of Google, please visit: https://policies.google.com/privacy?gl=DE&hl=com

13.6 Use of Google Ads Conversion Tracking

13.6.1 Scope of processing of personal data

We use the Google Ads Conversion Tracking program of Union Google Ireland Ltd, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland. Google Ads Conversion Tracking records what happens after users click on an advertisement we have placed through Google Ads when they subsequently visit our website. It records whether users take a particular action on the website specified by us (e.g. whether an item is ordered).

This allows us to track which keywords, ads, ad sets or campaigns lead to the desired user interaction. A conversion tracking cookie is set when a user clicks on an ad placed by Google Ads.

Personal data relating to the user's activity, device and browser information and data about the ads displayed (in particular the date and time of the visit)Site visit time, browser language, browser type, user behaviour, IP address, cookie ID, referring URL, web request, which ads were displayed and whether the user clicked on them) can be stored and analysed.

For more information about the processing, please visit: https://policies.google.com/privacy?gl=com and https://policies.google.com/technologies/cookies.

13.6.2 Purpose of data processing

The purpose of the processing of personal data is to track conversions (traffic evaluation), totargeted access to the target group that has already shown initial interest by visiting the website.

13.6.3 Legal basis for the processing of personal data

The legal basis for the processing of users' personal data is generally the user's consent in accordance with Article 6(1)(a) GDPR.

13.6.4 Storage period

Your personal data will be retained for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law, e.g. for tax and accounting purposes. Cookies are retained for a maximum of one year.

13.6.5 Possibility of revocation

You have the right to withdraw your declaration of consent at any time in accordance with the Data Protection Act. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of consent until the withdrawal. In addition, you can permanently prevent the setting of cookies by Google Ads conversion tracking by downloading and installing the browser plug-in from Google available at the following link : https://www.google.com/settings/ads/plugin?hl=com or by using the settings and opt-out options provided by Google: https://safety.google/privacy/privacy-controls/.

For more information about opt-out and opt-in options, please visit: https://policies.google.com/privacy?gl=DE&hl=com

13.7 Using Google Ads Remarketing

13.7.1 Scope of processing of personal data

We use Google Ads Remarketing from Google Ireland Ltd, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland. Google Remarketing is used to redirect visitors to the online presence for advertising purposes through Google Ads. Google Ads Remarketing can be used to create target groups ("lookalike target groups") that have, for example, been triggered by certain pages. This makes it possible to identify users on other online presentations and display targeted advertising. Google sets a cookie on the user's computer.

Personal data relating to the user's activity, device and browser information and data about the ads displayed (in particular, visits to thewebsite, location, duration and time of website visit, IP address, user interests, referring URL, advertising ID) may be stored and analysed.

For more information about Google's data collection and storage, please visit: https://policies.google.com/privacy?hl=en-GB

13.7.2 Purpose of data processing

The purpose of the processing of personal data is to specifically address the target group. The cookies stored on the user's end device recognize the user when visiting the online presence and can therefore display advertisements in line with the user's interests.

13.7.3 Legal basis for the processing of personal data

The legal basis for the processing of personal data is the consent given by the user in accordance with Article 6 (1) (1) (a) GDPR.

13.7.4 Storage period

Your personal data will be retained for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law, e.g. for tax and accounting purposes..

13.7.5 Possibility of revocation and removal

You have the right to withdraw your declaration of consent at any time under the Data Protection Act. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent until withdrawal.

In addition, you can permanently prevent Google Ads Remarketing from setting cookies by downloading and installing the Google browser plugin available at the following link:

https://www.google.com/settings/ads/plugin?hl=com or by using the settings and opt-out options provided by Google: https://safety.google/privacy/privacy-controls/.

For more information about objection and removal options against Google, please visit: https://policies.google.com/privacy?hl=en-GB

13.8 Use of Piwik PRO Analytics Suite

13.8.1 Scope of processing of personal data

We use the Piwik PRO Analytics Suite web analytics software from Piwik PRO GmbH, Kurfürstendamm 21, 10719 Berlin, Germany, for the purpose of reach analysis. We collect anonymous data about website visits without cookies, but using the session fingerprinting method. The information collected includes, for example, the visitor's anonymized IP address, operating system, the name or URL of the page visited and other information. See scope of data collected by Piwik PRO.

13.8.2 Purpose of data processing

We use the Piwik PRO Analytics Suite to analyse and regularly improve the use of our website. Through the collected statistics, we can fix navigation problems, make the website clearer, make information more accessible, improve our overall offer and make it more interesting for you as a user.

13.8.3 Legal basis for processing personal data

The collection of data is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in the technically flawless presentation and optimization of its website.

13.8.4 Storage period

We host our solution on Microsoft Azure in Germany and the data is stored for a maximum of 25 months.

13.8.5 Possibility of revocation

The website operator has a legitimate interest in the technically error-free presentation and optimization of its website. The user can object to this. More information about the right to object can be found in section 4 of this privacy policy. Read more at Piwik PRO's privacy policy.

13.9 Use of YouTube

13.9.1 Scope of processing of personal data

We use the plugin operated by Google of YouTube, YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA and their representatives at Union Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as Google ). We use a YouTube plugin to embed YouTube videos into our online presence. When you visit our website, your browser connects to the YouTube servers. It can be used to store and analyse personal data, in particular user activity (which pages have been visitedand which elements have been clicked on) and information about the device and browser (in particular IP address and operating system). We have no influence on the content of the plugin. If you are logged in to your YouTube account during your visit, YouTube may associate your visit to your online presence with this account. By interacting with this plugin, this corresponding information is transmitted directly to YouTube and stored there.

For more information about Google's data collection and storage, please click here: https://policies.google.com/privacy?hl=en-GB

13.9.2 Purpose of data processing

The use of the YouTube plugin serves to improve the user-friendliness and attractive representation of our online operational readiness.

13.9.3 Legal basis for the processing of personal data

The legal basis for the processing of personal data is the consent given by the user in accordance with Article 6 (1) (1) (a) GDPR.

13.9.4 Storage period

Your personal data will be retained for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law, e.g. for tax and accounting purposes..

13.9.5 Possibility of revocation

You have the right to withdraw your declaration of consent at any time under the Data Protection Act. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent until the withdrawal.

For more information on how to object and remove against Google, please visit

: https://policies.google.com/privacy?hl=en-GB

13.10 Use of Usercentrics

13.10.1 Scope of processing of personal data

We use the Usercentrics consent management platform of Usercentrics GmbH, Rosental 4, 80331 Munich, Germany ("Usercentrics"). Usercentrics enables us to obtain and manage the user's consent to data processing and to document it in accordance with the law. For this purpose, Usercentrics sets cookies on the user's end device.

In the process, the following data is processed:

o Date and time of visit

o Device information

o Browser information

o Anonymous IP address

o Login and logout data

The data is processed geographically in the European Union.

For more information on the processing of data by Usercentrics, please click here

: https://usercentrics.com/privacy-policy/

13.10.2 Purpose of data processing

The processing of personal data is to comply with the legal obligations of the GDPR and the Czech Act 110/2019 Coll., on the processing of personal data.

13.10.3 Legal basis for the processing of personal data

The legal basis for the processing of personal data is Article 6 (1) (1) (f) GDPR.

13.10.4 Storage period

Your personal data will be kept for as long as is necessary to fulfil the purposes described in this privacy policy, consent to its storage has been withdrawn or as required by law.

13.10.5 Possibility of revocation and removal

For more information about the objection and removal options against Usercentrics, please visit: https://usercentrics.com/privacy-policy/

13.11 Using Friendly Captcha

13.11.1 Scope of processing of personal data

Our website uses the "Friendly Captcha" service (Friendly Captcha GmbH, Am Anger 3-5, 82237 Wörthsee, Germany, www.friendlycaptcha.com). Friendly Captcha is a privacy-friendly protection solution that makes it more difficult for automated programs and scripts (so-called "bots") to use our website. To this end, we have integrated Friendly Captcha's programming code into our website (e.g. for contact forms) so that the visitor's end device can establish a connection to Friendly Captcha's servers in order to receive a computational task from Friendly Captcha. The visitor's end device solves a computational task (puzzle) that takes up some system resources, and sends the result of the computation to our web server. The server connects to the Friendly Captcha server via an interface and receives a response indicating whether the puzzle was solved correctly by the end device. Depending on the result, we may apply security rules to requests through our web site, thereby, for example, processing or rejecting them.

Friendly Captcha processes and stores the following data in the above process:

o The anonymized IP address of the requesting computer.

o Information about the browser and operating system used.

o An anonymous counter per IP address to control cryptographic tasks.

o The website from which the access was made

13.11.2 Purpose of data processing

The data is used exclusively for the protection against spam and bots described above. No cookies are set or read on the visitor's terminal device by Friendly Captcha. IP addresses are only stored in hashed (one-way encrypted) form and do not allow us and Friendly Captcha to draw any conclusions about an individual person.

13.11.3 Legal basis for the processing of personal data

The legal basis for the processing is our legitimate interests in protecting our website from abuse by robots, i.e. protection against spam and protection against attacks (e.g. 6 (1) (1) (f) GDPR.

13.11.4 Storage period

If personal data is collected, it will be deleted after 30 days at the latest. Further information on data protection when using Friendly Captcha can be found at: https://friendlycaptcha.com/legal/privacy-end-users/.