This Privacy Policy sets out which personal data we process in which way and for what purposes.

With this Privacy Policy we inform you how and why we collect, process and use your personal data. It is important to us that you understand:

• which personal data we collect about you
• the purpose for which we use your personal data;
• wie lange wir Ihre Personendaten aufbewahren;
• who has access to your personal data; and
• what rights you have with regard to your personal data.

You will find corresponding notes and explanations below. Please find further details in the table at the end of this Privacy Policy. If you have any questions, please do not hesitate to contact us. You can find our contact details under section 2.

For each data processing activity a certain undertaking (the so called "controller") is responsible to ensure data protection. It is this entity that determines the purposes and means of the processing activity. In principle, the following entity ("we" or "us") is the controller with regard to the data processing in accordance with this Privacy Policy:

AMC Cookware Nordic Oy

Luoteisrinne 5

02270 Espoo

e-mail: privacy@amc.info

Phone number: +358 (400) 401190

In certain cases the controller of your personal data is not us, but another group entity:

• If you are in contact with another AMC group entity, then such entity is in principle the controller with regard to the respective data processing.
• In certain cases, we may also transfer your personal data to another AMC group entity or to third parties, such as independent sales agents, who offer and sell AMC products and services on our behalf. In this case, the respective recipient is the controller.

Personal data is all information pertaining to a particular natural person, i.e. a human being. This for example includes the following information, provided that it can be related to a specific natural person:

• contact information, e.g. name, address, e-mail address, telephone number;
• further personal information, e.g. gender, birthday and age, marital status, nationality;
• transaction data, e.g. information on orders, shopping history, preferences and affinity to certain product categories;
• personal preferences, e.g. nutritional habits or cooking skills;
• financial information, e.g. credit card number, account details, creditworthiness;
• job-related information, e.g. profession, title, function, education, former employers, skills and experience, permits and admissions as well as memberships;
• logs showing your visits on our websites.

We do not necessarily process all personal data mentioned in this paragraph. You will find specific information on the personal data we process under section 5 and in the table at the end of this Privacy Notice.

"Processing" means any operation or set of operations which is performed on personal data. This includes, for example, the following actions:

• the collection, storage and retention;
• the organisation, the arrangement and the administration;
• adaptation and alteration;
• retrieval and consultation;
• the use and application;
• the disclosure;
• the alignment and the combination;
• the restriction;
• the erasure and destruction; and
• the transfer and dissemination.

This Privacy Policy applies to any processing of personal data in connection with all our business activities in all our business areas. For certain services additional Privacy Policies may apply. We will inform you of these provisions in an appropriate manner where such is the case.

This Privacy Policy applies to the processing of personal data of all “data subjects”. The following persons are examples of data subjects:

• Persons who write to us or contact us in any other manner;
• customers or prospects who are visited by our sales staff or sales agents;
• participants in sales parties, cooking classes and other customer events;
• visitors of our premises;
• visitors of our websites;
• recipients of our information and marketing communications;
• participants in competitions, contests and surveys;
• contact persons of our business partners and our sales agents; and
• job applicants.

Depending on the occasion and purpose, we process very different personal data. You will find more details in this section and in the table at the end of this Privacy Policy:

• Communication: We process personal data when you contact us or when we contact you, e.g. when you contact our customer service as well as when you write or call us. Normally, we only require information such as name and contact data and the content and time of the relevant messages. We use this data in order to provide you with information, process your request and to communicate with you. We can also forward messages within the AMC Group to the responsible entity offices, e.g. if your request concerns another entity.
• Purchase of goods and services: We also receive and process personal data if you make use of our services, e.g. if you purchase goods or services from us. We need e.g. your name and contact data, information on the ordered goods or services as well as means of payment. In case you wish to pay in arrears, we may also need to verify your creditworthiness, for which we are retaining the services of credit agencies. We process your personal data, for example, for the processing of orders and contracts, including the dispatch of order and shipping confirmations, delivery confirmations, delivery and invoicing, as well as warranty services. From this, we may also derive information about your preferences and affinities to certain products or services. Such information helps us to provide you with specific information about offers and to generally tailor our offer more precisely to the demands of our customers.
• Sales parties and customer events: When we hold sales parties and customer events (such as product demonstrations, cooking classes and promotional events), we also process personal data. Such data include the name and address of the participants or interested parties and, other data depending on the event, e.g. your date of birth. We process this information for the purpose of carrying out customer events, but also to get in direct contact with you and attract your interest for our products and services.
• Information and direct marketing: We process personal data in many ways, including for information and marketing purposes. If you, for example, register for a newsletter, we will, for example, process your contact details, details about your nutritional habits, cooking skills and preferences, and information about your use of the newsletter and products previously purchased by you, in order to get to know you better and to attract your interest for our products.
• Visiting websites; using apps: When you visit our websites, we process personal data. The processing depends on the offer and functionality of the website. This data includes, for example, log data, information about the time our website was accessed, the duration of the visit and the pages accessed. We use this data for reasons of IT security, but also to improve the user-friendliness of the website and its functions. We also use "cookies", which are small text files that are temporarily or permanently stored on your device when you visit our website. Cookies are often required for the functionality of the website. Others are used to personalize the offer. However, logs and cookies often do not contain personal data because we are often unable to assign this information to you. We also use analytic tools such as Google Analytics. With such services, detailed information about the use of the relevant website is collected, but such information is also often not personal. Finally, we may use functionalities from providers such as Facebook, which may result in the provider concerned processing data about you. Please refer to the table at the end of this Privacy Policy for further details. There you will also learn how you can prevent these processing activities.
• Competitions, contests and surveys: From time to time we also organise competitions, contests and surveys. In this case, we process your contact data and information about your participation for the purpose of carrying out the competitions, contests and surveys, as well as the contributions provided by you. Further details can be found in the respective conditions of participation.
• Business partners: We work together with various companies and business partners, e.g. with independent sales agents, suppliers, commercial customers of goods and services, with cooperation partners and with service providers (e.g. IT service providers). We also process personal data about the contact persons in these companies, e.g. name, function and title, as well as information regarding deliverables and payments.
• Job applications: We also process personal data when you apply to us. As a general rule, we require the usual information and documents as well as the ones mentioned in a job advertisement.
• Protection of rights: We process personal data in various situations in order to protect our rights, e.g. to assert claims in and out of court and before local and foreign authorities or to defend ourselves against claims. For example, we can have process prospects clarified or submit documents to an authority. Authorities may also require us to disclose documents containing personal data.

The table at the end of this Privacy Policy describes in more detail what types of personal data we collect about you, how and for what purposes it is used, on what legal basis and whether you are obliged to provide us with personal data.

6. Whom do we share your personal data with?

We may also disclose your personal data to third party service providers who perform certain business operations on our behalf, in particular:

• IT services, e.g. services in the areas of data storage (hosting), cloud services, dispatch of e-mail newsletters, data analytics etc.;
• Consulting services, e.g. services of tax consultants, lawyers, management consultants, consultants in the field of personnel recruitment and placement;
• transport and logistics services, e.g. for the dispatch of ordered goods;
• administration services, e.g. real estate management;
• business information and debt collection, e.g. if you want to make a purchase on account or if due receivables are not paid;

The recipients of your personal data section 6 may be located abroad - even outside of the EU or the EEA, and particularly in Switzerland. The countries concerned may not have laws that protect your personal data to the same extent as the laws in Switzerland, the EU or the EEA do. We refer to such countries that do not provide for adequate protection "third countries". If we disclose your personal data a third country recipient, we will take appropriate measures to ensure the protection of your personal data. One way of doing this is to conclude data transfer agreements ensuring the necessary data protection with the third country recipients. These include contracts approved, issued or recognised by the European Commission and the Federal Data Protection and Information Commissioner, the so called standard contractual clauses. It is moreover permitted to transfer personal data to recipients who have joined the US Privacy Shield program.

Please contact us if you would like to obtain a copy of our data transfer contracts or if you wish to receive further information about how we protect your personal data when disclosing it to a third country.

We apply appropriate technical and organisational security processes to safeguard the security of your personal data and to protect it against unauthorised or unlawful processing and to prevent the risk of loss, unintentional alteration, unintentional disclosure or unauthorised access. However, the electronic transfer of information in particular entails security risks that cannot be completely ruled out. If you transfer information in this way, you do so at your own risk.

We retain your personal data for no longer than this is necessary for the purposes for which the information is collected. We moreover retain personal data as long as we have a legitimate interest in the storage, e.g. if we need personal data for the performance of contractual duties (e.g. honouring of warranty claims) for the enforcement of or the defence against claims, for archiving purposes and for guaranteeing IT security or in the case of running statutes of limitations. We also retain your personal data as long as it is subject to a legal retention obligation. Other documents must only be retained for a short period, which is the case, for example, for video surveillance recordings or for recordings of certain Internet processes (log data).

We do not process any personal data of children. Should this nevertheless be necessary, we take special care to protect children, and if we process personal data of children based on consent, we ask the parents or the legal representatives for their consent. If consent for a child has been given by its parents or legal representative, the adult person is free to revoke this consent at a later date.

Right

Description

Remarks

Right of access

You have the right to request, at any time and free of charge, access to your personal data stored and processed by us. This gives you the opportunity to check which personal data we process about you and to verify that it is used in accordance with the applicable data protection regulations.

In some cases, the right to information may be limited or excluded, in particular:

• if you were not able to sufficiently identify yourself;
• to protect the rights and freedoms of other persons (e.g. confidentiality obligations or third party data protection rights);
• in the event of excessive exercise of the right to access (alternatively, we may demand payment for the information); or
• if a comprehensive provision of information would generate disproportionate efforts.

Right to rectification

You have the right to have incorrect or incomplete personal data corrected and to be informed of such rectification.

Right to erasure

You have the right to have your personal data erased. You can request the deletion of your personal data if:

• the personal data are no longer necessary for the purposes pursued;
• you have effectively withdrawn your consent or have effectively objected to the processing;
• the personal data is being processed unlawfully.

In individual cases, the right to erasure may be excluded, especially if processing is necessary:

• for the exercise of freedom of expression and information;
• to perform a legal task or a task in the public interest;
• for the establishment, exercise or defence of legal claims.

Right to restrict processing

Under certain circumstances, you have the right to request that the processing of your personal data be restricted. This may for example mean that personal data will (at least temporarily) not be processed any further or that personal data that has been published will (at least temporarily) be removed from a website.

Right to data portability

You have the right to receive the personal data concerning you, which you have provided to us, free of charge, in a commonly used and machine-readable format, provided that:

• the specific data processing is based on your consent or is necessary for the performance of the contract; and
• the processing is carried out by automated means.

Depending on the individual case, your personal data may be transferred to you or directly to another controller.

Right to lodge a complaint

You have the right to lodge a complaint with a competent supervisory authority about the way we handle or process your personal data.

Legal basis: The GDPR requires us to inform about the relevant legal basis for our data processing activities. In the table at the end of this Privacy Policy you will find information on the legal basis on which we usually base the respective data processing activities. Due to the complexity of many data processes, it cannot be ruled out, however, that in individual cases - depending on the circumstances - other legal bases may also apply.

Obligation to provide personal data: The GDPR also requires you to be informed whether you are obliged to provide your personal data due to a legal or contractual requirement or because the data is necessary to enter into a contract. We must moreover inform about the possible consequences when you fail to provide such data. You will also find corresponding information in the table at the end of this Privacy Policy. As a general rule, the disclosure of personal data is voluntary.

Third party personal data: You may wish or need to provide us with third party personal data. We would like to point out that in this case you are obliged to inform the relevant persons about such data disclosure and about this Privacy Policy. You are also obliged to obtain the consent of the relevant person for such disclosure.

We may modify this Privacy Policy from time to time if we change our data processing activities or if new legislation becomes applicable. We actively inform people registered with us of such modifications if this is possible without disproportionate effort. In general, however, a data processing activity is subject to version of the Privacy Policy which is the latest version at the beginning of the relevant processing.

Communication with us

We collect personal data when you contact us in writing, electronically or by phone, e.g. when you contact our customer service. We process contact and communication data, including in particular the following personal data:

• your name;
• depending on the type of communication, your contact data such as postal address, e-mail address and telephone number;
• content and time of the communication.

In this context, we process your personal data for the following purposes:

• Customer service and maintenance; general communication with you: It is important to us that you can contact us and report your concerns.
• Quality assurance and training: The possible recording of conversations helps us to analyse and improve our processes.

Of course, you are not obliged to provide us with specific information. However, we can often only answer your queries if you provide us with certain minimum details.

Interaction with our customer service depends on your initiative; we understand this as your consent to the processing of your personal data.

The processing of data by our customer service is within our legitimate interests, as it enables us to improve the quality of our services, avoid errors in our processes and achieve higher customer satisfaction.

Purchase of goods and services

When you shop with us, we process personal data in connection with your purchasing and payment behaviour. This includes, in particular, the following personal data that may be sensitive:

• your name;
• your contact details including delivery and invoice address;
• information about products ordered by you;
• payment information.

For purchases on account we can check your creditworthiness. For this purpose, we usually obtain information from specialized companies, so-called credit agencies.

We may also evaluate information about purchases and behaviour and link it to other personal information we have collected about you (e.g. your shopping habits, your culinary preferences or your cooking skills).

In this context, we process your personal data for the following purposes:

• Processing: We process your personal data so that we can record your purchases and deliver the products when ordered.
• Customer services, e.g. with respect to the processing of warranty claims.
• Information about your purchasing behaviour: We analyse the purchasing behaviour of our customers and gain information from that, which we consider when improving our services.

You are not obliged to provide us with personal data when making purchases. However, orders, the purchase of services and the purchase of certain goods are not possible without us processing personal data. Also shopping in online shops requires that we process the necessary personal data.

We base our processing on the fact that we are allowed to process your personal for the performance of a contract. We moreover base the processing on legitimate interests. Through the collected personal data we can tailor our services better and more specifically to your needs and interests and expand and improve our offerings.

Participation in sales parties and customer events

We process personal data when we invite you to sales parties or customer events (such as product demonstrations or cooking classes). In particular, this includes the following personal data:

• your name;
• your contact details;
• your participation or non-participation;
• further, event-specific data, such as your date of birth.

We may also evaluate your personal data and combine it with other personal data that we have collected about you (e.g. your shopping habits, your culinary preferences or your cooking skills).

We process your personal data in order to invite you to our events and to find out which customer events you are interested in. In this way, we can draw your attention specifically to the customer events that we hope will be of interest to you.

Participation in customer events is voluntary, but usually not possible without the processing of personal data.

We process your personal data after you have given us your consent to inform you about the relevant customer events or if you have registered for one of our customer events.

The processing mentioned to the left is also in our legitimate interest, because it enables us to get in touch with you personally and to get to know you better. This enables us to better tailor our services to your needs and interests and to expand and improve our services.

Electronic newsletters and direct marketing

When you subscribe to an electronic newsletter or if you purchase products from us, we will in particular process the following personal data:

• your name;
• your contact details;
• your e-mail address;
• the information whether you have consented to the receipt of newsletters or have filed an objection.

We may also process information about your use of the electronic newsletters; this includes in particular the following personal data:

• receipt of the newsletter;
• if and when you have opened and possibly forwarded the newsletter;
• links that you have clicked (target, date and time).

We may also evaluate your personal data and combine it with other personal data that we have collected about you (e.g. your shopping habits, your culinary preferences or your cooking skills).

We process your personal data in order to send you the electronic newsletter. We process personal data about your use of the electronic newsletter in order to get to know you better and to be able to tailor our services more specifically to you.

This data processing is voluntary for you. However, if you do not provide us with your personal data, in particular your e-mail address, we will not be able to offer you this service.

You can withdraw your consent for electronic newsletters and other direct marketing at any time by unsubscribing from this service. Withdrawal can be done via a link which is included into every electronic newsletter, or you may contact us.

We understand your subscription to our electronic newsletter as your consent for the processing of your personal data for the purposes described to the left.

The processing mentioned to the left is also in our legitimate interest, because it enables us to get in touch with you personally and to get to know you better. This enables us to better tailor our services to your needs and interests and to expand and improve our services.

Visiting our website (in general)

Every time you access our websites, for technical reasons, your browser transfers certain data to us and stores them in log files. This includes the following usage data, for example:

• IP address and device-specific information such as the MAC address of the device;
• contents accessed and the date and time of the visit to the website.

In this context, we process your personal data for the following purposes:

• Provision of the website: The recording of certain log files is compulsory in connection with the provision of the website.
• Website management: The processing of log files helps us to maintain and correct errors, to ensure the security of our website and to fight against fraud.
• Individualization and optimization of the website: We want to design our website as individual and user-friendly as possible. For this purpose, we store individual settings, e.g. that you have already called up the relevant website, which settings (e.g. language settings) you made at that time and which functionalities you used.

The processing of log files is in our legitimate interests.

Visiting our website (cookies)

Depending on the functionality, we store cookies. Cookies are small files that your browser automatically creates and that are stored on your terminal device when you visit our website. On the one hand, we use session cookies in which a unique identification number is stored, a so-called session ID, and information about the origin and storage period of the cookie. These cookies are deleted after your visit of our website. On the other hand, we use permanent cookies that remain stored even after the end of the respective browser session. Such cookies are used to recognize a visitor at a later visit.

Cookies do often not process any personal data. For example, it is hardly possible for us to assign the information collected by the cookie to a specific person.

We use cookies for the following reasons:

• Cookies help us to ensure and safeguard the various functions and services of our website.
• The storage of cookies enables us to make it easier for you to use our website and to make functionalities as user-friendly as possible, for example by saving language settings or entries made for the duration of a browser session.
• Furthermore, cookies serve to adapt our online services to your needs. By collecting and evaluating information about the use in general and the behaviour of visitors of our website and the devices used for this purpose, we can provide you with targeted services of goods and services as well as other information that may be of particular interest to you.

You are not obliged to accept cookies used by us. You can configure your device (tablet, PC, smartphone, etc.) so that a message appears before a new cookie is created. This allows you to decline cookies. You can also delete cookies from your terminal. Further, you have the option of preventing the collection of data generated by the cookie (including your IP address) and the processing of this data by downloading and installing an appropriate browser add-on.

However, rejecting or deactivating cookies may imply that you are not able to use all functions of the website.

The use of cookies serves our legitimate interests. Some cookies are required, for example, to save individual settings or to offer shopping baskets. This individualization is also in the interest of our website visitors. Further, the analysis of the use of our websites is a legitimate interest.

Visiting our website (evaluation of user behaviour)

On our website, we use Google Analytics, an analysis service of Google, Inc. in the USA. Google Analytics uses cookies that enable an analysis of the website use. General information about cookies can be found in this table under "visiting our website (cookies)". Thereby, information about your behaviour on our website and the device used (PC, tablet, smartphone, etc.) are stored.

This information is stored on a Google server in the USA. However, your IP address will first be shortened in the EU or the EEA. Only in exceptional cases will the full IP address be transmitted to the USA. In the USA, Google is bound by the US Privacy-Shield-Program. Google Analytics also makes it possible to assign data, sessions and interactions across several end devices to a pseudonymous user ID and thus to analyse the activities of an unknown user across devices. For more information, please see Google's Terms of Use and Privacy Policy.

We also use similar services from other providers such as, for example, Matomo, each of which uses cookies. The providers often do not receive any personal data, but can record the user's use of the concerned website. These records may be linked to information from other websites that use the same service. The behaviour of a particular user can be recorded across multiple websites and devices. The respective provider can also use this data for his own purposes, e.g. for personalised advertising.

This information is used to better understand the use of our website and to improve its content, functionality and irretrievability. For example, we can see from which pages most visitors come to us, which pages are visited most and from which pages most visitors leave us.

You can prevent the use of Google Analytics by installing an add-on for your browser, a so-called browser-add-on. You can also set an opt-out cookie by clicking here. An opt-out cookie prevents future collection. However, it only applies to the browser in question. To prevent data entry across different devices, you must therefore perform the opt-out on all devices and browsers used. If you delete your cookies in a browser, the opt-out cookie will also be removed.

The processing purposes mentioned are within our legitimate interest. Our websites are a very important means of customer communication and acquisition for us. It is essential for us to keep our websites functional and attractive.

Visiting our website (social plug-ins)

Our websites use plug-ins, e.g. from Facebook, YouTube, Instagram or Google+. As a result, buttons of the respective providers are displayed, e.g. the "Like" button of Facebook or the "+1" button of Google, or content of the respective provider is integrated on the website.

When you visit a website that uses such a plug-in, your browser establishes a direct connection to the servers of that provider. The content of the plug-in is transmitted directly to your browser by the respective provider and integrated into the respective website. As a result, the respective provider receives in particular the following personal data:

• the information that your browser has visited the website in question;
• the IP address of the device used, even if you do not have an account with the provider.

If you are also logged in at the provider's website at the same time, the provider can assign the visit to your personal profile. If you interact with a plug-in - for example by pressing the "Like" button or making a comment - the corresponding information is transferred directly from your browser to the provider concerned and stored there. The interaction may also be published on the profile you hold with the provider and be visible to your contacts.

We use plug-ins to make our website more attractive and to make it easier for you to interact with the relevant offer, e.g. to "like" a page. This also helps us to reach a wider audience for our website. Further information about the processing of the relevant data can be found in the privacy policy of the respective providers

If you do not want the respective providers to collect information about you via our website, you must log out from the provider's website before visiting our website. Yet, even when you are logged out, providers use social plug-ins to place cookies and to collect anonymous data which can be assigned to your profile, provided you log in to the respective provider's website at a later time. If such cases the respective provider processes your personal data on as controller and in accordance with their own data protection regulations. If you want to prevent the provider from assigning data to your profile, you must delete the corresponding cookies. You can also completely prevent the loading of plug-ins with add-ons for your browser, e.g. using “NoScript“ or “No-Script Suite“.

The processing purposes mentioned are in our legitimate interests. It is very important to us to design our website in an attractive manner and to increase the interaction with our visitors. The use of social plug-ins is an important tool for this purpose.

Participation in competitions, contests and surveys

We collect personal data when you participate in competitions, contests and surveys ("event"). The scope of the personal data processed may vary depending on the event. The personal data which will be processed in particular include the following personal data:

• Your name;
• Your date of birth;
• Your contact details;
• the fact that you participate;
• the result of the participation;
• the input that you provide;
• correspondence about the event, if applicable.

Further details can be found in the corresponding conditions of participation.

We may also evaluate your personal data and combine it with other personal data, such as non-personal statistical information and other personal data that we have collected about you, in order to derive information about your preferences and affinities with certain products or services.

We will process your personal data in order to carry out the respective event and to notify the winner. With your consent we will also use your name and contact details for analysis and marketing purposes. For these purposes, we may combine your information with other non-personal and personal data that we have stored about you.

Participation in such events is voluntary, but not possible unless personal data is being processed.

If you participate in an event, you agree that we process your personal data for this purpose. We may ask you for further consent, e.g. to use your contact details for marketing purposes.

Entering an area under video surveillance

We take video recordings in appropriately marked areas. We may thus obtain information about your behaviour in the relevant areas. The use of video surveillance cameras is limited to specific locations and clearly marked. In addition, the data collected in this manner is only available for processing to specific employees.

Such processing is carried out for your own safety, the safety of our employees and for evidence purposes. If criminal acts are suspected, we can make the recordings available to the prosecution authorities.

If you do not want to be recorded, we must ask you not to enter the relevant areas.

It is within our legitimate interest to ensure our customers' and employees' safety in the relevant areas and to prevent possible crimes against our employees and our customers as well as to contribute to their investigation.

Wi-Fi in our premises

We collect device-specific data from your device as soon as you log in via our Wi-Fi infrastructure. This particularly includes the following information:

• the MAC address of your terminal device (a unique identifier for the device);
• date, time and duration of the connection.

In most cases, we cannot assign this information to a specific person.

When you use our Wi-Fi network, we will in particular process the following information:

• duration of the connection;
• location of the used Wi-Fi service;
• the volume of data used.

We process this information in order to provide you with Wi-Fi services and for IT security purposes. The use of our Wi-Fi service is voluntary. You are in principle also not obliged to disclose any personal data to us. However, it may not be possible to use the Wi-Fi service without your personal data being processed accordingly.

By using our Wi-Fi service, you consent to our processing of your personal data for this purpose.

Contact with our firm as business partner

If you work for a company that supplies or purchases goods or services from us or that works together with us in some other way, we process personal data about you, such as, for example,

• Your name;
• your position, your title, your field of activity;
• stations of your professional career;
• your interactions with us;
• information on deliverables and payments.

The processing of personal data serves the following purposes:

• to check whether we obtain services from your company or deliver them to your company or whether we want and can work together with your company (e.g. in the course of suitability tests, checks for conflicts of interest, etc.);
• to check whether your company offers the required security standards, e.g. if it would process personal data on our behalf;
• to plan the work schedules of our employees and, if necessary, of you or of employees of your company;
• for the purpose of performing contracts with your undertaking;
• for monitoring and performance evaluation;
• for the preparation and processing of company takeovers and sales and similar transactions.

You are not obliged to provide us with personal data . Yet, if you do not wish to provide us with the required personal data, we may not be able to work with you. In exceptional cases we are even legally obliged to process such personal data. We will always point out to you where this is the case.

We base our processing on the fact that we are allowed to process your personal for the performance of a contract.

The processing mentioned is also within our legitimate interest because it enables us to make use of external services and thus increase our efficiency.

Job applications:

When you apply for a job at our company, we process your contact details and the information provided to us (e.g. application, contact details, curriculum vitae, qualifications, certificates, etc.; if necessary also sensitive personal data). Other personal data may also be required in the course of a job application, depending on the position and profile.

We process your personal data to check your suitability for the position in question and to discuss possible employment with you. With your consent, we may also keep your application pending if we - or you - refrain from employment with a view to a possible later employment.

It is voluntary to provide the respective personal data, but we cannot process an application without the necessary personal data.

In case you send us your application dossier, you consent to the processing of the respective personal data for the mentioned purposes. Processing for the purposes mentioned to the left is further within our legitimate interests.

Compliance with legal requirements:

In order to comply with legal obligations, we may have to or want to process personal data. This is the case, for example, if an authority requires documents containing your name and contact details, or if we carry out an investigation. We may also conduct internal investigations in which your personal data may also be processed.

We in particular process your personal data for the following purposes:

• compliance with legal obligations, including orders from a court or authority;
• preventive measures to ensure compliance;
• measures to detect and clarify abuses.

Processing for the aforementioned purposes is necessary for compliance with legal obligations and for legitimate interests.

Protection of rights:

We process personal data in order to protect our rights, e.g. to assert claims in court, in or out of court and before local and foreign authorities or to defend ourselves against claims. For example, we can have process prospects clarified or submit documents to an authority. Authorities may also require us to disclose documents containing personal data. In addition to contact details of the persons concerned, we process other personal data depending on the constellation, e.g. information on processes that have given or could give rise to a dispute. This may also include sensitive personal data.

We process this personal data for the following purposes:

• Clarification and enforcement of our claims, which may also include claims by companies affiliated with us and our contractual and business partners;
• Defence against claims against us, our employees, companies affiliated with us and our contractual and business partners;
• Clarification of process prospects and other legal, economic and other issues;
• Participation in proceedings before courts and local and foreign authorities.

Processing for the aforementioned purposes may be necessary for the performance of contracts. It is also within our legitimate interests.