PRIVACY AND COOKIES POLICY

• The provisions of the EU General Data Protection Regulation (GDPR) apply throughout Europe. We would like to inform you about the processing of personal data carried out by our company in accordance with this regulation (see Articles 13 and 14 GDPR). If you have any questions or comments about this privacy policy, you can contact us at any time using the email address provided under I. 2 or I.3.

1. General Information

   In this section of the privacy policy, you will find information about the scope, the data controller for data processing, and its data protection oRicer.

   1.1 Scope

   On this page, we inform you about the nature, scope, and purpose of the personal data collected by Susble Chain UG, both when visiting this website and during other processing under our responsibility not related to this website.

   1.2 Data Controller

   The data controller for data processing—meaning the one who decides on the purposes and means of processing personal data—related to the processing is: Susble Chain UG Gutsmuthsstrasse 18 12163 Berlin [email protected]

   1.3 Data Protection ORicer

   You can contact our data protection oRicer as follows: [email protected]

2. Data Processing in Detail

   In this section of the privacy policy, we provide detailed information about the processing of personal data. For better clarity, we structure this information according to specific functionalities

   2.1 General Information on Data Processing

   For all processing described below, unless otherwise specified:

   2.1.1 No obligation to provide

   There is neither a contractual nor a legal obligation to provide personal data. You are not required to provide data.

   2.1.2 Consequences of Non-Provision

   For required data (data marked as mandatory during input), non-provision results in the inability to provide the respective service. Otherwise, non-provision may result in our services not being provided in the same form and quality.

   2.1.3 Transfer to State Authorities

   We only transfer personal data to state authorities (including law enforcement agencies) if required to fulfill a legal obligation to which we are subject (legal basis: Art. 6(1)(c) GDPR) or if it is necessary to assert, exercise, or defend legal claims (legal basis: Art. 6(1)(f) GDPR).

   2.1.4 Storage Period

   We do not store your data longer than necessary for the respective processing purposes. Once the data is no longer needed, it is regularly deleted unless temporary storage is still necessary. Reasons for this may include compliance with commercial and tax retention obligations, preservation of evidence for legal disputes within the statutory limitation periods, or explicit consent for continued storage. For statistical purposes, we use anonymized data that, according to current standards, cannot be related to your person. To protect your data, we use pseudonymized data whenever possible during processing.

   2.1.5 Categories of Recipients

   In addition to the explicitly listed recipient categories below, personal data is also transferred to the following categories of recipients: shipping service providers.

   2.1.6 Data Categories

   Account Data: Login/user ID and password
   Personal Master Data: Title, salutation/gender, first name, last name, date of birth, optionally profile picture
   Address Data: Street, house number, optional address additions, postal code, city, country
   Contact Data: Phone number(s), fax number(s), email address(es)
   Registration Data: Information about the service through which you registered; times and technical information about registration, confirmation, and deregistration; data provided by you during registration
   Order Data: Ordered products, prices, payment, and delivery information
   Payment Data: Account details, credit card information, data for other payment services
   Access Data: Date and time of visiting our service; the page from which the accessing system reaches our site; pages accessed during use; data for session identification (session ID); also, the following information about the accessing computer system: used IP address, browser type and version, device type, operating system, and similar technical information.
   Application Data: Resume, certificates, proofs, work samples, certificates

   2.2 Access to the Website/Application

   This section describes how we process your personal data when you access our services.

   a. Information about Processing

   The following data is collected: Access data for the purpose of proper connection establishment of our service, displaying content, data and business process security, and detecting and preventing attacks on our site based on unusual activities and error diagnosis. Access data is stored for 30 days. The legal basis for this processing of personal data is our legitimate interest according to Art. 6(1)(f) GDPR.

   b. Recipient of Personal Data

   The legal basis for the transmission of personal data is the data processing agreement according to Art. 28 GDPR. Recipient category: Web hosting service provider ARected data: Access data

3. Customer Support

   This section explains how we process your personal data when you contact our customer service.

   a. Information about Processing

   The following data is collected, each for the processing of customer inquiries and user complaints, customer retention, and improvement of our service: Personal master data Contact data Contents of inquiries or contact The data is stored for up to 3 years. The legal basis for this processing of personal data is Art. 6(1)(b), f) GDPR. b. Recipient of Personal Data

4. Customer Account / Order Processing

   We process customer data in the context of order processing in our online shop to enable the selection and ordering of chosen products and services, as well as their payment and delivery, or execution.

   a. Information about Processing

   The following data is collected and processed to ensure the provision of the contractual service within the operation of the online shop, billing, delivery guarantee. Also, for the processing of customer inquiries and user complaints, customer
   retention, and improvement of our service:
   Account data
   Personal master data
   Address data
   Contact data
   Registration data
   Order data
   Payment data
   Contents of inquiries or contact
   The legal basis for this processing of personal data is Art. 6(1)(a), b), f) GDPR.
   After registration, a confirmation email is sent to the user to activate the customer account. In the context of the customer account, users can view their orders, create a profile for product reviews (optional upload of a profile picture), and optionally complete account details with billing and delivery addresses. For order processing and payment, the following data is mandatory: first and last name, postal address, email address. In the context of registration and re-registration as well as the use of our online services, we store the IP address and the time of the respective user action. Storage is based on our legitimate interests as well as the user's interest in protection against misuse and other unauthorized use. In principle, this data is not passed on to third parties unless it is necessary to pursue our legal claims as a legitimate interest or there is a legal obligation to do so. Deletion takes place after the expiry of statutory warranty and other contractual rights or obligations (e.g., payment claims or performance obligations from contracts with customers); in the case of storage due to legal archiving obligations, deletion occurs after their expiration. Payments are made exclusively to the oRset account of Susble Chain UG. For payment processing, we provide the necessary payment data to the credit institution and, if necessary, to payment and invoicing service providers commissioned by us or to the payment service provider selected by you in the ordering process.

   b. Recipient of Personal Data

   External payment service providers We use external payment service providers through whose platforms users and we can make payment transactions. The processing of payments is carried out via the following service providers: Ratings / Ask a Question For all products, you will find the functions "Ratings" and "Ask a Question." To use these functions, you must create a customer account if you do not already have one. If you already have a customer account, you must log in before using the functions.

5. Application Data

   In an ongoing application process, we process your personal data as follows:
   a. Information about Processing The following data is collected for the processing of customer inquiries and user complaints, customer retention, and improvement of our service: Personal master data Contact data Application data The data is stored for the duration of the processing. We delete the application documents no later than 6 months after receiving a rejection to defend against potential discrimination claims.
   b. Recipient of Personal Data No transfer of personal data.

6. Newsletter

   You can subscribe to our newsletters on our site. In the newsletters, we will inform you about our oRers, latest news, and services from Susble Chain and may ask for your opinion. To deliver the newsletters, we need a valid email address. By subscribing to our newsletters, you agree to receive them and the described procedures. For sending newsletters, we use the double opt-in procedure, meaning we will only send you a newsletter by email after you have explicitly confirmed that we should activate the newsletter service. We will then send you a notification email and ask you to confirm by clicking a link in this email that you want to receive our newsletters.
   The sending of newsletters and the associated success measurement are based on the consent of the recipients according to Art. 6(1)(a), Art. 7 GDPR in conjunction with § 7(2)(3) UWG or, if consent is not required, on our legitimate interests in direct marketing according to Art. 6(1)(f) GDPR in conjunction with § 7(3) UWG.
   The logging of the registration process is based on our legitimate interests according to Art. 6(1)(f) GDPR.
   You can revoke your consent to the storage of data, email address, and their use for sending newsletters at any time. This also extinguishes your consents to their dispatch via our email service provider and statistical analyses. You will find a link to unsubscribe from the newsletters at the end of each newsletter or send us an email at: [email protected] Service Provider / Email Service Provider

7. Tracking

   Here we describe how your personal data is processed using tracking technologies for the analysis and optimization of our services and for advertising purposes.
   The description of the tracking methods also includes information on how you can prevent or object to data processing. Please note that the so-called "opt-out," i.e., rejection of processing, is usually stored via cookies. If you use our services on a new device or in a diRerent browser or if you have deleted the cookies set by your browser, you must declare your rejection again.
   The tracking methods presented process personal data only in pseudonymous form. There is no connection to a specific, identified natural person, meaning there is no merging of data with information about the carrier of the pseudonym.

   a. Purpose of Processing

   Analyzing user behavior using tracking helps us check the eRectiveness of our services, optimize them to meet user needs, and correct errors. Tracking for measuring the success of advertising campaigns aims to optimize our ads for the future.

   b. Legal Basis of Processing Consent according to Art. 6(1)(a) GDPR

   c. Specific Tracking Methods

8. Rights of Data Subjects

   8.1 Right to Object

   If we process your personal data to conduct direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling, insofar as it is related to such direct marketing.
   You also have the right to object at any time to the processing of personal data concerning you, which is carried out based on Art. 6(1)(e) or (f) GDPR, for reasons arising from your particular situation, including profiling based on these provisions
   The right to object can be exercised free of charge. You can reach us using the contact details under I.2.

   8.2 Right to Information

   You have the right to know whether personal data concerning you is processed by us, what personal data this may be, and other information according to Art. 15 GDPR. If you want information about your personal data, please contact us at the email address: [email protected]

   8.3 Right to Rectification

   You have the right to demand the immediate correction of personal data concerning you that is incorrect (Art. 16 GDPR). Taking into account the purposes of processing, you have the right to request the completion of incomplete personal data – including by means of a supplementary declaration.

   8.4 Right to Erasure ("Right to be Forgotten")

   You have the right to demand that personal data concerning you be deleted immediately if one of the reasons listed in Art. 17(1) GDPR applies, and the processing is not necessary for one of the purposes listed in Art. 17(3) GDPR.

   8.5 Right to Restriction of Processing

   You are entitled to request the restriction of the processing of your personal data if one of the conditions specified in Art. 18(1) a) to d) GDPR is met.

   8.6 Right to Data Portability

   You have the right to receive the personal data concerning you, which you have provided to us, in a structured, common, and machine-readable format. You also have the right to transmit this data to another data controller without hindrance from us, provided that the processing is based on consent or a contract and the data is processed automatically. This does not apply to data held only in paper form.

   8.7 Right to Withdraw Consent

   If the processing is based on your consent, you have the right to withdraw your consent at any time. The lawfulness of the processing carried out on the basis of the consent until the withdrawal is not aRected.

   8.8 Right to Lodge a Complaint

   You have the right to lodge a complaint with a supervisory authority
   Status: February 2024

This privacy policy sets out how this website (hereafter "the Store") uses and protects any information that you give the Store while using this website. The Store is committed to ensuring that your privacy is protected. Should we ask you to provide certain information by which you can be identified when using this website, then you can be assured that it will only be used in accordance with this privacy statement. The Store may change this policy from time to time by updating this page. You should check this page from time to time to ensure that you are happy with any changes.

• What we collect

We may collect the following information:

• name
• contact information including email address
• demographic information such as postcode, preferences and interests
• other information relevant to customer surveys and/or offers

For the exhaustive list of cookies we collect see the List of cookies we collect section.

• What we do with the information we gather

We require this information to understand your needs and provide you with a better service, and in particular for the following reasons:

• Internal record keeping.
• We may use the information to improve our products and services.
• We may periodically send promotional emails about new products, special offers or other information which we think you may find interesting using the email address which you have provided.
• From time to time, we may also use your information to contact you for market research purposes. We may contact you by email, phone, fax or mail. We may use the information to customise the website according to your interests.

• Security

We are committed to ensuring that your information is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online.

• How we use cookies

A cookie is a small file which asks permission to be placed on your computer's hard drive. Once you agree, the file is added and the cookie helps analyse web traffic or lets you know when you visit a particular site. Cookies allow web applications to respond to you as an individual. The web application can tailor its operations to your needs, likes and dislikes by gathering and remembering information about your preferences.

We use traffic log cookies to identify which pages are being used. This helps us analyse data about web page traffic and improve our website in order to tailor it to customer needs. We only use this information for statistical analysis purposes and then the data is removed from the system.

Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. A cookie in no way gives us access to your computer or any information about you, other than the data you choose to share with us. You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website.

• Links to other websites

Our website may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy statement. You should exercise caution and look at the privacy statement applicable to the website in question.

• Controlling your personal information

You may choose to restrict the collection or use of your personal information in the following ways:

• whenever you are asked to fill in a form on the website, look for the box that you can click to indicate that you do not want the information to be used by anybody for direct marketing purposes
• if you have previously agreed to us using your personal information for direct marketing purposes, you may change your mind at any time by letting us know using our Contact Us information

We will not sell, distribute or lease your personal information to third parties unless we have your permission or are required by law to do so. We may use your personal information to send you promotional information about third parties which we think you may find interesting if you tell us that you wish this to happen.

You may request details of personal information which we hold about you under the Data Protection Act 1998. A small fee will be payable. If you would like a copy of the information held on you please email us this request using our Contact Us information.

If you believe that any information we are holding on you is incorrect or incomplete, please write to or email us as soon as possible, at the above address. We will promptly correct any information found to be incorrect.

• List of cookies we collect

The table below lists the cookies we collect and what information they store.