Data Protection Information

---

This privacy statement applies to the data processing on the website www.adamhall.com/shop/ by the Controller:

Adam Hall GmbH
represented by the Executive Managers David Kirby, Markus Jahnel and Alexander Pietschmann
Adam-Hall-Str.1
61267 Neu-Anspach
Germany

(hereinafter referred to as "Adam Hall")

Phone: +49 (0) 6081 9419-0
E-Mail: info@adamhall.com

For all aspects on the subject of data protection, Adam Hall has appointed an external Data Protection Officer, who can be reached at:

Anders Born
Adam-Hall-Str. 1
61267 Neu-Anspach
Germany
E-Mail: dataprotection@adamhall.com

a) Web Hosting

In order to provide this website, we use the web hosting service SysEleven GmbH Ohlauer Str. 43, Aufgang C, 10999 Berlin, Germany, (hereinafter referred to as "SysEleven") as well as the services of dasistweb GmbH, Bergfelder Straße 11, 83607 Holzkirchen, Germany (hereinafter referred to as "dasistweb"). Dasistweb manages the applications in cooperation with SysEleven.

A web hosting service is necessary for offering a website. DSysEleven is used in accordance with Art. 6 Para. 1 Sentence 1 lit. f GDPR due to our legitimate economic interest of providing our offer on this website.

As part of the hosting, SysEleven and dasistweb process personal data on our behalf. The data they process is created by the following actions of the User:

We have concluded a contract data processing agreement with SysEleven and dasistweb. As a result of this agreement, the service providers ensure that they process the data in accordance with the GDPR and ensure the protection of the rights of the Persons Concerned.

b) Visiting the Website

You can access the website www.adamhall.com/shop/ without having to disclose your identity. All your device’s browser does is send information to our website’s server automatically (for example, your computer's operating system and the browser you are using, the name of your internet service provider, the name and the URL of the file accessed, date and time of access and the website from which the access was made).

This includes the IP address of the requesting device. This is temporarily stored in a so-called log file and is generally deleted automatically after 30 days: The IP address is processed for technical and administrative purposes of connection establishment and stability in order to ensure the safety and functionality of our website and to be able to pursue any unlawful attacks if necessary.

The legal basis for processing the IP address is Art. 6 Para. 1 Sentence 1 lit. f GDPR. UOur legitimate interest is the above-mentioned security interests and the necessity to maintain our website without any interruption.

By processing the IP address and other information in the log file, we cannot make direct conclusions on your identity.

In addition, we use cookies and analysis services when you visit our website. For further information on this, please see paragraphs [1] and [2] of this privacy statement.

c) Setting Up a Customer Account and Ordering via a Customer Account

You have the option of setting up a password-protected customer account with us for which we store your personal data. This serves the purpose of giving you the utmost comfort with a lighter, faster and more personal purchasing process when using the website and processing your orders.

If you want to set up a password-protected customer account with us, we need the following information:

In addition, you will need to choose a password to set up a user account. Together with your e-mail address, this allows you to access your user account. In your user account, you can see and alter the information we have stored about you at any time.

When you place an order via your account, we also require your payment data, depending on the payment method you have selected (for example for payment in advance, cash on delivery, direct debit).

We only store your personal data in a user account if you have freely given your consent in accordance with Art. 6 Para. 1 Sentence 1 lit. a GDPR, or if this is necessary in accordance with Art. 6 Para. 1 Sentence 1 lit. b GDPR for the fulfilment of a contract or for the implementation of pre-contractual measures.

After your user account is deleted, your data is automatically deleted for further use unless we are obliged to store it for longer in accordance with Art. 6 Para. 1 Sentence 1 lit. c GDPR due to storage and documentation obligations relating to tax and commercial law (from Commercial Code (HGB), the Penal Code (StGB) or Fiscal Code (AO)) or you have consented to further storage in accordance with Art. 6 Para. 1 Sentence 1 lit. a GDPR.

d) Processing your contact request

We offer you the opportunity to get in touch with us via E-Mail. The data is processed on your request and our replying to a contact request is considered legitimate interests according to Art. 6 Para. 1 Sentence 1 lit. f GDPR.

As a result of our legitimate interest in accordance with Art. 6 Para. 1 lit. f GDPR, we make use of the customer relationship management system from Freshworks Inc., 1250 Bayhill Drive, Suite 315, San Bruno, CA 94066, USA (hereinafter referred to as "Freshworks") for the purposes of processing your contact query.

As a result, personal data given by you is transferred to Freshworks on our behalf and stored on their servers in the USA. Freshworks adheres to the data protection provisions of the "US Privacy Shield" and is registered with the "US Privacy Shield" programme of the US Department of Commerce.

More information on Freshworks’ data protection policy can be found in their privacy statement.: https://www.freshworks.com/privacy/

For enquiries from customers in the USA and Canada, requests are managed by Adam Hall North America Inc., 1 S. Corporate Dr., Riverdale, NJ 07457 in conjunction with the task management application Smartsheet by Smartsheet Inc., Attn.:

Legal Department, 10500 NE 8th Street, Suite 1300, Bellevue, WA 98004 (hereinafter referred to as "Smartsheet"). As a result, personal data given by you is transferred to Smartsheet on behalf of Adam Hall North America and stored on their servers in the USA.

More information on Smartsheet’s data protection policy can be found in their privacy statement: https://www.smartsheet.com/legal/privacy/.

e) When Signing Up for Our Newsletter

If, in accordance with Art. 6 Para. 1 Sentence 1 lit. a GDPR you have given express consent, we will use your e-mail address to send you our regular (if applicable) personalised newsletter, including information on offers, promotions, events and our brand. A valid e-mail address must be supplied in order to receive the newsletter.

You will then receive a registration notification via e-mail which you must confirm in order to receive the newsletter (so-called double opt-in). This serves as proof for us that the registration was actually initiated by you.

We will send the (if applicable) personalised newsletter using the provider Inxmail from Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg, Germany, (hereinafter referred to as "[1}Inxmail{2]").

Inxmail allows us to measure and evaluate the behaviour of our newsletter recipients. DThis includes the rate of opening, clicking, bouncing, forwarding, unsubscribing and conversion. The evaluation is performed by so-called web beacons. These are pixel-sized graphics files that are implemented in the e-mail. Web beacons collect information such as your IP address, browser type/version, e-mail client and the time of access. This is used to track who opens the e-mail and clicks on the links contained in it. But it is neither ours nor Inxmail’s intention to monitor individual Users. DThe purpose of evaluating user behaviour is to identify reading habits and to organise content accordingly, to measure the success of e-mail campaigns and to improve what we and Inxmail have to offer.The purpose of evaluating user behaviour is to identify reading habits and to organise content accordingly, to measure the success of e-mail campaigns and to improve what we and Inxmail have to offer.

You can unsubscribe at any time, e.g. via a link at the end of each newsletter. If you have a customer account, you can also unsubscribe from the newsletter in your personal "My Account" section. Alternatively, you can send us your unsubscribe request by e-mail to the following address: unsubscribe@adamhall.com

After your consent is revoked, we will immediately delete your e-mail address unless otherwise authorised to store it.

To the extent permitted by law and as is necessary in accordance with Art. 6 Para. 1 Sentence 1 lit. b GDPR, we will pass your personal information on to third parties for the processing of contractual relationships with you or, in accordance with Art. 6 Para. 1 lit. f GDPR, to safeguard our interests or those of third parties. The data passed on may only be used by the third party for the purposes intended.

In addition, the disclosure of personal data to third parties will all be considered, if

Transmitting personal information to a third-party country or an international organisation does not happen.

Our website uses cookies. Cookies are small files that your browser creates automatically and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not cause any damage to your device and do not contain any viruses, Trojans or other malicious software.

Information which arises in connection with the specific device used is stored in the cookie. However, this does not mean that we are immediately aware of your identity.

The use of cookies serves, on the one hand, to make the use of our offer more enjoyable for you. Therefore, we use so-called session cookies in order to recognise that you have already visited individual pages of our website.

In addition, we also use temporary cookies which are stored on your device for a specified period of time to optimise the user-friendliness of our website. If you visit our page again in order to use our services, we automatically recognise that you have already visited the page and what your inputs and settings were, so that you do not need to enter them again.

On the other hand, we use cookies in order to statistically measure the use of our website and for evaluation for the purposes of optimising our offer for you (see paragraph [1]). Upon a return visit to our page, these cookies allow us to automatically recognise that you have already visited us. These cookies are deleted automatically after a defined period of time.

The data processed through the use of cookies is necessary for the purposes indicated to safeguard our legitimate interests, as well as those of third parties, in accordance with Art. 6 Para. 1 sentence 1 lit. f GDPR.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or so that a message appears before a new cookie is created. However, completely deactivating cookies can result in you not being able to use all of the features of our website.

Due to our legitimate economic interests in accordance with Art. 6 Para. 1 Sentence 1 lit. f GDPR, our website uses Pingdom, a web analytics service provided by SolarWinds Worldwide, LLC 7171 Southwest Parkway, Bldg 400, Austin, Texas 78735 (hereinafter referred to as: "Pingdom". By using Pingdom, we can monitor our website’s performance and make it as accessible and user-friendly as possible.

In this context, operating time, page speed and user information measurements are used to ensure that our websites are available and that access and loading times from different regions of the world, in conjunction with different browser versions, enable a satisfactory experience for our Users.By accessing a page, the following data is processed:

Pingdom adheres to the data protection provisions of the 'US Privacy Shield' and is registered with the 'US Privacy Shield' programme of the US Department of Commerce. In case of complaints about Pingdom which relate to this agreement, you can take part in a dispute settlement procedure(https://www.jamsadr.com/eu-us-privacy-shield).

More information on Pingdom’s data protection policy can be found here(https://www.solarwinds.com/general-data-protection-regulation-cloud).

For our website, we use Google Analytics, a web analytics service provided by Google, LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as: "Google"). In this context, pseudonymised usage profiles are created and cookies (see section [1]) are used. The information generated by the cookie about your use of this website, such as

is transferred to a Google server in the USA and stored there. Google adheres to the data protection provisions of the "US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active))" and is registered with the "US Privacy Shield" programme of the US Department of Commerce.

The information is used to assess usage of the website, to compile reports on website activities and to provide further services associated with website use and internet use for the purposes of market research and to provide needs-based design of these internet pages.

This information may also be transferred to third parties where required to do so by law, or where such third parties process this data on our behalf. Under no circumstances is your IP address associated with any other data held by Google. The IP addresses are anonymised so that they cannot be attributed to anyone (IP masking).

You may refuse the installation of cookies by selecting the appropriate setting in your browser software. However, we would like to point out that if you refuse cookies, not all functions of this website can be used to their full extent.

You may also prevent Google from collecting the data (including your IP address) generated by the cookie and related to your use of the website, as well as the processing of that data, by downloading and installing a [1}browser Add-On{2](https://tools.google.com/dlpage/gaoptout?hl=de).

As an alternative to the browser add-on, in particular for browsers on mobile devices, you can also prevent collection by Google Analytics by clicking on this link (https://www.adamhall.com/shop/?disableGoogleAnalytics=true). An opt-out cookie will be set which prevents the future collection of data when visiting this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

More information on Google Analytics’ data protection policy can be found in Google Analytics help(https://support.google.com/analytics/answer/6004245).

The use of Google Analytics for tracking is based on Art. 6 Para. 1 Sentence 1 lit. f GDPR. We want to create a needs-based design and ensure the continuous optimisation of our website. On the other hand, we use Google Analytics to statistically measure the use of our website. We also use data to optimise the distribution of advertising content. These interests are justified in accordance with the above provision.

Cookies (see paragraph 4) are used on our website to record and evaluate information for the optimisation of advertisements. For this, we use Targeting Technologies by Google LLC (Double Click, Double Click Exchange Buyer, Double Click Bid Manager) on the basis of Art. 6 Para. 1 Sentence 1 lit. f GDPR.

These technologies allow us to only show you advertising on your device that is geared towards your actual or perceived interests. These interests are justified in accordance with the above provision.

For example, the cookies used record information on which of our products you are interested in. Using this information, we can show you offers, even on third-party sites, that are tailored to your interests as indicated by your previous usage behaviour. Your user behaviour is collected and analysed pseudonymously and does not allow us to identify you. In particular, the information is not merged with personal data about you.

The cookie is automatically deleted after 14 months.

You can change settings for displaying interest-based advertising using Google’s display settings manager(https://www.google.com/settings/ads/onweb).

Further information and the data protection provisions relating to advertising and Google can be found in Google's Privacy Policy and Terms of Use(http://www.google.com/policies/technologies/ads/.

For our website, we use the tool Google Tag Manager by Google, LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as: "Google"). We manage the tools that we have mentioned in this privacy statement using the Google Tag Manager. For details on these tools, please refer to the information regarding the specific tool.

The tool Tag Manager itself (that implements the tags) is a cookie-free domain. DThe tool ensures the activation of other tags, which in turn collect data under certain circumstances. Google Tag Manager does not access this data. If a de-activation has occurred at the domain or cookie level, this remains for all tracking tags that are implemented with Google Tag Manager.

For more information about Google Tag Manager, please see the usage guidelines for this product(https://www.google.de/intl/de/policies/privacy/).

On our website, we use components (videos) by the company YouTube, LLC., 901 Cherry Ave, 94066, San Bruno, CA, USA (hereinafter referred to as: "YouTube"), a company of Google LLC, Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as: "Google"). This is based on consent according to Art. 6 Para. 1 Sentence 1 lit. a GDPR.

Here, we use the "Privacy-Enhanced Mode" option provided by YouTube.

When you access a page with an embedded video, a connection to the YouTube servers is established and the content is displayed on the internet page by way of message to the browser.

According to the information provided by YouTube, "Privacy-Enhanced Mode" means that your data – in particular which of our web pages you have visited, as well as device-specific information, including the IP address – is only transferred to the YouTube servers in the USA when you watch the video. By clicking on the video, you consent to this transfer.

If you are logged in to YouTube at the same time, this information will be assigned to your member account on YouTube. To avoid this, sign out of your account before visiting our website.

Google adheres to the data protection provisions of the'US Privacy Shield' and is registered with the 'US Privacy Shield' programme of the US Department of Commerce.

On our website we use an interactive map for display purposes from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereafter: "Google"). The legal basis for this is Art. 6 para 1 S. 1 lit. f DSGVO, whereby our legal interest in clear display of the map is for the purposes of improved use of the website.

As a result, Google collects device-related information, log data, including the IP address as well as location-related information.

The personal data collected by Google is transferred to a Google server in the USA and stored there. Google adheres to the data protection provisions of the "US Privacy Shield" and is registered with the "US Privacy Shield" programme of the US Department of Commerce.

Google uses the personal data to assess usage of the website, to compile reports on website activities and to provide further services associated with website use and internet use for the purposes of market research and to provide demand-orientated design of these internet pages. This information may also be transferred by Google to third parties where required by law, or where such third parties process this data on our behalf.

You can stop any data transfer by Google Maps to Google's servers by disabling JavaScript in your browser. If you do so, however, you cannot use the map display.

More information on Google Maps’ data protection policy can be found in Google’s privacy statement (https://www.google.de/intl/de/policies/privacy/).

You have the following rights:

For reasons related to your specific situation, you have the right to object at any time to the processing of personal data relating to you which takes place due to Article 6 Para. 1 lit. e GDPR (data processing in the public interest) and Article 6 Para. 1 lit. f GDPR (data processing on the basis of balancing of interests); this also applies to profiling (as defined in Article 4 No. 4 GDPR) based on this provision.

If you file an objection, we will no longer process your personal data unless we can prove compelling legitimate grounds for continuing with processing that outweigh your interests, rights and freedoms, or the processing is used for the establishment, exercise or defence of legal claims.

If your objection relates to the processing of data for the purposes of direct marketing, we will stop the processing immediately. In this case, the indication of a particular situation is not required. This also applies to profiling, insofar as it is connected with such direct advertising.

If you would like to claim your right of objection, please send an e-mail to dataprotection@adamhall.com

All personal data provided by you is transferred in encrypted form using standard and secure Standard Transport Layer Security (TLS). TLS is a safe and proven standard which is used, for example, in online banking. A secure TLS connection is recognisable by, among other things, the letters https:// in the address bar of your browser, or the padlock symbol in the lower section of your browser.

In addition, we make use of appropriate technical and organisational security measures for protecting your data against accidental or intentional manipulation, partial or complete loss or destruction, or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

This privacy statement is currently valid as of June 2018.

The further development of our website and offers or a change in legal or regulatory requirements may make it necessary to amend this privacy statement.The current data protection declaration can be found and printed off on our website at any time at https://www.adamhall.com/shop/privacy-policy-cookies von Ihnen abgerufen und ausgedruckt werden.