DATA PROTECTION

PRIVACY AGREEMENT

1. GENERAL NOTICES AND PRINCIPLES OF DATA PROCESSING

According to Art. 4 No. 1 DS-GVO, personal data is all information that relates to an identified or identifiable natural person. This includes, for example, information such as your first and last name, your address, your telephone number, your e-mail address, but also your IP address. Data that cannot be related to your person, for example through anonymization, is not personal data. The processing (e.g. collection, storage, reading, querying, use, transmission, deletion or destruction) according to Art. 4 No. 2 DS-GVO always requires a legal basis or your consent. Processed personal data must be deleted as soon as the purpose of the processing has been achieved and there are no longer any statutory retention requirements. 2. Data collection to carry out pre-contractual measures and to fulfill the contract a) Type and scope of data processing In the pre-contractual area and upon conclusion of the contract, we collect personal data about you. This concerns, for example, first and last name, address, e-mail address, telephone number or bank details. b) Purpose and legal basis of data processing We collect and process this data exclusively for the purpose of executing the contract or fulfilling pre-contractual obligations. The legal basis for this is Art. 6 Para. 1 letter b) GDPR. If you also give your consent, the additional legal basis is Article 6 (1) (a) GDPR. c) storage period The data will be deleted as soon as they are no longer required for the purpose of their processing. There may also be statutory retention requirements, for example commercial or tax retention requirements under the German Commercial Code (HGB) or the Fiscal Code (AO). If such storage obligations exist, we will block or delete your data at the end of these storage obligations. 3. Data Transfer We only pass on your personal data to third parties if: a) You have given your express consent to this in accordance with Article 6 (1) (a) GDPR. b) this is permitted by law and required to fulfill a contractual relationship with you or to carry out pre-contractual measures in accordance with Article 6 Paragraph 1 Letter b) GDPR. c) pursuant to Article 6 Paragraph 1 Letter c) GDPR there is a legal obligation for the transfer. We are legally obliged to transmit data to state authorities, e.g. tax authorities, social security institutions, health insurance companies, supervisory authorities and law enforcement authorities. d) disclosure pursuant to Art. 6 (1) (f) GDPR is necessary to protect legitimate corporate interests and to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in non-disclosure of your data. e) according to Art. 28 DS-GVO, we use external service providers, so-called contract processors, who are obliged to handle your data with care. We use such service providers in the areas of:

• IT
• logistics
• telecommunications

In the case of transmission to external bodies in third countries, ie outside the EU or the EEA, we ensure that these bodies treat your personal data with the same care as within the EU or the EEA. We only transfer personal data to third countries for which the EU Commission has confirmed an adequate level of protection or if we ensure careful handling of the personal data through contractual agreements or other suitable guarantees. 4. Contact form a) Type and scope of data processing On our website we offer you the opportunity to contact us using a form provided. As part of the process of sending your request via the contact form, reference is made to this data protection declaration in order to obtain your consent. If you use the contact form, the following personal data will be processed: – Salutation – First name – Last name – Title – Company – Industry – Function – Street – Street number – Postal code – City – Country – E-mail address – Telephone number – Subject – Content of the message b) Purpose and Legal Basis The purpose of providing your e-mail address is to send you an answer to your inquiry by e-mail. When using the contact form, your personal data will not be passed on to third parties. The legal basis for the processing is consent in accordance with Article 6 (1) (a) GDPR on the declaration of consent you have voluntarily submitted below and which can be revoked at any time in the future: c) storage period The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions – in particular retention periods according to the German Commercial Code (HGB) or the Fiscal Code (AO) – remain unaffected by this. 5. Consent You hereby declare your consent that we may use your personal data for advertising purposes. This also includes use for e-mail advertising. Furthermore, you agree that we may use the data provided as a reference. Your above consent can be revoked at any time (by email to Alfons Kukeli info@kukeli.de or to Alfons Kukeli, Auf der Papenburg 9, 30459 Hannover, Germany). 6. Your Rights Here you will find your rights in relation to your personal data. Details can be found in Articles 7, 15-22 and 77 GDPR. You can contact the responsible office in this regard (section 2). Right to revoke your data protection consent in accordance with Art. 7 Para. 3 S. 1 DS-GVO You can revoke your consent to the processing of your personal data at any time with effect for the future. However, this does not affect the lawfulness of the processing that took place up until the revocation.

1. Right to information according to Art. 15 DS-GVO

You have the right to request confirmation as to whether we are processing personal data concerning you. If this is the case, you have the right to information about this personal data as well as further information, e.g. the processing purposes, the categories of processed personal data, the recipient and the planned duration of storage or the criteria for determining the duration.

2. Right to correction and completion according to Art. 16 DS-GVO

You have the right to request the correction of incorrect data without delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete data.

3. Right to erasure (“right to be forgotten”) according to Art. 17 GDPR

You have the right to erasure if processing is not necessary. This is the case, for example, if your data is no longer necessary for the original purpose, you have revoked your declaration of consent under data protection law, or the data was processed unlawfully.

4. Right to restriction of processing according to Art. 18 DS-GVO

You have the right to restrict processing, for example if you believe that the personal data is incorrect.

5. Right to data portability according to Art. 20 GDPR

You have the right to receive the personal data concerning you in a structured, common and machine-readable format.

6. Right of objection according to Art. 21 DS-GVO You have the right to object to the processing of certain personal data concerning you at any time for reasons that arise from your particular situation.In the case of direct advertising, you as the data subject have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.

7. Automated decision in individual cases including profiling according to Art. 22 DS-GVO

You have the right not to be subject to a decision based solely on automated processing – including profiling – except for the exceptional circumstances mentioned in Art. 22 DS-GVO. A decision-making based solely on automated processing – including profiling – does not take place.

8. Complaint to a data protection supervisory authority according to Art. 77 DS-GVO

You can also lodge a complaint with a data protection supervisory authority at any time, for example if you believe that data processing is not in accordance with data protection regulations. Name and contact details of the person responsible Our responsible person (hereinafter “responsible person”) within the meaning of Art. 4 no. 7 GDPR is: Kukeli GmbH & Co. KG Alfons Kukeli Auf der Papenburg 9 30459 Hannover, Germany Phone: +4951110580085 Email: info@kukeli.de

NOTES ON DATA PROCESSING IN CONNECTION WITH GOOGLE ANALYTICS

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the person responsible for data processing on this website is located outside the European Economic Area or Switzerland, Google Analytics data processing is carried out by Google LLC. Google LLC and Google Ireland Limited are hereinafter referred to as “Google”.

Google Analytics uses so-called “cookies”, text files which are stored on the computer of the site visitor and which enable an analysis of the use of the website by the site visitor. The information generated by the cookie about the use of this website by the site visitor (including the shortened IP address) is usually transmitted to a Google server and stored there. Google Analytics is only used with the extension “_anonymizeIp()” on this website. This extension ensures anonymization of the IP address by shortening it and excludes direct personal reference. As a result of the extension, Google’s IP address will be shortened beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. The IP address transmitted by the relevant browser as part of Google Analytics will not be merged with other Google data. On behalf of the site operator, Google will use the information collected to evaluate the use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the site operator (Art. 6 Para. 1 lit. f GDPR). The legitimate interest in data processing lies in optimizing this website, analyzing how the website is used and adapting the content. The interests of the users are adequately safeguarded by the pseudonymization. Google LLC. bietet eine Garantie auf Basis der Standardvertragsklauseln ein angemessenes Datenschutzniveau einzuhalten. Die gesendeten und mit Cookies, Nutzerkennungen (z. B. User-ID) oder Werbe-IDs verknüpften Daten werden nach 50 Monaten automatisch gelöscht. Die Löschung von Daten, deren Aufbewahrungsdauer erreicht ist, erfolgt automatisch einmal im Monat. Die Erfassung durch Google Analytics kann verhindert werden, indem der Seitenbesucher die Cookie-Einstellungen für diese Website anpasst. Der Erfassung und Speicherung der IP-Adresse und der durch Cookies erzeugten Daten kann außerdem jederzeit mit Wirkung für die Zukunft widersprochen werden. Das entsprechende Browser- Plugin kann unter dem folgenden Link heruntergeladen und installiert werden: https://tools.google.com/dlpage/gaoptout. Der Seitenbesucher kann die Erfassung durch Google Analytics auf dieser Webseite verhindern, indem er auf folgenden Link klickt. Es wird ein Opt-Out-Cookie gesetzt, der die zukünftige Erfassung der Daten beim Besuch dieser Website verhindert. Weitere Informationen zur Datennutzung durch Google, Einstellungs- und Widerspruchsmöglichkeiten, finden sich in der Datenschutzerklärung von Google (https://policies.google.com/privacy) sowie in den Einstellungen für die Darstellung von Werbeeinblendungen durch Google (https://adssettings.google.com/authenticated).

RECAPTCHA

Zum Schutz Ihrer Anfragen per Internetformular verwenden wir den Dienst reCAPTCHA des Unternehmens Google LLC (Google). Die Abfrage dient der Unterscheidung, ob die Eingabe durch einen Menschen oder missbräuchlich durch automatisierte, maschinelle Verarbeitung erfolgt. Die Abfrage schließt den Versand der IP-Adresse und ggf. weiterer von Google für den Dienst reCAPTCHA benötigter Daten an Google ein. Zu diesem Zweck wird Ihre Eingabe an Google übermittelt und dort weiter verwendet. Ihre IP-Adresse wird von Google jedoch innerhalb von Mitgliedstaaten der Europäischen Union oder in anderen Vertragsstaaten des Abkommens über den Europäischen Wirtschaftsraum zuvor gekürzt. Nur in Ausnahmefällen wird die volle IP-Adresse an einen Server von Google in den USA übertragen und dort gekürzt. Im Auftrag des Betreibers dieser Website wird Google diese Informationen benutzen, um Ihre Nutzung dieses Dienstes auszuwerten. Die im Rahmen von reCaptcha von Ihrem Browser übermittelte IP-Adresse wird nicht mit anderen Daten von Google zusammengeführt. Für diese Daten gelten die abweichenden Datenschutzbestimmungen des Unternehmens Google. Weitere Informationen zu den Datenschutzrichtlinien von Google finden Sie unter: https://policies.google.com/privacy?hl=de