Notes on data protection The following information on data protection explains the type, scope and purpose of the collection and use of personal data when using this website and your rights. 1. Responsible for data processing (hereinafter: “we”) Dr. René Schmitz Sattelstraße 90 B 70327 Stuttgart Deutschland Contact E-Mail: info@liccal.de You can find more details in our provider identification ( https://liccal.de/impressum.htm ) 2. Personal data, purposes of their processing and legal bases Personal data is any information relating to an identified or identifiable natural person (hereinafter "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more special features that express identity of this natural person. Personal data is processed on our website if this is necessary for the following purposes: • based on your request and given consent (legal basis: Article 6 paragraph 1 subparagraph 1 letter a Datenschutz- Grundverordnung - hereinafter: DSGVO) • For the use of the website (legal basis: Article 6 paragraph 1 subparagraph 1 letter b DSGVO) • to safeguard our interest in improving the user experience, advertising our services and maintaining the security of use (legal basis: Article 6 paragraph 1 subparagraph 1 letter f DSGVO), • for the use of the services offered on the website and for pre-contractual measures, in particular for your inquiries (legal basis: Article 6 paragraph 1 subparagraph 1 letter a and/or Article 6 paragraph 1 subparagraph 1 letter b DSGVO), • for the conclusion and execution of a contract (legal basis: Article 6 paragraph 1 subparagraph 1 letter b DSGVO) and/or • to fulfill a legal obligation to which we are subject (e.g. tax law requirements and storage obligations, legal basis: Article 6 paragraph 1 subparagraph 1 letter c DSGVO). Further details on the processing of data can be found under relevant headings. a) Server-Logfiles When you visit our website, the servers of our website hosters lima-city of TrafficPlex GmbH, Konsul-Smidt-Str. 90, 28217 Bremen automatically saves the information that your browser sends, so-called server log files. The information includes the following • IP address in anonymous form (only used to determine the location of access) • Unique ID of the access • User-Agent-Header The temporary processing of this data by the system is necessary to enable delivery of the website to your end device. In particular, the IP address must be processed for this purpose. This data is not merged with other data sources. The information is used exclusively to control our own website traffic and to maintain the technical operation of the servers and the network of our hosts, as well as to prevent misuse. The legal basis for this is Article 6 paragraph 1 subparagraph 1 letter f DSGVO. You can find more information at our hoster. b) Cookies Some of our website uses so-called cookies or other technologies, especially those that are absolutely necessary or functional cookies, so that we can provide you with the accessed website and functions, § 25 paragraph 2 number 2 Telekommunikation-Telemedien- Datenschutz-Gesetz (TTDSG), Article 6 paragraph 1 subparagraph 1 letter f DSGVO. Most browsers also have an option that restricts or completely prevents the storage of cookies. However, it is pointed out that the use and in particular the ease of use are restricted without cookies. Instructions for the most common browsers: Firefox: https://support.mozilla.org/de/kb/Cookies-blockieren Crome: https://support.google.com/accounts/answer/61416?hl= de Safari: https://support.apple.com/de-at/HT201265 Edge: https://support.microsoft.com/de- de/help/4468242/microsoft-edge-browsing-data-and- privacy-microsoft-privacy c) Contact via email or other means If you send us inquiries via e-mail or any other way, your details, including the data you provided there, will be processed for the purpose of processing the inquiry and, if necessary, in the event of follow-up questions. The legal basis for this is Article 6 paragraph 1 subparagraph 1 letter b DSGVO. 3. Recipients of personal data and third-country transfers Personal data are communicated to the following categories of recipients: Our employees and our processors to the required extent, in particular the website and hosting provider lima-city of TrafficPlex GmbH, Konsul-Smidt-Str. 90, 28217 Bremen lima-city (www.lima-city.de) of our website. In addition, the personal data concerning you will not be passed on to third parties without your express consent, unless we are legally obliged to do so or the data transfer is absolutely necessary for the implementation of a contractual relationship. A so-called transfer to a third country is not intended. We only process personal data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) if it is necessary to fulfill our (pre)contractual obligations, on the basis of your consent, due to a legal obligation or is necessary on the basis of our legitimate interests. The same applies to processing by third parties on our behalf, the disclosure of your personal data to third parties and their transmission to third parties. Service providers who process personal data on our behalf in a third country are only used if there is an "adequacy decision" by the European Commission (Article 45 DSGVO), "appropriate guarantees" (Article 46 DSGVO) or "internal data protection regulations" for this third country (Article 47 DSGVO) are available to the recipient. General information on the adequacy decisions can be found at https://commission.europa.eu/law/law-topic/data- protection/international-dimension-data- protection/adequacy-decisions_en to suitable guarantees at, https://commission.europa.eu/law/law-topic/data- protection/international-dimension-data- protection/standard-contractual-clauses-scc_en and to internal data protection regulations at https://commission.europa.eu/law/law-topic/data- protection/international-dimension-data- protection/binding-corporate-rules-bcr_en For more information you can contact us. 4. Duration of storage We delete personal data after the purpose has been achieved and the legal basis has ceased to apply, and if there is no obligation to retain it. Saved server log files and IP addresses are automatically deleted after 7 days at the latest. We process personal data from your inquiries via e-mail or inquiries by other means until your inquiry has been fully processed and settled. After that, the information will be deleted. Please note, however, that due to a legal transaction with you, commercial and tax law storage obligations of at least six (Section 257 HGB) or ten (Section 147 AO) years may exist for certain data, which also applies to the content of contact requests and e-mails can apply. In addition, an annual check is carried out to determine whether data can be deleted. This is the case if the purpose of the processing and the requirements of the legal basis for the processing no longer apply and there is no longer a legal obligation to store it. 5. Provision of personal data and rights of data subjects You are not legally obliged to provide personal data. However, the provision may be necessary for the conclusion of a contract or for functions of the website. In the event of non-provision, a contract or a function may not be offered on the website. There is no automated decision-making on the website; profiling does not take place on our website. The rights of data subjects result in particular from Articles 15 to 23 and Article 77 DSGVO and from Sections 32 to 37 of the Bundesdatenschutzgesetz-neu. With regard to the personal data concerning you, you have the right to the following if the legal requirements are met: • information, Article 15 DSGVO, • correction, Article 16 DSGVO, • deletion, Article 17 DSGVO, • restriction of processing, Article 18 DSGVO, • portability, Article 20 DSGVO. If you have given your consent to the processing of personal data, you have the right to • Revocation, Article 7 DSGVO,with effect for the future. You also have the right to object to the processing of personal data • Objection, Article 21 DSGVO, see further information separately immediately under VI. Please address all inquiries, requests and notifications to us, see above under I. If you believe that the processing of personal data concerning you violates data protection law, you always have the • Right to Complain at the competent supervisory authority, cf. Article 77 DSGVO. Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State where you live, work or where the alleged infringement took place, if you believe that the processing of your personal data violates the DSGVO. The contact details of the data protection officers in the federal states, the supervisory authorities for the non- public sector, radio, the churches, in Europe and other countries as well as the virtual data protection office can be found there: h t t p s : / / w w w . b f d i . b u n d . d e / D E / I n f o t h e k / A n s c h r i f t e n _ L i n k s /anschriften_links-node.html The supervisory authority responsible for you is the State Commissioner for Data Protection and Freedom of Information for Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart. 6. Information on the right to object according to Article 21 DSGVO 1 . You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data in question, which is based on Article 6 paragraph 1 subparagraph 1 letter f DSGVO (data processing on the basis of a balance of interests). If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. 2 . If personal data is processed in order to operate direct advertising, you have the right to object at any time to the processing of data relating to you for the purpose of such advertising. If you object to the processing for direct marketing purposes, we will no longer process your personal data for these purposes. 3 . The objection can be made in any form and should be addressed to us (see I above) if possible.