Data protection

A. General

Your personal data in the sense of Art. 4 No. 1 DSGVO (e.g. title, name, e-mail address) will be processed by us only in accordance with the provisions of German data protection law and taking intoaccount the European General Data Protection Regulation (DSGVO). The following regulations inform you about the type, scope and purpose of the collection, processing and use of personal data.
The processing within the meaning of Art. 4 No. 2 DSGVO of personal data is lawful pursuant to Art.6 DSGVO if one of the following conditions is met:
- The data subject has given his/her consent to the processing of personal data concerning him/her for one or more specific purposes;
- Processing is necessary for the performance of a contract to which the data subject is party or for the implementation of pre-contractual measures taken at the data subject's request;
- Processing is necessary for compliance with a legal obligation to which the controller is subject;
- Processing is necessary in order to protect the vital interests of the data subject or of another natural person;
- Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
- Processing is necessary for the purposes of the legitimate interests of the controller or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.
The processing of special personal data (e.g. health data, biometric data, sexual orientation, religion, trade union membership) within the meaning of Article 9(1) of the GDPR is lawful in particular pursuant to Article 9(2) of the GDPR if one of the following conditions is met:
- There is an explicit consent of the person;
- Processing is necessary for the establishment, exercise or defense of legal claims or in case of actions by the courts in the course of their judicial activities.
The processing of personal data relating to criminal convictions and criminal offenses within the meaning of Article 10 of the GDPR may only be carried out under official supervision or if this is permitted under Union law or the law of the Member States, which provides appropriate safeguards for the rights and freedoms of the data subjects. If such data is not or no longer required for the performance of the mandate, it shall be deleted without delay.
Automatic decision-making or profiling with regard to personal data within the meaning of Art. 22 DSGVO does not take place.
The operator shall ensure the security of the data in accordance with Art. 32 DSGVO, taking intoaccount the principle of proportionality, by means of appropriate technical measures.
If, contrary to expectations, a breach of data protection occurs, the competent supervisory authority will be notified in accordance with Art. 33 GDPR, as well as the data subject in accordance with Art. 34GDPR.

B. Scope

This privacy policy only applies to our websites.

If you are redirected to other sites via links on our pages, please inform yourself there about the respective handling of your data.

C. Duration of data storage

When taking over an order, the duration of the storage of the data transferred by them is based on the legal storage obligations.

D. Disclosure of data to third parties

A transfer of data transmitted in the course of contacting us to third parties (Art. 4 No. 10 DSGVO) will only take place if:

You have given your express consent to this in accordance with Art. 6 (1) p. 1 lit. a DSGVO,
In the event that a legal obligation exists for the disclosure pursuant to Art. 6 (1) sentence 1lit. c DSGVO, as well as
This is legally permissible and necessary according to Art. 6 para. 1 p. 1 lit. b DSGVO for the processing of contractual relationships with you

The consent can be revoked informally at any time. Data collected through the visit of the website will only be collected by third parties, which are explicitly mentioned below under F..

E. Responsible person in the sense of the DSGVO

The controller within the meaning of the General Data Protection Regulation (GDPR), as well as otherdata protection laws applicable in the European Union and other provisions of a data protection natureis:

Victor Uhl
Rüterstrasse 51
2nd floor
D-22041 Hamburg

Tel.: +49 (0)173 / 1688845
E-Mail: info@victoruhl.de

F. Data processing on the website

The data will be processed by us on the website for the following purposes:

Ensuring a smooth connection of the website,
Ensuring a comfortable use of our website,
Evaluation of system security and stability as well as for other administrative purposes.

The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f DSGVO. Our legitimate interest follows from the purposes for data collection listed above. In no case do we use the data listed below for the purpose of drawing conclusions about your person:

Cookies

We use cookies on our site. These are small files that are automatically created by your browser and stored on your end device (PC, laptop, tablet, smartphone or similar) when you visit our site. Cookies do not cause any damage to your end device, do not contain viruses, Trojans or other malware. In the cookie, information is stored that arises in each case in connection with the specific end device used.This does not mean, however, that we gain direct knowledge of your identity.The use of cookies serves on the one hand to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your end device for a certain fixed period of time. If you visit our site again to use our services, it is automatically recognized that you have already been with us and which entries and settings you have made, so that you do not have to enter them again.

These cookies allow us to automatically recognize that you have already been with us when you visit our site again. These cookies are automatically deleted after a defined period of time. The data processed by cookies is necessary for the aforementioned purposes to protect our legitimate interests and those of third parties in accordance with Art. 6 (1) p. 1 lit. f DSGVO. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a notice always appears before a new cookie is created.However, the complete deactivation of cookies may mean that you cannot use all the functions of our website.

Storage of access data in log files

You can visit our websites without providing any personal information. We only store access data inso-called server log files, such as the name of the requested file, date and time of the request, amount of data transferred and the requesting provider. These data are evaluated exclusively to ensure trouble-free operation of the site and to improve our offer and do not allow us to draw any conclusions about your person.

The website is hosted via Webflow and UDMedia. We have signed an order processing contract with these services.

Google Analytics

On this website, we use Google Analytics, a web analytics service provided by Google Inc (hereinafter:"Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, by activating IP anonymization on this website, your IP address will be truncated beforehand by Google within Member States of the European Union or in other contracting states to the Agreement on theEuropean Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

The purposes of data processing are the evaluation of the use of the website and the creation of reports about activities on the website. Due to our legitimate interest in the analysis, optimization and economic operation of our website, the processing of data is based on Art. 6 (1) f) of the General DataProtection Regulation (DSGVO). You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

As an alternative to the browser plugin, you can prevent the collection by Google Analytics on this website by clicking on this link: Disable Google Analytics. This will set an opt-out cookie that prevents future collection of your data when visiting this website. For more information on the terms of use ofGoogle Analytics and data protection, please visit https://marketingplatform.google.com/about/analytics/terms/us/ or https://policies.google.com/privacy?hl=en.

Facebook Pixel

On our website, we use the Facebook pixel. The Facebook Pixel is an analytics tool from Facebook that allows us to measure the effectiveness of our advertising efforts. It is a JavaScript code that captures certain actions of visitors on our website, such as clicks on ads or filling out a form. This allows us to analyze user behavior and optimize our advertising efforts. The collected

Data is usually transferred to a Facebook server and stored there. This may result in a link between the collected data and your Facebook account, provided you are logged in to Facebook.

The processing of the data is based on our legitimate interest in the evaluation of advertising measures and the optimization of our advertising campaigns in accordance with Art. 6 para. 1 lit. f) of the DSGVO.

Further information on the use and processing of your data by Facebook, as well as your rights and settings options for protecting your privacy, can be found in Facebook's privacy policy: https://www.facebook.com/policy.php

Google Ads

As part of our online marketing measures, we use Google Ads (formerly Google AdWords) to advertiseour products and services. As part of our use of Google Ads, we employ Google's conversion tracking.Conversion tracking allows us to measure the success of our advertising campaigns by tracking certainactions of users on our website that were triggered by the ads. Cookies are stored on your computeror mobile device for this purpose.

The data collected may include the IP address, the geographical location, the browser used, the duration of the visit and the pages viewed. The data is usually transferred to a Google server in the USA and stored there. Google uses this information to evaluate the use of our website, to create reports on website activity and to provide other services related to the use of Google Ads and internet usage.

The processing of the data is based on our legitimate interest in optimizing our advertising campaigns and improving the user experience on our website in accordance with Art. 6 (1) f) of the DSGVO. You may refuse the use of cookies by selecting the appropriate settings on your browser, or you may download and install the Google Ads browser add-on to disable tracking by Google Ads.

Further information on the use and processing of your data by Google, as well as your rights and settings options for protecting your privacy, can be found in Google's privacy policy: https://policies.google.com/privacy?hl=en

TikTok

On our website we use the TikTok Pixel, an analytics tool from TikTok. The TikTok Pixel is a JavaScript code that allows us to track and understand visitors' activity on our website. This involves collecting information about visitors to our website and the devices they use. The data collected is used for targeting our ads and improving ad delivery, as well as for personalized advertising.

The processing of the data is based on our legitimate interest in analyzing and optimizing our advertising measures pursuant to Art.6 para. 1 lit. f) of the DSGVO. When using the TikTok Pixel, data such as the IP address, geographic allocation, type of browser, pages visited and interactions on our website may be collected.

The collected data is transmitted to TikTok and stored on their servers. TikTok may use this information to display personalized advertising and analyze the effectiveness of advertising campaigns. Please note that TikTok may also use cookies to store information on your terminal device.

The processing of your data by the TikTok Pixel is based on your consent pursuant to Art. 6 (1) a) of theDSGVO. You can revoke your consent at any time by changing the cookie settings in your browser or adjusting the privacy settings in the TikTok app.

For more information on how TikTok uses and processes your data, as well as your rights and privacy settings options, please see TikTok's privacy policy: https://www.tiktok.com/legal/page/eea/privacy-policy/en

Trustpilot reviews

We participate in the rating procedure of the provider Trustpilot A/S, where users have the opportunity to rate our services. The processing of the data is based on your consent in accordance with Art. 6 (1)a) of the DSGVO. In order to submit a rating, it is necessary to open a customer account with Trustpilot.

Please note that we have no direct influence on the ratings and cannot delete them ourselves. If youhave any questions or concerns regarding a review, please contact Trustpilot directly.

For more information on the processing of your data by Trustpilot, as well as your rights and settings options for protecting your privacy, please see Trustpilot's privacy policy: https://legal.trustpilot.com/for-reviewers/end-user-privacy-terms

Weglot translation service

We use the translation service Weglot to offer our website in different languages. When you visit our website, a connection may be established between your browser and the Weglot server. In the process, information, including your IP address, is transmitted to Weglot.

The processing of the data is based on our legitimate interest in presenting a multilingual website toour visitors in accordance with Art. 6 (1) f) of the DSGVO. The data is stored on the servers of Weglot.

For more information on the use and processing of your data by Weglot, as well as your rights and settings options for protecting your privacy, please see Weglot's privacy policy: https://weglot.com/privacy

Zapier

We use the Zapier service to connect different web apps and perform automated actions. In the process, data may be transferred to Zapier servers in the USA. We have concluded an order processing agreement with Zapier to ensure that your data is protected in accordance with the applicable data protection regulations. Data processing by Zapier is based on our legitimate interest in improving our online presence and the efficient design of our processes in accordance with Art. 6 (1) f) of the DSGVO.

For more information on how Zapier uses and processes your data, as well as your rights and privacy settings, please see Zapier's privacy policy: https://zapier.com/privacy/

Videoask

We offer you the possibility to contact us via our contact form by video, voice or text. For this purpose, we use the Videoask tool from the provider TYPEFORM SL. When using the Videoask tool, information about your activities on our website can be collected and processed. The data you enter will be stored and processed by us in order to process and respond to your request.

The processing of your data is based on your consent in accordance with Art. 6 (1) a) of the DSGVO. Your data will be treated confidentially by us and will not be disclosed to third parties unless this is necessary to fulfill your request or we are required to do so by law.

For more information on the use and processing of your data by Videoask, as well as your rights and settings options for protecting your privacy, please see Videoask's privacy policy: https://www.videoask.com/legal

Calendly

We offer you the possibility to arrange telephone appointments with us via the tool Calendly. In doing so, the data you enter will be transmitted to Calendly and stored and processed by us in order to carryout the appointment. The processing of your data is based on Art. 6 para. 1 lit. b) of the DSGVO.

Please note that when using Calendly, cookies may be used to track the origin of the appointment booking. For more information on the use and processing of your data by Calendly, as well as your rights and settings options to protect your privacy, please see Calendly's privacy policy: https://calendly.com/pages/privacy

Google Tag Manager

For our website, we use the Google Tag Manager, which allows us to centrally manage and integrate various web tags. The Google Tag Manager itself does not set any cookies and does not store any data.It is only used to manage the implemented tags, which can come from various tracking tools.

Your data is processed by the individual tracking tools in accordance with their privacy statements. Please note that some of the tracking tools may set cookies and collect information about your activities on our website. For more information on the use and processing of your data by the individual tracking tools, please refer to the respective privacy statements.

Amazon Affiliate Program

We participate in the affiliate program of Amazon EU, through which by means of advertisements and the placement of links to Amazon.de an advertising fee can be earned. We would like to point out thatAmazon EU uses cookies to be able to assign the origin of the order.

For more information about Amazon's privacy policy, please see Amazon's privacy policy: https://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=201909010

Contact form

When you use our contact form, the information and files you enter are transmitted and stored in order to process your request. Your data will be treated confidentially and will only be passed on to third parties if this is necessary to fulfill your request or if we are legally obliged to do so.

The processing of your data is based on your consent in accordance with Art. 6 (1) a) of the DSGVO.Your data will only be stored for the period of time required to process your request, unless there are statutory retention obligations.

Monday.com

We use the services of Monday.com to manage customer data and to support our online marketing.In doing so, certain information about your use of our website is collected and stored in theMonday.com platform. This includes, but is not limited to, IP address, geographic location, browser type, pages visited and length of visit.

The processing of your data is based on our legitimate interest in analyzing and optimizing our website in accordance with Art. 6 (1) f) of the DSGVO. The data is usually stored on servers within the EuropeanUnion. Monday.com ensures adequate data protection by complying with the EU standard contractual clauses.

For more information on the use and processing of your data by Monday.com as well as your rights and settings options to protect your privacy, please refer to Monday.com's privacy policy:https://monday.com/l/privacy/privacy-policy/

Request by e-mail or phone

If you contact us by e-mail or telephone, we store and process your inquiry and all resulting personal data (name, inquiry) for the purpose of processing your request. We do not pass on this data without your consent.

The processing of this data is based on Art. 6 (1) lit. b DSGVO if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 (1) (a) DSGVO) and/or our legitimate interests (Art. 6 (1) (f) DSGVO), as we have a legitimate interest in effectively processing the requests that are addressed to us.

The data you provide in the context of contact requests will remain with us until you request us to delete it, revoke your consent to store it, or the purpose of the data storage no longer applies (e.g.after final processing of your request). Mandatory legal provisions, in particular retention periods, remain unaffected.

If you would like to subscribe to our newsletter, we require an e-mail address from you and information that allows us to verify that you are the owner of the specified e-mail address and consent to receiving the newsletter. Further data is either not collected or collected on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.

The processing of the data entered in the newsletter registration form is based exclusively on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke your consent to the storage of the data, the email address and their use for sending the newsletter at any time by using the "unsubscribe" link in the newsletter. The legality of the data processing already carried out remains unaffected by the revocation.

The data you provide for the purpose of subscribing to our newsletter will be stored by us for as long as you are subscribed to the newsletter and will be deleted after you unsubscribe. Data that has been stored by us for other purposes (e.g. e-mail addresses for the member area) remains unaffected by this.

Social media links

There are links to our own social media pages on our website, which you can use to access the respective third-party websites and share our content. However, no data transfer takes place when you call up our website. As soon as you call up the pages of the third-party providers, the data protection declarations and information on data use of the respective third-party provider apply. We have no influence on this. To avoid unnecessary data transfer, we recommend that you log out of the respective third-party provider before using such a link in order to avoid the creation of usage profiles by the third-party provider.

G. Data security

We use appropriate technical and organizational security measures (TOM) to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

H. Your rights

You can request information about the personal data stored about you at any time and free of charge.Your rights also include confirmation, correction, restriction, blocking and deletion of such data and the provision of a copy of the data, in a form suitable for transmission, as well as the revocation of consent given and the objection. Legal storage obligations remain unaffected by this.

Your rights arise in particular from the following standards of the GDPR:

Article 7(3) - Right to withdraw consent under data protection law
Article 15 - Right of access of the data subject, right to confirmation and provision of a copy of the personal data
Article 16 - Right to correction
Article 17 - Right to erasure ("right to be forgotten")
Article 18 - Right to restrict processing
Article 20 - Right to data portability
Article 21 - Right of objection
Article 22 - Right not to be subject to a decision based solely on automated processing, including profiling
Article 77 - Right to complain to a supervisory authority

To exercise your rights (with the exception of Art. 77 DSGVO), please contact the office mentioned under the point "Responsible person in the sense of the DSGVO" (e.g. by e-mail to: info@uhlnation.com).

Competent supervisory authority

The Hamburg Commissioner for Data Protection and Freedom of Information of the Free and Hanseatic City of Hamburg - Public Corporation
Ludwig-Erhard-Str 22, 7. OG
20459 Hamburg

Tel.: 040 / 428 54 - 4040
Fax: 040 / 428 54 - 4000
E-Mail: mailbox@datenschutz.hamburg.de