PRIVACY POLICY

of About You SE & Co KG, Domstraße 10, 20095 Hamburg (as of December 2021).

In this privacy policy we inform you about the processing of personal information carried out by About You SE & Co KG, Domstraße 10, 20095 Hamburg ("ABOUT YOU" and/or "we" and/or the "Controller") in accordance with the German Data Protection Regulation ("GDPR"). Our data protection information applies to all websites, applications and other services and performances (hereinafter jointly referred to as "services") offered by ABOUT YOU that are specified in its scope of application.

Please read our privacy policy carefully. If you have any questions or comments about our privacy policy, please contact us at [email protected].

Content

1. Name and contact details of the controller

This data protection information applies to data processing by the

About You SE & Co KG,
Domstraße 10, 20095 Hamburg
Phone: +49 (0)40-638 569 – 0
Email: [email protected]

legally represented by: ABOUT YOU Verwaltungs SE, which in turn is represented by the Management Board members Tarek Müller, Hannes Wiese and Sebastian Betz.

Chairman of the Supervisory Board: Sebastian Klauke

Website: www.aboutyou.com

for the following websites / applications: aboutyou.tech

2. Contact details of the data protection officer

You can contact the data protection officer(s) under

About You SE & Co KG
z. Hd. Sebastian Herting - Datenschutzkanzlei
Domstrasse 10
20095 Hamburg Germany
Email: [email protected]

3. Purposes of the data processing, legal bases and legitimate interests pursued by the controller or a third party, as well as categories of recipients

3.1 Calling up our websites/applications

3.1.1 Log files

Each time a service is accessed, information is sent by the respective internet browser of your respective device to the server of our service and temporarily stored in log files, the so-called log files. The stored data contain the following data, which are stored until automatic deletion: Date and time of the request, name of the requested page, IP address of the requesting device, referrer URL (origin URL from which you came to our service), the amount of data transferred, loading time, as well as product and version information of the respective browser used and the name of your access provider.

The legal basis for the processing of the IP address is Article 6(1)(f) GDPR. Our legitimate interest arises from the

Ensuring a smooth connection setup,
Ensuring a comfortable use of our services,
Evaluation of system security and stability.

A direct conclusion to your identity is not possible on the basis of the information and will also not be drawn by us. Information will be automatically deleted after the aforementioned purposes have been achieved. The standard periods for deletion are based on the criterion of necessity.

3.2 Data processing for advertising purposes

3.2.1. Raffles/ Sweepstakes

If you register/participate in a raffle/sweepstakes organized by ABOUT YOU (hereinafter referred to as "participation"), we will use the data you provide in the respective sweepstakes for the purpose of executing the participation agreement, in particular to notify you of the prize and, if applicable, to advertise our offers and/or offers from our sweepstakes partners. Detailed information can be found in the respective conditions of participation for the respective sweepstake. The legal basis for this data processing is Article 6(1)(a) GDPR, Article 6(1)(b) GDPR and Article 6(1)(f) GDPR.

3.3 Online presence and service optimisation

Our website uses the open source web analytics service of Plausible (OÜ Plausible Insights, Västriku tn 2, Tartu 50403, Estonia). The web analytics is based on anonymized data. Plausible does not set cookies, does not store any information in the browser, and generally does not collect any personal data. For more information about Plausible and its privacy policy, please visit: https://plausible.io/data-policy Service provider:; Website: https://plausible.io/, Privacy policy: https://plausible.io/data-policy.

The processing is based on our legitimate interest in measuring the reach of our website (Art. 6 para. 1 lit. f) GDPR).

4. Storage period and data deletion

ABOUT YOU will only store personal data for as long as it is necessary for the purposes stated in this privacy policy, in particular for the fulfilment of our contractual and legal obligations. If necessary, we will also store your personal data for further purposes, if or as long as the further storage for certain purposes is permitted by law.

5. Recipients outside the EU

Except for the processing described in this Privacy Policy, we do not share any personal information with recipients located outside the European Union or the European Economic Area.

6. Your rights

6.1 Overview

In addition to the right to revoke your consent given to us, you are entitled to the following further rights if the respective legal requirements are met:

the right to information about your personal data stored by us (Art. 15 GDPR), in particular you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the origin of your data, if it has not been collected directly from you;

the right to have inaccurate data corrected or to have correct data completed (Art. 16 GDPR),

the right to have your data stored by us deleted (Art. 17 GDPR), insofar as no legal or contractual retention periods or other legal obligations or rights to further storage are to be observed by us,

the right to restrict the processing of your data (Art. 18 GDPR), insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its deletion; the controller no longer requires the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR,

the right to data portability according to Art. 20 GDPR, i.e. the right to have selected data stored by us about you transferred in a common, machine-readable format, or to demand the transfer to another person responsible.

the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

You can assert the aforementioned rights at [email protected].

6.2 Right of objection

Under the conditions of Art. 21 (1) GDPR, data processing may be objected to for reasons arising from the particular situation of the data subject.

The above general right to object applies to all processing purposes described in this Privacy Policy that are processed on the basis of Article 6(1)(f) of the GDPR. Unlike the specific right to object to data processing for marketing purposes, the GDPR only requires us to implement such a general objection if you provide us with overriding reasons for doing so (e.g. a possible risk to life or health).

6.3 Right of withdrawal

Insofar as we process data on the basis of consent granted by you, you have the right to revoke the granted consent at any time. The revocation of the consent does not have the consequence that the data processing carried out on the basis of the consent up to the time of the revocation becomes ineffective.