§ 1 INFORMATION RELATED TO THE COLLECTION OF PERSONAL DATA

For the purposes of the present agreement, the following definitions shall apply

(1)  Below, we provide information on the collection of personal data when using this website. Personal data
are all data that are personally referable to you, such as name, address, email addresses and user
behavior.

(2)  Responsible party, in accordance with Article 4 para. 7 of the General data protection regulation (GDPR)
adopted in the European Union is COYO GmbH, Gasstraße 6, 22761 Hamburg / Germany (see our legal
information). You can contact our data protection officer at dpo@coyoapp.com or our postal address
with the addition "the data protection officer".

(3)  When you contact us via e-mail or via a contact form, the data you provide (your e-mail address, and if
applicable your name andyourtelephone number) will be storedby us in orderto answer your questions.
We will erase the data collected in this context after its storage is no longer required, or otherwise limit
its further processing if we are required by law to continue retaining it.

(4)  In case we employ contracted service providers for individual functions of our offer or would like to use
your data for advertising purposes, we will inform you in detail about the respective processes. We also
specify the defined criteria for the storage period.

§ 2 YOUR RIGHTS

(1) You have the following rights towards us regarding your personal data:

- Right to information,
- Right to correction or deletion,
- Right to limitation of processing,
- Right to object to processing,
- Right to data transferability.

(2) You also have the right to file a complaint with a data protection supervisory authority concerning our
processing of your personal data.

§ 3 COLLECTION OF PERSONAL DATA WHEN VISITING OUR WEBSITE

(1) If you use the website for information purposes only, i.e. if you do not register or otherwise provide us
with information, we only collectthe personal data that your browser transmits to our server. If you wish
to view our website, we collect the following data, which are technically necessary for us to display our
website to you and to guarantee stability and security (legal basis is Art. 6 para. 1 p. 1 lit. f GDPR):

- IP address
- Date and time of request
- Time zone difference from Greenwich Mean Time (GMT)
- Content of the request (concrete page)
- Access Status/HTTP status code
- Respective volume of data transferred
- The website making the request
- Browser
- Operating system and device
- Language and version of browser software.

(2)  In addition to the aforementioned data, cookies are stored on your computer when you use our website,
if you have given us your consent. Cookies are small text files that are stored on your hard disk in
association with the browser you're using and by which the body which sets the cookie (in this case, me),
transmits certain information. Cookies cannot run programs or deliver viruses to your computer. They
serve to make our site more user-friendly and effective.

(3)  Use of cookies:

(a) This website and our services use the following types of cookies,the scope and functionality of which are
explained below:

- Transient cookies (see b)
- Persistent cookies (see c).

(b)  Transient cookies are automatically deleted when you close the browser. These especially include
session cookies.These store a session ID which assigns the various requests made by your browser during
the joint session.This allows your computerto be recognizedwhen you return to the site.Session cookies
are deleted when you log out or close the browser.

(c) Persistent cookies are automatically deleted after a specified period, which may differ depending on the
cookie in question. You can delete cookies at any time in the security settings of your browser.

(d)  You can configure your browser settings as desiredandrefuse to acceptthird-party or any cookies.Please
note that you may not be able to use all functions of this website.

(e)  The Flash cookies used are not recorded by your browser, but by your Flash plug-in. We also use HTML5
storage objects that are stored on your mobile device. These objects store the required data
independently of your browser and do not have an automatic expiry date. If you do not wish the Flash
cookies to be processed, you must install an appropriate add-on, e.g. "Better Privacy" for Mozilla Firefox
WWW.COYOAPP.COM 3
(https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or the Adobe Flash killer cookie for Google
Chrome. You can prevent the use of HTML5 storage objects by using private mode in your browser. We
also recommend that you regularly delete your cookies and your browser history manually.

§ FURTHER FEATURES AND OFFERS ON OUR WEBSITE

(1)  In addition to the purely informational use of our website, we offer various services that you can use if
interested. For this purpose, you must provide further personal data which we use to provide the
respective service and to which the aforementioned data processing principles apply.

(2)  In some cases, we use external service providers to process your data. These have been carefully selected
and commissioned by us, are bound by our instructions and are regularly checked.

(3)  Furthermore, we may disclose your personal data to third parties if we offer promotions, competitions,
contracts or similar services together with partners. For more information, please provide your personal
data or see the description of the offer below.

(4)  If our service providers or partners are located in a country outside the European Economic Area (EEA),
in the description of the offer we will inform you of the consequences of this circumstance.

§ 5 NEWSLETTER

(1)  With your consent you can subscribe to our newsletter, with which we inform you about our current
interesting offers. The goods and services to be advertised will be named in the consent form.

(2)  To register for our newsletter, we use the "double opt-in" procedure. This means that after your
registration we will send you an e-mail to the specified e-mail address in which we ask you to confirm
that you would like the newsletter to be sent. If you do not confirm your registration within [24 hours],
your information will be blocked and automatically deleted after one month. In addition, we store your
IP addresses and the time of registration and confirmation. The purpose of the procedure is to be able to
prove your registration and, if necessary, to clarify a possible misuse of your personal data.

(3)  The only required information for sending the newsletter is your email address. The indication of further,
separately marked data is voluntary and is used to be able to address you personally. After your
confirmation we will save your e-mail address for the purpose of sending you the newsletter. The legal
basis is art. 6 para. 1 p. 1 lit. a GDPR

(4)  You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter.
You can declare your revocation by clicking on the link provided in every newsletter email, by sending an
email or by contacting us in one of the ways listed in the legal notice.

(5)  We would like to point out that we evaluate your user behavior when sending the newsletter. For this
analysis, the e-mails sent contain so-called web beacons or tracking pixels, which are stored on our
website. For evaluation purposes, we link the above data (para. 3) and web beacons to your e-mail address and an individual ID. Links included in the newsletter also contain this ID]With the data obtained
in this way, we create a user profile to tailor the newsletter to your individual interests. This means we
can record when you read our newsletter, which links you click on in it, and keep track of your personal
interests. We link these data with the way how you will use our website.
You can object to this tracking at any time by contacting us. The information is stored for as long as you
have subscribed to the newsletter. After a cancellation we store the data purely statistically and
anonymously. Such tracking is also not possible if you have deactivated the display of images in your email
program by default. In this case the newsletter will notbe displayed completely and you may not be
able to use all functions. If you display the images manually, the above-mentioned tracking will occur.

§ 6 OBJECTION OR REVOCATION AGAINST THE PROCESSING OF YOUR DATA

(1)  If you have given your consent to the processing of your data, you can revoke this at any time. If you
exercise this right, this will affect our ability to process your personal data after you have already given it
to us.

(2) Insofar as we base the processing of your personal data on the balance of interests, you may object to
the processing. This is the case if processing is not necessary in particular to fulfil a contract with you,
which is described by us in the description of the functions. When exercising such objection, we ask you
to explain the reasons why we should not process your personal data as we have done. In the event of
your justified objection, we will examine the situation and either stop or adjust data processing or point
out to you our compelling reasons worthy of protection, on the basis of which we will continue
processing.

(3) Of course, you may object to the processing of your personal data for advertising and data analysis
purposes at any time. You can inform us of your advertising objection at the following contact details:
dpo@coyoapp.com

§ 7 WEB ANALYTICS

1. USE OF GOOGLE ANALYTICS

(1)  This website uses Google Analytics, if you have given us your consent, a web analysis service of Google
Inc. ("Google"). Google Analytics uses "cookies", text files that are stored on your computer and that
enable your use of the website to be analyzed. The information generated by the cookie about your use
of this website is usually transmitted to a Google server in the USA and stored there. However, if IP
anonymization is enabled on this website, your IP address will first be truncated by Google within the
Member States of the European Union or other parties to the agreement on the European Economic Area.
Only in exceptional cases will the full IP address be transferred to a Google server in the USA and
truncated there. Google will use this information on behalf of the operator of this website to evaluate
your use of the website, to compile reports on website activity, and to provide other services regarding
website activity and internet usage for the website operator.

(2)  The IP address transmitted by your browser within Google Analytics is not merged with other Google
data

(3)  You can prevent cookies from being stored by selecting the appropriate settings in your browser;
however, we wish to point out that by doing so, you may not be able to enjoy the full functionality of this
website. You can also prevent the data generated by cookies concerning your use of the website (incl.
your IP address) from being passed to Google, and the processing of these data by Google, by
downloading and installing the browser plugin available at the following link:
http://tools.google.com/dlpage/gaoptout?hl=de.

(4)  This website uses Google Analytics with the extension "_anonymizeIp()". As a result, IP addresses are
further processedin truncatedform, so thatreference to individuals can be ruledout. Ifthe data collected
about you is personally identifiable, it will be blocked immediately and the personal data deleted as soon
as possible.

(5)  We use Google Analytics to analyses and regularly improve the use of our website. We can improve our
offer and make it more interesting for you as a user. Google has submitted to the EU-US Privacy
Shield, https://www.privacyshield.gov/EU-US-Framework, for exceptional cases in which personal data
is transferred to the USA. The legal basis for the use of Google Analytics is Art. 6 para. (1) sub-paragraph
1 (f) of the GDPR.

(6)  Third party provider information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street,
Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions:
http://www.google.com/analytics/terms/de.html, Overview of data Security:
http://www.google.com/intl/de/analytics/learn/privacy.html and the Privacy Policy:
http://www.google.de/intl/de/policies/privacy.

(7)  This website also uses Google Analytics for an analysis of visitor flows across all devices that is carried
out via a user ID (Google Universal Analytics). You can disable the device cross-analysis of your use in your
account under "My data", "personal data".

2. USE OF HUBSPOT

COYO uses Hubspot, a service of Hubspot Inc., on its website for analysis purposes, if you have given us your
consent. Hubspot is certified under the EU-US Privacy Shield . So-called "web beacons" are used here and
"cookies" are also set, which are stored on your computer and enable us to analyze your use of the website.
Hubspot evaluates the recorded information (e.g. IP address, geographical location,type of browser, duration
of the visit and pages accessed) on our behalf in order to generate reports on the visit and the pages visited. If
you subscribe to our newsletter as described under §5, as well as download other documents, we can use
Hubspot to record your visits to our website with your additional information (above all your name/email
address) and, if necessary, to inform you specifically about your preferred topics. If you generally do not want
Hubspot to collect data, you can prevent cookies from being stored at any time using your browser settings (see §3 of the data protection declaration). For more information on how Hubspot works, please refer to the
Hubspot Inc. privacy policy: http://legal.hubspot.com/de/privacy-policy

3. USE OF INTERCOM.IO

If you have given us your consent, we use the technology ofthe provider Intercom of Intercom Inc., 98 Battery
Street, Suite 402, San Francisco, CA 94111, USA, to send our messages by email and live chat and to evaluate
the use of our website by users.


We transmit a limited amount of your data (such as email address and date of registration) to Intercom and
use Intercom for statistical analysis of your use of our website. Intercom analyses the use of our website and
tracks our customer relationships with the aim of improving our services for you.We also use Intercom to send messages via email and live chat on our website. As part of our service contract, Intercom collects publicly available contact information related to you, such as email addresses, gender, company, position, photos, website URLs, social networks and addresses, with the aim of improving your user experience.

Further information on data protection at Intercom can be found at http://docs.intercom.io/privacy. The
terms of use of Intercom can be found at http://docs.intercom.io/terms. As described above under para II. you can revoke your consent to the storage and use of your data at any time to send further offers by email and live chat, including each email message with further offers contains a corresponding link "unsubscribe".

§ 8 SOCIAL MEDIA

1. USE OF SOCIAL MEDIA PLUG-INS

(1)  If you have given us your consent,we use the following social mediaplug-ins: Facebook,Google+,Twitter,
Xing, T3N, LinkedIn, Flattr, Instagram.We use the so-calledtwo-click solution. This means thatif you visit
our site, initially no personal data will be passed on to the providers of these plug-ins. You can recognize
the provider of the plug-in by the marking on the box above its initial letter or the logo. We offer you the
possibility to communicate directly with the provider ofthe plug-in via the button.Only if you click on the
markedfieldandthereby activate it,the plug-in providerreceives the information that you have accessed
the corresponding website of our online offer. In addition, the data mentioned under section § 3 of this
declaration will be transmitted. In the case of Facebook and Xing, the IP address is anonymized
immediately after collection, according to the respective provider in Germany. By activating the plug-in,
data is automatically transmitted to the respective plug-in provider and stored there (US providers in the
USA).Since the plug-in provider collects data mainly via cookies,we recommendyou to delete all existing
cookies before clicking on the grayed-out box using your browser's security settings.

(2)  We have no influence on the data collected and data processing processes, nor are we aware of the full
extent of data collection, the purposes of processing, the storage periods. We also have no information
on the deletion of the data collected by the plug-in provider.

(3)  The plug-in provider stores the data collected about you as user profiles and uses these for the purposes
of advertising, market research and/or demand-oriented design of its website. Such evaluation is also
made for users who are not logged in, to display customized advertising and to inform other users of the
social network about activities on our website. You have a right to object to the creation of these user
profiles. You must contact the respective plug-in provider to exercise this right. Through the plug-ins we
offer you the possibility to interact with social networks and other users, so that we can improve our offer
and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. (1)
sub-paragraph 1 (f) of the GDPR.

(4)  The data is passedon regardless ofwhether you have an accountwith the plug-in provider andare logged
in there. If you are loggedinwith the plug-in provider, yourdata collectedwith us will be directly assigned
to your existing account with the plug-in provider. When activating the activated button and link the
page, for example, the plug-in provider also stores this information in your user account and
communicates this to your contacts in public. We recommend that you log out regularly after using a
social network, especially before activating the button, as this way you can avoid being assigned to your
profile with the plug-in provider.

(5)  For more information on the purpose and extent of the data collection and its processing by the plug-in
provider, please refer to the privacy statements of these providers provided below. Here, you will also
find further information on your rights and settings options for protecting your privacy.

(6)  Addresses of the respective plug-in providers and URL with their data protection information:

(a)  Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA;
http://www.facebook.com/policy.php; further information on data collection:
http://www.facebook.com/help/186325668085084,
http://www.facebook.com/about/privacy/your-info-on-other#applications and
http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has submitted to the
EU-US privacy shield, https://www.privacyshield.gov/EU-US-Framework

(b)  Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA;
https://www.google.com/policies/privacy/partners/?hl=de. Google has submitted to the EU-US
privacy shield (https://www.privacyshield.gov/EU-US-Framework)

(c)  Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA;
https://twitter.com/privacy Twitter has submitted to the EU-US privacy shield,
https://www.privacyshield.gov/EU-US-Framework.

(d)  Xing AG, Gänsemarkt 43, 20354 Hamburg, DE; http://www.xing.com/privacy.

(e)  T3N, yeebase media GmbH, Kriegerstr. 40, 30161 Hanover, Germany; https://t3n.de/store/page/datenschutz

(f)  LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, United States;
http://www.linkedin.com/legal/privacy-policy LinkedIn has submitted to the EU-US privacy shield,
https://www.privacyshield.gov/EU-US-Framework.

(g)  Flattr Network Ltd.with headquarters at 2ndFloor,White bear yard114A,Clerkenwell Road, London,
Middlesex, England, EC1R 5DF, Great Britain; https://flattr. com/privacy.

(h)  Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA:
https://help.instagram.com/155833707900388

2. . INCLUSION OF YOUTUBE VIDEOS

(1)  We have included YouTube videos in our online offering, which are stored on http://www.YouTube.com
and are directly playable from our website. These are all integrated and embedded in the "Extended
Privacy Mode", i.e. no data about you as user are transferred to YouTube if you do not play the videos.
Only when you play the videos will the data referred to in paragraph 2 be transmitted. We have no
influence on this data transfer.

(2)  When you visitthis website, YouTube receives the information that you have accessed the corresponding
subpage of our website. In addition, the data mentioned under section § 3 of this declaration will be
transmitted. This takes place regardless of whether YouTube makes available a user account via which
you are loggedin or no user account exists. If you are loggedin toGoogle, yourinformationwill be directly
associated with your account. If you do not wish to be associated with your profile when using YouTube,
you must first log out before clicking the button. YouTube stores your data as usage profiles and uses
them for the purposes of advertising, market research and/or requirements-oriented design of its
website. Such evaluation also takes place (even for users who are not logged in) for the purposes of
providing customized advertising and to inform other social network users about activities on our
website. You have the right to object to the creation of these user profiles, whereby you must contact
YouTube to exercise this right.

(3)  For more information on the purpose and scope of data collection and processing by YouTube, please
refer to the privacy policy. There you will also find further information on your corresponding rights and
settings options for protecting your privacy: http://www.google.de/intl/de/policies/privacy. Google also
processes your personal data in the USA and has submitted to the EU-US Privacy Shield,
https://www.privacyshield.gov/EU-US-Framework.

3. INTEGRATION OF VIMEO VIDEOS

If you have given your consent, plugins of the video portal Vimeo of Vimeo, LLC, 555 West 18th Street, New
York,NewYork 10011,USA are includedon our website. Each time you visit a site that offers one or more Vimeo
video clips, a direct connection is established between your browser and a Vimeo server in the USA.
Information about your visit and your IP address is stored there. By interacting with the Vimeo plugins (e.g.
clicking the start button), this information is also transmitted to Vimeo and stored there.

If you have a Vimeo account and do not want Vimeo to collectinformation about you through this website and link to your membership information stored on Vimeo, you must log out of Vimeo before visiting this website.
You can find the Vimeo privacy policy with more detailed information on the collection and use of your data by Vimeo at http://vimeo.com/privacy.

Vimeo also calls up the tracker Google Analytics via an iFrame in which the video is called. This is Vimeo's own tracking system to which we have no access. You can stop tracking by Google Analytics by using the opt-out tools that Google offers for some Internet browsers. You can also preventthe data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link:
http://tools.google.com/dlpage/gaoptout?hl=en

§ 9 ONLINE PUBLICITY

1. USE OF GOOGLE ADWORDS CONVERSION TRACKING

(1)  If you have given us your consent, we use the offer of Google AdWords to draw attention to our attractive
offers with the help of advertising materials (so-called Google AdWords) on external websites. We can
determine how successful the individual advertising measures are in relation to the data from the
advertising campaigns. We are interested in showing you advertisements which are of interest to you, in
making our website more interesting for you and achieving a fair calculation of advertising costs.

(2)  This advertising media is deliveredbyGoogle via "AdServers". Forthis purpose,we use adserver cookies,
through which certain parameters for measuring success can be measured, such as the display of
advertisements or of clicks by users. If you access our website via a Google ad, Google AdWords will store
a cookie on your device. These cookies usually expire after 30 days and are not used with the intention of
personally identifying you. The unique cookie ID, number of ad impressions per placement (frequency),
last impression (relevant for post-view conversions) and opt-out information (a mark that the user no
longer wishes to be addressed) are usually stored as analysis values for this cookie.

(3)  These cookies enable Google to recognize your Internet browser. If a user visits certain pages of an
AdWords customer's website and the cookie stored on their computer has not expired, both Google and
the customer are able to recognize that the user has clicked on the ad and has been redirected to this
page. Each AdWords customer is assigned a different cookie. Thus, cookies cannot be tracked using the
website of an AdWords advertiser.We do not process any personal data ourselves in the aforementioned
advertising measures.We only receive statistical evaluations from Google.We are able to recognize which
ofthe advertising measures are particularly effective on the basis ofthese evaluations.We do notreceive
any further data from the use of advertising material; in particular, we cannot identify users on the basis
of this information

(4)  Due to the marketing tools used, your browser is automatically able to establish a direct connection to
the Google server.We have no influence on the extent and the further use ofthe data which are collected
by Google's use of this tool, and we therefore inform you according to our knowledge: By integrating
AdWords conversion Google receives the information that you accessed the relevant part of our online
presence or clicked on one of our advertisements. If you are registered with a Google service, Google may
associate your visit to our website with your account. Even if you are not registered with Google or have
not logged in, it is possible that the provider may obtain and store your IP address.

(5)  You can preventparticipation in this trackingprocess in various ways: a) by setting your browser software
accordingly, in particular by suppressing third-party cookies, you will notreceive any ads from third-party
providers; b) by deactivating cookies for conversion tracking, by setting your browser to block cookies
from the domain "www.googleadservices.com", https://www.google.de/settings/ads, this setting being deleted when you delete your cookies; c) by deactivating the interest-based ads of providers that are part of the "About Ads" self-regulation campaign via the link http://www.aboutads.info/choices, this setting being deleted when you delete your cookies; d) by permanently deactivating Firefox, Internet Explorer or Google Chrome in your browsers underthe link http://www.google.com/settings/ads/plugin.Please note that in this case you may not be able to use all functions ofthis offer in full.

(6)  The legal basis for processing is your consent under Art. 6 para. (1) sub-paragraph 1 (f) of the GDPR.
Further information on data protection at Google can be found here:
http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html.
Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at
http://www.networkadvertising.org. Google has submitted to the EU-US privacy shield
(https://www.privacyshield.gov/EU-US-Framework)

2. REMARKETING

In addition to AdWords Conversion, if you have given us your consent, we use the Google Remarketing
application. This is a process we would like to use to contact you again. This application allows us to show you our advertisements after you have visited our website whilst you continue to use the Internet. This is done using cookies stored in your browser, which record and evaluate your usage behavior when Google visits various websites. This is how Google can determine your previous visit to our website. Google does not,
according to its own statements, combine the data collected in the context ofremarketing with your personal
data, which may be stored by Google. According to Google, in particular, Google AdWords Remarketing uses
pseudonymization.

3. DOUBLECLICK BY GOOGLE

(1) If you have given us your consent,this website continues to use the online marketing tool DoubleClick by
Google. DoubleClick uses cookies to serve ads relevantto users, improve campaign performance reports,
or to prevent a user from seeing the same ads more than once. Google uses a cookie ID to track which ads
are displayed in which browser and to prevent them from being displayed more than once. In addition,
DoubleClick may use cookie IDs to collect conversions related to ad requests. This is the case, for
example, when a user sees a DoubleClick ad and later visits the advertiser's website with the same
browser and buys something there. According to Google, DoubleClick cookies do not contain any
personal information.

(2)  Due to the marketing tools used, your browser is automatically able to establish a direct connection to
the Google server.We have no influence on the extent and the further use ofthe data which are collected
by Google's use of this tool, and we therefore inform you according to our knowledge: By integrating
AdWords conversion Google receives the information that you accessed the relevant part of our online
presence or clicked on one of our advertisements. If you are registered with a Google service, Google may
associate your visit to our website with your account. Even if you are not registered with Google or have
not logged in, it is possible that the provider may obtain and store your IP address.

(3)  You can preventparticipation in this trackingprocess in various ways: a) by setting your browser software
accordingly, in particular by suppressing third-party cookies, you will notreceive any ads from third-party
providers; b) by deactivating cookies for conversion tracking, by setting your browser to block cookies
from the domain "www.googleadservices.com", https://www.google.de/settings/ads, this setting being
deleted if you delete your cookies; c) by deactivating the interest-based ads of providers that are part of
the "About Ads" self-regulation campaign via the link http://www.aboutads.info/choices, this setting
being deleted if you delete your cookies; d) by permanently deactivating Firefox, Internet Explorer or
Google Chrome in your browsers underthe link http://www.google.com/settings/ads/plugin.Please note
that in this case you may not be able to use all functions ofthis offer in full.

(4)  The legal basis for processing is your consent under Art. 6 para. (1) sub-paragraph 1 (f) of the GDPR. For
more information about DoubleClick by Google, please visit https://www.google.de/doubleclick and
http://support.google.com/adsense/answer/2839090, and Google's privacy policy in general:
https://www.google. de/intl/en/policies/privacy. Alternatively, you can visit the website of the Network
Advertising Initiative (NAI) at http://www.networkadvertising.org. Google has submitted to the EU-US
privacy shield (https://www.privacyshield.gov/EU-US-Framework)

4. FACEBOOK CUSTOM AUDIENCES

(1) Furthermore, if you have given us your consent, the website uses the remarketing function "Custom
Audiences" of Facebook Inc. ("Facebook"). This allows users of the website to see interest-based
advertisements ("Facebook ads") when visiting the social network Facebook or other websites that also
use the process. We are interested in showing you advertisements that are of interest to you in order to
make our website more interesting for you.

(2)  Due to the marketing tools used, your browser is automatically able to establish a direct connection to
the Google server.We have no influence on the extent and the further use ofthe data which are collected
by Google's use of this tool, and we therefore inform you according to our knowledge: By integrating
AdWords conversion Google receives the information that you accessed the relevant part of our online
presence or clicked on one of our advertisements. If you are registered with a Google service, Google may
associate your visit to our website with your account. Even if you are not registered with Google or have
not logged in, it is possible that the provider may obtain and store your IP address.

(3)  The "Facebook Custom Audiences" function can be deactivated [here and] for logged in users at
https://www.facebook.com/settings/?tab=ads#_ .

(4)  The legal basis for processing is your consent under Art. 6 para. (1) sub-paragraph 1 (f) of the GDPR. For
more information about how Facebook processes your information, visit
https://www.facebook.com/about/privacy.

Version: May 24, 2018.