PRIVACY POLICY

We, the Handtmann Group of Companies, appreciate your visit to our website and your interest in our products and our company. We take the protection of your personal data seriously and want you to feel safe and comfortable when visiting our website. It is generally possible to visit and use our website without providing any personal data.

As the data controller, we have implemented numerous technical and organizational measures to ensure that the personal data collected and processed via this website is protected as completely as possible. However, absolute protection does not exist here either, because Internet-based data transmissions can always have security gaps. As the data subject, you are therefore free to use alternative means of data transmission to us at any time.

Please note that we cannot guarantee for other providers whose websites you may reach via links on our website.

Please bear in mind that data transmission on the Internet can always be subject to security vulnerabilities. Complete protection against access by third parties is not possible.

Principles and responsible body
The protection of your personal data is important to us, which is why all personal data (e.g. first name, surname, address, e-mail address, telephone numbers, etc.) is collected and processed in accordance with the applicable data protection regulations such as the EU General Data Protection Regulation (EU-GDPR), the new Federal Data Protection Act (BDSG-new) and the Telemedia Act (TMG).

The responsible body within the meaning of the EU GDPR is

Albert Handtmann Elteka GmbH & Co. KG
Hubertus-Liebrecht-Strasse 21
88400 Biberach
+49 7351 342 0
info.elteka(at)handtmann.de Managing

Director: Mark Hoffmann

If there is an option to enter your personal or business data on our website - for example as part of a newsletter registration or a contact form - the mandatory information to be provided is limited to the minimum necessary to fulfill the intended purpose. We store the data you provide for the pur-poses stated in each case.

We will only use your data for other marketing purposes if we have informed you in detail about the intended use and you have given your express consent. You can unsubscribe from newsletters and withdraw your consent at any time with effect for the future.

Disclosure of personal data to third parties
Your personal data will only be made available to those persons in our company who are involved in processing your request or your registration for the newsletter. Your personal data may be disclosed to third parties if you have expressly consented to the disclosure or if data protection laws permit such disclosure. In some cases, our data processing is carried out by a data processor bound by instructions, who is obliged to comply with data protection regulations and may not use the data for any purpose other than the specified purpose.

Rights of data subjects
As a data subject whose personal data is collected and processed by us, you have the right (upon request) to receive information free of charge about the personal data we have stored about you. We must correct incorrect data at your request. You can also request the deletion (or blocking) of your data at any time - provided that this deletion does not conflict with any other legal or contractual basis. If deletion is not possible, you can alternatively request pseudonymization or anonymization. You can object to the use of your data at any time with effect for the future.

Legal bases of the processing
The basis for the processing described here can be found in Art. 6, para. 1, sentence 1, lit. a (consent) or in lit. b (pre-contractual measures) or in lit. c (fulfillment of a legal obligation) of the EU GDPR. Ultimately, processing operations carried out by us may be based on Article 6, sentence 1, point (f) if they serve to pursue a legitimate interest of our company or a third party. This can take place as long as the interests, fundamental rights and freedoms of a data subject do not prevail. Our legitimate interest is regularly to be able to carry out our business activities for the benefit of our owners and employees.

Contact of the data protection officer
If you have any questions regarding the collection and processing of your personal data, please contact our data protection officer:

Albert Handtmann Elteka GmbH & Co. KG
Klaus Zell
Hubertus-Liebrecht-Strasse 21
88400 Biberach
+49 7351 342 2900
dsb(at)handtmann.de

In addition, you can lodge a complaint at any time with the State Commissioner for Data Protection and Freedom of Information of the State of Baden-Württemberg (Germany) (https://www.baden-wuerttemberg.datenschutz.de/online-beschwerde).

Data that may be collected when you visit the website
When you visit our website, the following data about your access is logged:

• Visited website

• Date and time of access

• Source from where you came to our pages

• Browser used

• Operating system used

• End device used

• IP address used (anonymized)

The data collected is used exclusively for statistical analysis and to improve the website. However, we reserve the right to check existing server log files retrospectively if there are concrete indica-tions of illegal use or if we are requested to do so by investigating authorities.

When using the data listed above, we do not draw any conclusions about the data subjects. We use the information to be able to deliver the content of our website correctly, to optimize the content, to ensure the longterm functionality of our website and to support law enforcement authorities in the event of a cyber attack on our website.

Use of cookies
Internet pages today mostly use cookies to make the visit to the website more attractive and to enable the use of certain functions. Nevertheless, we try to keep the number of cookies to a minimum. Cookies are small text files that are stored on your computer. Cookies are usually deleted from your hard disk at the end of the browser session. As a rule, we use session cookies and not persistent cookies.

However, you can also view our website without cookies. Many browsers accept cookies automatically. You can set your browser so that it does not accept and store cookies. Under certain circum-stances, however, it is possible that individual functions of the website cannot be used to their full extent.

Google Analytics
If you have given your consent, Google Analytics 4, a web analysis service of Google LLC, is used on this website. The controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Nature and purpose of the processing:
Google Analytics uses cookies to help the website analyze how users use the site. The information collected by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there.

In Google Analytics 4, the anonymization of IP addresses is activated by default. Due to IP anonymization, your IP address will be shortened by Google within member states of the European Uni-on or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

During your website visit, your user behavior is recorded in the form of "events".

Events can be:

• Page views
• First visit to the website
• Start of the session
• Websites visited
• Your "click path", interaction with the website
• Scrolls (whenever a user scrolls to the end of the page (90%))
• Clicks on external links
• internal search queries
• Interaction with videos
• File downloads
• Viewed / clicked ads
• Language setting
• Also recorded:
• Your approximate location (region)
• Date and time of the visit
• Your IP address (in abbreviated form)
• technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
• Your Internet provider
• the referrer URL (via which website/advertising medium you came to this website)

Purposes of the processing:
On behalf of the operator of this website, Google will use this information to evaluate your pseudonymous or anonymized use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website and the success of our marketing campaigns.

Recipient:
Recipients of the data are/may be

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor pursuant to Art. 28 GDPR)

Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA Alphabet Inc., 1600

Amphitheatre Parkway Mountain View, CA 94043, USA

Third country transfer:
For the USA, the European Commission adopted its adequacy decision on July 10, 2023. Google LLC is certified under the EU-US Privacy Framework. Since Google servers are distributed worldwide and a transfer to third countries (for example to Singapore) cannot be completely ruled out, we have also concluded the "EU standard contractual clauses" with the provider.

Storage duration:
The data sent by us and linked to cookies is automatically deleted after 2. The maximum lifespan of Google Analytics cookies is 2 years. Data whose retention period has been reached is automatically deleted once a month.

Legal basis:
The legal basis for this data processing is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR and § 25 para. 1 sentence 1 TTDSG.

Revocation:
You can revoke your consent at any time with effect for the future by accessing the cookie settings and changing your selection there. The lawfulness of the processing carried out on the basis of the consent until revocation remains unaffected.

You can also prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to reject all cookies, this may limit the functionality of this and other websites. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by clicking

a. do not give your consent to the setting of the cookie or

b. download and install the browser add-on to deactivate Google Analytics HERE.

You can find more information on the terms of use of Google Analytics and on data protection at Google at https://marketingplatform.google.com/about/analytics/terms/de/ and at https://policies.google.com/?hl=de.

Youtube integration
We use the integration of videos from the Google-operated site YouTube (YouTube, LLC, 901 Cher-ry Ave., San Bruno, CA 94066, USA) on our website to display our own content.

This is also done using the socalled "double-click" method. This means that you are initially only shown a preview image on our website without a connection to YouTube being established. Only when you click on the respective preview image will a connection to YouTube be established and your IP address transmitted to the YouTube servers.

YouTube is thus informed that our website has been visited with your IP address. If you are also logged in to YouTube or Google with the browser you are using for this site, the name of the account will also be forwarded. This allows YouTube to associate your visit to this website with your user account. We have no knowledge of the data collected in this way or how it is used.

Further information on data processing by Google can be found at
https://www.google.de/intl/de/policies/privacy/.

Google Maps integration
We use Google Maps services on our website to display geographical information (e.g. maps with contact information). Google Maps is a map service operated by Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

When you use Google Maps, Google collects data about your use of the Google Maps functions, including your IP address, and transmits it to a Google server in the USA, where it is stored.

You have the option of deactivating the Google Maps service and thus preventing the transfer of data to Google by deactivating JavaScript in your browser.

However, we would like to point out that you will not be able to use the map displays in this case.

Further information on the terms of use of Google Maps and data processing by Google can be found on Google's website, including via the following links:

• http://www.google.com/intl/de_de/help/terms_maps.html
• www.google.com/privacypolicy.html

Newsletter
We offer newsletters on our website. If you register for a newsletter, this registration will be confirmed by a double opt-in procedure for legal reasons. Only the email address is shown as a mandatory field for registration. Your first name and surname are optional.

The personal data collected when registering for a newsletter is used exclusively to send our newsletter. We do not use tracking pixels.

You can unsubscribe from the newsletter at any time, without giving reasons and free of charge. You will find a corresponding link in every newsletter.

Alternatively, you can subscribe and unsubscribe on our website.

• https://www.handtmann.de/aktuelles/inmotion/inmotion-abonnieren/
• https://www.handtmann.de/aktuelles/inmotion/inmotion-abmelden/

Online applications
The controller within the meaning of the EU GDPR collects and processes personal data from applicants in order to carry out application procedures. As part of our online application portal, applicants can also submit their applications electronically.

If an employment contract is concluded with the applicant by the controller for the purpose of processing an employment relationship, the personal data collected and stored will be used and stored in compliance with the statutory provisions of the EU GDPR. If the controller does not conclude an employment contract with the applicant, the applicant's application documents will be deleted no later than two months after rejection.

The deletion may take place at a later date if the data must be used, for example, in legal proceedings (e.g. General Equal Treatment Act) to safeguard a legitimate interest of the controller. The data will then be deleted at the earliest possible date.

Data economy
In accordance with the principles of data avoidance and data economy, we only store personal data for as long as is necessary for the purpose of storage or as required by law (e.g. statutory retention periods). If the purpose on which the collection and use of the data was based no longer applies or if the storage or retention period ends, we delete or block the data.

Memory limitations
We only store personal data for as long as required by statutory retention periods. We routinely delete data after the expiry of such periods if the data is no longer required for purposes such as further contract fulfillment.

This privacy policy applies from 25.05.2018.

Deletion concept:

a.) Webaccesslogfiles:
Among other things, IP addresses of accesses are recorded in these log files. These IP addresses may also originate from third parties (i.e. not the provider and customer). This necessary data is deleted after 31 days at the latest.

b.) Authentication log files:
As part of the contractual relationship between provider and customer, specific authentication log files are also written. These log files only concern access by the provider or customer and document the use and access of the systems. This necessary data is deleted after 90 days at the latest.