Privacy Policy -Data protection agreements

In this data protection declaration we inform you about the processing of your personal data.

Unless otherwise stated below, the provision of your personal data is neither required by law or contract nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This only applies if no other information is provided during subsequent processing operations. “Personal data” means any information relating to an identified or identifiable natural person.

If you would like to change your data protection settings (grant consent or revoke consent that has already been given), click here to change your settings.

Responsible person

Contact us if you wish.

Signature Business Solutions, H. Aksit

Pickertstr. 45, 24143 Kiel, Germany

E-Mail: info@signature-business-bio.de

Hosting

Digital Ocean LLC

We host our website with our processor Digital Ocean LLC with server location: Frankfurt am Main, Germany.

Connection data is processed for the purpose of providing and delivering the website. For the sole purpose of delivering and providing the website, the data is not stored beyond the visit.

The legal basis for data processing is the legitimate interest (absolute technical necessity for the provision and delivery of the “website” service you expressly requested when you accessed it) in accordance with Art. 6 Para. 1 lit. f GDPR.

In order to operate the website, the connection data and other personal data are also processed as part of various other functions or services. This data protection declaration provides detailed information about this for the individual functions and services.

Server log files

You can visit our websites without providing any personal information. Every time you access our website, usage data is transmitted to us or our web host/IT service provider through your Internet browser and stored in log data (so-called server log files).This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider.

The legal basis for data processing is the legitimate interest (absolute technical necessity of a server log file as a basic database for error analysis and for security measures within the scope of the “website” service expressly requested by you) in accordance with Art. 6 Para. 1 lit. f GDPR.

Your data will be transmitted to Canada, among other places. There is an adequacy decision from the EU Commission for data transfers to Canada.

Initiative contact from the customer via email

If you initiate business contact with us via email, we will only collect your personal data (name, email address, message text) to the extent provided by you. The data processing serves to process and answer your contact request. If the contact is used to carry out pre-contractual measures (e.g. advice if you are interested in buying, preparing an offer) or concerns a contract that has already been concluded between you and us, this data processing is carried out on the basis of Article 6 Paragraph 1 Letterb GDPR. If contact is made for other reasons, this data processing is carried out on the basis of Article 6 (1) (f) GDPR due to our overriding legitimate interest in processing and answering your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data based on Article 6 Paragraph 1 Letter f of the GDPR. We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the contact form

When you use the contact form, we only collect your personal data (name, email address, message text) to the extent provided by you. The data processing serves the purpose of establishing contact. If the contact is used to carry out pre-contractual measures (e.g. advice if you are interested in buying, preparing an offer) or concerns a contract that has already been concluded between you and us, this data processing is carried out on the basis of Article 6 Paragraph 1 Letter b GDPR. If contact is made for other reasons, this data processing is carried out on the basis of Article 6 Paragraph 1 Letter f of the GDPR due to our overriding legitimate interest in thisProcessing and answering your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data based on Article 6 Paragraph 1 Letter f of the GDPR. We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Product orders

If you order a “Signature Business Solution” hardware or software via our website, you must provide personal data: your name, contact details and payment details. This data is required to process the contract with you (Art. 6 Para. 1 lit. b) GDPR). Your order data will be deleted as soon as it is no longer required to fulfill the contract. This is usually the case when all contractual obligations have been completely fulfilled and statutory retention periods no longer apply.

Transmission of contact details

With your Signature Business Bio products you can pass on the contact details you provided to third parties. This is done via a link that can be read by the third party using the QR code on the card or the integrated NFC chip using their mobile device. Youcan enter your contact details yourself in the login area of your card. The extent to which you enter contact details is entirely up to you to decide how you want to use your card and how meaningful it should be. The login area contains your Signature Business Bio products input fields for the following data:

▪Name of the profile

▪Profile photo

▪First name

▪Last name

▪Business information section with: company, position, email address, website

▪Contact information section with: mobile number, telephone, private email address

▪Web links section: Input option for web links URL and link description

▪Social Media Accounts Section: Enter option of social media accounts

▪Address section with: street and house number, postal code, city, country

All information can be changed or deleted online at any time in the login area. A few seconds after saving the changes, they are updated.

Additionally, any Signature Business Bio product can be reset. As soon as a signature product has been reset, the link of the QR code or NFC chip no longer leads to any personal data.

The password for the login area can be changed at any time using the menu button.

We will only use this information to provide you with an individual website so that you can make it available to third parties via your card. This is necessary in order to be able to fulfill our contractual obligations towards you (Art. 6 Para. 1 lit. b GDPR). Your contact details stored on the website are adequately protected against unauthorized or accidental access by third parties, as we hide every data record stored with us behind a unique multi-digit code that is contained in the link sent using a QR code or NFC chip. However, due to the code's many possible combinations, it is practically impossible for third parties to whom you have not made the link accessible yourself to access your data specifically or accidentally.

If you do not want us to keep your contact details, you can send us a corresponding message to info@signature-business-bio.com. We will then delete the stored contact details. In this case, however, your Signature Business Solutions product can no longer be used to provide your contact details to third parties.

Use of the email address to send newsletters

Regardless of the contract processing, we use your email address exclusively for our own advertising purposes to send the newsletter, provided you have expressly agreed to this. Processing is carried out on the basis of Article 6 Paragraph 1 Letter a GDPR with your consent. You can revoke your consent

at any time without affecting the lawfulness of the processing carried out based on your consent before its revocation. You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the distribution list. Your data may be passed on to a service provider for email marketing as part of order processing. It will not be passed on to other third parties.

Use of the email address to send direct mail

We use your email address, which we received as part of the sale of a good or service, to send electronic advertisements for our own goods or services that are similar to thoseYou have already purchased it from us, provided you have not objected to this use. Providing the email address is necessary for the conclusion of the contract. Failure to provide it will result in no contract being concluded. The processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in direct advertising. You can object to this use of your email address at any time by notifying us. The contact details for exercising your objection can be found in the legal notice. You can also use the link provided in the promotional email. There are no costs for this other than the transmission costs according to the basic tariffs.

Shipping service provider

Passing on the email address to shipping companies for information about the shipping status: We pass on your email address to the shipping company as part of the contract processing, provided you have expressly agreed to this during the ordering process. The purpose of the transfer is to inform you by email about the shipping status. Processing is carried out on the basis of Article 6 Paragraph 1 Letter a GDPR with your consent. You can revoke your consent at any time by notifying us or the transport company, without affecting the lawfulness of the processing carried out based on your consent before its revocation.

Use of PayPal

All PayPal transactions are subject to the PayPal Privacy Policy. You can find these at https://www.paypal.com/de/webapps/mpp/ua/privacy-full (https://www.paypal.com/de/webapps/mpp/ua/privacy-full)

Use of PayPal Express We use the PayPal Express payment service from PayPal (Europe) S.à.r.l. on our website. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”). The data processing serves the purpose of being able to offer you payment viathe PayPal Express payment service. In order to integrate this payment service, it is necessary for PayPal to collect, store and analyze data (e.g. IP address, device type, operating system, browser type, location of your device) when you access the website. Cookies can also be used for this purpose. The cookies enable your browser to be recognized. Your personal data is processed on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in a customer-oriented offer of various payment methods. You have the right to object to this processing of personal data concerning you at any time for reasons relating to your particular situation. By selecting and using PayPal Express, the data required for payment processing will be transmitted to PayPal in order to be able to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Article 6 Paragraph 1 Letter b GDPR. Further information on data processing when using the PayPal Express payment service can be found in the associated data protection declaration at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS (http://www.paypal .com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS).

Use of personal data when selecting Klarna payment options

In order to be able to offer you Klarna's payment options, we will transmit personal data, such as contact details and order details, to Klarna. In this way, Klarna can assess whether you can use the payment options offered through Klarna and adapt the payment options to your needs. General information about Klarna can be found at: https://www.klarna.com/de/ (https://www.klarna.com/de/). Your personal information will be used by Klarna in accordance with the applicable data protection regulations and in accordance with the information in Klarna's data protection regulations

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy (https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/ privacy).

Cookies

Our website uses cookies. Cookies are small text files that are stored in the Internet browser or by the Internet browser on a user's computer system. When a user accesses a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is accessed again. Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them and prevent the storage of the cookies and the transmission of the data they contain. Cookies that have already been saved can be deleted atany time. However, we would like to point out thats You may then not be able to use all functions of this website to their full extent. You can find out how you can manage cookies in the most important browsers (including deactivating them) using the links below: Chrome: https://support.google.com/accounts/answer/61416?hl=de (https:/ /support.google.com/accounts/answer/61416?hl=de) Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies ( https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies) Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben -and-reject (https://support.mozilla.org/de/kb/cookies-erlauben-und-reject) Safari: https://support.apple.com/de-de/guide/safari/manage-cookies -and-website-data-sfri11471/mac (https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac) Technically necessary cookies As far as described below Data protection declaration If no other information is provided, we only use these technically necessary cookies for the purpose of making our offering more user-friendly, effective and secure. Cookies also enable our systems to recognize your browser even after you change pages and to offer you services. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after a page change. The use of cookies or comparable technologies is based on Section 25 Paragraph 2 TTDSG. Your personal data is processed on the basis of Article 6 Paragraph 1 Letter f of the GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offering. You have the right to object to this processing of personal data concerning you at any time for reasons relating to your particular situation.

Use of YouTube

We use the function for embedding YouTube videos from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube") on our website. YouTube is a partnership with Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google") affiliated company. The function displays videos stored on YouTube in an iFrame on the website. The “Extended data protection mode” option is activated. This means that YouTube does not store any information about website visitors. Only when you watch a video is information about it transmitted to YouTube and stored there. Your data will be

if necessary transmitted to the USA. There is no adequacy decision from the EU Commission for the USA. The data transfer takes place, among other things, on the basis of standard contractual clauses as appropriate guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks (https://policies.google.com/privacy/frameworks). Your personal data is processed on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in the needs-based and targeted design of the website. You have the right to object to this processing of personal data concerning you at any time for reasons relating to your particular situation. Further information on the collection and use of data by YouTube and Google, your rights in this regard and options for protecting your privacy can be found in YouTube's data protection information at https://www.youtube.com/t/privacy (https://www .youtube.com/t/privacy).

Using Vimeo

We use plug-ins from Vimeo Inc. (555 West 18th Street New York, New York 10011, USA; "Vimeo") on our website to integrate videos from the "Vimeo" portal. If you access pages on our website with such a plug-in, a connection will be established to Vimeo's servers and the plug-in will be displayed on the page by notifying your browser. This means that both your IP address and the information about which of our pages you have visited are transmitted to Vimeo's servers. If you are logged in to Vimeo, Vimeo assigns this information to your personal user account. When you use the plug-in functions (e.g. by starting a video by pressing the corresponding button), this information is also assigned to your Vimeo account. Your data may be transferred to the USA. There is no adequacy decision from the EU Commission for the USA. The data transfer takes place, among other things, on the basis of standard

contractual clauses as appropriate guarantees for the protection of personal data, which can be viewed at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de (https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de). Your personal data is processed on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in the needs-based and targeted design of our website as well as Vimeo's legitimate interest in market analysis and in improving its services in a needs-based and targeted manner.You have the right to object to this processing of personal data concerning you at any time for reasons relating to your particular situation. If you do not want Vimeo to associate the collected information directly with your Vimeo account, you must log out of Vimeo before visiting our website. Further information on the purpose and scope of the collection as well as the further use and processing of the data by Vimeo as well as your related rights and options for protecting your privacy can be found in Vimeo's data protection information: https://vimeo.com/privacy (https: //vimeo.com/privacy)

Rights of those affected and storage period/duration of storage

After the contract has been fully processed, the data will initially be stored for the duration of the warranty period, then taking into account statutory retention periods, in particular tax and commercial law, and then deleted after the deadline has expired, unless you have agreed to further processing and use.

Rights of the data subject

If the legal requirements are met, you are entitled to the following rights in accordance with Articles 15 to 20 of the GDPR: right to information, to correction, to deletion, to restriction of processing,

on data portability. In addition, according to Art. 21 Para. 1 GDPR, you have the right to object to processing based on Art. 6 Para. 1 f GDPR, as well as to processing for the purpose of direct advertising.

Right to processing that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims. If personal data is processed for direct advertising purposes, you can object to this processing at any time by notifying us. After an objection has been made, we will stop processing the data concerned for the purpose of direct advertising.

Right to lodge a complaint with the supervisory authority

According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you believe that your personal data is not being processed lawfully. You can lodge a complaint with, among other things, the supervisory authority responsible for us,which you can reach using the following contact details: Berlin Commissioner for Data Protection and Freedom of Information Friedrichstr. 219 Puttkamerstr. 16 -10969 Berlin Tel.: +49 30 138890 Fax: +49 30 2155050 Email: mailbox@datenschutz-berlin.de

Right to object

If the personal data processing listed here is based on our legitimate interest in accordance with Article 6 Paragraph 1 Letter f of the GDPR, you have the right to object to this processing at any time with future effect for reasons arising from your particular situation. After an objection has been made, the processing of the data concerned will be terminated unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims. If personal data is processed for direct advertising purposes, you can object to this processing at any time by notifying us. After an objection has been made, we will stop processing the data concerned forthe purpose of direct advertising.

Right of withdrawal

You have the right to revoke any consent you have already given at any time by changing the data protection settings.

If you consent to receive electronic advertising, you can revoke your consent by clicking on the unsubscribe link. In this case, unless there is another legal basis, processing will be stopped.

The legality of the data processed until revocation is not affected by the revocation.