privacy 2

Thank you for your interest in our company. We take data protection seriously. You can visit our website without any indication of personal data. If a data subject wishes to use the services of our company via our website, processing of personal data may be necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we always obtain the consent of the data subject. The processing of personal data (e.B. name, address, e-mail address or telephone number of a data subject) is always carried out in accordance with the General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection regulations applicable to us. With the following data protection declaration, we would like to inform the public about the nature, scope and purpose of the personal data we collect, use and process. This data protection declaration also informs data subjects of their rights. As controllers, we have implemented numerous technical and organisational measures to ensure the most complete protection of the personal data processed via our website. However, data transmissions over the Internet can generally contain security gaps. 100% protection cannot therefore be guaranteed. Therefore, any data subject can of course also transmit personal data to us by telephone, for example.B.

1. Definitions

This privacy policy is based on the definitions used by the European legislator for the adoption of the GDPR (Article 4 GDPR). This Privacy Statement is intended to be both easy to read and easy to understand for each person. To ensure this, we would first like to explain the terms used. This Privacy Statement uses, inter alia, these terms: • “Personal Data” means any information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”); identifiable is a natural person who can be identified, directly or indirectly, in particular by association with an identifier such as a name, identification number, location data, online identification or one or more specific characteristics that are an expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person; • “data subject” means any identified or identifiable natural person whose personal data is processed by the controller. • ‘processing’ means any operation or series of operations carried out with or without the aid of automated procedures in connection with personal data, such as the collection, collection, organisation, ordering, storage, adaptation or modification, reading, querying, use, disclosure by transmission, dissemination or any other form of provision, comparison or linking, restriction, deletion or destruction; • “restriction of processing” mean the marking of stored personal data with the aim of restricting their future processing; • “profiling” means any form of automated processing of personal data, which consists in the use of such personal data to assess certain personal aspects relating to a natural person, in particular to analyse or predict aspects relating to work performance, economic situation, health, personal preferences, interests, reliability, behaviour, residence or location of that natural person; • ‘responsible person’, natural or legal person, authority, body or other body which decides, alone or jointly with others, on the purposes and means of processing personal data; where the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or the specific criteria for his designation may be provided for in accordance with Union law or the law of the Member States; • “recipient” means a natural or legal person, authority, body or other body to which personal data are disclosed, whether or not it is a third party. However, authorities which may receive personal data under Union or Member State law under a particular investigative mission shall not be deemed to be recipients; the processing of such data by the said authorities shall be carried out in accordance with the applicable data protection rules in accordance with the purposes of the processing; • ‘third party’ means a natural or legal person, authority, body or other body, other than the data subject, the controller, the processor and the persons authorised to process the personal data under the direct responsibility of the controller or processor; • “Consent” to the data subject means any voluntary expression of intent in the form of a declaration or other clear affirmative act in the form of a statement or other unambiguous affirmative act in which the data subject indicates that he or she agrees to the processing of the personal data concerning him or her. 2. Name and contact details of the controller This data protection notice applies to data processing by: Responsible: Timo Budesheim, Speerweg 25 a, 13465 Berlin, contact@mysauria.com, Phone: 0049 (0) 30 40636237

3. Collection and storage of personal data and the nature and purpose of their use

a) When you visit the website, you can use our website without disclosing your identity. When you visit our website, information is automatically sent to the server of our website by the browser used on your device. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automated deletion: • IP address of the requesting computer, • date and time of access, • name and URL of the retrieved file, • website from which access is made (referrer URL), • browser used and, if applicable, the operating system of your computer and the name of your access provider. The above-mentioned data will be processed by us for the following purposes: • ensuring a smooth connection of the website, • ensuring a comfortable use of our website, • evaluation of system security and stability as well as • for further administrative purposes. The legal basis for data processing is Article 6(0). 1 p. 1 lit. f GDPR. Our legitimate interest follows for the purposes of data collection listed above. In no case will we use the data collected for the purpose of drawing conclusions about you. In addition, when we visit my website, we use cookies and analysis services. For further information, please see clauses 5 and 7 of this Privacy Policy. b) If you use our contact form if you have any questions, we offer you the opportunity to contact us via a form provided on our website. A valid e-mail address is required so that we know who the request originated from and in order to be able to answer it. Further information may be provided voluntarily. It is up to you to decide whether you want to enter this data as part of the contact form. The data processing for the purpose of contacting us takes place in accordance with Art. 1 p. 1 lit. a GDPR based on your voluntary consent. The personal data collected by us for the use of the contact form will be automatically deleted after completion of the request you have made. c) When placing orders through our website please note that orders placed via our website are only possible for commercial resellers, as we are a wholesale company. Therefore, you cannot place orders as a guest via our website without registering, as the commercial requirement must first be checked by us. Your personal data will be entered into an input mask and transmitted to us and stored. When you place an order on our website, we first collect the following information: • salutation, first name, surname, • a valid e-mail address, • address, • telephone number (landline and/or mobile phone) The collection of this data is done in order to be able to identify you as our customer; • to process, fulfill and process your order; • for correspondence with you; • for invoicing; • for the settlement of any liability claims, as well as the assertion of any claims against you; • to ensure the technical administration of our website; • to manage our customer data. As part of the ordering process, you will obtain your consent to the processing of this data. The data processing takes place at your order and/or registration and is in accordance with Art. 1 p. 1 lit. b GDPR is necessary for the appropriate processing of your order and for the mutual fulfilment of obligations under the sales contract. The personal data collected by us for the processing of your order will be stored and subsequently deleted until the expiry of the statutory retention obligation, unless we are required to do so in accordance with Article 6 paragraph. 1 p. 1 lit. c GDPR are obliged to maintain it for a longer period of time due to tax and commercial storage and documentation obligations (from HGB, StGB or AO) or you are liable to a further storage in accordance with Art. 1 p. 1 lit. a GDPR.

4. Disclosure of data

We will only pass on your personal data to third parties to the service partners involved in the execution of the contract, such as.B the logistics company responsible for the delivery and the credit institution responsible for payment matters. However, in cases where your personal data is passed on to third parties, the scope of the transmitted data is limited to the minimum required. Your personal data will not be transferred to third parties for purposes other than those mentioned above. We will only share your personal information with third parties if: • you use your sedtini. 1 p. 1 lit. a GDPR have given explicit consent to this , • the disclosure in accordance with Article 6(0) of the 1 p. 1 lit. f GDPR is necessary to assert, exercise or defend legal claims and there is no reason to believe that you have an overriding interest in the non-disclosure of your data, • in the event that the disclosure in accordance with Article 6(s) is not required. 1 p. 1 lit. c GDPR is a legal obligation, as well as • this is permitted by law and in accordance with Article 6 paragraph. 1 p. 1 lit. b GDPR is required for the settlement of contractual relationships with you. As part of the ordering process, you will obtain your consent to pass on your data to third parties. 5. Use of cookies We use cookies on our site. These are small files that your browser automatically creates and which are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your device, do not contain viruses, trojans or other malware. The cookie stores information that arises in each case in connection with the specific device used. However, this does not mean that we will gain direct knowledge of your identity. On the one hand, the use of cookies serves to make the use of our offer more pleasant for you. For example, we use so-called session cookies to detect that you have already visited individual pages of our website. These will be deleted automatically after leaving our site. In addition, we also use temporary cookies to optimize the user experience, which are stored on your device for a specified period of time. If you visit our page again to use our services, it will be automatically recognized that you have already been with us and what entries and settings you have made so that you do not have to re-enter them. On the other hand, we used cookies to record the use of our website statistically and to evaluate them for the purpose of optimising our offer (see paragraph 7). These cookies allow us to automatically recognize that you have already been with us when you visit our site again. These cookies are automatically deleted after a defined time. The data processed by cookies are intended for the aforementioned purposes in order to safeguard our legitimate interests as well as third parties in accordance with Article 6 sec. 1 p. 1 lit. f GDPR required. Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or a notice always appears before a new cookie is created. However, the complete disabling of cookies may prevent you from using all the features of our website. 6. Links to third-party websites The links published on our website are researched and compiled by us with the greatest possible care. However, we have no influence on the current and future design and content of the linked pages. We are not responsible for the content of the linked pages and expressly do not adopt the content of these pages as our own. The provider of the website to which reference has been made is solely liable for illegal, incorrect or incomplete content as well as for damages resulting from the use or non-use of the information. The liability of the person who merely refers to the publication by means of a link is excluded. We are only responsible for third-party information if we have positive knowledge of them, i.e. also of any illegal or criminal content, and if it is technically possible and reasonable for us to prevent their use.

7. Analysis and Tracking Tools

The tracking measures listed below and, if applicable, used by us, are set out on the basis of Article 6(3). 1 p. 1 lit. f GDPR. With the tracking measures to be used, we want to ensure a needs-based design and the continuous optimization of our website. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for you for the purpose of optimising our offer. Those interests must be regarded as justified within the meaning of the abovementioned provision. The respective data processing purposes and data categories can be found in the corresponding tracking tools. a) Google Analytics1 For the purpose of designing and continuously optimizing our pages, we may use Google Analytics, a web analytics service provided by Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). In this context, pseudonymized user profiles are created and cookies are used (see section 5). The information generated by the cookie about your use of this website such as • browser type/version, • operating system used, • referrer URL (the previously visited page), • host name of the accessing computer (IP address), • time of the server request, are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website and internet usage for the purposes of market research and the design of these websites according to their needs. This information may also be transferred to third parties if required to do so by law or if third parties process this data on behalf of the company. Under no circumstances will your IP address be merged with other data from Google. The IP addresses are anonymized so that mapping is not possible (IP masking). You can prevent the installation of cookies by setting the browser software accordingly; However, we would like to point out that in this case not all functions of our website can be used to the full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de). As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on the above link. An opt-out cookie is set, which prevents the future collection of your data when you visit our website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you will need to set the opt-out cookie again. For more information about data protection related to Google Analytics, see the link below in the Google Analytics Help: https://support.google.com/analytics/answer/6004245?hl=de b) Google Adwords Conversion Tracking In order to record the use of our website statistically and to evaluate it for you for the purpose of optimizing our website, we also use Google Conversion Tracking. Google Adwords sets a cookie (see paragraph 5) on your computer if you have reached our website via a Google ad. These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of the Adwords customer’s website and the cookie has not yet expired, Google and the customer can recognize that the user has clicked on the ad and has been redirected to this page. Each Adwords customer receives a different cookie. Cookies cannot therefore be tracked through adwords customers’ websites. The information collected using the conversion cookie is used to generate conversion statistics for Adwords customers who have opted for conversion tracking. Adwords customers will learn the total number of users who clicked on their ad and have been redirected to a page with a conversion tracking tag. However, you will not receive any information that can be used to personally identify users. If you do not wish to participate in the tracking procedure, you can also refuse the necessary setting of a cookie – for example, by means of a browser setting, which generally disables the automatic setting of cookies. You can also disable cookies for conversion tracking by setting your browser to block cookies from the “www.googleadservices.com” domain. Google’s privacy policy for conversion tracking can be found at the following link: https://services.google.com/sitestats/de.html

8. Social Media Plugins

We use social plugins of social networks (e.B.g. Facebook, Twitter, Google+) on our website on the basis of Art. 6 sec. 1 p. 1 lit. f GDPR to make our company better known about this. The underlying commercial purpose is to be regarded as a legitimate interest within the meaning of the GDPR. The responsibility for the data protection-compliant operation is to be guaranteed by their respective providers. The integration of these plugins by us takes place by means of the so-called two-click method in order to protect visitors to our website in the best possible way. a) Facebook On our website, social media plugins from Facebook may be used to make their use more personal. For this we use the “LIKE” or “SHARE” button. It is an offer from Facebook. When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser and integrated by it into the website. By integrating the plugins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently logged in to Facebook. This information (including your IP address) is transmitted by your browser directly to a Facebook server in the USA and stored there. If you are logged in to Facebook, Facebook can assign the visit to our website directly to your Facebook account. If you interact with the plugins, for example by pressing the “LIKE” or “SHARE” button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information will also be published on Facebook visible to everyone. Facebook may use this information for the purpose of advertising, market research and the needs of the Facebook pages. For this purpose, Facebook creates usage, interest and relationship profiles, e..B to evaluate your use of our website with regard to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website and to provide other services related to the use of Facebook. If you do not want Facebook to assign the data collected through our website to your Facebook account, you must log out of Facebook before visiting my website. The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your rights in this regard and setting options for protecting your privacy can be found in the data protection notices, in particular the data policy of Facebook, which you can view under the following link: https://www.facebook.com/about/privacy/ b) Twitter On our website, plugins of the short message network of Twitter Inc. (Twitter) may be integrated. You can recognize the Twitter plugins (tweet button) by the Twitter logo on our site. An overview of tweet buttons can be found under this link on Twitter: https://dev.twitter.com/web/tweet-button If you visit a page of our website that contains such a plugin, a direct connection is established between your browser and the Twitter server. Twitter receives the information that you have visited our site with your IP address. If you click on the Twitter “tweet” button while you are logged into your Twitter account, you can link the contents of our pages to your Twitter profile. This allows Twitter to assign the visit to our pages to your user account. We would like to point out that we, as the provider of the pages, do not receive any knowledge of the content of the transmitted data as well as their use by Twitter. If you do not want Twitter to be able to associate the visit to our pages, please log out of your Twitter account. Further information can be found in The Twitter Privacy Policy, which you can view here: https://twitter.com/de/privacy c) Google “+1” button Our website may use the “+1” button of the social network Google, which is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA. The button is marked with a “+1”. The “+1” button is an abbreviation for “that’s pretty cool” or “look at that”. The button is not used to record your visits to the web. If a website of our website contains the “+1” button, your internet browser will load and display this button from the Google server. The website of our website you visit will be automatically communicated to the Google server. When viewing a +1 button, Google does not permanently log your browsing history, but only for up to two weeks. Google keeps this data about your visit for system maintenance and troubleshooting purposes for this period. However, this data is not structured according to individual profiles, usernames or URLs. This information is also not accessible to web site publishers or advertisers. The use of this information is only for maintenance and troubleshooting in internal systems at Google. Google will not evaluate your visit to a +1 button page in any other way. A further evaluation of your visit to a website of our website with a “+1” button will not take place. Assigning +1 itself is a public process, i.e. anyone who performs a Google search or views content on the web that you give +1 can potentially see that you have given the content in question a +1. Therefore, only give +1 if you are sure that you want to share this recommendation with the whole world. Clicking on this +1 button serves as a recommendation for other users in Google’s search results. You can publicly state that you like our website, that you have your approval of our website, or that you can recommend our website. If you have registered for Google+ and are logged in, the +1 button turns blue with one click. It also adds the +1 to the +1 tab in your Google profile. On this tab you can manage your +1 and decide if you want to make the +1 tab public. In order to save your +1 recommendation and make it publicly available, Google collects information about your profile via the URL you recommend, your IP address and other browser-related information. If you withdraw your +1, this information will be deleted. All of your +1 recommendations are listed on the +1 tab in your profile. Further information and the applicable data protection regulations of Google can be found at https://www.google.de/intl/de/policies/privacy/. For more information from Google on the Google+1 button, see the link https://developers.google.com/+/web/buttons-policy

9. Rights of the persons concerned

You have the right to: • in accordance with Art. 15 GDPR, you may request information about your personal data processed by us. In particular, you may request information on the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, the existence of a right to rectification, deletion, restriction of processing or opposition, the existence of a right of appeal, the origin of your data, if not collected from me, and the existence of automated decision-making including profiling and, where applicable, meaningful information on its details; • in accordance with Article 16 GDPR, immediately request the correction of inaccurate or complete your personal data stored by us; • require the deletion of your personal data stored by us in accordance with Article 17 GDPR, unless processing is necessary for the exercise of the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims; • require the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you require it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Article 21 GDPR; • in accordance with Article 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller; • in accordance with Art. 3 GDPR to revoke your consent to us at any time. As a result, we are not allowed to continue the processing of data based on this consent for the future and • to complain to a supervisory authority in accordance with Article 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office.

10. Right of objection

If your personal data is based on legitimate interests in accordance with Article 6 sec. 1 p. 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR, insofar as there are reasons for doing so, which arise from your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right of objection, which we implement without specifying a specific situation. If you wish to exercise your right of withdrawal or objection, please send an e-mail to: contact@mysauria.com

11. Data security

Within the website visit, we use the common Secure Socket Layer (SSL) method in conjunction with the highest encryption level supported by your browser. Typically, this is 256-bit encryption. If your browser doesn’t support 256-bit encryption, we’ll use 128-bit v3 technology instead. You can see whether a single page of our website is transmitted encrypted by the closed display of the bowl or lock symbol in the lower status bar of your browser. We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

12. Up-to-dateness and amendment of this privacy policy

This privacy policy is currently valid and is as of March 2018. Due to the further development of our website and offers above or due to changes in legal or regulatory requirements, it may become necessary to change this data protection declaration. The current data protection declaration can be accessed and printed at any time on our website under the following link: https://mysauria.com/privacy-policy/ _____

1 Data protection authorities require the conclusion of an order data processing agreement for the permitted use of Google Analytics. A corresponding template is offered under http://www.google.com/analytics/terms/de.pdf by Google. Source: Model Privacy Policy prepared by lawyer Andreas Gerstel (http://www.anwaltblog24.de/)