PRIVACY STATEMENT (AS OF MAY 2025)

Who can I contact?

Responsible for this website:

ClipMyHorse.TV Operations GmbH
Wandersmannstraße 68
65205 Wiesbaden
dataprivacy@clipmyhorse.tv

You can also use these contact details to reach our Data Protection Officer, Gina Bleckmann from Fresh Compliance GmbH, or another relevant data protection contact.

Please feel free to contact us at any time if you have specific questions about your data, its deletion, or your rights.

What are my rights?

You can contact us at any time if you have questions about your data protection rights or wish to exercise the following rights:

• Right to withdraw consent (Art. 7(3) GDPR) – For example, you can contact us if you wish to withdraw your previously given consent to receive a newsletter.
• Right of access (Art. 15 GDPR) – You can request information about the data we have stored about you.
• Right to rectification (Art. 16 GDPR) – For example, if your email address has changed and you would like us to update our records.
• Right to erasure (Art. 17 GDPR) – You can request the deletion of specific personal data we have stored about you.
• Right to restriction of processing (Art. 18 GDPR) – For example, if you want us to retain your email address but only use it for essential communications.
• Right to data portability (Art. 20 GDPR) – You can request your stored data in a structured, commonly used, and machine-readable format, for example, to transfer it to another website.
• Right to object (Art. 21 GDPR) – If you do not agree with certain advertising or analytics practices, you can object to them.
• Right to lodge a complaint with a supervisory authority (Art. 77(1) GDPR) – If you have concerns about how we handle your data, you can also contact the data protection authority in your country: https://www.bfdi.bund.de/EN/Service/Anschriften/Laender/Laender-node.html.

Deletion of Data and Storage Duration

Unless otherwise stated, we will delete your data once it is no longer needed, such as your email address after unsubscribing from our newsletter. Data will also be blocked or deleted once the retention period has expired. However, certain data may need to be stored for a longer period due to legal requirements. You can, of course, request information about the data we have stored at any time. Data protection inquiries and other legal matters may also be stored for a longer period in accordance with legally relevant retention and limitation periods.

Visiting the Website

If you are simply browsing our website, we do not collect personal data, except for the data transmitted by your browser to enable the website visit, primarily:

• IP address (e.g., 81.91.215.example or 2a02:8109:9440:1198:bdb1:551f:example)
• Approximate location based on the IP range (e.g., Berlin)
• Internet service provider (e.g., Vodafone or Deutsche Telekom)
• Internet speed (e.g., 120 Mbit)
• Date and time (e.g., 11:55 am, 25.05.2023)
• Last visited website (e.g., google.de)
• Browser (e.g., Chrome or Safari)
• Browser language (e.g., German)
• Screen resolution
• Javascript activation
• Color depth
• Operating system (e.g., Mac OS)
• Hardware (e.g., Intel processor)

As a privacy protection measure, we delete or anonymize the IP address after your visit to our website. This ensures that the other technical data can no longer be traced back to you and is only used for anonymous statistical purposes to optimize our website.

The purpose of temporarily storing the data is twofold: firstly, the technical necessity to establish a connection and, secondly, to ensure the correct, error-free display of our website. The IP address and the previously mentioned technical data are required to display the website, avoid display issues for visitors, and resolve error messages.

The legal basis for this is the so-called legitimate interest, which has been assessed in accordance with the aforementioned protective measures and in alignment with the European data protection requirements under Art. 6(1)(f) GDPR.

Contact

You have the option to contact us via our contact form or other means (e.g., via email). The following data may be provided to us:

• First and last name
• Email address
• Customer number (if applicable)
• Message or request

As a protection measure, the contact is made – just like visiting the rest of the website – via an encrypted connection. You can also choose other forms of contact. The purpose of the requested data is solely for the purpose of contacting or communicating with you, and the data will only be used for this purpose.

The legal basis for this is, depending on the request, the performance of pre-contractual measures under Art. 6(1)(b) GDPR or the so-called legitimate interest, which has been assessed for the purpose of pursuing this purpose and in accordance with the aforementioned protective measures and European data protection requirements under Art. 6(1)(f) GDPR.

Registration

You also have the option to register on our website for a paid subscription to access all available services on ClipMyHorse.TV without restrictions. By subscribing to paid services after registration, you gain access to additional services, and further functionalities of our website are unlocked for you.

To register with us, the following data is required:

• Email address
• First and last name
• Company name (if applicable)
• Address (street, postal code, city, country)
• VAT number (if applicable)
• Age verification
• Bank details such as IBAN, BIC, credit card, account holder's name
• Password

When registering for a membership account on ClipMyHorse.TV, we require you to answer whether you are of legal age via a checkbox, but we do not request your birthdate. By completing this step and ticking the appropriate box, we only store the information that you are of legal age, without recording your birthdate or exact age.

As a protection measure, the transmission of the data you enter – just like the rest of the website – is done via an encrypted connection. After successful confirmation, your data is stored until you choose to delete individual data or your entire user account.

The purpose of the requested data is to create a user account for utilizing advanced features on the website. Registration is voluntary and can be revoked at any time, with user data being deleted upon request.

The legal basis for this is mutual contract fulfillment in accordance with the European data protection requirements under Art. 6(1)(b) GDPR.

Payment Methods

After completing your registration, we ask you to select a payment method and provide the relevant details, which we process for the purpose of providing paid services.

Once you have fully completed the registration and made the necessary payment for paid services, you will be granted access to the services you selected and will continue to have access until you cancel the services.

We use the following payment service providers for processing payments:

• PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
• Stripe Payments Europe, Limited (SPEL), 1 Grand Canal Street Lower, Grand Canal Dock Dublin, D02 H210, Ireland
• CHARGEBEE B.V., Piet Heinkade 55, 1019GM Amsterdam

For payment processing, we transmit the following data:

• IBAN
• BIC
• Country
• First and last name

For further information, please refer to the respective privacy policies:

• Privacy Policy PayPal
• Privacy Policy Stripe
• Privacy Policy Chargebee

We process your personal data for the provision of the services that require registration, in order to fulfill a contract or to carry out pre-contractual measures in accordance with Art. 6(1)(b) GDPR.

Social Media Presence

We do not use social plugins on our website, but simply provide a link to the respective social media website (e.g., www.facebook.com) and our presence there. You can also access our website via our company presence on social media platforms:

https://go.cmh.tv/links/clipmyhorsetv-social-media-overview/

We process your personal data when you communicate with us through these channels. Specifically, we process contact data (e.g., profiles, email addresses, or phone numbers, if provided) and content data (e.g., comments, tags, and links).

• Facebook: Operated by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Facebook is a social media platform that allows users to connect with other people or businesses, share content, join groups, and communicate via text, video, or voice calls. Data is processed within the European Union. For more information, please refer to Facebook's privacy policy.
• Facebook Pixel: Operated by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Facebook Pixel tracks user behavior after they click on a Facebook ad and are redirected to the provider's website. This is used for statistical and market research purposes and helps optimize future advertising campaigns. The collected data is anonymized for us, so it does not provide us with insights into the identity of users. However, Facebook stores and processes the data, linking it to user profiles for its own advertising purposes, as detailed in Facebook's privacy policy. Facebook and its partners can display ads on and off Facebook. A cookie may be stored on your device for this purpose.
• Instagram: Operated by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. Instagram is a social network that links content from our pages to your Instagram profile when logged in. This allows Instagram to associate your visit to our pages with your user account. Depending on your location, the data may be stored in the European Union or the USA. For more information, please refer to Instagram's privacy policy.
• YouTube: Operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube to embed videos. When you visit our pages, the YouTube server is notified of which pages you have visited. If you're logged into your YouTube account, YouTube can directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account. Depending on your location, data may be processed either within the European Union or in the USA. For more information, please refer to Google's privacy policy.
• TikTok: Operated by TikTok Technology Limited, 10 Earlsfort Terrace Dublin, D02 T380, Ireland. This service allows users to create and share short videos ranging from 15 seconds to 10 minutes. We use TikTok to share special moments from equestrian sports with our community. Data is processed within the European Union. For more information, please refer to TikTok's privacy policy.

It is up to each user to freely publish personal data through their activities. The legal basis for this is your consent in accordance with the European data protection requirements under Art. 6 (1) lit. a) GDPR.

Contests

You also have the opportunity to participate in our contests. If you enter one of our contests, we collect and process personal data to facilitate the contest and determine the winners. The following data may be collected:

• Contact details: Name, address, email address, phone number
• Participation information: Information you provide as part of the contest, such as answers to questions, content submissions, or posts.
• Winner data: If you win, we may collect additional data, such as your bank details (in the case of a monetary prize), to transfer the prize to you.

The contests are usually offered through social media platforms. You can find the terms and conditions directly with the respective contest. Prizes such as physical goods, premium memberships, or event tickets are raffled. The data processing is based on your consent in accordance with Article 6(1)(a) GDPR. You have the right to withdraw your consent at any time with future effect. In this case, further participation in the contest will no longer be possible.

Your data will be stored only as long as necessary to process the contest and will be deleted afterward, unless there are legal retention obligations. Your data will only be shared with third parties to the extent necessary for the execution of the contest (e.g., shipping service providers) or to fulfill legal obligations.

Note on Social Media Contests: For contests conducted on our social media platforms, please also refer to the privacy notices of the respective platform providers.

Newsletter

If you are interested in updates about our company or our products, you can subscribe to our newsletter. You will then receive an email with a link that you must click to confirm your subscription to the newsletter. We will store your email address until you unsubscribe from the newsletter. A link to unsubscribe is included in every email we send. The delivery of the newsletter is handled by the specialized service provider Mailjet. For further information, please refer to the service provider's privacy policy: https://www.mailjet.com/legal/privacy-policy/.

As a security measure, we use the "double opt-in" process to ensure that the registered email address indeed belongs to you. We have also entered into a data processing agreement with the service provider. You can unsubscribe from the newsletter at any time, which will remove your email address from the service provider's database. The purpose of collecting this data is to deliver the newsletter to your personal email address in order to fulfill your request for updates about our company or products. The legal basis for processing is your consent in accordance with the European data protection requirements of Article 6(1)(a) GDPR.

Bewerbungen

If you apply online or otherwise respond to one of our job postings, we collect and process your personal application data for the purpose of handling the application process. The processing is primarily done electronically, especially when application documents are submitted electronically, for example via email or a web form on our website. If we enter into an employment contract, the transmitted data will be stored for the purpose of managing the employment relationship, in compliance with legal regulations. If no employment contract is concluded, the application documents will be deleted six months after the rejection decision is communicated—this retention period is based on a potential obligation to provide evidence in proceedings under the General Equal Treatment Act (AGG). If consent has been given, applications may be retained for longer than six months.

We also use recruiting and application management software provided by the service provider HRworks GmbH. This software helps us to post job ads and centrally manage applications. For this purpose, we have entered into a data processing agreement to ensure that the personal data of our applicants is processed only in accordance with our instructions. Further information can be found in the service provider's privacy policy: https://www.hrworks.de/unternehmen/datenschutz/.

The legal basis for processing is the decision on the establishment and implementation of an employment relationship according to Article 6(1)(b), Article 88 GDPR in conjunction with Section 26 of the Federal Data Protection Act (BDSG).

Cookies

Our website uses so-called cookies in some cases. Cookies are small text files that are typically stored in a folder of your browser. Cookies contain information about your current or last visit to the website:

• Name of the website
• Expiry date of the cookie
• Session information
• Consent declaration for cookie usage
• Arbitrary value

If cookies do not contain a specific expiration date, they are only temporarily stored and automatically deleted when you close your browser or restart the device. Cookies with an expiration date remain stored even when you close the browser or restart the device. Such cookies will be removed only at the specified date or when manually deleted by you.

On our website, we use the following types of cookies:

• Strictly Necessary Cookies (e.g., required to display the website correctly and to store certain settings)
• Preference Cookies (these allow our website to store information that changes the behavior or appearance of the website, such as your preferred language or region)
• Functionality and Performance Cookies (these help us, for example, to analyze technical data of your visit to ClipMyHorse.TV, helping to avoid error messages)
• Advertising and Analytics Cookies (these ensure that, for example, ads for riding boots are displayed when you previously searched for riding boots)

You can configure, block, and delete cookies in your browser settings. If you delete all cookies from our website, some features may not be displayed correctly.

Recipients of Data

In accordance with the descriptions and purposes stated above, we share your data with the following recipients who are essential to providing our services and communication with you:

• Sentry, operated by Sentry Inc., with its headquarters located at 1501 Mariposa St #408, San Francisco, CA 94107, USA. Sentry is a monitoring tool that helps us improve the technical stability of our service by monitoring system stability and identifying code errors. User data, such as device information or error timestamps, is collected anonymously, is not used in a personally identifiable manner, and is subsequently deleted. Data processing takes place in the USA. For more information, please refer to Sentry's privacy policy at: https://sentry.io/privacy/.
• Google Analytics, operated by Google Ireland Ltd., with its headquarters located at Gordon House Barrow Street Dublin 4, Ireland. Google Analytics is used to analyze user behavior and serve personalized advertising. Depending on your location, data is processed either within the European Union or the USA. For more information, please refer to Google Analytics' privacy policy at: https://policies.google.com/privacy?hl=en.
• Hotjar, operated by Hotjar Ltd., with its headquarters located at Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141 Malta, Europe. Hotjar is a web analytics tool that helps businesses understand user behavior on their website by providing heatmaps, visitor recordings, conversion funnel analyses, and feedback collection. The data is processed within the European Union. For more information, please refer to Hotjar's privacy policy at: https://www.hotjar.com/legal/policies/privacy/.
• Google Ads und Conversion Tracking, Google Ads and Conversion Tracking, operated by Google Ireland Limited, headquartered at Gordon House Barrow Street Dublin 4, Ireland. The Google Cloud Platform is a suite of cloud computing services that provides businesses and developers with computing, storage, data analysis, artificial intelligence, and networking solutions to develop, deploy, and scale applications and services. The information collected through the conversion cookie enables the creation of conversion statistics for businesses using conversion tracking. Businesses receive the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag, but without any information that would allow for the personal identification of users. Depending on your location, the data is processed either within the European Union or the USA. For more information, please refer to Google Cloud Platform's privacy policy at: https://cloud.google.com/terms/cloud-privacy-notice.
• Google Tag Manager and Google Publisher Tags, operated by Google Inc., headquartered at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Tag Manager is a solution that allows businesses to manage website tags through an interface. The service itself does not process personal data but triggers other tags that may collect data. Data processing occurs either within the European Union or in the USA, depending on your location. For more information, please refer to Google's privacy policy at: https://policies.google.com/privacy?hl=en.
• Trustpilot, operated by Trustpilot A/S, Pilestræde 58, 5, 1112 Copenhagen, Denmark. When participating in this review system (which requires prior registration), your review will be published in accordance with Trustpilot's guidelines on our website, as well as on Trustpilot's website and their partners' websites. The terms and privacy policies for reviews through the Trustpilot service can be found here: https://legal.trustpilot.com/for-reviewers/end-user-privacy-terms.
• Typeform, operated by Typeform S.L., headquartered at Carrer de Bac de Roda, 163, 08018 Barcelona, Spain. We process your personal data (name, email address, usage history) for the purpose of direct marketing and to invite you to participate in surveys on clipmyhorse.tv at various times (e.g., after the most popular equestrian discipline). This includes sending information about new promotions and requesting your participation in surveys to better tailor our offerings to your needs as a customer. For more information, please refer to Typeform's privacy policy at: https://admin.typeform.com/to/dwk6gt?typeform-source=www.google.com.
• Zendesk, operated by Zendesk Inc., headquartered at 989 Market St., San Francisco, CA 94103, USA. Zendesk is a customer service software that simplifies support, sales, and customer retention activities through a single, user-friendly platform. Depending on your location, the data is processed either within the European Union or the USA. For more information, please refer to Zendesk's privacy policy at: https://www.zendesk.com/trust-center/.
• Unbounce, operated by Unbounce Marketing Solutions Inc., headquartered at 400-401 West Georgia Street, Vancouver BC, Canada V6B 5A1. Unbounce is a hosting service used for individual, smaller pages ("landing pages"). When you visit these pages, your browser communicates directly with the service provider. Your IP address is transmitted, and cookies may be set. For more information, please refer to the privacy policy of Unbounce at: https://unbounce.com/privacy/.
• Amazon Web Services, operated by Amazon Web Services, Inc., headquartered at 410 Terry Avenue North, Seattle WA 98109, USA. Amazon Web Services is a cloud platform providing a wide range of infrastructure services such as computing, storage, networking, and databases for businesses worldwide. Depending on your location, data is processed either within the European Union or the USA. For more information, please refer to Amazon Web Services' privacy policy at: https://aws.amazon.com/privacy/.
• Cookiebot, operated by Cybot A/S, headquartered at Havnegade 39, 1058 Copenhagen, Denmark. Cookiebot is a consent management platform that helps websites comply with privacy regulations by automatically scanning and controlling cookies, tracking user consent, and generating legally required documentation. Data is processed within the European Union. For more information, please refer to Cookiebot's privacy policy at: https://www.cookiebot.com/en/privacy-policy/.
• Avalara, operated by Avalara Europe Ltd., located at Trafalgar Place, Brighton BN1 4FU, United Kingdom. We use Avalara Tax to automate tax calculations and reporting for our transactions. Avalara may process certain transaction data to determine the correct tax amounts. Data processing takes place in the USA. For more information, please refer to Avalara's privacy policy at: https://legal.avalara.com/#dataprivacy.
• Mixpanel, operated by Mixpanel Inc., headquartered at One Front Street, 28th Floor, San Francisco, CA 94111, USA. Mixpanel is an analytics tool that helps us understand and optimize user behavior in our application. Data such as device information, IP addresses, usage statistics, and interactions within the application are collected. This data may contain personal information, especially if linked to user IDs or other identifiers. Data processing may occur in the USA. For more information, please refer to Mixpanel's privacy policy at: https://mixpanel.com/legal/privacy-policy/
• Zapier, operated by Zapier Inc., headquartered at 548 Market St. #62411, San Francisco, CA 94104-5401, USA. Zapier is an automation platform that allows connecting various applications and services to automate workflows. Personal data may be processed, especially if Zapier is used for transferring or processing user information between applications. The type of data processed depends on the workflows (called "Zaps") used. Data processing may occur in the USA. For more information, please refer to Zapier's privacy policy at: https://zapier.com/privacy.
• Segment, operated by Twilio Inc., headquartered at 101 Spear Street, 1st Floor, San Francisco, CA 94105, USA. Segment is a customer data platform that helps us collect, process, and forward user data from various sources to other analytics and marketing tools. Personal data such as IP addresses, device information, user IDs, and behavioral data may be collected and processed. Data processing may occur in the USA. For more information, please refer to Segment's privacy policy at: https://www.twilio.com/legal/privacy.
• Customer.io, operated by Peaberry Software Inc., headquartered at 921 SW Washington St, Suite 820, Portland, OR 97205, USA. Customer.io is a marketing automation platform that enables sending personalized emails, push notifications, and other communications based on user interactions. Personal data such as email addresses, IP addresses, usage behavior, and other identifying information may be processed. Data processing may occur in the USA. For more information, please refer to Customer.io's privacy policy at: https://customer.io/legal/privacy-policy/.
• Intercom, operated by Intercom R&D Unlimited Company, headquartered at 2nd Floor, Stephen Court, 18-21 Saint Stephen's Green, Dublin 2, D02 N960, Ireland. Intercom is a communication platform used for customer support, live chats, and automated messaging. Personal data such as name, email address, IP address, device information, and communication content may be processed. Data processing may occur in the USA and other third countries. Intercom uses Standard Contractual Clauses to ensure an adequate level of data protection according to the GDPR. For more information, please refer to Intercom's privacy policy at: https://www.intercom.com/legal/privacy.
• Recombee, operated by Recombee s.r.o., headquartered at Šumavská 31, 602 00 Brno, Czech Republic. Recombee is a recommendation system that provides personalized content and product recommendations based on user interactions. Usage data such as visited pages, interactions, and preferences are collected and processed. Processing is anonymized or pseudonymized, unless direct identification is required. Data processing occurs within the European Union. For more information, please refer to Recombee's privacy policy at: https://www.recombee.com/gdpr.html.
• Survicate, operated by Survicate sp. z o.o., headquartered at ul. Hoża 51, 00-681 Warsaw, Poland. Survicate is a feedback and survey tool that enables collecting and evaluating user opinions. Personal data such as IP addresses, email addresses (if provided), survey responses, and usage behavior may be processed. Data processing occurs within the European Union. For more information, please refer to Survicate's privacy policy at: https://survicate.com/privacy-policy/.
• Datadog, operated by Datadog, Inc., headquartered at 620 8th Avenue, 45th Floor, New York, NY 10018, USA. Datadog is a monitoring and analytics platform for IT infrastructure, applications, and logs. It enables real-time monitoring of servers, databases, tools, and services to ensure the performance and security of our systems. Personal data such as IP addresses, device information, usage behavior, and technical log data may be processed. Data processing may occur in the USA and other third countries. Datadog uses Standard Contractual Clauses and additional measures to ensure an adequate level of data protection according to the GDPR. For more information, please refer to Datadog's privacy policy at: https://www.datadoghq.com/legal/privacy/.
• Mux Data, operated by Mux, Inc., headquartered at 1182 Market St, Suite 425, San Francisco, CA 94102, USA. Mux Data is a video performance analytics platform that provides insights into the quality and performance of video streams. Metrics such as load times, playback quality, buffering rates, as well as technical information about the device, browser, and network connection are collected and analyzed. Personal data such as IP addresses and usage behavior may be processed. Data processing may occur in the USA and other third countries. Mux uses Standard Contractual Clauses and additional protective measures to ensure an adequate level of data protection according to the GDPR. For more information, please refer to Mux's privacy policy at: https://www.mux.com/privacy.

We only share data that is necessary for the execution of the mutual contract or if you have granted us consent, such as within the scope of our newsletter or the cookie banner. If no contract is in place, we may share data in certain cases based on legitimate interests. This applies, for example, when you simply visit our website or want to make contact. When you visit our website, it is in both parties' interest to provide access to the service and communicate with each other.

We have also entered into data processing agreements with all external recipients to comply with European legal requirements. Depending on your location, some of the service providers listed above – if specified – may transfer your data to the United States. Currently, there is an adequacy decision between the EU and the U.S. This decision confirms that for organizations certified under the EU-U.S. Data Privacy Framework, the U.S. provides an adequate level of protection for personal data. Additional data processing contracts, known as Standard Contractual Clauses, are also concluded. Moreover, we review each service provider together with our Data Protection Officer to ensure that additional security measures are in place, such as strong data encryption.

Special Considerations When Using Our Apps

We are pleased that you have chosen one of our apps. We are responsible for the apps that are made available through app stores (Apple App Store and Google Play Store) and smart TV devices (hereinafter referred to as "Distribution Platforms").

On this page, we will inform you about the privacy policies applicable to the apps.

RESPONSIBLE

ClipMyHorse.TV Deutschland GmbH
Wandersmannstr. 68
65205 Wiesbaden
E-Mail: dataprivacy@clipmyhorse.tv

Data Collection in Our Apps

When you use our apps, we collect and store certain data (technically necessary) about you in order to provide services and improve the overall app experience:

• Device ID and user-related device identifiers
• Diagnostic and error data (information about errors, crashes, and technical issues)
• Language settings (e.g., system language set to German)
• Mobile data for location determination
• Date and time of use (e.g., 11:45 AM on 25th May 2018)
• Operating system (iOS, Android)
• Hardware information

To protect your privacy, we delete or anonymize identifiers and most technical data in our database after your use. The purpose of temporarily storing this data is to establish a connection to our servers and provide the app. The legal basis is the contract with you according to Art. 6 para. 1 lit. b) GDPR, as well as legitimate interest under the European data protection requirements according to Art. 6 para. 1 lit. f) GDPR. Additionally, we apply the security measures mentioned above to protect your data.

Registration and Use of the Apps

To use our apps, registration with your personal login credentials is required. After logging in, certain data is needed for registration and app usage. This information is requested during the registration process on our website.

To protect your privacy, we delete or anonymize identifiers in our database and most technical data after your use. The evaluation of usage data is done exclusively on a statistical basis and is not linked to individuals. The purpose of processing this data is to enable the use of the app and its performance offerings as well as functions. The legal basis is the user agreement with you according to Art. 6 para. 1 lit. b) GDPR, as well as legitimate interest under Art. 6 para. 1 lit. f) GDPR. You may object to the data processing based on legitimate interests at any time and state why your interest outweighs our interest. However, the use of our app will unfortunately no longer be possible. Additionally, we apply the security measures mentioned above to protect your data.

Mobile Apps and App Permissions

When you download our app from a distribution platform, certain information is transmitted to that platform, particularly your account details, such as your name, device ID, and email address. We have no control over this data collection and are not responsible for it. Your data will only be transferred outside of the EU or EEA if appropriate safeguards (e.g., EU Standard Contractual Clauses) are in place or if explicit consent is provided.

Some features of our app require access to specific functions and services on your device. Depending on which mobile operating system you are using, it may be necessary for you to accept certain app permissions. We will now explain what these permissions are:

Location Data

Access to location data: When you click "OK" on the popup window asking for location access, you allow the app to collect your location.

To protect your privacy, all app permissions are optional, except for the technical permissions required for the app to function. You can decline at any time (by clicking "No" or "Do not accept"). You can also revoke the permissions later by changing the relevant settings on your device. The purpose of requesting these permissions is to provide you with our service and app-specific features. The legal basis for processing is your consent according to European data protection regulations under Article 6(1)(a) GDPR.

Notifications

Push notifications: When you click "OK" in the popup window asking for push notifications permission, you allow the app to send you notifications.

To protect your privacy, all app permissions are optional, except for the technical permissions required for the app to function. You can decline at any time (by clicking "No" or "Do not accept"). You can also revoke the permissions later by changing the relevant settings on your device. The purpose of requesting these permissions is to provide you with our service and app-specific features. One of the functions of our app is to send you notifications about specific events. The legal basis for processing is your consent according to European data protection regulations under Article 6(1)(a) GDPR.

Deletion of Data and Retention Period

Unless otherwise specified, we delete your data as soon as it is no longer needed. Your data will also be blocked or deleted once a legally required retention period has expired, unless there is a need for further storage of the data for contract conclusion or contract fulfillment. Certain data may need to be retained for a longer period due to legal requirements. You can of course request information about the data stored at any time. Within the apps, you can also delete all previously stored data related to your orders and reset your authentication at any time.

Registration of Data

In accordance with the descriptions and purposes provided above, we also share your data with the following recipients when using our apps, who are essential for providing our services and communicating with you:

• Applicaster, is operated by Applicaster Ltd., with its headquarters at 12 Nahalat Yitzhak St., Tel Aviv 6744832, Israel. Applicaster is a platform for creating and managing apps, primarily for media and entertainment content. It enables the delivery and personalization of content, as well as the analysis of user interactions within the apps. Personal data such as IP addresses, device information, usage behavior, and technical log data may be processed. Data processing may occur in Israel and, if applicable, in other third countries. Applicaster implements appropriate security measures and standard contractual clauses to ensure an adequate level of data protection in compliance with the GDPR. For more information, please refer to Applicaster's privacy policy at: https://www.applicaster.com/privacy-security.
• Firebase, is operated by Google Ireland Limited, with its headquarters at Gordon House, Barrow Street, Dublin 4, Ireland. Firebase is a development platform that provides various services to improve the stability and functionality of our app. These services include authentication, databases, hosting, and error analysis. User data, such as device information, usage data, or error logs, is collected anonymously, used in a non-personal manner, and deleted once the purpose is fulfilled. Depending on your location, data may be processed either within the European Union or in the United States. For more information, please refer to Firebase's privacy policy at: https://firebase.google.com/support/privacy.

Enforcement, Exercise, and Defense of Legal Claims

At times, it may be necessary for us to process personal data, and possibly sensitive personal data, in accordance with local laws and regulations, in connection with the enforcement or defense of legal claims. Article 9(2)(f) of the GDPR permits this if processing is "necessary for the establishment, exercise, or defense of legal claims, or whenever courts are acting in their judicial capacity."

This could occur, for example, when we need legal advice regarding a legal proceeding or when we are legally obligated to retain or disclose certain information as part of a court case.

Personal Data of Children

We are aware of the importance of the safety and privacy of children on the internet. Our services are specifically aimed at individuals over the age of 18. However, if children and adolescents still choose to register for our app, they must ensure that this is done with the consent of their parents.