This privacy policy applies to data processing by:
Controller:

BRAUN Hamburg GmbH & Co. KG
Mönckebergstr. 17
20095 Hamburg
Germany
Phone: +49 (0)40.2383189.10
E-Mail: info@04651.com

The company data protection officer can be reached at the above-mentioned address, Att. data protection officer, or by e-mail: datenschutz@04651.com.

a) When visiting the website:
When you visit our Website www.04651.com, the browser you are using on your terminal device automatically sends information to the server of our website. This information will be temporarily stored in a so-called log file. The following information will be recorded without your intervention and stored until automated deletion.

• IP address of the requesting computer,
• date and time of access,
• name and URL of the file accessed,
• website from which access has been made (Referrer-URL),
• the browser used and, if applicable, your computer's operating system, and your access provider's name.

We will be processing the above-mentioned data for the following purposes:

• ensuring a smooth connection of the website,
• ensuring comfortable use of our website,
• evaluation of system security and stability,
• for other administrative purposes.

The legal basis for data processing is GDPR sec. 6 para 1 lit. f. Our legitimate interest follows from the purposes listed above for data collection. In no case we will be using the collected data for the purpose of drawing conclusions about you.

b) When using our contact form:
For questions of any kind, we offer you the opportunity to contact us via a form provided on our website. Your name, a valid email address, and your request (“message”) are required so that we know who sent the request and that we will be able to process it. Other information may be given voluntarily.

Data processing for the purpose of contacting us is made pursuant to GDPR art. 6 para. 1 sentence 1 lit. a on basis of your voluntarily given consent.

Personal data collected for using our contact form will be erased after completion of your request.

c) When subscribing to newsletter:
If you explicitly have consented pursuant GDPR sec. 6 para. 1 sentence 1 lit. a we will use your email address to regularly send you our newsletter. For receiving our newsletter, an e-mail address is sufficient.

If at all, your data will only be passed on to third parties for the technical handling of the newsletter dispatch via a service provider working in compliance with data protection regulations.

You can unsubscribe at any time, for example via the link "email preferences" at the end of each newsletter. Alternatively, you can unsubscribe at any time using info@04651.com.

d) Customer account registration data:
Within the order process you have the opportunity to set up a customer account with us. Your address data including e-mail address and orders are stored here. All you have to do the next time you order is enter your e-mail address and a password. The Password must be kept secret.

e) Order and payment data:
For the acceptance, handling and execution of your order, your data will be forwarded to service providers, e.g. the carrier of the goods, if necessary.

Payment data is collected in encrypted form and used solely to process the corresponding transaction. Except in the case of purchase on account, we do not have any knowledge of or access to the bank and credit card data. The processing is carried out solely by the corresponding service provider.

As a registered customer you can choose the option "Save payment data" in the order process. The secure and easy storage of sensitive credit card data is done via an "alias" (token) on your customer account for later purchases.

Under "My customer account" >> "My payment data" you can manage or erase the stored information. If you do not wish to deposit a credit card in your profile, you can also enter the data again with each order.

f) Credit assessment:
In cases in which we make delivery before payment, e.g. in the case of a purchase on account, we regularly check your creditworthiness and in certain cases, in which there is a legitimate interest, also the creditworthiness of existing customers. For this purpose we cooperate with Creditreform Boniversum GmbH, Hammfelddamm 13, 41460 Neuss, from which we receive the required data. For this purpose we transfer your name and your contact data to Creditreform Boniversum GmbH.

In the event of receivables overdue for a prolonged period, your data will be transmitted to Creditreform Hamburg, Decken & Wall KG, Wandalenweg 8 - 10, 20097 Hamburg, as collection agency for the purpose of asserting claims in Germany, and will be used there. The legal basis for data processing is GDPR sec. 6 Para. 1 S. 1 lit. f. Our legitimate interest follows from reasons of creditor and credit protection. Information pursuant to GDPR sec. 14 on data processing at Creditreform Boniversum GmbH can be found here: www.boniversum.de/EU-DSGVO.

g) Erasure of data:
Your data stored by us will only be stored for as long as it is required.

• The data of the customer account will remain stored until you cancel the account.
• Without a customer account the order data remain stored until completion of the order.

Then the data will be erased, unless there are legal storage obligations to keep it. Data that we need to complete outstanding tasks or to assert our rights and claims, as well as data that we must keep in accordance with legal requirements, are excluded from erasure. In this case, the data is blocked for further processing.

Your personal data will not be transmitted to third parties for purposes other than those listed below. We only pass on your personal data to third parties:

• if you explicitly have consented pursuant GDPR sec. 6 para. 1 sentence 1 lit. a,
• if passing on your personal data pursuant GDPR sec. 6 para. 1 sentence 1 lit. f is necessary for assertion, exercise or defence of legal claims, and there is no reason to believe that you have an overriding interest worthy of protection in non-disclosure of your data,
• in the event of a legal obligation existing for their transfer pursuant to GDPR sec. 6 para. 1 sentence 1 lit. c, and
• this is permitted by law and it is necessary for carrying out our contractual relationships with you pursuant to GDPR sec. 6 para. 1 sentence 1 lit. b.

a) Cookies
We use Cookies on our website. These are small files that are automatically created by your browser and stored on your terminal device (laptop, tablet, smartphone or similar) when you visit our site. Cookies do not cause any damage to your terminal device and do not contain any viruses, Trojans or other malware. Information is stored in the cookie that is related to the specific terminal device used. However, this does not mean that we gain direct knowledge of your identity.

The use of cookies serves different purposes. Some of them are necessary for the operation of the website. They serve to enable you to use our offer. The legal basis for the use of these types of cookies is GPDR sec. 6 para. 1 sentence 1 lit. f. These are primarily so-called session cookies, which may occur, for example, in connection with our shopping basket system and with which we document your data protection consent.

Insofar as you have consented to this, we also use so-called cookies for marketing purposes, functional cookies and analytics cookies, which allow us to place advertisements, to save information you have already provided and to statistically evaluate the use of our website. These cookies thus help us to optimise and personalise our offer for you. The legal basis for this is your consent, GDPR sec. 6 para. 1 sentence 1 lit. a. Such cookies are usually using third-party services.

Our website uses the cookie consent technology "ConsentManager" to obtain your consent to the storage of certain cookies on your terminal device and to document this in accordance with data protection law. The provider of the technology is the German subsidiary consentmanager GmbH, Eppendorfer Weg 183, 20253 Hamburg, Germany, of consentmanager AB, Håltegelvägen 1b, 72348 Västerås, Sweden, website: https://www.consentmanager.de (hereinafter "ConsentManager").

When you visit our website, a connection is established to ConsentManager's servers in order to obtain your consent to cookie use and other privacy statements. ConsentManager then stores a cookie on your terminal device in order to be able to assign the consents you have given or their revocation to you. The data collected in this way is stored until you request us to erase it, delete the ConsentManager cookie yourself or the purpose for storing the data no longer applies. Mandatory legal storage obligations remain unaffected.

ConsentManager acts as a processor for us, GDPR sec. 28. ConsentManager is used to obtain the legally required consent for the use of cookies. The legal basis for this is GDPR sec. 6 para. 1 sentence 1 lit. c.

Cookie Consent

b) Web Beacons:
We also use so-called web beacons. Web beacons are small graphic files (also known as "pixel tags" or "clear GIFs") that are usually used in conjunction with cookies to identify users or user behaviour. The above statements on cookies apply accordingly to web beacons; web beacons are not used in particular if you have objected to the use of the corresponding cookie. To prevent web beacons on our pages, you can use tools such as webwasher, bugnosys or AdBlock.

Without your express consent, we will not use web beacons to collect unnoticed personal data about you and transmit such data to third-party providers and marketing platforms.

With the tracking measures listed below, we want to ensure that our website will be meeting requirements and will be held continually optimized. Furthermore, we use tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimizing our service for you.

a) Google Analytics
We use Google Analytics, a web analysis service by Google Ireland Limited (Gordon House Barrow Street, Dublin 4; hereinafter „Google“) for the purpose of demand-oriented design and continuous optimization of our sites. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

In this context, pseudonymised user profiles will be created and cookies will be used, see point 4. The information on your use of our website created by the cookie such as

• browser type / version,
• used operating system,
• Referrer URL (the previously visited page),
• the accessing computer’s host name of (IP address),
• time of server request,

will be submitted to a server of Google in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on the website activities and to provide further services associated with the use of the website and of the internet for the purposes of market research and demand-oriented design of these web pages. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of the company. Under no circumstances will your IP address be merged with other data from Google. The IP addresses will be anonymized so that an assignment is not possible (IP masking).

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

Furthermore, you can prevent recording of data generated by the cookie relating to your use of the website (including your IP address) and its processing by Google when downloading and installing a browser-add-on https://tools.google.com/dlpage/gaoptout?hl=de&

As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from capturing data by clicking this link.

Further information on data protection in connection with Google Analytics can be found at https://www.google.com/analytics/terms/de.html.

b) Criteo
On our website we make use of the possibility of collecting, storing and evaluating information about the surfing behavior of website visitors by using the retargeting technology Criteo (Criteo SA, 32 Rue Blanche, 75009 Paris). We use this information to show you advertisements that are of interest to you in order to make our website more interesting for you.

To enable this technology, Criteo stores cookies (point 4) in your browser. With the help of this cookie, the user can be identified and addressed again when visiting another Criteo network website. Information about the surfing behavior of website visitors is stored in pseudonymized form.

Criteo can analyze the surfing behavior and then display targeted product recommendations as a suitable advertising banner when other websites are visited. The data collected by Criteo will only be used to improve the offering of advertisement. Information such as technical identifiers from your registration information is stored on our website or in our CRM system and exchanged within Criteo's advertising network.

On the bottom right of each displayed banner there is a small "i" (for information), which opens on mouse-over and leads to a page where the system is explained and an opt-out is offered. When you click on Opt-Out, an "Opt-Out" cookie is set, which will prevent these banners from being displayed in the future. Any other use or passing on to third parties is excluded.

Alternatively, you can opt-out for all browsers at https://www.criteo.com/de/privacy/. There you can also disable Criteo ads on the web and mobile applications.

Alternatively, you can opt out of such interest-based advertising through the following websites:

• http://www.networkadvertising.org/choices/
• http://www.youronlinechoices.com/

c) Zanox
We use the Zanox advertising service to document transactions (e.g. leads and sales). Zanox is a product of AWIN AG, Eichhornstraße 3, 10785 Berlin. Cookies and web beacons are used in this context, point 4. The information generated by cookies and/or web beacons about the use of this website (including your IP address) and delivery of advertisement is transferred to a Zanox server and stored there. Zanox will use this information to evaluate your use of the Website with respect to the advertisements, to compile reports on Website activities and advertisements for the Website Operators and to provide other services relating to the use of the Website and the Internet. Zanox may also transfer this information to third parties where required to do so by law or where such third parties process the information on behalf of Zanox. You can deactivate the storage of cookies in your respective browser under Tools/Internet options, limit them to certain websites or set your browser to notify you as soon as a cookie is sent.

d) Doubleclick Ad Exchange
The advertising service "Doubleclick Ad Exchange" used on our website is a product of Google Inc., USA ("Google", see above), which we use for optimized advertising. Within the framework of the use of Doubleclick Ad Exchange, cookies and web beacons are used, point 4. This records and stores information such as visitor traffic on our website. The information generated by the cookie and/or web beacon about your use of the website is transferred to a server in the USA and stored there.

Google uses the information obtained in this way to evaluate your usage behavior with regard to Doubleclick Ad Exchange ads. Google may also disclose this information to third parties if this is required by law or if third parties process this data on behalf of Google. If IP addresses are transferred and stored in this context, this is only to combat and filter spam/fraud (ad impression spam and click spam).

e) Bing Ads
We use the tracking technology "Bing Ads" from Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA) for the purpose of conversion tracking. Bing Ads creates conversion statistics that capture how many users reach a conversion page after clicking on an ad. This tells us the total number of users who clicked on our ad on the Bing Ad Network and were directed to a page with a conversion tracking tag.

When you click on a Bing Ads ad, a cookie (point 4) is stored in your browser, which makes it possible to recognize your browser. This tells us the total number of users who clicked on our ad and were redirected to a page with a conversion tracking tag. However, we do not receive any information that personally identifies users. The cookies stored by Bing Ads lose their validity after 180 days and do not serve to personally identify the user. This helps us to align our marketing effectively and is done on the basis of GDPR sec. 6 para. 1 lit. f.

Microsoft is certified under the "Privacy Shield". You can check whether Microsoft advertising cookies are set in your browser and deactivate them by using the deactivation page for consumers from the EU https://www.youronlinechoices.com/uk/your-ad-choices/.

For more information about Microsoft Bing Ads' privacy policy, please visit: https://privacy.microsoft.com/de-de/privacystatement.

f) New Relic
We use the plugin New Relic of the web analysis service of New Relic for the statistical evaluation of the speed of the website. New Relic is a product of New Relic Inc., 188 Spear Street, Suite 1200 San Francisco, CA 94105, USA ("New Relic").
When you visit our website, the browser establishes a direct connection with the servers of New Relic. By integrating the plugin, New Relic receives the information that you have called up the corresponding page of the offer. If you are logged in to New Relic, New Relic can assign the visit to your New Relic account. If you are not a member of New Relic, it is still possible for New Relic to obtain and store your IP address.
The purpose and scope of the data collection and the further processing and use of the data by New Relic as well as the related rights and setting options for the protection of the privacy of the users can be found in the data protection information of New Relic: https://newrelic.com/termsandconditions/privacy. In order to ensure adequate data protection, New Relic complies with the data protection provisions of the EU-US Privacy Shield. The certification can be found here: https://www.privacyshield.gov.
If you are a member of New Relic and do not want New Relic to collect information about you through this service and link it to your New Relic membership information, you must log out of New Relic before visiting its website.

g) RTB House
Our website uses the technology of RTB House (RTB House SA, Złota 61/101, 00-819, Warsaw, Poland; hereinafter "RTB House"). In this context, information about the surfing behaviour of website visitors is collected for marketing purposes in pseudonymous form and cookies and web pixels are set for this purpose. RTB House can thus analyse the surfing behaviour and subsequently display personalised product recommendations as advertising banners when visiting other websites (so-called retargeting). In no case can the pseudonymised data be used to personally identify the visitor to the website. The data collected by RTB House is only used to improve our advertising offer.
On each RTB House advertising banner there is a small "=" (for information) in the bottom left-hand corner, which opens when you mouse-over and, when clicked, leads to a website explaining the RTB House system and offering an opt-out. When you click on Opt-Out, an "Opt-Out" cookie is set on your end device, which prevents the display of these banners in the future.
No other use or disclosure of personal data to third parties will take place. You can find more information on RTB House at https://www.rtbhouse.com/privacy-center/services-privacy-policy/.

h) econda
For the purpose of web analysis and website tracking, we use technology from econda (econda GmbH, Zimmerstr. 6, 76137 Karlsruhe, Germany) on our website. econda analyses and collects transaction data for marketing purposes in order to offer personalised content. For this purpose, econda stores "1st party cookies" on your terminal device, which means that the processed data originates exclusively from our website.

With this data, pseudonymised user profiles are created, evaluated and used to address you with appropriate advertising based on your user behaviour. Enconda helps us to analyse the use of our website and to further develop it in terms of user-friendliness.

The basis for this use is your consent to the analysis and optimisation of our online offer within the meaning of GDPR sec. 6 para. 1 sentence 1 lit. a. You can revoke your consent at any time, e.g. in the Cookie Settings.

When using enconda, the pseudonymised data can in no way be used to personally identify the visitor to the website.

You can find more information about enconda GmbH and the TÜV seal "Tested data protection" at https://www.econda.de/warum-econda/datenschutz-made-in-germany/.

Our website uses the services Facebook Pixel and Facebook Custom Audience. These are products of Facebook Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland ("Facebook")). These services document the transactions on our website, such as the time spent on pages, the placement of products in the shopping cart or purchases. The data used for this purpose is stored on your computer using cookies.

The stored data is first used to analyse the search and purchase behaviour of visitors to this website (tracking). The collected information is used to improve the website and the the services offered. On the basis of these insights, the stored cookies are also used to recognize visitors to our website when they visit websites that belong to the Facebook advertising network. The use of these services then enables us to present interest-related advertisements to the user on this "partner website" and thus make them more interesting for the user (retargeting).

You have the option to deactivate the collection of data for the above-mentioned purposes. A permanent cookie will then be set, which will prevent the collection of data as long as you do not specifically delete this cookie in your browser. You can repeat your objection at any time.

On our website you have is the opportunity to share articles in the social networks Facebook, Twitter and Pinterest. We use this opportunity to promote our website. The underlying advertising purpose is to be regarded as a legitimate interest within the meaning of the GDPR. These plug-ins are integrated by us by means of external links to the pages of the operators of the social network in order to protect visitors to our website in the best possible way. Responsibility for the data protection-compliant operation is to be guaranteed by their respective providers.

Our website uses a Google Maps interface (API) to display geographical information visually. Google Maps is a product of Google (see above, paragraph 5. a). When using Google Maps, Google also collects, processes and uses data about the use of the Maps functions by visitors to the websites. Further information about data processing by Google can be found in the following link Google's privacy policy.

Further instructions for managing your own data in connection with Google products can be found here: https://support.google.com/accounts/answer/3024190.

To optimize our website, we use the content delivery network (CDN) Bunny.net from the provider BunnyWay d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia. The legal basis for processing is Art. 6 Para 1 S. 1 lit f GDPR. Our legitimate interest is a fast, dependable and attractive presentation of our website.

A CDN is an online service that can serve large media files such as page content, graphics, shop images or scripts. This is done through a network of regionally distributed servers which are connected to each other via the internet.

The use of Bunny.net helps us to optimize the loading speeds of our website. All personal data are anonymized and not transmitted to third parties. Generally, Bunny.net does not collect, store or distribute any information that can be used in any way to identify users.
The processing of personal data takes place exclusively on behalf of BRAUN Hamburg (order processing in accordance with Art. 28 GDPR). The processing is not carried out for Bunny.net´s own purposes and in compliance with the applicable data protection laws.

For more information, visit the Bunny.net website: https://bunny.net/privacy/ and https://bunny.net/gdpr/.

You have the right:

• to obtain access to your personal data processed by us in accordance with GDPR sec. 15. In particular, you may obtain access to the purposes of the processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the envisaged storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the source of your data, if these have not been collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on their details;
• to immediately request the rectification of inaccurate or completion of incomplete personal data stored by us in accordance with GDPR sec. 16;
• to request the erasure of your personal data stored by us pursuant to GDPR sec. 17, unless the processing for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for assertion, exercise or defense of legal rights is required;
• to demand the restriction of the processing of your personal data pursuant to GDPR sec. 18, as far as the accuracy of the data is contested by you, the processing is unlawful, but you reject its erasure and we no longer need the data, but you require this, for the exercise or defense of legal claims or you objected to processing pursuant to GDPR sec. 21;
• to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format in accordance with GDPR sec. 20. or to demand transmission to another controller;
• to object to your consent given pursuant to GDPR sec. 7 para 3 at any time. As a result, we are no longer allowed to continue processing data based on this consent in the future and
• to lodge a complaint with a supervisory authority pursuant to GDPR sec. 77. As a rule, you can contact the supervisory authority of your habitual residence or place of work or place of business.

If your personal data are processed based on legitimate interests pursuant to GDPR sec. 6 para. 1 sentence 1 lit. f, you have the right to object to the processing of your personal data pursuant to GDPR sec. 21, provided that there are reasons on grounds relating to your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which we will implement without specifying a particular situation. If you would like to make use of your right of revocation or objection, simply send an e-mail to info@04651.com.

We use the most common SSL (Secure Socket Layer) method in connection with the highest level of encryption supported by your browser. Usually this is a 256 bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. Whether a single page of our website is transmitted in encrypted form can be seen from the closed display of the key or lock symbol in the status bar of your browser. We make use of the rest of the adequate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

This data protection declaration is currently valid and has the status as of November 2023.

Due to further development of our website and offers or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can access and print out the current data protection declaration at any time on the website at https://www.04651.com/sylt/en/datenschutz.