Privacy Policy Axel Springer Teaser Ad GmbH

We are very pleased about your interest in our offer. With this privacy policy, we inform you about the type, scope and purpose of the personal data we process via this website and about our AdUp Technology and your rights as a data subject.

A. General

1. person responsible

The person responsible for data processing pursuant to Art. 4 No. 7 DSGVO is Axel Springer Teaser Ad GmbH, Axel-Springer-Str. 65, 10969 Berlin, Germany, telephone: +49(40) 3501 698 -199, e-mail: info@adup-tech.com (hereinafter also referred to as "we" or "us"), unless otherwise stated in this data protection declaration.

2. contact details of our data protection officer

Please contact our data protection officer at any time with questions and suggestions regarding data protection as well as to enforce your rights as a data subject:

Axel Springer Teaser Ad GmbH, Data Protection, Axel-Springer-Str. 65, 10969 Berlin, datenschutz@adup-tech.com

Insofar as data processing is carried out with a joint controller pursuant to Art. 26 DSGVO, both controllers act as a joint point of contact.

3 Place of processing

We also process personal data in countries outside the European Economic Area ("EEA"), including the USA. Insofar as no adequacy decision of the European Commission exists for the respective third country, we have concluded the standard contractual clauses of the EU Commission in accordance with Art. 46 para. 2 lit. c DSGVO to ensure an adequate level of data protection with the services used in third countries: Standard contractual clauses.

4. storage period

We process personal data only as long as this is necessary for the respective purpose stated in this data protection declaration. The personal data will then be deleted, provided that no legal retention periods prevent data deletion.

5. your rights as a data subject

Information, correction, deletion, restriction and the right to be forgotten

You can obtain information from us at any time and free of charge as to whether personal data relating to you is being processed by us and also specifically what data is being stored about you, as well as request a copy of the stored data. You can also have incorrect data corrected and completed.

You can also request the deletion and restriction of your personal data.

Data portability

Where applicable, you also have the right to have personal data concerning you transferred to you or to another controller in a structured, commonly used and machine-readable format, provided that the processing is based on consent or a contract and is carried out using automated means. However, this does not apply if the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. You also have the right to have the personal data transferred directly from one controller to another controller where this is technically feasible and where this does not adversely affect the rights and freedoms of other individuals.

Revocation / objection

You can revoke your privacy consent at any time via the "Privacy settings" link in the footer of the website. Otherwise, you can revoke any consent you have given at any time with effect for the future by contacting the above-mentioned address.

You can object to the processing of your personal data for the purpose of direct advertising at any time by sending a corresponding message to the above-mentioned contact address, without incurring any costs other than the transmission costs according to the basic rates.

Furthermore, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of a legitimate or public interest. We will no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Right of complaint

Furthermore, you have the right to lodge a complaint with the competent supervisory authority as well as the possibility to seek legal remedy. The supervisory authority to which the complaint has been submitted will inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy.

Existence of automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 DSGVO.

B. Data processing via this website

Below we inform you about the nature, scope and purpose of the personal data we process via this website and your rights as a data subject.

Calling up the websites - processing of personal data and type and purpose of use

When you use our offer, we automatically set absolutely necessary cookies ("Essential") and collect and process the following information to enable the usability of the functions provided and to ensure the security and stability of our offer:

• Information about the accessing end device and the software used.
• Date and time of access
• Websites from which you access our website or which you access via our website
• IP address
• The processing of the IP address is absolutely necessary to enable the delivery of our offer to your end device and to measure the efficiency and performance of our offer. Usage profiles are not created in the process. The legal basis for the data processing is Art. 6 para. 1 lit. b DSGVO.

Our servers also store your IP address for up to 7 days for the purpose and in the interest of being able to guarantee the security of our offer (Art. 6 para. 1 lit. f DSGVO).

II. privacy

1. general

Our website integrates technologies from providers who store information on your terminal device or retrieve it from there for certain purposes listed below in this data protection declaration. An overview of the providers and the processing purposes can also be found at the appropriate place in the privacy policy. For the use of certain technologies, we require your prior consent in accordance with § 25 para. 1 TTDSG or Art. 6 para. 1 lit. a DSGVO.

In order to map this process for you in a user-friendly way with all the legal requirements but also all the necessary information, a window ("Privacy") opens when you first visit our website, in which you have the option, through appropriate settings, to give your consent to third party providers to store and/or retrieve information in your device and to process personal data for certain purposes or to refuse this in each case. You have the option at any time to change the privacy settings you have made with effect for the future, i.e. to revoke any consent you have given. In the following, we inform you about the use of cookies or comparable technologies and the processing of personal data by the third-party providers we use, which may take place in each case depending on the privacy settings you have made.

The providers whose services or content we integrate help us to improve our website. You will also find an overview of the providers at the appropriate place in the privacy policy. There you also have the option of refusing the transfer of data to individual providers as such (i.e. independent of the purpose) or to give or revoke your consent for this. The term "third-party provider" or "provider" is not to be understood in the sense of Art. 4 No. 10 DSGVO (third party

2. functional

Third party functional services are embedded in our website to enable us to analyse the use of our website in order to measure and improve our performance. However, these functional third-party services are only loaded and the terminal accesses and data processing only take place if you have given your consent in accordance with Art. 6 para. 1 lit. a DSGVO or in accordance with § 25 para. 1 TTDSG in when you call up the website in the private sphere. You can revoke your consent at any time with effect for the future in the privacy settings. In addition, you can prevent the setting of cookies by our website at any time by means of a corresponding setting of the Internet browser used and thus permanently prevent the setting of cookies. Such a setting of the Internet browser used would also prevent a provider from setting a cookie on your end device. In addition, a cookie already set by a provider can be deleted at any time via the internet browser or other software programmes.

In the following, we inform you about the use of cookies or comparable technologies and the processing of personal data by the third-party providers we use, which may take place in each case depending on the privacy settings you have made.

Google Analytics

If you have given us your prior consent to do so, we will use the Google Analytics web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") for the purpose of constantly improving our services.

The purpose of the Google Analytics component is to analyse the flow of visitors to our website. Google uses the data and information obtained for the purpose of evaluating the use of our website, compiling online reports on website activity for us and providing other services relating to website activity.

Google Analytics sets a cookie on your terminal device for this purpose. The cookie is used to store personal information, such as the time of access, the location from which access originated and the frequency of visits to our website. Each time you visit our website, this personal data, including the IP address of the internet connection you are using, is transmitted to Google. This personal data is stored by Google. Google may pass on this personal data collected via the technical process to third parties. We use the add-on "_gat._anonymizeIp" for web analysis via Google Analytics. By means of this add-on, the IP address of your internet connection is shortened and anonymised by Google if access to our websites is from a member state of the European Union or from another state party to the Agreement on the European Economic Area. We have concluded a commissioned processing agreement with Google (Art. 28 DSGVO). We remain responsible for data processing. To ensure an appropriate level of data protection, we have concluded the European Union's standard contractual clauses with Google.

Further information on Google Analytics can also be found at www.google.de/intl/de/policies/privacy/ and at www.google.com/analytics/terms/de.html.

Google Tag Manager

If you have given us your consent for this, we use the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") on this website.

("Google"). The Google Tag Manager is a tag management system through which we have integrated and can manage Google Analytics on our website. We have concluded a commissioned processing agreement with Google (Art. 28 DSGVO). We remain responsible for the data processing. To ensure an appropriate level of data protection, we have concluded the European Union's standard contractual clauses with Google. Further information on the Google Tag Manager can also be found at policies.google.com/privacy and at support.google.com/tagmanager/answer/9323295.

You can find Google's terms of use at www.google.com/intl/de/policies/terms/ and the usage guidelines for Google Tag Manager at www.google.com/analytics/tag-manager/use-policy/.

3. Essential

In order to be able to take your privacy settings into account, it is imperative that we are able to store them in your terminal device and retrieve them when you return to our website. This is the Usercentrics Consent Management Platform, which you will find under the category "Essential" in Privacy. The legal basis for this is Section 25 (2) TTDSG.

III. Your approach

When you contact us, e.g. by e-mail, the data you provide (e.g. your e-mail address, your name if applicable, your telephone number, etc.) will be processed by us in the interest of and for the purpose of processing your enquiry and, if applicable, contacting you. We delete the data accruing in this context when it is no longer required for the aforementioned purpose, provided that the deletion does not conflict with any statutory retention obligations. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f DSGVO.

IV. Social Media

1. Social Network Links

There are no social media plugins integrated on this website that directly load data from the servers of the social media providers concerned. The integrated "plugins" are rather simple links to the relevant third-party sites, which we illustrate with corresponding graphics. A transmission of personal data to the operator of the social media service through the known plugins therefore does not take place.

2. Online presence in social networks

We operate online presences in the social networks listed below. According to Art. 4 No. 7 DSGVO, the respective social network is responsible for the data processing taking place via the respective network. Information on this and the rights to which you are entitled as a data subject can be found in the privacy policy of the respective network.

• LinkedIn (LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA) https://de.linkedin.com/legal/privacy-policy
• XING (New Work SE, Am Strandkai 1, 20457 Hamburg) https://privacy.xing.com/de/datenschutzerklaerung

C. Data processing via our AdUp Technology

Using our AdUp Technology, we conduct online marketing for our own purposes as well as on behalf of and in the name of various contractual partners (website operators, advertisers and agencies) and their customers. For this purpose, AdUp Technology is integrated by our contractual partners for the purpose of displaying personalised advertising.

In the following, we inform you about the type, scope and purpose of the personal data we process via our AdUp Technology and your rights as a data subject.

I. Purpose of the data processing:

1. provision of personalised advertising: data processing is carried out in order to provide users with relevant and personalised advertising based on their interests and preferences.

2. improvement of advertising activities: Data processing supports the analysis and optimisation of advertising campaigns to increase their effectiveness and provide users with relevant offers.

3. measuring advertising effectiveness: data processing enables the measurement of the effectiveness of advertisements in order to analyse performance, identify trends and optimise advertising results.

4. compliance: Data processing is carried out to comply with legal and regulatory requirements in the area of advertising and data protection.

II. Legal basis of data processing:

Personal data is processed on the basis of the user's explicit consent (Art. 6 para. 1 p. 1 lit. a DSGVO pursuant to Art. 6 para. 1 p. 1 lit. a DSGVO) in accordance with the provisions of the IAB TCF Framework and applicable data protection laws. The IAB TCF (Interactive Advertising Bureau Transparency and Consent Framework) is a framework for managing consent and transparency in the area of online marketing. It enables users to control the processing of their personal data by third parties, particularly in relation to advertising and tracking.

We are registered as a vendor with TCF.

III Data Processing:

Depending on the scope of services and the consent given, the following access data may be processed

• Browser ID
• Type (type of interaction such as page_view "page call", ad_impression "advertising insertion")
• Timestamp (time of interaction)
• ID (unique interaction ID)
• Campaign ID (ID of the campaign in question)
• Creative-ID (ID of the advertising medium)
• Request-ID (Unique ID of the page request)
• User_Agent (Normalised information about browser type, device and operating system)
• Event_Data (If available, meta information about the page, e.g. page name)

IV. Technical procedure for data processing:

When the user visits a website, our system assigns a unique anonymous identifier (browser ID) for the current browser, this information is stored in a cookie if the browser allows cookies to be stored.

Cookies are small files that are automatically created by your browser and stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware. Information is stored in the cookie that is related to the specific end device used. However, this does not mean that we gain direct knowledge of your identity.

In the area of personalised advertising, information about relevant products and websites is stored in our system for this browser ID when you visit websites such as online shops and is stored until it is deleted. In the area of normal advertising, information about recent interactions and possible interactions is stored in our system for this browser ID when you visit websites such as news pages or online shops and is stored until it is deleted.

We do not use automatic decision-making or profiling in accordance with Article 22 of the GDPR.

V. Recipients of data

Recipients of the data may be our contractual partners (website operators, advertisers and agencies) and their customers (advertisers). However, data is only transmitted to the extent that this data is necessary for the fulfilment of the contract (=principle of data economy) and the user has given his consent for this.

VI. Standard periods for the deletion of data

VII. OPT-OUT acitvated/deactivated manually

Here you have the option to activate and deactivate personalised advertising:

Changes to this data protection declaration

As a result of the further development of our website or due to changes in legal or official requirements, it may become necessary to amend this data protection declaration in compliance with the applicable data protection regulations. You can access and print out the current data protection declaration at any time on our website under Data Protection.

Status: 25 June 2023