Data Protection (Privacy) Information

As of: 03.06.2023

Introduction

elobau GmbH & Co. KG and its subsidiaries (hereafter: “elobau”) are honored to welcome you to our online eloLounge Days event. For us, privacy and data protection are important, and that is why we would like to inform you about the use of your personal data when you visit this website and/or our online events.

§1 Information on Processing of Data

1.In this paragraph we will inform you about the processing of your personal data when you visit ourwebsite elolounge.com. Personal data are all data that can be attributed to you, such as e.g. yourname, your postal and email address, phone number, tracking data, etc.

2.The organization responsible for the processing of your personal data (the “controller” as per Article4(7) of the General Data Processing Regulation or GDPR) is elobau GmbH & Co KG, Zeppelinstr. 44,D-88299 Leutkirch, Germany, info@elobau.de (see also the company imprint on this website).

We have a Data Protection Officer, who can be reached at datenschutz@elobau.de or by regular mail to the address listed above with, care of “the Data Protection Officer”.

3.Before you can enter our virtual showroom, you have to register by entering your name, emailaddress, and a password of your choice. We also need to know which company you represent orwork for (name and location of company), because our online events including our showroom arespecifically targeted at commercial users.

We use a double-opt-in registration system. This means that you have registered successfully onlyafter you have clicked on the confirmation email that we will send to your email address.

Unfortunately, we cannot give you access to our virtual showroom without the data listed above.Our showroom is not and cannot be accessible to the general public.

4.Once you have entered our virtual showroom, you can request an in-person meeting by filling inthe corresponding online form. In order to be able to contact you and set up a meeting, we needyour email address and optionally your postal address. You can also let us know whether you areinterested in receiving product information in the form of a brochure.

5.Our virtual showroom also allows you to register for one or more seminars. Registration for aseminar requires you to provide us with the same personal data listed above.

6.Our virtual showroom has a virtual lounge. This lounge is provided by wonder.me.

The lounge is included in our website through an i-frame and is therefore not identifiable as a separate website.

When entering the lounge, you are requested to provide your cookie preferences.

7.Every time you visit our showroom we collect some technical data regarding your visit. You can findout more in paragraph 5 below.

8.Our virtual showroom also includes an option to chat with our technical support, in case you areexperiencing technical problems. In order to solve your technical problems we may have to collectand process some personal data, such as your contact data and technical data about your computerand/or devices.

9.We would like to draw your attention to the fact that we may use your personal data for marketingpurposes. You can always object against this; we are legally required to accept your objection andstop using your data for advertising and we will of course comply fully with our legal obligations.You can find more information in paragraph 4 below.

§2 Legal Basis for Processing

When you request access to our showroom, access our lounge, would like to have a personal meeting or register for a seminar, we ask for your permission to process your personal data. In all these cases the legal basis for our processing of your data is Article 6(1)(a) of the GDPR.

All other processing of your personal data (technical data and technical support) is based on Article 6(1)(f) GDPR, which allows us to do so based on a legitimate interest – in this case: our legitimate interest to provide you with a properly functioning, stable, secure and informative website. This interest is generally regarded as sufficient to justify the processing of your personal data.

§3 Transfer of Data to Others

Sometimes, we will transfer your personal data to other entities:

•Your personal data may be processed by all companies within the elobau group.

•Our virtual showroom is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742Friedersdorf, Germany.

•Support for our virtual showroom is provided by Atelier Damböck Markenkommunikation GmbH,Stahlgruberring 11A, 81829 München, Germany.

•The virtual lounge is provided and supported by Wonder Technologies GmbH, Tempelhofer Ufer 1A,10961 Berlin, Germany.

•We use services provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Irland;these services also include processing your personal data.

We may also transfer your personal data to other entities if we are required by law to do so.

We have concluded Data Processing Agreements with all entities processing your data on our behalf (Neue Medien Münnich, Atelier Damböck, Wonder Technologies and Google), as required by Article 28(3) GDPR.

We reserve the right to change the service providers we use. We will inform you about any such changes on this web page.

§4 Your Rights

You have the following rights regarding your personal data:

• You have the right to be informed about your personal data and our processing thereof,

• You have the right to obtain a copy of your personal data processed by us,

• You have the right to withdraw your consent (see paragraph 8 below),

• You have the right to have your personal data corrected or deleted,

• You have the right to have the processing of your personal data restricted,

• You have the right to object against the processing of your personal data, and

• You have the right to data portability (to the extent applicable).

You also have the right to submit a complaint against our processing of your personal data to a competent supervisory authority. The authority supervising us is the “Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Königstraße 10a, 70173 Stuttgart, Germany”. You can also submit a complaint to another supervisory authority.

We would like to point out that the right to object against our processing of your data explicitly includes processing for marketing purposes.

If you object against our processing of your data, then we may check whether we have compelling legitimate grounds to deny your objection. However, objections against the use of your data for marketing purposes will always be accepted.

You can submit all your requests for exercising your rights to:

datenschutz@elobau.de elobau GmbH & Co. KG Zeppelinstraße 44 88299 Leutkirch Germany

Any personal data provided by you in such a request will be deleted as soon as it is not needed anymore to process your request. Alternatively we may decide to restrict processing of such data in cases where we are bound by law to store your data after having processed your request.

Automated Decision-making

We do not make decisions based solely on automated processing of your personal data. Article 22 GDPR is therefore not applicable.

§5 Data Collection During Your Website Visit

1.Every time you visit our virtual showroom we automatically collect data provided by your browser.This technical data is necessary to ensure that the showroom is rendered properly and that it isstable and safe. We collect the following data:•IP-Address,

•Date and time of the visit,

•Difference between your timezone and Greenwich Mean Time (GMT),

•Content of the pages visited,

•HTTP status,

•Amount of data transmitted,

•Originating website,

•Browser,

•Operating System and open windows, and

•Language and version of browser.

2.In addition to the above listed data we use cookies: small text files that are stored on your computerby your browser. These cookies contain information relevant to our website. Cookies cannot runprograms or infect your computer or device with a computer virus. Their sole purpose is to make ourwebsite more user-friendly and effective.

3.We use cookies as follows:3.1.We distinguish between transient cookies – see (3.2) – and persistent cookies – see (3.3).

3.2.Transient cookies are deleted the moment you close your browser or log out, and include in particular the so-called session cookies. Session cookies contain a session ID that allows us to recognize the various different requests coming from your browser as belonging to the same visit to our virtual showroom.

3.3.Persistent cookies are automatically deleted after a predefined amount of time which depends on the particular function of a cookie. You can always delete cookies in the security settings of your browser.

3.4.In addition to cookies we use Local Storage Objects. These Local Storage Objects allow us to store additional data in the cache of your browser and use this data to ensure that your preferences and settings are kept between visits to our showroom and website.

Local Storage Objects are legally equivalent to cookies. Therefore, all statements in this privacy policy that apply to cookies are also applicable to Local Storage Objects.

4.Some cookies are necessary to ensure that our website can operate properly. The legal basis for theprocessing of these cookies is found in Article 6(1)(f) GDPR and based on our legitimate interest toallow our website to function properly. All other cookies are processed only after you have consentedto their use through our Cookie Banner; the legal basis for these cookies can therefore be found inArticle 6(1)(a) GDPR.

5.(Name, source, purpose, retention period, type) of these cookies is as follows:

_ga	Google Analytics	Used to distinguish between visitors.	14 months	Cookie
_gac_	Google Analytics	Contains information relevant for Google Advertisements.	90 days	Cookie
_gat	Google Analytics	Is used to reduce the rate of requests made to Google Analytics. If Google Analytics is activated through the Tag Manager, this cookie is called _dc_gtm_*.	1 minute	Cookie
_gid	Google Analytics	Is used to distinguish between visitors.	1 day	Cookie
ga_client_id	Google Analytics	Same as _ga, stored in parallel in a Local Storage Object as backup.	14 month	Local Storage Object

General Cookies

Cookies from WordPress

Name	Purpose	Validity
wordpress_test_cookie	This cookie determines whether the use of cookies has been disabled in the browser. Duration of storage: Until the end of the browser session (will be deleted when closing your internet browser).	Session
PHPSESSID	This cookie stores your current session with respect to PHP applications, ensuring that all features of this website based on the PHP programming language are fully displayed. Duration of storage: Until the end of the browser session (will be deleted when closing your internet browser).	Session
wordpress_akm_mobile	These cookies are only used for the administration area of WordPress.	1 Year
wordpress_logged_in_akm_mobile	These cookies are only used for the administration area of WordPress and do not apply to other site visitors.	Session
wp-settings-akm_mobile	These cookies are only used for the administration area of WordPress and do not apply to other site visitors.	Session
wp-settings-time-akm_mobile	These cookies are only used for the administration area of WordPress and do not apply to other site visitors.	Session
ab	Is used for A / B testing of new features.	Session
akm_mobile	saves if the visitor wants to see the mobile version of a website.	1 Day

Cookies from Polylang

Name	Purpose	Validity
pll_language	This cookie stores the language choice and the geographical origin of the user.	1 Jahr

Cookies from DSGVO AIO for WordPress

Name	Purpose	Validity
dsgvoaio	This LocalStorage key / value stores which services the user has agreed to or not.	variable
_uniqueuid	This LocalStorage key / value stores a generated ID so that the user's opt-in / opt-out actions can be documented. The ID is stored anonymously.	variable
dsgvoaio_create	This LocalStorage key / value stores the time when _uniqueuid was generated.	variable
dsgvoaio_vgwort_disable	This LocalStorage key / value stores whether the service VG word standard is allowed or not (setting of the page operator).	variable
dsgvoaio_ga_disable	This LocalStorage key / value stores whether the service Google Analytics Standard is allowed or not (Hiring the site operator).	variable