Personal data are individual details that refer to a person or are suitable for establishing a relationship to a person, such as the name, postal address, telephone number, e-mail address, bank details, etc. Personal data can therefore be used to infer the identity of a person. Under certain circumstances, personal data can be used to infer the identity of a person.

The controller within the meaning of the General Data Protection Regulation (hereinafter also "GDPR") and other national data protection laws of the member states as well as other data protection provisions is the:

amb products GmbH

Gerstenstieg 4

22926 Ahrensburg

Telephone: +49 (0)4102 994 97 00

E-Mail: datenschutz@amb-products.de

CEO: Technischer Betriebswirt H. Boysen

VAT-Id-Nr.: DE335603717

Local Court LübeckHRB 20472HL

Member of the IHK Schleswig-Holstein

If you have any data protection questions, please do not hesitate to contact us at:

amb products GmbH

Data protection

Gerstenstieg 4

DE-22926 Ahrensburg

or by e-mail at datenschutz@amb-products.de.

4.1 Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected and temporarily stored:

- Information, insofar as it is transmitted by the user's web browser in the headers.

- The IP address of the user.

- Date and time of access.

- The website accessed.

4.2 The legal basis for the temporary storage of the data is Art. 6 para. 1 lit. f DSGVO. The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. These purposes are also our legitimate interest in the data processing according to Art. 6 para. 1 lit. f DSGVO.

4.3 The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

5.1 When using the website, so-called cookies are stored on your computer. Cookies are small text files that are stored on your hard drive in relation to the browser you are using and which provide the party setting the cookie (in this case, us) with certain information. Cookies cannot execute programmes or transmit viruses to your computer. In this case, they only serve to make the website as a whole more user-friendly and effective.

5.2 Before cookies are stored by us, you will be informed about their use via a corresponding information dialogue. Cookies will only be stored and used if you consent to this in accordance with the options provided in the information dialogue.

5.3 We use cookies, for example, to identify you for subsequent visits if you have an account with us. Otherwise you would have to log in again for each visit.

a) This website uses cookies to the following extent:

- Transient cookies (temporary use)

- Persistent cookies (temporary use)

- Third-party cookies (from third-party providers)

- Flash cookies (permanent use)

b) Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This enables your computer to be recognised when you return to the website. Session cookies are deleted when you log out or close your browser.

c) Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.

d) You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. However, we would like to point out that you may then not be able to use all the functions of this website.

e) The Flash cookies used are not collected by your browser, but by your Flash plug-in. These store the necessary data independently of the browser you are using and have no automatic expiry date. If you do not want Flash cookies to be processed, you must install an appropriate add-on, e.g. "Better Privacy" for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or Adobe Flash Killer Cookie for Google Chrome.

5.4 The legal basis for this data processing is Art. 6 para. 1 p. 1 lit. a DSGVO.

6.1 In addition to the purely informational use of our website, we offer various services that you can use if you are interested. For this purpose, you usually have to provide further personal data, which we use to provide the respective service. If additional voluntary information is possible, this is marked accordingly.

6.2 When you contact the service provider by e-mail or via the contact form, your e-mail address and, if you so indicate, your name, telephone number and address will be stored by us in order to answer your questions.

7.1 Our website contains a contact form which can be used for electronic contact. If a user uses this option, the data entered in the input mask is transmitted to us and stored. At the time the message is sent, the user's IP address and the date and time of registration are also stored.

Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored.

In this context, the data will not be passed on to third parties. The data will be used exclusively for processing your enquiry.

The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

7.2 The legal basis for the processing of data transmitted in the course of contacting us is Art. 6 para. 1 lit. a and lit. f DSGVO. If the purpose of the contact is to conclude a contract, the additional legal basis for the processing is Art. 6 (1) (b) DSGVO.

7.3 The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation shall be deemed to have ended when it is clear from the circumstances that the matter in question has been conclusively clarified.

7.4 The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

8.1 You can register as a customer via our website for future orders. Alternatively, you can also order as a guest. When you place an order, we collect the following data in both cases:

- E-mail address

- Salutation, first and last name

- Your address

- If applicable, delivery address different from billing address

- Password, if applicable, if you register as a customer.

8.2 The legal basis is Art. 6 Para. 1 lit. b DSGVO. We collect the aforementioned data in order to process your order, to be able to identify you as a customer, for invoicing, the processing of possible liability claims, our correspondence with you and for the administration of our customer data.

8.3 The data will be deleted after successful processing of the order and expiry of the liability periods, but no later than the expiry of the retention periods under tax/commercial law. However, if you are a registered customer, your orders and all associated personal data will remain stored in your customer profile until you delete your customer profile.

8.4 In order to carry out the payment transaction you have selected, your personal data will be passed on to the credit institution or the respective payment service provider commissioned with the payment. The respective credit institution or payment service provider will be displayed to you when you select the payment method. The legal basis in this respect is also Art. 6 para. 1 sentence 1 lit. b DSGVO. In some cases, the selected payment service providers also collect this data themselves if you create an account with them. In this case, you must log in to the payment service provider with your access data during the ordering process. In this respect, the data protection declaration of the respective payment service provider applies.

8.5 In order to carry out the shipping process, your personal data will be passed on to the shipping company.

9.1 On our website, you have the option of subscribing to a free newsletter. When registering for the newsletter, the data from the input mask is transmitted to us. Only the e-mail address is mandatory. The first and last name as well as the form of address are voluntary. We use the e-mail address to inform you regularly about new products, valuable tips and exclusive or individual offers, voucher and gift campaigns.

In addition, the following data is collected during registration:

(1) IP address of the calling computer

(2) Date and time of registration

9.2 For the processing of the data, you will be sent an e-mail as part of the registration process. This contains a link which you must confirm in order to receive the newsletter. The link is valid for seven days. If you do not confirm your registration within this period, the registration will expire and your data collected as part of the registration will be automatically deleted.

9.3 The legal basis for the processing of data after registration for the newsletter by the user is Art. 6 para. 1 lit. a DSGVO if the user has given his consent. The collection of the user's e-mail address serves to deliver the newsletter. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. The user's e-mail address is therefore stored for as long as the subscription to the newsletter is active. The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose, a corresponding link can be found in each newsletter.

9.4 We have commissioned an external service provider to carry out the activities of our e-mail communication: rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg im Breisgau (www.rapidmail.de). This service provider processes data exclusively in accordance with our instructions, is also bound by this data protection notice and is controlled by us. Under no circumstances may the service provider use data that it has collected or processed on our behalf for its own purposes.

You have the following rights in connection with our processing of your data:

10.1 Right to information pursuant to Art. 15 DSGVO about the processing of your personal data by us on the purpose of processing, categories of data processed, recipients or categories of recipients, duration of storage or criteria for determining the duration, right to rectification, erasure, restriction of processing or objection to processing, right to lodge a complaint with the supervisory authority, if applicable, information about the origin of the data and the existence of automated decision-making and, if applicable, information about guarantees pursuant to Art. 46 DSGVO in the event of transfer to a third country or international organisations;

10.2 Right to have inaccurate or incomplete personal data corrected without delay in accordance with Art. 16 GDPR;

10.3 Right to erasure of stored personal data pursuant to Art. 17 GDPR if the data is no longer necessary for the purposes for which it was collected or otherwise processed, if consent has been withdrawn and there is no other legal basis, if objection to processing has been lodged and the data is processed pursuant to Art. 21 (1) or (2) DSGVO may no longer be processed, if the data have been processed unlawfully, if erasure is necessary for compliance with a legal obligation or if the data have been collected in relation to services offered by an information society pursuant to Art. 8 (1) DSGVO. This does not apply insofar as the processing is necessary for the exercise of the right to freedom of expression and information, compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;

10.4 Right to restriction of processing pursuant to Art. 18 DSGVO if you contest the accuracy of the data (and for the period necessary to verify the accuracy), if the processing is unlawful but you object to erasure and request restriction of use instead, if we no longer need the data for the purposes of processing but you need the data to assert, exercise or defend legal claims, or if you object to processing pursuant to Art. 21 (1) DSGVO as long as it has not yet been determined whether our legitimate grounds outweigh your legitimate grounds;

10.5 Right to object to the processing of your personal data pursuant to Art. 21(2) DSGVO (if the data is processed for the purpose of direct marketing) or pursuant to Art. 21(1) DSGVO (if the processing is carried out pursuant to Art. 6(1) sentence 1 lit. e) or f) DSGVO, on grounds relating to your particular situation, unless we have compelling legitimate grounds for the processing which override your interests, or the processing is for the establishment, exercise or defence of legal claims). For more information on the right to object, please also see section 23. below;

10.6 Right to data portability pursuant to Art. 20 DSGVO, i.e. to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format or also to transfer it to another controller;

10.7 Right to revoke consent given at any time in accordance with Art. 7 (3) DSGVO. The revocation has the consequence that we may no longer carry out the data processing for the future from the time of the revocation. See also section 16 below;

10.8 Right to complain to a supervisory authority pursuant to Art. 77 DSGVO. You can find the supervisory authority responsible for us under point 4. above. The right of appeal is without prejudice to other administrative or judicial remedies.

10.9 Please send any requests for information or objections to data processing by e-mail to datenschutz@amb-products.de or to the address given in section 3.

We do not use automated decision-making.

The address of the supervisory authority responsible for us is:

Independent Centre for Data Protection Schleswig-Holstein, Holstenstraße 98, 24103 Kiel,

Tel.: +49 431 988-1200, Fax: +49 431 988-1223

E-mail: mail@datenschutzzentrum.de

Homepage: www.datenschutzzentrum.de

13.1 We secure our website and other systems through appropriate technical and organisational measures against loss, destruction, access, modification or distribution of your data by unauthorised persons. However, despite regular checks, complete protection against all risks is not possible.

13.2 Our website uses the industry standard SSL (Secure Sockets Layer) for encryption. This ensures the confidentiality of your personal data via the Internet. You can tell whether encrypted transmission is taking place by the closed key/lock symbol in your browser display.

An objection to the processing of personal data concerning you is possible at any time under the conditions of Article 21 of the GDPR. In the event of an objection, the personal data shall no longer be processed unless compelling legitimate grounds for the processing are demonstrated which override the interests, rights and freedoms of the data subject, or the processing serves the purpose of asserting, exercising or defending legal claims.

Please send your objection to the e-mail address datenschutz@amb-products.de.

If you have given us your consent to the processing of personal data, you can revoke this consent at any time. Of course, this also applies to declarations of consent given to us before 25 May 2018 (before the DSGVO applies). The revocation of consent can only be valid for the future. The lawfulness of the processing is not retroactively eliminated by a revocation.

Please send your revocation by e-mail to datenschutz@amb-products.de.