Form on the Whistleblower Act

https://apagpersonalplanunggmbh.integrityline.app/

DATA PROTECTION

Information on data collection pursuant to Article 13 DSGVO Responsible person and data protection officer

The person responsible for data collection and processing is:

APAG GmbH; Mr. Jakob Dynia

The company data protection officer is:

PROLIANCE GmbH

Leopoldstr. 21

80802 Munich

datenschutzbeauftragter@datenschutzexperte.de

Collection and storage of personal data and the nature and purpose and use thereof. We collect the following data:

Salutation, first name, last name, e-mail address, address, telephone number (landline and/or mobile)

We collect your data for the purpose:

a.) the execution of the contract the fulfillment of our contractual and pre-contractual obligations

b.) direct advertising

The data collection and data processing is necessary for the performance of the contract and is based on Article 6 (1) b) DSGVO.

Insofar as we have obtained your consent for processing operations of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (DS-GVO) serves as the legal basis. The legal basis for direct advertising as a result of the sale of our goods or our services is Section 7 (3) UWG.

Disclosure of data to third parties

A transfer of your personal data to third parties for purposes other than those listed below does not take place. Insofar as this is necessary for the processing of the contractual relationship with you in accordance with Art. 6 para. 1 p. 1 lit. b DSGVO, your personal data will be passed on to third parties. Recipients of the data are public bodies that receive data due to legal regulations (e.g. social insurance carriers, tax authorities), internal bodies involved in the execution of the respective business processes (personnel administration, accounting, banking institutions/payment service providers, accounting, customer service, marketing, sales), in the case of shipping products to the transport company/shipping company commissioned by us, contractual partners, business partners to the extent required or permitted by legal regulations.

Your rights

You have the right:

to revoke your consent at any time in accordance with Art. 7 (3) DSGVO. This has the consequence that we may no longer continue the data processing based on this consent for the future; pursuant to Art. 15 DSGVO to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;

in accordance with Art. 16 DSGVO to demand the correction of incorrect or completion of your personal data stored by us without undue delay; in accordance with Art. 17 DSGVO to demand the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, the fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims;

in accordance with Art. 18 DSGVO to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 DSGVO to object to the processing; pursuant to Art. 20 DSGVO to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller; and pursuant to Art. 77 DSGVO to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.

Routine deletion and blocking of personal data

We process and store your personal data only for the period of time necessary to achieve the purpose of storage or if this has been provided for by the European Directive and Regulation or other legislator in laws or regulations to which the controller is subject.

If the purpose of storage no longer applies or if a storage period prescribed by the European Directive and Regulation or another competent legislator expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.

1. Right of objection and revocation, request for information, deletion and correction

You have the option at any time to revoke your consent to the processing of personal data with effect for the future and to have your personal data deleted or amended. If the data is required for the fulfillment of the contract or for the implementation of pre-contractual measures, an early deletion of the data is only possible insofar as contractual or legal obligations do not oppose a deletion.Requests for information, correction and deletion as well as the revocation or objection regarding the further use of the data of any consent given to us can be declared informally as follows:

by mail:

APAG Ltd.

Worthingtonstr. 8

74564 Crailsheim

PRIVACY POLICY

Your trust in the correct handling of your data is an important prerequisite for the success of our online offering. Therefore, we attach great importance to data protection. The collection, processing (storage, modification, transmission, blocking and deletion) and use of your data is carried out exclusively in compliance with the applicable data protection regulations, the TMG (Telemedia Act) and the BDSG (Federal Data Protection Act).According to this, we may use personal data in particular, insofar as this is necessary to establish and form contracts, provide services or billing (usage data). The information we receive from you is used by us for the processing of orders, the delivery of goods and the provision of services as well as the processing of payments (in the case of purchase on account also for necessary checks). We also use your information to communicate with you about orders, products, services and marketing offers, as well as to update our records and to maintain and service your customer account with us and to recommend products or services that may be of interest to you. Finally, we use your information to improve our Internet platform and our offers, to prevent or detect misuse, especially fraud, or to enable third parties to perform technical, logistical or other services on our behalf. Personal data is information about the identity of a person.

When registering a customer account, the following personal data, for example, must be provided:

• Company name
• First name and last name
• Street & house number
• Postal code
• City
• Country
• Phone number
• Email address and email repetition
• Password and password repetition

When you visit our websites, we store the domain name or IP address of the requesting computer, the client's file request (file name and URL), the http response code, the website from which you visit us, and the date and duration of your visit for a period of 7 working days. This data is stored for the purpose of identifying malfunctions or misuse of our online services and our telecommunications services/systems, insofar as this is necessary to establish further connections and/or for billing purposes. An evaluation of this usage data for the creation of personal usage profiles does not take place unless you have expressly consented to such use or unless this is regulated differently within the following provisions. In the event of disruptions or misuse, we reserve the right to report the matter to the law enforcement authorities. Any further use or disclosure of this usage data to third parties will not take place. We use cookies to authenticate our users when they log in. The use of cookies serves to ensure the smooth operation and improvement of our offers. Cookies are small text files that are either temporarily stored in the main memory or permanently stored on the hard drive ("session cookie" or "permanent cookie"). Session cookies are not stored on the user's hard drive, but expire automatically when the Internet browser is closed. By setting cookies, anonymous user IDs are assigned to users, but under no circumstances are programs executed on the user's computer or even computer viruses transmitted.

By setting your Internet browser program, you have the free choice of whether you want to accept cookies, be informed when a cookie is set or reject all cookies. However, we would like to point out that the use of our offer is only possible to a limited extent if cookies are rejected.We keep log files about the access data of our users ("server log files"). Each time a user accesses a page, his or her Internet browser transmits access data that is automatically stored in our log files. However, this data (e.g. IP addresses) cannot be assigned to specific persons without further measures. A combination of this data with other data sources, in particular with the personal user data, is not made.

The log files contain the following information:

• Remote host (name and IP address of the computer requesting the page)
• User-Agent HTTP request header (browser, version)
• Referrer or referrer
• Request-method, Request-path, Request-query-string and Request-protocol
• Date, time, time zone

Our company regularly checks and monitors your creditworthiness when concluding contracts and, in certain cases where there is a legitimate interest, also for existing customers. For this purpose, we cooperate with Creditreform Boniversum GmbH, Hammfelddamm 13, 41460 Neuss, from which we receive the data required for this purpose. For this purpose, we transmit your name, addresses and date of birth to Creditreform Boniversum GmbH. The information pursuant to Art. 14 of the EU General Data Protection Regulation on the data processing taking place at Creditreform Boniversum GmbH can be found here:

https://www.boniversum.de/eu-dsgvo/informationen-nach-eu-dsgvo-fuer-verbraucher/