Privacy

1. Responsible and data protection officer

Responsible according to the German basic data protection statutes („DSGVO“) and similar national data
protection laws of member states as well as other data protection statutes is Telelift GmbH based in
Frauenstrasse 28 in Maisach („Telelift“), telephone +49 (0) 8141 31591 0, telefax + 49 (0) 8141 31591
111, email info@telelift-logistic.com.

The responsible’s data protection officer is Mr. Stefan Loza. He can be contacted at the responsible’s
address or via email stefan.loza@telelift-logistic.com.

2. Processing of personal data

Telelift’s internet offer can basically be used anonymously. When accessing the website www.telelift-
logistic.com the user’s browser automatically transfers information to the website’s server which will be
temporarily stored in a file called logfile. The automatically stored information include: IP address of
requesting computer, date and time of access, name and URL of file retrieved, website from which access
is obtained, used browser and maybe the operating system of accessing computer as well as name of
access provider.

The mentioned data are processed for several technical and administrative purposes, especially for
enabling a smooth connection establishment of website and a comfortable using of the Telelift website.

The legal basis for data processing is the first sentence of article 6(1) lit. f DSGVO. Telelift’s legitimate
interest results from the purposes for data collection listed above. The data will not be used for drawing
conclusions about a visitor of the website.

3. Cookies and analytical tools

Telelift does not apply analytical tools on the website www.telelift-logistics.com. It is recalled that the web
host 1&1 Internet SE is using the so-called „1&1 WebAnalytics“ for statistical purposes and technical
optimization and that the data are processed anonymously. The privacy notice of 1&1 Internet SE can be
obtained via the following link: https://hosting.1und1.de/terms-gtc/terms-privacy/.

Session cookies are used on the website. These can be blocked by the user. Latest when the browser is
closed these are automatically deleted. The cookies are used to guarantee the website’s smooth
functioning.

4. Email contact

Contacting Telelift is possible via the email address provided at the website. In this case the user’s personal
data transferred with the email will be stored. In this connection no data will be transferred to third parties.
Processing of personal data from an email generated via the website solely serves for establishing the
contact. In case of contacting by email this is taken as necessary legitimate interest for processing the
data.

The data will be deleted as soon as they are not necessary anymore for achieving the purpose of their
collection. This is the case for personal data transmitted by email when the respective communication is
finished. The communication is finished only if it is apparent from the circumstances that the respective
issue is conclusively clarified.

If the user is contacting Telelift by email he can object to the storage of his personal data any time. In such
case the communication cannot be continued. The objection can be made by email to datenschutz@telelift-
logistic.com.

Legal basis for the processing of data transmitted in the course of email transfer is article 6(1) lit. f DSGVO.
If the email contact is aiming at the conclusion of a contract the additional legal basis for the processing is
article 6(1) lit. b DSGVO.

5. Rights of the parties concerned

Persons whose personal data are processed are concerned parties according to the DSGVO. They are
entitled to the following rights against Telelift:

A concerned party can request a confirmation from Telelift whether personal data are processed by Telelift
(article 15 DSGVO). If this is the case a concerned party can demand information about (a) the purposes
for processing of personal data, (b) the categories of personal data processed, (c) the recipients
respectively the categories of recipients to whom the personal data were or will be disclosed, (d) the
planned storage period of personal data or, if detailed information on this issue are not possible, criteria for
determination of storage period, (e) information on origin of data when personal data are not collected
from the concerned party.

A concerned party has the right to correction and/or completion against Telelift as far as personal data
relating to him are incorrect or incomplete. Telelift will make the correction immediately (article 16
DSGVO).

Concerned parties can demand from Telelift to delete the personal data immediately (article 17 DSGVO).
Then Telelift is obliged to immediate deletion, if (a) the personal data are not necessary anymore for the
purposes for which they were collected or processed otherwise, (b) the concerned party revoked his
permission to which the processing according to article 6(1) lit. a or article 9(2) lit. a DSGVO was based
and lacking a further legal basis for the processing, (c) the concerned party is objecting to processing
according to article 21(1) DSGVO and no overriding legitimate reasons for the processing are given, or
when the concerned party is objecting to processing according to article 21(2) DSGVO, (d) the personal
data were processed unlawfully, (e) deletion of personal data is necessary for fulfilling a legal obligation
according to Union law or the law of the member states which Telelift is subject to, or (f) the personal data
were collected with regard to services offered by the information society according to article 8(1) DSGVO.
The right to deletion among others does not apply when the processing is necessary for assertion, exercise
or defence of legal claims.

A concerned party can request limitation of processing of his personal data as far as (a) he contests the
accuracy of the data, (b) the processing is unlawful but the concerned party denies their deletion, (c)
Telelift does not need the data any more but the concerned party needs them for assertion, exercise or
defence of legal claims or (d) he objected according to article 21 DSGVO against the processing (article 18
DSGVO).

A concerned party can demand from Telelift that he will receive personal data provided to Telelift in a
structured, common and machine-readable format or that these data will be transferred to a responsible
person (article 20 DSGVO).

The user has the right to revoke the declaration of consent according to privacy law at any time.
Revocation of the permission does not affect the lawfulness of executed processing resulting from the
permission until the revoking. The revocation can be declared by email to the following address:
datenschutz@telelift-logistic.com.

Without prejudice to any other remedy the user has the right of complaint to a supervisory authority
especially in the member state of his residence, workplace or the place of possible violation if he finds that
the processing of personal data violates the DSGVO (article 77 DSGVO).

The supervisory authority where the complaint was filed will inform the plaintiff about status and results of
the claim including the possibility of legal remedy according to article 78 DSGVO.

6. Data security

For protection of data security a TLS/SSL encryption (256 bit key, TLS 1.2) is executed.

Telelift took appropriate technical and organizational security measures to protect personal data against
accidental or intentional manipulations, partial or complete loss, destruction or against unauthorized access
of third parties. These security measures are continuously improved by Telelift according to technological
development.