Data Protection Declaration

ARMIN STROM AG (ARMIN STROM)

dated 21 April 2022 (Version 1.0)

1. Preamble

This Data Protection Declaration informs you how Armin Strom AG, Boezingenstrasse 46, 2502, Biel (“Armin Strom”, “us”) processes personal data. “Personal data” is any information that relates to an identified or identifiable individual, such as name, address, telephone number, e-mail etc. (“your data”). Protecting your privacy is important to us. Please read this Data Protection Declaration carefully so that you know when data is collected and how we store and process this data. The following statements may be amended from time to time. So please check this Data Protection Declaration from time to time.

2. Principles and Data Security

When you access our web pages or use our services you transmit your data to us. We invariably process your data in accordance with the data protection legislation in order to send you information and provide our services (e.g. invoicing, payment processing, client communication, product delivery etc.). We also use your data to prevent prohibited or illegal activities and to check the accuracy of your data. When we process your data we will inform you accordingly about the transfer of data, the data retention period and your rights. We moreover use appropriate technical and organisational measures to protect your data from unauthorised access.

3. Using our Web Pages

When you visit our website we track the pages visited, access time, the amount of data sent, sources and links, browser information, operating system information and the IP address.

Cookies: We use cookies to make our website user friendly and improve performance and security. Cookies are small text files that are placed on your hard drive and analyse internet usage. Cookies may be transient or permanent. You can either block all cookies or just third-party cookies in your internet browser settings. However, you might not then able to use all the functions on our website.

Google Analytics: We use Google Analytics, a web analytics service offered by Google Inc. (“Google“), which stores Cookies on your system. This enables us to analyse how you use our web pages. If your visit is the result of online advertising we additionally record which element drove you to visit the website. Your data will be transferred to a Google server in the USA and stored there. Google analyses your data, prepares reports about the activities on our web pages and provides us with additional services relating to internet usage. Your data is not merged with other data. You can stop this data processing by installing a plugin .

Social Plugins: We use social media plugins from Facebook, Instagram, Twitter, Youtube and LinkedIn. When you access our web pages, your browser establishes a connection with social media servers. This means that the internet address of the page visited (incl. your IP address) may be transmitted to foreign servers, even if you don’t have a social media account. When you are logged into social media your visit may be directly linked to your social media account. The information may also be published on the social media platform and your contacts may be displayed. You can prevent such data processing by installing plugins. You will find information about this in the social media privacy notices.

This data processing facilitates the use and optimisation of our services and improves their security and stability. Data processing takes place on the basis of our legitimate interest in our web page functionality and the provision of our services, and on the basis of your consent, which you may withdraw at any time.

4. Using our Services

In order to benefit from our services, you must send us data in some cases (e.g. when you order products). We process this data in order to comply with the contractual or statutory obligations. In addition, we share your data with third parties where necessary (e.g. shipment, payments, etc.). These service providers only use your data for order processing, but this may also involve transferring data to third countries.

If you subscribe to a newsletter, we will send you a confirmation e-mail. By subscribing, you agree to us sending you information about ourselves. We also work with Campaign Monitor (see below). You can stop receiving newsletters by clicking on the unsubscribe link in the newsletter. This processing is based on the consent component to the performance of the contract and on your consent, which you may withdraw at any time.

When you communicate with us, we process your data (e.g. e-mail, name, address, etc.) to enable us to deal with your enquiry. We only use your data to handle your enquiry and for general client support. This processing is based on the consent component of the contractual relationship and on your consent, which you may withdraw at any time.

5. Transfer of Your Data to Third Parties

In order to provide our services, we work with trusted partners and transfer your data to these partners as appropriate:

Okomo AG, Sihleggstrasse 23, CH-8832 Wollerau (www.okomo.com): In order to optimise online communication with clients.

Campaign Monitor Pty Ltd., Level 38, 201 Elizabeth Street, Sydney NSW 2000 Australia (www.campaignmonitor.com): In order to distribute the newsletter.

Odoo S.A., Chaussée de Namur, 40, 1367 Grand Rosière, Belgium (www.odoo.com): In order to manage our client data.

We nevertheless continue to be liable for lawful data processing, and ensure that our partners and their contractors comply with the data protection provisions. We moreover only disclose your data on the basis of statutory guidelines, court orders and regulatory requirements, when required for appeals or official inquiries and in the event of a security threat.

6. Transfer of Data to Third Countries

Your data will also be transferred to external companies in third countries if this is appropriate for the data processing concerned. These third parties have the same data protection obligations as us. If the level of data protection in a country is not compliant with ours, we nevertheless contractually ensure that your data is protected.

7. Retention and Erasure of Data

We only retain your data for as long as is required by law or is necessary for processing purposes. If we store data on the basis of a contractual relationship with you, this data will continue to be stored at least as long as the contractual relationship exists and at most as long as the limitation periods for potential claims brought by us continue to run or statutory or contractual obligations to retain data exist. Whenever we process your personal data on the basis of your consent, we will stop processing the data concerned immediately as soon as you withdraw your consent. Please note that even after your request to block or erase your personal data we must keep such data in some cases as part of our statutory or contractual retention obligations.

8. Disclaimer of Warranty and Liability

We process your data with the utmost care. We are, however, unable to guarantee the security of your data and accept no liability for the loss of data or its accessibility and use by third parties. More particularly, we exclude all warranties and liability relating to the use of our web pages. Our web pages also contain links to third-party websites. Once you clink on such links, we no longer have any control over the processing of your data by these third parties and also exclude any and all liability and warranties in this respect. This Data Protection Declaration does not apply to these linked websites.

9. Your Rights and Contact Information

You are entitled to request information at any time on whether your personal data is being processed and the types of personal data being processed. You may also request at any time in writing that your personal data be rectified, blocked, or erased. Appropriate proof of your identity is required. Please send your data privacy concerns by post or e-mail to the following address: Armin Strom AG, Bözingenstrasse 46, CH-2502 Biel, concierge@arminstrom.com.

We will make every effort to rectify or erase your data without delay, if requested. However, your data might still be needed, or statutory provisions might prevent compliance with your request. If your request cannot be dealt with satisfactorily, you may file a complaint with the appropriate data protection authority at any time. You will find more information about this on the website of your data protection authority.

Biel, 21 April 2022