General Information

In the following, we inform you about the collection of personal data when using our website.

The term "personal data", with reference to the definition in Art. 4 No. 1 of Regulation (EU) 2016/679 (hereinafter referred to as the "General Data Protection Regulation" or "GDPR" for short), refers to all data that can be related to you personally. This includes, for example, name, address, email address and user behaviour. With regard to the other terms, in particular the terms "processing", "responsible party", "order processor" and "consent", we refer to the statutory data protection definitions of Art. 4 GDPR.

As a matter of principle, we process personal data only to the extent necessary to provide a functional website and the contents and services we offer. The processing of personal data is regularly only carried out if you have given us your consent within the meaning of Art. 6 paragraph 1 sub-paragraph a) GDPR or if the processing is permitted by legal regulations, especially by one of the legal bases mentioned in Art. 6 paragraph 1 sub-paragraphs b) to f) GDPR.

Your personal data will be deleted or blocked as soon as the purpose for which it was stored ceases to apply. Furthermore, data may be stored if this has been provided for by national or European regulations to which we are subject. In this case, the data will be blocked or deleted when the storage period stipulated in the respective regulations has expired. The latter does not apply if further storage of the data is necessary for the conclusion or fulfilment of a contract.

If we use contracted service providers for individual functions on our website or wish to use your data for advertising purposes, we will inform you in detail about the respective processes below.

Competent Body

Responsible in the sense of Art. 4 No. 7 GDPR, the other data protection laws and other regulations applicable in the member states of the European Union as well as provisions of a data protection nature:

TEN31 Bank AG legally represented by Matthias von Hauff / Bernd Bonacker / Nico Kühner Alte Landstraße 21a D-85521 Ottobrunn Germany Email: info@ten31.com Telephone: +49 (0) 89 809 1346-0 Fax: +49 (0) 89 809 1346-99

You can find further details on the responsible body in our legal notice above.

Your Rights

You have the following rights towards us regarding the personal data concerning you:

• the right to information,
• the right of correction and deletion,
• the right to restrict processing,
• the right to object to the processing,
• the right to data transferability.

You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

Processing of personal data for informational use of our website

If you visit our website without registering or otherwise providing us with information ("Informational Use"), we only collect the personal data that your web browser transfers to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to enable you to view our website and to ensure its stability and security:

• IP address
• Date and time of the request
• Time zone difference to GMT
• Content of the website
• Access status (HTTP status)
• Data volume transferred
• Website from which you have reached our website
• Web browser
• Operating system
• Browser language and version

The aforementioned data is also stored in so-called log files on our servers. These data are not stored together with other personal data of yours.

The collection and temporary storage of the IP address is necessary to enable the delivery of our website to your terminal device. For this purpose, your IP address must be stored for the duration of your visit to our website. The storage of the above-mentioned data in log files serves to ensure the functionality and optimisation of our website and to guarantee the security of our information technology systems. This data is not evaluated for marketing purposes. The above-mentioned purposes are our legitimate interest in data processing. The legal basis for the collection and temporary storage of the aforementioned data is Art. 6 paragraph 1 sentence 1 sub-paragraph f) GDPR.

In the above-mentioned purposes lies our legitimate interest in data processing. The legal basis for the collection and temporary storage of the aforementioned data and log files is Art. 6 paragraph 1 sentence 1 sub-paragraph f) GDPR.

The aforementioned data for the provision of our website will be deleted when the respective session has ended. The collection of the above-mentioned data for the provision of our website and the storage of these data in log files is absolutely necessary for the operation of our website. There is no possibility of objection.

Processing of personal data by cookies

We use so-called cookies on our website. Cookies are small text files which are stored on the storage medium of your terminal device, for example on a hard disk, and which provide us, as the site that sets the cookie, with certain information. Cookies cannot execute programmes or transfer viruses to your terminal device. This website uses the following types of cookies, the scope and function of which are explained below.

Cookies that are stored with your web browser:

• Transient cookies: These cookies are automatically deleted when you close your web browser. These include in particular session cookies. These store a so-called session ID, which can be used to assign various requests from your web browser to the shared session. This enables us to recognise your terminal device when you return to our website. Session cookies are deleted as soon as you log out or close your web browser.
• Persistent cookies: These cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You can delete these cookies at any time in the settings of your web browser.

The processing of personal data by the above-mentioned cookies serves to make our website more user-friendly and effective for you. Some functions of our website cannot be offered without the use of these cookies. In particular, some functions of our website require that your web browser can still be identified after a site change. The data processed by cookies, which are required for the provision of the functions of our website, are not used to create user profiles. If cookies are used for analysis purposes, they serve to improve the quality and user-friendliness of our website, its contents and functions. They enable us to understand how the website is used, which functions are used and how often they are used. This enables us to optimise our offer continuously.

In the above-mentioned purposes lies our legitimate interest in data processing. The legal basis is Art. 6 paragraph 1 sub-paragraph f) GDPR.

The aforementioned cookies are stored on your terminal device and transmitted from there to our server. You can therefore configure the processing of data and information by cookies yourself. You can make appropriate configurations in the settings of your web browser, which allow you to reject third-party cookies or cookies altogether, for example. In this context, we would like to point out that you may then not be able to use all functions of our website properly. In addition, we recommend that you delete cookies and your browser history manually on a regular basis.

Data recipients

The following service providers (processors) receive data for the optimization of our Internet offer:

• Google Analytics
• Netlify, Inc.
• Overnice Creatives GmbH

Further functions and offers of our website

In addition to the aforementioned informational use of our website, we offer various services that you can use if you are interested. For this purpose, it is usually necessary to provide further personal data. We need these data to provide the respective service. The above principles for data processing apply.

In some cases, we use external service providers who we carefully selected and commissioned to process this data. These service providers are bound by our instructions and we regularly check them. Insofar as personal data is passed on to third parties in the course of services that we offer together with partners, you can find information that is more detailed in the following descriptions of the individual services. If these third parties are based in a country outside the European Economic Area, you can find more detailed information about the consequences of this circumstance in the following descriptions of the individual services.

Google Analytics

We use Google Analytics in our Internet presence. This is a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as "Google" only.

Through certification according to the EU-US Privacy Shield

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google guarantees that the data protection requirements of the EU will also be observed when processing data in the USA.

The Google Analytics service is used to analyse the usage behaviour of our website. The legal basis is Art. 6 paragraph 1 sub-paragraph f) GDPR. Our legitimate interest lies in the analysis, optimisation and economic operation of our Internet presence.

Usage and user-related information, such as IP address, location, time or frequency of visits to our website, are transmitted to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymisation function. With this function, Google shortens the IP address already within the EU or EEA.

The data collected in this way is in turn used by Google to provide us with an evaluation of the visit to our website and the usage activities there. This data can also be used to provide further services related to the use of our website and the use of the Internet.

Google states that it does not link your IP address to other data. In addition, Google provides you with further information on data protection law, for example on the possibilities of preventing the use of data under

https://www.google.com/intl/de/policies/privacy/partners

Furthermore, Google offers under

https://tools.google.com/dlpage/gaoptout?hl=de

a so-called deactivation add-on together with further information on this. This add-on can be installed with the most common Internet browsers and offers you further control options over the data that Google collects when you visit our website. The add-on informs the JavaScript (ga.js) of Google Analytics that information on visits to our website should not be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analysis services. Whether and which other web analysis services we use is of course also explained in this data protection declaration.

Contact

If you contact us by email, the personal data you send us with your email will be stored. We also have a contact form on our website, which you can use to contact us. The data you enter in the input mask will be transmitted to us and stored.

• Name
• First name
• Email address
• Call-back number

The data will be used exclusively to answer your questions. As far as we do not use a third party provider mentioned below to provide the contact function, the data will not be passed on to third parties. We also record your IP address and the time of sending.

The processing of the aforementioned personal data serves solely to process your enquiries. The processing of further personal data, which is collected through the use of the contact form provided on our website, serves to prevent misuse and to ensure the security of our information technology systems.

This is also our legitimate interest in processing your personal data. If you have given us your consent to do so, the legal basis for the processing of this data is Art. 6 paragraph 1 sub-paragraph a) GDPR. Otherwise, the legal basis for the processing of this data is Art. 6 paragraph 1 sub-paragraph f) GDPR, especially in the event that you transmit the data to us by sending an email. Insofar as you wish to work towards the conclusion of a contract through your email, Art. 6 paragraph 1 sub-paragraph b) GDPR constitutes an additional legal basis.

Subject to statutory retention periods, the data will be deleted as soon as we have finally processed your request. If you contact us by email, you can object to the storage of your personal data at any time. We would like to point out that in this case your request cannot be processed further. You can declare the revocation or the objection by sending an email to our email address given in the legal notice.