Privacy Policy

privacy statement

TABLE OF CONTENTS

1. BASIC INFORMATION ON THE HANDLING OF PERSONAL DATA2 . PASSING ON PERSONAL DATA FOR ORDER PROCESSING3 . NEWSLETTER4 . COOKIES5 . ADVERTISING AND CONVERSION COOKIES6 . USE OF SOCIAL-PLUGINS7 . YOUR RIGHTS AND CONTACT8 . DATA SECURITY

Responsible: Lanybook GmbH,

On the Sand 22, D-67547 Worms, Germany

email: shop@lanybook.com

Phone: +49 (0)62 41 / 30561 - 0

Fax: +49 (0) 62 41 / 30561 - 20

The operational data security representative of Lanybook GmbH is attainable under the address mentioned above, to Mrs. Quehl, and/or under datenschutz@lanybook.com

We are pleased that you are visiting our website and thank you for your interest in our company and our products and services. The protection of your privacy when using our website is important to us. Therefore, please take note of the following information:

1. BASIC INFORMATION ON THE HANDLING OF PERSONAL DATA

When you visit our website www.lanybook.com, the browser used on your terminal device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information will be collected without your intervention and stored until automated deletion:

- Anonymized IP address of the requesting computer,

- Date and time of access,

- Name and URL of the retrieved file,

- Website from which access is made (referrer URL),

- the browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

Subscribe to DeepL Pro to edit this document. Visit www.DeepL.com/Pro for more information.

The data mentioned will be processed by us for the following purposes:

- Ensure a smooth connection of the website,

- To ensure a comfortable use of our website,

- Evaluation of system safety and stability as well as

- for other administrative purposes.

The legal basis for data processing is Art. 6 Para. 1 S. 1 lit. f DSGVO. Our justified interest follows from the purposes listed above for the collection of data. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person. In addition, we use cookies and analysis services when visiting our website. You will find more detailed information on this under points 4 and 5 of this data protection declaration.

If you have any questions, we offer you the possibility to contact us via a form provided on the website. It is necessary to provide a valid e-mail address so that we know who sent the request and can answer it. Further information can be provided voluntarily. Data processing for the purpose of contacting us is carried out in accordance with Art. 6 Para. 1 S. 1 lit. a DSGVO on the basis of your voluntary consent. The personal data collected by us for the use of the contact form will be automatically deleted after the completion of your request.

2. PASSING ON PERSONAL DATA FOR ORDER PROCESSING

Your personal data will not be transferred to third parties for purposes other than those listed below. We will only pass on your personal data to third parties if:

- you have given your express consent to this in accordance with Art. 6 para. 1 sentence 1 lit. a DSGVO,

- the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f DSGVO is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,

- in the event that there is a legal obligation to pass on data pursuant to Art. 6 para. 1 sentence 1 lit. c DSGVO, and

- this is legally permissible and required for the execution of contractual relationships with you pursuant to Art. 6 para. 1 sentence 1 lit. b DSGVO.

2.1 The personal data collected by us will be passed on to the transport company commissioned with the delivery within the framework of the execution of the contract, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution within the framework of the processing of payments. 2.2 When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" via PayPal, we pass on your payment details to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal") as part of the payment process. PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" via PayPal. PayPal uses the result of the credit assessment in relation to the statistical probability of nonpayment for the purpose of deciding whether to provide the respective payment method. The creditworthiness information can contain probability values (score values). As far as score values flow into the result of the creditworthiness information, these have their basis in a scientifically recognized mathematical-statistical procedure. Address data, among other things, is included in

the calculation of the score values. For further data protection information, including information on the credit agencies used, please refer to PayPal's data protection declaration: https: //www.paypal.com/de/webapps/mpp/ua/privacy-full2.3 The person responsible for processing has the component secupay.Rechnungskauf der secupay AG (hereinafter referred to as "secupay"), Goethestr. 6, 01896 Pulsnitz. secupay is a payment institution within the meaning of the German Payment Services Supervision Act (Zahlungsdiensteaufsichtsgesetz - ZAG) and is registered with the Federal Financial Supervisory Authority (Bundesanstalt für Finanzdienstleistungsaufsicht - BaFin), Graurheindorfer Str. 108, 53117 Bonn (register number: 126737) and enables cashless payment of products and services on the Internet.

secupay represents a procedure by which the purchase price claim is assigned to secupay. This enables a retailer to deliver goods, services or downloads to the customer immediately after the order has been placed.

If you, as the person concerned, select "Purchase on account" as the payment option in our online shop during the ordering process, data from you will be automatically transmitted to secupay. With a selection of this payment option, you consent to the transfer of personal data required for payment processing.

In the case of purchase processing via secupay, the buyer transmits the means of payment data to secupay. secupay then carries out a technical check of the payment default risk. The execution of the financial transaction is then automatically notified to the online merchant.

The personal data exchanged with secupay is first name, surname, address, email address, IP address, telephone number or other data required for payment processing. The purpose of data transmission is to process payments and prevent fraud. The person responsible for the processing will transfer other personal data to secupay even if there is a justified interest in the transfer. The personal data exchanged between secupay and the data controller may be transferred by secupay to credit agencies. The purpose of this transmission is to check identity and creditworthiness.

secupay may pass on the personal data to affiliated companies and service providers or subcontractors if this is necessary to fulfil the contractual obligations or if the data is to be processed by order.

The person concerned has the opportunity to revoke his/her consent to secupay's handling of personal data at any time. A revocation does not affect personal data which must be processed, used or transmitted for (contractual) payment processing.

secupay's current data protection regulations can be found at https://www.secupay.com/de/datenschutz .

3RD NEWSLETTER

When you subscribe to our newsletter, we store your e-mail address for advertising and market research purposes until you unsubscribe from the newsletter. Unsubscribing from the newsletter is possible at any time and can be done via a link provided for this purpose in the newsletter.

4. COOKIES

4.1 In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your mobile device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies to recognize your browser on your next visit (persistent cookies). These cookies are used to greet you with your user name and save you from having to

re-enter your password or fill out forms with your data for subsequent orders. Our partner companies are not permitted to collect, process or use personal data via cookies on our website. You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or whether to exclude the acceptance of cookies in certain cases or in general. If cookies are not accepted, the functionality of our website may be restricted.

4.2 This website uses Google Analytics, a web analysis service of Google Inc. ('Google') and Google Certified Dealers, a buyer protection program of Google Inc. ('Google'). Google Analytics and Google Certified Dealers use 'cookies', which are text files placed on your computer, to help the website analyze how users use the site and to help the Google Certified Dealer program logo display. The information generated by the cookie about your use of this website will generally be transmitted to and stored by Google on servers in the United States. However, if IP anonymization is enabled on this website, Google will previously truncate your IP address within member states of the European Union or other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google. Without your express consent, the tracking tool will not be used to collect unsolicited personal information about you, to transmit such information to third parties and marketing platforms, or to link the information to your personal information. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) as well as Google from processing this data by downloading and installing the browser plug-in available under the following link: tools.google.com/dlpage/gaoptout

4.3 We use retargeting technologies (also called remarketing or re-targeting) for our Internet shop. This makes it possible to target those Internet users with advertising on the websites of our partners who are already interested in our shop or our products. It is known from studies that the insertion of personalized, interest-related advertising is more interesting for the Internet user than advertising that has no such personal reference. During retargeting, the advertising media are displayed on the basis of a cookie-based analysis of the previous user behaviour. Of course, no personal data is stored here either, and it goes without saying that the retargeting technology is used in compliance with the applicable statutory data protection regulations.

5. ADVERTISING AND CONVERSION COOKIES

Advertising and conversion cookies are used to make advertising more relevant to you and based on your interests - also on other websites outside our offer. This also prevents the same advertisements from being displayed to you again and again. With these cookies, we can also measure the effectiveness of our advertising campaigns on the basis of anonymous and pseudonymous usage profiles and track how users interact with our advertising media or which actions users have carried out after interacting with the respective advertising media (so-called "conversion"):

 Google Adwords Conversion Tracking: Within the scope of using the Google AdWords service, so-called conversion tracking is used. A "conversion" is a certain action of the user (e.g. ordering a newsletter, registering on the website), e.g. when you click on an ad placed by us (on Google itself, so-called "Google ads" or on other websites within the Google display network). The information collected using the Conversion cookie is used to generate conversion statistics for AdWords customers. You can opt-out of interest-based ads on Google and interest-based Google ads on the web (within the Google display network) in your browser by selecting the "Opt-out" button at http://www.aboutads.info/choices/ or opt-out at www.google.de/settings/ads You can find further information on your settings in this regard and data protection at Google at https://www.google.de/intl/de/policies/privacy/?fg=1. and at http://www.google.com/privacy/ads/.

 Facebook Retargeting: Our website uses the retargeting technology "Website Custom Audience" of the social network Facebook and enables us to display relevant advertisements and offers to our website visitors who are already interested in our website and are Facebook members, also on Facebook via the Facebook Ad Network. You can find more information on data protection and the relevant setting options at https://www.facebook.com/settings/?tab=ads and at https://www.facebook.com/about/privacy. You may opt out of future use of the Facebook Custom Audiences website via https://www.facebook.com/settings/?tab=ads and http://www.youronlinechoices.com/de/praferenzmanagement/ .  Linkedin Conversion Tracking: We use the analysis and conversion tracking technology of the Linkedin platform on our website. LinkedIn also provides us with aggregated and anonymous reports of advertising activity and information about how you interact with our website. Further information on data protection at LinkedIn can be found here: https://www.linkedin.com/legal/privacy-policy#choices-oblig. You may opt-out of LinkedIn's analysis of your usage patterns and of the display of interest-based recommendations by clicking the "Opt-out" button (for LinkedIn members) or the "Opt-out" button (for other users) below: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.  Outbrain: Our website uses the technology of the provider Outbrain. Through Outbrain, you will be referred to further content within our website that may also be of interest to you and to websites of third parties. The further reading recommendations integrated by Outbrain, e.g. below an article, are determined on the basis of the previous content read by the user on a purely pseudonymous basis. For more information about Outbrain's privacy policy, please visit http://www.outbrain.com/de/legal/privacy. You may at any time opt-out of tracking to display interest-based recommendations by clicking on the "Opt-out" button under Outbrain's Privacy Policy, available at http://www.outbrain.com/de/legal/privacy.

6. USE OF SOCIAL PLUGINS

6.1 So-called social plug-ins ("plug-ins") of the social network Facebook, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"), are used on our website. The plugins are marked with a Facebook logo or the addition "Social Plug-in from Facebook" or "Facebook Social Plugin". You can find an overview of the Facebook plugins and their appearance here: https://developers.facebook.com/docs/plugins If you call up a page on our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted directly from Facebook to your browser and integrated into the page. Through this integration, Facebook receives the information that your browser has called the corresponding page of our website, even if you do not have a Facebook profile or are not logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there. If you are logged in to Facebook, Facebook can immediately assign your visit to our website to your Facebook profile. If you interact with the plugins, for example by pressing the "Like" button or commenting, this information is also sent directly to a Facebook server and stored there. The information will also be published to your Facebook profile and displayed to your Facebook friends. If you do not want Facebook to associate the data collected via our website directly with your Facebook profile, you must log out of Facebook before visiting our website. You can also completely prevent the loading of Facebook plugins with add-ons for your browser, e.g. with the "Facebook Blocker" (http://webgraph.com/resources/facebookblocker/).

6.2 Our website uses Instagram social plugins ("Plugins"), operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram"). The plugins are marked with an Instagram logo, for example in the form of an "Instagram camera". An overview of the Instagram plugins and their appearance can be found here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges

When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to Instagram's servers. The content of the plugin is transmitted by Instagram directly to your browser and integrated into the page. This integration provides Instagram with the information that your browser has accessed the appropriate page on our website, even if you do not have an Instagram profile or are not currently logged into Instagram. This information

(including your IP address) is transferred directly from your browser to an Instagram server in the USA and stored there. If you are logged into Instagram, Instagram can immediately associate your visit to our website with your Instagram account. If you interact with the plugins, for example by pressing the "Instagram" button, this information is also transmitted directly to a server of Instagram and stored there. The information will also be published to your Instagram account and displayed to your contacts. The purpose and scope of the data collection and the further processing and use of the data by Instagram and your related rights and privacy settings are described in Instagram's privacy policy:

https://help.instagram.com/155833707900388/

If you do not want Instagram to associate the data collected through our website directly with your Instagram account, you must log out of Instagram before visiting our website. You can also completely prevent the loading of Instagram plugins with add-ons for your browser, e.g. with the script blocker "NoScript" (http://noscript.net/).

6.3 So-called Social Plugins ("Plugins") of the social network Pinterest, which is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA ("Pinterest"), are used on our website. The plugins can be recognized, for example, by buttons with the character "Pint it" on a white or red background. An overview of the Pinterest plugins and their appearance can be found here:

https://developers.pinterest.com/docs/getting-started/introduction/

If you call up a page of our website which contains such a plugin, your browser establishes a direct connection to the servers of Pinterest. The content of the plugin is transmitted by Pinterest directly to your browser and integrated into the page. By the integration Pinterest receives the information that your browser has called the corresponding page of our website, even if you do not have a profile at Pinterest or are not logged in at Pinterest. This information (including your IP address) is transmitted directly from your browser to a Pinterest server in the USA and stored there. If you are logged in at Pinterest, Pinterest can assign the visit of our website directly to your Pinterest profile. If you interact with the plugins, for example by pressing the "Pin it" button, the corresponding information is also transmitted directly to a Pinterest server and stored there. The information is also published on Pinterest and displayed to your contacts there. The purpose and scope of the data collection and the further processing and use of the data by Pinterest as well as your rights in this regard and setting options to protect your privacy can be found in Pinterest's data protection information:

https://about.pinterest.com/de/privacy-policy

If you do not want Pinterest to associate the data collected through our website directly with your profile on Pinterest, you must log out of Pinterest before visiting our website. You can also completely prevent the loading of the Pinterest plugins with add-ons for your browser, e.g. with the script blocker "NoScript" (http://noscript.net/).

7. YOUR RIGHTS AND HOW TO CONTACT YOU

You have a right to free information about your stored data and, if necessary, a right to correction, blocking or deletion of this data. If you have any further questions regarding the collection, processing or use of your personal data, please contact us. The same applies to information, blocking, deletion and correction requests regarding your personal data and for revocations of consents granted. You will find the contact address in our imprint.

8. DATA SECURITY

We use the most common SSL (Secure Socket Layer) method in connection with the highest level of encryption supported by your browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed representation of the key or lock symbol in the lower status bar of your browser.

We also use suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.