We, Ambient-TV Sales & Services GmbH, are pleased that you are visiting our website. The protection of your personal data is our top priority – both when providing our services and when accessing our website. This data protection information applies to the processing of so-called personal data. This is information that can be used to uniquely identify a person, either directly or by linking it to other data, such as name or email address. In the following, we list the data processing that takes place on our website and present the details of the respective processing. In each case, this includes information on the categories of data used, the purposes of the data processing, the legal basis and the storage period (sections 2 et seq.). If we pass on your personal data to external service providers, these are usually so-called processors. They are contractually obliged to process the data exclusively to the extent specified by us and resulting from this data protection notice.

In principle, the processing of your personal data takes place at our headquarters, at a location of another company of the Ströer Group in Germany or an external service provider within the European Union. This means that a very high standard of data protection applies to the use of your data, which is specified by the European General Data Protection Regulation ("GDPR"). As we use providers outside the European Union, e.g. to create statistical analyses of our website visits, it is possible that a lower standard of data protection has been implemented in the recipient country and, for example, that no comparably effective legal remedies are available against access to the data by state authorities. In cases of transfer to third countries, we would also like to draw your attention to the respective data protection guarantees (Art. 44 et seq. GDPR), which the providers are obliged to observe, in particular the inclusion of the so-called EU standard data protection clauses in the contractual relationship with the recipient. Insofar as we use providers in the USA, data transfer to the USA takes place on the basis of the new adequacy decision of the European Commission on the EU-US Privacy Framework, provided that the US company concerned has joined the EU-US Privacy Framework and has a corresponding certification. This certification confirms that the U.S. company will comply with the necessary data protection regulations and practices. If the service providers used do not have certification or have not yet been certified, the data exchange during the transition period will take place on the basis of the standard contractual clauses.
If we process personal data in connection with your visit to our website for other purposes that are not mentioned in this data protection notice, we will point this out separately at the appropriate point on our page and ask for additional consent if this further processing is not permitted by law on another basis (e.g. a contractual relationship with us). There is no legal, contractual or other obligation to provide us with personal data when you access the website. Please note, however, that certain data processing is technically necessary (e.g. collection of log data, section 2), may be necessary for the conclusion and execution of a contract or may require consent in order to be able to use a certain function of our website (e.g. our contact form, section 3). At the end of this data protection notice, you will find an overview of your legal rights to data protection, which result from Articles 12 et seq. of the GDPR. This includes, in particular, the rights to information, correction and deletion as well as the right to object to data processing.

  1. Responsible Data Protection Officer If you have any questions about data protection or would like to exercise your legal rights, you can contact us directly as the responsible body or our data protection officer at any time.

You can reach us at the following contact details: Ambient-TV Sales & Services GmbH Oberstraße 88 20149 Hamburg

Phone: +49 (0) 40 / 22 616 25 – 10 Mail: SMD-datenschutz@stroeer.de

As a responsible body within the meaning of data protection law, it is our responsibility to process personal data only to the extent permitted by law and to secure the processing with appropriate protective measures.

You can contact our data protection officer at:

Dr. Georg F. Schröder, LL.M. legal data Schröder Rechtsanwaltsgesellschaft mbH Prannerstraße 1 80333 München Phone: +49 89. 954 597 52 E-Mail: datenschutz(at)legaldata.law

  2. Processing of log data when accessing a page When you visit our website, your browser sends certain technical data to us in order to enable your device to connect to our server and to access our website. We process the following categories of personal data: • IP-Adress (this is anonymized immediately after collection), • Date and time of page access, • Accessed URLs of our subpages, • Referral URL (URL of the page from which you came to our site), • http status code (e.g. successful page retrieval), • language settings in the browser, • Operating system, browser type, model of the device. This data is only kept for the duration of the session in order to be able to recognize it for the consistent presentation of our site while it is still active and to ward off attacks on our website. For verification purposes (e.g. for asserting or defending against legal claims), this data will also be stored for a period of up to 7 days after the end of the session. The legal basis for data processing is our legitimate interest in the publication of a website of our company (Art. 6 para. 1 lit. f) GDPR). Since the transmission of the above-mentioned data categories is technically necessary and cannot be prevented, users have no right to object in this respect.

  3. Contact Forms We offer a separate form on our website for quick contact with us. In doing so, we process the data you provide in the form, including a free text (content of the message or request). If certain categories of data are not strictly necessary for the processing of your request, but are helpful for contacting you by alternative means (e.g. by telephone), we mark such fields as "voluntary". The legal basis for data processing is your consent (Art. 6(1)(a) GDPR). If we need the data provided by you for the preparation or fulfilment of a contract with you, the legal basis is Art. 6 (1) (b) GDPR (Sections 5 and 6). If the data you provide is not required for the preparation or fulfilment of a contractual relationship with you, we will delete it immediately after completion of the processing of your request.

  ** 4. Contact by e-mail** You can also contact us by e-mail at any time. If you send us a message to an e-mail address provided on our website, the legal basis for the data processing is our legitimate interest in processing your enquiry (Art. 6 (1) (f) GDPR). Please note that e-mails are usually not sent fully encrypted. This means that – despite extensive technical security precautions – there is a risk of unauthorized access to the e-mail content by third parties, e.g. during transmission. If your e-mail is not required for the preparation or fulfilment of a contractual relationship with you, we will delete it immediately after the processing of your request has been completed.

  5. Contract If we require the personal data provided by you for the performance of a contractual relationship concluded between you and us, the legal basis for the data processing is Art. 6 (1) (b) GDPR. The same applies to such personal data that you provide to us in preparation for the conclusion of the contract. In addition to your name and contact details, this may include financial information such as bank We integrate the following analysis and tracking tools as well as plugins into our website:details, tax number or VAT ID, which you send us, e.g. to prepare a contract via our contact form (section 3). We store this data for the duration of the contractual relationship and until the expiry of the statutory retention periods.

  6. Applications In this section, we would like to inform you about the extent to which we process your personal data when you contact us via our careers page and submit an application form there.

We use SmartRecruiters GmbH as an external service provider. 118, 10963 Berlin (hereinafter referred to as "SmartRecruiters"), operates an e-recruiting system (hereinafter referred to as "Career Portal") on which we can place job advertisements and receive and manage applications. The Ströer career page is the central platform for our applicant management within the Ströer Group. The career page can be accessed at the following link: https://karriere.stroeer.com/de/

When you use our career portal, your personal data is recorded directly in the e-recruiting system. Even in the case of a postal or e-mail application (section 4), your data may be transferred to the e-recruiting system of our career portal.
All relevant information on data processing in the context of an application can be found under the following link https://karriere.stroeer.com/de/datenschutzhinweise.

  7. Cookies We use cookies on our website. Cookies are small text files that are stored on your device and contain personal data, e.g. a cookie ID or data on surfing behavior on our site. Cookies make it possible to recognise visitors to our site, both in the course of the same session and across sessions. This is primarily to improve the user-friendliness of our site and to display interest-based advertisements. The types of cookies we use are described in detail in this section. An overview of the third-party tools and plugins used on our site that can set cookies can be found under Section 8. Some cookies are set directly by us and transmit personal data exclusively to us (so-called first-party cookies), e.g. to store your user preferences on our site. Otherwise, cookies are mainly set that come from third-party providers and can also transmit data to them (so-called third-party cookies). Cookies cannot contain viruses and cannot cause any other damage to your device. Third-party cookies may be set in particular by third-party tools that we integrate on our site, e.g. analysis and tracking tools or plugins such as video players or social media buttons. You can manage cookies on our site via our so-called consent tool (cookie banner). This is displayed on the first visit to our site and can be called up again at any time in the further course. In the consent tool, only those cookies that are absolutely necessary for the operation of the site are preset as active. These cookies cannot be opted out. All other cookies are assigned to the categories "Preferences", "Statistics" and "Marketing" and can be accepted either individually or by category. These cookies are not pre-selected and are only set after explicit user consent. In some cases, the duration of the cookies is only the same as that of the session, i.e. such cookies are deleted when the browser or our website is closed (so-called sessions). In addition, cookies are also set whose duration exceeds the duration of the session (so-called permanent cookies). These cookies can also be used to recognise your browser during a new session. The duration of the respective cookies is specified in our consent tool. In addition to not giving your consent via our consent tool, you can also prevent the setting of cookies by configuring your browser in such a way that it prevents the website visit from being tracked with the help of cookies (so-called do-not-track setting) or generally does not accept cookies. For more information, please refer to your browser's help function. Categories of cookies on our website We divide cookies into the following categories in our consent tool: Statistics: Statistics cookies allow us to track how users use our website. For this purpose, we use third-party tools, which, for example, record the duration of the visit to the subpages or the location and language settings of the users and prepare them for us in statistical form. This serves to continuously improve the user-friendliness of our site. The legal basis for data processing is your consent (Art. 6 para. 1 lit. a) GDPR

Revocation of your consent, objection to advertising You can withdraw your consent to the use of cookies at any time by calling up our consent tool again and deselecting individual tools or tool categories there. In addition, you can also delete the cookies set on your device at any time in the settings of your browser. If an advertising objection is stored in separate cookies, it may be necessary to set these so-called opt-out cookies again. Please note that this procedure only applies to the respective device on which you manage your consent or delete the cookies that have been set. If you access our website on different devices, these settings will not be automatically transferred to each device and may need to be made manually on all devices.

Cookies set on our website We use the following cookies on our site. Name Cookie Usage Storage period Elfsight Google-Bewertungen

 

8. Tools and plugins used on our site

Elfsight Widget – Google Customer Reviews For the purpose of displaying and evaluating the views of our Google reviews, we use the Elfsight widget of the service provider SP Iusupov A.A., 0015, Armenia, Yerevan, Paronyana str., 19/3, 201 (hereinafter referred to as Elfsight). To access the widget, IP address, device and browser information, among other things, are transmitted to Elfsight. Elfsight processes the aforementioned information anonymously for a period of up to 7 days for the purpose of ensuring the trouble-free provision of the service as well as for the prevention of abuse and fraud. We have no influence on this subsequent data processing. Google Analytics In the context of the display of Google customer reviews, the analysis and statistics tool "Google Analytics" of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel.: +353 1 543 1000, Fax: +353 1 686 5660, E-Mail: support-deutschland(at)google.com ("Google") is used. With the help of Google Analytics, the use of our website can be evaluated in statistical form. This allows us to understand how users arrive at our website, which content and areas are of particular interest to them and what actions they take on our site. In particular, Google collects the following categories of data: • Abbreviated (anonymized) IP address, • the website accessed, • the website from which the user accessed the page (so-called referral URL) and the type of referrer (e.g. search engine, social network, link), • Search terms used by users to find our website, • the subpages that are opened from the page being accessed, • the duration of visits to the website, • the number of times the website is accessed, • Information about the target group (so-called persona), • Location data (geographic region, country, city), • Language • Browser, operating system, device, screen resolution,

predefined actions (conversions), e.g. clicking on advertising banners, downloading information material, Click path on the page, e.g. entry and exit points, order in which page content is accessed by the user. Google deletes the user data collected with the help of Google Analytics after 14 months at the latest. Google is located and/or uses servers in countries outside the EU and the EEA for which the European Commission has determined an adequate level of data protection by decision. Service providers from the USA, such as Google LLC, are usually certified under the EU-U.S. Data Privacy Framework (DPF). For more information, click here. In addition, on the basis of so-called EU standard data protection clauses, Google contractually undertakes to ensure that the recipients comply with a data protection standard that essentially corresponds to the European Economic Area when transferring personal data from the European Economic Area (e.g. in particular to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Please note, however, that we cannot ensure that Google will be able to comply with these contractual obligations in every case.

In addition to making the appropriate settings in your browser, you can also prevent the collection of data by Google Analytics cookies by using the browser plugin provided by Google for this purpose: https://tools.google.com/dlpage/gaoptout?hl=de For more information, please refer to Google's privacy policy at: https://policies.google.com/privacy?hl=deRechtsgrundlage The legal basis for data processing is your consent (Art. 6 (1) (a) GDPR) as well as our legitimate interest in accordance with Art. 6 (1) (f) GDPR in an informative presentation of reviews and references about the quality of our company services. Further information can be found in Elfsight's privacy policy: https://elfsight.com/privacy-policy/.

  9. Other categories of data The offer on our website and in our social media presences is not designed to process special categories of personal data within the meaning of Art. 9 GDPR, e.g. information on health, origin or religion. As a rule, we therefore do not process such special categories of data unless they are made available to us on our own initiative, e.g. in a contact form (Art. 9 para. 2 lit. a) GDPR).

  10. Other recipients If we use external service providers who come into contact with the personal data provided to us, they usually act as so-called processors for us. This means that we conclude a contract with them for order processing in accordance with Art. 28 GDPR, on the basis of which they are obliged to use the data exclusively in accordance with our specifications. We carefully select our service providers and commit them to confidentiality. We may use external service providers in the areas of IT (hosting, cloud services), customer administration (so-called customer relationship management systems) and marketing (mailing tools, analysis and tracking tools on our website). Insofar as personal data is required for the preparation or conduct of a legal dispute or for action against legal violations, it may also be processed to the extent necessary for this purpose (e.g. disclosure to lawyers). In this case, the legal basis for data processing is the pursuit of our legitimate interest in legal action (§ 24 para. 1 no. 2 BDSG, Art. 6 para. 1 lit. f) GDPR). In addition, personal data may also be transmitted to competent state authorities (e.g. for the purpose of criminal prosecution) on the basis of a legal obligation, an enforceable official order or a court decision (Art. 6 para. 1 lit. c) GDPR).

  11. Storage period Depending on the legal basis of the processing, we will retain your personal data for the following periods: • Consent (Art. 6 para. 1 lit. a) GDPR): For the duration of the existence of your consent, i.e. until the purpose for which you have consented has been fully fulfilled (e.g. for the duration of a cookie, section 10), or until you withdraw your consent. We store data that we collect for the purpose of personalized advertising for a maximum of 12 months from the time we last contact you.Vorbereitung oder Durchführung eines Vertrags (Art. 6 Abs. 1 lit. b) DS-GVO): Für die Dauer des Vertragsverhältnisses sowie der einschlägigen gesetzlichen Aufbewahrungspflichten, welche bis zu 10 Jahre betragen können. • • Legal obligation (Art. 6 para. 1 lit. c) GDPR): For the duration of the legal obligation, e.g. until the fulfilment of an order by the law enforcement authorities. • Art. 6 (1) (f) GDPR: For the duration of our legitimate interests (e.g. until your enquiry has been fully processed) or until you object to data processing. Statutory retention obligations may arise primarily from commercial law (Commercial Code) and tax law (Tax Code) and may amount to up to 10 years from the end of the year in which the data was collected (§ 257 HGB, § 147 AO). If we retain your data exclusively for the fulfilment of statutory retention obligations, we will block it for any other use and delete the data immediately after the expiry of the retention periods. If you revoke your consent to receive advertising or object to direct advertising in general, we will block your data for any advertising use and store your name, address and, if applicable, your personal data. Your e-mail address will be included in the corresponding blacklists, which we take into account in our advertising activities. This ensures that you do not receive any unwanted advertising.

  12. Your legal rights Right of access (Art. 15 GDPR): You have the right to access your personal data. This includes, first of all, information about whether we are processing your personal data. If this is the case, you have the right to information about the processed data and, in addition, about: a) the purposes of the processing, b) the categories of data processed, c) the recipients of the data, d) the applicable data protection guarantees in the event of a transfer of the data to recipients outside the European Union, e) the storage period, f) your legal rights to data protection, g) the origin of the data and h) the existence of automated decision-making. In addition, you have the right to be provided with a copy of your personal data, provided that this does not adversely affect the rights of third parties.

  Right to rectification (Art. 16 GDPR): You have the right to rectification if the processed data concerning you is incorrect. If incomplete data is processed, you have the right to have it completed if this is necessary to achieve the purpose of the processing.

  Right to erasure (Art. 17 GDPR): You have the right to have your personal data erased if: a) they are no longer necessary for the purposes of their processing, b) you withdraw your consent to the processing and there is no other legal basis for the processing, c) you object to the processing and there are no overriding legitimate grounds for further processing, d) you object to the processing for the purpose of direct marketing, e) the personal data has been unlawfully processed in the past, f) we are legally obliged to erase it, or g) the personal data of minors is processed in the course of an offer that is directly aimed at children. If we have made your personal data public and are obliged to delete it, we will also inform the other recipients that you have exercised your right to erasure. In particular, there is no right to erasure if the processing of the data is necessary for the fulfilment of a legal obligation or for the exercise or defence of legal claims.

  Right to restriction of processing (Art. 18 GDPR): You have the right to restrict the processing of your data a) for the period of the audit, if you contest the accuracy of the data, b) the processing was carried out without a lawful basis, but you do not want the deletion but a restriction of the processing, c) we no longer need your data for the original purposes, but you need it to exercise or defend legal claims, or d) for the period of the review, if you have objected to the processing and it has not yet been established whether your legitimate grounds outweigh our legitimate interests in the processing. In the event of a restriction of processing, we may only process your data in addition to the purposes set out in this paragraph if you i) separately consent to this, ii) the processing ii) for the exercise or defence of legal claims, or iii) for the protection of the rights of another person, or iv) the processing is necessary for an important public interest.

  Right to data portability (Art. 20 GDPR): You have the right to receive the personal data about you that you have provided to us. The data must be provided to you in a structured, commonly used and machine-readable format. If you have provided us with your data on the basis of consent or a contract and your data is processed automatically, you can easily transmit this data yourself to another controller or assert your claim for the data to be transmitted by us to the other controller. Exercising the right to data portability does not preclude exercising the right to erasure. The right to data portability does not apply to such processing that is necessary for the performance of a task carried out in the public interest or in the exercise of public powers.

  Right to object (Art. 21 GDPR): You have the right to object to the processing of your data on grounds relating to your particular situation, if the processing is necessary on the basis of our legitimate interests (Art. 6(1)(f) GDPR) or for the performance of a task carried out in the public interest or in the exercise of official powers (Art. 6(1)(e) GDPR).This also applies to any profiling. After declaring your objection, we will no longer process your personal data, unless we can demonstrate compelling and overriding reasons for further processing, or the processing serves to exercise or defend legal claims. In the case of direct marketing, you may at any time without further notice object to the processing for such purposes, including for the purpose of profiling.

  Right to withdraw consent (Art. 7 para. 3 GDPR): You can revoke your consent under data protection law (Art. 6 para. 1 lit. a) GDPR), e.g. with regard to the sending of a newsletter, at any time for the future. This means that we will cease the relevant data processing immediately upon receipt of your revocation and any data processing carried out on the basis of consent prior to your revocation will remain lawful (for the past). You do not have to give any reasons for your revocation and can send them to us via any of the contact methods provided on our website. In addition, there are separate simplified revocation options, e.g. via unsubscribe link in newsletters. If you are of the opinion that data processing is not carried out in accordance with data protection regulations, in particular the General Data Protection Regulation and the Federal Data Protection Act, you can file a complaint with a data protection supervisory authority. In particular, you can contact the supervisory authority at your place of residence, at your place of work or at the place of the suspected data protection violation. This does not preclude any further legal remedies, e.g. before the courts.

  13. Updates to this Privacy Notice We may update this privacy policy from time to time, e.g. to integrate new online services from us, or to adapt the statement to a new legal situation. If new processing purposes are added and such data is affected by you, which you have provided to us before the respective update of this statement, we will obtain separate consent from you with regard to the new processing if this is required by law, or inform you, e.g. by e-mail, of such material changes to this data protection notice.

  Stand: Oktober 2023