Data privacy policy of Pacojet International AG

Last update: October 2022

The proper handling of your personal data is of particular concern to us, Pacojet International AG, Bundesstrasse 7, 6300 Zug, Switzerland, responsible for the data processing mentioned below, as well as to our subsidiaries in Switzerland and Germany. We use your personal data in compliance with the applicable data protection regulations in Switzerland and the European Economic Area. In the following, we explain what personal data ist collected by us, how this data is used by us and what rights you have with regard to the use of your data.

If you have questions about data protection with Pacojet or if you wish to exercise your data protection rights, please contact our data protection officer by sending an e-mail to dataprotection@pacojet.com. You can also contact us by mail at the following address:

Pacojet International AG

Datenschutz

Bundesstrasse 7

6300 Zug Switzerland

As a matter of principle, we only process personal data insofar as this is necessary for the provision of services and a functioning website and app. The processing of personal data only takes places in the presence of a legal permission.

Irrespective of how you would like to contact us, be it in person, by phone, electronically, via our contact form or by placing an order in our webshop, we always proceed in the same way in the interest of personal service commitment. We will inform you in advance about our data protection provisions and – where necessary – obtain your consent before we start processing your offer, request or order. For this purpose, we store the following personal data in our system: Form of address; Last name and first name; Company name; Address (street, house number, postal code, city, country); if necessary, further contact data (telephone number, e-mail adress). In case of requests for technical services (e.g. repairs, warranty work, etc.), we store the following data in our system, in addition to the personal data mentioned above: The serial numbers as well as the user data of your Pacojet product. We store your data until your request has been processed, unless legal retention obligations require storage beyond this.

Every time our website is accessed, our system automatically records information from the computer system which accesses it, logging the following data: Information about the browser type and version used; Operating system and internet service provider of the user; The IP address of the user; Websites from which the user´s system reached our website; Websites that are called up by the user´s system via our website. This information is stored to ensure the functionality of our website. In addition, we use the data to optimize the website and to ensure the security of our systems. The storage of this data is mandatory for the operation of the website. The collected data is deleted after seven days at the latest. Storage beyond this period is possible, but in this case the IP addresses are anonymized so that an assignment is no longer possible.

If you subscribe to the free Pacojet newsletter, we collect personal data in order to confirm your consent to the newsletter subscription during the registration process and to subsequently send you your personal newsletter periodically. For this purpose, we store the following personal data in our system: Last name and first name; E-Mail-Address; Language; Country. We use the double-opt-in procedure to ensure that the newsletter is sent out in a consensual manner. In the course of this, the potential recipient is added to a distribution list. Subsequently, you will receive a confimation e-mail to confirm the registration in a legally secure manner. This information is stored by us for verification purposes. Only if the confirmation is made within 7 days, your personal data will be included in the distribution list. We use this data exclusively for sending the requested information and offers. You can revoke your consent to the storage of the data, the e-mail-address and their use for sending the newsletter at any time via the unsubscribe link. When sending the newsletter, we work together with the Sendinblue GmbH, to which your data is transmitted exclusively for the purpose of sending the newsletter. It is forbidden for Sendinblue to pass on your data to third parties or to use it for purposes other than sending our newsletter. The data privacy policy from Sendinblue is available under the following link: https://nl2go-prod-api-account.s3.eu-central-1.amazonaws.com/app_files/de/N2G_DSE.pdf. There is a data processing agreement in place with Sendinblue. Further informations: https://de.sendinblue.com/informationen-newsletter-empfaenger/?rtype=n2go.

On our website you can register as a costumer by providing personal data. For this purpose, we store the following personal data in our system and on our servers: Mandatory fields for the client portal of the Pacojet website:

• Form of address;

• Last name and first name,

• Company name;

• Address (street, house number, postal code, city, country);

• further contact data (telephone number, e-mail adress).

Voluntary data for the customer portal of the Pacojet website and the Pacojet app: Serial number and model-name of your Pacojet product.

We use cookies and other technologies on our website. Cookies are small text files that are assigned and stored on your hard drive to the browser you are using by a characteristic string and through which certain information flows to the entity that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer and therefore cannot cause any damage. They serve to make the internet offer as a whole more user-friendly and effective, i.e. more pleasant for you. Cookies can contain data that makes it possible to recognize the device used. In some cases, however, cookies only contain informations about certain settings that are not personally identifiable. However, cookies cannot directly identify a user. A distinction is made between session cookies, which are deleted as soon as you close your browser and permanent cookies, which are stored beyond the individual session. You can find more informations about the cookies we set in our consent management tool. There you can also make your individual settings. We set cookies that are absolutely necessary to navigate the website, use basic functions and ensure the security of the website; this is our legitimate interest. These cookies do not collect information about you for marketing purposes, nor do they store which websites you have visited. In addition, with your consent, we us technologies that are not absolutely necessary for the use of the website. You can obtain detailed information in the following and in our consent management tool. You can also make your individual settings there. In particular, we use Hotjar and Matomo as well as Google Maps: We use Hotjar to better understand the needs of our users and to optimize the offerings and experience on this website. Using Hotjar's technology, we get a better understanding of our users' experiences (e.g., how much time users spend on which pages, which links they click, what they like and dislike, etc.), and this helps us tailor our offerings to our users' feedback. Hotjar works with cookies and other technologies to collect data about our users' behavior and about their devices, in particular, device IP address (collected and stored only in anonymized form during your website use), screen size, device type (unique device identifiers), information about the browser used, location (country only), language preferred to view our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually prohibited from selling the data collected on our behalf. For more information, see the 'about Hotjar' section on Hotjar's help page. Using Matomo, we are able to collect and analyze data about how our website is used by website visitors. This allows us to find out, among other things, when which page views were made and from which region they came. We also collect various log files (e.g. IP address, referrer, browsers and operating systems used) and can measure whether our website visitors perform certain actions (e.g. clicks, purchases, etc.). The use of this analysis tool is based on Article 6(1)f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. If a corresponding consent is requested, the processing is carried out exclusively on the basis of Article 6(1)a GDPR and Sec. 25(1)1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time. We host Matomo exclusively on our own servers, so that all analysis data remains with us and is not passed on. In addition, we use the offer of Google Maps. This allows us to display interactive maps directly on the website and enables you to conveniently use the map function. The legal basis for the use of the maps is your consent. By visiting the website, Google receives the information that you have called up the corresponding sub-page of our website. In addition, the above-mentioned basic data such as IP address and timestamp are transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right. The information collected is stored on Google servers, including in the USA. For these cases, the provider has, according to its own information, imposed a standard on itself that corresponds to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws in the international transfer of data. We have also agreed so-called standard data protection clauses with Google, the purpose of which is to ensure compliance with an appropriate level of data protection in the third country. For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the provider's privacy policy. There you will also find further information about your rights in this regard and setting options for protecting your privacy: www.google.de/intl/de/policies/privacy. The service Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (Meta), enables us to determine target groups for advertisements on the Meta platforms Facebook and Instagram based on website visits and surfing behavior there. For more information about Meta's privacy policy and terms of use, please click here (link to https://www.facebook.com/legal/terms). We also use Google Ads, a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, to play out advertisements on Google and via the Google advertising network. To do this, we use information about browsing behavior to tailor ads to the user's interests. Further information on data protection and Google's terms of use can be found here (link to https://policies.google.com/terms?hl=de).

Specifically, the following cookies may be set when you visit our website:

Description	Function	Provider	Runtime
Session-	Sessions-Management	-	Session end
cookie_notice_accepted	Storage of cookie settings	-	1 month
pll_language	Storage of the current language setting	-	1 year
pk_id	Registration of a unique ID to generate statistical data about the visit of the website	Matomo	6 months
Pk_ref	Storage of the attribution information	Matomo	6 months
_pk_ses; pk_cvar; pk_hsr	Temporary cookies to store the data of the website visit	Matomo	30 minutes
Pk_testcookie	Created to check if the user's browser supports cookies	Matomo	Immediately
mtm_consent	Storage of cookie consent or refusal	Matomo	30 years
Mtm_cookie_consent	Storage of cookie consent	Matomo	30 years
Matomo_session_id	No user data is tracked	Matomo	14 days

In addition to the cases explicitly mentioned in this data protection declaration, your personal data will only be passed on without your express prior consent if this is permitted or required by law. Insofar as we cooperate with external processors, they are carefully selected by us and meet high standards of data protection and data security. They are bound to strict confidentiality and process data exclusively on our behalf and in accordance with our instructions. The legal basis for the cooperation with these processors are corresponding data processing agreements.

Personal data recorded in the course of data processing will be processed and used to fulfill obligations arising from agreements. This data, which is necessary for the fulfillment of services, may also be passed on to commissioned third parties, e. g. transport companies, banks, insurance companies and other service providers.

Together with our partners, we operate a worldwide network of service centers that are responsible for providing technical support, repairs and warranty work on our products. In the course of these services, we exchange information with our partners on a case-specific using secure data transmission channels in order to diagnose faults, clarify warranty claims and exchange expert knowledge. In this context, it is often necessary to exchange personal data as well as usage-specific data. For this purpose, we store and transmit the following personal data: Last name und first name; Company name; Address (street, house number, postal code, city, country); further contact data (telephone number, e-mail adress); Serialnumber and usage-data of the device. The responsible party for data processing in connection with the provision of support services is the respective country-specific office selected by you.

The data that we share within our group of companies is processed jointly for internal administrative purposes, including joint costumer support, to the extent necessary. In this respect, we have a legitimate interest in sharing the data for administrative purposes within the group, taking into account the requirements for international data transfer, if applicable.

We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

Subject to the respective legal requirements, you have a right to information regarding the personal data stored about you, a right to correction of incorrect data, to restriction of processing and/or deletion as well as right to data portability and a right of objection. To exercise your rights and for further questions about the use of your personal data, we are at your disposal. Please address your request, clearly identifying yourself, to the contact person named in section I. b) You have the right to withdraw your consent to the processing of personal data at any time. The withdrawal of this consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal. You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider that the processing of personal data concerning you is illegal. Automated decisions including profiling do not take place at our company. VI. Storage location and storage period of your personal data We store our data in each case on systems in countries in which we operate branches (Switzerland and Germany). Unless specifically stated, we store personal data only for as long as necessary to fulfill the purposes pursued or due to legal requirements, in particular legal retention obligations, or, in the case of consent-based data processing, until you withdraw your consent.

This privacy policy applies exclusively to Pacojet. It does not extend to third parties to which we refer by means of our website. We have no influence on the privacy policies of third parties linked to our websites. The operators of the linked websites are solely responsible for their content.

This privacy policy is currently effective and dated to October 4, 2022 and may be accessed and printed by you at any time on our website at https://www.pacojet.com/datenschutz.