DATA
PROTECTION

Privacy Statement (hereinafter “Privacy Statement”) of The Platform Group AG

The Privacy Statement applies to corporate.the-platform-group.com.

1. Protecting your personal data is matter of the utmost importance to us. This Privacy Statement (together with our Shop Terms & Conditions) defines the basis on which we process all the personal data that we collect from you or that you provide to us. Personal data are any data that relate to you personally, e.g. name, address, e-mail address, user behaviour.
2. The controller in accordance with Article 4(7) of the EU General Data Protection Regulation (GDPR) is The Platform Group AG, Grafenberger Allee 295, 40237 Düsseldorf; service@the-platform-group.com (please refer to our publication information).
   Our data protection officer can be reached at kontakt@privacy-legal.de or at the postal address: Dr. Volker Wodianka, LL.M., c/o Wodianka privacy legal GmbH, Baron-Voght-Straße 73b, 22609 Hamburg.When you contact us by e-mail or using a contact form, we will store the data you send (your e-mail address, possibly your name and telephone number) to answer your questions. We erase the data gathered in this context when their storage is no longer required, or we restrict processing if statutory retention requirements apply.
3. If we use hired service providers for individual functions of our offering, or if we wish to use your data for advertising purposes, we will inform you of the respective processes in detail below. We will also tell you the criteria defined for storage periods.

1. If your personal data are processed, you are a “data subject” as referred to by the GDPR. You have the following rights in respect of us as the controller:
   1. right to access;
   2. right to rectification or erasure;
   3. right to restriction of processing;
   4. right to object to processing;
   5. right to data portability.

You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data.

1. 1. 1. This website is hosted by an external service provider (hoster). If you are using the website only for information, i.e. if you do not register or otherwise provide us with any information, our hoster merely collects the personal data sent by your browser to our server. If you wish to view our website, we collect the following data that are technically necessary for us to display our website to you and to ensure stability and security (the legal basis for this is Article 6(1), first sentence, (f) GDPR):
         1. IP address;
         2. date and time of your request;
         3. time zone difference from Greenwich Mean Time (GMT);
         4. content of your request (specific page);
         5. access status/HTTP status code;
         6. any data volume transferred;
         7. website from which the request comes;
         8. browser;
         9. operating system and its interface;
         10. language and version of browser software.

1. In addition to using our website merely for information, we offer various services that you can use if interested. To do so, you typically have to provide further personal data that we use to perform the respective service and to which the above data processing principles apply.
2. In some cases, we use external service providers to process your data. These service providers have been carefully selected by us and ordered to follow our instructions. Their adherence to our instructions is monitored regularly.
3. If our service providers or partners are established in a state outside the European Economic Area (EEA), we inform you of the consequences of this fact in the description of the offering.

1. If you have given your consent to the processing of your data, you can withdraw this at any time. Withdrawing consent affects the legality of the processing of your personal data after you notify us.
2. If our processing of your personal data is based on a legitimate interest, you can file an objection to processing. In particular, this is the case if processing is not necessary to fulfil a contract with you, which we show in the description of functions below. When exercising your right to object, we ask that you present the reasons why we should not process your personal data. If your objection is legitimate, we will examine the matter and either stop or adjust data processing, or explain to your our compelling legitimate grounds for continuing processing.
3. Naturally, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising at the following contact address: The Platform Group AG, Grafenberger Allee 295, 40237 Düsseldorf; datenschutz@the-platform-group.com.

1. We use “WordPress Statistik” for the statistical analysis of user access.
   WordPress Statistik uses technologies that allow user recognition for the purposes of analysing user behaviour (e.g. cookies or device fingerprinting). In order to perform this analysis, WordPress Statistik records, among other things, log files (referrer, IP address, browser, etc.), your approximate location (derived from your IP) and which actions you have performed on the site (e.g. clicks, views, downloads). On the basis of your consent, the information recorded on your use of this website is stored on servers in the US. Your IP address will be rendered anonymous after processing and before storage. The legal basis for using WordPress Statistik is Article 6(1), first sentence, (a) GDPR.Information on third-party provider:Aut O’Mattic A8C Ireland Ltd.
   Business Centre, No.1 Lower Mayor Street
   International Financial Services Centre
   Dublin 1, Ireland; Cookie Policy, Privacy Policy

1. If you wish to contact us using the contact form under the “Investor Relations” tab, we will use the data you provide to contact you as we wish.
2. This processing is based on our legitimate interest in accordance with Article 6(1) first sentence, (f) GDPR so that we can contact you without delay and process your inquiry. We store the personal data you provide for one year and then erase them, unless you have already objected to processing or the processing does not entail any statutory retention periods.