This Privacy Policy defines how we, INDIRA ART DISTRIBUTION SRL, collect, store and use your personal data when you access or interact with our website www.indira.ro and where we obtain or collect your data.

This Privacy Policy is applicable from May 25, 2018.

content

• Summary

• Details about our company

• What information we collect when you visit our website

• What information we collect when you contact us

• What information we collect when you interact with our website

• What information we collect when you place an order on our website

• Use of automated decision-making and profiling systems

• How we collect information about you from third parties

• Additional Disclosures and Uses of Your Data.

• How long your data is stored.

• Securing your information.

• Transfer of your data outside the European Economic Area

• Your rights to personal data

• Your right to object to data processing for certain purposes

• Sensitive personal data

• Changes to our privacy policy

• Privacy of minors

• Copyright

Summary

This section summarizes how we obtain, store and use your data. This summary is only intended to provide an overview of the privacy policy. This section is not a complete description and it is necessary to read the additional chapters present in this document for additions.

• Data operator: INDIRA ART DISTRIBUTION SRL

• How we collect or obtain information about you:

• when you provide the respective data (eg: by contacting us, by creating an account on the website, by accessing, ordering or purchasing our products, by registering in the company's database to receive marketing information about our products, by completing online or offline forms in order to register for advertising lotteries and events (ex: fairs), by completing the form for issuing the loyalty card;

• When you access our website, some data is collected through cookies and other similar technologies, and

• occasionally, from third parties.

• What information do we collect: IP, contact details: name, surname, e-mail, no. phone number, place of residence, company name (if applicable), billing address, delivery address.

• How we use your data: for business and administrative purposes (in particular to contact you and to process the orders you place on our site), to fulfill our contractual obligations, to promote the goods and our services and in relation to our legal rights and obligations.

• Disclosure of user data to third parties: the minimum necessary for the operation of the business and to comply with any contractual obligation towards you, IT service providers and to comply with legal obligations.

• Your data is not sold to third parties.

• How long your information is stored: no longer than necessary, depending on our legal obligations (eg to maintain accounting records) or any other legal basis for using the information (eg: consent, contractual obligations, legitimate interests.

• How your data is secured: by using technical and organizational solutions such as: storing information on secure servers, encrypting data transfers to and from our servers using SSL technology, encrypting payment operations on the site using SSL technology, allowing access to your personal data only when necessary, encryption of personal data, encryption of e-mails, pseudonymization and/or anonymization of personal data.

• Use of cookies and similar technologies: We use cookies and similar information-gathering technologies, such as web beacons, on our website, including essential, functional, analytical and targeting cookies. For more information, please access our cookie policy here: https://www.indira.ro/continut/politica-de-utilizare-cookie-uri

• Use of automated decision-making processes: We use automated decision-making processes in connection with our website, e.g. the use of web analytics tools, cookies, web beacons or the use of targeting cookies to display advertisements to people who visit our website on other websites (for example, by using the Google AdSense network) .

• Your rights in relation to your personal data:

o you have the right to access your data and receive information about its use;

o you have the right to request the correction and/or completion of information;

o you have the right to request data deletion;

o you have the right to restrict the use of data;

o you have the right to receive the data in a portable format;

o you have the right to object to the processing of your data;

o you have the right to withdraw your consent for the processing of your data;

o you have the right to appeal to a supervisory authority.

• Sensitive Personal Information: We do not collect what is commonly referred to as "sensitive personal data".

Details about our company

The data operator regarding our website is: INDIRA ART DISTRIBUTION SRL with headquarters in Str. St. Friday, no. 23, bl. 105B, sc. 2, ap. 51, Sector 3, Bucharest, Romania. You can contact the data operator by writing to the previously mentioned address or by e-mail at office@indira.ro

If you have any questions about this privacy policy, please contact the data controller.

What information we collect when you visit our website

We collect and use information from website visitors in accordance with this section and the section entitled Disclosure and Additional Uses of Your Data.

Web server log information

We use a third-party server to host our website, called ROMARGr, whose privacy policy is available here: https://www.romarg.ro/politica-de-confidentialitate.html. Our website server automatically records the IP address you use to access our website, as well as other information about your visit, such as the pages accessed, the information requested, the date and time of the request, the source of access to the website- our website (for example, the website or URL (link) that refers you to our website) and your browser and operating system version.

Use of information from website server logs for IT security purposes

Our provider collects and stores server logs to ensure IT network security. This includes analyzing log files to help identify and prevent unauthorized access to our network, the distribution of malicious code, predicting DDOS attacks and other cyber attacks by detecting unusual or suspicious activity.

Unless we are investigating suspected or potential criminal activity, We/we do not make, nor do we allow our provider to make, any attempt to identify you based on information collected through server logs.

Legal basis for processing: compliance with the legal obligations to which we are subject (Article 6 paragraph (1) letter (c) of the General Data Protection Regulation).

Legal obligation: recording access to our website using server log files is a technical measure to ensure an adequate level of security to protect the information collected from our website in accordance with Article 32(1) from the General Data Protection Regulation.

Cookies and similar technologies

Cookies are data files that are sent from a website to a browser to record information about users for various purposes.

We use cookies on our website, including essential, functional, analytical and targeting cookies and web beacons. For additional information on the use of cookies, see our cookie policy, which is available here: https://www.indira.ro/continut/politica-de-utilizare-cookie-uri

You can reject some or all of the cookies we use on our website by changing your browser settings, or you can disable non-essential cookies using our cookie control tool, but by rejecting them you may affect the functioning of the website or some characteristics of the website. For more information about cookies, including changing your browser settings, visit www.allaboutcookies.org or see our cookie policy.

Information we collect when you contact us

We collect and use information from people who contact us in accordance with this section and the section entitled Disclosure and Additional Uses of Your Information.

E-mail

When you send a message to the email address displayed on our website, we collect your email address and any other information you provide in that email (such as your name, your phone and the information contained in any signature block in the email).

Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).

Legitimate interest: To respond to inquiries and messages we receive and to keep records of correspondence.

The legal basis for the processing: it is necessary for the execution of a contract or to start the process of engaging in a contract at your request (Article 6 paragraph (1) letter (b) of the General Data Protection Regulation).

The reason why it is necessary for the performance of a contract: if your message concerns the provision of goods or services or taking steps at your request before providing you with our goods and services (for example, providing information about such goods and services); we will process your information to do this.

Transferring and storing your information

We use a third-party email provider to store the emails you send to us. Our email provider is Google Gmail. Its privacy policy is available here: https://policies.google.com/privacy

Emails you send to us will be stored within the European Economic Area on Google servers in Ireland.

Contact form

When you contact us using any contact form, we collect first and last name, city, e-mail, telephone.

If you do not provide the information required by the contact form, you will not be able to submit it and we will not receive your request, therefore we will not be able to respond.

Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).

Legitimate interest: to respond to inquiries and messages we receive and to keep records of correspondence.

The legal basis for the processing: it is necessary for the execution of a contract or to start the process of engaging in a contract at your request (Article 6 paragraph (1) letter (b) of the General Data Protection Regulation).

The reason why it is necessary for the performance of a contract: if your message concerns the provision of goods or services or taking steps at your request before providing you with our goods and services (for example, providing information about such goods and services); we will process your information to do this.

Transferring and storing your information

The messages you send us through our contact form will be stored inside the European Economic Area, on the servers of the hosting service provider in Romania and on the servers of the e-mail service provider in Ireland.

Our web service provider partner is Romarg. His privacy policy is available here: https://www.romarg.ro/politica-de-confidentialitate.html.

Our partner email service provider is Google Gmail. Its privacy policy is available here: https://policies.google.com/privacy

Phone

When you contact us by phone, we collect your phone number and any information you provide during your conversation with us.

Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation)

Legitimate interest: to respond to inquiries and messages we receive and to keep records of correspondence.

Legal basis for processing: it is necessary for the execution of a contract or to start the process of engaging in a contract at your request (Article 6 paragraph (1) letter (b) of the General Data Protection Regulation).

The reason why it is necessary for the performance of a contract: if your message concerns the provision of goods or services or taking steps at your request before providing you with our goods and services (for example, providing information about such goods and services); we will process your information to do this.

Transferring and storing your information

Information about your call, such as your phone number and the date and time of your call, is processed by our telephone service provider Orange Romania located in Romania. Its privacy policy is available here: https://www.orange.ro/termeni-si-conditii/#politicaconfidentialitate

Information about your call will be stored by our telephone service provider in the European Economic Area.

Post

If you contact us by post, we will collect all the information you provide us in any postal communications you send us, in order to respond to your requests.

Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation)

Legitimate interest: to respond to inquiries and messages we receive and to keep records of correspondence.

Legal basis for processing: it is necessary for the execution of a contract or to start the process of engaging in a contract at your request (Article 6 paragraph (1) letter (b) of the General Data Protection Regulation).

The reason why it is necessary for the performance of a contract: if your message concerns the provision of goods or services or taking steps at your request before providing you with our goods and services (for example, providing information about such goods and services); we will process your information to do this.

Information we collect when you interact with our site

We collect and use data from individuals who interact with certain features of our website in accordance with this section and the section entitled Disclosure and Additional Uses of Your Information.

Newsletter

When you sign up for our newsletter to receive information about promotions, events or contests from us through the subscription forms or from any other form on the basis of which you can express your consent to register in the database, we collect: name, surname, e-mail, city.

Legal basis for processing: your consent (Article 6(1)(a) of the General Data Protection Regulation).

Consent: You consent to receive our newsletter by signing up to receive it using the steps described above.

Transfer and storage of your data

We use a service provided by a third party to send our newsletter and manage our email list, MailChimp. Its privacy policy is available here: https://mailchimp.com/legal/privacy/

The information you submit to subscribe to our newsletter will be stored in the European Economic Area on our provider's servers in Switzerland.

Use of web beacons and similar technologies in emails

We use technologies such as web beacons (small graphic files) to measure the performance of our emails such as delivery rates, open rates and click-through rates and unsubscribe rates, links with which the customer has interacted. We will use web beacons to measure newsletter engagements.

For more information on how we use web beacons in our newsletter emails, see our cookie policy, which is available here: https://www.indira.ro/continut/politica-de-utilizare -cookies

For more information about our newsletter providers and the use of web beacons, see the privacy policy available here: https://mailchimp.com/legal/privacy/

Registration on our website

When you register and create an account on our site, we collect the following mandatory information: first name, last name, email address, IP address.

If you do not provide the mandatory information required by the registration form, you will not be able to register or create an account on our website.

Optional information: phone number, town, sector / county, address. You may also opt out of receiving marketing communications from us and/or other third parties. For more information, see "Marketing Communications" in this section below.

Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).

Legitimate interest: registration and administration of accounts on our website to facilitate the operation of our business, so that you can place orders, to register product return / exchange requests with ease, to view your order history, to make notices, to register for the newsletter - if you wish.

Transfer and storage of your data

The information you provide us through the registration form on our website will be stored in the European Economic Area on the servers of the Romarg web hosting service provider in Romania. The privacy policy is available here: https://www.romarg.ro/politica-de-confidentialitate.html

We collect and use information from individuals who place an order on our website in accordance with this section and the section entitled Disclosure and Additional Uses of Your Data.

Information collected when you place an order

Necessary information

When you place an order for goods on our website, we collect name, surname, e-mail address, address, billing / delivery address, telephone, IP address and if applicable: company name, unique identification code, registration number in the Trade Register.

If you do not provide this information, you will not be able to purchase goods from our website or enter into a contract with us.

Legal basis for processing: necessary for the execution of a contract (Article 6 paragraph (1) letter (b) of the General Data Protection Regulation).

Reason why it is necessary to perform a contract: We need the mandatory information collected through our verification form to establish who the contractor is and to contact you to fulfill our obligations under the contract, including issuing invoices, sending receipts and order confirmations.

Legal basis for processing: compliance with a legal obligation (Article 6(1)(c) of the General Data Protection Regulation).

Legal obligation: We have a legal obligation to invoice you for the goods and services you have purchased from us, where you are registered for VAT purposes, and we require the mandatory information collected for this purpose by our payment form.

Optional information

We also collect optional information from you, such as information about the time frame in which you want your order to be delivered or any other additional information you wish to provide us.

Legal basis for processing: our legitimate interests (Article 6(1)(b) of the General Data Protection Regulation).

Legitimate interests: for the smooth functioning of our business and to be able to deliver your order in the time interval requested by you.

Legal basis for processing: your consent (Article 6(1)(a) of the General Data Protection Regulation).

Legitimate Interests: You consent to us processing any optional information you provide by submitting this information to us.

Payment processing

After you place an order on our website, you will need to pay for the goods or services you have ordered. To process your payment, we use third-party payment processors: MobilePay Netopia. Your payment will be processed by those mentioned above. Payment can also be made by bank transfer, payment order.

PayU and MobilePay Netopia collect, use and process your information, including payment information, in accordance with their privacy policies. You can access the privacy policies through the following links: https://www.mobilpay.ro/public/politica-de-confidientialitate/ and

https://www.payu.ro/politica-de-confidentialitate

Transferring and storing your information

PayU is located in Romania. The information related to the processing of your payment is stored in the European Economic Area on PayU servers in Romania

MobilePay Netopia is located in Romania. The information related to the processing of your payment is stored in the European Economic Area on MobilePay Netopia servers in Romania.

Legal basis for processing: necessary for the execution of a contract (Article 6 paragraph (1) letter (b) of the General Data Protection Regulation).

The reason we need to perform a contract: to fulfill your contractual obligation to pay for the goods or services you have ordered from us.

Marketing communications

Automated marketing RETARGETING.BIZ

In order to profile, monitor and send communications and personalized offers, we use Retargeting.biz (Address: Str. Vasile Lascar, No. 178, Sector 2, Bucharest, Unique Registration Code (CUI): RO34270947, Reg. No. Trade Register: J40/3525/23.03.2015, E-mail: info@retargeting.biz, Phone number: +40-727-383-165), an automated marketing software, dedicated to online stores.

These activities do not have any legal or similar significant effect on users. The only consequence of this profiling is represented by discounts and personalized marketing offers displayed and/or sent to the users of the www.indira.ro website. The ways in which Retargeting.biz informs users are: pop-ups on www.indira.ro or emails with personalized content. The user can choose not to be profiled or to receive commercial communications, without any effect, other than receiving these discounts or personalized marketing offers. It is enough to send a request in this regard to the address: office@indira.ro

In order to process, monitor activities (profiling) and interact with the site, Retargeting.biz must automatically collect and store the following personal data: e-mail, telephone number, name, surname, gender, date of birth, city, county, IP address (including possible location), browser, order ID, discount code, discount value, transport cost, total order value, individual price of ordered products, product variations, products, device, OS, IP location, timestamps related to visiting the page, visiting the page, visiting the category, visiting the brand, clicking on the picture, mouse over cart, mouse over price, scroll up, scroll down, add to cart, remove from cart, select variation, add to wishlist, comment, Like on Facebook, visited the help page.

The categories of persons concerned are visitors, registered users or clients of the site, as the case may be, depending on the service chosen. Visitors' data will be stored for 2 months, and those of registered users or customers for 3 years.

To provide its services, Retargeting.biz uses authorized third parties (subcontractors) from the EEA and the USA (only for push notifications), and the transfer of personal data is made under the EU-USA Privacy Shield, the data is retained/stored during the contract between the two parties.

Cookies: this site must use first party cookies and will give Retargeting.biz access to this information. This cookie is placed by this site and, therefore, can only be used in connection with this site. Consequently, a connection between the internal monitoring of the users of this site and the monitoring on other sites is not technically possible through this cookie.

To unsubscribe from the communications sent by Retargeting.biz, send an e-mail to the address: office@indira.ro.

Transferring and storing your information

We use a service provided by a third party to manage our email list, namely: MailChimp.

The information you submit to subscribe to our newsletter will be stored in the European Economic Area on the servers of the third party mailing list administrator in Switzerland.

Use of web beacons and similar technologies in emails

We use technologies such as web beacons (small graphic files) to evaluate the performance of our emails such as delivery rates, open rates and click-through rates.

For more information on how we use web beacons in our emails, see our cookie policy, available here: https://www.indira.ro/continut/politica-de-utilizare-cookie- hate

For more information about our providers and their use of web beacons, see their privacy policy available here: https://kb.mailchimp.com/accounts/account-setup/how-mailchimp-uses-cookies

Our goods and services

You can opt-in to receive marketing communications from us about our goods and services by email or text. We will only send you marketing communications about our goods and services if you opt-in to receive them.

Legal basis for processing: consent (Article 6(1)(a) of the General Data Protection Regulation).

Consent: You consent to us sending you information about our goods and services by signing up to receive such information in accordance with the steps described above.

Transferring and storing your information

We use a service provided by a third party to manage our email list: MailChimp.

The information you submit to subscribe to our newsletter will be stored in the European Economic Area on the servers of the third party mailing list administrator in Switzerland.

Third Party Goods and Services

In addition to receiving information about our products and services you can opt-in to receive marketing communications from us about third-party goods and services by email, text message, telephone or post by checking the box indicating that you wish to receive such communications.

Legal basis for processing: consent (Article 6(1)(a) of the General Data Protection Regulation).

Consent: You consent to us sending you information about the goods and services of third parties by signing up to receive such information in accordance with the steps described above.

Transferring and storing your information

We use a service provided by a third party to manage our email list: MailChimp.

The information you submit to subscribe to our newsletter will be stored in the European Economic Area on the servers of the third party mailing list administrator in Switzerland.

Use of web beacons and similar technologies in emails

We use technologies such as web beacons (small graphic files) to evaluate the performance of our emails such as delivery rates, open rates and click-through rates.

For more information on how we use web beacons in our emails, see our cookie policy, available here: https://www.indira.ro/continut/politica-de-utilizare-cookie- hate

For more information about our providers and their use of web beacons, see their privacy policy available here: https://mailchimp.com/legal/privacy

Information collected or obtained from third parties

This section sets out how we obtain or collect information about you through third parties.

Information received from third parties

Sometimes we receive information about you from third parties. Those third parties from whom we receive data about you are generally business partners.

It is also possible that third parties with whom we have had no prior contact may provide us with information about you.

The information we obtain from third parties will generally be your name and contact details, but will include any additional information about you that they provide to us.

Legal basis for processing: it is necessary for the performance of a contract or to take action on your request to enter into a contract (Article 6(1)(b) of the General Data Protection Regulation).

Why it is necessary to perform a contract: If a third party has submitted information about you (such as your name and email address) to provide you with services, we will process your information to take measures at your request to enter into a contract with us (as applicable).

Legal basis for processing: consent (Article 6(1)(a) of the General Data Protection Regulation).

Consent: Where you have requested that a third party disclose information about you to us and the purpose of disclosing that information is unrelated to the performance of a contract or service by us to you, we will process your information based on consent, which you give by asking the third party concerned to provide your information to us.

Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).

Legitimate interests: Where a third party has disclosed information about you to us and you have not consented to the transfer of that information, we will have a legitimate interest in processing that information in certain circumstances.

For example, we will have a legitimate interest in processing your information to fulfill our obligations under the subcontract with the third party, where the third party has the main contract with you. Our legitimate interest is to fulfill our obligations under our subcontract.

Similarly, third parties may pass information about you to us if you have violated or may violate any of our legal rights. In this case, we will have a legitimate interest in processing this information to investigate and prosecute any such potential breach.

If we receive information about you in error

If we receive information about you in error from a third party and/or we do not have a lawful basis for processing that information, we will delete your information.

Information obtained by us from third parties

In certain circumstances (for example, to verify the information we hold about you or to obtain missing information we need to provide you with a service), we will obtain data about you from certain publicly accessible sources, both from EU and non-EU, such as: institutions / authorities.

Legal basis for processing: it is necessary for the performance of a contract or to take action on your request to enter into a contract (Article 6(1)(b) of the General Data Protection Regulation).

Why it is necessary to enter into a contract: If you have entered into a contract or requested that we enter into a contract with you in certain circumstances, we will obtain information about you from public sources to enable us to understand your business and provide services to a standard sufficient for you.

For example, we will obtain and/or verify your email address from your website if you ask us to send you information by email and we do not have or need confirmation of your email address.

Legal basis for processing: our legitimate interests (Article 6(1)(b) of the General Data Protection Regulation).

Legitimate interests: In certain circumstances, we will have a legitimate interest in obtaining information about you from public and private sources. For example, if you have infringed or we suspect you have infringed any of our legal rights, we will have a legitimate interest in obtaining and processing information about you from these sources in order to investigate and prosecute any suspected or potential infringement.

Legal basis for processing: consent (Article 6(1)(a) of the General Data Protection Regulation).

Consent: We may obtain information from third parties, if you have agreed to communicate this data to us by expressing consent, e.g. by checking a box that tells you that you want your information to be shared with us.

Use of automated decision-making mechanisms

We use automated decision-making mechanisms on our website. We do not consider this to have any legal effect on you or affect you in a similar way.

You have the right to object to our use of the automated decision-making mechanisms described in this section. You can do this by opting out of cookies in accordance with the method described in the relevant section of this privacy policy. If you do not want us to process your real IP address (usually the IP address assigned by your Internet Service Provider) when you visit our website, you can use a virtual private network (VPN) or a free service such as Tor .

You can learn more about the use of cookies and similar technologies (including the legal basis for their use) and how to opt out of them in the cookie policy, available here: https://www.indira.ro/continut/politica - of-use-cookies

Automatic decision-making mechanisms

Automated decision-making mechanisms are those mechanisms for making decisions by technological means (by means of a machine) without human involvement.

Use of automated decision-making mechanisms for advertising

We automate the display of advertisements containing our products and services on other websites you visit by using cookies. For additional information on the types of cookies we use, see our cookie policy, available here: https://www.indira.ro/continut/politica-de-utilizare-cookie-uri

The logic involved: automatically displaying ads to people who have visited our site increases the effectiveness of advertising and is more economical for us than manual display or other methods of advertising.

Meaning and intended consequences: Cookies will be used to recognize that you have visited our website in order to show you advertisements (unless you have blocked such cookies) and will collect information about your online behavior .

How you can object: You can block these types of cookies using the cookie control management tool on the www.indira.ro website, e.g. blocking third-party cookies using your browser settings. For more information, see our cookie policy: https://www.indira.ro/continut/politica-de-utilizare-cookie-uri

Disclosure and Additional Use of Your Data

This section sets out the circumstances in which we will disclose your data to third parties and any additional purposes for which we use your data.

We use a number of third parties to provide us with services that are necessary to run our business or help us run our business and who process your information for us on our behalf. These include the following:

• Email service providers: Google Gmail. Their privacy policy is available here: https://policies.google.com/privacy

• Web hosting service provider: Romarg. Their privacy policy is available here: https://www.romarg.ro/politica-de-confidentialitate.html

• Marketing service providers: Retargeting. Their privacy policy is available here: https://retargeting.biz/ro/termeni-si-conditii

• E-mail marketing service provider: MailChimp. Their privacy policy is available here: https://mailchimp.com/legal/privacy/

• Courier service provider: Urgent Cargus, DPD, Posta Romana.

Our service providers are located in Romania or the European Union.

Your information will be shared with these service providers where necessary to provide you with the service you have requested, whether that request is to access our website or order goods and services from us.

Legal basis for processing: legitimate interests (Article 6 paragraph (1) letter (f) of the General Data Protection Regulation).

Legitimate interest based on: where we share your information with these third parties in a context other than where it is necessary to perform a contract (or at your request to do so), we will share information with such third parties to enable us to effectively run and manage our business.

Legal basis for processing: it is necessary for the performance of a contract or to take action on your request to enter into a contract (Article 6(1)(b) of the General Data Protection Regulation).

Why it is necessary to perform a contract: We may share information with our service providers to enable us to fulfill our obligations under that contract or to take steps you have requested before entering into a contract with you.

We disclose your information to third parties in certain circumstances, as set out below.

Provision of information to third parties such as Google Inc., Facebook, Retargeting. Google collects information through the use of Google Analytics on our website. Google, Facebook, Retargeting use this information, including IP addresses and cookie information, for several purposes, such as improving the quality of our services and your browsing experience. The information is collected by Google, Facebook and Retargeting anonymously.

Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).

Legitimate interests: improving the quality of our services.

Sharing your information with third parties that are either related to or associated with the operation of our business where it is necessary for us. These third parties include: consultants, business partners. Additional information regarding each of these third parties is provided below.

Legal basis for processing: our legitimate interests (Article 6(1)(f) of the General Data Protection Regulation).

Legitimate interest: the efficient operation and management of our business.