GENERAL INFORMATION ABOUT THE COLLECTION AND PROCESSING OF YOUR DATA

1. Scope of processing

In principle, we process personal data only insofar as this is necessary to provide a functioning website and our content and services. The processing of personal data takes place regularly only with consent. An exception applies to cases in which prior consent can

not be obtained for reasons of fact and the processing of the data is permitted by law.

2. Legal basis

The processing of your data is either based on your consent or in case the processing is necessary for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract, or based on legitimate interest, cf.

GDPR art. 6(1)(a)-(b), (f).

If the processing is based on your consent, you may at any time withdraw your consent by contacting us using the contact information in clause 1.

3. Storage and deletion of your data

In principle, we only store personal data for as long as is necessary to fulfill contractual or legal obligations for which we collected the data. After that, we delete the data immediately, unless we still need the data until the expiry of the statutory limitation period for

evidence purposes for claims under civil law or due to statutory retention obligations.

We delete or block the personal data of the data subject as soon as the purpose of the storage is fulfilled. It may also be stored if provided for by the European or national legislator in EU regulations, laws or regulations to which our company is subject (see details in

sections 3.1-3.3). Blocking or deletion of the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.

3.1. Data Retention Policy

Due to tax regulations, Account Data will be retained for up to five full fiscal years from your cancellation of your Cookiebot CMP account.

Configuration Data and System Generated Data will be erased immediately when you cancel the Cookiebot CMP account.

End User Data will be erased on an ongoing basis after 12 months from registration, and immediately when you cancel the Cookiebot CMP account.

3.2 Data Retention for Compliance with Legal Requirements

You may not require Usercentrics to change any of the default retention periods, except for the reasons for erasure pursuant to clause 3.3, but you may suggest changes for compliance with specific sector laws and regulations.

3.3 Data Restitution and/or Deletion

No data except Account Data will be retained after the termination of the Agreement. You may request a data copy before termination. You must not cancel the Cookiebot CMP account until the data copy has been delivered, as Usercentrics will not otherwise be able to deliver the data copy.