We are very pleased about your interest in our offer. With this Privacy Policy, we inform you about the nature, scope and purpose of the personal data we process and your rights as a Data Subject.

1. General information

Data Controller

Responsible for data processing according to Art. 4 No. 7 GDPR is TorAlarm GmbH, Adersstraße 12, 40215 Düsseldorf, Germany (hereinafter referred to as "we" or "us"), unless otherwise stated in this Privacy Policy.

Contact Details

Please contact our Data Protection Officer at any time with questions and comments regarding data protection as well as to enforce your rights as a Data Subject:

TorAlarm GmbH
Adersstraße 12
40215 Düsseldorf
Germany

datenschutz@toralarm.com

Accessing the website

When you use our website, we automatically set absolutely necessary cookies and collect and process the following information to enable the usability of the functions provided and to ensure the security and stability of our offer:

• Information about the accessing end device and the software used
• Date and time of access
• IP address

The processing of the IP address is absolutely necessary to enable the delivery of our offer to your end device and to measure the efficiency and performance of our offer. Usage profiles are not created in the process. The legal basis for data processing is Art. 6 para. 1 point b GDPR. Our servers also store your IP address for up to 14 days for the purpose and interest of being able to guarantee the security of our offer (Art. 6 para. 1 point f GDPR).

Contact initiated by you

When you contact us, e.g. via our contact forms or by e-mail, the data you provide (e.g. e-mail address, name if applicable, telephone number, etc.) will be processed by us in order to process your enquiry and, if applicable, to contact you. We delete the data accruing in this context when it is no longer required for the aforementioned purpose, provided that there are no legal obligations to retain the data. The legal basis for data processing is Art. 6 para. 1 sentence 1 point f GDPR. If you provide us with personal data of another person, you must first take the necessary data protection measures for this, e.g. obtain the required prior consent of this person and inform him or her of the purpose for which you are transferring the data to us.

Place of Processing

We also process personal data in countries outside the European Economic Area ("EEA"), including the USA. To ensure that a suitable level of data protection is observed, we make use of the EU Standard Contractual Clauses for the preparation of the contracts with services employed in Third Countries as per Art. 46 para. 2 point c GDPR, unless there is an adequacy decision issued by the European Commission for that Third Country: Standard Contractual Clauses

Storage Duration

We process personal data only as long as this is necessary for the respective purpose stated in this Privacy Policy. The personal data will then be deleted, provided that no legal retention periods prevent data deletion. Tracking and cookies Our website is used without the use of tracking and cookies requiring consent. Cookies are small files that your browser stores on your device in a directory provided for this purpose. Among other things, they can be used to determine whether you have visited a website before. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier for the cookie. It consists of a string of characters that can be used to assign websites and servers to the specific internet browser in which the cookie was stored. This enables the websites and servers visited to distinguish the individual browser from other Internet browsers that contain other cookies. A specific Internet browser can be recognised and identified via the unique cookie ID. Cookies cannot identify you as a person without additional information.

2. Tracking and cookies

Our website is used without the use of tracking and cookies requiring consent. Cookies are small files that your browser stores on your device in a directory provided for this purpose. Among other things, they can be used to determine whether you have visited a website before. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier for the cookie. It consists of a string of characters that can be used to assign websites and servers to the specific internet browser in which the cookie was stored. This enables the websites and servers visited to distinguish the individual browser from other Internet browsers that contain other cookies. A specific Internet browser can be recognised and identified via the unique cookie ID. Cookies cannot identify you as a person without additional information.

Strictly necessary access to your end device

In order to be able to offer our services and third-party services integrated into our website and requested by you, the use of strictly necessary cookies and comparable technologies by us or by third-party providers is necessary (special category " Strictly necessary"), i.e. information is only retrieved or stored in your end device if this is strictly necessary for the service you are using and we cannot otherwise provide the service (§ 25 para. 2 TDDDG). For example, for the purposes of ensuring security, preventing fraud and rectifying errors, we process information to ensure that data is transmitted securely, to detect and prevent harmful, fraudulent, invalid or illegal activities, and to ensure the correct and efficient operation of systems and processes - including monitoring and improving the performance of systems and processes - within the scope of the permitted processing purposes. This is necessary to ensure the security of the respective data processing, to prevent fraud and to be able to rectify errors. The information processed for this purpose may include automatically sent device properties for identification purposes, precise geolocalisation data and data obtained by reading the device properties for identification purposes without separate disclosure. We use the following (third-party) providers for this purpose: Google reCAPTCHA (_GRECAPTCHA; Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Irland)

Social media

There are no social media plugins integrated on this website that directly load data from the servers of the social media providers concerned. The integrated "plugins" (Twitter, Instagram, YouTube, LinkedIn and Facebook) are rather simple links to the relevant third-party sites, which we illustrate with corresponding graphics. A transmission of personal data to the operator of the social media service through the known plugins therefore does not take place.

3. Your rights as a data subject

You have the following rights under the GDPR with regard to personal data concerning you:

• Right to information
• Right to rectification or erasure
• Right to restriction of processing
• Right to object to processing
• Right to data portability

You also have the right to complain to a data protection supervisory authority about our processing of your personal data.

Last revised: April 16th, 2024