Data Privacy Statement

The following document provides information regarding personal data collection when using our website. Personal data is all data that can be associated with you personally, e.g., name, address, email addresses, user behavior. We have taken extensive technical and operational protection measures to protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted in response to technological progress.

1 Responsibility for data processing

Pursuant to Art. 4 (7) EU General Data Protection Regulation (GDPR), the party responsible for data processing is
MOCOM Compounds GmbH & Co. KG
Mühlenhagen 35
20539 Hamburg, Germany
Phone: +49 (0) 40 78 10 50
Email: info@mocom.eu

2 Data protection officer contact information

You can contact our external data protection officer at dataprotection@albis.com, or using our mailing address with the addition of "data protection officer."

3 Your rights

We would be happy to provide information on whether any of your personal data is being processed; if so, you have the right to information about this personal data, and to details regarding the information in Article 15 of the GDPR. In addition, you have the right to rectification (Art. 16 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to erasure (Art. 17 GDPR) and the right to data portability (Art. 20 GDPR).

Under the legal circumstances, you have the right to object to processing (Art. 21 GDPR).

To exercise the above-named rights, please contact us by e-mail at dataprotection@albis.com or via mail. Exercising the above-named rights is free of charge to you.

Without prejudice to these rights or to the possibility of asserting another administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority at any time, in particular in the Member State of your place of residence, your workplace or the place of the alleged violation, if you believe that the processing of your personal data violates data protection regulations (Art. 77 GDPR).

4 Collection of personal data when visiting our website

If you use the website for information purposes only, i.e., if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security. The legal basis for this is Article 6(1) f GDPR:

- IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, amount of data transferred, website from which the request originates, browser, operating system and its interface, language and version of the browser software.

MOCOM Compounds GmbH & Co. KG cannot associate this data with any specific persons. This data is not combined with data from other sources; the data is also deleted after statistical evaluation and is used exclusively to improve the attractiveness, content and functionality of our websites.

5 Contact via email or contact form

When you contact us by e-mail or via a contact form, we store the data you provide (your e-mail address, your name and telephone number) in order to answer your questions and address your concerns. The legal basis for this is Article 6(1) sentence 1 f GDPR. Insofar as our contact form requests information that is not required in order to establish contact, we have always marked those fields as optional. This information is used to substantiate your inquiry and to facilitate handling of your request. This information is expressly provided on a voluntary basis and with your consent, Art. 6(1) sentence 1 a GDPR. Insofar as this involves information related to channels of communication (e.g. e-mail address, telephone number), you also agree that we may contact you via those channels in order to respond to your inquiry. You can, of course, withdraw this consent at any time, effective from that point onward.

Personal data we receive in context of contacting you will be deleted as soon as it is no longer required to achieve the purpose for which it was collected, your inquiry has been fully processed, and no further communication with you is necessary / desired by you.

6 Applications

You can apply to our company electronically, in particular via e-mail or web forms. We will, of course, only use your details for purposes of processing your application; we will not forward them to third parties. Please note that unencrypted e-mails sent are not sent with access protection.

You can also apply to our company online via our application portal. Your online application will be forwarded directly to the HR department via an encrypted connection and will, of course, be treated confidentially. We will, of course, only use your details for purposes of processing your application; we will not forward them to third parties. More information on data processing as part of the application process can be found in the privacy policy of our application portal.

If you have applied for a specific position and it has already been filled, or if we consider you more suitable for another position, we would like to forward your application within the company. Please let us know if you do not consent to this.

Your personal data will be deleted immediately after completion of the application process or after a maximum of 6 months, unless you have expressly given us your consent to store your data for a longer period or we enter into an employment contract with you. The legal basis for this are Article 6(1) a, b and f GDPR and Section 26 BDSG.

7 Digital signature

We use DocuSign software from DocuSign Inc., 221 Main St., Suite 1000, San Francisco, CA 94105, USA ("DocuSign") to digitally sign contracts and documents. For this purpose, DocuSign processes the data entered by you when using the Service, as well as the usage data of your end device and transaction-related data. DocuSign stores all personal data on servers within the EU. The legal basis for data processing are points (b) and (f) of Article 6 (1) GDPR. We have concluded an order processing agreement with DocuSign via Telekom Deutschland GmbH. Further information on DocuSign's data processing can be found in DocuSign’s Privacy Policy. In order to ensure a high level of data protection and appropriate guarantees, DocuSign has established binding internal data protection regulations in line with Article 47 of GDPR, which can be viewed here.

8 Use of cookies

Cookies are files stored to your computer by websites you visit; they allow re-identification of your browser in the future. Cookies transmit information to the entity that uses the cookie. Cookies can store a variety of information, such as your language setting, the amount of time you spend viewing our website, or the information you enter while visiting. This avoids, for example, you having to re-enter information into forms every time you use them. The information stored in cookies can also be used to identify your preferences and tailor content to your areas of interest.

There are different types of cookies: Session cookies are data that is only stored temporarily to the RAM; they are deleted as soon as you close your browser. Permanent or persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. These types of cookies may also save information to your computer as text files. However, you can also delete these cookies at any time by adjusting your browser settings.

First-party cookies are set by the website you are currently visiting. Only that website may read information from such cookies. Third-party cookies are set by organizations that are not operators of the website you are visiting. These cookies are used by marketing companies, for example.

The legal basis for the potential processing of personal data via cookies, and the storage period for said cookies, may vary. Insofar as you have provided your consent, the legal basis is Article 6 (1) clause 1 a GDPR. Insofar as such data processing takes place on the basis of our overriding legitimate interests, the legal basis is Article 6 (1) clause 1 f GDPR. The stated purpose then corresponds to our legitimate interest.

We use cookies to ensure the proper operation of the website, to provide basic functionality, to measure reach and – with your consent – to tailor our services to your preferred areas of interest.

You can delete cookies already stored on your device at any time. If you want to prevent cookies from being stored, you can adjust your Internet browser settings accordingly. Alternatively, you can install so-called ad-blockers. Please note that some functions of our website may not work if you have deactivated the use of cookies.

We also use an info banner to notify website visitors of our use of cookies. This info banner will also request your consent to the use of specific cookies, especially those relevant for the personalization of services or for marketing purposes. You can revoke your consent at any time, effective from that point onward, by clicking the link here to access the cookie management menu and unchecking the box you used to grant consent.

9 Website analysis

We use a variety of services, which are described below, for purposes of analyzing and optimizing our websites. We use these services to analyse how many users visit our website, which information is most in demand, or how users come across the website. We also collect data on which website brought (referred) a user to our website, which subpages the user accesses, or how often and for how long the user views each subpage. This helps us improve the user-friendliness of our websites, identify errors, and improve our online presence; such goals also represent our legitimate interests in using these tools. The data collected is not used to personally identify individual users. We are conservative in our approach to data collection: the data we collect is anonymous, or at most pseudonymous. The legal basis for such data processing is your consent in accordance with Art. 6 (1) a, 7 GDPR.

10 Google Analytics

Insofar as you have granted your consent, this website uses Google Analytics, a web analysis service provided by Google LLC. The responsible authority for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Scope of processing

Google Analytics uses cookies that enable analysis of your use of our websites. Information on your usage of this website is collected using cookies; generally speaking, that information is transferred to a Google server in the USA and stored there.

On Google Analytics 4, anonymization of IP addresses is activated by default. Under this IP anonymization, Google shortens your IP address within member states of the European Union or other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is your full IP address transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser in context of Google Analytics will not be combined with other Google data.

During your visit to the website, your user behavior is recorded in the form of “events." Events may include:

- Page views
- First visit to the website
- Start of session
- Your “click path," interaction with the website
- Scrolls (whenever a user scrolls to the bottom of the page (90%))
- Clicks on external links
- Internal search queries
- Interaction with videos
- File downloads
- Viewed/clicked ads
- Language setting

The following information is also captured:

- Your approximate location (region)
- Your IP address (in shortened form)
- Technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
- Your Internet provider
- the referrer URL (the website/advertising media through which you arrived at this page)

Purposes of processing

On behalf of the operator of this website, Google will use this information to evaluate your (pseudonymized) use of the website and to compile reports on website activities. The reports provided by Google Analytics serve to analyze the performance of our website and the success of our marketing campaigns.

Recipients

Recipients of the data are/may be

- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor according to Art. 28 GDPR)
- Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
- Alphabet Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

The possibility of US authorities accessing the data stored by Google cannot be ruled out.

Transfer to third-party countries

Insofar as data is processed outside the EU/EEA and there is no data protection level that meets the European standard, we have entered into EU-standard contractual clauses with the service provider in order to establish an appropriate level of data protection. The parent company of Google Ireland, Google LLC, is located in California, USA. The possibility of Google-stored data being transmitted to the USA and accessed by US authorities cannot be ruled out. The USA is currently considered a third-party country from a data protection perspective. You do not have the same rights there as you do within the EU/EEA. If applicable, you may not have any legal remedies at your disposal to prevent government authorities from accessing your data.

Duration of storage

The data sent by us and linked to cookies is automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.

Legal basis

The legal basis for such data processing is your consent in accordance with Art. 6 (1) clause 1 a GDPR.

Revocation

You may revoke your consent at any time, effective for the future, by accessing the cookie settings here and changing your selection. The legality of processing carried out on the basis of consent prior to revocation remains unaffected.

Alternatively, you can prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to refuse all cookies, this and other websites may be restricted in functionality. You can also prevent Google from collecting and processing cookie-generated data and data related to your use of the website (including your IP address) by

a. not granting consent to storage of the cookie, or

b. downloading and installing the Google Analytics deactivation browser add-on here.

For more information on Google Analytics terms of use and data protection at Google, see https://marketingplatform.google.com/about/analytics/terms/de/

and https://policies.google.com/?hl=de.

11 Facebook Custom Audiences (Facebook Pixel)

In context of use-based online advertising, we use Facebook Inc.'s Custom Audiences services (1601 S. California Avenue, Palo Alto, CA 94304, USA). For this purpose, we define target user groups within the Facebook advertising manager on the basis of certain characteristics; advertising is subsequently displayed to these users within the Facebook network. The users are selected by Facebook on the basis of the profile information they provide, and based on other data provided in context of their use of Facebook. If a user clicks on an advertisement and then comes to our website, the Facebook pixel integrated into our website supplies Facebook with information that the user has clicked on the advertising banner. In principle, a non-reversible and non-personal checksum (hash value) is generated from your usage data, which is then transmitted to Facebook for analysis and marketing purposes. A Facebook cookie is set in the process. This cookie collects information regarding your activities on our website (e.g. surfing behavior, subpages visited, etc.). Your IP address is also stored and used for purposes of geographically distributing advertising. We do not use Facebook Custom Audiences via the customer list or the “extended comparison” function.

Consult the Facebook privacy policy for more information regarding the purpose and scope of Facebook's collection, additional processing, and usage of data, as well as for information on privacy protection. Settings related to which ads you are shown on Facebook can be adjusted via this link or under your Facebook account settings.

For more information regarding Facebook's Custom Audiences service, see:
https://de-de.facebook.com/business/help/449542958510885.

Further information on data processing and storage duration can be obtained from the provider or at https://www.facebook.com/about/privacy.

The “Facebook Custom Audiences” function can be deactivated for logged-in users under https://www.facebook.com/settings/?tab=ads#_.

You can also prevent the storage of cookies by setting your browser software accordingly. However, we wish to point out that this may prevent you from using all functions of our website to their full extent. Further options for the deactivation of cookies by third parties can be found at www.networkadvertising.org/managing/opt_out.asp or on the Digital Advertising Alliance Opt-Out Platform at http://optout.aboutads.info/?c=2&lang=en.

12 Data forwarding

In principle, your data will not be transferred to third parties unless we are legally obliged to do so, such data transfer is necessary in order to fulfill the contractual relationship, or you have expressly consented to the transfer of your data beforehand.

Insofar as external service providers may come into contact with your personal data, we shall, within the framework of order processing pursuant to Art. 28 GDPR, ensure that they comply with the provisions of the data protection laws in the same way. Please also consult the individual providers' respective data protection policies. Third-party service providers are responsible for the content of their services, though we check the services to the extent feasible in order to ensure that they comply with statutory requirements.

13 Data security

We have taken extensive technical and operational protection measures to protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adapted in response to technological progress.

Version: December 2021