Data Privacy

At this point we would like to inform you about the privacy policy when visiting our website. The protection of privacy and your personal information is very important to us. We only collect and process personal data about you with your knowledge or consent. You learn what information we may store and for what purpose we use it. We commit ourselves to the observance of data protection according to EU data protection regulation (GDPR) and federal data protection law (BDSG). This privacy policy informs in accordance with the data protection regulations on the data collection of the data subject, in particular with regard to Art. 13 GDPR in connection with § 4 BDSG and related processing of personal data when visiting our website.

1 NAME AND ADDRESS OF THE CONTROLLER

Controller for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in Member states of the European Union and other provisions related to data protection is:

Ulisses Medien & Spiel Distribution GmbH

Industriestraße 11

65529 Waldems / Steinfischbach

Tel.: 06087 / 988700

Fax: 06087 / 98870599

E-Mail: feedback@ulisses-spiele.de

Website: www.ulisses-spiele.de

2 NAME AND ADDRESS OF THE DATA PROTECTION OFFICER

You can reach our data protection officer under the following contact options:

IT-Security@Work GmbH

Zu Händen: Datenschutzbeauftragter Ulisses Spiele

Robert-Bosch-Straße 18

63303 Dreieich

Mail: dsb-ulisses@isw-online.de

Tel: +49 6103 / 37416 00

3 COLLECTION AND PROCESSING OF PERSONAL DATA

Personal information is information that identifies a person or describes a person's behavior, that can be used to trace back to a person. These include the name, E-mail address or phone number, as well as data such as the IP address or websites visited. In accordance with the principle of data minimization, we only process personal data if this is absolutely necessary for the purposes described in this data protection

declaration or for the fulfillment of a desired purpose. There is no disclosure of your personal information to third parties, if this is not necessary and not without your consent. We use your personal information to process your order, to respond to your request or to give you access to special information and offers.

4 ACCESS DATA/ SERVER-LOGFILES

When visiting the website, data about each access to the offer (so-called server log files) are collected. Access data includes: Name of the retrieved web page, file, date and time of retrieval, amount of data transferred, notification of successful retrieval, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider. We use this technical access information based on Art. 6 para. 1 lit. f) GDPR (legitimate interest) exclusively in order to improve the attractiveness and usability of our websites and, if necessary, to identify technical problems and disruptions on our website at an early stage. The data is stored for a period of 4 weeks.

5 USE OF THE CONTACT FORM / CONTACT US

You can contact us easily and conveniently via a form. When using the contact form, personal data is only collected to the extent provided by you. You are free to use our contact form without providing personal data.

All information is thus provided voluntarily and is collected directly from you as the person concerned. Your voluntarily provided personal data will be stored for the purpose of processing your request as well as any follow-up questions that may arise and contacting you that may be required in this context. This personal data will not be passed on to third parties.

The same applies to contacting us by e-mail, telephone or mail. Please note that in this case further data resulting from the selected communication channel (e-mail address or transmitted telephone number) may be required.

The processing of the data is based on Art. 6 para. 1 lit. a) GDPR (consent) for the voluntary information and Art. 6 para. 1 lit. f) GDPR (legitimate interest) for the use of the information for processing the request.

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after processing your request has been completed). Mandatory legal provisions - in particular retention periods - remain unaffected.

Please note that encrypted and/or signed communication may not be possible via the contact channels provided. For sending sensitive information, it is recommended to use the postal service.

6 CUSTOMER ACCOUNT

When opening a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying the order processing. The processing is based on Art. 6 para. 1 lit. a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation. Your customer account will then be deleted.

7 COLLECTION, PROCESSING AND USE OF PERSONAL RELATED DATA WHEN ORDERING

When ordering, we collect and use your personal data only to the extent necessary for the fulfillment and processing of your order and to process your inquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide it will result in no contract being concluded. The processing is based on Art. 6 para. 1 lit. b) GDPR and is necessary for the performance of a contract with you. Your data will not be passed on to third parties without your express consent. The only exceptions to this are our service partners, whom we require to process the contractual relationship or service providers we use within the scope of order processing. In addition to the recipients named in the respective clauses of this data protection declaration, these are recipients of the following categories, for example: Shipping service providers, payment service providers, merchandise management service providers, service providers for order processing, webhosters, IT service providers and Dropshipping merchants. In all cases, we strictly observe the legal requirements. The scope of data transfer is limited to a minimum.

8 USE OF PAYPAL

All PayPal transactions are subject to the PayPal privacy policy. You can find this at https://www.paypal.com/de/webapps/mpp/ua/privacy-prev?locale.x=de_DE

9 NEWSLETTER

With the newsletter we inform you about us and our offers. If you would like to receive the newsletter, we require a valid E-mail address from you as well as information that allows us to verify that you are the owner of the specified E-mail address or that the owner agrees to receive the newsletter. Further data will not be collected. This data is only used for sending the newsletter and will not be passed on to third parties. With the registration for the newsletter, we store your IP address and the date of registration. This storage serves solely as proof in the event that a third party misuses an e-mail address and registers to receive the newsletter without the knowledge of the authorized person. You can revoke your consent to the storage of the data, the E-mail address and their use for sending the newsletter at any time. The revocation can be done via a link in the newsletters themselves, in your profile area or by sending a message to the contact options above.

The processing of the data entered when registering for the newsletter is based exclusively on your consent in accordance with Art. 6 Para. 1 lit. a) GDPR. You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you unsubscribe from the newsletter.

We use the e-mail dispatch and e-mail marketing platform Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, phone: +49 (0)30 / 311 995 10, https://de.sendinblue.com, https://de.sendinblue.com/legal/privacypolicy/ to send newsletters.

10 INTEGRATION OF SERVICES AND CONTENT OF THIRD PARTIES

It may happen that content from third parties, such as videos from YouTube, maps from Google Maps, RSS feeds or graphics from other websites are included in this online offer. This always presupposes that the providers of this content (hereinafter referred to as "third party provider") perceive the IP address of the users. Because without the IP address they could not send the contents to the browser of the respective user. The IP address is therefore required for the presentation of this content. We endeavor to use only content whose respective providers use the IP address solely for the delivery of the content. However, we do not have any influence on this if the third parties provide the IP address e.g. save for statistical purposes. As far as we know, we will inform users about it. This processing is based on legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR.

11 COOKIES

Some of our websites use so-called cookies. Cookies are small text files that are stored on your computer and stored by your browser. Session cookies are only stored for the duration of the access and automatically deleted when the browser is closed. These cookies do not contain any personal data but merely identify the browser used to access the website. They Serbe to make our offer more user-friendly, effective and secure. Session cookies are only stored for the duration of the access and automatically deleted when the browser is closed. These cookies do not contain any personal data but merely identify the browser used to access the website. Other cookies make it possible to save specific, device-related information on the user access device (PC, smartphone or similar), even beyond a session. They are used, for example, to provide page settings for future website visits. These cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser the next time you visit. Cookies that are required to carry out the electronic communication process or to provide certain functions that you wish to use (e.g. shopping cart function) are processed and stored on the basis of Art. 6 para. 1 lit. f) (legitimate interest) GDPR. The website owner has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (such as cookies for analyzing your surfing behavior) are stored, they will be treated separately in this privacy policy. Most browsers are set to automatically accept cookies. The storage of cookies can be disabled in the browsers or set so that as soon as cookies are sent a notification is made.

12 USE OF FINDOLOGIC FOR PRODUCT DISCOVERY

For product discovery, in particular search and navigation, we use the services of FINDOLOGIC GmbH, Jakob-Haringer-Str. 5a, 5020 Salzburg, a technology company that attempts to address personal needs and preferences through data analysis. In doing so, cookies are used to store information about the website user and various data is transferred to the service provider, these include in particular the IP address and browser identification of the user, as well as associated behavioral data such as search queries, categories visited, selected filters, products viewed and purchased. This helps us understand which products our users are most interested in and optimize the shopping experience for them.

This information may be transferred to third parties if required by law or if third parties process it on behalf of FINDOLOGIC.

For more information, please see Findologic's privacy policy at https://www.findologic.com/datenschutz/.

13 USE OF FRESHDESK

To process user contact via e-mail or via one of our online presences, such as the contact form on our website (www.ulissef-shop.com), we use the CRM system Freshdesk. The provider of this system is: Freshworks Inc., HQ - San Mateo, CA, 2950 S. Delaware Street, Suite 201, San Mateo CA 94403, USA.

Purpose of the foundation

We, Ulisses Medien & Spiel Distribution GmbH, use Freshdesk to be able to process your requests quickly and efficiently. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR.

Storage duration

Messages sent to us, Ulisses Medien & Spiel Distribution GmbH, will remain until you request us to delete them or the purpose for storing the data no longer applies (e.g. after processing your request has been completed). Mandatory legal provisions - in particular retention periods - remain unaffected.

For more information on data usage, please see Freshdesk's privacy policy: https://www.freshworks.com/privacy

14 DELETION OF PERSONAL DATA

We store personal data of the data subject only for the period necessary to achieve the purpose of the storage. If the purpose of the storage is omitted or if a storage period expires, then the personal data will be deleted in accordance with the legal regulations.

15 RIGHTS OF THE DATA SUBJECT

As a data subject, you have the fundamental right to information about what personal data has been stored about you and the right to correct incorrect data. Provided that your request does not conflict with a legal obligation to retain data, you have a right to the deletion or restriction of the processing of personal data. If the processing is based on consent pursuant to Art. 6 para. 1 lit. a) GDPR or Art. 9 para. 2 lit. a) GDPR, this consent may be revoked at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. In addition, you have a right to data portability.

17 LEGAL BASES OF PROCESSING

Art. 6 para. 1 lit. a) GDPR serves our company as the legal basis for processing operations in which we obtain consent for a particular processing purpose. In the processing of personal data necessary for the performance of a contract to which the data subject is a contracting party, Art. 6 para. 1 lit. b) GDPR serves as legal basis. This also applies to processing operations required to carry out pre-contractual actions.

Insofar as it is necessary to process personal data in order to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 lit. c) GDPR serves as legal basis. In the case that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d) GDPR serves as legal basis. If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f) GDPR serves as legal basis for processing.

18 SECURITY OF YOUR DATA

The data transmitted by you are protected by us with suitable technical and organizational means to protect them against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously monitored and improved in accordance with technological development and organizational capabilities.