PRIVACY POLICY

Article 1 Information on the collection of personal data

(1) The information provided in the following tells you what personal data is collected and how it is collected when you use our website. Personal data are all data related to your person, such as name, street address, email address, and user behaviour.

(2) The party responsible according to Article 4 (7) of the EU General Data Protection Regulation (EU GDPR) is:

Heuger Gartenbaubetriebe

Josef Heuger

Münsterstr. 46

D-49219 Glandorf

Phone: +49 54 26 94 83 0

Fax: +49 54 26 94 83 40

Email: info@heuger.com

For any queries about data protection, please contact us at info@heuger.com or by letter mail sent to the above-mentioned address, stating "Data protection" in the subject line.

(3) When you contact us by email, the information you provide (your email address, where applicable your name and phone number) are stored so that we can answer your queries. Any data collected in this context will be deleted when their storage is no longer necessary, or we will restrict the processing of the data in cases where legal storage obligations exist.

(4) If we draw on service providers for individual features of our service or if we wish to use your data for advertising purposes, you will be informed in detail about the processes involved in each case. We will also state the criteria specified for the duration of the storage.

Article 2 Your rights

(1) With regard to personal data relating to you, we are obliged to ensure you have the following rights:

• right to be informed

• right to rectification or erasure

• right to restrict processing

• right to object to processing

• right to data portability

(2) You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data.

Article 3 Collection of personal data when you visit our website

(1) If you use our website for informational purposes only, in other words, if you do not register or otherwise provide any information to us, we will only collect the personal data your browser sends to our sever (server log files). When visiting our website, we collect the following information, which is technically required to display our website to you and safeguard its stability and reliability (to which we are legally entitled on the basis of Article 6 (1) sentence 1 (f) of the GDPR):

• IP address

• date and time of access

• time zone difference with respect to Greenwich Mean Time (GMT)

• content of the request (specific page)

• access status/HTTP status code

• data volume transferred in each case • website from which access is made

• browser

• operating system and its interface

• browser language and version

(2) In addition to the aforementioned data, cookies will be stored on your computer while you use our website. Cookies are small text files that are saved on your hard drive and linked to the browser you use and through which certain information is sent to the party installing the cookie (in this case, us). Cookies cannot run programs or transmit viruses to your computer. They serve to make the website generally more user-friendly and efficient.

(3) Use of cookies:

a) This website uses the following types of cookies, the scope and function of which are explained below:

• transient cookies (see b)

• persistent cookies (see c).

b) Transient cookies are automatically deleted when you close your browser. Most of these cookies are session cookies. They save what is called a session ID, which allows different requests from your browser to be allocated to a common session. These cookies make it possible to recognize your browser when you next visit our website. These session cookies are deleted when you log off or close your browser.

c) Persistent cookies are automatically deleted after a defined period of time, which may differ depending on the cookie that has been installed. You can delete these cookies at any time in your browser's security settings.

d) You can adjust your browser settings to suit your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that if you do so, you may be unable to fully use all functions of this website.

e) Also, we or our technology partners install cookies to measure audience reach and for marketing purposes. You can object to the use of cookies for reach measurement and marketing purposes by visiting the opt-out page of the Network Advertising Initiative (http://optout.networkadvertising.org/) or also the US website (http://www.aboutads.info/choices) or the European website (http:// www.youronlinechoices.com/uk/your-ad-choices/).

Article 4 Other functions and services of our website

(1) Alongside purely informational services, we offer various other services you can use if you are interested. These other services usually require you to provide additional personal data, which we will use to provide the service in question. The principles of data processing set out above apply.

(2) In some cases, we draw on external service providers to process your data. We have selected and commissioned such providers with great care. They are bound by our instructions and subject to regular supervision.

(3) We are entitled to pass your personal data on to a third party if we offer promotions, raffles, contracting or similar services jointly with other partners. You will receive detailed information in this regard when you provide your personal data or in the description of the offer.

(4) Where the registered address of one of our service providers or partners is in a state outside the European Economic Area (EEA), we will inform you about the implications this circumstance has in the service description.

Article 5 Objection to or cancellation of data processing

(1) If you have given your consent to the processing of your data, you can revoke such consent at any time. Revocation of consent after you declared it to us will impact the permissibility of processing your personal data.

(2) If the processing of your personal data is based on a balancing of interests, you have the right to object to such processing. This is deemed to be the case if the processing is not necessary to satisfy a contract we have concluded with you and will be explained in more detail in the description of functions below. If you lodge such objection, you are requested to state the reasons why you do not want us to process your personal data the way we did. If the reasons for your objection are well founded, we will scrutinise the state of facts and either discontinue to process or adjust how we process your personal data, or explain our compelling reasons for why we will continue to process your personal data.

(3) You are of course entitled to object to the processing of your personal data for advertising and data analysis purposes at any time. You may send your objection to receiving promotions to us at info@heuger.com or the contact address provided in Article 1 (2) of this Privacy Policy for the party responsible.

Article 6 Use of Google Analytics

(1) This website uses Google Analytics, a web traffic analysis service of Google Inc. (“Google”). Google Analytics uses cookies. Cookies are text files that are stored on your computer and enable the service to analyse how you use our website. The information the cookie creates on the use of this website is usually transmitted to a Google service in the US and stored there. However, if IP anonymisation is enabled on this website, Google will abbreviate your IP address beforehand if you access our site from a member state of the European Union or any other signatory state to the Agreement on the European Economic Area. The full IP address will be transmitted to a Google server in the US and abbreviated there only in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to deliver other services connected with the use of the website and internet usage to the website operator.

(2) The IP address your browser reports to Google Analytics will not be amalgamated with other data Google might have.

(3) You can prevent the cookies from being stored by changing your browser settings accordingly. However, if you do so you might not be able to use all functions of this website fully. You can also prevent data created by the cookie and relating to your use of this website (including your IP address) from being collected, transmitted to and processed by Google by downloading and installing the browser plug-in that is available at the following link: tools.google.com/dlpage/gaoptout.

(4) This website uses Google Analytics with the “_anonymizeIp()“ extension. This means that truncated IP addresses are processed and absolutely cannot be related to any specific person. Any traceability of personal data is herewith excluded and any personal data collected about you will be deleted without delay.

(5) We use Google Analytics to analyse and continuously improve our website. The statistics we receive allow us to improve our services and make them more interesting for you as a user. For the exceptional cases where personal data are transferred to the US, Google has committed itself to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework. The legal basis for using Google Analytics is Article 6 (1) sentence 1 (f) of the GDPR.

(6) Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms and Conditions of Use: www.google.com/analytics/terms/de.html, Overview of Google Privacy Policy: www.google.com/intl/de/analytics/learn/privacy.html, and Google Privacy Policy: www.google.de/intl/de/policies/privacy.

Article 7 Adobe Typekit

This site uses web fonts that are provided by Adobe Typekit for uniform visualization of fonts. When accessing a page, your browser will load the required web fonts into its cache to display texts and fonts accurately. To this end, the browser you use must connect to the Adobe Typekit servers in the US. This connection allows Adobe Typekit to know that our website has been accessed from your IP address. With regard to the use of Adobe Typekit fonts, Adobe Inc. safeguards an adequate level of data protection by complying with the EU-US Privacy Shield and taking appropriate steps in the EU to ensure your data are protected and secure. If your browser does not support web fonts, it will use one of its standard fonts. More details on Adobe Typekit web fonts are available at typekit.com and in the privacy policy of Adobe Typekit: www.adobe.com/de/privacy/policies/typekit.html and www.adobe.com/de/privacy.htmlTypekit and www.adobe.com/de/privacy.htmlTypekit

Article 8 Referrals to third-party websites (linked sites)

Our website may have links that allow you to directly access third-party websites. We do not have any influence on the contents of such third-party sites and do not accept liability for the lawfulness, accuracy or completeness of such sites. The links are only intended to provide our customers with simplified access to third-party information. We explicitly mention that we do not consider the contents of such third-party sites as our own. You are requested to take note of the privacy policy and legal notes of such third-party websites.

Article 9 Note on persons under the age of 16

Our website is not designed for children under the age of 16, and we do not intentionally collect, use, make available, or process in any other way, personal data from children under 16 years of age. We therefore ask any person under the age of 16 not to send us any personal data (such as name, street address or email address). If you are under the age of 16 and wish to ask us a question or use this website in any other way that would require you to provide personal data, please ask your parents or legal guardian to do so in your name. If you are under the age of 16 and wish to ask us a question or use this website in any other way that would require you to provide personal data, please ask your parents or legal guardian to do so in your name.

Article 10 Amendments to this declaration We may amend this Privacy Policy from time to time. If we make any substantial changes to this Privacy Policy and how we use your personal data, we will post such changes on this site. We will do our very best to inform you about any substantial changes we may make. Please check our Privacy Policy at regular intervals.

Revised: February 2024