1. Name and Contact Details of the Data Controller and the Company Data Protection Officer

This data protection information applies to data processing by:

Controller: Flowzar GmbH (hereinafter referred to as: Flowzar),

Taimerhofstraße 13, 81927 Munich, Germany. Email: contact@flowzar.com.

The company's data protection officer of AXP can be reached at the above address, for the attention of Mr Andreas Habersetzer, or at contact@flowzar.com.

2. Collection and Storage of Personal Data and the Type and Purpose of its Use

a) When Visiting the Website

When accessing our website www.flowzar.com, information is automatically sent to the server of our website by the browser being used on your device. This information is temporarily stored in a so-called log file. The following information is collected without

your intervention and stored until automated deletion:

• IP address of the requesting computer,

• Date and time of access,

• Name and URL of the retrieved file,

• Website from which access is made (referrer URL),

• Browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

The specified data is processed by us for the following purposes:

• Ensuring a smooth connection of the website,

• Ensuring comfortable use of our website,

• Evaluation of system security and stability as well as

• for further administrative purposes.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR.

Our legitimate interest follows from the aforementioned purposes for data collection. In no case do we use the collected data for the purpose of drawing conclusions about your person.

In addition, we use cookies and analysis services when you visit our website. You can find more detailed explanations in sections 4 and 5 of this privacy policy.

b) When Registering for Our Newsletter

Provided you have expressly consented in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, we use your email address to regularly send you our newsletter. It is sufficient to provide an email address for receiving the newsletter.

You can unsubscribe at any time, for example, via a link at the end of each newsletter. Alternatively, you can send your unsubscribe request at any time by email to contact@flowzar.com.

c) When Using Our Contact Form

If you have any questions, we offer you the opportunity to contact us via a form provided on the website. It is necessary to provide a valid email address so that we know who the request came from and can respond to it. Further information can be provided voluntarily.

Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR based on your voluntarily given consent.

The personal data collected by us for using the contact form will be automatically deleted after your request has been dealt with.

3. Disclosure of Data

Your personal data will not be transferred to third parties for purposes other than those listed below.

We only share your personal data with third parties if:

• You have given your express consent according to Art. 6 para. 1 sentence 1 lit. a GDPR,

• the disclosure is necessary for asserting, exercising or defending legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,

• in the event that a legal obligation exists for the transfer under Art. 6 para. 1 sentence 1 lit. c GDPR, or

• this is legally permissible and necessary for the settlement of contractual relationships with you under Art. 6 para. 1 sentence 1 lit. b GDPR.

4. Cookies

We use cookies on our site. These are small files that your browser creates automatically and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not harm your device, do not contain viruses, trojans, or other malware.

Information is stored in the cookie that results in connection with the specific end device used. However, this does not mean that we immediately obtain knowledge of your identity.

The use of cookies serves partly to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognise that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

In addition, we use temporary cookies to optimise user-friendliness, which are stored on your device for a certain specified period of time. If you visit our site again to use our services, it will automatically recognise that you have already been with us and what entries and settings you have made so that you do not have to enter them again.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you (see section 5). These cookies enable us to automatically recognise that you have already visited us if you return to our site.

These cookies are automatically deleted after a defined time.

The data processed by cookies is required for the mentioned purposes to protect our legitimate interests as well as those of third parties in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a notification always appears before a new cookie is created. The complete deactivation of cookies can, however, result in not all functions of our website being able to be used.

5. Analysis Tools and Tracking Tools

The following tracking measures used by us are carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR. With the tracking measures being used, we want to ensure a needs-based design and continuous optimisation of our website. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimising our offer for you. These interests are to be regarded as justified within the meaning of the aforementioned regulation.

The respective data processing purposes and data categories can be found from the respective tracking tools.

a) Google Analytics

For the purpose of the needs-based design and continuous optimisation of our pages, we use Google Analytics, a web analysis service from Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google"). In this context, pseudonymised usage profiles are created and cookies (see section 4) are used. The information generated by the cookie about your use of this website such as

• Browser type/version,

• Operating system used,

• Referrer URL (the previously visited page),

• Host name of the accessing computer (IP address),

• Time of the server request,

is transferred to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide further services associated with website and internet use for the purposes of market research and demand-based design of these internet pages. This information may also be transferred to third parties if required by law or if third parties process this data on behalf. Your IP address will not be merged with other Google data under any circumstances. The IP addresses are anonymised so that an assignment is not possible (IP masking).

You can prevent the installation of cookies by setting the browser software accordingly; however, we would like to point out that in this case, not all functions of this website may be fully usable.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).

As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on this link. An opt-out cookie is set, which prevents the future collection of your data when visiting this website. The opt-out cookie only applies to this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you have to set the opt-out cookie again.

Further information on data protection in connection with Google Analytics can be found in the Google Analytics help (https://support.google.com/analytics/answer/6004245?hl=de).

b) Google Adwords Conversion Tracking

In order to statistically record the use of our website and to evaluate it for the purpose of optimising our website for you, we also use Google Conversion Tracking. Google Adwords places a cookie (see section 4) on your computer if you have reached our website via a Google advertisement.

These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of the ad client's website and the cookie has not yet expired, Google and the client can recognise that the user has clicked on the ad and was redirected to this page.

Each Adwords client receives a different cookie. Cookies cannot therefore be tracked via the websites of Adwords clients. The information obtained using the conversion cookie is used to create conversion statistics for Adwords clients who have opted for conversion tracking. The Adwords clients find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.

If you do not want to participate in the tracking process, you can also refuse the necessary setting of a cookie - for example using a browser setting that generally deactivates the automatic setting of cookies. You can also deactivate cookies for conversion tracking by setting your browser to block cookies from the "www.googleadservices.com" domain. Google’s privacy policy on conversion tracking can be found here (https://services.google.com/sitestats/de.html).

c) Matomo

We use the open-source software Matomo for analysis and statistical evaluation of website usage. Cookies are used for this purpose (see section 4). The information generated by the cookie about website usage is transmitted to our servers and combined in pseudonymous usage profiles. The information is used to evaluate the use of the website and enable a needs-based design of our website. The information will not be passed on to third parties.

Under no circumstances will the IP address be combined with other data concerning the user. The IP addresses are anonymised so that assignment is not possible (IP masking).

Your visit to this website is currently captured by the Matomo web analysis. Click here (https://matamo.org/docs/privacy/) so that your visit is no longer recorded.

6. Social Media Plug-ins

We use social media plugins from the social networks Facebook, X.com, and Instagram on our website based on Art. 6 para. 1 sentence 1 lit. f GDPR in order to make our company better known via them. The purpose of advertising behind this is to be regarded as a legitimate interest within the meaning of the GDPR. The responsibility for data protection-compliant operation is to be ensured by their respective providers. The integration of these plug-ins by us takes place via the so-called two-click method in order to protect visitors to our website as best as possible.

a) Facebook

We use social media plugins from Facebook on our website to make their use more personal. For this, we use the "LIKE" or "SHARE" button. It is an offer from Facebook.

When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to Facebook's servers. The content of the plugin is transmitted directly to your browser by Facebook and integrated into the website.

By integrating the plugins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are currently not logged in to Facebook. This information (including your IP address) is transmitted by your browser directly to a Facebook server in the USA and stored there.

If you are logged into Facebook, Facebook can directly associate your visit to our website with your Facebook account. If you interact with the plugins, for example by pressing the "LIKE" or "SHARE" button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your Facebook friends. Facebook can use this information for advertising purposes, market research and needs-based design of Facebook pages. For this purpose, Facebook creates usage, interest, and relationship profiles, e.g. to evaluate your use of our website with regard to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website and to provide further services associated with the use of Facebook.

If you do not want Facebook to directly associate the data collected via our website with your Facebook account, you must log out of Facebook before visiting our website.

The purpose and scope of data collection and further processing and use of the data by Facebook as well as your related rights and settings options for protecting your privacy can be found in Facebook's privacy notices (https://www.facebook.com/about/privacy/).

b) X.com

Plugins from X Corp.'s microblogging network (X) are integrated on our websites. You can recognise the X plugins by the X logo on our site. An overview of X buttons can be found here (https://about.X.com/resources/buttons).

When you visit a page of our website that contains such a plugin, a direct connection is established between your browser and the X server. X thereby receives the information that you have visited our site with your IP address. If you click the X button while logged into your X account, you can link the content of our pages to your X profile. This allows X to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by X.

If you do not want X to associate your visit to our pages, please log out of your X user account.

Further information can be found in X's privacy policy (https://X.com/privacy).

c) Instagram

So-called social plugins ("plugins") from Instagram, which is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram"), are also used on our website.

The plugins are marked with an Instagram logo, for example in the form of an "Instagram camera". When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the Instagram servers. The content of the plugin is transmitted directly to your browser by Instagram and integrated into the page. This integration means that Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are currently not logged in to Instagram.

This information (including your IP address) is transmitted directly by your browser to an Instagram server in the USA and stored there. If you are logged into Instagram, Instagram can directly associate your visit to our website with your Instagram account. If you interact with the plugins, for example by clicking the "Instagram" button, this information is also transmitted directly to an Instagram server and stored there.

The information is also published on your Instagram account and displayed to your contacts there.

If you do not want Instagram to directly associate the data collected via our website with your Instagram account, you must log out of Instagram before visiting our website. Further information can be found in Instagram's privacy policy (https://help.instagram.com/155833707900388).

7. Rights of Data Subjects

You have the right to:

• Request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage duration, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right of complaint, the origin of your data, if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about their details;

• Request the correction of incorrect or completion of your personal data stored by us in accordance with Art. 16 GDPR without undue delay;

• Request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or the assertion, exercise or defense of legal claims;

• Request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, as far as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse their deletion and we no longer need the data, but you need them for the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 GDPR;

• Receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller in accordance with Art. 20 GDPR;

• Revoke your consent once given to us at any time in accordance with Art. 7 para. 3 GDPR. As a result, we are no longer allowed to continue the data processing based on this consent for the future and

• Complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your habitual residence or workplace or our office location.

8. Right to Object

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided there are reasons arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which we will implement without specifying a particular situation.

If you would like to make use of your right of revocation or objection, an email to contact@flowzar.com is sufficient.

9. Data Security

We use the widespread SSL procedure (Secure Socket Layer) during the website visit in conjunction with the highest encryption level supported by your browser. Usually, it is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our

internet presence is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

We also take appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

10. Updating and Changing this Data Privacy Statement

This data privacy statement is currently valid and stands as of May 2018.

Due to the ongoing development of our website and offers relating to it or due to changed statutory or regulatory requirements, it may become necessary to change this data privacy statement. The current data privacy statement can be accessed and printed at any time on the website at https://www.flowzar.com/datenschutz.