By using this website (including the functions it contains, such as contact forms, chats, comment fields, registration and login), you agree to be bound by the declaration described here. If you do not agree, you may not visit this website or use the functions contained therein. We therefore ask you to read this declaration carefully. In accordance with Article 13 of the EU Data Protection Regulation (DSGVO), we inform you of the legal basis of our data processing. If the legal basis is not stated in the data protection declaration, the following applies:

The legal basis for

• the obtaining of consent is Art. 6 para. 1 sentence 1 lit. a) and Art. 7 DSGVO
• the legal basis for processing for the purpose of fulfilling our services and carrying out contractual measures and answering enquiries is Art. 6 para. 1 sentence 1 letter b) DSGVO,
• the legal basis for the processing for the fulfilment of our legal obligations is Art. 6 para. 1 sentence 1 lit. c) DSGVO
• and the legal basis for the processing to safeguard our legitimate interests is Art. 6 para. 1 lit. p. 1 f) DSGVO.

If vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 sentence 1 lit. d) FADP serves as the legal basis. If, in the course of our processing, we disclose data to other persons and companies (processors or third parties), transfer it to them or otherwise grant them access to the data, this is only done on the basis of a legal authorisation (e.g. if the data must be transferred to third parties, such as payment service providers, in accordance with Art. 6 para. 1 sentence 1 lit. b) DSGVO for the fulfilment of the contract), if you have given your consent, if a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.). If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this is done in the context of using the services of third parties or disclosure or transfer of data to third parties, this will only take place if it is done to fulfil our (pre-)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we will only process or transfer the data in a third country if the special requirements of Art. 44 ff. DSGVO. This means that the processing is carried out, for example, on the basis of special guarantees, such as the officially recognised determination of a level of data protection corresponding to that of the EU (e.g. for the USA through the "Privacy Shield") or compliance with officially recognised special contractual obligations (so-called "standard contractual clauses"). If we commission third parties to process data on the basis of a so-called "contract processing agreement", this is done on the basis of Art. 28 DSGVO. This declaration applies exclusively to the pages accessible at www.trivia-research.com (hereinafter referred to as the "Website"). The declaration does not apply to other studies, services, websites or products which are carried out or provided by us or third parties.

We take the protection of your personal data very seriously and comply with the data protection regulations of the European Union's Basic Data Protection Regulation (DGVO), which comes into force on 25 May 2018. In the following we inform you about how we handle your data. This data protection declaration explains the nature, scope and purpose of the processing of personal data (hereinafter referred to as "data") within our website. With regard to the terms used, such as "processing" or "responsible person", we refer to the definitions in Art. 4 of the Basic Data Protection Regulation (DSGVO).

The responsible person in terms of the basic data protection regulation and other national data protection laws of the member states and other data protection regulations is:

Trivia Research GmbH & Co. KG

Managing Director: Maurice Brunnecker

Großer Grasbrook 19

20457 Hamburg

Phone: +49 172 448 40 51

E-Mail: info@trivia-research.com

We have appointed a data protection officer for our company:

Maurice Brunnecker

Phone: +49 172 448 40 51

E-mail: m.brunnecker@trivia-research.com

Scope of the processing of personal data

As a matter of principle, we collect and use personal data of our users only to the extent necessary to provide a functional website and our contents and services. The collection and use of personal data of our users is regularly only carried out with the consent of the user. An exception is made in those cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by legal regulations.

Legal basis for the processing

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU Data Protection Basic Regulation (DSGVO) serves as the legal basis for the processing of personal data. When processing personal data which is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b DSGVO serves as the legal basis. This also applies to processing operations which are necessary to carry out pre-contractual measures. Insofar as processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c DSGVO serves as the legal basis. If the processing is necessary to safeguard a legitimate interest of our company or of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f DSGVO serves as the legal basis for the processing.

Data erasure and storage duration

In accordance with Articles 17 and 18 DSGVO, the personal data of the person concerned will be deleted or blocked as soon as the purpose of storage ceases to apply and there are no legal obligations to retain the data. If the data are not deleted because they are required for other and legally permissible purposes, their processing is restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons. In accordance with legal requirements in Germany, data is stored in particular for 6 years in accordance with § 257 Paragraph 1 HGB (commercial books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting vouchers, etc.) and for 10 years in accordance with § 147 Paragraph 1 AO (books, records, management reports, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.).

Administration, financial accounting, office organization, contact management

We process data within the framework of administrative tasks as well as the organisation of our operations, financial accounting and compliance with legal obligations, such as archiving. In the process, we process the same data that we process within the scope of providing our contractual services. The basis for processing is Art. 6 Par. 1 lit. c. DSGVO, Art. 6 para. 1 lit. f. DSGVO. Customers, interested parties, business partners and website visitors are affected by the processing. The purpose of and our interest in the processing lies in the administration, financial accounting, office organisation, archiving of data, i.e. tasks that serve to maintain our business activities, perform our tasks and provide our services. The deletion of the data with regard to contractual services and contractual communication corresponds to the data mentioned in these processing activities. We disclose or transfer data to the tax authorities, consultants, such as tax advisors or auditors, as well as other fee agencies and payment service providers.

Provision of the website and creation of server log files

The hosting provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transfers.

The following data is collected:

• IP address of the requesting computer

• Date and time of access

• Name and URL of the retrieved data

• Transferred data volume

• Message whether the retrieval was successful

This data is not merged with other data sources. The storage in log files is done to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. These purposes also include our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f DSGVO. An evaluation of the data for marketing purposes does not take place in this context. The data will be deleted as soon as they are no longer required for the purpose of their collection. In the case of the collection of data for the purpose of providing the website, this is the case when the respective session has ended. In the case of storage of the data in log files, this is the case after 14 days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated so that an assignment of the calling client is no longer possible. The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. There is therefore no possibility of objection on the part of the user.

Use of cookies

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. If a user calls up a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. We use "session cookies" to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. The following data, for example, are stored and transmitted in the cookies:

• Storage of a login status
• Completing multi-page forms
• Temporary storage of user inputs
• Display status of control elements
• Search parameters

Cookies, which are necessary for the electronic communication process or for the provision of certain functions requested by you, are stored on the basis of Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in the storage of cookies for the technically error-free and optimised provision of our services. Insofar as other cookies (e.g. cookies for the analysis of your surfing behaviour) are stored, these are treated separately in this data protection declaration. Cookies are stored on the user's computer and are transmitted by the user to our site. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies for our website are deactivated, it may not be possible to use all the functions of the website to their full extent.

When respondents/participants in surveys make initial contact, contact data such as name, postal address, date of birth, industry, e-mail addresses and telephone numbers are recorded.

This data is recorded for the following purposes:

Establishing contact for participation in surveys such as group discussions, telephone interviews, personal interviews, etc.

Legal basis for recording these data:

The legal basis for processing and replying to initial enquiries is Article 6(1)(a) and (b) DPA.

Duration of the storage:

The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected. After a revocation these personal data will be deleted immediately.

When respondents/participants in surveys make initial contact, contact data such as name, postal address, date of birth, industry, e-mail addresses and telephone numbers are recorded.

This data is recorded for the following purposes:

Teilnahme an Bewerbungsverfahren.

Legal basis for recording these data:

The legal basis for processing and replying to initial enquiries is Article 6(1)(a) and (b) DPA.

Duration of the storage:

The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected. After a revocation these personal data will be deleted immediately.

Visitor statistics

The content management system used provides statistics on the page impressions of our website. Only the number of hits, the time and the URL are stored. No personal data, such as your IP address, is stored.

Analysis services

We use analysis services to evaluate the surfing behaviour of our website visitors. These services are only integrated after consent has been granted when visiting the website. No connections to the analysis services will be established without consent. You can revoke your consent subsequently: deactivate analysis services

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called "cookies". These are text files which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. The storage of Google Analytics cookies is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the analysis of user behaviour in order to optimise both his website and his advertising.

IP Anonymization

We have activated the IP anonymization function on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before it is transmitted to the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide further services to the website operator in connection with the use of the website and the Internet. The IP address transmitted by your browser within the framework of Google Analytics is not combined with other data from Google.

Browser Plugin

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

Opposition to data collection

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie is set to prevent the collection of your information on future visits to this site: Disable Google Analytics. You can find more information about how Google Analytics handles user data in the Google privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

Contract data processing

We have concluded a contract with Google for commissioned data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Google reCAPTCHA

We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on our websites. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). The purpose of reCAPTCHA is to check whether the data input on our websites (e.g. in a contact form) is done by a human being or by an automated program. For this purpose, reCAPTCHA analyses the behaviour of the website visitor on the basis of various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For analysis purposes, reCAPTCHA evaluates various information (e.g. IP address, time spent on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google and the reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place. The data processing is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in protecting his web offers from abusive automated spying and from SPAM. Further information about Google reCAPTCHA and the Google privacy policy can be found in the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

Google Web Fonts

This site uses so-called web fonts, which are provided by Google, for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly. To do this, the browser you are using must connect to Google's servers. This enables Google to know that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and attractive presentation of our online offers. This represents a legitimate interest in the sense of Art. 6 para. 1 lit. f DSGVO. If your browser does not support Web Fonts, a standard font from your computer will be used. Further information about Google Web Fonts can be found here: https://developers.google.com/fonts/faq and in the privacy policy of Google: https://www.google.com/policies/privacy/.

In addition, personal data is only collected, processed and used if you have given your express consent to do so, Art. 6 para. 1 lit. a BDSG. Any further use or transfer to third parties will not take place. In the following case we ask for your consent:

Newsletter

If you want to subscribe to our newsletter, we need at least your e-mail address to which the newsletter should be sent. Further information about your person is only optional in connection with sending the newsletter. For your registration to our newsletter service we use the so-called "double opt-in procedure". This procedure requires the respective user to confirm his registration to our newsletter service by clicking on a link contained in an e-mail which we send to the user after registration to our service to the e-mail address provided by him for this purpose. The registration and the confirmation will be recorded. This is to prevent unauthorised persons from registering for our newsletter service using a third-party e-mail address. You can revoke any consent you may have given at any time for the future. Please use the unsubscribe function in our newsletters for this purpose.

Social Plugins

Our website uses social plugins ("plugins") from the social networks facebook.com, twitter.com and instagram.com (together hereinafter also referred to as "the providers"). The plugins are marked with the corresponding logos of the providers. When you visit our websites, your browser establishes a direct connection with the servers of the providers. By integrating the plug-ins, the providers at least receive the information that you have called up the respective website, and possibly also further information depending on the respective plug-in or service. If you are registered and logged in with the respective provider, this provider can assign the visit to your user account with this provider. For example, if you interact with the plugin, for example by clicking the "Like" button on Facebook or making a comment, the corresponding information is transmitted directly from your browser to the provider and stored there and, if necessary, processed further. Details on the purpose and scope of data collection and the further processing and use of the data by the respective provider, as well as your rights and settings options for the protection of your privacy, can be found in the data protection information of the respective providers:

Facebook Inc.

www.facebook.com/about/privacy

Twitter Inc.

www.twitter.com/de/privacy

Instagram

help.instagram.com/519522125107875

Cooperation with contract processors and third parties

If, in the course of our processing, we disclose data to other persons and companies (processors or third parties), transfer it to them or otherwise grant them access to the data, this will only be done on the basis of a legal authorization (e.g. if a transfer of the data to third parties, such as payment service providers, in accordance with Art. 6 para. 1 lit. b DSGVO), you have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.) If we commission third parties to process data on the basis of a so-called "contract processing agreement", this is done on the basis of Art. 28 DSGVO.

Transfers to third countries

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this is done in the context of using the services of third parties or disclosure or transfer of data to third parties, this will only take place if it is done to fulfil our (pre-)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we will only process or transfer the data in a third country if the special requirements of Art. 44 ff. DSGVO. This means, for example, that the processing is carried out on the basis of special guarantees, such as the officially recognised determination of a level of data protection corresponding to that of the EU (e.g. for the USA through the "Privacy Shield") or compliance with officially recognised special contractual obligations (so-called "standard contractual clauses").

Pursuant to Art. 15 DSGVO, you have the right to request confirmation as to whether or not data in question is being processed and to receive information about this data and to receive further information and copies of the data.

Right of rectification

Gemäß Art. 16 DSGVO haben Sie das Recht, die Vervollständigung der Sie betreffenden Daten oder die Berichtigung der Sie betreffenden unrichtigen Daten zu verlangen.

Right of cancellation ("right to be forgotten")

In accordance with Art. 17 DSGVO, you have the right to demand that the data in question be deleted immediately, or alternatively, in accordance with Art. 18 DSGVO, to demand that the processing of the data be restricted.

Right to limit processing

According to art. 18 DSGVO you have the right to limit the processing of your data.

Right to data transferability

In accordance with Art. 20 DSGVO, you have the right to demand that you receive the relevant data that you have provided us with. Furthermore, you can request that they be passed on to other responsible parties.

Right of appeal to a supervisory authority

According to Art. 77 DSGVO you have the right to lodge a complaint with the competent supervisory authority.

Right of revocation

You have the right to revoke consents granted in accordance with Art. 7 para. 3 DSGVO with effect for the future.

Right of objection

You may at any time object to the future processing of data concerning you in accordance with Art. 21 DSGVO.

Your contact person:

Maurice Brunnecker

Phone: +49 172 448 40 51

E-mail: m.brunnecker@trivia-research.com