1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.

1.2 The controller in charge for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Triumph Intertrade AG, Triumphweg 6, 5330 Bad Zurzach, Switzerland, E-Mail: uk.service@triumph.com. The controller in charge of the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 The controller has designated a data protection officer for this website. He can be reached as follows: dpo@triumph.com

1.4 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the character string https:// and the lock symbol in your browser line.

When using our website for information only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:

• Our visited website
• Date and time at the moment of access
• Amount of data sent in bytes
• Source/reference from which you came to the page
• Browser used
• Operating system used
• IP address used (if applicable: in anonymized form)

Data processing is carried out in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently, if there are any concrete indications of illegal use.

In order to make your visit to our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your terminal and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process specific user information such as browser and location data as well as IP address values according to individual requirements. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

In some cases, cookies are used to simplify the ordering process by saving settings (e.g. remembering the content of a virtual shopping basket for a later visit to the website). If personal data are also processed by individual cookies set by us, the processing is carried out in accordance with Art. 6 (1) point b GDPR either for the execution of the contract or in accordance with Art. 6 (1) point f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
We work together with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). You will be informed individually and separately about the use of such cookies and the scope of the information collected in each case within the following sections.

Please note that you can set your browser in such a way that you are informed about the setting of cookies and you can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or generally. Each browser differs in the way it manages the cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You will find these for the respective browsers under the following links:

Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://www.mozilla.org/en-US/privacy/websites/#cookies
Google: https://support.google.com/accounts/answer/61416?co=GENIE.Platform%3DDesktop&hl=en
Safari: https://support.apple.com/en-gb/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Opera: http://help.opera.com/Windows/10.20/en/cookies.html

Please note that the functionality of our website may be limited if cookies are not accepted.

3.1. Web push notifications

We engage third-party providers to deliver updates to customers via web push notifications. These notifications include website updates and marketing purposes.

Our third-party provider Insider (Eerste Weteringplantsoen 8, 1017SK Amsterdam) collects personal data needed to perform their functions. To view the information collected and to view the compliance for push website notifications, please visit Insider's Privacy Policy.

If you have accepted to receive notifications from your browser and wish to unsubscribe from web push notifications, please follow your browser’s instructions to delist from push notifications you have consented to.

Information Collection and Use

Triumph via Insider may collect and process the following information:

• Contact information
• Location
• Purchase and visit history
• The version of operating system, browser, device, screen resolution
• Information gathered when you visited our website

Triumph use the above information for the following purposes:

• To send you information, news, and offers about our products.
• To remind you of any task which remains uncompleted (e.g., incomplete orders, abandoned baskets).
• To notify you when a product is back in stock or low in stock.
• To provide, update, maintain, improve, and protect our website, business, and services.
• To deliver relevant website content and online advertisements.

The legal basis for the data processing described above is formed by Art. 6 (1) (b) UK GDPR [EGC2] (essential requirement to perform data processing to fulfill the contract) and by Art. 6 (1) (f) GDPR (processing is necessary to pursue our legitimate interests).

3.2. Web Beacons

In addition to cookies, our website and emails may also contain "web beacons" (also known as "web bugs"). These are small, invisible images or pieces of code embedded within emails or web pages that allow us to collect information about how our content is received and interacted with.

Data collected through web beacons may include:

• Subjects and total count of newsletters sent
• Address files used
• Delivery status, such as which addresses successfully received or did not receive the newsletter
• Opening status and times, including information on addresses where the newsletter was opened
• Unsubscription details, including addresses removed from our mailing list
• Technical information such as time of access, IP address, browser type, and operating system
• Interaction data (e.g., which links were clicked within the email), for understanding user engagement with specific content.

We use this information for statistical analysis and to enhance the relevance of future marketing communication by adapting content to align more closely with your interests. Data is also synchronized across other systems, allowing us to refine our marketing strategies and improve customer experience on our platform.

You have the option to withdraw your consent at any moment. This can be done by modifying your cookie preferences, opting out of the newsletter, or altering your email settings to block HTML content, thereby disabling web beacons.

In the context of contacting us (e.g. via contact form or e-mail), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. These data are stored and used exclusively for the purpose of responding to your request or for establishing contact and for the associated technical administration. The legal basis for processing data is our legitimate interest in responding to your request in accordance with Art. 6 (1) point f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) point b GDPR. Your data will be deleted after final processing of your enquiry; this is the case if it can be inferred from the circumstances that the facts in question have been finally clarified, provided that there are no legal storage obligations to the contrary.

Pursuant to Art. 6 (1) point b GDPR, personal data will continue to be collected and processed if you provide them to us for the execution of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. It is possible to delete your customer account at any time. This can be done by sending a message to the above-mentioned address of the controller. We store and use the data provided by you for contract processing. After complete processing of the contract or deletion of your customer account, your data will be blocked in consideration of tax and commercial retention periods and deleted after expiry of these periods, unless you have expressly consented to further use of your data or a legally permitted further use of data has been reserved by our site, about which we will inform you accordingly below.

6.1 If you subscribe to our e-mail newsletter, we will send you regular information about our offers. The only mandatory information for sending the newsletter is your e-mail address. The indication of additional possible data is voluntary and is used to be able to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will not send you an e-mail newsletter, unless you have expressly confirmed to us that you agree to the sending of the newsletter. We will then send you a confirmation e-mail asking you to confirm that you wish to receive future newsletters by clicking on an appropriate link.

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 (1) point a GDPR. When you register for the newsletter, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration so that we can trace any possible misuse of your e-mail address at a later time. The data collected by us when registering for the newsletter will be used exclusively for the purpose of advertising by means of the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the responsible person named above. After your cancellation, your e-mail address will immediately be deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use data in excess thereof, which is permitted by law and about which we inform you in this declaration.

6.2. WhatsApp newsletters 

If you subscribe to our WhatsApp newsletters, we will send you regular information about our offers. The only mandatory information for sending the newsletter is your phone number. The indication of additional possible data is voluntary and is used to be able to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will not send you a WhatsApp newsletter, unless you have expressly confirmed to us that you agree to the sending of the newsletter. We will then send you a confirmation message, asking you to confirm that you wish to receive future newsletters by replying to said WhatsApp message with 'START'.

By replying 'START', you give us your consent to the use of your personal data in accordance with Art. 6 (1) point a GDPR. When you register for the newsletter, we store your phone number, consent status and its date. The data collected by us during the registration for the WhatsApp newsletter will be used exclusively for the purpose of advertising through the WhatsApp newsletter. You can unsubscribe from the WhatsApp newsletter at any time by replying 'STOP'. After your cancellation, your phone number will immediately be deleted from our WhatsApp newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use data beyond that, which is permitted by law and about which we inform you in this declaration.

6.3 Based on our legitimate interest in personalized direct mail, we reserve the right to store your first and last name, your postal address and - if we have received this additional information from you within the framework of the contractual relationship - your title, academic degree, year of birth and your professional, industry or business name in accordance with Art. 6 (1) point f GDPR and to use them for sending interesting offers and information on our products by letter post.

You can object to the storage and use of your data for this purpose at any time by sending an appropriate message to the controller.

7.1 What types of personal data do we collect?

When you sign up for the Triumph Loyalty Scheme, we ask you for personal information such as first name, last name, email address, home address or telephone number. We will also ask you for your date of birth so that we can send you a birthday voucher.

7.2 Processing purposes

We collect first and last names so that we can send you personalized messages about Triumph and our current and future brands. We also collect your email and/or home address and/or phone number so that we can communicate with you and provide you with relevant information about the loyalty scheme by post, email or SMS. This relates in particular, but not exclusively, to the following types of communication: Welcome message when joining the scheme; Notification when you reach a new membership level to inform you of your new status and new benefits; birthday voucher on your birthday; Reminders about vouchers or the expiration of a membership level so that you don't miss out on the use of possible benefits.

We use your registration information to create and administer your account, which includes calculating points and the membership level you are at based on your shopping activity. Based on the data collected and the points calculated, we offer you the corresponding services based on the points you have collected and the membership level you have reached. If you also give us your consent for marketing communication, as a newsletter subscriber you will receive relevant information about sales campaigns, seasonal news and product-related articles.

We also process the purchase information in connection with purchases made by you as a member of the loyalty scheme in the Triumph online shop or in Triumph retail stores. We process transaction data to calculate your points and provide you with the appropriate benefits to which you are entitled and are relevant to your membership level.

7.3 Recipients of your data

The data that you made available to us when registering is stored in the central loyalty system of our partner Merkle. The data is stored within the EU. The Merkle system allows us to manage and monitor the loyalty scheme and provide you with appropriate benefits to which you are entitled and which are relevant to your membership level.

We have concluded a data processing agreement with the partner and carry out data protection impact assessments to ensure that data storage and processing comply with applicable regulations.

We store your e-mail address in the “Mapp” system, which we use to send our newsletter and loyalty scheme-related e-mails (e.g. welcome message, notifications about your membership level, reminders about voucher expiry). This data is stored within the EU.

7.4 Transfer of data

Data from Merkle's central loyalty system is additionally shared with Ecom solution provider Arvato and Epos solution providers Diebold Nixdorf Inc. and Intercode SRL so that we can identify existing loyalty scheme members in our online and retail stores and link customer data with transactions to the online and retail channels. In Germany we share your data with business partners who operate under the Triumph brand. We have concluded a data processing agreement with the partners and carry out data protection impact assessments to ensure that data processing complies with the current regulations.

8.1 To process your order, we work together with the following service provider(s), which support us wholly or partially in the execution of concluded contracts. Triumph provides various payment methods. For this purpose, personal data may be transferred to payment service providers with whom we work.

The personal data collected by us will be passed on to the transport company commissioned with the delivery within the scope of contract processing, insofar as this is necessary for the delivery of the goods. We will pass on your payment data to the commissioned credit institution within the framework of payment processing, if this is necessary for payment handling. If payment service providers are used, we explicitly inform you of this below. The legal basis for the transfer of data is Art. 6 (1) point b GDPR.

8.2 Use of Payment Service Providers

- Adyen
We work with the payment service provider Adyen N.V., Simon Carmiggeltstraat 6-50, 1011 DJ Amsterdam (The Netherlands) to process payments. The processing of your transferred personal data is in accordance with Adyen's own privacy policy

- Paypal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by instalments" via PayPal, we transmit your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). The transfer takes place in accordance with Art. 6 (1) point b GDPR and only insofar as this is necessary for payment processing.
PayPal reserves the right to carry out credit checks for the payment methods credit card via PayPal, direct debit via PayPal or, if offered, "purchase on account" or "payment by installments" via PayPal. For this purpose, your payment data may be passed on to credit agencies on the basis of PayPal's legitimate interest in determining your solvency pursuant to Art. 6 (1) point f GDPR. PayPal uses the result of the credit assessment in relation to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report can contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on recognized scientific, mathematical-statistical methods. The calculation of the score values includes, but is not limited to, address data. For further information on data protection law, including the credit agencies used, please refer to PayPal's data protection declaration at: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full.
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

- Payment with Klarna:
In order to offer you Klarna’s payment methods, we will, in the checkout pass your personal data in the form of contact and order details to Klarna, in order for Klarna to assess whether you qualify for their payment methods and to tailor those payment methods for you. Your personal data transferred is processed in line with Klarna’s own privacy notice.

- Apple Pay
If you have any questions about how Apple Pay processes your data, you can click here.

In order to maintain and improve the quality of our products and services, we use the third-party provider Bazaarvoice, Inc., 10901 Stonelake Blvd, Austin, TX 78759, USA for the gathering of Rating and Review information about the products you have purchased. The submission of such ratings and reviews is voluntary. In order to ensure that the products and services have actually been purchased or received by the person submitting the review, personal data such as the product purchased (body type, size), name, e-mail, IP address and device fingerprint will be passed for this purpose to our service provider for processing. To view the information collected and how it is used, please visit https://bazaarvoice.com/legal/privacy-policy. Your review will be published on our website so that other customers can benefit from your experience.

Use of Youtube Videos

This website uses the Youtube embedding function for display and playback of videos offered by the provider Youtube, which belongs to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

To this end, the extended data protection mode is used to ensure, according to provider information, that user information will only be stored once the playback function of the video is started. When the playback of embedded YouTube videos is started, the provider sets "YouTube" cookies in order to collect information about user behavior. According to indications from Youtube, the use of those cookies is intended, among other things, to record video statistics, to improve user-friendliness and to avoid improper actions. If you are logged in to Google, your information will be directly associated with your account when you click on a video. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. Google saves your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation takes place in particular according to Art. 6 (1) point f GDPR on the basis of the legitimate interests of Google in the insertion of personalized advertising, market research and/or demand-oriented design of its website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

Regardless of whether the embedded video is played back, a connection to the Google network "double click" is established when visiting this website. This may trigger further data processing beyond our control.

Google LLC, based in the USA, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.

Further information on YouTube data protection can be found in the provider's data protection statement at: www.google.com/policies/privacy/

11.1 Google AdWords Conversion Tracking

This website uses the online advertising program "Google AdWords" and the conversion tracking within the framework of Google AdWords, Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). We use the program of Google Adwords to draw attention to our attractive offers with the help of advertising materials (so-called Google Adwords) on external websites. We can determine, in relation to the advertising campaigns data, how successful the individual advertising measures is. We are interested in showing you advertisements that are of interest to you. We want to make our website more interesting for you and to achieve a fair calculation of advertising costs.

The conversion tracking cookie is set on a user’s browser, if he clicks on an AdWords ad delivered by Google. Cookies are small text files that are stored on your computer system. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits a certain page of this website and if the cookie has not yet expired, Google and we will be able to recognize that the user clicked on the ad and was forwarded to this page. Each Google AdWords customer gets a different cookie. Thus, cookies cannot be traced via the website of AdWords customers. The information collected by the conversion cookies is used to provide aggregate conversion statistics to AdWords customers who have opted-in for conversion tracking. Customers are informed about the total number of users who clicked on the ad and were forwarded to a conversion tracking tag page. However, they do not get any information enabling them to identify users personally. If you do not want to participate in the tracking program, you can refuse the use of this program by deactivating the Google Conversion Tracking cookie via your Internet browser through the user settings. In this case, you will not be included in the conversion tracking statistics. We use Google Adwords on the basis of our legitimate interest in targeted advertising in accordance with Art. 6 (1) point f GDPR.

Google LLC, based in the United States, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.

For more information about Google's privacy policy, please visit: https://privacy.google.com/intl/en-GB/take-control.html?categories_activeEl=sign-in

You can permanently deactivate cookies for advertising preferences by blocking them via a respective setting of your browser software or by downloading and installing the browser plug-in, available under the following link:
https://support.google.com/ads/answer/7395996

Please note that certain functions of this website may not be used or only to a limited extent, if you have deactivated the use of cookies.

11.1.1 Google Enhanced Conversions and Consent Mode

This website uses Google Ads. Ads is an online advertising programme of Google Ireland Ltd, Gordon House, Barrow Street Dublin 4 IE ("Google"). As part of Google Ads, we use so-called extended conversion tracking. This requires consent, which you can object to.

Extended conversions are a function that supplements existing conversion tags. This allows conversion data collected on the website itself to be sent to Google in encrypted form.

When a conversion is carried out on a website, user data such as an email address is collected in most cases. This can be recorded and hashed in your conversion tracking tags. The data is encrypted with a one-way hash algorithm SHA256 for this purpose. The hash values of your user data are then transferred to Google and used to improve your conversion measurement.

If the cookie banner is accepted in consent mode, the tracking tags work as usual and record the assigned conversions and click information. In the case of cookie refusal, the consent mode only sends ping information. The so-called pings work without cookies. They may contain information such as the timestamp and the referral URL. No personally identifiable information is stored. In addition, Consent Mode can use the pings to compare the opt-in and opt-out rates. This information is then used to model conversions of users who have declined the cookie banner.

So if you click on an advert placed by Google, a cookie is set for extended conversion tracking. Cookies are small text files that the internet browser stores on the user's computer. These cookies lose their validity after 30 days and are not used to personally identify users.

Each Google Ads customer receives a different cookie. The cookies cannot be tracked via the websites of Ads customers. The information collected using the conversion cookie is used to generate conversion statistics for Ads customers who have opted for conversion tracking. For example, customers learn the total number of users who clicked on their advert and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. If you do not wish to participate in tracking, you can object to this use by easily deactivating the Google Conversion Tracking cookie via your Internet browser under user settings. You will then not be included in the conversion tracking statistics.

You can find more information about Google Ads and Google enhanced conversion tracking in Google's privacy policy: https://policies.google.com/privacy

12.1 Google (Universal) Analytics

Google Analytics 4 (GA4)
Our website uses the Google Analytics 4 (“Google Analytics 4”) service, which is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (collectively referred to as “Google”).
Google Analytics 4 uses JavaScript to read information on your device and cookies to store information on your device. This helps analyze your usage behavior and improve our website. Obtained information will be used to evaluate your use of the website and compile reports on website activity for the website operator. The data generated in this context can be transmitted by Google to a server in the USA for evaluation and storage.
Google Analytics 4 also uses machine learning for automated analysis and data enrichment. This is done for forecasting measurements on the future behavior of visitors based on structured event data, such as forecast turnover, the probability of purchase, and the probability of churn. The forecast metrics can also be used to forecast audiences. You can find out more about this at: https://support.google.com/analytics/answer/9846734.
Additionally, Google Analytics 4 models conversions if there is not enough data available to optimize the evaluation and reports. You can find information on this at: https://support.google.com/analytics/answer/10710245.
The data evaluations are automated with the help of machine learning or based on specific, individually defined criteria. You can find more about this at: https://support.google.com/analytics/answer/9443595.
We have made the following data protection settings for Google Analytics 4: IP address anonymization, deactivated cross-device and cross-site tracking (Google Signals), and disabled data sharing (especially Google products and services, benchmarking, technical support, account specialist).
The following data is processed by Google Analytics 4: IP address; user ID and device ID; referrer URL (previously visited page); pages accessed (date, time, URL, title, length of stay); downloaded files; clicked links to other websites; achievement of certain goals (conversions); technical information (operating system; browser type, version, and language; device type, brand, model, resolution, and other); approximate location of the internet service provider (country, region, city, based on an anonymized IP address).
Google Analytics 4 sets the following cookies for the specified purpose with the respective storage period: “_ga” (2 years) and “_gid” (24 hours) for recognition and differentiation of visitors through a user ID; “ga[GA4-ID]” (2 years) for keeping the information of the current session. For more information about Google Analytics 4 cookies, visit: https://support.google.com/analytics/answer/11397207?hl=en.
The legal basis for this data processing is your consent in accordance with Article 6 (1) (a) of the GDPR.
You can opt out from Google collecting data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
More information on how Google Analytics handles user data can be found in Google's privacy policy at: https://support.google.com/analytics/answer/6004245?hl=en.

12.2  fraud0

We, Triumph Intertrade AG, as the website provider use fraud0, a service provided by fraud0 GmbH, Sendlinger Straße 7, 80331 Munich, to detect invalid traffic and low-quality traffic and to prevent fraud on our website. By using the fraud0 service we can detect invalid traffic on our site, improve our online marketing efforts, clean marketing-relevant statistics and improve the usability of our website.

The data obtained from this service is only used for analysis and mitigation of invalid and low-quality traffic. fraud0 processes data on our behalf and is contractually committed to measures to ensure the confidentiality of the processed data. A data processing agreement with fraud0 has been concluded.

The fraud0 technology uses JavaScript pixels. During your website visit, the following data are collected by or through the use of this service:

Browser and device information, such as the device type and model, manufacturer, operating system type and version (e.g. iOS or Android), web browser type and version (e.g., Chrome or Safari), user-agent, flash version, location information, IP address, JavaScript support, pages visited, time zone, the network connection type, hardware-based identifiers (e.g. MAC address), referrer URL, number of fonts, fonts hash, number of plugins, plugins hash, screen height and width, colour depth, platform, whether the resolution has been tampered, language or OS, whether ad blocking is enabled, whether do not track is enabled.

End-user’s behaviour on Controller’s sites, information, such as click path, session ID, session start/stop time, timezone offset, date and time of visit, usage and behavioural data.

In our admin interface from fraud0 we receive a classification for invalid and low quality traffic, no personal data. There is no transfer of data to third parties - except as otherwise stated in fraud0's privacy policy. When invalid or low quality traffic is detected, we generate invalid audience lists using our tag manager to automatically de-targeted this traffic across all our major buying channels like GoogleAds, Facebook, DV360 etc. Data processing by fraud0 only continues until a classification is done

Tracking across websites does not happen at any time. We process data by using the fraud0 bot detection service based on Art. 6 lit. f GDPR. It is in the interest of the website operator to classify the users of its website as valid or as invalid traffic. First and foremost, we are preventing fraud (recital 47 of the GDPR), but we can also correct the website statistics by removing invalid traffic shares from our statistics. This will allow us to use our online marketing budget more efficiently and therefore continue to provide our services as usual. In case of using additional fraud0 services, we may process your data on another legal basis such as your consent, see further information: https://fraud0.com/de/privacy-policy/ .

The data processing is performed exclusively in the European Union and Data is stored on Google's servers within the European Union and will not be transferred to Google servers in the USA. The User may object to the processing by fraud0 at any time. The privacy policy and contact details of fraud0's data protection officer can be found at the following link https://fraud0.com/privacy-policy/ .

12.3  Snowplow Analytics

We use a web-tracking solution by Snowplow Analytics Limited, 32-38 Scrutton Street, London, UK (“Snowplow”). We use data collected by Snowplow exclusively for statistical purposes. In addition to this, we store a cookie in your browser in order to recognize returning users as such. The Snowplow cookie contains a date and a non-traceable, random combination number (“hash”), as well as the number of the current session.

Each time a page is requested, the following data is transmitted to and stored by Snowplow:

- Current timestamp
- URL of the target website (“target URL”) and the URL of the website you are coming from (“referrer URL”)
- Contents of the cookies
- IP address, which is anonymized before reaching the Snowplow server, and your browser port
- Name, version, and language of your browser and operating system as transmitted by the browser of the website visitor, i.e. you

The legal basis for the data processing described above is formed by Art. 6 (1) (b) GDPR (essential requirement to perform data processing to fulfil the contract).

Further information relating to this can be found in Snowplow’s privacy policy:
https://snowplowanalytics.com/privacy-policy/.

12.4  Amplitude

Amplitude is an analysis service of Amplitude Inc. (631 Howard Street, Suite 300, San Francisco, CA 94105, U.S.A.). This tool collects pseudonymised technical information, such as the type of your device (e.g., iPhone 7) and the operating system used (e.g., iOS 10.3), when you visit and use our website. In addition, Amplitude tracks location data (e.g. country) and internal data (e.g. language, session ID) that occur during your interactions with our website. These events may include information such as the duration of your visit to our website and the country from which you accessed it.

The purpose of collecting this information is to help us understand how users interact with our website and to improve the user experience. By analyzing the collected data, we can identify patterns, trends, and areas for improvement. This information enables us to optimize our website's performance, enhance its features, and provide a better service to our users.

The legal basis for the data processing described above is formed by Art. 6 (1) (b) GDPR (essential requirement to perform data processing to fulfil the contract).

Please refer to the privacy policy from Amplitude for further information about Amplitude:
https://amplitude.com/privacy.

Bing Ads (Microsoft Corporation)
This website uses the conversion tracking technology "Bing Ads" from Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). Microsoft Bing Ads will place a cookie on your computer if you access our website via a Microsoft Bing ad. Cookies are small text files that are stored on your computer system. These cookies lose their validity after 180 days. They are not meant for personal identification. If the user visits certain pages of this website and if the cookie has not yet expired, we and Microsoft are able to recognize that the user has clicked the ad and has been forwarded to this page (conversion page). If personal data are processed in this context, this is done in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in effective marketing.
The information collected via the conversion cookie is meant to compile conversion statistics, i.e. to register how many users have arrived at a conversion page after clicking the ad. We hereby learn the total number of users who clicked our ad and were forwarded to a conversion tracking tag page. However, we do not obtain any information by which users can be personally identified.
Microsoft Corporation, based in the United States, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.
If you do not wish to participate in tracking, you may object to this usage by easily deactivating the Bing Ads conversion tracking cookie via your internet browser and your user settings. In this case, you will not be included in the conversion tracking statistics. Alternatively, you can use the deactivation page for consumers from the EU http://www.youronlinechoices.com/uk/your-ad-choices/
to check whether Microsoft advertising cookies are set in your browser and, if so, to deactivate them.
For more information about Microsoft Bing Ads' privacy policy, please visit: https://privacy.microsoft.com/en-US/

Criteo (Criteo SA)
This website uses the technology of Criteo SA, 32 Rue Blanche, 75009 Paris, France ("Criteo"), to collect, store and evaluate information about the surfing behavior of website visitors in pseudonymized form using cookie text files. This is done on the basis of our legitimate interest in the insertion of personalized advertising pursuant to Art. 6 (1) (f) GDPR. Criteo analyses the navigation behavior with the help of algorithms and is subsequently able to display product recommendations in form of personalized advertising banners on other websites (so-called publishers). Under no circumstances, those data will be used to personally identify the visitor to this website. No other use or disclosure to third parties is envisaged.
If you want to object to the collection of data and the creation of pseudonymized user profiles for the future, you can obtain the following so-called opt-out cookie: Criteo Exercise (https://www.criteo.com/privacy/)
For more information about Criteo's technology, please view Criteo's Privacy Policy at: https://www.criteo.com/privacy/

Facebook Pixel
This website uses the "Facebook Pixel" of Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). This process is designed to evaluate the impact of Facebook ads for statistical and market research purposes and may help to optimize future advertising efforts.
Data collected shall remain anonymous and cannot be used to draw any conclusion about the identity of the user. However, those data are stored and processed by Facebook to enable a connection to the respective user profile and to allow Facebook to use those data for its own advertising purposes in accordance with the Facebook Privacy Policy (https://www.facebook.com/about/privacy/). You may allow Facebook and its partners to place ads on and outside of Facebook. A cookie may also be stored on your computer for these purposes. Facebook Inc., based in the United States, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.
If you want to disable the use of cookies on your computer, you can set your Internet browser so that cookies can no longer be stored on your computer in the future and/or cookies that have already been stored will be deleted. However, when disabling all cookies, some functions of our internet pages may no longer be able to be executed. You can also disable the use of cookies by third parties such as Facebook on the following Digital Advertising Alliance website: http://www.aboutads.info/choices/

Google AdWords Remarketing
Our website uses the functions of Google AdWords Remarketing, which enable us to advertise our website in Google search results, as well as on third-party websites. Provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). To this end, Google places a cookie in the browser of your terminal device, which automatically uses a pseudonymous cookie ID on the basis of pages you visited to allow interest-based advertising. Processing is based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6 (1) point f GDPR.
Any additional processing will only take place if you have agreed with Google that your Google Internet and app browsing history will be linked to your Google Account and information from your Google Account will be used for personalized ads you view on the web. If you are logged in to Google while visiting our website, Google will use your data in connection with Google Analytics data to create and define target group lists for cross-device remarketing. To this end, Google temporarily links your personal data with Google Analytics data to create target groups.
You can permanently disable the setting of cookies for advertising preferences. You may download and install the browser plug-in available at the following link: https://www.google.com/settings/ads/onweb/
Alternatively, you can contact the Digital Advertising Alliance at www.aboutads.info to find out how to set cookies and to make the relevant settings. Finally, you can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. If cookies are not accepted, the functionality of our website may be limited.
Google LLC, based in the United States, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.
Further information and the data protection regulations regarding advertising and Google can be viewed at:
http://www.google.com/policies/technologies/ads/

Custom Audiences
Our website also uses communication tools from Facebook (see further details also in § 8 of this policy) and Google, in particular Facebook Custom Audiences, Facebook Lookalike Audiences and Google Customer Match. A non-reversible and non-personal hash code is generated from your usage data, which can be transmitted to Facebook and Google for analysis and marketing purposes. For further information about the purpose and scope of data collection and the further processing and use of the data as well as your setting options for the protection of your privacy, please refer to the data protection guidelines of Facebook at https://en-gb.facebook.com/policy.php or of Google https://policies.google.com/privacy?hl=en. If you wish to object to the use of Facebook Website Custom Audiences, you can do so in the Facebook privacy settings. Google users can control the ads they see on Google services, including Customer Match ads, in their Google Ads Settings.

Trbo
trbo GmbH Römerstraße 6 (www.trbo.com) , 80801 München, collects and stores data from our website. This data is converted into pseudonym user profiles to offer you personalized customer benefits. For this purpose, cookies may be used in order to recognize your browser and to link it to your previous visit of our website. The user profiles are used to analyse the online behaviour of customers and to improve the user friendliness and personal customization of our website. Without your explicit consent, your personalized data will not be matched with the pseudonym user profiles. You can object to the collection and storage of data by trbo GmbH any time by clicking on the following link: https://track2.trbo.com/optout.php?redirect=http%3A%2F%2Fuk.triumph.com%2Fcompany-legal%2FContact_PrivacyPolicy.html

Pinterest-Tag Conversion-Tracking
This website uses the conversion tracking technology "Pinterest Tag" of Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest").
If you have reached our website from a pin on Pinterest, we set a cookie on your computer which interacts with an implemented "tag" in the form of a JavaScript code from Pinterest. Cookies are small text files that are stored on your terminal device. These cookies lose their validity after 180 days and are not used for personal identification.
If the user is forwarded from a pin to Pinterest on pages of this website and the cookie has not yet expired, the tag records certain user actions predefined by us and can track them (e.g. completed transactions, leads, search queries on the website, calls to product pages). When such an action is performed, your browser sends an HTTP request from the cookie to the Pinterest server via the Pinterest tag, which contains certain information about the action (including type of action, time, browser type of device).
Through this transmission, Pinterest can generate statistics about the usage behavior on our website after forwarding a Pinterest Pin, which serve to optimize our offer.
If personal user data is processed, this is done in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in the statistical evaluation of the success of product ads on Pinterest and the purchasing behavior of the user and thus serves to optimize our online offering.
However, we do not receive any information with which users can be personally identified.
If you do not wish to participate in tracking, you can object to this by deactivating the Pinterest Tag Conversion Tracking cookie in your Internet browser under User Settings. You will then not be included in the conversion tracking statistics. Alternatively, you can use the deactivation page for EU consumers at https://www.youronlinechoices.com/uk/your-ad-choices
Check whether Microsoft advertising cookies are set in your browser and deactivate them.
For more information about Pinterest's privacy policy, please visit the following Web address: https://policy.pinterest.com/en/privacy-policy
To the extent required by law, we have obtained your consent to the processing of your data as described in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time with effect for the future. In order to exercise your right of withdrawal, please follow the procedure described above.

RTB House
Triumph Intertrade AG processes certain data about the online activities of users on this website in order to carry out personalised advertising campaigns. This data may include Online identifiers (e.g. cookie ID / mobile advertising ID), information about specific pages visited, products viewed or placed in the shopping basket together with timestamps and purchased, as well as technical device and search programme details. Triumph Intertrade AG commissions RTB House GmbH, an advertising technology company, as a third-party subcontractor to carry out advertising campaigns and display personalised ads to users on the basis of this data. Insofar as this data is ‘personal data’ within the scope of the GDPR, Triumph Intertrade AG acts as the controller and RTB House GmbH as the processor. Further information on RTB House retargeting technology can be found at: https://www.rtbhouse.com/privacy-center.

14.1 Google Maps

Our website uses Google Maps (AP’I) of Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Maps is a web service for displaying interactive (country) maps in order to display geographical information visually. Using this service will show you our location and will make it easier for you to find us.

When you access the sub-pages that contain the Google Maps map, information about your use of our website (such as your IP address) is transmitted to and stored by Google on servers in the United States. This is regardless of whether Google provides a user account that you are logged in with or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google saves your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation takes place according to Art. 6 (1) point f GDPR on the basis of the legitimate interests of Google in the insertion of personalized advertising, market research and/or demand-oriented design of its website. You have the right to object to the creation of these user profiles. If you want to do so, you must contact Google to exercise this right.

Google LLC, based in the United States, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.

If you do not agree to the future transmission of your data to Google in the context of using Google Maps, you may completely deactivate the Google Maps web service by switching off the JavaScript application in your browser. In this case, Google Maps as well as the map display on this website cannot be used.
The Google terms of use can be found at: https://policies.google.com/terms?hl=en. The additional terms of use can be found at: https://www.google.com/intl/en-US_US/help/terms_maps.html.

You can find detailed information on data protection in connection with the use of Google Maps on Google's website ("Google Privacy Policy") at: https://policies.google.com/privacy?hl=en.

14.2 Friendly Captcha (Bot/Spam Protection).

We use the "Friendly Captcha" service on our website (www.friendlycaptcha.com).

This service is provided by Friendly Captcha GmbH, Am Anger 3-5, 82237 Woerthsee, Germany.

Friendly Captcha is a new type of privacy-friendly security solution to make it increasingly difficult for automated programs and scripts (so-called "bots") to use our website.

For this purpose, we have integrated a program code from Friendly Captcha into our website (e.g. for contact forms) so that the visitor's end device can establish a connection to Friendly Captcha's servers in order to receive a computational task from Friendly Captcha. The visitor's end device solves the computational task, which requires certain system resources, and sends the computational results to our web server. Our server contacts the Friendly Captcha server via an API and receives a response stating whether the puzzle was solved correctly by the end device. Depending on the result, we can apply security rules to requests via our website and thus, for example, further process or reject them.

The data is used exclusively for the protection against spam and bots as described above.

Friendly Captcha does not set or read cookies on the visitor's end device.

IP addresses are only stored in hashed (one-way encrypted) form and do not allow us and Friendly Captcha to draw any conclusions about an individual person.

If personal data is stored, this data will be deleted after 30 days.

The legal basis for the processing is our legitimate interest pursuant to Art. 6 (1) lit. f GDPR in protecting our website against abusive access by bots, i.e. spam protection and protection against attacks (e.g. mass requests).

Further information on data protection when using Friendly Captcha can be found at https://friendlycaptcha.com/legal/privacy-end-users/

14.3 Kameleoon SAS

We use the optimisation and web analysis service Kameleoon of Kameleoon SAS, 12 Rue de la Chaussée d’Antin 75009 Paris, France, for the purpose of personalising content and enhancing user experience.

The platform enables us to analyse user behaviour based on automated user segmentations, facilitating insights into how different user segments interact with our website. This activity, known as A/B testing, aids us in assessing visit frequency, landing page popularity, thereby allowing us to continually improve the content on our website.

For these analyses, Kameleoon relies on cookies and local storage which are associated with pseudonymised ID. This ensures that any information about your use of our online shop is transmitted in a pseudonymised form to a Kameleoon server in Germany (Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany).

The data will be deleted as soon as they are no longer needed for the processing purposes. By default, visitor data are kept in local storage for 365 days and analytics data for 2 years.

Personal data gathered may include browser information, IP address, screen resolution, time zone, operating system information, device type, geographic location, number of page views, usage data, date and time of visit, number of opened tabs, number of visits, referrer URL, URL, and the presence of an ad blocker.

The use of Kameleoon on our website is contigent on your consent, which you can provide through cookie settings, and can revoke at any time. The legal basis for data processing thus resides in Art. 6 para. 1 lit. a GDPR.

To learn more about Kameleoon, its privacy practices, and data protection guidelines, you can visit their privacy policy page at https://www.kameleoon.com/privacy-policy.

15.1 The applicable data protection law grants you comprehensive rights of data subjects (rights of information and intervention) vis-à-vis the data controller with regard to the processing of your personal data, about which we inform you below :

• Right of access by the data subject pursuant to Art. 15 GDPR
• Right to rectification pursuant to Art. 16 GDPR
• Right to erase (“right to be forgotten”) pursuant to Art. 17 GDPR
• Right to restriction of processing pursuant to Art. 18 GDPR
• Right to be informed pursuant to Art. 19 GDPR
• Right to data portability pursuant to Art. 20 GDPR
• Right to withdraw a given consent pursuant to Art. 7 (3) GDPR
• Right to lodge a complaint pursuant to Art. 77 GDPR

15.2 RIGHT TO OBJECT

IF, WITHIN THE FRAMEWORK OF A CONSIDERATION OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON THE GROUNDS THAT ARISE FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING REASONS WORTHY OF PROTECTION FOR PROCESSING WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA WHICH ARE USED FOR DIRECT MARKETING PURPOSES. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.

The duration of the storage of personal data is determined by the respective legal retention period (e.g. commercial and tax retention periods). After expiry of this period, the corresponding data will be routinely deleted, provided they are no longer necessary for the performance or initiation of the contract and/or there is no longer any legitimate interest on our part in the further storage.

As of: May 2023