With the following Data Protection Policy, we inform you about the scope and use of your personal data that we collect and process within the framework of our website. In addition, we explain for what purpose we collect and process the data and what rights you are entitled to under data protection law in accordance with the European General Data Protection Regulation (GDPR).

1. NAME AND CONTACT DETAILS OF THE DATA CONTROLLER AND THE DATA PROTECTION OFFICER

This privacy information applies to data processing by:

Whitecell Power AG
Verenastrasse 4b, CH-8832 Wollerau, Switzerland
Phone: +41 (0)56 484 55 33
E-Mail: info@whitecell-power.com
Responsible person: David L. Deck

The company’s Data Protection Officer can be reached at the above address or at info@whitecell-power.com.

2. COLLECTION AND STORAGE OF PERSONAL DATA AS WELL AS TYPE AND PURPOSE OF THEIR USE

2.1 WHEN VISITING THE WEBSITE

When you access our website https://www.whitecell-power.com/, the browser used on your device automatically sends information to our website’s server. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until it is automatically deleted:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the retrieved file
• Website from which the access takes place (referrer URL)
• Browser used and, if applicable, the operating system of your computer as well as the name of your access provider

The listed data will be processed by us for the following purposes:

• Ensuring a smooth connection to the website
• Ensuring a comfortable use of our website
• Evaluation of system security and stability
• For other administrative purposes

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes listed above. In no case do we use the collected data to draw conclusions about your person.

In addition, we use cookies, analysis services, and plug-ins when you visit our website.

2.1.1 COOKIES

We use cookies on our website. Cookies are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not cause damage to your device and do not contain viruses, trojans, or other malware.

Cookies store information related to the specific device used. However, this does not mean that we directly obtain knowledge of your identity.

The use of cookies serves on the one hand to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after leaving our site.

In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your device for a defined period. If you visit our site again to use our services, it is automatically recognized that you have already been with us and which entries and settings you have made so that you do not have to re-enter them.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you (see 2.1.2). These cookies enable us to automatically recognize that you have already visited us when you return to our site. These cookies are automatically deleted after a defined period.

The data processed by cookies are required for the aforementioned purposes to safeguard our legitimate interests and those of third parties according to Art. 6 para. 1 sentence 1 lit. f GDPR.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. Completely disabling cookies may mean that you cannot use all functions of our website.

2.1.2 ANALYSIS / TRACKING TOOLS

2.1.2.1 GOOGLE ANALYTICS

For the purpose of demand-oriented design and continuous optimization of our pages, we use Google Analytics, a web analysis service of Google Inc. (https://www.google.com/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). In this context, pseudonymized usage profiles are created and cookies (see 2.1.1) are used. The information generated by the cookie about your use of this website, such as:

• Browser type/version
• Operating system used
• Referrer URL (previously visited page)
• Hostname of the accessing computer (IP address)
• Time of the server request

is transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, compile reports on website activities, and provide other services related to website and internet usage for the purposes of market research and demand-oriented design of these internet pages. This information may also be transferred to third parties if required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized so that assignment is not possible (IP masking).

You can prevent the installation of cookies by selecting the appropriate settings on your browser software; however, please note that in this case, you may not be able to use all functions of this website to their full extent.

You can also prevent the collection of data generated by the cookie related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing a browser add-on.

Further information on data protection in connection with Google Analytics can be found in the Google Analytics Help.

2.1.3 PLUG-INS

2.1.3.1 YOUTUBE

Our website uses plug-ins from YouTube, operated by Google. Operator of the pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit one of our pages equipped with a YouTube plug-in, a connection to the YouTube servers is established. The YouTube server is informed which of our pages you have visited.

If you are logged into your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

Further information on how user data is handled can be found in YouTube’s privacy policy: https://www.google.de/intl/de/policies/privacy.

2.1.3.2 TWITTER

Plug-ins from Twitter Inc. are integrated into our website. The Twitter plug-ins (tweet button) can be recognized by the Twitter logo on our site. An overview of tweet buttons can be found here: https://about.twitter.com/resources/buttons.

When you access a page of our website that contains such a plug-in, a direct connection is established between your browser and the Twitter server. Twitter thereby receives the information that you have visited our site with your IP address. If you click the Twitter “tweet” button while logged into your Twitter account, you can link the content of our pages to your Twitter profile. This allows Twitter to associate the visit to our pages with your user account.

We point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data and their use by Twitter.

If you do not want Twitter to associate the visit to our pages, please log out of your Twitter account.

Further information can be found in the Twitter Privacy Policy.

2.1.3.3 INSTAGRAM

Our website also uses so-called social plug-ins (“plug-ins”) from Instagram, operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”).

The plug-ins are marked with an Instagram logo, for example in the form of an “Instagram camera”.

When you call up a page of our website that contains such a plug-in, your browser establishes a direct connection to Instagram’s servers. The content of the plug-in is transmitted by Instagram directly to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not logged into Instagram.

This information (including your IP address) is transmitted directly by your browser to an Instagram server in the USA and stored there. If you are logged into Instagram, Instagram can directly assign the visit to our website to your Instagram account. If you interact with the plug-ins, for example by pressing the “Instagram” button, this information is also transmitted directly to an Instagram server and stored there.

The information is also published on your Instagram account and displayed to your contacts.

If you do not want Instagram to directly associate the data collected via our website with your Instagram account, you must log out of Instagram before visiting our website.

Further information can be found in the Instagram Privacy Policy.

2.2 WHEN USING OUR CONTACT FORM

For inquiries of any kind, we offer you the opportunity to contact us via a form provided on the website. A valid email address as well as your first and last name are required so that we know who the inquiry is from and to be able to respond to it. The provision of further data is voluntary.

Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR based on your voluntarily given consent. The personal data collected by us for the use of the contact form will be automatically deleted after completion of your request.

2.3 WHEN SUBSCRIBING TO OUR NEWSLETTER

If you have expressly consented in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, we will use your email address to regularly send you our newsletter with press releases, ad-hoc announcements, financial figures, or event invitations. To receive the newsletter, it is sufficient to provide an email address. You can unsubscribe at any time by sending an email to info@whitecell-power.com. We do not advertise products, nor do we share your data with third parties.

3. DISCLOSURE OF DATA

Your personal data will not be transferred to third parties for purposes other than those listed below. We only pass on your personal data to third parties if:

• You have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR
• The disclosure is legally permissible and necessary according to Art. 6 para. 1 sentence 1 lit. b GDPR for the processing of contractual relationships with you (e.g., postal/parcel services, payment processing)
• There is a legal obligation for disclosure according to Art. 6 para. 1 sentence 1 lit. c GDPR
• The disclosure is necessary according to Art. 6 para. 1 sentence 1 lit. f GDPR for the establishment, exercise, or defense of legal claims, for the ongoing analysis and improvement of our services, or to maintain the attractiveness of our offers (e.g., customer list maintenance, database analysis, marketing activities, provision of modern technical solutions), and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data

If we use third-party services as processors in the sense of the GDPR, we maintain the necessary contractual relationships with them in accordance with Art. 28 GDPR.

A transfer of data to third parties in countries outside the EU (third countries) only takes place if and to the extent that you have consented to it or we have an overriding legitimate interest. If such a data transfer occurs, we ensure contractually that the processors there comply with a level of data protection equivalent to that of the European Union.

4. RIGHTS OF THE DATA SUBJECT

You have the right to:

• Request information about your personal data processed by us in accordance with Art. 15 GDPR
• Request the correction of inaccurate or completion of your personal data stored by us in accordance with Art. 16 GDPR
• Request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless processing is necessary for exercising freedom of expression and information, for fulfilling a legal obligation, for reasons of public interest, or for asserting, exercising, or defending legal claims
• Request the restriction of the processing of your personal data in accordance with Art. 18 GDPR if the accuracy of the data is contested, the processing is unlawful but you oppose its deletion, or we no longer need the data but you require it for legal claims, or you object to the processing in accordance with Art. 21 GDPR
• Receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format, or to request the transmission to another controller in accordance with Art. 20 GDPR
• Withdraw your consent once given in accordance with Art. 7 para. 3 GDPR at any time, which means we will no longer continue the data processing based on this consent in the future
• Lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR, usually with the supervisory authority of your habitual residence, place of work, or our company headquarters

5. RIGHT TO OBJECT

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR if there are reasons that arise from your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right to object which will be implemented by us without the need to specify a particular situation.

If you wish to exercise your right of withdrawal or objection, an email to info@whitecell-power.com is sufficient.

6. DATA SECURITY

We use the widespread SSL (Secure Socket Layer) procedure during your visit to the website in connection with the highest level of encryption supported by your browser. Usually, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock icon in the lower status bar of your browser.

We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties (e.g., firewall system). Our security measures are continuously improved in line with technological developments.

7. UPDATES AND CHANGES TO THIS PRIVACY POLICY

This Privacy Policy is currently valid and has the status of October 2019.

Due to the further development of our website and offers or due to changed legal or official requirements, it may become necessary to change this Privacy Policy. The current Privacy Policy can be accessed and printed out by you at any time on the website at https://www.whitecell-power.com.