The following data protection information is intended to explain to you in an understandable, transparent and clear manner how your personal data is processed by TOOLS FOR LIFE Foundation (hereinafter "TOOLS FOR LIFE", "we", or "us").

Person responsible

The responsible party within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is the

TOOLS FOR LIFE Foundation

Spessartstraße 2-4

65779 Kelkheim

Data protection officer:

If you have any questions about this data protection declaration or other data protection issues, please contact our data protection officer:

ROTHENBERGER AG

Data Protection Officer

Spessartstraße 2-4

65779 Kelkheim

e-mail: dataprotection@rothenberger.com

What data is processed on our website?

Collection of general information when visiting our website

When you visit our website, we collect data that is technically necessary to display this website to you. This is personal data that is automatically transmitted to our server by your browser, such as your IP address, the type of web browser, the operating system used, the domain name of your Internet service provider and the like.

This personal data is processed for the following purposes:

• Ensuring a smooth connection of the website,

• Ensuring a smooth use of our website,

• Evaluating system security and stability, and to optimize our website.

This data is processed in accordance with Art. 6 (1) lit. 1 f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website.

We do not use your data to draw conclusions about your person. Information of this kind will be statistically evaluated anonymously by us, if necessary, in order to optimize our website and the technology behind it.

Online donations

Scope and purpose of data processing, legal basis

When you make a donation, we collect and use your personal data only to the extent necessary to fulfill and process your donation and, if applicable, to process your inquiries. The provision of data is necessary for the processing of the donation. Failure to provide this data will result in your donation not being received. The processing is carried out within the framework of the fulfillment of a contract in accordance with Art. 6 (1) lit. b GDPR and is necessary for the processing of the donation. Your data will not be passed on to third parties without your express consent. Excluded from this are our service partners, whom we need to process the donation, or service providers whom we use within the framework of order processing. In addition to the recipients named in the respective clauses of this privacy policy, these include, for example, recipients in the following categories: payment service providers, service providers for sending donation receipts. In all cases, we strictly adhere to the legal requirements. The scope of data transfer is limited to a minimum.

Recipient

If you choose PayPal as your payment method for your online donation, we will transfer personal data required for processing the payment to PayPal. The provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

Further information on data protection at PayPal can be found here: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Application Portal

You can apply for funding from our foundation online via our application portal. Your application will be forwarded to Optimy SA and will, of course, be treated confidentially. We will use your information exclusively for the purpose of processing your application and will not pass it on to third parties. A data processing agreement has been concluded with Optimy SA. The provider is Optimy SA, Boulevard du Souverain 36, 1170 Brussels, Belgium.

Newsletter

Google reCAPTCHA

We use the Google service reCaptcha to determine whether a human or a computer is making a particular entry in our contact or newsletter form. Google uses the following data to check whether you are a human or a computer: IP address of the device used, the website you are visiting and on which the captcha is integrated, the date and duration of the visit, the identification data of the browser and operating system type used, Google account if you are logged in to Google, mouse movements on the reCaptcha areas, and tasks in which you must identify images. The legal basis for the data processing described is Art. 6 (1) lit. f of the General Data Protection Regulation. We have a legitimate interest in this data processing in order to ensure the security of our website and to protect ourselves from automated entries (attacks).

Your data will be processed for the purpose of delivering the subscribed newsletter by email. We require a valid email address to send you the newsletter. We use the “double opt-in” procedure to verify that a registration is actually made by the owner of an email address. To do this, we log the newsletter subscription, the sending of a confirmation email, and the receipt of the requested reply.

This data is processed in accordance with Art. 6 (1) (a) GDPR on the basis of your express consent.

You can revoke your consent to the storage of your personal data and its use for sending newsletters at any time with future effect. Each newsletter contains a link for this purpose. You can also notify us of your revocation using the contact details provided at the end of this privacy policy.

How long do we store your data?

All data that you provide to us will be deleted as soon as it is no longer required for the purpose for which it was collected. For data used to provide the website, this is generally the case when the respective session has ended.

In the case of data storage in log files, this is the case after 14 days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are anonymized so that it is no longer possible to assign them to the calling client.

Who do we share your data with?

The protection of your data is important to us. For this reason, we do not sell, exchange, or rent your data. For certain technical data processing processes, we use the support of external service providers who act as processors for us in accordance with Art. 28 GDPR. They are bound to strict confidentiality and only process data on our behalf and in accordance with our instructions.

Except in the cases explained in this privacy policy, we will only disclose data to third parties without your express consent if we are required to do so by law or by an official or court order.

What cookies do we use?

Like many other websites, we also use so-called “cookies.” Cookies are small text files that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. These cookies help us to make our website more user-friendly, effective, and secure.

Some cookies are “session cookies.” These cookies are automatically deleted at the end of your browser session. Other cookies, however, remain on your device until you delete them yourself. These cookies help us to recognize you when you return to our website.

With a modern web browser, you can monitor, restrict, or prevent the setting of cookies. Many web browsers can be configured so that cookies are automatically deleted when the program is closed. Deactivating cookies may result in limited functionality of our website.

Technically necessary Cookies

We use these cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change, e.g. to transfer language settings.

The processing of technically necessary cookies is carried out in accordance with Art. 6 (1) lit. F GDPR on the basis of our legitimate interest in a user-friendly design of our website.

Cookies that are not technically necessary

We also use cookies to tailor the content on our website to the interests of our visitors or to improve it in general based on statistical evaluations. Please refer to the cookie settings in the cookie banner to see which providers set cookies.

The processing of cookies that are not technically necessary is carried out in accordance with your consent pursuant to Art. 6 (1) (a) GDPR. You can revoke this consent at any time via our cookie banner.

Use of Google Analytics

If you have given your consent, this website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter: “Google”). Google Analytics uses “cookies,” which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, due to the activation of IP anonymization on these web pages, your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

For more information on terms of use and data protection, please visit https://www.google.com/analytics/terms/de.html and https://policies.google.com/?hl=de.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage to the website operator.

The data sent by us and linked to cookies, user IDs (e.g., user ID) or advertising IDs will be automatically deleted after 14 months. Data that has reached its retention period is automatically deleted once a month.

You can also prevent the storage of cookies by adjusting your browser software settings accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: Browser add-on to deactivate Google Analytics.

Use of Google Tag Manager

We use a service called Google Tag Manager from Google. “Google” is a group of companies consisting of Google Ireland Ltd. (service provider), Gordon House, Barrow Street, Dublin 4, Ireland, Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and other companies affiliated with Google LLC.

We have concluded a data processing agreement with Google. Google Tag Manager is an auxiliary service and only processes personal data for technically necessary purposes. Google Tag Manager ensures that other components are loaded, which in turn may collect data. Google Tag Manager does not access this data.

Further information about Google Tag Manager can be found in Google's privacy policy.

Please note that US authorities, such as intelligence agencies, may be able to access personal data that is inevitably exchanged with Google when this service is integrated due to US laws such as the Cloud Act.

Use of the Meta Pixel

We use meta pixels on our website to analyze user behavior and improve the performance of our website. Meta pixels are small graphics that enable us to collect information about user interactions with our website. This information helps us measure the effectiveness of our content and continuously optimize our online offering. We use this data exclusively for analysis and optimization purposes and do not pass it on to third parties. You can disable the use of meta pixels in your browser settings if you do not want your activities on our website to be tracked.

Embedded YouTube videos

This online offering uses the YouTube video platform, which is operated by YouTube, LLC, 901 Cherry Ave. San Bruno, CA 94066, USA (“YouTube”). YouTube is a platform that enables the playback of audio and video files.

When you visit a corresponding page of our website, the embedded YouTube player establishes a connection to YouTube so that the video or audio file can be transmitted and played back. In doing so, data is also transferred to YouTube as the responsible party. We are not responsible for the processing of this data by YouTube.

For more information on the scope and purpose of the data collected, the further processing and use of the data by YouTube, your rights, and the privacy options available to you, please refer to YouTube's privacy policy.

Social Plugins

We use social plugins from various social networks in our online offering. When you use these plugins, your internet browser establishes a direct connection to the servers of the respective social network. This provides the respective provider with information that your internet browser has accessed the corresponding page of our online offering, even if you do not have a user account with the provider or are not currently logged in. Log files (including the IP address) are transmitted directly from your Internet browser to a server of the respective provider and may be stored there. The provider or its server may be located outside the EU or the EEA (e.g., in the USA).

The plugins are independent extensions of the social network providers. We therefore have no influence on the extent of the data collected and stored by the social network providers via the plugins.

For the purpose and scope of the collection, further processing, and use of the data by the social network, as well as your rights in this regard and setting options for protecting your privacy, please refer to the privacy policy of the respective social network.

If you do not want social network providers to receive data about this online offering and possibly store or reuse it, you should not use the respective plugins.

SSL Encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g., SSL) via HTTPS.

What are your rights?

You have the following rights with regard to your personal data vis-à-vis TOOLS FOR LIFE:

• Information about your data stored by us and its processing (Art. 15 GDPR),

• Correction of incorrect personal data (Art. 16 GDPR),

• Deletion of your data stored by us (Art. 17 GDPR),

• Restriction of data processing if we are not yet permitted to delete your data due to legal obligations (Art. 18 GDPR),

• Objection to the processing of your data by us (Art. 21 GDPR), and

• Data portability, provided that you have consented to data processing or have concluded a contract with us (Art. 20 GDPR).

You can assert all of the above-described rights of data subjects against TOOLS FOR LIFE by sending your specific request to the following contact details:

ROTHENBERGER AG

data protection officer

Spessartstraße 2-4

65779 Kelkheim

e-mail: dataprotection@rothenberger.com

Right to lodge a complaint with a data protection supervisory authority

You can lodge a complaint with a supervisory authority at any time, e.g., with the competent supervisory authority of the state in which you reside or with the authority responsible for us as the controller.

A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

What specific right of objection do you have?

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(f) GDPR; this also applies to profiling based on this provision within the meaning of Article 4(4) GDPR.

If you object, we will no longer process your personal data unless:

• we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or

• the processing serves to assert, exercise, or defend legal claims.

The objection can be made informally and should be addressed to our data protection officer if possible:

ROTHENBERGER AG

data protection officer

Spessartstraße 2-4

65779 Kelkheim

e-mail: dataprotection@rothenberger.com

Changes to our Privacy Policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.