We, the "Alltrucks GmbH & Co. KG" as responsible entity in the sense of the following data security explanation, we are pleased about your attendance on our web page and about your interest in our enterprise. We know that the careful handling of your personal information is important to you and we protect your data.

In the following data protection declaration we would like to inform you in particular about the collection and processing of your personal data by us when using our websites as well as about your rights. This data protection declaration refers to the following ALLTRUCKS GmbH websites & Co. KG:

www.alltrucks.com

§ 1 Person in charge

The "Responsible Entity" within the meaning of Art. 4 No. 7 DS-GVO is

Alltrucks GmbH & Co. KG

Homer Smyrliadis

Perchtinger Str. 6, 81379 Munich

E-Mail: info@alltrucks.com

Phone: +49 (0)89 4622466 - 0

Fax: +49 (0)89 4622466 - 86

(hereinafter referred to as "ALLTRUCKS").

§ 2 Data protection officer

Data protection officer within the meaning of Art. 37 DS-GVO, § 38 BDSG is

Peter Christian Felst

Mazars GmbH & Co. KG WPG/StBG

Domstraße 15 | 20095 Hamburg | Deutschland

Email: data.protection@alltrucks.com

Our external data protection officer is properly involved at an early stage in all matters relating to the protection of personal data. Working towards compliance with all relevant data protection regulations, monitoring certain processes such as data protection impact assessment, sensitising and training employees and cooperating with the supervisory authority are among the core tasks of the data protection officer.

§ 3 Information on the collection and processing of personal data

Personal data will only be collected and processed by us if and to the extent permitted by the applicable regulations for the protection of personal data or if you have given us your consent.

"Personal data" means any information relating to an identified or identifiable natural person. This includes in particular name, address, e-mail address, gender, date of birth, telephone number, age and bank details. We use further terms of this data protection declaration in accordance with the definitions laid down in Art. 4 DS-GVO.

1. Standard surveys when visiting our website

Visiting our website is basically possible without registration or login. Nevertheless, we collect data from every visitor as standard, which is transmitted from your browser to our server in order to make it technically possible to call up our site. For reasons of security and stability, our web server automatically logs access to our website (legal basis for this is Art. 6 Para. 1 Sentence 1 lit. f) DS-GVO).

The following are collected

• IP address of the requesting computer,
• Date and time of the server request,
• File name and the URL/address you accessed,
• Access status/http status code
• transferred data volume
• Referrer URL (the previously visited website)
• Browser
• Operating system and its interface
• Language and version of the browser software.

This information is stored separately from any other data that you may have transmitted to us, in particular when using one of our online services. The data is not linked with these other data. Your information is evaluated for statistical purposes and stored on our servers for a period of 7 days.

2. Collection and processing of further personal data

The provision of further (additional) personal data is voluntary. In principle, it has no negative effect on you if you do not provide us with any further personal data.

However, with respect to certain services that we provide through our websites, we may need to collect certain personal information. For example, to process a request from you or to send you documents. In these cases, we cannot provide the service you have requested without recourse to the personal data required for this purpose.

(a) registration

We offer online services for our contractual partners. For this purpose, our contractual partners must register and name employees who receive online access.

Within the scope of registration, the required mandatory data will be communicated to the users and processed on the basis of Art. 6 para. 1 lit. b DSGVO for the purpose of providing the user account. The account can be customized by assigning it to one or more user categories (e.g. customer, blogger, author, publisher, service provider) that allow different access and design rights.

The processed data includes in particular the login information (name, password and an e-mail address). The data entered during registration will be used for the purposes of using the user account and its purpose. Within the scope of the registration, the users will be informed of any further mandatory information that may be required. User accounts are not public and cannot be indexed by search engines.

Users may be informed by e-mail of information relevant to their user account, such as technical changes. If users have terminated their user account, their data will be deleted with regard to the user account, subject to a statutory retention obligation. It is the responsibility of the user to secure his data before the end of the contract. We reserve the right to irretrievably delete all user data stored during the term of the contract at any time.

Within the scope of using our registration and login functions as well as the use of the user account, we store the IP address and the time of the respective user action. Storage is based on our legitimate interests and also serves to protect users from misuse. This data will only be passed on to third parties if it is necessary to pursue our claims or if there is a legal obligation to do so.

The IP addresses are anonymized or deleted after 7 days at the latest.

b) Direct marketing

We regularly inform our customers about new offers from our company by sending them corresponding letters by e-mail and by post (hereinafter "Newsletter"), in particular the extension of the selection of offers and the further development of existing offers. With the conclusion of the contract you agree with the receipt and the procedures described below.

Content of the newsletter: We send newsletters, e-mails and other notifications in electronic or postal form with promotional information only with the consent of the recipient or a legal permission.

Registration: The registration to the newsletter takes place with contract conclusion, since this newsletter is part of our contractual achievements. The storage of the data required for dispatch is therefore covered by the contractual provisions (Art. 6 Abs. 1 lit. c) DS-GVO).

Cancellation/Revocation of permission: The receipt of our newsletter can nevertheless be cancelled or the consent revoked at any time. You will find a link to cancel the newsletter at the end of each electronic newsletter.

We may store the unsubscribed email addresses for up to three years based on our legitimate interests before deleting them to provide evidence of prior consent. The processing of these data is limited to the purpose of a possible defense against claims. An individual deletion request is possible at any time, provided that the former existence of a consent is confirmed at the same time.

Distribution: The distribution of the newsletter and the associated performance measurement are based on the consent of the recipients (Art. 6 para. 1 lit. a, Art. 7 DSGVO in conjunction with § 7 para. 2 no. 3 UWG) or, if consent is not required, on our legitimate interests in direct marketing (Art. 6 para. 1 as per DSGVO in conjunction with § 7 para. 3 UWG).

§ 4 Duration of storage of personal data

The duration of the storage of your personal data depends on the respective purpose of its collection and is indicated there in each case. In principle, we always endeavour to limit the collection and processing to a reasonable minimum (data economy) and not to store it longer than required by law or only with your express consent.

§ 5 Cookies

In some areas of our website we use so-called cookies in order to make our services and website functions available to you as individually and conveniently as possible. Cookies are files that a web server can generate on your computer by the browser. Cookies are used to uniquely identify your computer for a period of time. Cookies cannot execute programs or transmit viruses to your computer. You can set your browser so that it informs you about the placement of cookies. This makes the use of cookies transparent for you.

The legal basis for the storage of cookies is Art. 6 para. 1 sentence 1 lit. f) DS-GVO.

We use "Transient Cookies" and "Persistent Cookies" and "Flash Cookies" on our website and would like to inform you about their scope and functionality below.

1."Transient Cookies" are cookies that allow you to move quickly, easily and efficiently through multiple websites without having to re-authenticate each time. The “transient cookies" include in particular the so-called "session cookies", which store a session ID with which various requests from your browser can be assigned to the shared session. This allows your computer to be recognised when you return to our website. "Transient cookies" are automatically deleted as soon as you close your browser.

2.”Persistent Cookies" lead to a faster and more comfortable access to web pages, as certain default settings are already set when the web page is called up again. "Persistent cookies" are stored for a limited time even after you close your browser. They are automatically deleted after a specified period, which may vary depending on the cookie.

3.If you do not agree with the use of cookies by us, you can deactivate the storage of cookies in the settings of your browser for our site or generally. You can find information on this in the help function of your browser. You also have the option of deleting cookies stored in your browser settings at any time.

§ 6 Data backup and data processing location

All our systems in which personal data is stored are password protected and only accessible to a limited number of people. The processing and use of the data takes place exclusively in the territory of the Federal Republic of Germany, in a member state of the European Union or in another contracting state of the Agreement on the European Economic Area.

§ 7 Data transfer

We do not pass on personal data to third parties unless we are legally entitled to do so or you have given us your consent to do so (in particular to transfer the application documents to third companies).

A transfer to state institutions and/or authorities will only take place if we are obliged to do so by mandatory statutory regulations or official or court orders.

We only pass on data to third parties to the extent necessary for the provision of the service within the legally prescribed framework or on the basis of an order data processing contract. In our case, these are not only printing and shipping service providers but also the shareholders of Alltrucks and, within the framework of the further development of our products, also cooperation partners. In the latter case, the data will only be passed on in pseudonymised form. This means that an assignment to a specific person is not possible for these third parties.

§ 8 links to Google Maps

On our website we use Google Maps to show you locations, such as our company location, also visually and to allow you a comfortable route planning. Google Maps is an interactive map service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

In order to make the use of Google Maps as data efficient as possible, we offer the map function of Google Maps only via a link to the website of Google Maps. This means that no data about you will be transmitted to Google when you visit our website unless you click on the Google Maps link. As soon as you click on our link to Google Maps, you will be redirected to the website of Google Maps. There, personal data may also be transmitted to Google. We have no influence whatsoever on this, possibly personal data transmission and data collection to/from Google. Likewise, we have no knowledge of the individual purposes of these data processing operations or their scope and storage duration. Whether Google carries out deletions, assigns the collected data to a user profile or sets anonymisations is also unknown to us and is also not within our sphere of influence.

The purpose and scope of the data collection and the further processing and use of the data by Google as well as your rights in this regard and setting options for the protection of your privacy can be found in the respective data protection provisions of Google (https://policies.google.com/privacy?hl=de).

Due to the location of Google in the USA, data transmission to the USA is also possible. Google has submitted to the EU-US Privacy Shield in order to comply with data protection standards. You can find more information on this under https://www.privacyshield.gov/EU-US-Framework.

Please note that by clicking on further links to Google Maps, you leave the protection and responsibility area of our website and, by activating the link, trigger the collection and processing of data by Google that is not subject to our control.

§ 9 Google Analytics

We use Google Analytics, a web analysis service from Google (see §10), as a further online advertising tool. Google Analytics uses cookies (see § 6 for the term) which generate information about your use of this website (including your IP address) and which are transmitted to and stored by Google on servers in the United States. Google uses this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage.

Google may disclose this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google assures you that your IP address will not be associated with any other data stored by Google. We have no influence whatsoever on the extent and further use of the data generated, which are processed by Google within the scope of the evaluation.

You can prevent the use of cookies by adjusting the settings of your browser accordingly. Please note, however, that in this case you will not be able to use all the functions of this website to their full extent. By using this website, you agree that Google may use data in the manner and for the purposes set out above.

You can find detailed information about data protection at Google at http://www.google.com/intl/de/policies/privacy  and under  https://services.google.com/sitestats/de.html. Google has joined the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework) and therefore guarantees compliance with European data protection standards.

§ 10 Surveys

For surveys among our users we use the special service "SurveyMonkey" offered by SurveyMonkey Europe UC, 2 Shelbourne Buildings, Second Floor, Shelbourne Rd, Ballsbridge Dublin 4, Ireland,(dpo@surveymonkey.com).

For this purpose, personal data of the respondents are collected on the basis of the legitimate interest in an analysis for the improvement of our offers (Art. 6 Abs. 1 lit. f) DS-GVO).

These data are processed by Surveymonkey in accordance with its privacy policy

(https://www.surveymonkey.de/mp/legal/privacy-policy/).

§ 11 Links to social networks via "Social-Media-Buttons"

We have integrated various "Social-Media-Buttons" into our website, especially those of Facebook, Twitter, LinkedIn, Xing and Instagram. With the use of "Social-Media-Buttons" we pursue the goal to make our website more user-friendly.

We have integrated the "Social-Media-Buttons" into our website as links. If you click on one of these buttons, you will reach our online presence in the relevant network. If you do not click on any of our social media buttons, no data will be transmitted to the operators of these networks when you visit our website. Your information will only be transmitted to the respective operator of the (social) network if you click on one of our "Social-Media-Buttons" and are thereby forwarded to our online presence in the respective network.

Please note that, depending on the provider of the plug-in, data can also be transmitted to the USA. However, all of the aforementioned providers have submitted to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework), which serves to promote data protection.

We have no influence whatsoever on the collection and processing of your personal data by the respective providers of the plug-ins. Likewise, we have no knowledge of the individual purposes of these data processing operations or their scope and storage duration. Whether the plug-in provider makes deletions or anonymises is not known to us either and is not within our sphere of influence.

If you are logged in with the provider via a user profile or if you log in later, the operator can assign the visit to our website and the action you took by activating the plug-in (e.g. the share / "sharing") to your user profile with the provider. Even if you do not have a user profile with the provider of the respective plug-in, it is still possible for the provider to record and save your IP address or register your visit with us via cookies.

Purpose and scope of data collection and the further processing and use of data by the operators as well as your rights and setting options in this regard to protect your privacy can be found in the respective data protection provisions of the operators.

Below you will find the addresses of the providers of Facebook, Twitter, Xing, LinkedIn and Google as well as the associated data protection information for the use of the individual services.

• Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA

Privacy Notice:

https://www.facebook.com/policy.php

and

https://www.facebook.com/help/186325668085084

• Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA

Privacy Notice:

https://twitter.com/privacy?lang=de

• XING SE, Dammtorstrasse 30, 20354 Hamburg, Deutschland

https://privacy.xing.com/de/datenschutzerklaerung

• LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

Privacy Notice:

https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy

• Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Privacy notice:

https://policies.google.com/privacy?hl=de

Please note that by clicking on one of the social media plug-ins, you leave the protection and responsibility area of our website and, by activating the plug-in, trigger the data collection and processing of the individual providers of the plug-ins that are not subject to our control.

§ 12 Right to information, correction, deletion, limitation of processing, data transferability

You have the following rights against us regarding your personal data:

• Right to information (Art. 15 DS-GVO),
• Right to correction or deletion (Art. 16 and 17 DS-GVO),
• Right to restrict data processing (Art. 18 DS-GVO),
• Right to transfer data (Art. 20 DS-GVO).

§ 13 Right of complaint to the data protection supervisory authority

If you are of the opinion that our company does not process your personal data in accordance with the requirements described herein and/or applicable data protection laws, you can register a complaint to the data protection supervisory authority pursuant to Art. 13 Para. 2 lit. d) DS-GVO at any time about the processing of your personal data by us.

§ 14 Right of objection

You have in accordance with Art. 21 (1) DS-GVO the right to object at any time to the processing of your personal data on the basis of Art. 6 (1) sentence 1 lit. e) or lit. f) for reasons arising from your particular situation. You can address your objection to the person responsible (see § 2) or to our data protection officer (see § 3). In the event of objection, we will no longer use your personal data for the purposes in question and will delete it from our systems unless we can prove compelling reasons for processing worthy of protection which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

25.05.2018