Data protection provisions

1) Introduction and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about how we handle
your personal data when you use our website. Personal data is all data
with which you can be personally identified.

1.2 The controller in charge of data processing on this website, within
the meaning of the General Data Protection Regulation (GDPR), is
IXCHANGE.ME IDEAS & PIONEERS GMBH (haftungsbeschränkt),
Kellergasse 22, 74223 Flein, Deutschland, +49 (0) 71312030328, E-Mail:
info@ixchange.me . The controller of personal data is the natural or
legal person who alone or jointly with others determines the purposes
and means of the processing of personal data.

2) Data collection when visiting our website

2.1 When you use our website for information purposes only, i.e. if you
do not register or otherwise provide us with information, we only
collect the data that your browser transmits to the site server
(so-called “server log files”). When you visit our website, we
collect the following data, which is technically necessary for us to
display the website to you:

– Our visited website
– Date and time at the time of access
– Amount of data sent in bytes:
– Source/reference from which you reached the page
– Browser used
– Operating system used
– IP address used (if applicable: in anonymized form)

Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR
on the basis of our legitimate interest in improving the stability and
functionality of our website. The data will not be passed on or used in
any other way. However, we reserve the right to check the server log
files retrospectively if there are concrete indications of unlawful
use.

2.2 This website uses SSL or TLS encryption for security reasons and to
protect the transmission of personal data and other confidential content
(e.g. orders or inquiries to the controller). You can recognize an
encrypted connection by the character string “https://” and
the lock symbol in your browser line.

3) Cookies

In order to make visiting our website attractive and to enable the use
of certain functions, we use cookies, i.e. small text files that are
stored on your end device. Some of these cookies are automatically
deleted after you close your browser (so-called “session
cookies”), while others remain on your device for longer and enable
page settings to be saved (so-called “persistent cookies”). In
the latter case, you can find the storage period in the cookie settings
overview of your web browser.

If personal data is also processed by individual cookies used by us,
the processing is carried out in accordance with Art. 6 para. 1 lit. b
GDPR either for the execution of the contract, in accordance with Art. 6
para. 1 lit. a GDPR in the case of consent given or in accordance with
Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the
best possible functionality of the website and a customer-friendly and
effective design of the page visit.

You can set your browser so that you are informed about the setting of
cookies and can decide individually whether to accept them or to exclude
the acceptance of cookies for certain cases or in general.

Please note that if you do not accept cookies, the functionality of our
website may be restricted.

4) Making contact

4.1 Calendly
We use the services of the following provider to provide an online appointment booking function:
Calendly, LLC, BB&T Tower, 271 17th St
NW, Atlanta, GA 30363, USA

For the purpose of making appointments, first and last name and e-mail
address (and telephone number if a telephone appointment is requested)
are collected in accordance with Art. 6 para. 1 lit. b GDPR and
transmitted to the provider in accordance with Art. 6 para. 1 lit. f
GDPR on the basis of our legitimate interest in effective customer
management and efficient appointment management and stored there for the
purpose of organizing appointments.

After the appointment has been held or after the agreed appointment
period has expired, your data will be deleted by the provider.

We have concluded an order processing contract with the provider, which
ensures the protection of the data of our website visitors and prohibits
unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider refers to standard
contractual clauses of the European Commission, which are intended to
ensure compliance with the European level of data protection.

4.2 Personal data is collected when you contact us (e.g. via contact
form or email). Which data is collected when using a contact form can be
seen from the respective contact form. This data is stored and used
exclusively for the purpose of responding to your request or for
contacting you and the associated technical administration.

The legal basis for the processing of this data is our legitimate
interest in responding to your request in accordance with Art. 6 para. 1
lit. f GDPR. If your contact is aimed at concluding a contract, the
additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.
Your data will be deleted after final processing of your request. This
is the case if it can be inferred from the circumstances that the matter
in question has been conclusively clarified and provided that there are
no statutory retention obligations to the contrary.

5) Registration with the portal or forum

You can register on our website by providing personal data. Which
personal data is processed for registration is determined by the input
mask used for registration. We use the so-called double opt-in procedure
for registration, i.e. your registration is not complete until you have
confirmed your registration by clicking on the link contained in a
confirmation e-mail sent to you for this purpose. If you do not confirm
your registration within 24 hours, your registration will be
automatically deleted from our database. Providing the above data is
mandatory. You can provide all other information voluntarily by using
our portal.

If you use our portal, we will store your data required for the
fulfillment of the contract, including any information on the method of
payment, until you finally delete your access. Furthermore, we store the
voluntary data you provide for the duration of your use of the portal,
unless you delete it beforehand. You can manage and change all
information in the protected customer area. The legal basis is Art. 6
para. 1 lit. f GDPR.

In addition, we store all content published by you (e.g. public posts,
pinboard entries, guestbook entries, etc.) in order to operate the
website. We have a legitimate interest in providing the website with
complete user-generated content. The legal basis for this is Art. 6
para. 1 lit. f GDPR. If you delete your account, your public statements,
especially in the forum, will remain visible to all readers, but your
account will no longer be accessible. All other data will be deleted in
this case.

6) Use of customer data for direct advertising / e-mail newsletter

If you register for our e-mail newsletter, we will send you regular
information about our offers. The only mandatory information for sending
the newsletter is your e-mail address. The provision of further data is

voluntary and is used to address you personally. We use the so-called
double opt-in procedure for sending the newsletter. This means that we
will only send you an e-mail newsletter if you have expressly confirmed
to us that you consent to receiving the newsletter. We will then send
you a confirmation e-mail asking you to confirm that you wish to receive
the newsletter in future by clicking on a corresponding link.

By activating the confirmation link, you give us your consent to the
use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR.
When you register for the newsletter, we store your IP address entered
by the Internet service provider (ISP) as well as the date and time of
registration in order to be able to trace any possible misuse of your
e-mail address at a later date. The data collected by us when you
register for the newsletter will be used exclusively for the purpose of
advertising by means of the newsletter. You can unsubscribe from the
newsletter at any time via the link provided in the newsletter or by
sending a message to the controller named at the beginning. Once you
have unsubscribed, your e-mail address will be deleted from our
newsletter mailing list immediately, unless you have expressly consented
to further use of your data or we reserve the right to use data beyond
this, which is permitted by law and about which we inform you in this
declaration.

7) Online marketing / Google AdSense

This website uses Google AdSense, a web advertising service provided by
Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5,
Ireland (“Google”). Google AdSense uses cookies, which are
text files placed on your computer, to help the website analyze how
users use the site. In addition, Google AdSense also uses so-called
“web beacons” (small invisible graphics) to collect
information, through the use of which simple actions such as visitor
traffic on the website can be recorded, collected and analyzed. The
information generated by the cookie and/or web beacon (including your IP
address) about your use of this website is usually transmitted to a
Google server and stored there. This may also involve transmission to
the servers of Google LLC. in the USA.

Google uses the information obtained in this way to evaluate your usage
behavior with regard to the AdSense ads. The IP address transmitted by
your browser as part of Google AdSense will not be merged with other
Google data. The information collected by Google may be transferred to
third parties if this is required by law and/or if third parties process
this data on behalf of Google.

All processing described above, in particular the reading of
information on the end device used via cookies and/or web beacons, will
only be carried out if you have given us your express consent to do so
in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent,
Google AdSense will not be used during your visit to our website.

You can revoke your consent at any time with effect for the future by
deactivating this service in the “cookie consent tool”
provided on the website.

For data transfers to the USA, the provider has joined the EU-US Data
Privacy Framework, which ensures compliance with the European level of
data protection on the basis of an adequacy decision by the European
Commission.

Google’s privacy policy can be viewed here:
https://www.google.de/policies/privacy/

8) Web analysis services

8.1 Clicky
This website uses the web analysis service of the following provider:
Roxr Software Ltd, 10883 SE Main Street
Milwaukie, Oregon 97222,

USA
With the help of cookies and/or comparable technologies (tracking pixels,
 web beacons, algorithms for reading end device and browser information),
 the service collects and stores pseudonymized visitor data, including
 information about the end device used, such as the IP address and
browser information, in order to evaluate it for statistical
analyses of usage behavior on our website and to create pseudonymized usage
 profiles. Among other things, this enables the evaluation of
movement patterns (so-called heat maps), which show the duration of page

visits and interactions with page content (e.g. text input, scrolling,
clicks and mouse-overs). Pseudonymization rules out the possibility of
direct personal identification. Your personal data is not merged with
clear data collected in any other way.

All processing described above, in particular the reading or storage of
information on the end device used, will only be carried out if you have
given us your express consent to do so in accordance with Art. 6 para. 1
lit. a GDPR. You can revoke your consent at any time with effect for the
future by deactivating this service in the “cookie consent
tool” provided on the website.

We have concluded an order processing contract with the provider, which
ensures the protection of the data of our website visitors and prohibits
unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider relies on standard
contractual clauses of the European Commission, which are intended to
ensure compliance with the European level of data protection.

8.2 Google Tag Manager
This website uses the “Google Tag Manager”, a service of the
following provider
Google Ireland Limited, Gordon House, Barrow Street,
Dublin 4, Ireland (hereinafter: “Google”).
Google Tag Manager provides a technical basis for bundling various web
applications, including tracking and analysis services, and for
calibrating, controlling and linking them to conditions via a uniform user
 interface. Google Tag Manager itself does not store or read any information
on user devices. The service also does not carry out any independent
data analyses. However, Google Tag Manager transmits your IP-address to
Google when you access a page and may store it there.

Transmission to servers of Google LLC. in the USA is possible.

This processing will only be carried out if you have given us your
express consent in accordance with Art. 6 para. 1 lit. a GDPR. Without
this consent, Google Tag Manager will not be used during your visit to
our website. You can revoke your consent at any time with effect for the
future. To exercise your revocation, please deactivate this service in
the “cookie consent tool” provided on the website.

We have concluded an order processing contract with the provider, which
ensures the protection of the data of our website visitors and prohibits
unauthorized disclosure to third parties.

For data transfers to the USA, the provider has signed up to the EU-US
Data Privacy Framework, which ensures compliance with the European level
of data protection on the basis of an adequacy decision by the European
Commission.

8.3 Microsoft Clarity

This website uses the web analysis service of the following provider:
Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399
USA

With the help of cookies and/or comparable technologies (tracking
pixels, web beacons, algorithms for reading end device and browser
information), the service collects and stores pseudonymized visitor
data, including information about the end device used, such as the IP
address and browser information, in order to evaluate it for statistical
analyses of usage behavior on our website and to create pseudonymized
usage profiles. Among other things, this enables the evaluation of
movement patterns (so-called heat maps), which show the duration of page
visits and interactions with page content (e.g. text input, scrolling,
clicks and mouse-overs). Pseudonymization rules out the possibility of
direct personal identification. Your personal data is not merged with
clear data collected in any other way.

All processing described above, in particular the reading or storage of
information on the end device used, will only be carried out if you have
given us your express consent to do so in accordance with Art. 6 para. 1
lit. a GDPR. You can revoke your consent at any time with effect for the
future by deactivating this service in the “cookie consent
tool” provided on the website.

We have concluded an order processing contract with the provider, which
ensures the protection of the data of our website visitors and prohibits
unauthorized disclosure to third parties.

For data transfers to the USA, the provider has signed up to the EU-US
Data Privacy Framework, which ensures compliance with the European level
of data protection on the basis of an adequacy decision by the European
Commission.

8.4 Polyfill

This website uses the service of the following provider: The Financial
Times Ltd, Bracken House, 1 Friday Street, London, England, EC4M
9BT

The service installs a script on our website that makes it possible to
display content in high quality even on older browser versions by
providing and transmitting polyfill files during the browser request in
order to bridge missing browser functions. For this purpose, certain
technical information such as browser details and connection data
including your IP address are automatically forwarded to the provider in
anonymized form.

The information is used to determine which polyfill files are required
by your browser to properly display the page content.

If personal data is also processed in this context, the processing is
based on our legitimate interests in the optimal presentation of our
website and the optimization of the user experience in accordance with
Art. 6 para. 1 lit. f GDPR.

In the case of data transfer to the provider location, an appropriate
level of data protection is guaranteed by an adequacy decision of the
European Commission.

9) Retargeting/remarketing and conversion tracking

9.1 Google Ads Remarketing
This website uses retargeting technology from the following provider:

Google Ireland Limited, Gordon House, 4 Barrow St
Dublin, D04 E5W5, Ireland

For this purpose, Google sets a cookie in the browser of your end
device, which automatically enables interest-based advertising by means
of a pseudonymous cookie ID and based on the pages you visit. Any
further data processing will only take place if you have consented to
Google linking your internet and app browsing history to your Google
account and using information from your Google account to personalize
ads that you view on the web. In this case, if you are logged in to
Google while visiting our website, Google will use your data together
with Google Analytics data to create and define target group lists for
cross-device remarketing. For this purpose, Google temporarily links
your personal data with Google Analytics data to create target groups.
As part of the use of Google Ads Remarketing, personal data may also be
transmitted to the servers of Google LLC. in the USA.

All processing described above, in particular the setting of cookies
for reading information on the terminal device used, will only be
carried out if you have given us your express consent to do so in
accordance with Art. 6 para. 1 lit. a GDPR. Without this consent,
retargeting technology will not be used during your visit to the
website.

You can revoke your consent at any time with effect for the future. To
exercise your revocation, please deactivate this service in the
“cookie consent tool” provided on the website.

For data transfers to the USA, the provider has joined the EU-US Data
Privacy Framework, which ensures compliance with the European level of
data protection on the basis of an adequacy decision by the European
Commission.

9.2 Google Ads conversion tracking

This website uses the online advertising program “Google Ads”
and, as part of Google Ads, the conversion tracking of Google Ireland
Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
(“Google”). We use Google Ads to draw attention to our
attractive offers on external websites with the help of advertising
material (so-called Google Adwords). We can determine how successful the
individual advertising measures are in relation to the advertising
campaign data. Our aim is to show you advertising that is of interest to
you, to make our website more interesting for you and to achieve a fair
calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on an ad
placed by Google. Cookies are small text files that are stored on your
end device. These cookies generally lose their validity after 30 days
and are not used for personal identification. If the user visits certain
pages of this website and the cookie has not yet expired, Google and we
can recognize that the user clicked on the ad and was redirected to this
page. Each Google Ads customer receives a different cookie. Cookies can
therefore not be tracked via the websites of Google Ads customers. The
information collected using the conversion cookie is used to generate
conversion statistics for Google Ads customers who have opted for
conversion tracking. Customers are told the total number of users who
clicked on their ad and were redirected to a page with a conversion
tracking tag. However, they do not receive any information with which
users can be personally identified. As part of the use of Google Ads,
personal data may also be transmitted to the servers of Google LLC. in
the USA.

Details on the processing triggered by Google Ads Conversion Tracking
and how Google handles data from websites can be found here:
https://policies.google.com/technologies/partner-sites

All processing described above, in particular the setting of cookies
for reading information on the terminal device used, will only be
carried out if you have given us your express consent to do so in
accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent
at any time with effect for the future by deactivating this service in
the “cookie consent tool” provided on the website.

You can also permanently object to the setting of cookies by Google Ads
Conversion Tracking by downloading and installing the browser plug-in
from Google available at the following link

https://www.google.com/settings/ads/plugin?hl=de

Please note that you may not be able to use certain functions of this
website, or only to a limited extent, if you have deactivated the use of
cookies.

Google’s privacy policy can be viewed here:
https://www.google.de/policies/privacy/

For data transfers to the USA, the provider has joined the EU-US Data
Privacy Framework, which ensures compliance with the European level of
data protection on the basis of an adequacy decision by the European
Commission.

10) Page functionalities

10.1 Google reCAPTCHA
On this website, we use the CAPTCHA service of the following provider:
Google Ireland Limited, Gordon House, 4 Barrow St
Dublin, D04 E5W5,

Ireland
Data may also be transmitted to: Google LLC, USA. The provider uses
“Google Fonts”, i.e. fonts downloaded from the Internet by

Google, for the visual design of the Captcha window. No information
other than that already transmitted to Google via the ReCaptcha
functionality is processed.

The service checks whether an entry is made by a natural person or
abusively by machine and automated processing, and blocks spam, DDoS
attacks and similar automated malicious access. In order to ensure that
an action is carried out by a person and not by an automated bot, the
provider collects the IP address of the end device used, identification
data of the browser and operating system type used as well as the date
and duration of the visit and transmits these to the provider’s
servers for evaluation.

The legal basis is our legitimate interest in determining individual
responsibility on the Internet and avoiding abuse and spam in accordance
with Art. 6 para. 1 lit. f GDPR.

We have concluded an order processing contract with the provider, which
ensures the protection of the data of our website visitors and prohibits
unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data
Privacy Framework, which ensures compliance with the European level of
data protection on the basis of an adequacy decision by the European
Commission.

11) Rights of the data subject

11.1 The applicable data protection law grants you the following data
subject rights (information and intervention rights) vis-à-vis
the controller with regard to the processing of your personal data,
whereby reference is made to the stated legal basis for the respective
exercise requirements:

– Right of access pursuant to Art. 15 GDPR
– Right to rectification pursuant to Art. 16 GDPR
– Right to erasure pursuant to Art. 17 GDPR
– Right to restriction of processing pursuant to Art. 18 GDPR
– Right to information pursuant to Art. 19 GDPR
– Right to data portability pursuant to Art. 20 GDPR
– Right to withdraw consent granted pursuant to Art. 7 para. 3 GDPR
– Right to lodge a complaint pursuant to Art. 77 GDPR.

11.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING

LEGITIMATE INTEREST IN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE
THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH EFFECT FOR THE
FUTURE ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA
CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE
CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH
OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE
PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL
CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT
MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF
PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU CAN
EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA
CONCERNED FOR DIRECT MARKETING PURPOSES.

12) Duration of storage of personal data

The duration of the storage of personal data is determined by the
respective legal basis, the purpose of processing and – if relevant –
additionally by the respective statutory retention period (e.g.
retention periods under commercial and tax law).

When processing personal data on the basis of express consent in
accordance with Art. 6 para. 1 lit. a GDPR, the data concerned will be
stored until you withdraw your consent.

If there are statutory retention periods for data that is processed
within the scope of legal or similar obligations on the basis of Art. 6
para. 1 lit. b GDPR, this data will be routinely deleted after the
retention periods have expired, provided that it is no longer required
for contract fulfillment or contract initiation and/or we no longer have
a legitimate interest in further storage.

When processing personal data on the basis of Art. 6 para. 1 lit. f
GDPR, this data is stored until you exercise your right to object in
accordance with Art. 21 para. 1 GDPR, unless we can demonstrate
compelling legitimate grounds for the processing which override your
interests, rights and freedoms, or the processing serves the
establishment, exercise or defense of legal claims.

When processing personal data for the purpose of direct marketing on
the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until
you exercise your right to object in accordance with Art. 21 para. 2
GDPR.

Unless otherwise stated in the other information in this declaration on
specific processing situations, stored personal data will be deleted
when it is no longer necessary for the purposes for which it was
collected or otherwise processed.