2.6 To whom may MEmob+ pass on your information? 2.6.1 MEmob+ passes your personal data to third party technology providers, for which we analyse the effectiveness of advertising efforts or to which we provide target group information for addressing ads. A list of these technology providers with further information may be found (Click) here . Moreover, we pass your personal data for the same purposes to advertisers, marketers, agencies and market research institutes. For more information about the companies MEmob+ works with please reach out to [email protected]. The data will only be passed on if we have received the relevant consent or if we can invoke our legitimate interests. We and our partners have divided certain tasks and activities among each other. The division is as follows: MEmob+ provides the partner with a technical solution (here tag) which the partner integrates on its offers. This tag enables the collection of the data described in more detail above. Our partner will take care of obtaining consent and/or the implementation of transparency requirements towards you. He passes this information on to us, in order to communicate the scope and permissibility of the data processing. This includes informing you about our cooperation in the partner’s privacy policy. Each of the parties shall in particular ensure that the necessary data security is given. Both we and our partner will fulfill our reporting and notification obligations individually, but will support and inform each other to the extent necessary. You can exercise your rights described below as a data subject (Ref.: 3.10) both towards us and towards our partner. We and our partner are liable for any processing that does not comply with the provisions of the GDPR in accordance with Art. 82 GDPR. 2.6.2 We may also disclose your information to governmental authorities, courts or third parties if such disclosure is necessary or appropriate to enforce or defend our claims, interests or rights, or to protect the vital interests of the data subject or another individual. 2.6.3 We may also disclose your information to an acquirer or potential acquirer of our business or parts of our business to the extent that your information is related to the part to be acquired and to the extent necessary to enable the acquirer or potential acquirer to evaluate our business or the part of our business in question. In the event of an acquisition, we may also transfer your data to the acquirer. 2.7 On what legal basis does MEmob+ process your data? MEmob+ always complies with the applicable data protection laws and regulations when processing your data. We base the processing of your data on the following legal bases:

• Your consent, if you have given us such consent (Art. 6 para. 1 lit. a) GDPR),
• The initiation or execution of a contract with you (Art. 6 para. 1 lit. b) GDPR),
• The fulfilment of legal obligations (Art. 6 para. 1 lit. c) GDPR),
• The implementation of our legitimate interests (Art. 6 para. 1 lit. f) GDPR)

Our respective customers make sure that you have given consent before we process your data and of course we verify this. Of course, you have the possibility to change your mind and to withdraw your consent, we explain how to do this under section 4. 2.8 Legitimate Interests When processing your data, we pursue the following legitimate interests:

• The protection of our systems against misuse,
• The production of statistics,
• Fraud Protection
• Processes personal data for direct marketing purposes

2.9 Data Sources If we do not receive the data from you, or from the devices you use, we receive it from the following sources:

• Master data of companies and self-employed persons from publicly available official sources
• Data on B2B contacts of specialised service providers,
• Data Aggregators
• Publishers

For a detailed list click here: Data Partners 2.10 Requirement or Obligation to Provide Data Unless this is expressly stated, the provision of your data is not required or obligatory. We do not store personal data for longer than is necessary for the purpose for which it was collected, unless we are entitled or obliged by law to continue to store it. We store your data,

• if you have consented to the processing, at most until you revoke your consent;
• if we need the data for the execution of a contract, at most for as long as the contractual relationship with you exists;
• if we use the data on the basis of a legitimate interest, at most for as long as your interest in deletion or anonymisation does not outweigh the data;
• insofar as statutory storage obligations exist, until the end of the storage periods.

Information that is not stored in connection with the cookie ID assigned to your device is regularly deleted by us after three days. The Cookies we use are generally valid for 90 days, after which time they and the data associated with them are deleted. If the Cookie on your device is recognized by us again within this period, the runtime is extended again by 90 days. 2.12 Transfer of your data to Third countries The MEmob+ and its servers are located in Germany. However, some of our Partners and Customers are located outside of the European Union. If we transfer your data to a Partner or a Customer who is based outside of the European Union, we will ensure that data is processed with an appropriate level of protection. To this end, we make use of legally provided and permissible measures, such as an adequacy decision by the European Commission (Art. 45 para. 1 GDPR) for the third country concerned; the use of the European standard contractual clauses (Art. 46 para. 2 c) GDPR) or other effective safeguards provided for in the GDPR. USA   USA (EU/US Data Privacy Framework or Standard Contractual Clauses) UAE UAE (Standard Contractual Clauses) 2.14 Your rights It is important to us that you do not lose control over how we handle your data. Under the General Data Protection Regulation (“GDPR”), you have the following rights towards us:

Right	Explanation
Right of access (Art. 15 GDPR)	You have the right to receive confirmation from us as to whether we are processing personal data about you. If this is the case, you have a right to information about this data and, where applicable, further information. Please note that we may need your cooperation in order to identify you and respond to your request (Art. 11 para. 2 GDPR).
Right to object to processing (Art. 21 GDPR)	You can object to the further processing of your data at any time.
Right of rectification (Art. 16 GDPR)	You can request us to correct the personal data stored about you.
Right to erasure (Art. 17 GDPR)	Under certain circumstances, you have the right to request us to delete your personal data.
Right to restrict processing (Art. 18 GDPR)	You may also have the right to request a restriction of the processing.
Right to data portability (Art. 20 GDPR)	If the requirements of Art. 20 GDPR are met, you have the right to receive from us a structured version, stored in a common machine-readable format, of the personal data concerning you.
Right to lodge a complaint regarding our processing of your personal data with a data protection supervisory authority (Art. 77 GDPR)	If you believe that our processing of your personal data violates the GDPR, you can lodge a complaint with a supervisory authority.
Right to revoke consent	You can withdraw your previously given consent for the processing of your data at any time. In order to make this process as easy as possible for you, you can do this via section 4. For more information about your choices, please see section 4 below.

2.15  What is the IAB Transparency and Consent Framework (IAB TCF)? We participate in the IAB TCF Program and comply with its Specifications and Policies. MEmob‘s identification number within the framework is 1209“ The IAB TCF is a common standard for dealing with transparency obligations and obtaining consent in connection with online advertising. The companies organized in the IAB TCF Program undertake to comply with standards that go beyond the GDPR. MEmob+ is registered as a so-called vendor under the IAB TCF. Further information about the IAB TCF can also be obtained from the following link: https://iabeurope.eu/tcf-2-2-launches-all-you-need-to-know/ We recommend all our customers to also register with the IAB TCF. If you use a service from a company that is already registered as a Publisher in the IAB TCF, you will benefit as the IAB TCF offers you transparency and control over the use of your personal data. On a technical level, the latest version of the IAB TCF (currently version 2.2) allows each participating company to understand which processing activities are permissible in individual cases based on the user’s choice. For you as a user, the IAB TCF means a highly granular freedom of choice. Of course, you can still either agree or disagree with the use of your data in general. In addition, you can precisely understand who will receive your data and for what purposes. Of course, you are free to exclude individual recipients or to limit the purposes for which your data is used individually. Limiting the purposes is only excluded in exceptional cases, such as security-relevant processing activities. We recommend that you consider the various options available to you under the IAB TCF in order to make a decision that best suits your interests. You will receive more information on these options and how to implement them in the following section. We do not perform automated decision making or profiling.