You can visit our website without providing any personal information. If you use our website for informational purposes only, i.e., you do not register, conclude a contract, or otherwise provide us with information about yourself at , we do not process any personal data, with the exception of the data that your browser transmits to enable you to visit the website and information that is transmitted to us through the use of cookies.

For the purpose of the technical provision of the website, our system (i.e., the web server) automatically collects information from your browser each time you access the website. The temporary storage of your IP address by our system is necessary to enable the website to be delivered to your computer. For this purpose, the user's IP address must be stored for the duration of the session.

The IP address is stored in log files to ensure the functionality of our website. We also use this data to optimise the website and to ensure the security of our information technology systems (e.g., attack detection).

In addition, the data is evaluated for marketing purposes in connection with the tools mentioned below under "Analysis and tracking."

The following information is collected:

* IP address

* Browser type/version (e.g., Firefox 59.0.2 (64 bit));

* Browser language (e.g., German);

* Operating system used (e.g., Windows 10);

* Internal resolution of the browser window;

* Screen resolution;

* JavaScript enabled;

* Java on/off;

* Cookies on/off;

* Color depth;

* Time of access;

* The previous website from which you came to us (referrer URL).

We also use cookies to make our website available for you to use. Cookies are text files that are stored in your Internet browser or by your Internet browser on your computer system when you visit a website. A cookie contains a characteristic string of characters that enables the browser to be uniquely identified when you visit the website again. We use these cookies, among other things, to make our website and its technical functions available to you. Some functions of our website cannot be offered without the use of cookies.

The following information is stored in the cookies and transmitted to us:

* The language you have selected on our website,

* An identification code from the service providers we use so that you can be recognised when you visit our website again.

We process your personal data for the technical provision of our website on the following legal basis:

* To protect our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR, in order to be able to provide you with the website technically.

We may use cookies and other tracking technologies to collect and store your data in accordance with the GDPR. We may use cookies to provide essential services, but also to analyse the use of the website and improve our performance (analysis cookies – based on your consent within the meaning of Art. 6 lit. a GDPR) and to provide personalised content and advertising and measure their effectiveness (marketing cookies – based on your consent within the meaning of Art. 6 para. 1 lit. a GDPR). When you visit our website for the first time, a cookie banner will ask for your consent to the use of non-essential cookies. You can manage or withdraw your consent at any time via our "Cookie Settings" tool or via your browser, thereby preventing the further storage of cookies in the future.

For example, we use Google Analytics, Google Ads, Google Tag and social plug-ins from Facebook, Google+, LinkedIn, and YouTube. You can find detailed information in our cookie policy.

This includes information that you voluntarily provide to us about your experiences using our products and services, including our websites and applications. Examples of this may include unsolicited reviews and suggestions or other questions and feedback in your name about our products. We typically collect this information in the form of product reviews, questions and answers, inventory requests, quote requests, case studies, technical solutions, Google customer reviews, and customer service via email or hotline.

We process your personal data on the following legal basis:

* Your consent pursuant to Art. 6 (1) lit. a GDPR.

This refers to all information that is part of your profile on a third-party social network (such as Facebook/Twitter) and that you allow the third-party social network to share with us. The profile information we receive when you allow this via your social network settings may vary depending on the social media provider, but often includes your name, email address, gender, birthday, current location, profile picture, friend list, and any other additional information or activities you publish on the third-party social network. We may also process your personal data when you interact with social network features such as "Post to Facebook" or "Tweet to Twitter." These features may be integrated into our website or applications to allow you to share FS products and news with your friends or to fulfil other stated purposes.

We use the information we receive solely for the purposes described in this Privacy Policy. Please note that we have no control over the further use of your personal data by your third-party social media provider and are not responsible for it. We recommend that you read the privacy policy of these providers to understand how they collect, use, and share your personal data and how you can set your privacy preferences on their websites and in their stores.

Your personal data will be processed on the following legal basis:

* Your consent pursuant to Art. 6 (1) lit. a GDPR, which you give when you register via the social media provider. You can withdraw your consent at any time by disconnecting your social media account in your user settings.

We use third party payment processors, currently PayPal and Adyen (“Payment Processors”), to assist in securely processing your payment information. If you pay with a bank transfer or credit card, the payment information that you provide through the Services is encrypted and transmitted directly to Payment Processors.

We do not store your payment information and do not control and are not responsible for Payment Processors or its collection or use of your information. You may find out more about how Payment Processors store and use payment information by accessing the privacy policy for Payment Processors’ services.

If you elect the PayPal service, PayPal collects, uses and processes your information, including payment information, in accordance with its privacy policies.

If any, we process your personal data on the following legal basis:

* To fulfil a contract with you, Art. 6 para. 1 lit. b GDPR.

We may use your personal data from your account (first and last name, email address, etc.) to continuously improve our products, tailor them to your needs, and develop new product ideas. This primarily includes the collection and use of demographic information and consumer feedback.

We may use your email address and name to encourage you to engage more actively with our products and services (including our website and applications) in order to increase overall brand loyalty and improve our products/services. This primarily includes the collection, use, and publication of consumer-generated content (such as product/order reviews).

We will send you an email asking you to write a review about our products and services. If you choose to participate in the Google customer review program, you will also receive an email from Google about this.

We process your personal data on the following legal basis:

* Your consent in accordance with Art. 6 para. 1 lit. a GDPR.

We may collect and use your personal data to process and deliver your orders and to inform you about the status of your orders. This may include the collection and use of certain personal contact information, payment information, account login information, and/or other information related to your purchase (e.g., products ordered).

We process your personal data on the following legal basis:

* To fulfil a contract with you, Art. 6 para. 1 lit. b GDPR.

Since payments, shipping, and delivery are carried out by a third party (bank, online payment company, or logistics company), we share your personal data with them for the purpose of order processing so that they can assess whether you are eligible for their payment methods and can customise these payment methods for you. As a result, you may also receive communications (by email, SMS, or other means of communication) from this third party regarding the processing of the payment or delivery.

We process your personal data on the following legal basis:

* Your consent pursuant to Art. 6 para. 1 lit. a GDPR.

* Or to fulfil a contract with you, Art. 6 para. 1 lit. b GDPR.

If you have given us your express consent, we reserve the right to obtain information about your identity and creditworthiness from specialised service providers (credit agencies) if you have selected Adyen, PayPal, credit terms, and bank transfer as your payment method. For this purpose, we will transfer your personal data required for the credit check to the following compan:

Creditreform

Verband der Vereine Creditreform e. V.

Hammfelddamm 13

41460 Neuss

We process your personal data on the following legal basis:

* Your consent in accordance with Art. 6 (1) (a) GDPR.

You can withdraw your consent at any time by contacting us using the contact details provided above under "Responsible party." This may mean that we will no longer be able to offer you certain payment options.

We may use your first and last name and your email address to send you marketing emails to keep you informed about our activities and to make it easier for you to discover and find our products and services.

We process your personal data on the following legal basis:

* Your consent pursuant to Art. 6 (1) lit. a GDPR , which you gave us when you registered for our newsletter;

* If you have provided us with your email address in connection with expressing your interest in ordering our products or using our solutions and we send you personalised advertising, to protect our legitimate interests pursuant to Art. 6 (1) lit. f GDPR in conjunction with § 7 (3) UWG (German Unfair Competition Act); our legitimate interest is based on our economic interests in carrying out advertising measures and target group-oriented advertising.

If we receive your email address in connection with the conclusion of the contract and the provision of our products and you have not objected to this, we reserve the right to send you regular offers for similar products from our range by email. You can object to this use of your email address at any time by sending a message to the contact address described above, via "My Account" or via a link provided for this purpose in the newsletter email .

Please note that unsubscribing from newsletters or marketing emails does not mean that you will no longer receive service notifications, such as order status updates or responses to your inquiries.

We also process your personal data to assert our rights and enforce our legal claims. We also process your personal data to defend ourselves against legal claims. Finally, we process your personal data to the extent necessary to prevent or prosecute criminal offenses.

We process your personal data for this purpose on the following legal basis:

* To protect our legitimate interests pursuant to Art. 6 (1) lit. f GDPR, insofar as we assert legal claims or defend ourselves in legal disputes or prevent or investigate criminal offenses.

In addition, we process your personal data to fulfil other legal obligations. These may arise in connection with business communication, among other things. This includes, in particular, retention periods under commercial, trade, or tax law.

We process your personal data on the following legal basis:

* To fulfil a legal obligation to which we are subject in accordance with Art. 6 para. 1 lit. c GDPR in conjunction with commercial, trade, or tax law, insofar as we are obliged to store your data.

You are entitled to request confirmation from us within the scope of Art. 15 GDPR as to whether we process personal data relating to you; if this is the case, you are also entitled within the scope of Art. 15 GDPR to obtain information about this personal data and certain other information (including the purposes of processing, categories of personal data, categories of recipients, planned storage period, your rights, the origin of the data, the use of automated decision-making and, in the case of third-country transfers, the appropriate safeguards) and a copy of your data.

You are entitled to request that we correct the personal data stored about you if it is inaccurate or incorrect in accordance with Art. 16 GDPR.

You have the right to request that we delete personal data concerning you without undue delay under the conditions set out in Art. 17 GDPR. The right to erasure does not apply, among other things, if the processing of personal data is necessary for (i) exercising the right to freedom of expression and information, (ii) fulfiling a legal obligation to which we are subject (e.g., statutory retention obligations), or (iii) for the assertion, exercise, or defence of legal claims.

You are entitled, under the conditions set out in Art. 18 GDPR, to request that we restrict the processing of your personal data.

Under the conditions of Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transfer to another controller.

You have the right to object to the processing of your personal data under the conditions of Art. 21 GDPR, so that we must stop processing your personal data. The right to object only exists within the limits provided for in Art. 21 GDPR. In addition, our interests may prevent us from terminating the processing, so that we are entitled to process your personal data despite your objection.

You have the right to withdraw your consent at any time. The withdrawal only takes effect for the future; this means that the withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

Under the conditions set out in Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you believe that the processing of personal data relating to you violates the GDPR. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

Your requests regarding the exercise of your rights should be made in writing and as specific as possible with regard to your request, and send to us by post to the above address or by email. We will respond to all requests in accordance with Art. 12 GDPR, usually within one month.

Only those persons who need your data to fulfil our contractual and legal obligations will have access to it. Service providers and vicarious agents employed by us may also receive data for these purposes.

Your personal data will only be disclosed to external recipients if you have given us your consent to transfer it to third parties, if the disclosure is necessary to fulfil legal obligations to provide information, reporting and/or disclosure of personal data, or to external service providers who act on our behalf as processors or perform functions for us (e.g., IT service providers, data centres, newsletter dispatch, etc.).

In connection with our use of social media, we cannot exclude or influence whether the operator passes on your data to further categories of recipients due to a lack of information from the platform operators. Further information on the recipients of the platform operators' data can be found in the operators' privacy policies.

FS serves customers around the world from more than 150 countries. If we transfer your personal data outside the European Economic Area ("EEA") to an FS branch in a third country or to an international organisation (e.g., service providers in the United States or China), we do so in accordance with Art. 13 (1) lit. f, 45, and 46 of the GDPR.

When using Google Analytics, Google Ads, Google Tag and social plug-ins, we transfer your IP address or your shortened IP address to countries outside the European Union, including Switzerland and the United States. The data transfer is based on the adequacy decision of the EU Commission of January 15, 2024, and July 10, 2023, in accordance with Directive 95/46/EC of the European Parliament and of the Council on the adequacy of the protection provided by the EU-Swiss and EU-US Privacy Shield.

When using social media, your data may be transferred to countries outside the European Union, including the USA. We have no influence over this. Further information can be found in the privacy policies of the platform operators.

If there is no adequacy decision by the European Commission pursuant to Article 45 GDPR, we rely on appropriate safeguards for third-country transfers, such as the Standard Contractual Clauses (SCC) of the European Commission or other legally recognised mechanisms pursuant to Article 46 GDPR. These agreements ensure that your personal data receives a level of protection that is essentially equivalent to that in the EU. You can request access to copies of these guarantees or further information by contacting us at legal@fs.com.

In addition, FS ensures, by means of the "Data Processing Addendum" agreement between FS and each data processing service provider, that the provisions of the GDPR are complied with in the context of order data processing and that an adequate level of data protection and data security is guaranteed. This is ensured, among other things, by the service provider being obliged to act exclusively on the instructions of FS and to continuously take all technical and organisational measures to protect your personal data.