Privacy Policy

PRIVACY POLICY

1. INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE RESPONSIBLE PARTY

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data includes all data with which you can be personally identified.

1.2 The responsible party for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Greenway International LTD. The responsible party for processing personal data is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the responsible party), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser bar.

2. DATA COLLECTION WHEN VISITING OUR WEBSITE

When using our website for informational purposes only, i.e., if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website:

• Our visited website

• Date and time of access

• Amount of data sent in bytes

• Source/reference from which you reached the page

• Browser used

• Operating system used

• IP address used (if applicable, in anonymized form)

Processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is neither passed on nor used for any other purpose. However, we reserve the right to check the server log files retrospectively if there are specific indications of unlawful use.

3. COOKIES

To make visiting our website attractive and enable the use of certain functions, we use cookies on various pages. Cookies are small text files stored on your device. Some of the cookies we use are deleted after the browser session ends (session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser during your next visit (persistent cookies). If cookies are set, they collect and process certain user information, such as browser and location data, and IP address values.

Persistent cookies are automatically deleted after a predefined period, which may vary depending on the cookie. Some cookies simplify the ordering process by saving settings (e.g., remembering the contents of a virtual shopping cart for a later visit). If personal data is processed by individual cookies, processing is carried out either for contract execution under Art. 6 (1) (b) GDPR or to safeguard our legitimate interest in the best possible functionality of the website in accordance with Art. 6 (1) (f) GDPR.

We may cooperate with advertising partners who help us make our online offering more interesting. In this case, third-party cookies may also be stored on your hard drive when visiting our website. You will be informed individually and separately about the use of such cookies and the scope of the collected information below.

Please note that you can set your browser to inform you about the setting of cookies and decide individually on their acceptance or exclude the acceptance of cookies for certain cases or in general. Each browser differs in how it manages cookie settings. You can find instructions in the help menu of your respective browser.

Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies Firefox: https://support.mozilla.org/en/kb/enable-and-disable-cookies-website-preferences Chrome: https://support.google.com/chrome/answer/95647?hl=en Safari: https://support.apple.com/kb/ph21411?locale=en_US Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Please note that if you do not accept cookies, the functionality of our website may be restricted.

4. CONTACTING US

When you contact us (e.g., via the contact form or email), personal data is collected. The specific data collected in the contact form is visible in the respective form. This data is used exclusively for responding to your inquiry and for technical administration related to it. The legal basis for processing this data is our legitimate interest in responding to your request pursuant to Art. 6 (1) (f) GDPR. If your contact aims at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted once your inquiry has been fully processed, provided that there are no statutory retention obligations.

5. DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT EXECUTION

According to Art. 6 (1) (b) GDPR, personal data is collected and processed when you provide it to us for contract execution or when opening a customer account. The specific data collected is evident from the input forms used. You can delete your customer account at any time by sending a message to the responsible party. Your data will be stored and used for contract execution. After contract execution or account deletion, your data will be blocked for further processing and deleted after the retention periods required by tax and commercial law unless you have explicitly consented to further data use or we have reserved a legally permitted further data use.

6. USE OF YOUR DATA FOR DIRECT ADVERTISING

6.1 Subscription to our email newsletter If you subscribe to our email newsletter, we will send you regular information about our offers. The only required information for sending the newsletter is your email address. Any additional data is voluntary and used to personalize the newsletter. We use the double opt-in procedure for sending newsletters. This means that we will only send an email newsletter after you have explicitly confirmed that you consent to receive newsletters. We will then send a confirmation email asking you to confirm your subscription by clicking a link.

With activation of the confirmation link, you give us consent to use your personal data under Art. 6 (1) (a) GDPR. Your email address is stored for this purpose. You can unsubscribe from the newsletter at any time via the link provided in the newsletter. Your email address will be deleted from the newsletter distribution list unless further use is legally permitted and you have consented to it.

6.2 Sending email newsletters to existing customers If you have provided your email address when purchasing goods or services, we reserve the right to send you regular offers via email for similar goods or services. No separate consent is required for this. Data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising pursuant to Art. 6 (1) (f) GDPR. If you initially objected to this use of your email address, we will not send marketing emails. You may withdraw your consent at any time with future effect by notifying the responsible party.

7. DATA PROCESSING FOR ORDER PROCESSING

7.1 The personal data collected by us is passed on to the transport company entrusted with delivery, as necessary for the delivery of goods. Your payment details will be forwarded to the financial institution responsible for processing payments, where required. If payment service providers are used, you will be informed explicitly below. The legal basis for this data transfer is Art. 6 (1) (b) GDPR.

7.2 Use of Payment Service Providers (Payment Providers)

• PayPal If you choose to pay via PayPal, credit card via PayPal, direct debit via PayPal, or—if offered—"purchase on account" or "installment payment" via PayPal, your payment data will be forwarded to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), as part of the payment processing. The transfer is based on Art. 6 (1) (b) GDPR and is only carried out to the extent necessary for the payment processing.

PayPal reserves the right to conduct a credit check for certain payment methods (credit card via PayPal, direct debit via PayPal, or—if offered—"purchase on account" or "installment payment" via PayPal). For this purpose, PayPal may forward your payment data to credit agencies in accordance with Art. 6 (1) (f) GDPR, based on PayPal's legitimate interest in determining your payment ability. The result of the credit check concerning the statistical probability of non-payment is used by PayPal to decide whether to provide the respective payment method. The credit report may contain probability values (so-called score values), which are calculated based on a scientifically recognized mathematical-statistical procedure. Address data is also included in these calculations. Further data protection information, including details on the credit agencies used, can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You may object to this processing of your data at any time by notifying PayPal. However, PayPal may still be entitled to process your personal data if it is necessary for contractual payment processing.

• SOFORT If you select the payment method "SOFORT," payment processing will be carried out via the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "SOFORT"), to whom we will forward your information provided during the order process, along with the details about your order, in accordance with Art. 6 (1) (b) GDPR. SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data will be transmitted exclusively for the purpose of payment processing and only to the extent necessary for this purpose. Further information on SOFORT's data protection policy can be found at: https://www.klarna.com/sofort/datenschutz

8) CONTACT FOR REVIEW REMINDER We use your email address for a one-time reminder to submit a review of your order via our review system, provided that you have given us your explicit consent to do so during or after your order in accordance with Art. 6 (1) (a) GDPR.

You can withdraw your consent at any time by notifying the responsible party for data processing.

9) USE OF SOCIAL MEDIA: SOCIAL PLUGINS

• Facebook Plugins with Shariff Solution On our website, social plugins ("plugins") of the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"), are used.

To enhance the protection of your data when visiting our website, these buttons are not fully integrated as plugins but only embedded as HTML links on the page. This ensures that no connection to Facebook's servers is established when a page of our website containing such buttons is accessed. If you click on the button, a new browser window will open and direct you to Facebook's page, where you can interact with the plugins (after logging in if necessary).

Facebook Inc., based in the USA, is certified under the US-European "Privacy Shield" agreement, ensuring compliance with EU data protection standards.

For details on data collection, further processing, and use of data by Facebook, as well as your rights and settings to protect your privacy, please refer to Facebook's privacy policy: https://www.facebook.com/policy.php

• Google+ Plugins with Shariff Solution On our website, social plugins ("plugins") of the Google+ social network, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"), are used.

To enhance the protection of your data when visiting our website, these buttons are not fully integrated as plugins but only embedded as HTML links on the page. This ensures that no connection to Google's servers is established when a page of our website containing such buttons is accessed. If you click on the button, a new browser window will open and direct you to Google+, where you can interact with the plugins (after logging in if necessary).

Google LLC, based in the USA, is certified under the US-European "Privacy Shield" agreement, ensuring compliance with EU data protection standards.

For details on data collection, further processing, and use of data by Google, as well as your rights and settings to protect your privacy, please refer to Google's privacy policy: https://www.google.com/intl/en/policies/privacy/

• Instagram Plugin with Shariff Solution On our website, social plugins ("plugins") of the Instagram online service, operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA ("Instagram"), are used.

To enhance the protection of your data when visiting our website, these buttons are not fully integrated as plugins but only embedded as HTML links on the page. This ensures that no connection to Instagram's servers is established when a page of our website containing such buttons is accessed. If you click on the button, a new browser window will open and direct you to Instagram, where you can interact with the plugins (after logging in if necessary).

Instagram LLC, based in the USA, is certified under the US-European "Privacy Shield" agreement, ensuring compliance with EU data protection standards.

For details on data collection, further processing, and use of data by Instagram, as well as your rights and settings to protect your privacy, please refer to Instagram's privacy policy: https://help.instagram.com/155833707900388/

10) ONLINE MARKETING

10.1 DoubleClick by Google This website uses the online marketing tool DoubleClick by Google, operated by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("DoubleClick").

DoubleClick uses cookies to display ads relevant to users, improve campaign performance reports, or prevent a user from seeing the same ads multiple times. A cookie ID helps Google determine which ads are shown in which browser, ensuring they are not displayed multiple times. Processing is based on our legitimate interest in optimizing the marketing of our website under Art. 6 (1) (f) GDPR.

DoubleClick can also track conversions using cookie IDs linked to ad requests. This happens when a user sees a DoubleClick ad and later visits the advertiser's website with the same browser and makes a purchase. According to Google, DoubleClick cookies do not contain personal information.

Due to the marketing tools used, your browser automatically establishes a direct connection to Google's servers. We have no control over the extent and further use of data collected by Google through this tool and inform you according to our knowledge: By integrating DoubleClick, Google receives information that you have visited the relevant part of our website or clicked on an ad. If you are registered with a Google service, Google may associate the visit with your account. Even if you are not registered or logged in, the provider may obtain and store your IP address.

If you object to this tracking process, you can disable cookies for conversion tracking by setting your browser to block cookies from the domain www.googleadservices.com (https://www.google.de/settings/ads). Please note that this setting will be deleted if you remove your cookies. Alternatively, you can visit the Digital Advertising Alliance website (www.aboutads.info) to configure cookie settings. Finally, you can adjust your browser settings to be notified about cookie usage and decide whether to accept them on a case-by-case basis or disable them entirely. Please note that disabling cookies may limit the functionality of our website.

Google LLC, based in the USA, is certified under the US-European "Privacy Shield" agreement, ensuring compliance with European data protection standards.

For more information about Google DoubleClick’s privacy policy, visit: https://www.google.de/policies/privacy/

10.2 Use of Google AdWords Conversion Tracking This website uses the online advertising program "Google AdWords" and Google AdWords conversion tracking provided by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

We use Google AdWords to advertise our services and measure the effectiveness of our advertising campaigns. This allows us to determine how successful individual advertising campaigns are. Our goal is to show you ads that interest you, enhance the user experience on our website, and achieve a fair calculation of advertising costs.

A conversion tracking cookie is set when a user clicks on a Google AdWords ad. Cookies are small text files stored on your computer. These cookies expire after 30 days and are not used for personal identification. If a user visits certain pages on our website while the cookie is still active, Google and we can recognize that the user clicked on an ad and was directed to that page. Each Google AdWords customer receives a different cookie, preventing cross-site tracking.

The information collected using conversion cookies is used to generate conversion statistics for AdWords advertisers who have opted for conversion tracking. Advertisers receive information about the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive information that personally identifies users.

If you do not wish to participate in tracking, you can disable the use of cookies by adjusting your browser settings to block cookies from Google’s conversion tracking services. As a result, you will not be included in conversion tracking statistics. We rely on Google AdWords under our legitimate interest in targeted advertising as per Art. 6 (1) (f) GDPR.

Google LLC, based in the USA, is certified under the US-European "Privacy Shield" agreement, ensuring compliance with European data protection standards.

For more information on Google's privacy policy, visit: https://www.google.de/policies/privacy/

You can permanently disable cookies for ad preferences by modifying your browser settings or by downloading and installing a browser plugin available at: https://www.google.com/settings/ads/plugin?hl=en

Please note that certain website functions may not work correctly if you disable cookies.

11) WEB ANALYTICS SERVICES

Google (Universal) Analytics This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses "cookies," which are text files stored on your computer that enable the analysis of your website usage. The data generated by these cookies about your website use (including your shortened IP address) is usually transmitted to and stored on a Google server in the USA.

This website uses Google Analytics exclusively with the extension "_anonymizeIp()," ensuring that IP addresses are anonymized and cannot be directly linked to individuals. This feature shortens your IP address before transmission within member states of the European Union or other contracting states of the European Economic Area. Only in exceptional cases is the full IP address sent to a Google server in the USA and shortened there. This processing is based on our legitimate interest in statistical analysis to optimize our website and marketing under Art. 6 (1) (f) GDPR.

On behalf of the website operator, Google uses this data to evaluate website usage, compile reports on website activities, and provide additional services related to website and internet use. The IP address transmitted by your browser through Google Analytics will not be merged with other Google data.

You can prevent the storage of cookies by adjusting your browser settings; however, this may limit some website functionalities. Additionally, you can prevent Google from collecting and processing data generated by cookies related to your website usage (including your IP address) by downloading and installing the browser plugin available at: https://tools.google.com/dlpage/gaoptout?hl=en

Alternatively, you can click the following link to set an opt-out cookie that prevents Google Analytics from collecting data on this website in the future (this opt-out cookie only works in this browser and for this domain; if you delete your cookies, you must click the link again): Google Analytics opt-out

Google LLC, based in the USA, is certified under the US-European "Privacy Shield" agreement, ensuring compliance with European data protection standards.

This website also uses Google Analytics for cross-device visitor analysis through a user ID. When a user visits the site for the first time, they are assigned a unique, permanent, and anonymized ID, which is set across multiple devices. This allows interaction data from different devices and sessions to be linked to a single user. The user ID does not contain any personal data and is not shared with Google.

You can opt-out of this cross-device tracking at any time by disabling Google Analytics on all systems you use, such as another browser or mobile device. The opt-out can be performed using Google’s browser plugin: https://tools.google.com/dlpage/gaoptout?hl=en

For more details on Universal Analytics, visit: https://support.google.com/analytics/answer/2838718?hl=en&ref_topic=6010376

12) RETARGETING/ REMARKETING/ RECOMMENDATION ADVERTISING

Facebook Custom Audience via the Pixel Method This website uses the “Facebook Pixel” of Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”). With explicit consent, user behavior can be tracked after viewing or clicking a Facebook advertisement. This allows the evaluation of the effectiveness of Facebook ads for statistical and market research purposes and helps optimize future advertising strategies.

The collected data is anonymous to us and does not allow us to identify users. However, Facebook stores and processes this data, making it possible to associate it with individual user profiles. Facebook may use this data for its advertising purposes in accordance with the Facebook Data Usage Policy (https://www.facebook.com/about/privacy/). You can allow Facebook and its partners to place ads on and outside of Facebook. A cookie may also be stored on your device for this purpose. These processing activities only occur with your explicit consent in accordance with Art. 6 (1) (a) GDPR.

Consent for the use of the Facebook Pixel may only be given by users who are at least 13 years old. If you are younger, please ask your legal guardian for permission.

Facebook Inc., based in the USA, is certified under the US-European "Privacy Shield" agreement, ensuring compliance with EU data protection standards.

To disable cookies on your device, you can configure your browser to prevent cookies from being stored in the future or to delete existing cookies. However, disabling all cookies may limit the functionality of our website. You can also disable the use of cookies for advertising purposes by third parties, such as Facebook, at the Digital Advertising Alliance website: https://www.aboutads.info/choices/

Google AdWords Remarketing Our website uses Google AdWords Remarketing to advertise on Google search results and third-party websites. The provider is Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). For this purpose, Google sets a cookie in your browser that enables interest-based advertising based on your website visits. Processing occurs under our legitimate interest in optimizing our website’s marketing as per Art. 6 (1) (f) GDPR.

Further data processing only occurs if you have given Google consent to link your web and app browsing history to your Google account and for Google to use this information for personalized ads. If you are logged into your Google account while visiting our website, Google will use your data along with Google Analytics data to create audience lists for cross-device remarketing. Your personal data will be temporarily linked to Google Analytics data to define target audiences.

You can permanently disable cookie-based advertising by downloading and installing the browser plugin available at: https://www.google.com/settings/ads/onweb/

Alternatively, you can visit the Digital Advertising Alliance at www.aboutads.info to learn about cookie settings and modify them. You can also configure your browser to notify you about cookie usage and decide whether to accept them in specific cases or generally. Disabling cookies may limit the functionality of our website.

Google LLC, based in the USA, is certified under the US-European "Privacy Shield" agreement, ensuring compliance with EU data protection standards.

Further information on Google’s advertising privacy policies can be found at: https://www.google.com/policies/technologies/ads/

13) DATA SUBJECT RIGHTS

13.1 Under applicable data protection laws, you have the following rights regarding the processing of your personal data:

• Right of access (Art. 15 GDPR): You have the right to request confirmation of whether we process your personal data, details about data processing purposes, categories of processed data, recipients of disclosed data, the intended storage period, the existence of correction, deletion, restriction, or objection rights, the right to file a complaint, the origin of your data if we did not collect it, and information on automated decision-making and profiling.

• Right to rectification (Art. 16 GDPR): You have the right to request the immediate correction of inaccurate data or completion of incomplete data stored by us.

• Right to erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data under the conditions of Art. 17 (1) GDPR. However, this right does not apply if processing is necessary for freedom of expression and information, legal obligations, public interest, or legal claims.

• Right to restriction of processing (Art. 18 GDPR): You have the right to restrict processing if you contest the accuracy of your data, object to deletion due to unlawful processing, require data for legal claims, or have objected to processing while verification is pending.

• Right to notification (Art. 19 GDPR): If you have exercised your right to correction, deletion, or restriction, we must inform all recipients of your personal data about these actions unless this is impossible or requires disproportionate effort. You have the right to be informed about these recipients.

• Right to data portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, common, and machine-readable format or request its transfer to another controller, where technically feasible.

• Right to withdraw consent (Art. 7 (3) GDPR): You have the right to withdraw consent at any time with future effect. If consent is withdrawn, we will delete the affected data unless further processing is legally permitted.

• Right to lodge a complaint (Art. 77 GDPR): If you believe that the processing of your personal data violates GDPR, you have the right to file a complaint with a supervisory authority, particularly in the EU member state where you reside, work, or where the alleged violation occurred.

13.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR LEGITIMATE INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA UNLESS WE HAVE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO SUCH PROCESSING AT ANY TIME. IF YOU OBJECT, WE WILL CEASE PROCESSING YOUR DATA FOR DIRECT MARKETING PURPOSES.

14) DURATION OF PERSONAL DATA STORAGE

The storage period of personal data is determined by statutory retention periods (e.g., tax and commercial law retention periods). After these periods expire, the relevant data is routinely deleted unless it is required for contract fulfillment or initiation, or if our legitimate interest in further storage continues.