Data Protection Declaration

The responsible party for data processing is:

Hofmann Experience GmbH Kirchgasse 7/2 6370 Kitzbühel Austria

We appreciate your interest in our website. Protecting your privacy is very important to us. Below we inform you in detail about the handling of your data. The processing of your data is based on the GDPR and in accordance with § 96 paragraph 3 TKG.

ACCESS DATA AND HOSTING You can visit our websites without providing any personal information. Each time a website is called up, the web server automatically stores only a so-called server log file, which contains, for example, the name of the requested file, your IP address, date and time of access, amount of data transferred and the requesting provider (access data) and documents the access.

These access data are evaluated exclusively for the purpose of ensuring the smooth operation of the site and improving our offer. This serves to protect our predominantly legitimate interests in the correct presentation of our offer in the context of a balancing of interests according to Art. 6 Para. 1 S. 1 lit. f GDPR. All access data are deleted no later than seven days after the end of your visit to the site.

HOSTING The services for hosting and displaying the website are partially provided by our service providers as part of processing on our behalf. Unless otherwise explained in this privacy policy, all access data and all data collected in the designated forms on this website are processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please contact the contact option described in this privacy policy.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision: Canada

Our service providers are located and/or use servers in the USA and in other countries outside the EU and EEA. For these countries, there is no adequacy decision by the European Commission. Our cooperation with them is based on standard data protection clauses of the European Commission.

DATA PROCESSING FOR CONTACTING AND CUSTOMER COMMUNICATION We collect personal data when you voluntarily provide it to us when contacting us (e.g., via contact form or email). Mandatory fields are marked as such, as in these cases we require the data for processing your contact and you cannot send the contact without providing it. Which data is collected can be seen from the respective input forms. We use the data provided by you to process your inquiries according to Art. 6 Para. 1 S. 1 lit. b GDPR.

After complete processing of your customer inquiry, your data will be restricted for further processing and deleted after the expiry of the tax and commercial retention periods according to Art. 6 Para. 1 S. 1 lit. c GDPR, unless you have expressly consented to further use of your data according to Art. 6 Para. 1 S. 1 lit. a GDPR or we reserve the right to further data use, which is legally permitted and about which we inform you in this statement.

LIVE CHAT TOOL WHATSAPP For the purpose of customer communication, we use the live chat tool of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("WhatsApp"). This serves to protect our predominantly legitimate interests in an effective and improved customer communication according to Art. 6 Para. 1 S. 1 lit. f GDPR. WhatsApp acts on our behalf. The phone numbers stored on our mobile device are automatically processed on servers of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA. Only phone numbers of customers who have previously contacted us via WhatsApp and have therefore already accepted WhatsApp's terms of use and privacy policy are stored. There is no adequacy decision by the European Commission for the USA. Our cooperation is based on standard data protection clauses of the European Commission.

ADVERTISING BY EMAIL, POST

3.1 EMAIL NEWSLETTER WITH REGISTRATION AND NEWSLETTER TRACKING

If you subscribe to our newsletter, we use the data required for this purpose or separately provided by you to send you our email newsletter regularly based on your consent according to Art. 6 Para. 1 S. 1 lit. a GDPR.

Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described below or via a link provided in the newsletter. After unsubscribing, we delete your email address from the recipient list, unless you have expressly consented to further use of your data according to Art. 6 Para. 1 S. 1 lit. a GDPR or we reserve the right to further data use, which is legally permitted and about which we inform you in this statement.

We would like to point out that we evaluate your user behavior when sending the newsletter. For this evaluation, the sent emails also include single-pixel technologies (e.g., so-called web beacons, tracking pixels) stored on our website. For the evaluations, we link the following "newsletter data"

the page from which the page was requested (so-called referrer URL),

the date and time of the call,

the description of the type of web browser used,

the IP address of the requesting computer,

the email address,

the date and time of registration and confirmation

and the single-pixel technologies with your email address or your IP address and possibly an individual ID. Links contained in the newsletter can also contain this ID.

If you do not wish to have newsletter tracking, you can unsubscribe from the newsletter at any time as described above.

The information is stored as long as you have subscribed to the newsletter.

3.2 NEWSLETTER DISPATCH

The newsletter and the above-described newsletter tracking may also be sent by our service providers as part of processing on our behalf. If you have any questions about our service providers and the basis of our cooperation with them, please contact the contact option described in this privacy policy.

The newsletter may also be sent by our service providers as part of processing on our behalf. If you have any questions about our service providers and the basis of our cooperation with them, please contact the contact option described in this privacy policy.

3.3 MAIL ADVERTISING AND YOUR RIGHT TO OBJECT

Furthermore, we reserve the right to use your first and last name and your postal address for our own advertising purposes, e.g., to send interesting offers and information about our products by letter post, unless you are registered in the Robinson list according to § 151 paragraph 9 GewO. This serves to protect our predominantly legitimate interests in promotional addressing of our customers according to Art. 6 Para. 1 S. 1 lit. f GDPR.

The advertising mailings are provided within the scope of processing on our behalf by a service provider, to whom we pass on your data for this purpose.

COOKIES AND OTHER TECHNOLOGIES

4.1 GENERAL INFORMATION

To make the visit to our website attractive and to enable the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages. This serves to protect our predominantly legitimate interests in an optimized presentation of our offer according to Art. 6 Para. 1 S. 1 lit. f GDPR and is carried out in accordance with the legal provisions of § 96 paragraph 3 TKG. Cookies are small text files that are automatically stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e., after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognize your browser on your next visit (persistent cookies). The duration of storage can be found in the overview of the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and individually decide about their acceptance or exclude the acceptance of cookies for specific cases or in general.

(detailed instructions for the setting options of your browser can be found below). If you do not accept cookies, the functionality of our website may be limited. Below you will find information about the cookies we use and the setting options of your browser.

How can I configure the cookie settings of my browser?

Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find them for the respective browsers under the following links:

Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

What types of cookies are used?

Necessary Cookies

These cookies are necessary to operate our website. This includes, for example, cookies that enable you to log in to the customer area or put something in the shopping cart.

Functional – Cookies

These cookies are used for certain functionalities of our website, e.g., to suggest a better navigation flow on our website, to show you personalized and relevant information (e.g., "interest-based advertisements")

Analytical/Performance – Cookies

These cookies allow us to collect anonymized data about the usage behavior of our visitors. These are then evaluated by us, for example, to improve the functionality of the website and to show you interesting offers.

Targeting – Cookies

These cookies record your visit to our website, the pages you have visited, and the links you have followed. We will use this information to tailor our website and the advertising you see to your interests.

Third-Party Cookies

These cookies from some of our advertising partners help make the internet offering and our website more interesting for you. Therefore, when you visit our website, cookies from partner companies are also stored on your hard drive. These are temporary cookies that automatically delete after a set time. Cookies from partner companies are usually deleted after a few days or up to 24 months, in some cases even after several years. The cookies of our partner companies do not contain any personal data. Only pseudonymous data is collected under a user ID. These pseudonymous data are never merged with your personal data.

We also use technologies to fulfill legal obligations we are subject to (e.g., to prove consent to the processing of your personal data) and for web analysis and online marketing. Further information on this, including the respective legal basis for data processing, can be found in the following sections of this privacy policy.

We may also use technologies not individually listed in this privacy policy. Detailed information about these technologies, including the respective legal basis for data processing, can be found on the Usercentrics platform. You can access it by clicking on the fingerprint button in the lower right or left corner of the page. If you have consented to the use of technologies in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR, you can revoke your consent at any time by sending a message to the contact option described in the privacy policy. Alternatively, you can also click on the fingerprint button in the lower right or left corner of the page. If you do not accept cookies, the functionality of our website may be limited.

4.2 Use of Usercentrics Consent Management Platform for Managing Consents

We use the Usercentrics Consent Management Platform ("Usercentrics") on our website to inform you about the cookies and other technologies we use on our website, as well as to obtain, manage, and document your legally required consent to the processing of your personal data by these technologies. This is necessary according to Art. 6 Para. 1 S. 1 lit. c GDPR to fulfill our legal obligation under Art. 7 Para. 1 GDPR to be able to demonstrate your consent to the processing of your personal data. Usercentrics is an offer of Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, which processes your data on our behalf. When visiting our website, the web server of Usercentrics stores a so-called server log file, which also contains your anonymized IP address, date and time of the visit, device and browser information, and information about your consent behavior. Your data will be deleted after three years, unless you have explicitly consented to further use of your data according to Art. 6 Para. 1 S. 1 lit. a GDPR or we reserve the right to further data use that is legally permitted and about which we inform you in this statement.

Use of Cookies and Other Technologies for Web Analysis and Advertising Purposes

As far as you have given your consent according to Art. 6 Para. 1 S. 1 lit. a GDPR, we use the following cookies and other technologies from third-party providers on our website. Once the purpose has been fulfilled and we have stopped using the respective technology, the data collected in this context will be deleted. You can revoke your consent at any time with effect for the future. Further information on your revocation options can be found in the section "Cookies and Other Technologies." Further information, including the basis of our cooperation with individual providers, can be found with the respective technologies. If you have any questions about the providers and the basis of our cooperation with them, please contact the contact option described in this privacy policy.

5.1 Use of Adobe Services for Web Analysis and Advertising Purposes

We use the technologies of Adobe Systems, Software Ireland Limited, Ireland, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland ("Adobe"). The information automatically collected by Adobe technologies about your use of our website is usually transferred to a server of Adobe, Inc., 345 Park Avenue San Jose, CA 95110-2704, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation is based on standard data protection clauses of the European Commission. If your IP address is collected through Adobe technologies, it will be shortened before being stored on Adobe's servers by activating the appropriate settings, or completely replaced with a generic IP address.

ADOBE FONTS

For the uniform presentation of content on our website, data (IP address, time of visit, device, and browser information) are collected through the script code "Adobe Fonts" by Adobe, Inc., 345 Park Avenue San Jose, CA 95110-2704, USA ("Adobe"), transmitted to Adobe, and then processed by Adobe. We have no control over this subsequent data processing. The data processing is based on an agreement between jointly responsible parties according to Art. 26 GDPR.

5.2 Use of Google Services for Web Analysis and Advertising Purposes

We use the technologies described below from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information automatically collected by Google technologies about your use of our website is usually transferred to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation with them is based on standard data protection clauses of the European Commission. If your IP address is collected through Google technologies, it will be shortened before being stored on Google's servers by activating IP anonymization. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. As far as individual technologies are concerned, data processing is based on an agreement between jointly responsible parties according to Art. 26 GDPR. Further information on data processing by Google can be found in Google's privacy policy.

GOOGLE ANALYTICS

For website analysis purposes, data (IP address, time of visit, device and browser information, and information about your use of our website) are automatically collected and stored by Google Analytics, from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. Your IP address is generally not merged with other Google data. Data processing is based on an agreement on order processing by Google.

GOOGLE ADS

For advertising purposes in Google search results and on third-party websites, the so-called Google Remarketing Cookie is set when you visit our website, which automatically enables interest-based advertising by collecting and processing data (IP address, time of visit, device and browser information, and information about your use of our website) and using a pseudonymous CookieID based on the pages you visited. Further data processing only takes place if you have activated the "personalized advertising" setting in your Google account. If you are logged in to Google during your visit to our website, Google will use your data in conjunction with Google Analytics data to create and define audience lists for cross-device remarketing.

GOOGLE FONTS

For the uniform presentation of content on our website, data (IP address, time of visit, device, and browser information) are collected through the script code "Google Fonts," transmitted to Google, and then processed by Google. We have no control over this subsequent data processing.

YOUTUBE VIDEO PLUGIN

For the integration of third-party content, data (IP address, time of visit, device, and browser information) are collected via the YouTube Video Plugin in the enhanced privacy mode used by us, transmitted to Google, and then processed by Google, only when you play a video.

5.3 Use of Facebook Services for Web Analysis and Advertising Purposes

Use of Facebook Pixel

We use the Facebook Pixel within the technologies described below from Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook (by Meta)" or "Meta Platforms Ireland"). With the Facebook Pixel, data (IP address, time of visit, device, and browser information, and information about your use of our website based on events predefined by us, such as visiting a website or newsletter registration) are automatically collected and stored, from which usage profiles are created using pseudonyms. A cookie is automatically set by the Facebook Pixel when you visit our website, which automatically enables the recognition of your browser when visiting other websites using a pseudonymous CookieID. Facebook (by Meta) will merge this information with other data from your Facebook account and use it to compile reports on website activities and provide other services related to website usage, especially personalized and group-based advertising.

The information automatically collected by Facebook (by Meta) technologies about your use of our website is usually transferred to a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA, and stored there. There is no adequacy decision by the European Commission for the USA. If the data transfer to the USA falls within our responsibility, our cooperation is based on standard data protection clauses of the European Commission. Further information on data processing by Facebook can be found in the privacy policy of Facebook (by Meta).

FACEBOOK ADS (AD MANAGER)

We advertise this website on Facebook (by Meta) and other platforms via Facebook Ads. We determine the parameters of the respective advertising campaign. Facebook (by Meta) is responsible for the exact implementation, especially the decision on the placement of ads with individual users. As far as individual technologies are concerned, data processing is based on an agreement between jointly responsible parties according to Art. 26 GDPR. The joint responsibility is limited to the collection of data and its transmission to Meta Platforms Ireland. The subsequent data processing by Meta Platforms Ireland is not covered by this.

5.4 Other Providers of Web Analysis and Online Marketing Services

Use of Hotjar for Web Analysis: Collects data using Hotjar Ltd. technologies for website analysis.

Use of Vimeo Video Plugin: Incorporates third-party content through Vimeo LLC's video plugin.

5.5 Information on Third-Country Transfer (Data Transfer to Third Countries)

Discusses the use of technologies by service providers whose servers may be located in third countries outside the EU/EEA, including the USA.

Addresses the implications of the EU Court of Justice's decision on the Privacy Shield agreement and the use of standard contractual clauses and binding corporate rules for data protection.

6. Social Media

6.1 Social Plugins from Facebook (by Meta), Instagram (by Meta): Explains the use of social media buttons on their website.

6.2 Online Presence on Facebook (by Meta), Instagram (by Meta), YouTube: Details data collection for marketing and research purposes upon user consent.

7. Contact Options and Your Rights

7.1 Your Rights: Lists the rights of individuals under GDPR, including access to data, correction, deletion, and objection to processing.

7.2 Contact Options: Provides information on how to contact for queries related to personal data.