Privacy Policy and Terms & Conditions

• This Privacy Policy for Patients, Patient Representatives and Local Physicians;
• The General Privacy Policy;
• The Terms & Conditions; and
• The Cookie Policy.

• Patients: They have the possibility to upload, post and submit certain content to the Platform in order to request Second Opinions.
• Patient Representatives: When they have previously been authorized by the Patient, or in the Patient’s vital interest, they have the possibility to upload, post and submit certain content to the Platform in order to request a Second Opinion on behalf of the Patient.
• Local Physicians: They have the possibility to upload, post and submit certain content to the Platform in order to request a Second Opinion on behalf of the Patient (when they have been previously authorized by the Patient, or in the Patient’s vital interest).

Where the User is a Local Physician requesting a Second Opinion, or a Patient Representative, they expressly guarantee Medical Second Opinion Ltd. that they can provide the Patient’s health data for the processing intended by this Website and our Platform (including the transfer of the Patient’s data including health data to the hospitals and Medical Professionals that will provide the Second Opinion) either under the “previous authorization” of the Patient or under the “vital interest” of the Patient.

As a consequence, where a Local Physician or Patient Representative provides us with Patient information, he/she shall be responsible to inform the Patient of the processing of his/her personal data (particularly, his/her health data) by Medical Second Opinion Ltd. by this Website and Platform. Therefore, the Local Physician or Patient Representative also guarantees that he/she obtained the appropriate prior specific authorization from the Patient to do so, unless there is one of the exceptions set out in section 2.2. of this Privacy Policy for Patients, Patient Representatives and Local Physicians and where Medical Second Opinion Ltd. is not obliged to inform the Patient.

When Users are registered on our Platform and have a user account for the use of our Online Services (an “Account” as detailed in the Terms & Conditions), we process the following personal data as data controller: title, name, date of birth, gender, country of residence, e-mail address, hospital/practice if a Local Physician creates the account, IP address, as well as your access data.

After completing the registration form and once the User Account has been created, a User becomes a User of Medical Second Opinion Ltd. We process the data of your User Account solely for operating your Account and the provision of our Online Services. This data processing is therefore necessary for the fulfilment of our (pre)contractual obligations.

We store data in connection with your registration and your User Account either until the end of your client relationship with us, or beyond that until the expiry of the respective legal retention periods (usually no longer than a time period of 7 years).

When Users request a Second Opinion via our platform, we process the following personal data as data controller: name, date of birth, city, country, language, gender, diagnosis of the Patient, information on prior treatments and stage of disease of the Patient, date of first diagnosis of the Patient, and reason for the Second Opinion (if applicable, the data of the Local Physician or Patient Representative).

In the event that Local Physicians or Patient Representatives share information about a Patient with a Medical Professional (at the hospitals providing Second Opinions) and translators (to translate the medical records) in order to obtain a Second Opinion, the Patient must have given his/her prior informed consent in accordance with article 14 GDPR given that such information cannot be completely anonymized. In case the sharing of data is necessary for the vital interests of the Patient, the User will guarantee Medical Second Opinion Ltd. to have previously informed the Patient and/or his/her legal representative of any and all processing carried out by Medical Second Opinion Ltd. through the Platform and Website, in accordance with the contracted Online Services.

Following the request for a Second Opinion, Medical Professionals of cooperating hospitals providing Second Opinions to the patient through our Website become independent data controllers upon data transfer and will draft and share the requested Second Opinion so that the requester can access it. In this case, we process the following details of the Second Opinion: name and location of the Patient (if applicable, name and location of the Local Physician or Patient Representative), date of the Second Opinion request, date the Second Opinion was completed, hospital which completed the consult, and modifications of the diagnosis/treatment/management based on the Second Opinion.

The data processing is necessary for the fulfilment of our (pre)contractual obligations. Further, the processing of special categories of personal data (e.g. health data) is based on the same legal basis as mentioned in the second paragraph of section 2.2 above.

Depending on who requests the Second Opinion, we receive the personal data either directly from you (or if applicable, from the Patient Representative or Local Physicians). Further, the data within the Second Opinion results from cooperating hospitals/physicians in the USA.

• Translators;
• IT-service providers and/or providers of data hosting solutions or similar services;
• Other service providers, providers of tools and software solutions that support us with the performance of our Online Services and operate on our behalf (including providers of marketing tools and communication service providers).

All our data processors process the personal data only on our behalf and on the basis of our instructions so that we can provide Users with our Online Services.

• The hospitals and responsible Medical Professionals who provide the requested Second Opinion (based on the Patient’s consent – given directly to us or indirectly via the other Users acting on behalf of the Patient, the Patient’s vital interests and contractual relationship with a Local Physician);
• Potential third parties that are participating in the provision of services for the fulfilment of our contractual obligations (e.g. banks for processing of the payment, payment service providers);
• External third parties based on our legitimate interests only to the extent necessary (e.g. auditors and tax consultants, insurances in case of insured events, legal representatives in case of incidents, courts and competent authorities);
• Authorities, courts and other public entities to the extent legally necessary (e.g. financial authorities).

• Legal claims resulting from the relationship between Users and us are possible, or until the definitive clarification of an incident or legal dispute. This longer storage occurs to ensure our overriding legitimate interests in the enforcement, clarification and defense of our legal claims.
• In addition, we are potentially obligated to store the personal data for longer in accordance with legal retention periods such as the ones stated i.e. by Tort Law, Taxes, Anti-Money laundering regulation, Data Protection, Health-care liabilities, or E-commerce regulations.
• We may also store personal data to address requests from government administrations and courts in the exercise of their functions and to defend ourselves against possible claims.

Affinity Ltd.

Królowej Jadwigi 43, 61-871 Poznań, Poland

Electronic address: gdpr.representative@affinity-group.pl

We comply with appropriate technical and organizational security measures pursuant to Art 32 GDPR, considering the risks, to guarantee an appropriate data protection level, especially to protect the personal data against accidental or unlawful destruction, alteration or against loss and against unauthorized disclosure or unauthorized access. Our security measures include:

• Encrypted connection and SSL certificate.
• Authentication, authorization, encryption and access restriction mechanisms at the level of: firewall, server and application, firewall and antivirus protection.
• Security logs with digital record of server activity.
• The use of secure and proven solutions for database service, server website, web container, user interface and integration.
• System design and implementation procedures based on good practices and guidelines to protect the system against the most common attacks according to the documentation of OWASP project management.
• Forced use of secure passwords.
• Automatic inactivity logout.
• Secure facilities for data storage.
• Access to information on a need-to-know basis and role-based access control.
• Systematic anonymization or deletion of personal data which is no longer necessary for the purposes they were collected and processed.

We may amend this Privacy Policy from time to time in accordance with article 1.6 and 1.7. of Terms and Conditions available on our Website.

• this General Privacy Policy;
• the Terms & Conditions;
• the Privacy Policy for Patients, Patient Representatives and Local Physicians; and
• the Cookie Policy.

In the following sections you will be informed which personal data we potentially collect, process and use when you use our Online Services.

When you fill out the contact form on our Website and send your enquiry or establish contact with us via phone call, postal mail, e-mail or through other electronic channels, we process (as a data controller) the data you voluntarily provided us with (name, e-mail address, nature of the enquiry, the subject of your message and the content of your message).

We process the data provided within the course of contacting us solely for processing your enquiry, to get in contact with you if desired and to provide you with the requested information. This data processing is therefore necessary for answering your enquiry, based on our legitimate interest, your consent, and for the fulfilment of our (pre)contractual obligations. Therefore, as soon as these purposes are completed, we erase your data.

Based on your consent declaration, we also collect and process the following data about your use and interaction with our Website and Online Services: IP-address of your device, the used internet browser, the browser language, your operating system, the requested files from our Website, your settings regarding Java, screen resolution, color depth, your click behavior on the Website (time of access, clicks) as well as the internet site from which you visit us (referral URL).

This data is generally collected through cookies (see our Cookie Policy). We use this usage data for (i) web analysis, (ii) improvements to our Online Services and our Website and (iii) increasing usability. This data processing occurs on the basis of your consent to the use of cookies on our Website. You can withdraw this consent at any time (e.g. through your browser settings regarding cookies) with effect for the future and free of charge.

On the basis of your consent declaration (obtained through the double opt- in process, which means that after registering for the newsletter you receive an e-mail in which you are asked to confirm your registration), we process the personal data that you provided us with voluntarily in the course of the registration for the newsletter (your e-mail address) in order to send you e-mail newsletters about our platform, current projects, marketing and product information.

You can withdraw your consent to the receipt of our newsletter at any time (e.g. via e-mail to info@globalsecondopinion.com) or through the unsubscribe link in our e-mail newsletters) with effect for the future and free of charge. After receipt of your withdrawal, we will cease to send you e-mail newsletters and erase your personal data from the mailing list.

Provided that you have only registered for our newsletter (therefore, when you have not requested from us a second opinionfrom us), we store your data until the withdrawal of your consent and beyond that for a maximum of three years in order to demonstrate compliance with data protection and e-commerce regulations.

When you register on our Platform and create a user account (“Account”, as defined in section 2 of the Terms & Conditions) for the use of our Online Services, we process your personal data in accordance with our Privacy Policy for Patient Representatives and Local Physicians.

When you request a Second Opinion via our Website and Online Services, we process your personal data according to our Privacy Policy for Patients, Patient Representatives and Local Physicians.

We collect and process the following data when you use our Website and Online Services, which means accessing the corresponding server which contains the specifically requested service (so called server log files): name of the accessed site, file, date and time of access, transmitted quantity of data, server status codes, username, processing time, browser and client type alongside the version, your operating system, referrer URL (the previously visited site), IP-address and the requesting provider, reverse DNS, location data, connection data, source and target (network discovery or address, port numbers, protocol, e-mail address, e-mail subject, connecting server, protocol details, reputation data, reverse DNS, obvious labelling, connected servers), authentication details and e-mail meta information.

This data is generated automatically through our servers when you use our services and is necessary so that we can provide you with the desired services. We therefore process server log files solely to be able to operate our Website and the connected Online Services, to identify you as a user authorized to access, to distribute web server requests in our server pool as well as for security reasons (e.g. for clarification of abusive and fraudulent activities). Thus, this data processing activity is necessary to ensure our legitimate interests in operating a user friendly and secure Website.

Without prejudice to defend our eventual liabilities as stated below , we generally store this data for 500 days since your access data and log files were collected before erasing them.

Within our Online Services, we use further services and contents of third party providers to incorporate their contents and services on the basis of our legitimate interests in the provision, optimization and economical operation of our Online Services. This regularly requires that the third parties of these contents receive the IP address of the user as they are not able to send the requested contents to the right browser without the IP address. The IP address is therefore necessary for the display of these contents and the use of the embedded services.

Specifically, we have utilized the following services and contents of third parties in our Online Services: Stripe, Google Analytics, DeepL, mailchimp and HubSpot.

• IT-service providers and/or providers of data hosting solutions or similar services;
• Other service providers, providers of tools and software solutions that support us with the performance of our Online Services and operate on our behalf (including providers of marketing tools, communication service providers, and translators).

All our data processors process your data only on our behalf and on the basis of our instructions so that we can provide you with our Online Services.

• External third parties on the basis of our legitimate interests in the extent necessary (e.g. auditors and tax consultants, insurances in case of insured events, legal representatives in case of incidents, courts and competent authorities, social networks);
• Authorities, courts and other public entities in the extent legally necessary (e.g. financial authorities);
• Potential third parties that are participating in the provision of services for the fulfilment of our contractual obligations (e.g. banks for processing of the payment, payment service providers);
• The hospitals and responsible Medical Professionals who provide the requested Second Opinion (based on the Patient’s consent – given directly to us or indirectly via the other Users acting on behalf of the Patient, the Patient’s vital interests and contractual relationship with a Local Physician). Hospitals and Medical Professionals are the only recipients of health data.

• Legal claims out of the relationship between users and us are possible, or until the definitive clarification of an incident or legal dispute. This longer storage occurs to ensure of our overriding legitimate interests in the enforcement, clarification and defense of our legal claims.
• Beyond that, we are potentially obligated to store personal data for longer in accordance with legal retention periods such as the ones stated by i.e. Tort Law, Taxes, Anti-Money laundering regulation, Data Protection, Health-care liabilities, E-commerce regulations.
• We may also store personal data blocked to deal with requests from government administrations and courts in the exercise of their functions and to defend ourselves against possible claims.

Konrad Bednarowski

Affinity Ltd.

Królowej Jadwigi 43, 61-871 Poznań, Poland

Electronic address: gdpr.representative@affinity-group.pl

We comply with appropriate technical and organizational security measures pursuant to Art 32 GDPR to, considering the risks, guarantee an appropriate data protection level, especially to protect the personal data against accidental or unlawful destruction, alteration or against loss and against unauthorized disclosure or unauthorized access. Our security measures include:

• An encrypted connection and SSL certificate.
• Authentication, authorization, encryption and access restriction mechanisms at the level of: firewall, server and application, firewall and antivirus protection.
• Security logs with digital record of server activity.
• The use of secure and proven solutions for database service, server website, web container, user interface and integration.
• System design and implementation procedures based on good practices and guidelines to protect the system against the most common attacks according to the documentation of OWASP project management.
• Forced use of secure passwords.
• Automatic inactivity logout.
• Secure facilities for data storage.
• Access to information on a need-to-know basis and role-based access control.
• Systematic anonymization or deletion of personal data, which is no longer necessary for the purposes for which were collected and processed.

We may amend this Privacy Policy from time to time in accordance with article 1.6 and 1.7. of Terms and Conditions available on our Website.

DETAILS OF THE COMPANY

Company: Medical Second Opinion Ltd.

Location of principal office: 37 Perry St. #1, 02445 Brookline, MA USA

Email: info@globalsecondopinion.com

Company Registration:

The Commonwealth of Massachusetts, ID number: 001390930

Delaware SR#20195708364

EIN: 84-2038100

Objective of the Company: Medical advice intermediation platform

Thank you for using the Global Second Opinion Platform. By visiting or using the Platform (as defined below) you (“you”, “your”, “User/s”) accept and agree to be bound by the following Terms and Conditions (“Terms”) and any applicable terms, conditions, policies, notices and operating rules contained or referenced in this document or on the Platform in full (collectively the “Agreement”). We may ask you to expressly agree to these Terms if you register an account on our Platform or use any product or service. If you are entering into this Agreement on behalf of a company or other legal entity, you confirm that you have the authority to bind such entity to these Terms, in which case the terms “you”, “your” or “User/s” shall refer to such entity. If you do not have such authority, or if you do not agree with these Terms, you must not accept this Agreement and may not visit or use the Platform.

• These “Terms & Conditions” (“Terms”);
• The “General Privacy Policy”;
• The “Privacy Policy for Patients, Patient Representatives and Local Physicians”;
• The “Cookie Policy“; and
• Other information, notices, statements and operating rules presented on the Platform.

• For browsing the content of the Website – for the time you visit the Website.
• If you contacted us via contact form or by e-mail – for time needed for us to reply.
• If you registered an account on the Platform – for the time the account is registered.
• For the newsletter – for the period of newsletter subscription.

• Request Second Opinions for one or more cases.
• Upload and submit data and medical records relevant for Second Opinions.
• Make electronic payments.
• Get access to and download Second Opinions and/or other related documents that were issued on your request.
• Communicate with us via the internal messaging system on the Platform.
• Fill in the feedback survey.

• Make initial verification of completeness of submitted data and medical records.
• Get relevant information and documents translated to English and have the Second Opinion translated back into your language of preference (if necessary).
• Submit your case to an experienced medical team at the University Hospital to determine the Medical Professional who fits your specific case to provide the Second Opinion.
• Through the University Hospital, request the selected Medical Professional to issue the Second Opinion on your behalf.
• Supervise the whole process (e.g. contact and coordinate actions of its participants).

• Browse the content of the Website.
• Contact us via the provided contact form or by e-mail.
• Subscribe to the newsletter.

• Access to the Internet.
• Web browser (one of the following): Firefox, Chrome, Safari, Edge or Opera, updated to the latest version, with Javascript support enabled.
• Device with technical parameters that support the operation of listed web browsers.
• Active e-mail account.
• When using antivirus or firewall software which, due to its settings, blocks access to certain websites or prevents the use of certain functions, an appropriate software configuration is necessary, in particular by adding the Website address to the trusted addresses.
• Recommended minimum display resolution: 640 x 800 pixels.
• Documents can be uploaded in the following file formats: Word (DOC, DOCX), Excel (XLS, XLSX, CSV), Adobe (PDF), Archive (ZIP, RAR)
• Images can be uploaded in the following file formats: Image (JPG, JPEG, GIF, PNG, DCM), Archive (ZIP, RAR).

• Local Physicians: They have the possibility to upload, post and submit certain content to the Platform in order to request (on behalf of the Patient, when they have been previously authorized by the Patient, or based on the applicable law or in the Patient’s vital interest) Second Opinions concerning a Patient’s health condition.
• Patients: They have the possibility to upload, post and submit certain content to the Platform in order to request Second Opinions concerning their health condition.
• Patient Representatives: When they have been previously authorized by the Patient, or based on the Patient’s vital interest, they have the possibility to upload, post and submit certain content to the Platform in order to request a Second Opinion concerning a Patient’s health condition on behalf of the Patient. Patient Representatives can be friends, family members, caregivers or other persons acting on behalf of the patient with the patient's consent.

This content may include texts and images and shall only include data and medical records that are relevant for the Second Opinion (“User Content”).

Where the User is a Local Physician or a Patient Representativeof the Patient requesting a Second Opinion, he/she expressly guarantees Medical Second Opinion Ltd. that they can give us the Patient’s health data for the processing intended under this Website and our Platform either with authorization of the Patient, under applicable law, or under the vital interest of the Patient.

• Authorize us to present the submitted case to the experienced medical team at the University Hospital to determine the Medical Professional who fits your specific case
• Grant us the power to request that Medical Professional to issue the Second Opinion on your behalf.

• Was uploaded to our Platform but has not become part of a valid request for a Second Opinion within the month of the upload or
• Was found to be unnecessary or irrelevant for issuing the Second Opinion or
• Has already been used by the Medical Professional

may be deleted by us from the Platform with advance notice sent to you via e-mail at least 14 days prior to the deletion. Second Opinions and translations of User Content may also be deleted from the Platform with 14-days advance notice but no sooner than 6 months after they were delivered to you through the Platform.

• Surcharges for translation for every page beyond the first 10 pages of User Content.
• Surcharges for additional services referred to in article 6.12.
• Bank service charges (as may be applied by your bank or credit card provider).

• Make untrue statements and allegations or provide User Content against better knowledge.
• Misuse the Platform for promotion and marketing of own services.
• Promote any illegal activity, or advocate, promote or assist any unlawful act.
• Submit any material or content that is pornographic, obscene, improper, offensive, threatening, harassing, libelous, hate-oriented, harmful, defamatory, racist, xenophobic, shocking, illegal, or otherwise objectionable.
• Violate legal rights (including the rights of publicity and privacy) of others or submit any content that could give rise to any civil or criminal liability under any applicable laws or that otherwise may be in conflict with these Terms, the Privacy Policy for Patients, Patient Representatives and Local Physicians, the General Privacy Policy and the Cookie Policy.
• Submit or encourage the submission of any material that may infringe the intellectual property rights or other rights of third parties, including trademark, copyright, patent, or right of publicity, or which otherwise constitutes or promotes counterfeit materials or goods.
• Decompile, disassemble, reverse engineer, copy, transfer, or otherwise use the Platform or any content except as permitted by copyright law.
• Crawling, scraping, caching or otherwise assessing any content on the Platform via automated means.
• Submit any material or content that attempts to falsely state or otherwise misrepresent your identity or affiliation with a person or entity.
• Submit material or content that promotes, provides, or relates to instructional information about illegal activities or promotes physical harm or injury against any individual or group.
• Submit or otherwise make available any unsolicited or unauthorized advertising, promotional materials, "junk mail", "spam", "chain letters", "pyramid schemes", or any other form of solicitation.
• Use the Platform in a manner that (i) is likely to interrupt, suspend, slow down or hinder the continuity of the Platform, (ii) constitutes an intrusion or attempt to break into the Platform or our information technology (IT) infrastructure, (iii) will divert resources from the Platform system, (iv) may place a disproportionate load on the infrastructure of the Platform, or (v) constitutes an attack on security and authentication measures of the Platform or our IT infrastructure.
• Intrude into a third party's computer system, engage in any activity that may damage, control, interfere with or intercept all or part of a third party's computer system and violate its integrity or security, or otherwise transmit any materials or content that is harmful for a third party's information system (including but not limited to viruses, worms, Trojans).
• Distribute any part of the Platform, including but not limited to any content, in any medium without prior written authorization from us or the respective owner.
• Otherwise use the Platform for purposes other than those for which it is designed.

• You breach these Terms, the Privacy Policy for Patients, Patient Representatives and Local Physicians, the General Privacy Policy and the Cookie Policy or any applicable laws;
• Other Users complain about your activities on the Platform;
• We believe that your actions may cause any loss or liability to other Users or to us.

• Any statutory warranty claims by Consumers against us for defects in our services.
• Our obligations and liability under GDPR (if applicable).

• the General Privacy Policy;
• the Cookie Policy; and
• the Privacy Policy for Patients, Patient Representatives and Local Physicians.

• In an electronic form by e-mail to info@globalsecondopinion.com, through the Website contact form or the Platform internal messaging system.
• In writing to: Medical Second Opinion Ltd., 37 Perry St. #1, 02445 Brookline, MA, USA;

• In electronic form: by e-mail or by Platform internal messaging system;
• By phone; or
• In writing

to the e-mail, phone number or mailing address provided by you.

• your full name,
• name of the company or other legal entity if you act on behalf of such entity,
• the description of you reservations and
• the proposed method of handling the Complaint.

• "Necessary Cookies" and "Functionality Cookies" are necessary to be able to provide you with our Website and the connected services, to operate our Website and serve for the proper functionality and security of our Website. These cookies are therefore necessary to pursue our legitimate interests in the provision of a user friendly and secure Website. (Please see table below).
• "Tracking Cookies", "Marketing Cookies" and "Web-Analysis Cookies" record your user behaviour and your interactions with our Website. Through these Cookies, we can adapt our Online Services specifically to you as well as place advertisements suitable for you. We place such cookies only on the basis of your consent that you can withdraw at any time. You can find further details about the specifically used Tracking, Marketing and Web-Analysis Cookies in point. (Please see table below).

Our website uses functions of the web analytics service Google Analytics by Google Inc. ("Google"), member of Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). This analysis tool uses cookies to collect standard log information and to enable analysis of the use of the website in an aggregate form. The information about your use of this website covered by the Google Analytics cookies may be transferred to Google server (usually in the US or in other countries outside the EU) and stored there. Since we respect the privacy of our users, we process only anonymized IP addresses.

We also use the analyzing function of Universal Analytics, in order to obtain information about the use of our services on different devices ("Cross Device"). We use solely cookie which prior pseudonymizes user ID without processing personal data and does not transfer such personal data to Google. The data collection and storage can be objected at any time with effect for the future by deactivating the cross-device user analysis in your account.

More information on Universal Analytics can be found here:

https://support.google.com/analytics/answer/2838718?hl=de&ref_topic=6010376

The following information is collected by Google Analytics: anonymized IP address, browser, device type, device model, country, service provider, monitor resolution (on a mobile device), dwell time, language, operating system, visited pages on the website. Google will use this information, in particular to evaluate the use of the website users, compiling reports on website activity. Google may also transfer this information to third parties where required by law or third parties process this data on behalf of Google. If you want to opt out on Google Analytics, you can download and install the following plugin:

http://tools.google.com/dlpage/gaoptout

User data is stored indefinitely or until you request deletion of your data. Google will then as soon as possible and in any case within 180 days delete the data.

Google uses the DoubleClick cookie on Google's advertising network sites and certain Google services to help AdWords customers and publishers serve and manage ads on the web. When you visit a website and display or click on an ad placed through Google Advertising Network websites, a DoubleClick cookie may be placed in your browser. The DoubleClick cookie identifier associated with your browser is the same identifier used when you visit websites that use DoubleClick adware. If your browser already has a DoubleClick cookie, no additional DoubleClick cookies should be placed. For more information about the use of DoubleClick cookies in connection with DoubleClick's advertising program, please see the DoubleClick Privacy FAQ:

https://policies.google.com/technologies/ads?hl=es

On our websites we use the Google Tag Manager. This service allows website tags to be managed via an interface. Google Tag Manager does not collect any personal data.

This website uses the remarketing technology of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). This technology enables users who have already visited our websites and online services and are interested in the service to be addressed again through targeted advertising on the pages of the Google Partner Network. The insertion of advertising takes place through the use of cookies, which are small text files that are stored on the user's computer. The text files can be used to analyse user behaviour when visiting the website and then be used for targeted product recommendations and interest-based advertising.

If you do not wish to receive interest-based advertising, you may opt-out of Google's use of cookies for this purpose by visiting the site:

https://www.google.de/settings/ads

Alternatively, users can deactivate the use of third-party cookies by going to the Network Advertising Initiative deactivation page.

By consenting to the use of cookies via our cookie banner, you consent to the processing of data about you by Google in the manner and for the purposes set out above. Please note that Google has its own privacy policies, which are independent of ours. We assume no responsibility or liability for these policies and procedures. Please read Google's privacy policy before using our website.

Here you will find the relevant privacy policy of Google Inc.:

http://www.google.com/intl/de/policies/privacy/

Notwithstanding the former information and the strictly necessary cookies to provide the services, you have the possibility to configure your browser to be warned of the use of cookies and prevent their installation on your device. However, disabling cookies may affect the proper functioning of certain sections of the Website.

Likewise, you have the possibility to revoke at any time the consent given by you for the use of cookies, without this affecting the unlawfulness of the processing based on your consent prior to your withdrawal. You can do this by configuring your browser for this purpose in the terms set out in the previous point.

Please consult the instructions and manuals of your browser for further information:

• Internet Explorer: https://support.microsoft.com/es-es/help/17442/windows-internet-explorer-delete-manage-cookies
• Mozilla Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
• Google Chrome: https://support.google.com/chrome/answer/95647?hl=en
• Safari: https://support.apple.com/en-gb/HT201265