Name and contact details of the data controller:

Controller:
Orient Gate GmbH
Pinkertweg 4
22113 Hamburg
Commercial Register/No.: Hamburg District Court HRA 47 618
Managing Director: Fadi El-Tayeche
Phone: +49 (0)40 411 88 30-88
Fax: +49 (0)40 411 88 30-60
marketing@orientgate.com

Types of data processed:

• Contact data (e.g., email, phone numbers).
• Usage data (e.g., visited websites, interest in content, access times).
• Meta/communication data (e.g., device information, IP addresses).

Processing of special categories of data (Art. 9 para. 1 GDPR):
No special categories of data are processed.

Categories of persons affected by processing:
Visitors and users of the online offering.

Purpose of processing:

• Responding to contact inquiries and communication with users.
• Newsletter.

Collection and storage of personal data and type and purpose of their use:

When you visit our website www.orientgate.com, information is automatically sent from your browser to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automated deletion:

• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the retrieved file,
• Website from which access is made (referrer URL),
• Browser used and, if applicable, your computer's operating system
• as well as the name of your access provider.

These data are processed by us for the following purposes:

• Ensuring a smooth connection of the website,
• Ensuring comfortable use of our website,
• Evaluation of system security and stability, and
• for other administrative purposes.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes listed above for data collection. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.

Furthermore, we use cookies when you visit our website, e.g., to save the language settings. Further information can be found under section 4 below.

Disclosure of data:

Your personal data will not be transmitted to third parties for purposes other than those listed below.

We will only share your personal data with third parties if:

• you have given your explicit consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
• the disclosure is necessary for the assertion, exercise, or defense of legal claims in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, and there is no reason to assume that you have an overriding interest in not having your data disclosed,
• there is a legal obligation to transfer data according to Art. 6 para. 1 sentence 1 lit. c GDPR, or
• it is legally permissible and necessary for the execution of contractual relationships with you according to Art. 6 para. 1 sentence 1 lit. b GDPR.

Cookies:

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not damage your end device, do not contain viruses, trojans, or other harmful software. Information is stored in the cookie that is each related to the specific end device used. However, this does not mean that we obtain direct knowledge of your identity.

The use of cookies is technically required and serves to make the use of our offer more pleasant for you. We only use so-called session cookies, which, for example, store your language settings. The cookies are automatically deleted after you leave our site.

The data processed by cookies is required for the purposes mentioned to safeguard our legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR.
Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. Completely disabling cookies may mean that you cannot use all functions of our website.

Rights of data subjects:

You have the right to:

• request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the purposes of the processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the source of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about the details of these;
• request the correction of incorrect or completion of your personal data stored by us without delay in accordance with Art. 16 GDPR;
• request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to assert, exercise, or defend legal claims;
• request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse its deletion and we no longer need the data, but you need it to assert, exercise, or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR;
• receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or request the transfer to another controller in accordance with Art. 20 GDPR;
• revoke your consent given to us at any time in accordance with Art. 7 para. 3 GDPR. This means that we may no longer continue the data processing based on this consent for the future; and
• lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. In general, you can contact the supervisory authority of your usual place of residence or workplace or our company's registered office.

Right to object:

If your personal data is processed based on legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which we will implement without requiring a specific situation.

If you wish to exercise your right of revocation or objection, simply send an email to marketing@orientgate.com.

Data security:

We use the widely used SSL (Secure Socket Layer) procedure in connection with the highest level of encryption supported by your browser during website visits. Usually, this involves 256-bit encryption. If your browser does not support 256-bit encryption, we instead use 128-bit v3 technology. Whether an individual page of our website is transmitted encrypted can be identified by the closed key or lock symbol in the bottom status bar of your browser.

We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

Validity and changes to this data protection declaration:

This data protection declaration is currently valid and has the status as of April 2021. Due to the further development of our website and offers or due to changed legal or regulatory requirements, it may become necessary to change this data protection declaration.