Privacy Policy This Privacy Policy explains the nature, scope, and purpose of the collection, processing, and use of your personal data. It applies solely to this website. If you access third-party websites through links on our website, please review the privacy policies of those websites separately. Data Controller BMKL Media GmbH Gummertstraße 39 45131 Essen Germany Phone: Available upon request Email: info@fastfans-agency.de Access to and Storage of Information on Your Device When you use our website, we may access information stored on your device (such as your IP address) or store information on your device (such as cookies). This access or storage may involve the processing of personal data as defined by the General Data Protection Regulation (GDPR). Where such access or storage is strictly necessary to provide our website and services, it is carried out in accordance with Section 25 (2) No. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG). Where access or storage serves additional purposes, such as improving the functionality or user experience of our website, it will only take place with your prior consent pursuant to Section 25 (1) TDDDG and Article 6(1)(a) GDPR. You may withdraw your consent at any time with future effect. Further details regarding the processing of your personal data and the applicable legal bases can be found throughout this Privacy Policy. 1. Personal Data "Personal data" means any information relating to an identified or identifiable individual, such as your name, address, telephone number, email address, or date of birth. Information that cannot be linked to a specific individual is not considered personal data. 2. Web Hosting Our website is hosted by an external service provider, OnePage GmbH. Personal data collected through this website may be stored on the hosting provider's servers. This may include IP addresses, contact inquiries, metadata, communication data, website access logs, and other information generated through your use of the website. We have entered into a Data Processing Agreement (DPA) with our hosting provider in accordance with Article 28 GDPR to ensure that your personal data is processed securely and is not disclosed to unauthorized third parties. 3. Contacting Us If you contact us by email or through one of our contact forms, we process the personal information you provide in order to respond to your inquiry and communicate with you. The specific information collected depends on the information you submit through the contact form or email. The legal basis for processing your data is our legitimate interest in responding to your request pursuant to Article 6(1)(f) GDPR. If your inquiry relates to entering into a contract, processing is additionally based on Article 6(1)(b) GDPR. Your personal data will be deleted once your request has been fully processed, unless statutory retention obligations require us to keep it longer. If processing is based on our legitimate interests under Article 6(1)(f) GDPR, you have the right to object to the processing of your personal data at any time. 4. Newsletter If you expressly subscribe to our newsletter, we will use your email address—and any optional personal information you choose to provide—to send you regular newsletters. Providing an email address is sufficient to subscribe. Any additional information you provide is used solely to personalize our communications. We use a double opt-in procedure to verify your subscription. After signing up, you will receive a confirmation email containing a verification link. Your subscription will only become active once you click that link. By confirming your subscription, you consent to the processing of your personal data pursuant to Article 6(1)(a) GDPR. Your data will be used exclusively for sending our newsletter and related marketing communications. You may unsubscribe at any time by clicking the unsubscribe link included in every newsletter.

5. Blog Comments If you leave a comment on one of our blog posts, we collect and store the personal information you voluntarily provide. This typically includes your name, email address, and the content of your comment. For security purposes, we also automatically store your IP address and the date and time your comment was submitted. This helps protect our website against unlawful content, including offensive, defamatory, or otherwise illegal comments. Your email address may be used to contact you if a third party challenges the legality of your published content. The legal basis for processing this data is our legitimate interest under Article 6(1)(f) GDPR in maintaining the security and integrity of our website. We reserve the right to remove comments that are reported as unlawful or otherwise violate applicable laws or our community standards. 6. Server Log Files Whenever you access our website, your browser automatically transmits certain technical information to our web server. This information is temporarily stored in server log files and may include: Date and time of your request Name of the requested file Referring website (Referrer URL) HTTP status code Browser type and version Operating system Full IP address Amount of data transferred We process this information to ensure the secure and reliable operation of our website, maintain system stability, and protect against unauthorized access or cyberattacks. The legal basis for this processing is our legitimate interest pursuant to Article 6(1)(f) GDPR. Server log data is retained only as long as necessary for security purposes. IP addresses are anonymized after no later than 60 days, making it impossible to identify individual users. 7. Cookies Our website uses cookies. Cookies are small text files that are stored on your device. Some cookies are temporary ("session cookies") and are automatically deleted once you close your browser. Others remain on your device until you delete them or they expire automatically ("persistent cookies"). Cookies serve different purposes. Some cookies are essential for the technical operation of the website. Without these cookies, certain functions—such as language settings or website navigation—cannot work properly. Other cookies help us analyze website usage, improve functionality, or display personalized advertising. Essential cookies are processed based on our legitimate interest under Article 6(1)(f) GDPR in providing a secure and fully functional website. All non-essential cookies are used only with your prior consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with future effect. Managing Cookies Most web browsers allow you to: Receive notifications before cookies are stored Allow cookies on an individual basis Block specific or all cookies Automatically delete cookies when the browser closes Cookie preferences can be managed directly through your browser settings. You can also manage advertising cookies through industry opt-out tools, including: https://www.aboutads.info/choices/ https://www.youronlinechoices.com/ Many browsers also support a Do Not Track (DNT) feature that lets you signal your preference not to be tracked across websites. Please note that disabling cookies may limit certain features or functionality of our website. Changing Your Cookie Preferences You may update or withdraw your cookie consent at any time by clicking the Privacy Settings link available in the footer of our website.

8. Third-Party Services 8.1 Google Services Google Analytics 4 This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics helps us understand how visitors interact with our website so we can improve its performance and user experience. With your consent, Google Analytics uses cookies to collect information about your use of our website. This information may include your IP address (which is automatically anonymized within the European Union whenever possible), browser information, device information, and interactions with our website. Google processes this information on our behalf to: Analyze website traffic Generate reports about website usage Improve our services Measure the effectiveness of marketing campaigns The data collected through Google Analytics is retained for up to two months before being automatically deleted. Google Analytics also provides aggregated demographic reports, such as age groups, gender, and interests. These reports are based on Google's advertising data and cannot be used by us to identify individual users. Google Analytics is only activated after you have provided your consent pursuant to Article 6(1)(a) GDPR. We have entered into a Data Processing Agreement (DPA) with Google in accordance with Article 28 GDPR. Google may process data outside the European Economic Area. Where required, Google relies on the EU-U.S. Data Privacy Framework and the European Commission's Standard Contractual Clauses to safeguard international data transfers. For more information, please visit: https://policies.google.com/privacy Google Ads We use Google Ads to promote our services through Google's advertising network. When you consent to marketing cookies, Google Ads may place cookies on your device that allow us to measure the effectiveness of our advertising campaigns. These cookies may collect information such as: Unique cookie identifiers Advertisement impressions Click activity Conversion events Browser information Device information The information allows us to understand which advertisements generate website visits and conversions. We do not receive any personally identifiable information from Google. Instead, we receive aggregated statistical reports. Google Ads is processed solely on the basis of your consent pursuant to Article 6(1)(a) GDPR. Google Ads Remarketing Our website also uses Google Ads Remarketing. Remarketing allows us to display personalized advertisements to users who have previously visited our website. If you have granted consent, Google may associate your browsing activity across devices when you are signed in to your Google Account. This enables Google to display relevant advertisements across different devices. You can disable personalized advertising at any time through your Google Account settings. Google Conversion Linker We use Google Conversion Linker to improve the accuracy of conversion tracking. Conversion Linker stores click information in cookies so that conversions resulting from advertising campaigns can be correctly attributed. The information collected may include advertising identifiers, click data, and conversion information. Data is generally deleted no later than 90 days after collection. Google Maps Our website integrates Google Maps to display interactive maps and provide location information. When you access a page containing Google Maps, your IP address is transmitted to Google. Google Maps is loaded only after you have provided your consent pursuant to Article 6(1)(a) GDPR. International Data Transfers Some Google services may transfer personal data to countries outside the European Economic Area. Where required, Google relies on the EU-U.S. Data Privacy Framework and Standard Contractual Clauses approved by the European Commission to ensure an adequate level of data protection. Further information is available at: https://policies.google.com/privacy 8.2 Meta (Facebook & Instagram) Meta Pixel Our website uses the Meta Pixel provided by Meta Platforms Ireland Limited. With your consent, Meta Pixel allows us to: Measure advertising performance Track conversions Build custom audiences Deliver more relevant advertisements on Facebook and Instagram Meta may associate information collected through the Pixel with your Facebook or Instagram account. We receive only aggregated reports and cannot personally identify individual users through Meta Pixel. Meta Pixel is activated only after your consent pursuant to Article 6(1)(a) GDPR. Meta may transfer personal data outside the European Economic Area. Such transfers are protected through the EU-U.S. Data Privacy Framework and other legally recognized safeguards. More information: https://www.facebook.com/privacy/policy Facebook Custom Audiences We use Facebook Custom Audiences to display personalized advertising to users who have previously visited our website. This processing takes place only with your consent. You may withdraw your consent or modify your advertising preferences directly within your Facebook account at any time. 8.3 Microsoft Advertising We use Microsoft Advertising (formerly Bing Ads) to measure advertising performance and display personalized advertisements. With your consent, Microsoft may store cookies that help us understand whether visitors reached our website through Microsoft advertising campaigns. Collected information may include: IP address Browser information Device information Advertisement interactions Website visits Conversion data Microsoft processes this information in accordance with applicable privacy laws and international data transfer safeguards. More information is available at: https://privacy.microsoft.com/ 8.4 YouTube Our website embeds videos hosted on YouTube, a service provided by Google. Embedded videos are loaded only after you have provided your consent. When a YouTube video is played, Google may receive information including: Your IP address Browser information Device information The page from which the video was accessed If you are logged into your Google account, this information may be associated with your Google profile. Additional information can be found at: https://policies.google.com/privacy

9. Social Media We maintain official profiles on various social media platforms, including Facebook and Instagram. When you visit or interact with our social media pages, your personal data may be processed both by us and by the respective platform provider. For information about how these platforms process your personal data, please review their respective privacy policies: Facebook: https://www.facebook.com/privacy/policy Instagram: https://privacycenter.instagram.com/ Social Media Insights The providers of these platforms may supply us with anonymized statistical information ("Insights") about visitors to our pages. These reports help us understand how users interact with our content and improve our online presence. The information provided to us is aggregated and does not allow us to identify individual users. Please note that the respective platform providers remain independently responsible for their own processing of personal data. 10. Job Applications If you apply for a position with our company, we process the personal information you provide solely for the purpose of evaluating your application and managing the recruitment process. This may include: Your name and contact details Resume/CV Cover letter Employment history Education Qualifications Any additional information you voluntarily provide The legal basis for processing your application data is Article 6(1)(b) GDPR, Article 6(1)(f) GDPR where applicable, and Section 26 of the German Federal Data Protection Act (BDSG). Your application data is shared only with employees involved in the recruitment process. If your application is unsuccessful, your personal data will be deleted after the applicable legal retention period unless you have consented to a longer retention period. 11. Data Retention We retain personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy or to comply with applicable legal obligations. Where statutory retention periods apply, personal data will be deleted after those periods expire unless continued storage is legally required. 12. Your Rights Under the GDPR Subject to applicable law, you have the following rights regarding your personal data: Right of access Right to rectification Right to erasure ("Right to be Forgotten") Right to restrict processing Right to data portability Right to object to processing Right to withdraw consent at any time Right to lodge a complaint with your local data protection authority If you would like to exercise any of these rights, please contact us using the contact details provided above. Right to Object Where we process your personal data based on our legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right to object to such processing at any time if your particular situation justifies the objection. If your personal data is processed for direct marketing purposes, you have the unconditional right to object at any time without providing a reason. To exercise your right to object or withdraw your consent, simply email us at: info@fastfans-agency.de Automated Decision-Making We do not use automated decision-making or profiling within the meaning of Article 22 GDPR. Changes to This Privacy Policy We reserve the right to update this Privacy Policy at any time to reflect legal, technical, or operational changes. The most current version will always be published on this website. Last Updated: November 21, 2024