Privacy Notice

Privacy Policy of Tabassum Promotion & Merchandising GmbH

1. Introduction and Contact Details of the Controller 1.1 We appreciate your visit to our website and your interest in our company. Below we inform you about how we handle your personal data. Personal data refers to all information relating to an identified or identifiable natural person.

1.2 The data controller responsible for processing on this website within the meaning of the GDPR is: Tabassum Promotion & Merchandising GmbH Managing Director: Mr. Amair Tabassum Max-Planck-Str. 15 63303 Dreieich Germany Tel.: +49 (0)6103 36826 Email: contact@ameah.net

1.3 A data protection officer has not been appointed as there is no legal obligation to do so. However, for any data protection concerns, you may contact us at the above-mentioned address.

2. Data Collection When Visiting Our Website 2.1 When using our website for informational purposes only (i.e., without registering or otherwise transmitting information), we only collect the data that your browser transmits to our server (so-called "server log files"). This includes:

• visited website

• date and time of access

• amount of data sent in bytes

• referrer URL

• browser used

• operating system used

• IP address (possibly in anonymized form)

Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in ensuring the stability and security of the website.

2.2 Our website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser's address bar.

3. Hosting & Content Delivery Network Our website is hosted by a service provider within the EU. All data collected on this website is processed on their servers. A data processing agreement in accordance with Art. 28 GDPR has been concluded with the hosting provider.

4. Cookies We use cookies on our website to enable certain functions. Both temporary "session cookies" and persistent cookies are used. Legal bases include Art. 6(1)(b) GDPR (contract), Art. 6(1)(a) GDPR (consent), or Art. 6(1)(f) GDPR (legitimate interest).

You can configure your browser to be informed about the setting of cookies and to decide individually on their acceptance or to exclude the acceptance of cookies for specific cases or in general.

5. Contacting Us When contacting us (e.g., by email), your personal data is processed solely for the purpose of responding to your inquiry in accordance with Art. 6(1)(f) GDPR or Art. 6(1)(b) GDPR if the inquiry is aimed at entering into a contract.

6. Comment Function When using the comment function, we store your comment, IP address, timestamp, and, if provided, your name. This is based on Art. 6(1)(f) GDPR. Your email address will only be used to contact you if necessary.

7. Customer Account When you open a customer account, your data is processed in accordance with Art. 6(1)(b) GDPR. You may request the deletion of your account at any time. The data will be deleted unless there are legal retention obligations.

8. Order Processing We share your data with shipping and payment service providers to the extent necessary for order fulfillment (Art. 6(1)(b) GDPR).

We use services including:

• PayPal (Europe) S.a.r.l. et Cie, S.C.A., Boulevard Royal, Luxembourg

Credit checks may be carried out in accordance with Art. 6(1)(f) GDPR. Further information is available directly from PayPal.

9. Web Analytics Services We use services such as PayPal Marketing Solutions. Processing occurs only with your explicit consent in accordance with Art. 6(1)(a) GDPR.

10. Website Features We incorporate external content and services such as:

• Google Web Fonts

• Google reCAPTCHA

These may process personal data based on your consent (Art. 6(1)(a) GDPR) or our legitimate interest (Art. 6(1)(f) GDPR).

11. Tools and Miscellaneous 11.1 Cookie Consent Tool We use a consent management tool to obtain and manage user consents for cookies. Technically necessary cookies are always set. The processing is based on Art. 6(1)(f) and/or Art. 6(1)(c) GDPR.

11.2 xt:Commerce / xt:Modified This website operates on the xt:Commerce (xt:Modified) shop system. In case of technical issues or errors, the system automatically sends error reports to the software provider. These reports may include technical information and, in exceptional cases, personal data if relevant to the error source.

Such data transmission is based on Art. 6(1)(f) GDPR, reflecting our legitimate interest in maintaining shop functionality and promptly resolving technical issues.

Recipients are typically the shop system's technical support provider.

12. Rights of the Data Subject You have the following rights:

• Access (Art. 15 GDPR)

• Rectification (Art. 16 GDPR)

• Erasure (Art. 17 GDPR)

• Restriction (Art. 18 GDPR)

• Data portability (Art. 20 GDPR)

• Withdrawal of consent (Art. 7(3) GDPR)

• Objection (Art. 21 GDPR)

• Complaint to the supervisory authority (Art. 77 GDPR)

13. Right to Object You have the right to object at any time to the processing of your personal data for reasons arising from your particular situation. In the case of direct marketing, you may object without giving any reason.

14. Data Retention Period The retention period of personal data depends on legal requirements, consent, processing purposes, and applicable commercial and tax-related retention periods.

Once the purpose no longer applies and there are no legal retention obligations, the personal data will be deleted.