Privacy Policy

Introduction

Suncast Europe B.V. (hereinafter: “Suncast” or “we”), as the operators of the website Suncast.com, (hereinafter: “Website“) are the controllers of the personal data of the users (hereinafter: “you”) of the website within the meaning of the General Data Protection Regulation (“GDPR”).

We protect your privacy and your personal data. We collect, process and use your personal data in accordance with the content of this Privacy Policy and the applicable data protection regulations, in particular the GDPR. These data protection provisions regulate which personal data we collect, process and use about you. We therefore ask you to read the following carefully.

1 Controller / Contact Details

The controller for data processing in connection with the Website is:

Suncast Europe B.V., Schiphol Boulevard 359, WTC Schiphol, D-Toren 11e verdieping, 1118 BJ Schiphol, Email: [email protected]

Should you have any questions or suggestions regarding data protection or this Privacy Policy, or if you would like to contact us to assert your rights, please use the above-mentioned contact details when submitting your query.

2 Collection and use of your data

When you access our website usage data is automatically collected and used to the extent necessary. In this case, we store the following data:

Date and time of access
Browser type/version
Operating system used
URL of the previously visited page
The previously opened website (if you were redirected to us from this other website)
Amount of data sent
IP address assigned to the end device

We process this data for technical reasons in order to be able to provide our services. We process this data in accordance with Art. 6(1)(b) GDPR for the purpose of fulfilling a contract. We also process this data for the purpose of detecting and prosecuting misuse and for IT-security purposes in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interest in ensuring the proper operation and security of Suncast services.

We also process the browser type used, the date and time of use, and the IP address for the purpose of statistical evaluation. We optimise our services on the basis of this analysis. This is based on our legitimate interest in providing you with services that are tailored and optimised to the end devices used and your needs, Art. 6(1)(f) GDPR.

Usage data is not merged with other data.

3 Transfer of personal data

3.1.1 Transfer for contract fulfilment or with consent

Personal data will only be disclosed to third parties to the extent described in this Privacy Policy, or you have expressly consented to this, Art. 6(1)(a) GDPR, or another legal basis for the data transfer is applicable.

3.1.2 Transfer to processors

We sometimes use service providers who are bound by our instructions ("processors") to provide our services. These processors are carefully selected by us and we assess their technical and organisational measures in adequate intervals to ensure that your privacy is protected. The processors may only process the data for the purposes specified by us and in accordance with our instructions. The legal requirements of Art. 28 GDPR are strictly observed.

3.1.3 Transfer to third countries

Processing may also take place in countries outside the European Economic Area, for example because certain offers are stored on servers located there.

When we transfer personal data to third countries, we ensure that one of the following conditions is met:
There is an adequacy decision by the EU Commission in accordance with Art. 45 GDPR, according to which the third country has an adequate level of data protection.
We have concluded the standard data protection clauses approved by the EU Commission in accordance with Art. 46(2)(c) GDPR with the recipient and (where necessary) taken additional measures in accordance with the criteria of the European Court of Justice (Schrems II).
There are other suitable safeguards within the meaning of Art. 46(1) GDPR that are suitable for establishing an adequate level of data protection.
There is an exception under Art. 49 GDPR, e.g. if you have given your consent to the transfer (Art. 49(1)(a) GDPR), the transfer is necessary for the performance of a contract with you (Art. 49(1)(b) GDPR) or for the establishment, exercise or defence of legal claims (Art. 49(1)(e) GDPR).

We transfer your data to the following companies in the USA on the basis of an adequacy decision by the EU Commission (Art. 45 GDPR):

Suncast Corporation, 701 North Kirk Road, Batavia, Illinois 60510
Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA
Amazon Web Services (AWS), 410 Terry Ave N, Seattle, WA 98109, USA

4 Contact form

On our Website, we provide a form you can use to contact us, for example to ask questions about the products advertised on the Website. We process the data you provide in this context (including your contact details such as name, address, telephone number, email address, etc.) in order to respond to your enquiries (legitimate interest according to Art. 6(1)(f) GDPR).

5 Receipt of marketing communications

When using our Website, you have the option of consenting to receive marketing communications (Art. 6(1)(a) GDPR). In this case, we use the information you provide (including the information which we may have received through your interactions with us) to send you marketing communications by post or through the communication channels you have selected (e.g. e-mail, SMS, telephone). The exact content and

channels of these communications are determined by the consent you have given in each case. For this purpose, we may process in particular the following data:

Name,
gender/title,
Postal address,
Email addresses,
telephone number

You can withdraw your consent to receive marketing communications at any time with future effect (see details under Section 9).

6 Sessions and cookies

Suncast uses cookies. A cookie is a small file containing a string of characters that is stored on your device when you visit a website. The next time you visit the website, it can recognise your browser based on the cookie. Cookies can store user settings and other information, making the Website more convenient and tailored to your needs.

If the use of cookies is strictly necessary for the provision of our Website, they are set automatically. Otherwise, cookies are only set if you have given your prior consent. You give your consent by selecting the corresponding option in the area displayed at the bottom of our Website, which informs you about the use of cookies ("cookie banner").

You can withdraw your consent at any time with future effect by deleting the cookies stored in your browser.

You can also withdraw your consent with future effect or grant it by clicking on the button labelled "Cookie Settings" at the end of this privacy policy. The individual cookie groups can be reactivated or deactivated via the window that appears.

Most internet browsers also allow you to block cookies in general. You can configure your browser settings to reject cookies by following the instructions for the browser you are using, which are available at http://www.allaboutcookies.org/ge/, or by using another technical tool if possible. However, we would like to point out that you may then no longer be able to use all the functions of this Website.

6.1 Necessary and functional cookies

Suncast uses cookies to enable the functions and services of the service you have requested (e.g. to document your consent to the use of cookies); and/or functional

cookies that remember your settings, for example, to make the service more user-friendly.

Insofar as the cookies are technically necessary, this procedure is based on legal provisions that allow information to be stored on or accessed from your device because this is absolutely necessary to provide a telemedia service expressly requested by you, such as when visiting our website (Section 25 (2) No. 2 TDDDG).

Functional cookies are only set with your consent (Section 25 (1) TDDDG), which you can give in the cookie banner. In this case, the associated processing of personal data is also based on your consent (Art. 6(1)(a) GDPR), which can be withdrawn with future effect, as described in detail in Section 9.

6.2 Analytics/Statistics cookies

When you use our Website, we use cookies for statistical analysis and to tailor the service to your needs, and to compile usage statistics using pseudonyms, provided you have consented to this. Some of these cookies are also set and read by third parties, e.g. to bill us for their services based on the analyses thus compiled.

The cookies are only set once you have clicked on "Accept All" in the "cookie banner" after accessing the website, thereby declaring your consent to data processing. The legal basis for processing is then your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which can be withdrawn with future effect, as described in detail in Section 9.

6.3 Advertising/Marketing cookies

When you use our Website, we use cookies to collect data on your interactions, preferences, and browsing habits. These cookies identify patterns such as frequently visited pages, products viewed, or time spent on certain websites. This data is then used to serve personalised ads that are more likely to resonate with you, enhancing engagement and conversion rates. Some of these cookies are also set and read by third parties, e.g. to bill us for their services based on the analyses thus compiled. Below you will find details of the third-party providers in this category that set cookies.

6.3.1 Use of Google Analytics

If you have given us your consent, we use the web analysis service Google Analytics to analyse the use of our website and adapt it to our users’ needs based on the findings. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google processes your personal data on our behalf and in accordance with our instructions as a Processor (Art. 4 No. 8, 28 GDPR).

Google Analytics stores cookies on your device and uses these cookies to collect pseudonymous data about your use of our website. This includes, in particular, the number of visits to our website, how long you stay on the site and how you interact with our website (e.g. which pages you visit, which links you click on, whether you searched for something or downloaded certain content or subscribed to our newsletter). We can track your interactions (known as events) with our website by using tags, which we use to mark the interactions that we want to track as events. If we have marked a specific event with a tag, this tag is triggered when you interact with the website and the corresponding event data is sent to Google Analytics. The data collected is used for the analysis of website traffic and performance, including trend analysis and site optimisation. This data is not linked to a specific individual. Google Analytics does not log or store IP addresses of EU users. The IP address is used solely to derive coarse geographical location data (such as city, country, or region) and is immediately discarded thereafter; it is not logged, accessible, or used for any other purpose. All IP lookups for EU-based traffic are performed on EU-based servers before data is forwarded to Analytics servers for processing. In addition, Google Analytics collects data about your device (including the model and screen resolution).

Google will use this information to evaluate your use of our website, to compile reports on website activity and to generate further analyses and evaluations related to website and internet usage.

Your data will be stored for a period of 26 months.

When using Google Analytics, personal data may be transferred to third countries (in particular to the servers of Google LLC in the USA) as described in section 3.1.3.

We use Google Analytics and the associated cookies and tags on the basis of your consent, Art. 6 (1) (a) GDPR. This legal basis also covers the processing of your personal data for the aforementioned purposes.

You can withdraw your consent with effect for the future at any time by making the corresponding changes to your cookie settings by clicking “Cookie Settings” under “Legal” at the bottom of every page. Additional information on the use of cookies and similar technologies as well as on your withdrawal options can be found in item 9.7.

6.3.2 Use of Google Tag Manager

If you have given your consent, we will use Google Tag Manager. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") and is operated on our behalf and in accordance with our instructions (see Art. 4 no. 8 and Art. 28 GDPR).

Google Tag Manager is a service we use to embed other technologies and services such as Google Analytics on our website. Google Tag Manager is merely used for managing and delivering the technologies embedded by it (via tags). Google Tag Manager itself does not create any user profiles, does not store any cookies, and does not conduct any independent analyses. Google Tag Manager does not collect, retain, or share any information about visitors to our website, including page URLs visited.

In order to monitor and provide diagnostics about system stability, performance, and installation quality, Google Tag Manager may collect certain aggregated data about tag firing. This data does not include user IP addresses or any measurement identifiers associated with a particular individual. In addition, data in standard HTTP request logs is collected and deleted within 14 days of being received. No personal data of users beyond this is processed by Google Tag Manager itself.

When using Google Tag Manager, personal data may be transferred to third countries (in particular to the servers of Google LLC in the USA) as described in section 3.1.3..

We use Google Tag Manager based on your consent, Art. 6 para. 1(a) GDPR. This legal basis also covers the processing of your data for the aforementioned purposes.

6.3.3 Use of Google Ads Conversion Tracking

If you have given your consent, we use Google Ads conversion tracking, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), to promote our offers by means of advertising media (Google Ads) on external websites. This enables us to determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. In doing so, we pursue our interest in displaying advertising that may be of interest to you, designing our Website in a way that increases your engagement and achieving a fair calculation of advertising costs.

Google delivers these advertising media via an ad server. To this end, Google Ads uses cookies that allow specific parameters to be measured in order to determine success,

such as when the ads are displayed or the number of clicks by users. If you accessed our Website via a Google advertisement, Google Ads will store a cookie on your end device. Along with this cookie, the unique cookie ID, the number of impressions per placement (frequency), the last impression (relevant for post-view conversions) and opt-out information are generally stored as analysis values. In these statistics, we can see the total number of users who clicked on one of our ads and were forwarded to a page with a conversion tracking tag. However, we do not receive any information that allows users to be personally identified.

You can find general information about the processing of your personal data by Google at: https://policies.google.com/privacy?hl=en%20and%20https://policies.google.com/technologies/ads?hl=en

When using Google Ads conversion, personal data may be transferred to third countries (in particular to servers operated by Google LLC in the USA), as described in section 3.1.3.

We use Google Ads conversion and the corresponding cookies based on your consent, Art. 6 para. 1(a) GDPR. This legal basis also covers the processing of your personal data for the aforementioned purposes.

6.3.4 Use of Google Ads Remarketing

If you have given us your consent, we will use the functions of Google Ads remarketing, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). This enables the advertising of our Website in Google search re-sults as well as on third-party websites. To do so, Google sets a cookie or device iden-tifier in your end device’s browser, which automatically enables interest-based adver-tising on the basis of a cookie ID and the websites you have visited. Furthermore, Google will link your browsing history with your Google account and use information from your Google account to personalise advertisements you see on the web. If you are logged in to Google while visiting our Website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device re-marketing. To this end, Google will temporarily link your personal data to Google Ana-lytics data to form target groups.

When using Google Ads remarketing, personal data may be transferred to third countries (in particular to servers operated by Google LLC in the USA), as described in section 3.1.3.

Details on the data processing initiated by Google Ads remarketing and on how Google handles data collected from websites are available here: https://policies.google.com/technologies/partner-sites?hl=en.

Data saved by Google will be stored for a period of 13 months.

We use Google Ads remarketing and the corresponding cookies based on your con-sent, Art. 6 para. 1(a) GDPR. This legal basis also covers the processing of your per-sonal data for the aforementioned purposes.

You can withdraw your consent with effect for the future at any time by making the corresponding changes to your cookie settings by clicking “Cookie Settings” under “Le-gal” at the bottom of every page. Additional information on the use of cookies and sim-ilar technologies as well as on your withdrawal options can be found in item 9.7. In addition, you can opt out of Google's use of cookies by visiting the Google Ads Settings page at: https://www.google.com/settings/ads.

6.3.5 Use of Google Conversion Linker

If you have given your consent, we use the Google conversion linker in connection with Google Ads conversion tracking (item 6.3.3). This service ensures a higher degree of reliability for measuring click data, thereby allowing us to record conversions effec-tively. If you click our advertisements, the URL of the landing page on our website will receive information on the click. When you execute an action that we have tagged as a conversion (e.g., by triggering a Google Ads conversion tracking tag, see item 6.3.3), this information will be used to link the conversion with the click through which you accessed our website. The conversion linker is used to automatically collect infor-mation regarding the click on the ad in the URLs of the landing page and store this information in first-party cookies and in the browser's local storage on our website.

You can find general information about the processing of your personal data by Google at: https://policies.google.com/privacy?hl=en and https://policies.google.com/technol-ogies/ads?hl=en.

When using Google Conversion Linker, personal data may be transferred to third countries (in particular to servers operated by Google LLC in the USA), as described in section 3.1.3.

We use Google conversion linker and the corresponding cookies and tags based on your consent, Art. 6 para. 1(a) GDPR. This legal basis also covers the processing of your personal data for the aforementioned purposes.

6.3.6 Use of Microsoft Clarity

If you have given your consent, we use Microsoft Clarity, a behavioural analytics tool provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Microsoft Clarity captures how you use and interact with our website through behavioural metrics, heatmaps, and session replay to improve and market our products and services. In particular, Microsoft Clarity captures user interactions such as mouse movements, clicks, scrolls, and page ren-dering behaviour.

Microsoft Clarity's cookies store a unique pseudonymous ID, which is used to associ-ate collected interaction data, allowing Microsoft Clarity to connect page views and generate aggregated analytics. Website usage data is captured using first- and third-party cookies to determine the popularity of products and services and online activity. Additionally, this information is used for site optimisation, fraud and security purposes, and advertising.

You can find general information about the processing of your personal data by Mi-crosoft at: https://www.microsoft.com/privacy/privacystatement.

When using Microsoft Clarity, personal data may be transferred to third countries as described in section 3.1.3.

We use Microsoft Clarity and the corresponding cookies and tags based on your con-sent, Art. 6 para. 1(a) GDPR. This legal basis also covers the processing of your per-sonal data for the aforementioned purposes.

6.3.7 Use of Hotjar

If you have given your consent, we use Hotjar, a service provided by Hotjar Ltd, Level 2 St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 3155, Malta. Hotjar allows us to visualise your interactions with our Website, which helps us better understand your experience and improve our services by identifying issues and friction points. To provide these services, Hotjar uses first-party cookies and other

technologies to collect personal data on our users’ behaviour and their devices on our behalf. This may include personal data such as online identifiers (e.g. the device's IP address, user ID), identification data (e.g. name, email address, only if we explicitly collect it), technical data (e.g. device type and screen size, browser information), geographic location (country only), behavioural data (interactions with our Website such as clicks, taps and scrolls), and any additional personal data that you may explicitly submit through Hotjar.

Hotjar may reuse this personal data to develop and improve tools and services for us and our users.

You can find general information about the processing of your personal data by Hotjar at: https://trust.contentsquare.com/?product=hotjar and https://www.hotjar.com/le-gal/policies/privacy.

When using Hotjar, personal data may be transferred to third countries as described in section 3.1.3.

We use Hotjar and the corresponding cookies and tags on the basis of your consent, Art. 6 para. 1(a) GDPR. This legal basis also covers the processing of your personal data for the aforementioned purposes.

6.3.8 Use of Meta Pixel

If you have given us your consent, we use Meta Pixel, a web analysis and advertising service provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Meta"). Meta processes your personal data on our behalf and in accordance with our instructions as a Processor (Art. 4 No. 8, 28 GDPR) to the extent described below. In addition, Meta Platforms Ireland Limited acts as an independent controller for its own purposes, including improving its own products and services.

Meta Pixel is a JavaScript-based tracking tool that we use to measure the effectiveness of our advertising, to understand user interactions with our website, and to present interest-based advertising ("Meta Ads") to you during your visits to Meta's platforms (such as Facebook and Instagram).

Meta Pixel stores cookies on your device and collects pseudonymous data about your use of our website. This includes standard events (such as page views, searches, items added to a shopping cart or purchases) as well as technical data (such as URL,

referrer URL, browser and device properties, and timestamps). Where configured, Meta Pixel may also use Advanced Matching to transmit additional data points — such as hashed (encrypted) email addresses or phone numbers — in order to improve the accuracy of audience matching and conversion attribution. Meta Pixel generates a checksum (hash value) from this information and transmits it to Meta.

The personal data collected via the Meta Pixel (so-called event data) is stored by Meta for a maximum period of two years. Custom Audiences created from this data are stored until you delete them using the relevant account management tools in your Meta account. Contact information (e.g. email addresses or telephone numbers) that is transmitted to Meta solely for matching with existing user IDs is deleted after this matching process has been completed.

When using Meta Pixel, personal data may be transferred to third countries (in particular to the servers of Meta Platforms, Inc. in the USA) as described in section 3.1.3.

Further information on the processing of your personal data by Meta Platforms Ireland Limited is available in Meta's Privacy Policy at https://www.facebook.com/privacy/policy/.

We use Meta Pixel and the associated cookies on the basis of your consent, Art. 6 para. 1(a) GDPR. This legal basis also covers the processing of your personal data for the aforementioned purposes.

6.3.9 Use of Zendesk

If you have given us your consent, we use Zendesk Chat, a service provided by Zendesk Inc., 989 Market St, San Francisco, CA 94103, USA (“Zendesk”), to respond to customer enquiries.

Zendesk Chat is a live chat tool that enables us to communicate with visitors to our website in real time. The tool is integrated into our website via a code snippet and allows both live chat interactions with our team and automated bot-based communication.

Zendesk Chat stores cookies on your device and collects data about your interactions with our website and the chat tool. This includes information you voluntarily provide during a chat session (such as your name and email address), the content of your chat conversation, as well as technical data (such as IP address, browser type and version,

device information, the URLs of pages visited, and timestamps). Where Zendesk Chat is integrated with Zendesk's support system, chat conversations may be stored as support tickets, including a full chat transcript and an associated user profile, in order to enable us to process your enquiry and ensure continuity of service.

When using Zendesk Chat, personal data may be transferred to third countries as described in section 3.1.3.

More information about how Zendesk handles your data can be found on the following website: https://www.zendesk.de/company/agreements-and-terms/privacy-notice/.

We use Zendesk Chat and the associated cookies on the basis of your consent, Art. 6 para. 1(a) GDPR. This legal basis also covers the processing of your personal data for the aforementioned purposes.

6.4 Social networks

On our website, you can interact with social networks operated by third parties as described below.

6.4.1 Sharing content (“share buttons”)

Our Website uses so-called “share buttons”, which are plugins of social networks, as can be seen in detail from the labelling of the button (currently in particular X, Facebook, Instagram and Pinterest). No information about your visit of our Website is transmitted to the respective operator of the social network via these share buttons. Only when you click the respective share button you will be redirected to the page of the provider of the social network. The data collection and use associated with this are the responsibility of the provider of the respective social network. For details, please consult the privacy policy of the provider of the respective social network.

6.4.2 Recommending content (“Like buttons”)

If you activate the recommendation buttons (so-called “like buttons”) of social networks (currently in particular X, Facebook, Instagram and Pinterest) on our Website by clicking on them, and/or if you then use the respective button, information (including IP address and cookie ID) will be transmitted to the provider of the respective service in the USA and may also be stored and used there. The exact way in which data is

handled by the respective social network provider is not known to us. We are not responsible for this storage and use, which may also include the placing of cookies by the provider of the respective social network. You may obtain further information on the exact data processing operations, storage periods and purposes of processing directly from the provider of the respective social network and their respective data protection statement.

The data transfer is carried out on the basis of the consent you give by activating the function (Art. 6 (1)(a) GDPR). You may withdraw your consent to the data transfer at any time with effect for the future by deactivating the button associated with the respective social network.

7 Social media platforms

We operate pages or profiles on different social media platforms. In this context, per-sonal data is processed as described below.

7.1 General Information

When you interact with us via our social media pages or our posts, we collect and process the data that you provide in this respect, which may include your user name and any profile photo. This is the case, for example, whenever you like, share or com-ment on a post or provide other content. This data is collected via the platform on which we maintain our social media presence. This data is regularly processed on the basis of our legitimate interest in making the corresponding functions available on our social media pages (Art. 6 (1) (f) GDPR) and, if applicable, on the basis of your consent given to the operator of the respective social media platform (Art. 6 (1) (a) GDPR) or your contractual relationship with the operator (Art. 6 (1) (b) GDPR). Please also note that this content is published on our social media pages in line with your account settings and can be accessed by anyone worldwide.

We may also process data in order to receive and process inquiries or messages via our social media pages (Art. 6 (1) (f) GDPR). For queries in connection with contracts, data will be processed for the initiation or execution of the respective contractual rela-tionship with you (Art. 6 (1) (b) GDPR) or with the company for which you work (Art. 6 (1) (f) GDPR). The latter also constitutes our legitimate interest.

In addition, the operators collect and process your personal data under their own re-sponsibility under data protection law when you visit our social media pages and/or interact with them or our posts.

7.2 Facebook

You can find our Facebook page at https://www.facebook.com/suncastcorp/.

For users outside the US and Canada, the operator of Facebook is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For users within the US and Canada, the operator of Facebook is Meta Platforms, Inc., 1601 Willow Road Menlo Park, CA 94025, USA.

Information on how Meta Platforms Ireland Limited processes your personal data is available in the Meta Privacy Policy at https://www.facebook.com/privacy/policy/. The Privacy Policy also contains information about the configuration options for your Face-book account.

Meta Platforms Ireland Limited uses cookies and similar technologies. Related infor-mation is provided by Meta Platforms Ireland Limited in its cookie guidelines https://www.facebook.com/privacy/policies/cookies/.

Furthermore, we are jointly responsible with Meta Platforms Ireland Limited for the processing of Page Insights data when visiting our Facebook page. Meta Platforms Ireland Limited uses this Page Insights data to analyze user behavior on our Facebook page and provides this information to us in anonymized form. We can use Page In-sights to conduct an anonymous evaluation of the reach, page views, time spent with posts, actions (likes, comments, sharing of posts) and the age, gender and location of users (as specified in their respective Facebook profiles). Further information is pro-vided by Meta Platforms Ireland here: https://www.facebook.com/legal/terms/infor-mation_about_page_insights_data.

For this purpose, we have entered into an agreement with Meta Platforms Ireland Lim-ited regarding our joint controllership for data processing, which you can access here: https://www.facebook.com/legal/controller_addendum.

The processing serves our legitimate economic interests in the optimization and needs-based design of our Facebook page, Art. 6 (1) (f) GDPR.

7.3 Instagram

You can find our Instagram page at: https://www.instagram.com/suncastcorp/.

For users outside the US and Canada, the operator of Instagram is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The operator of Instagram for users in the US and Canada is Meta Platforms, Inc., 1601 Willow Road Menlo Park, CA 94025, USA.

Information on how Meta Platforms Ireland Limited processes your personal data is available in the Meta Privacy Policy at https://privacycenter.instagram.com/policy and at https://www.facebook.com/legal/terms/information_about_page_insights_data. The Privacy Policy also contains information about the configuration options for your Insta-gram account.

Meta Platforms Ireland Limited uses cookies and similar technologies. Related infor-mation is provided by Meta Platforms Ireland Limited in its Cookies Policy for Instagram at https://privacycenter.instagram.com/policies/cookies/. To find out how you can man-age existing information about you, visit https://privacycenter.instagram.com/pol-icy/?entry_point=ig_help_center_data_policy_redirect.

Furthermore, we are jointly responsible with Meta Platforms Ireland Limited for the processing of Instagram Insights as part of operating our Instagram page. Meta Plat-forms Ireland Limited uses these Instagram Insights to analyze user behavior on our Instagram page and provides this information to us in a depersonalized form. We can use Instagram Insights to conduct an anonymous evaluation of the reach, page views, time spent with posts, actions (likes, comments, sharing of posts) and, for example, in accordance with the age, gender and location of users (as specified in their respective Instagram profiles). Further information is provided by Meta Platforms Ireland Limited here: https://www.facebook.com/help/pages/insights.

The processing serves our legitimate economic interests in the optimization and needs-based design of our Instagram page, Art. 6 para. 1(f) GDPR.

7.4 Pinterest

You can find our Pinterest page at: https://www.pinterest.com/suncastcorp/.

For users outside the US, Pinterest is operated by Pinterest Europe Ltd., Waterloo Exchange, 3rd Floor, Waterloo Road, Dublin 4, Ireland. For users in the US, the oper-ator of Pinterest is Pinterest, Inc., 651 Brannan Street, San Francisco, CA 94107, USA. You can find the Pinterest Privacy Policy at https://policy.pinterest.com/en/privacy-policy. The Privacy Policy also contains information on cookies and similar technologies used by Pinterest.

Pinterest provides us with depersonalized information and analyses regarding the use of our account. This information allows us to analyze and optimize the effectiveness of our Pinterest activities. The associated processing is based on our legitimate interests in optimizing our Pinterest activities (Art. 6 para. 1(f) GDPR).

7.5 X

You can find our X page at: https://x.com/SuncastCorp

X is a service provided for users in the European Economic Area and the United King-dom by X Internet Unlimited Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07, Ireland (“X“) and provided for other users by X Corp., 865 FM 1209, Building 2, Bastrop, TX 78602, USA.

You can find X’s Privacy Policy here: https://x.com/en/privacy. The Privacy Policy also contains information about the configuration options for your X account.

X uses cookies and similar technologies. Related information is provided by X in its Cookies Policy at https://help.x.com/en/rules-and-policies/x-cookies. To find out how you can manage existing information about you, visit https://help.x.com/en/managing-your-account and https://help.x.com/en/safety-and-security.

We use X Analytics. Through X Analytics, X provides us with statistical information and analyses regarding the use of our company account, including data on impressions, engagements, engagement rate, link clicks, reposts, likes, replies, and follows in rela-tion to our posts, as well as video-specific metrics such as retention rate, view rate and completion rate. We can use this information to analyze and optimize the effectiveness of our X activities. The associated processing serves our legitimate interests in opti-mizing our X activities, Art. 6 para. 1(f) GDPR.

7.6 YouTube

You can find our YouTube page at: https://www.youtube.com/chan-nel/UCVmgQawOcdeA9v9o0aukV7A.

YouTube is a service provided for users in the European Economic Area and Switzer-land by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) and provided for other users by Google LLC, 1600 Amphitheatre Pkwy, Mountain View, California 94043, USA. You can find the Google Privacy Policy here: https://policies.google.com/privacy?hl=en.

Please note that your Google account may be used for different Google services (e.g., Gmail, Google Search) and that YouTube and/or Google may combine personal data from the Google services you use in accordance with your Google account settings.

Google uses cookies and similar technologies. Google provides information on the use of cookies and similar technologies at https://policies.google.com/technologies/cook-ies?hl=en.

We use YouTube Analytics. Through this function, Google provides us with deperson-alized and aggregated information on user interactions with our content available on YouTube, as well as information on the use of our YouTube channel.

By using YouTube Analytics, we can conduct anonymous evaluations of the reach and popularity of YouTube videos with subscribers and non-subscribers of our YouTube channel, the views and play times of individual YouTube videos and community posts, and viewer loyalty based on “Like” or “Dislike” data and click rates. YouTube Analytics allows us to conduct these evaluations by target group (e.g., according to age and gender, region, and language) and compare the results with data and online activities outside of our own YouTube channel.

This information allows us to analyze and optimize the effectiveness of our YouTube activities. The associated processing serves our legitimate interests in optimizing our YouTube activities, Art. 6 para. 1(f) GDPR.

8 Storage period / data deletion

Unless otherwise stated in this privacy policy, we delete or anonymise your data as soon as it is no longer required for the purposes for which we processed it, as stated in this privacy policy. As a rule, we store your personal data for the duration of the usage or contractual relationship via the website, plus a period of 30 days until we delete the data in our operational systems. In addition, the data remains in our backup routines until the respective backup cycle is completed. In the case of processing that we carry out on the basis of your consent, deletion takes place withdraw your consent or, at an earlier point in time, when the data is no longer required for the purpose for which we collected it.

Storage beyond the period specified in this privacy policy will only take place

if we are obliged to do so for legal reasons, Art. 6 (1) (c) GDPR: If we are legally obliged to retain your data, we will store it for the period required by law.
if and as long as the data is required for criminal prosecution or for the assertion, exercise or defence of legal claims. This is also our legitimate interest, Art. 6 (1) (f) GDPR. In this case, the data is stored until the relevant process has been completed, plus the statutory limitation period.

If data must be retained for legal reasons, processing will be restricted. The data will then no longer be available for further use in operational activities.

9 Your rights as a data subject

9.1 Right of access

You have the right to request information from us at any time about the data we process concerning you within the scope of Art. 15 GDPR. To do so, you can submit a request by post or email to the address given above.

9.2 Right to rectification

According to Art. 16 GDPR, you have the right to request that we immediately correct any personal data concerning you that is inaccurate. To do so, please contact us at the addresses given above.

9.3 Right to erasure

You have the right to request that we erase your personal data under the conditions described in Art. 17 GDPR. These conditions provide, in particular, for a right to erasure if the personal data is no longer necessary for the purposes for which it was collected or otherwise processed, as well as in cases of unlawful processing, the existence of an objection or the existence of an obligation to erase under Union law or the law of the Member State to which we are subject. For information on the period of data storage, please refer to section 8 of this privacy policy. To exercise your above right, please contact us at the addresses given above.

9.4 Right to restriction of processing

You have the right to request that we restrict processing in accordance with Art. 18 GDPR. This right applies in particular in the event that the data is no longer required for the purposes pursued by us, but the user needs it to assert, exercise or defend legal claims, and if the successful exercise of an objection between us and the user is still disputed. To exercise this right, please contact us at the contact addresses provided above.

9.5 Right to data portability

You have the right to receive from us the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format in accordance with Art. 20 GDPR. To exercise your above right, please contact us at the contact addresses provided above.

9.6 Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6(1)(e) or (f) GDPR, in accordance with Art. 21 GDPR. We will stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

9.7 Right of withdrawal

In accordance with Art. 7(3) sentence 1 GDPR, you have the right to withdraw your consent given under Art. 6(1)(a) GDPR at any time. The withdrawal of consent does not affect the lawfulness of processing based on your consent before its withdrawal.

9.8 Right to lodge a complaint

You also have the right to lodge a complaint with a competent supervisory authority. The competent supervisory authority for Suncast is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), Bezuidenhoutseweg 30, 2594 AV The Hague, the Netherlands (https://www.autoriteitpersoonsgegevens.nl/). You may also lodge a complaint with the supervisory authority in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.

10 Changes to the privacy policy

We reserve the right to amend this Privacy Policy as necessary in compliance with applicable data protection laws, in order to reflect changes in the legal framework or in our processing activities. We therefore recommend that you review this Privacy Policy regularly to stay informed of any changes.