Privacy Policy
and Cookies

When you visit our website, the web server stores a server log file, including your IP address, date and time of the visit, and the transmitted data volume, for ensuring smooth operation, correct display, and improving our offer.

The hosting and presentation of the website with an integrated online shop are provided by the online platform Wix. Your data may be stored by the hosting provider through data storage, databases, and general applications. Wix stores your data on secure servers behind a firewall and offers secure HTTPS access to most areas of its services.

When opening your customer account, placing an order, or contacting us, you provide your personal data in the designated input fields. We use the data you provide according to Art. 6 para. 1 s. 1 lit. b GDPR for contract processing and handling your inquiries.

Please note that we retain the collected data as long as necessary for providing our services, complying with our legal and contractual obligations towards you, resolving disputes, and enforcing our agreements. You can delete your customer account at any time by sending us a message. Personal data may be maintained, processed, and stored in the United States, Ireland, South Korea, Taiwan, Israel, and in other jurisdictions as required for the proper provision of our services and/or as legally mandated.

The payment methods offered for our online shop comply with the PCI-DSS (Payment Card Industry Data Security Standard) of the PCI Security Standards Council, a collaboration of brands such as Visa, MasterCard, American Express, and Discover. PCI-DSS requirements ensure the secure handling of credit card data (including physical, electronic, and procedural measures) by our shop and service providers. To protect your data, it is necessary for you to set a secure password for your customer account.

For the delivery of ordered goods, we disclose your data to the shipping company as part of contract fulfillment according to Art. 6 para. 1 s. 1 lit. b GDPR. Your payment data is passed on to the contracted payment service provider or the selected payment service for processing your payments.

To make your visit to our website attractive, enable the use of certain functions, display suitable products, or conduct market research, we use cookies on various pages. This serves our predominant legitimate interests in an optimized presentation of our offer according to Art. 6 para. 1 s. 1 lit. f GDPR. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session (session cookies). Others remain on your device and allow us to recognize your browser on your next visit (persistent cookies). You can check the duration of storage in the overview in your web browser's cookie settings. You can configure your browser to notify you about the setting of cookies and decide on their acceptance individually or exclude the acceptance of cookies for specific cases or in general. Each browser manages cookie settings differently. This is described in the help menu of each browser, explaining how to change your cookie settings. You can find this for each browser at the following links:

Microsoft Edge™: https://support.microsoft.com/en-us/microsoft-edge/block-pop-ups-in-microsoft-edge-1d8ba4f8-f385-9a0b-e944-aa47339b6bb5

Safari™: https://support.apple.com/kb/ph21411?locale=en_US Chrome™: http://support.google.com/chrome/bin/answer.py?hl=en&hlrm=en&answer=95647

Firefox™: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

Opera™: http://help.opera.com/Windows/10.20/en/cookies.html

The functionality of our website may be limited if you do not accept cookies.

1. As a data subject, you have the following rights: • According to Art. 15 GDPR, the right to obtain information about your personal data processed by us; • According to Art. 16 GDPR, the right to demand immediate correction of incorrect or completion of your personal data stored by us; • According to Art. 17 GDPR, the right to request the deletion of your personal data stored by us, provided that further processing is not required

• to exercise the right to freedom of expression and information;

• to fulfill a legal obligation;

• for reasons of public interest or

• to assert, exercise, or defend legal claims; • According to Art. 18 GDPR, the right to request the restriction of the processing of your personal data, insofar as

• the accuracy of the data is disputed by you;

• the processing is unlawful, but you refuse their deletion;

• we no longer need the data, but you need it to assert, exercise, or defend legal claims or

• you have objected to the processing according to Art. 21 GDPR; • According to Art. 20 GDPR, the right to receive your personal data provided to us in a structured, common, and machine-readable format or to request the transmission to another controller; • According to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority at your usual place of residence or work or our company headquarters for this purpose. For questions about the collection, processing, or use of your personal data, for information, correction, blocking, or deletion of data, as well as the revocation of granted consents or objection to a specific data use, please contact us directly using the contact details in our legal notice. Each user has the right, according to the GDPR, to access, modify, and object to the processing of their personal data and the right to delete their personal data at any time by sending an email to a.leser@occino.lu.

• Updates or changes to the privacy policy: We may revise this privacy policy from time to time. We ask you to regularly check for changes to this privacy policy.

If you have general questions about the services or the data we collect about you and its use, please contact us at:

Name: Occino, represented by Anne Dietze Leser Address: 12, rue Marcel Schmit, L-3563