Data Protection Declaration by AV Stumpfl GmbH

The protection of your personal data is very important to us. This Data Protection Declaration describes how AV Stumpfl GmbH processes your personal data.

1. Purposes of data processing

We only collect, process and use personal data that is necessary for the performance and processing of our services or that you have voluntarily provided to us, in particular

• to fulfil the orders you have requested,
• to provide other services such as support, troubleshooting and similar,
• to provide information regarding third-party software, apps and similar items offered on our websites,
• in the provision of training courses, seminars and similar,
• for payment processing,
• to assess their creditworthiness,
• for marketing purposes.

Your data will only be used to send electronic mail for marketing purposes (e.g. newsletters) with your prior consent. You may revoke your consent at any time without notice and with effect for the future by notifying us at the email, fax or postal address listed at the end of this Data Protection Declaration.

When you register for our newsletter, your IP address and the date of your registration will be stored for the purpose of ensuring that the owner of the email address provided actually agrees to receive the newsletter. This data is transmitted to Mailerlite Limited, 38 Mount Street Upper, Dublin 2, D02 PR89, Ireland (operator of MailerLite), which handles the distribution of the newsletter on our behalf, and is stored there. You may revoke your consent to the storage of the aforementioned data at any time by clicking on the link provided in each newsletter.

We collect data from the information you provide during registration, ordering processes and similar, as well as automatically when you visit our websites. Providing your personal data is voluntary. However, we may not be able to provide some services, or may not be able to provide them in full, if you do not provide your personal data.

2. Categories of data processed and legal bases for processing

We process the following personal data exclusively with your consent in accordance with Art. 6 (1) (a) of the General Data Protection Regulation (GDPR):

• full name or company name,
• email address,
• home address,
• billing address,
• telephone number,
• tax number,
• IP address (collected by third-party providers such as Vercel, AWS S3, MailerLite and similar),
• time zone of registration,
• browser language,
• registration date,
• registration for training courses.

3. Transmission of your personal data

We only transmit your data to third parties if this is necessary for the fulfillment of these tasks, for example to our IT service providers, subsidiaries or sister companies, as well as logistics partners for the delivery of your order. The data forwarded to third parties is used by them exclusively for the fulfillment of their obligations within the scope of the contract.

Your data is currently forwarded to the following third parties:

Postmark

We use Postmark to send transactional emails, e.g. for registration confirmations or password reset emails.

• https://postmarkapp.com/
• AC PM LLC
• 1 N Dearborn Street, Suite 500, Chicago, IL 60602, USA.

Amazon Web Services (AWS)

We only use the service called "S3" on AWS to store some user uploads and backups.

We use the location in Frankfurt (DE) as the data storage location for S3.

• https://aws.amazon.com/s3/
• Amazon Web Services, Inc.
• 410 Terry Avenue North, Seattle WA 98109, United States

Vercel

We use Vercel as our web host for all our online services (except for the standard informational AV Stumpfl and

PIXERA website). At Vercel, we use the server location in Frankfurt (Germany).

• https://vercel.com/
• Vercel Inc.
• 340 S Lemon Ave #4133, Walnut, CA 91789, United States.

PlanetScale

We use PlanetScale as our central database provider. All user data requested by us is stored there. At PlanetScale,

we use the server location in Frankfurt (Germany).

• https://planetscale.com/
• PlanetScale, Inc.
• 535 Mission Street, San Francisco, CA 94015, United States

Mailer Lite

We use Mailer Lite to send marketing campaigns via email.

• https://www.mailerlite.com/
• MailerLite Limited (also has a US location)
• Privacy Policy - MailerLite
• 38 Mount Street Upper, Dublin 2, D02 PR89 Ireland

Hetzner

We use Hetzner to provide interfaces, applications and data. However, user data can run via Hetzner's servers.

• https://www.hetzner.com/cloud/
• Hetzner Online GmbH
• Industriestr. 25, 91710 Gunzenhausen, Germany

Some of the recipients mentioned above are located outside your country or process your personal data there. The level of data protection in other countries may not be the same as in your country. However, we only forward your personal data to countries for which the EU Commission has decided that they have an adequate level of data protection, or we implement measures to ensure that all recipients have an adequate level of data protection.

4. Retention period

We will only retain your personal data for as long as we reasonably deem it necessary to achieve the purposes set out above and as permitted by applicable law. We store your personal data in any case for as long as statutory retention obligations exist or limitation periods for potential legal claims have not yet expired.

5. Information and deletion

You have the right to obtain information about the data we have stored free of charge at any time and to request the correction of incorrect data or the blocking and deletion of your stored data. Please also inform us if there have been any changes to your personal details. You may send your requests for information, deletion and correction at any time to the address given at the end of this Data Protection Declaration.

6. Data security

We have taken technical and organizational measures to protect your data, in particular against loss, manipulation or unauthorized access. We regularly adapt our measures and precautions to ongoing technical developments.

7. Cookies

Our website uses so-called cookies. These are small text files that are stored on your device with the help of your browser. They do not cause any damage. We use cookies to make our website user-friendly. Some cookies remain stored on your device until you delete them. They enable us to recognize your browser the next time you visit. If you do not want this, you can set your browser to notify you when cookies are set and only allow this in individual cases. Deactivating cookies may restrict the functionality of our website.

8. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses cookies (see description above) that enable analysis of website usage. The information generated by these cookies about your user behavior (including your IP address) is generally transmitted to a Google server in the USA and stored there. However, we would like to point out that the Google Analytics code on our website has been extended to include a function that ensures anonymous collection of IP addresses (known as IP masking). Your IP address will therefore – at our request – only be transmitted to Google servers in the USA in truncated form, ensuring anonymization and preventing any conclusions being drawn about your identity. Google uses this information to evaluate your use of our website, to compile reports on website activity for us and to provide us with other services relating to website and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. Google will only transmit this data to third parties if required to do so by law or for the purposes of contract data processing. By using this website, you consent to the processing of data about you by Google and in the manner and for the purposes set out above.

9. Use of Google Maps

You can search for a retailer on our website. We use Google Maps API to visually display geographical information. When using Google Maps, Google also collects, processes and uses data about how visitors use the map functions. For more information about data processing by Google, please visit and Google's Data Protection Declaration: https://policies.google.com/privacy?hl=de. There you can also change your personal data protection settings in the Data Protection Centre. Detailed instructions on managing your own data in connection with Google products can be found here: https://support.google.com/accounts/answer/

10. Embedded YouTube videos

We embed YouTube videos on our websites. The operator of the corresponding plug-ins is YouTube, LLC, 901 Cherry Ave., CA 94066, USA. When you visit a page containing the YouTube plug-in, a connection to YouTube's servers is established. This informs YouTube which pages you visit. If you are logged into your YouTube account, YouTube can associate your surfing behavior with you personally. You can prevent this by logging out of your YouTube account beforehand. When a YouTube video is started, the provider uses cookies that collect information about user behavior. Anyone who has deactivated the storage of cookies for the Google Ad programme will not have to expect such cookies when watching YouTube videos. YouTube also stores non- personal usage information in other cookies. If you wish to prevent this, you must block the storage of cookies in your browser. Further information on data protection at YouTube can be found in the provider's Data Protection Declaration at: https://www.google.de/intl/de/policies/privacy/

11. Embedded Vimeo videos

Our website uses plug-ins from Vimeo for the integration and display of video content. The video portal is provided by Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. When you visit a page with an integrated Vimeo plug-in, a connection to the Vimeo servers is established. This allows Vimeo to see which pages you have visited. Vimeo learns your IP address even if you are not logged in to the video portal or do not have an account there. The information collected by Vimeo is transmitted to the video portal's servers in the USA. Vimeo can directly associate your surfing behavior with your personal profile. You can prevent this by logging out beforehand. Details on how user data is handled can be found in Vimeo's Data Protection Declaration at: https://vimeo.com/privacy.

12. Use of AI (artificial intelligence)

We currently only use AI for internal purposes or for development purposes, and only in such a way that no personal data is uploaded or used. If such data is processed using AI, this is done exclusively after complete prior anonymization.

13. Changes to the Data Protection Declaration

As these notices reflect the current legal situation, we reserve the right to amend this Data Protection Declaration accordingly. By continuing to use this website or maintaining a business relationship, you agree to these data protection provisions and their current status.

AV Stumpfl GmbH
Mitterweg 46
A-4702 Wallern

VAT-ID No.: ATU 5721 4222
Trade register No.: FN237609a
DVR: 0741311
EORI No.: ATEOS1000001436
WEEE-Reg. NR.: DE 24145251

Tel.: +43 7249 428 11
Web: http://www.avstumpfl.com
E-Mail: info@avstumpfl.com

Version: 7. November 2025