September 2024 The protection and security of your personal data and compliance with data protection regulations is something we take very seriously. Below we inform you which data is collected when you use our website and how we use it.

I. CONTROLLER FOR DATA COLLECTION AND DATA PROCESSING

We, the OH-SO Digital GmbH Kaiser-Wilhelm-Strasse 83 20355 Hamburg, GermanyEmail: hi@oh-so.com process your data as the controller.

II. DATA PROTECTION OFFICER

Our data protection officer is Hannes Oenning, WPP Deutschland Holding GmbH & Co. KG, Darmstädter Landstraße 112, 60598 Frankfurt, Germany, e-mail: dsb@wpp.com.

III. PURPOSE OF THE COLLECTION, PROCESSING AND USE OF PERSONAL DATA

We collect, process and use your personal data as described in this privacy policy and in compliance with the relevant data protection laws. Personal data is information that can be used to identify you. When you simply visit our website, i.e. if you do not contact us or send us an application, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security: - IP address - Time and date of the request - Time zone difference to Greenwich Mean Time (GMT) - Content of the request (specific page) - Access status/HTTP status code - Amount of data transferred in each case - Website from which the request comes - Browser - Operating system and its interface - Language and version of the browser software. If you make use of the opportunity to contact us, we may collect your e-mail address and your surname and first name, depending on the communication channel, as well as other data that you send us in the event of communication. This includes, for example, information such as your name, address or telephone number. Your data will not be passed on to third parties unless we are legally obliged to do so (e.g. at the request of an authority or a court) or you have given us your consent to do so. We therefore only use your data for the purpose for which you have provided it to us, e.g. to process the enquiry you have sent us. We analyse user interaction data in a completely anonymised manner, ensuring that no personally identifiable information is used.

IV. LEGAL BASIS FOR THE COLLECTION, PROCESSING AND USE OF PERSONAL DATA

The legal basis for the processing of your personal data is our legitimate interest. Our legitimate interest is the functionality of our website and, in this context, of course, answering your enquiries.

V. RECIPIENTS OF PERSONAL DATA

We may use service providers who are strictly bound by our instructions and who support us, e.g. in the areas of IT or the archiving and destruction of documents and with whom separate contracts for order processing are concluded to guarantee the secure and legally compliant handling of your data.

VI. DELETION OF DATA

Your data will be deleted as soon as it is no longer required for the fulfilment of the purpose for which it was collected (after the end of your visit to our website or when your enquiry is processed) and the deletion does not conflict with any statutory retention obligations.

VII. APPLICATION

1. Data collected and purpose of processing: When you apply, we process data from you that we require as part of the application process. This may include contact details, all data related to the application (e.g. CV, certificates, qualifications, answers to questions, etc.) and, if applicable, bank details (to reimburse travel expenses). The legal basis for this is § 26 para. 1 BDSG. Your data will of course be treated confidentially. We do not pass it on to third parties. 2. Deletion of application data: If there are no statutory retention obligations, the data will be deleted as soon as storage of this data is no longer necessary. If no recruitment takes place, this is usually the case no later than six months after the application process has been completed. In individual cases, individual data may be stored for longer (e.g. for travel expense claims). The duration of storage then depends on the retention periods under tax law. Furthermore, if your application is unfortunately not currently suitable, but in principle very interesting, we will contact you by e-mail and will ask you about inclusion in our candidate pool.

VIII. YOUR RIGHTS

You have the following rights vis-à-vis us with regard to your personal data: - right of access, - right to rectification or erasure, - right to restriction of processing, - right to object to processing, - right to data portability. You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

IX. SECURITY

We have taken various technical and organisational measures to ensure that the data collected and processed by us is protected against unauthorised access, loss, destruction or manipulation. It goes without saying that we comply with statutory data protection requirements. However, we would like to point out that no data transmission over the Internet is one hundred per cent secure. Therefore, we cannot guarantee complete protection of the data and information you transmit via our website. We reserve the right to change or adapt this privacy policy. We therefore ask you to check it occasionally to ensure that you are aware of the current version each time you access the website.