These technologies enable Microsoft and its partner websites to show advertisements based on your previous visits to our website or other websites on the internet. The data collected in this process may be transmitted to and stored on a server in the USA. Microsoft participates in the EU-US Data Privacy Framework, ensuring the protection of personal data when transferred to the USA. 

3.6.2 Google Ads 

Our websites use the “Google Ads” service provided by Google Ireland Limited. Google Ads is employed to record and analyse customer actions defined by us, such as ad clicks, page views, and downloads. Additionally, we use ads to display customised advertising messages for our products on Google’s partner websites. 

Cookies and similar technologies are used for this purpose. The data collected in this context may be transferred to and stored on Google servers in the USA for evaluation. Google participates in the EU-US Data Privacy Framework, ensuring an adequate level of data protection. 

3.6.3 Facebook Ads (Meta) 

For marketing purposes, our website utilises conversion and retargeting tags known as “Facebook pixels” (Meta Pixel). Facebook Ireland Limited, located at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, provides this service. 

We use Facebook pixels to analyse the general usage of our websites and track the effectiveness of Facebook advertising in terms of conversions. Additionally, we use Facebook pixels to deliver personalised advertising messages based on your interest in our products through retargeting. 

The data collected in this context may be transmitted to and stored on a server in the USA. Meta Platforms Inc. participates in the EU-US Data Privacy Framework, ensuring the protection of personal data when transmitted to the USA. 

You can manage your consent regarding Facebook Pixels via our Cookie Settings. If you are a Facebook member, you can also modify the privacy settings in your Facebook profile at any time. 

4. Social Media Plug-Ins 

In order to enhance the visibility of our company, our website incorporates social plug-ins from the social networks Facebook, Twitter, LinkedIn, Instagram, and YouTube. 

To protect your data, we have integrated these plug-ins using the “two-click“ method or similar technologies. This means that data is not transferred to the respective providers automatically when you visit our site. A connection to the provider’s servers is only established if you actively interact with the plug-in (e.g., by clicking the “Like” or “Share” button) or give your consent. 

The legal basis for this processing is your consent pursuant to Art. 6 (1) lit. a GDPR. 

4.1 Facebook 

When you interact with the Facebook plugin, your browser establishes a direct connection to Facebook servers. Facebook receives information indicating that your browser has accessed the corresponding page on our website. This information, including your IP address, is transmitted directly from your browser to a Facebook server in the US and stored there. Facebook (Meta) relies on the EU-US Data Privacy Framework for data transfers. 

4.2 Twitter (X) 

We have integrated plugins from the short message network Twitter (now X). When you use the plugin, a direct connection is established between your browser and the Twitter server. Twitter receives information about your visit to our site, including your IP address. For more information, please refer to Twitter’s privacy policy (https://twitter.com/privacy). 

4.3 LinkedIn 

Our website utilizes the Share feature of the LinkedIn network. If you click on the LinkedIn “Share-Button” (plugin), LinkedIn receives information about your visit to our website, including your IP address. For more information, please consult LinkedIn’s privacy statement at: (https://www.linkedin.com/legal/privacy-policy). 

4.4 YouTube 

Our website includes videos from YouTube. These videos are embedded in “enhanced privacy mode,” which means that no user-specific data is transferred to YouTube unless you play the videos. 

By playing a video, you consent to the data transfer. YouTube receives information that you have accessed the corresponding subpage. This occurs regardless of whether you have a user account with YouTube or are logged in. YouTube (Google) relies on the EU-US Data Privacy Framework for data transfers to the USA. 

For more information on the purpose and scope of data collection and processing by YouTube, please refer to YouTube’s data protection declaration: (https://policies.google.com/privacy). 

5. Duration of Data Storage 

We retain personal data only for the duration necessary to fulfil contractual or legal obligations for which the data was collected. Afterward, we promptly delete the data, unless we still require it for evidential purposes in civil claims or due to statutory storage obligations. 

For evidential purposes, contact data is retained for three years from the end of the year in which our business relationship with you concludes. Any claims will not expire before the end of the normal statutory limitation period. 

Furthermore, we are obligated to retain some of your data for bookkeeping purposes under the Irish Commercial and Tax Law. The storage periods stipulated by this law range from six to ten years. 

6. Your Rights 

Upon request, we will inform you about the existence and nature of any personal data we store about you. Subject to legal conditions and exceptions, you have certain rights to rectification, erasure, and restriction of processing regarding your data. 

Additionally, you may have the right to receive a copy of the data you provided to us in a structured, current, and machine-readable format. To exercise these rights, please contact us using the details provided in Section 1 above. 

You can also use the same contact information to inquire about the safeguards we have in place to protect personal data or to request the restriction of data processing in relation to specific activities, either partially or entirely. 

Right to Withdraw Consent: You have the right to withdraw any previously given consent at any time. This will result in us no longer processing your data based on that consent in the future. The withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal. You can manage your preferences and consent at any time via the Cookie Settings on our website. 

Right to Complain: If you believe that your personal data is being processed in violation of applicable data protection laws, you have the right to lodge a complaint with the relevant data protection regulatory authority. In Dublin, where Extra360 is located, the competent regulatory authority is the Data Protection Commission (DPC). 

7. Right to Object 

If we process your data based on legitimate interests under Article 6(1)(f) of the GDPR, you have the right under Article 21 of the GDPR to object to the processing of your data based on grounds relating to your specific situation. 

If your personal data is processed for direct marketing purposes, you have a general right to object, which we will honour without requiring you to provide reasons. 

To exercise your right to withdraw consent or object, simply notify us using the contact details provided above or utilize our Cookie Settings tool on the website. 

8. Data Security 

We employ up-to-date technical measures to ensure data security, particularly for the protection of your personal data during data transmission and to prevent unauthorized access by third parties. These measures are regularly updated to reflect the current state of technology. To secure the personal data you provide on our website, we utilize transport layer security (TLS) to encrypt the information. 

We may periodically update this Privacy Policy, such as when we revise our website or when there are changes in statutory or official regulati