Data is collected in log files, and through search engines and forms, whenever our websites are used. When you visit our websites, our web servers permanently store the following as standard for the purposes of system security: the connection data of the inquiring computer; which of our websites you have visited; the date and duration of the visit; the recognition data of the browser and operating system used; the website from which you came. Additional personal information such as your name, your address, telephone number, or e-mail address are not collected, unless these are voluntarily provided by you, e.g. during registration, a survey, a contest, to execute a contract, or a request for information. The stored data will be used to track misuse on the web server and then deleted. The time of the last login is also used for advertising purposes, if this is legally permissible.

Scope of processing of personal data

We integrate and use cookies on various pages to enable specific website functions and to integrate external web services. "Cookies" are small text files that your browser can store on your device. These text files contain a unique character string that identifies the browser when you return to the website. The process of saving a cookie file is also called "setting a cookie". Cookies can be set both by the website itself and by external web services.

Legal basis for the processing of personal data

Art. 6 para. 1 lit. f GDPR (legitimate interest) or art. 6 para. 1 lit. a or art. 9 para. 1 lit. a or art. 49 para. 1 lit. a GDPR (consent).

The relevant legal basis can be found in the cookie table listed later in this section.

As a general rule, in the case of cookies that are collected on the basis of a legitimate interest, our legitimate interest is to ensure the functionality of our website and the services integrated into it (technically necessary cookies). Cookies may also increase the user-friendliness and enable a more personalized presentation of the website. A legitimate interest also exists for cookies used for website security and therefore also for personal data security. With the aforementioned cookies, we take into consideration both your interests and ours.

Cookie technology allows us to analyze and track individual website visitors but only when the website visitor has consented to the use of cookies. Displaying individualized advertising is also possible only with your consent.

Purpose of data processing

Cookies are set by our website or external web services to maintain the site's full functionality, to improve user-friendliness or to pursue, with your consent, the stated purpose. Cookie technology also allows us to identify individual visitors by using pseudonyms, e.g. individual or random IDs. We are then able to provide more personalized services. Details are shown in the following table.

Duration of storage

The cookies listed below are stored in your browser until you delete them or on expiry of the storage duration. Session cookies are deleted when the session has expired. Details are listed in the following tables:

We use Microsoft Teams for telephone and / video conferences, webinars and virtual tours (collectively: "online meetings"). Microsoft Teams is part of Microsoft 365 from the Microsoft Corporation, One Microsoft Way, Redmond 98052-6399, USA.

Your data is therefore processed in a third country which is not classified as a safe third country by the European Commission. However, in order to guarantee an adequate level of data protection, we have concluded a data protection contract with Microsoft which contains the data protection clauses of the European Union standards.

If you are invited to an online meeting by TRUMPF, the following data can be processed: information on participant (first name, last name, e-mail address, profile picture, video picture), online meeting data (subject, description) as well as further data provided by you via the Microsoft Teams' chat function within an online meeting. If required, chat transcripts can be logged by TRUMPF. In this case, the transcripts are stored until the purpose of the transcript recording is no longer valid.

The scope of the data processing by TRUMPF depends on which information you provide.

Legal basis for the processing of your personal data within the framework of online meetings is art. 6 para. 1 lit. b GDPR.

The online meetings are generally not recorded. If the meeting is recorded as an exception, all participants are asked to give their consent before and at the start of the recording. The recording will only take place if consent is given. If TRUMPF records an online meeting with your consent, the recordings are deleted as soon as the purpose for the recordings is no longer valid.

Legal basis for the processing in case of recording is your consent, art. 6 para. 1 lit. a GDPR.

Further details on data protection can be found in Microsoft's data protection statement under https://docs.microsoft.com/en-us/microsoftteams/teams-privacy.

We use Google Analytics to analyze and statistically evaluate website usage. The data obtained is used to optimize our website and promotional activities.

Google Analytics is a web analytics service operated and provided by Google (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; for Europe: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).

We use Google Optimize, a web analytics service operated and provided by Google (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; for Europe: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google Optimize is a further function of Google Analytics (see previous information).

We are able to optimize our website via Google Optimize using a so-called A/B test. Different versions of our website are displayed to a portion of the website visitors via Google Optimize. Using statistical evaluation, we can identify which versions have more appeal to the users. The user's IP address to transferred to Google. Within the member states of the EU and the European Economic Area, the user's IP address is shortened and transmitted only anonymously. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and internet usage.

Your data will be processed on the basis of your given consent in accordance with art. 6 para. 1 lit. a or art. 49 para. 1 lit. a GDPR. Further information can be found in our note on Google Analytics.

We use the Adwords Remarketing function from Google (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; for Europe: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
Google Remarketing allows us to show you only the products which truly interest you, when you are visiting websites which belong to the Google Display Network (GND).
To that end, cookies are saved by your browser in order to recognize you when you visit GND websites again. Through analysis of your website use, you will then be shown advertisements for products which you have already viewed, or which you may be interested in.

When your data is processed, it may be (for a limited time) that your data is transmitted outside of the EEA, for example, to the United States of America (art. 49 para. 1 lit a GDPR), where the high European standards of data protection do not apply. This means that the authorities can have access to the data for control and monitoring purposes, against which it may not be possible to exercise effective legal remedy or to assert the rights of the persons concerned.

To prevent the saving of cookies for remarketing, you can change your settings for personalized ads here  http://www.google.com/settings/ads. Alternatively, you can proceed as instructed by the website of the NAI – Network Advertising Initiative  (http://www.networkadvertising.org/managing/opt_out.asp).

We use the Adwords conversion tracking function from Google (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; for Europe: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
Google conversion tracking allows us to track what happens after a user accesses our advertisement. For example, to identify whether a product is purchased or if there is a subscription to our newsletter. By clicking on our Google ad, a cookie is saved on your device to enable this function. This will not create a personal reference.

When your data is processed, it may be (for a limited time) that your data is transmitted outside of the EEA, for example, to the United States of America (art. 49 para. 1 lit a GDPR), where the high European standards of data protection do not apply. This means that the authorities can have access to the data for control and monitoring purposes, against which it may not be possible to exercise effective legal remedy or to assert the rights of the persons concerned.

To prevent cookies for conversion tracking from being saved, you can change the settings in your browser accordingly.

Additional information about conversion tracking can be found here https://support.google.com/adwords/answer/1722022?hl=en.

We use Baidu Statistics to analyze website usage and evaluate it according to statistical methods, and the information obtained from this is used to optimize our website and advertising.

Baidu statistics is a service with statistical and analytical functions including tongji.baidu.com, mtj.baidu.com and through data reports, APIs, and other forms, operated and provided by Beijing Baidu Netcom Technology Co., Ltd.

Regarding the type, purpose and use of personal information collected and used by Baidu Statistics SDK, and how Baidu Statistics SDK will protect the collected and used personal information, please read the Baidu Statistics Privacy Policy carefully to understand. (https://tongji.baidu.com/web/help/article?id=330&type=0)

We use Convertlab Marketing Cloud to analyze website usage and evaluate it according to statistical methods. The information thus obtained is used to optimize our website and to serve ads.

Convertlab Marketing Cloud is a complete marketing operation system covering advertising delivery, customer data management, marketing automation, marketing content and experience, user operation and sales collaboration, operated and provided by Shanghai Xinzhaoyang Information Technology Co., Ltd.

Regarding the types, purposes and uses of personal information collected and used by Convertlab Marketing Cloud, and how Convertlab Marketing Cloud will protect the personal information collected and used, please carefully read Convertlab Marketing Cloud's Privacy Policy to understand. (https://www.convertlab .com/privacy/)

Legal Basis

Based on your authorization and consent, your data will be processed in accordance with relevant laws and regulations such as the Cybersecurity Law of the People's Republic of China and with reference to the Information Security Technology Personal Information Security Specification (GB/T 35273-2020) and other relevant laws and regulations.

Types of Personally Relevant Data

During your visit to the website, the following data is mainly recorded.

Visitor-related data
IP address (in shortened form, so it is not possible to correspond explicitly); place of origin (country and city); language; operating system; device (computer, tablet, or smartphone); browser and all plug-ins used; computer resolution.

Source of traffic
Where the visit originated (i.e., the website or advertising medium through which our website was accessed).

User behavior
Which files were downloaded; which videos were watched; whether banners were clicked; where visitors went; whether they clicked on other pages of the portal or left completely; how long visitors spent in browsing.

Goal Attainment Rate
Purchase products; complete subscriptions; download files.

Convertlab Marketing Cloud is contractually obliged to take measures to ensure the confidentiality of the processed data, as well as to process such data for its own purposes (e.g., for profile creation or association to existing accounts, to improve Convertlab Marketing Cloud's products and services). The web usage data collected via "cookies" is usually transferred and stored on Convertlab Marketing Cloud servers in China for analysis purposes.

Retention time

Unless otherwise required by laws and regulations, your personal information will be stored for the shortest time necessary to achieve the purpose for which you authorize the use.

Anonymize IP

This website uses IP anonymization. Convertlab Marketing Cloud is commissioned by website operators to use this information to evaluate your use of the website, to create reports on website activity and to provide website operators with other services related to website and network usage.

Transfer of personal data outside of China

In principle, personal data collected and generated by Convertlab Marketing Cloud during its operation in China is stored in China, except for the following cases.

1. Explicitly provided by laws and regulations.

2. Obtain your explicit authorization.

In the above cases, Convertlab Marketing Cloud will ensure that your personal information is protected to the same extent as it is in the People's Republic of China. For example, Convertlab Marketing Cloud may request your consent to transfer personal information across borders or implement security measures such as data de-identification prior to the transfer of data across borders.

Revocation/objection

Each business function requires some basic personal information in order to be completed. You may give or withdraw your authorized consent for the collection and use of additional collected personal information at any time, Convertlab Marketing Cloud will explain this on the specific features page.

When you withdraw your consent, Convertlab Marketing Cloud will no longer process the corresponding personal information. However, your decision to withdraw your consent will not affect the processing of personal information previously carried out on the basis of your authorization.

We provide a social media wall on our web page. For this purpose, we use a plugin/widget from Walls.io GmbH, Schönbrunner Straße 213/215, 1120 Vienna, Austria. As soon as the plugin/widget is loaded by your browser, your IP address, the web page visited and other device-specific information is transmitted to Walls.io GmbH.

For the purposes of marketing and optimization, products and services from the company wiredminds GmbH (https://www.wiredminds.de/en/) are used. In this context, data is collected, processed, and stored – and a pseudonymous usage profile is created from this. Where possible and reasonable, usage profiles are entirely anonymized. Cookies can be used for this. Cookies are small text files which are saved in the visitor's Internet browser for the purposes of recognizing the Internet browser. The collected data, which may also contain personal data, is transmitted to wiredminds, or directly collected by wiredminds. wiredminds is permitted to use information left behind from website visits to create anonymized usage profiles. The data collected in this process will not be used to personally identify the visitor of the website without separately granted consent by the data subject. It will also not be combined with personal data about the bearer of the pseudonym. If IP addresses are collected, these are immediately anonymized after they have been collected, by deleting the last block of numbers. You may object to the collection, processing, and storing of data at any time, with effect for the future.

We use a content delivery network (CDN) from Akamai. A CDN is a service which can be used to deliver the content of our online offer, in particular large media files such as graphics or scripts, using regionally distributed servers that are connected via the Internet, faster.

For this purpose, we use the web application protector service provided by Akamai. This service is used to check every request for possible security risks. This protects our web page against external threats. To ensure this, all data traffic between you and us is routed through Akamai's servers and IT infrastructure. Akamai states that it does not store any personal data.

Our web page also uses "mPulse". This sets a cookie on your end device, which helps us to measure and check the web page's response speed. This may result in the data recorded being passed on to Akamei.

To provide product updates in MyTRUMPF for downloading, we use Akamai's "Download Delivery" product. Here too, it is possible that your personal data may be processed by Akamai.

When your data is processed, your data may, as described above, be transmitted for a limited period outside of the EEA, for example, to the United States of America (art. 49 para. 1 lit a GDPR), where the high European standards of data protection do not apply. This means that the authorities can have access to the data for control and monitoring purposes, against which it may not be possible to exercise effective legal remedy or to assert the rights of the persons concerned.

Additional information can be found at https://www.akamai.com/us/en/privacy-policies/

The legal basis for the processing of your data as part of the CDN is art. 6 para. 1 lit b GDPR. The legal basis for the processing of your data as part of mPulse is art. 6 para. 1 lit. a GDPR. Data is transmitted to Akamei on the basis of suitable guarantees providing the affected persons enforceable rights and effective legal redress. We have ensured this via EU standard data protection agreements.

The TRUMPF Group takes all required technical and organizational security measures in order to protect your personal data against loss or misuse. Your data will be stored in a safe operating environment to which the public has no access. In certain cases, your personal data will be encrypted during transmission by so-called Transport Layer Security technology (TSL). This means that data protected by TSL is communicated between your computer and our servers by using a recognized encryption procedure if your browser supports TSL. We use Ingenico Payment Services GmbH (https://www.ingenico.com/epayments) to offer you absolute security of your credit card data. This data is not stored on our servers, but is processed directly by the relevant payment institution. If you wish to contact us by e-mail, we would like to point out that the confidentiality of the transmitted information is not guaranteed. The content of e-mails can be viewed by third parties. Therefore, we recommend that you send us confidential information exclusively by post.

We use Google Maps (a service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) on our website to show the location of our sites in the Google Maps plug-in. When using Google Maps, data which is necessary for this use is forwarded, along with additional data. When your data is processed, it may be (for a limited time) that your data is transmitted outside of the EEA, for example, to the United States of America (art. 49 para. 1 lit a GDPR), where the high European standards of data protection do not apply. This means that the authorities can have access to the data for control and monitoring purposes, against which it may not be possible to exercise effective legal remedy or to assert the rights of the persons concerned.

This can be, for example, device-related information or log file data from servers, including IP addresses or data from the browser's web storage. In this regard, Google writes: "Under certain circumstances, we connect personal data from one service with information and personal data from other Google services."

You can find additional information and details in the data protection conditions for Google services (https://policies.google.com/privacy?hl=en).

These web pages use external fonts from Font Awesome (Fonticons, Inc. 710 Blackhorn Dr Carl Junction, 64834, Mo, USA). These web fonts are incorporated when a server is accessed; generally a server from Font Awesome in the USA. This will inform the server about which of our websites you have visited. Font Awesome will also store the IP address of the browser of the final device used by the person visiting these web pages.When your data is processed, it may be (for a limited time) that your data is transmitted outside of the EEA, for example, to the United States of America (art. 49 para. 1 lit a GDPR), where the high European standards of data protection do not apply. This means that the authorities can have access to the data for control and monitoring purposes, against which it may not be possible to exercise effective legal remedy or to assert the rights of the persons concerned.

Additional information about Font Awesome's data protection policy can be found here: https://fontawesome.com/privacy 

We analyze movement, clicking, and swiping behavior on our website on a randomized basis, in order to improve the design of our pages. To do this, we use the Hotjar service, which randomly records a small portion of the session. Hotjar will store this information under a pseudonymized user profile. When your data is processed, it may be (for a limited time) that your data is transmitted outside of the EEA, for example, to the United States of America (art. 49 para. 1 lit a GDPR), where the high European standards of data protection do not apply. This means that the authorities can have access to the data for control and monitoring purposes, against which it may not be possible to exercise effective legal remedy or to assert the rights of the persons concerned.

The information is used by neither Hotjar nor us to identify individual users. The data is anonymized, stored, and deleted after 365 days.

Additional information can be found in Hotjar's data protection policy: https://www.hotjar.com/legal/policies/privacy

You can object to the storing of a user profile and information about your visit on our website by Hotjar, as well as the setting of a Hotjar tracking cookie on other websites, via this link: https://www.hotjar.com/legal/compliance/opt-out 

In order to optimally cater to your needs and interests, your e-mail address will be used by different companies from the TRUMPF Group for the purposes of advertising. We use the TRUMPF newsletter and other mailings to inform you about us and our offers. To manage our e-mail marketing efficiently, your data is used within the Group.

If you register via our website, we will verify your identity by means of a confirmation e-mail in a double-opt-in process.

 Subscription to mailings can be modified at any time, or canceled with immediate effect without giving a reason. To do this, please click on the "personal profile" link which is located at the end of the mailing, or send an e-mail to info@cn.trumpf.com. In your personal profile you can cancel the subscription entirely, or modify and supplement the information you have provided. Additionally, subscriptions to individual areas of interest can be edited or deselected.

We use the tool Episerver Campaign (Episerver GmbH, Wallstraße 16, 10179 Berlin, Germany) for our e-mail processes. By setting a tracking pixel when you open our e-mails, information which allows us to evaluate the user behavior (opening the e-mail, e-mail address, time, IP address) is retrieved. The links in our e-mails are designed in such a way that we can trace whether they have been clicked on. Using this information we can adapt our offers to better suit your interests.

By participating in competitions, the participant expressly consents to the TRUMPF Group storing the required data for the period of the competition and afterwards, to carry out the competition. Participants also consent to the publishing of their full name on the participating web pages, in the event that they win. There is no claim to such publication. The data collected as part of the competition will also only be used by the TRUMPF Group in the legally permissible scope for advertising products. The data will not be forwarded to third parties.

You can upload drawings or images onto our website or have them uploaded via our marketing department. The uploaded content will be erased at the end of the business relationship. By uploading or transferring this content to TRUMPF, you declare that you own the necessary rights.

You have the option of booking digital events via our website. The data entered when booking a digital event is used for preparation and execution of events. We will store the login data you enter (email address and your self-selected password) for future bookings. Of course, the password is not stored in plain text but as a hash value. We will store your data until you notify us of your desire to have your data erased. We will erase your data automatically if a booking is not made over a longer period of time.

The notes on data protection listed below under the "MyTRUMPF" tab apply additionally for the use of the MyTRUMPF customer portal. The general instructions, in particular in relation to your rights, also apply for the use of MyTRUMPF.

You must register with our customer portal in order to use MyTRUMPF. During the registration, we will process the information you provide during the registration process. All information required for the registration process is specifically indicated. You can also provide further data, beyond the necessary information, on a voluntary basis.

We will use your data within the framework of your registration activation, as well as to identify you as the contact person of a customer and to display customer-specific content. During registration, you as a person will be assigned to one of our customers. Other employees of your company can access your information stored in MyTRUMPF using this allocation. The exception is of course the password you select, which we store as a hash value and cannot view in plain text. However, third parties have no access.

If we activate the MyTRUMPF User Admin function for your company, the customer administrator authorized for your company can view the information you have provided during registration (see notes under "MyTRUMPF User Admin").

Before activating the account, we check all business partners to ensure they are not listed on published sanction lists. A service provider selected by us carries out this check. The name listed during registration is checked to ensure it is not included in the sanction lists. We will block the account if we determine that the name is listed in a sanction list. The check is carried out regularly even after registration due to the fact that the sanction lists are constantly updated. We will store the status of the check. We carry out the check on the basis of our legitimate interest, art. 6 para. 1 lit. f GDPR. Our legitimate interests consist in ensuring that TRUMPF does not do business with persons included on a sanction list. You are welcome to get in touch with our data protection officer to find out which lists TRUMPF checks specifically.

TRUMPF has a representative in some countries. If this is the case, the representative is given access to the personal data you have provided. We use contractual regulations to ensure with the representatives that the processing of your data is in line with data protection standards.

Apart from that, your data is only processed for your MyTRUMPF account and is deleted at the latest one year after the account has been deactivated. The legal basis for the processing of the information deemed to be necessary is art. 6 para. 1 lit. b GDPR. The legal basis for the provision and processing of your voluntary information is your consent, art. 6 para. 1 lit. a GDPR.

MyTRUMPF can only be accessed after the log-in process has been completed. During the log-in procedure, we process your e-mail address and the password stored as a hash value so that we are able to identify you as the contact person of our customer. This ensures that only authorized users have access to our platform.

During the log-in process, we check the status of the sanction list check by comparing it with the data in our system. We do not check the sanction lists. Only the authorization status is read out.

The legal basis for the processing of your data during the log-in procedure is art. 6 para. 1 lit. b GDPR. We carry out the status comparison of the sanction lists' checks on the basis of our legitimate interest, art. 6 para. 1 lit. f GDPR.

You can reset your password with the Recover Password function. You will have to enter the e-mail address you used during registration to do so. After entering the e-mail address, you will receive a link from us which you can use to create a new password. We will store the password you select as a hash value and not in plain text. Third parties have no access, however.

Legal basis for the processing of your e-mail address is art. 6 para.1 lit b GDPR.

We make it possible for customers to manage access to MyTRUMPF with the "MyTRUMPF User Admin" function. We activate the MyTRUMPF User Admin function in agreement with our customers on an individual basis.

Other members of the company can be invited to participate in MyTRUMPF User Admin. The e-mail address of the other members of the company must be entered for this. The invited members then receive an e-mail with a link to activate the account. If the link for account activation is not used within 30 days of being sent, the account to be activated will then be automatically deleted. The MyTRUMPF User Admin can access the personal data of members of their own organization. However, access to personal data of users from other organizations is not possible.

The MyTRUMPF User Admin is also authorized to activate or reject members from their own organization.

Legal basis for the processing is art. 6 para.1 lit b GDPR.

You can upload drawings or images using your MyTRUMPF account. The uploaded content can be viewed by all MyTRUMPF accounts of the same organization. Uploaded content is stored by TRUMPF until it is erased by you or at the end of the business relationship. By uploading the content, you declare that you possess the necessary rights.

In the MyTRUMPF customer portal, you can report service cases for your TRUMPF products. Any data entered as part of the message and all subsequent communications via MyTRUMPF will be stored. Mandatory fields are marked. The amount of the data stored depends on the information you provide. TRUMPF processes your data for analysis and remedial action for the registered service case. Please remember that any personal information provided within the course of a service case registration can be viewed by other members of your company.

If you report a service case via the TRUMPF Service app, the corresponding notes for the TRUMPF Service app additionally apply.

Your data, including billing or other legal requirements, will be deleted when its storage is no longer needed for the purposes listed above.

Legal basis for the processing is art. 6 para.1 lit b GDPR.

You have access to the TRUMPF E-Shops within your MyTRUMPF account. The data which is provided as part of orders from the E-Shops is used to fulfill these orders and then saved in accordance with the legally stipulated retention periods – for example, 10 years for taxation purposes. Furthermore, the data is used for advertising purposes by the TRUMPF Group, if this is legally permissible without requiring consent from the parties concerned. You can opt out of this use at any time using the contact data listed above.

CONSENT:

TRUMPF analyzes the user's order process to check for a possible cancellation of the order process. This data is then evaluated by TRUMPF. TRUMPF uses the data obtained in this manner to get in touch with a user. You hereby agree to TRUMPF carrying out the aforementioned analysis and that TRUMPF may use the insights acquired to contact you. You can revoke your consent at any time. Information on exercising the right to revoke consent can be found in the data protection statement under "Your rights".

The legal basis for the processing of data provided during ordering is art. 6 para. 1 lit. b GDPR. Your consent is the legal basis for the evaluation process described, art. 6 para. 1 lit. a GDPR.

The notes on data protection which can be downloaded from the app apply for orders using our Easy Order app.

You can book training courses offered by TRUMPF via your MyTRUMPF account. An active MyTRUMPF account is required to make a booking. The data entered when making a booking is used for preparation and execution of training courses and to contact participants. We provide assessments as part of our training courses. If you participate in the assessments, the data you provide for this will be stored and evaluated. A test result is subsequently determined using this data. The test results are transmitted to the participant's employer once the assessment has been completed.

When booking training courses, you can upload a photograph of yourself on a voluntary basis. If conclusions concerning particular categories of personal data can be drawn from the photograph (for example, a person wearing glasses), your consent expressly includes this data as well.

Your contact data will be used to make you aware of further offers from TRUMPF if you agree to this when booking a training course.

The legal basis for the processing of data provided when booking training courses is art. 6 para. 1 lit. b GDPR. We process your voluntarily uploaded photograph based on your consent in accordance with art. 6 para. 1 lit. a GDPR and/or art. 9 para. 2 lit. a GDPR.