www.kurt-koenig.ee

‍Preamble
‍By means of this Data Protection Declaration, wewish to inform you about the nature, scope, and purposes of the collection andprocessing of your personal data when you use the website offered by UAB “KurtKoenig”, company code 300090755, Šiltnamių g. 30, Vilnius (hereinafter alsoreferred to as “Kurt Koenig”, “we”, “us”), available at www.kurt-koenig.ee (hereinafter also referred to as the“Website”).
‍
When collecting and processing your personal data during your visit to ourWebsite, Kurt Koenig places particular importance on the protection of yourpersonal data.

‍Data Controller
‍The controller responsible for the collection andprocessing of your personal data pursuant to the EU General Data ProtectionRegulation (Regulation (EU) 2016/679) (hereinafter the “GDPR”) is:
UAB “Kurt Koenig”, company code 300090755
Šiltnamių g. 30, Vilnius
Email: info@kurt-koenig.ee

‍Data Protection Officer
‍If you have any questions regarding the collection,processing, and storage of personal data when using our Website, you maycontact the data protection officer at:
UAB “Kurt Koenig”, company code 300090755
Šiltnamių g. 30, Vilnius
Email: info@kurt-koenig.ee

‍Personal Data and Its Processing
‍This Privacy Policy relates to the collection andprocessing of personal data when you use the Website offered by Kurt Koenig.Personal data means any information relating to an identified or identifiablenatural person and their personal or factual circumstances. Depending on thescope of your use of our Website, different categories of data may be collectedand processed.

Personal Data Provided by the User
‍We collect, process, and store your personal datawhen you visit our Website.In order to optimize the usability of the Website,Kurt Koenig collects data about your use of the Website in so-called serverlog files (“log files”). Each access to our Website is recorded.Log files contain the following data: your IP address; time, type, and number of requests; name and URL of the retrieved file; referring website (referrer URL); browser type and similar technical information.The information stored in log files is collectedand processed solely in pseudonymized form for statistical evaluation purposes,namely to analyze Website usage and continuously improve our services. Thisdata cannot be assigned to you personally and is not combined with other datasources.The legal basis for such collection and processingis
‍Article 6(1)(f) GDPR (legitimate interest). Please alsorefer to the section on your data protection rights below.

‍User Account / Online Shop
‍To use the “Kurt Koenig Online Shop” available onour Website, you must first create a user profile. This allows you to placeorders using your stored personal data. You may modify or delete your profiledata at any time.

When creating a user profile, we collect andprocess the following mandatory personal data:
gender;
first and last name;
company;
address;
email address;
telephone number;
password.

You may voluntarily add further personal data toyour profile:
date of birth;
company name;
website;
customer number;
VAT number;
fax number;
mobile phone number.

The legal basis is Article 6(1)(f) GDPR.

‍RentalInquiry
‍You may submit a rental inquiry via the dedicatedform by clicking the “Rental inquiry” button next to the selected equipment orby contacting us by telephone. For this purpose, we collect, process, andstore:
first and last name;
email address;
telephone number;
company name (if applicable).

Such data is processed only to the extent necessaryto handle your inquiry. Legal basis: Article 6(1)(f) GDPR.

‍Processingby Third Parties
‍For secure and efficient hosting, Kurt Koenigcooperates with:
Bradler & Krantz GmbH & Co. KG GmbH
Kurt-Schumacher-Platz 8, 44787 Bochum, Germany
Certified under ISO/IEC 27001.
Privacy policy: https://www.providerdienste.de/unternehmen/datenschutz/

Personal data is transferred to other third partiesonly where necessary for order processing or invoicing in connection withOnline Shop orders. Service providers (e.g., logistics companies, banks)receive only the data required to perform their task and are contractuallyrestricted to that purpose.

‍Purposesof Processing
‍Personal data is processed in order to:
provide and operate the Website;
ensure system security and stability;
deliver content efficiently and user-friendly;
adapt and improve the Website continuously.
‍
Storageand Deletion Periods
‍User profile data is stored as long as required fororder processing and as long as the user account exists. Data is deleted uponprofile deletion unless statutory retention obligations apply.

Log file data is generally deleted after 30 days.

Data will also be deleted when consent iswithdrawn, unless retention is required by legal, statutory, or contractualobligations, or for the establishment, exercise, or defense of legal claims, orfor invoicing purposes.

‍Cookies
‍We use technically necessary cookies. These aresmall text files stored by your browser. They enable core Website functions andpersonalized settings (e.g., shopping cart retention).

You may disable or restrict cookies through yourbrowser settings and delete stored cookies at any time. However, certainWebsite functions may then be unavailable or limited.Legal basis: Article 6(1)(f) GDPR.

‍Google Analytics
‍We use Google Analytics provided by Google LLC,USA. Google Analytics uses cookies to analyze Website usage. IP anonymizationis enabled; IP addresses within the EU/EEA are shortened before transmission.Only in exceptional cases is the full IP address transferred to the USA andshortened there.

Legal basis: Article 6(1)(f) GDPR.
Opt-out plugin: https://tools.google.com/dlpage/gaoptout
‍
‍Google Maps
‍We use Google Maps services. Use may result intransmission of IP address and usage data to Google servers in the USA viadirect browser connection. We have no influence over the scope of suchprocessing.
Legal basis: Article 6(1)(f) GDPR. 

Google Fonts
‍We use external fonts provided by Google. Browserconnection to Google servers may transmit IP address and usage data to the USA.
Legal basis: Article 6(1)(f) GDPR.

‍Legal Bases for Processing
‍Processing is based on:
‍Art. 6(1)(b) GDPR — contract performance / pre-contractual measures
‍Art. 6(1)(c) GDPR — legal obligation
‍Art. 6(1)(f) GDPR — legitimate interest
‍Art. 6(1)(a) GDPR — consent (where separately granted)

‍Data Subject Rights
‍You have the following rights under GDPR:
‍Right of access
‍Right to rectification and completion
‍Right to restriction of processing
‍Right to erasure
‍Right to data portability
‍Right to object to processing based on Art. 6(1)(f) GDPR
‍Right to withdraw consent at any time
‍Right to lodge a complaint with a supervisory authority.

Requests may be submitted to: info@kurt-koenig.ee

‍Final Provisions
‍Kurt Koenig reserves the right to update thisPrivacy Policy at any time in connection with service development or newtechnologies. Users are encouraged to review it regularly.

‍Version: July 2026

Whistleblower Protection
‍By submitting information, you contribute to theidentification of violations and the prevention of risks to the company and itsemployees. All information provided will be handled in strict confidence inaccordance with the applicable Whistleblower Protection Law.Reports of violations may be submitted using the designated reporting form.For the exercise of your rights and for furtherinformation, you may contact:
andrius.karcauskas@kurt-koenig.lt
‍
Telephone: +370 659 19826

Whistleblowing System
‍This whistleblowing system may be used bycustomers, employees, suppliers, and other potentially related third parties.The system enables the prompt, simple, and anonymous reporting of actual orsuspected misconduct.

‍Reportable Matters
‍Reports may be submitted regarding actual orsuspected violations of laws, regulations, or internal standards, including butnot limited to:
fraud and corruption;
money laundering and cartel-related offenses;
human rights violations and environmental risks;
breaches of internal policies and guidelines;
other forms of unethical conduct.

‍Anonymityand Protection
‍All reports are treated as strictly confidential.Whistleblowers are protected against retaliation in accordance with applicablelaw. You may decide whether to disclose your identity. Anonymous reports willalso be accepted and processed.The whistleblowing system must not be used forfalse accusations. The intentional submission of false or misleadinginformation is strictly prohibited and may result in legal consequences.

Communication and Follow-Up
‍Within the system, you may create a secure mailboxto enable ongoing (including anonymous) communication regarding your report. Todo so, you must create a password when submitting the reporting form.Information regarding data protection is availableunder the menu item “Data Protection Notice.”
‍
The operational rules of the whistleblowing system are available under “Whistleblowing Guidelines.”This policy also expressly covers reports receivedfrom outside the Berner Group, in particular reports concerning human rightsand environmental risks within the supply chain.

‍UAB “Kurt Koenig”
Company code: 300090755
Address: Šiltnamių g. 30, Vilnius, Lithuania