You have come to this page via a link because
you want to find out how we handle (your) personal data. In order to fulfill
our information obligations according to Art. 12 et seq. of the General Data
Protection Regulation (GDPR), we are pleased to present our information on data
protection below:

Who is responsible for data processing?

The responsible party in terms of data
protection law is:

drop2space GmbH

Lichtstrasse 25

50825 Cologne

You will find further information about our
company, details of the persons authorized to represent us and also further
contact options in the imprint of our website: https://www.drop2space.com/imprint.html

If we have received data from you, we will only
process it for the purposes for which we received or collected it.

Data processing for other purposes is only
considered if the legal requirements necessary in this respect exist in
accordance with Art. 6) Art. 4 GDPR. We will of course comply with any
information obligations pursuant to Art. 13) Art. 3 GDPR and Art. 14) Art. 4
GDPR in that case.

The legal basis for the processing of personal
data is basically - unless there are other specific legal provisions - Art. 6
GDPR. In particular, the following possibilities come into consideration here:

• Consent (Art. 6) Art. 1 lit. a) GDPR).
• Data processing for the fulfillment of
  contracts (Art. 6) Art. 1 lit. b) GDPR)
• Data processing on the basis of a balance of
  interests (Art. 6) Art. 1 lit. f) GDPR)
• Data processing for the fulfillment of a
  legal obligation (Art. 6) Art. 1 lit. c) GDPR)

If personal data is processed on the basis of
your consent, you have the right to revoke your consent to us at any time with
effect for the future.

If we process data on the basis of a balance of
interests, you as the data subject have the right to object to the processing
of personal data, taking into account the requirements of Art. 21 GDPR.

We process the data as long as this is
necessary for the respective purpose.

Insofar as statutory retention obligations
exist - e.g. in commercial law or tax law - the personal data in question will
be stored for the duration of the retention obligation. After expiry of the
retention obligation, it is checked whether there is a further necessity for
processing. If there is no further necessity, the data is deleted.

As a matter of principle, we carry out an
examination of data towards the end of a calendar year with regard to the need
for further processing. Due to the volume of data, this check is carried out
with regard to specific types of data or purposes of processing.

Of course, you can request information about
the data we have stored about you at any time (see below) and, if there is no
need for further processing, you can request deletion of the data or
restriction of processing.

Your personal data will only be passed on to
third parties if this is necessary for the execution of the contract with you,
the transfer is permissible on the basis of a balancing of interests in the
sense of Art. 6) Art. 1 lit. f) GDPR, we are legally obliged to pass on the
data or you have given your consent in this respect.

Your personal data is processed by us
exclusively in data centers in the Federal Republic of Germany/European Union.

You have the right to information about the
personal data we process about you.

In the case of a request for information that
is not made in writing, we ask for your understanding that we may then require
proof from you that you are the person you claim to be.

Furthermore, you have a right to rectification
or deletion or to restriction of processing, insofar as you are entitled to
this by law.

You can request the deletion of your walby account in the walby app in your user settings.

You can also report your issue to us using our contact form (link to contact form).
Your account and all associated data (drops, comments, likes, ...) will be deleted within 24 hours after your request has been checked.

Furthermore, you have a right to object to
processing within the scope of the law. The same applies to a right to data
portability.

In particular, you have a right of objection
pursuant to Art. 21) (1) and (2) of the GDPR against the processing of your
data in connection with a direct marketing campaign if this is carried out on
the basis of a balancing of interests.

We have appointed a data protection officer in
our company. You can reach him as follows:

datenschutz@drop2space.com

You have the right to complain about the
processing of personal data by us to a data protection supervisory authority.

Status: 4.10.2022