1. Responsible body LAPARO e.K. Schutzenstr. 6 40211 Dusseldorf Email: info@liilix.com Telephone: +49 (1525) 3700592 LAPARO e.K., Schutzenstr. 6, 40211 Dusseldorf (hereinafter only “LAPARO”) operates several websites such as liilix.pro and liilix.com and apps such as liilix Pro and liilix Home and wants to inform you in the following data privacy statement of the extent to which data is processed through the Websites and the purposes for which this data is used. This data privacy statement applies to the Services as well as to various sub-domains (for instance app.liilix.pro) or other domains, insofar as these refer to this data privacy statement. In the case of websites which do not refer to this data privacy statement, their own respective data protection provisions apply.

2. Processing of personal data Personal data are individual pieces of information which make a person identifiable directly or indirectly, such as a name or a postal address. Processing of personal data can occur in the following cases: Access data/ server log files For technical reasons, LAPARO processes a limited number of data for every access to the website and the apps (so-called connection data). These data are technically required in order to establish and execute a connection between your end device and our servers. The processing is carried out on the basis of Sections 13 (1) and 15 (3) TMG [the German law pertaining to telemedia]. In doing so, the following data or data categories can be collected: Name and Email address when accessing the apps Name of the website or file when accessing the websites Date and time of access Volume of data transferred Access status (file transferred) Browser type and version The user’s operating system Referrer URL (the website visited previously) After the connection has ended, these data are erased or made anonymous and shall therefore not be used to generate user profiles.

3. Categories of Data Recipients Personal data can be transferred to the following categories of recipients, where applicable: Public bodies, on the basis of legal requirements. Affiliated companies, for the purpose of fulfilling the contract or to provide the products of the information society. The data processor within the meaning of Art. 28 GDPR in the course of data processing. Other third parties in the course of transfer of function.

4. Transfer to third countries A transfer of personal data to countries outside of the European Union or the EEA is carried out on the basis of: an adequacy decision of the European Commission within the meaning of Art. 45 GDPR. an approved certification mechanism pursuant to Art. 42 GDPR, together with legally binding and enforceable obligations of the controller or the data processor in the third country. standard data clauses which have been issued by the Commission pursuant to the review procedure under Art. 93 (2) GDPR.

5. Scoring Your personal data shall not be processed to execute automated case-to-case decisions, including profiling pursuant to Art. 22 (1) and (4) GDPR.

6. Security LAPARO takes the legally required technical and organizational measures in order to protect personal data from loss, destruction, manipulation and unauthorised access.

7. Safekeeping period of the data Personal data shall only be kept safe for as long as is necessary to satisfy the purposes mentioned here, or as stipulated by the safekeeping periods provided by the legislator. After the purpose no longer applies or after the expiry of the safekeeping periods, the data shall be erased in accordance with the statutory provisions.

8. Rights of data subjects You have the option to make use of your “data subject rights” at any time: Right to information pursuant to Art. 15 GDPR. Right to rectification pursuant to Art. 16 GDPR. Right to erasure pursuant to Art. 17 GDPR. Right to restriction of processing pursuant to Art. 18 GDPR. Right to data portability pursuant to Art. 20 GDPR. Right to object pursuant to Art. 21 GDPR. If you would like to make use of your rights, please address your concerns via email to service@liilix.com or by post to the address mentioned in Section 1. Besides that, pursuant to Art. 77 (1) GDPR you have a right to complain to a supervisory authority. You can receive further information from the supervisory authority which is locally competent for you.