Controller (Art. 13 GDPR) for the processing of your personal data is VARTA Storage GmbH, Nü rnberger Straße 65, 86720 Nördlingen, Germany.

This Privacy Policy describes the processing of your personal data in the context of the registration and use of the VARTA Account Service, VARTA Energy Portal Terms of Use, the VARTA Storage Warranty for VARTA Systems and the VARTA Energy Storage Terms of Service.

VARTA Systems are understood to be products of VARTA Storage GmbH, such as energy storage systems, VARTA Link and future products.

In addition, the VARTA AG Group's general privacy policy applies, which includes information on data security, your rights under the GDPR and the contact details of the controllers and the data protection officer. It can be viewed here: https://www.varta-ag.com/en/privacy-policy

The following personal data is collected when creating a VARTA account:

• First and last name
• Email address

The following personal data is collected during the portal registration process:

• First and last name
• Email address
• Serial number of the VARTA System
• Activation code (one time)

The following personal data is also collected if it has been provided by the data subject (the user):

• Title
• Address(es)
• Phone number(s)
• Contact form information, such as further contact details or instructions
• Location of the VARTA System

The aforementioned data will be processed for the following purposes, based on the following legal basis and stored for the duration outlined below, unless longer retention periods are required by law:

For the initial registration and login to the VARTA Account Service, first and last name, email address, consent to the Terms of Use, consent to the Terms of Service and the Privacy Policy are collected and processed. This serves to set up a VARTA account, which is a prerequisite for using other VARTA online services such as the VARTA Energy Portal. The legal basis is the processing for the preparation and performance of a contract (Art. 6 para. 1 lit. b) GDPR). The data is stored for the duration of the contract.

The login data is then used for subsequent logins by the user. The legal basis is again the processing for the performance of the contract (Art. 6 para. 1 lit. b) GDPR). The data is stored for the duration of the contract.

We use the SingleSignOn application ‘Keycloak’ for user login. It is used to manage access rights for applications and user identification and login for these applications. The following data categories are processed for this purpose, depending on the occasion: Password, e-mail address, first name, surname, consent to terms of use account service, consent to privacy policy, consent to terms of service, address(es), telephone number(s), information from free field details, location of the VARTA system. The legal basis is the processing of data for the fulfilment of the contract (Art. 6 para. 1 lit. b) GDPR).

For the initial registration and login to the VARTA Energy Portal, first and last name, email address, serial number and activation code are collected and processed. This serves to set up the portal access and assign the VARTA System to the individual user. The legal basis is the processing for the preparation and performance of a contract (Art. 6 para. 1 lit. b) GDPR). The data is stored for the duration of the contract.

The login data is then used for subsequent logins by the user. The legal basis is again the processing for the performance of the contract (Art. 6 para. 1 lit. b) GDPR). The data is stored for the duration of the contract.

Within the VARTA Energy Portal, the serial number of the VARTA System is displayed. This serves to provide the VARTA Online Services offered by the VARTA Energy Portal and thus the fulfilment of the VARTA Energy Portal Terms of Use (Art. 6 para. 1 lit. b) GDPR).

VARTA.energy has an installer area and an end customer area, which provide the corresponding functions for each role.

Within the scope of the warranty, first and last name, email address and serial numbers are processed for the identification of the contractual partner. This serves the performance of the contract (Art. 6 para. 1 lit. b) GDPR). The data is stored for the duration of the warranty.

In the context of processing warranty claims, first and last name and email address are collected and processed. This serves the verification and fulfilment of warranty claims and the contacting of the user for the purpose of performing the contract (Art. 6 para. 1 lit. b) GDPR). If the user has provided further voluntary information, this will also be used to contact him/her. This includes title, address(es), phone number(s) or information in the contact form of the portal registration, such as further contact options.

In individual cases, VARTA Storage may also use the communicated contact data for the defence or enforcement of legal claims against the user or third parties, such as suppliers of VARTA Storage. The legal basis for this is the overriding interests of VARTA Storage in effective legal defence and enforcement, compared to which the interests of the user are subordinated (Art. 6 para. 1 lit. f) GDPR). VARTA Storage will keep the personal data of the user anonymous as far as possible when enforcing claims against third parties.

In order to provide the VARTA Online Services under the VARTA Energy Storage Terms of Service, VARTA Storage processes the serial number and, if cooperative actions of the user are necessary for this purpose, the user’s email address and first and last name. The purpose and legal basis are the processing for the performance of the contract (Art. 6 para. 1 lit. b) GDPR). If the user has provided telephone number(s), address(es) or other contact options via the contact form, this data will also be used to contact the user if VARTA Storage deems this helpful. The data is stored for the duration of the contract.

If consent is given (Art. 6 para. 1 lit. a) GDPR), VARTA Storage uses first and last name, email address and/or telephone number, if necessary, in comparison with the technical data, for targeted advertising of VARTA Storage products. The consent can be revoked at any time for the future. VARTA Storage can then no longer send promotional offers.

VARTA Storage reserves the right to use the first name and last name as well as the communicated address for postal advertising of VARTA Storage products to the user. The legal basis is the overriding interest of VARTA Storage in an advertising opportunity for its products, compared to which the interests of the user are generally subordinated (Art. 6 para. 1 lit. f) GDPR). The data will be stored for this purpose until the user objects or until the point in time when the aforementioned interest of VARTA Storage no longer applies.

It can never be ruled out that safety risks may arise from the actual use of the VARTA Systems. For minor indications that are solely related to the performance of the VARTA Systems, VARTA Storage uses the contact data provided by the user, such as title, first and last name, email address, address, telephone number or information in the contact form of the portal registration to contact the user on the basis of a secondary obligation from the existing contracts with the user, in particular the concluded warranty (Art. 6 para. 1 lit. b) GDPR). In the unlikely event of risks to the life or health of the user or third parties, we use all available data to warn of such risks and to eliminate the risks (Art. 6 para. 1 lit. d) GDPR).

VARTA Storage answers general service enquiries using first and last name and email address, as well as telephone number, address or other communication channels, if these have been provided by the user in this context or have been authorised or are necessary for communication. The legal basis in this case is the processing of the enquiry (Art. 6 para. 1 lit. b) GDPR) or, in individual cases, the overriding interest of VARTA Storage in processing the enquiry as effectively as possible (Art. 6 para. 1 lit. f) GDPR). The data stored separately for this purpose is stored for the duration of the enquiry and then deleted within 3 months.

VARTA Storage uses the serial number and, if necessary in individual cases, the first and last name and email address to support technical progress at VARTA Storage or companies affiliated with VARTA Storage if the relevant consent has been given (Art. 6 para. 1 lit. a) GDPR). Consent can be revoked at any time for the future. VARTA Storage can then no longer use the data.

For all communications with the user, VARTA Storage uses the title voluntarily provided on the basis of the user's consent (Art. 6 para. 1 lit. a) GDPR) in order to be able to address the user in the most appropriate manner. VARTA Storage stores the user's title until the revocation of the consent, which can be revoked at any time for the future, and also deletes this information without revocation at the latest when deleting the remaining data records for the user. A revocation has no influence on the performance of the contract or other services of VARTA Storage.

Our website uses content, services and other performances of third party providers. These are, for example, services for statistical evaluation of use and visit of our website. To call up and to display the data user's browser, it is necessary to transmit user's IP address to the respective third-party provider. Even though we strive to use only third-party providers that only require the IP address to deliver content or even work with anonymized IP addresses, we have no influence on whether the IP address is stored. Information regarding third-party providers used can be found below in this Data Privacy Statement.

Nature and scope of processing
We have integrated YouTube Video on our website. YouTube Video is a component of the video platform of YouTube, LLC, on which users can upload content, share it over the Internet and receive detailed statistics. YouTube Video allows us to integrate content from the platform into our website. YouTube Video uses cookies and other browser technologies to evaluate user behavior, recognize users and create user profiles. This information is used, among other things, to analyze the activity of the content listened to and to generate reports. If a user is registered with YouTube, LLC, YouTube Video can associate the videos played with the profile. When you access this content, you connect to servers of YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street Dublin 4 Ireland, where your IP address and possibly browser data such as your user agent are transmitted.

Purpose and legal basis
The use of the service is based on your consent pursuant to Art. 6 para. 1 lit. a. DSGVO and § 25 para. 1 TTDSG.

Data retention period
The concrete retention period of the processed data cannot be influenced by us, but is determined by YouTube, LLC. Further information can be found in the privacy policy for YouTube Video: https://policies.google.com/privacy.

Cookies are small text files that are stored on your data carrier and save certain settings and data for exchange with our system via your browser. A cookie usually contains the name of the domain from which the cookie data was sent, information about the age of the cookie and an alphanumeric identifier.

Cookies enable our systems to recognize the user's device and make any preferences immediately available. As soon as a user accesses the platform, a cookie is transferred to the hard drive of the respective user's computer. Cookies help us to improve our website and provide you with a better and more customized service.

They allow us to recognize your computer, or your (mobile) device when you return to our website and thereby:

• store information about your preferred activities on the website and thus tailor our website to your individual interests.
• To accelerate the speed of processing your requests.

We cooperate with third-party services that help us to make the Internet offer and the website more interesting for you. Therefore, cookies from these partner companies (third-party providers) are also stored on your hard drive when you visit the website. These are cookies that are automatically deleted after the specified time.

For more information on the individual third-party providers, please refer to the Cookie Consent Tool and the privacy notices stored therein.

If you do not wish to use browser cookies, you can set your browser so that cookies are not accepted. Please note that in this case you may only be able to use our website to a limited extent or not at all. If you only want to accept our own cookies, but not the cookies of our service providers and partners, you can select the setting in your browser "Block third-party cookies". We assume no responsibility for the use of third-party cookies.