DATA PRIVACY DISCLAIMER

We as KES appreciate your interest in our company and our products. We take the protection of your privacy when using our websites very seriously. In the following we are pleased to inform you about the collection of anonymous and personal data.

A. RESPONSIBLE FOR THE DATA PROCESSING

The person responsible for the processing of personal data in the context of this website in accordance with the regulations of the European General Data Protection Regulation (GDPR) is named in the imprint.

Imprint：

Grove AG,

P.O. Box: 1361,

58653 Hemer-/-Germany

Legal form:

Stock Corporation,

Registered office: Hemer

District court Iserlohn, HRB 5726

VAT REG NO DE 814 627 775

Chairman of the Supervisory Board:

Bijoy Madassery

Board of the Executive Directors:

Thomas Fuhr (Co-CEO and Member of the Management Board)

Jonas Brennwald (Co-CEO and Member of the Management Board)

Address:

Grohe AG

Feldmühleplatz 15

40545 Düsseldorf

Germany

Telephone: +49 (0)211 9130 3000

B. DATA PROCESSING

As part of the operation of our website we process data.

The processing of the data also includes the disclosure by transmission.

The EU Commission, the EU-US privacy shield, has an adequacy decision for data transfers to the United States. In this, the Commission has certified that the guarantees for the transmission of data to the United States on the basis of the EU-US privacy shield comply with the standards of data protection in the EU. As far as we transmit data to the USA, we have identified the participation of our service providers in the EU-US privacy shield.

The data, processing purposes, legal bases, recipients and transfers to non-EEA countries concerned are listed in the following list:

a) Log file

We log your visit to our websites. The following data is processed: Name of the retrieved web page, date and time of retrieval, time difference to Greenwich Mean Time, access status, amount of data transferred, browser type and version, the operating system you are using, the referrer URL (previously visited Website), your IP address and the requesting provider. This is necessary to ensure the security of the website. We process the data on the basis of our legitimate interests in accordance with Art. 6 para. 1 f) GDPR. The log file will be deleted after seven days, unless it is required to clarify or to prove concrete infringements that have become known within the retention period.

b) Hosting

Hosting will store all data to be processed in connection with the operation of this website. This is necessary to enable the operation of the website. We process the data accordingly on the basis of our legitimate interests in accordance with Art. 6 para. 1 f) GDPR. To provide our online presence, we use the services of web hosting providers to whom we provide the above data.

c) Contacting us

If you contact us, your data (name, contact details, if provided by you) and your message will be processed solely for the purpose of processing and processing your request. These data are processed by us on the basis of Art. 6 para. 1 b) GDPR or Art. 6 para. 1 f) GDPR to handle your request.

d) Newsletter

In order to provide you with regular information about our company and our range of service and products, we offer the dispatch of a newsletter. By registering for the newsletter, we process the data entered by you (e-mail address and other voluntary information).

In doing so we receive your consent as follows:

"I would like to order the KES newsletter as per my configuration of interest. I can revoke my consent at any time by using the unsubscribe link in the newsletter. "

The transmission of the newsletter by means of registration takes place on the basis of your consent in accordance with Art. 6 para. 1 a) GDPR.

The registration for the newsletter takes place in the so-called double opt-in procedure. To prevent abuse, we will send you an e-mail after your registration, asking you to confirm your registration. In order to prove the registration process according to the legal requirements, your application will be logged. Affected are the storage of the registration and the confirmation time and your IP address. To send the newsletter, we use service providers to whom we provide the above data.To receive details regarding the specific Newsletter such as content or frequency, please refer to the respective registration page.

e) Customer Account

When you open a customer account, you consent to the storage of your data (name, address, e-mail address, bank details) as well as your usage data (username, password). This allows us to identify you as a customer and gives you the ability to manage your orders.

We receive your consent as follows:

"I want to create a customer account. Please process my data for this purpose. I can revoke my consent with effect for the future at any time by e-mail to the indicated e-mail address.".

You will find specific contact details to exercise your rights, including your right to revoke your consent, with each dedicated registration page.

Your data will be processed on the basis of your consent in accordance with Art. 6 para. 1 a) GDPR.

f) Purchase Processing

We process your order data to process the purchase contract. The processing of the data is carried out accordingly on the basis of Art. 6 para. 1 b) GDPR.

We transmit your address data to the company commissioned with the delivery. If it is necessary to process the contract, we will also provide your e-mail address or telephone number to coordinate a delivery date (Avis) to the company commissioned with the delivery.

We will transmit your transaction data (name, date of order, method of payment, date of dispatch and / or receipt, amount and payee, if applicable bank details or credit card details) to the payment service provider responsible for processing the payment.

g) Trade fairs and exhibitions

At trade fairs and exhibitions we offer you the opportunity to request information from us. Information can be provided in digital form, in writing or in the form of personal meetings you can request. You are free to choose from the available information services offered.

We process your data for the purpose of sending you the requested information and to be allowed to contact you for further support. Furthermore, we use your data for statistical purposes to measure success and further improve our offer. We transmit relevant data to the company entrusted with the delivery. In the event of a personal appointment, we will pass on relevant data to the KES branch responsible for you. Your data will not be passed on to third parties.

After you have selected your information requests and/or communication channels, we will obtain the following consent:

"I would like to receive the selected information from KES via the specified communication channels. I agree that KES may process my information for the purpose of providing information, arranging appointments and for statistical purposes and may transfer my data within the KES Group to the KES company responsible for me for further support. I can revoke my consent at any time by sending an email to the email address published at the trade fair."

Your data will be processed on the basis of your consent in accordance with Art. 6 Par. 1 a) GDPR.

h) Photo and Video Recording

We may take photos and/or video recordings at trade fairs, exhibitions, events that are not based on an invitation. We will draw your attention to the recording activity as soon as possible, and at the latest before you enter the relevant area where recordings are being made, by providing information notices and handouts. You always have the opportunity to object to an individual recording with the respective film team.

This does not apply to overall shots in which the focus is on the presentation of the event and not on the presentation of a single person.

KES will use the documentation to accompany communication measures in print, on the Internet and/or social media, as well as for internal training and communication purposes. We process the data accordingly on the basis of our legitimate interests in accordance with Art. 6 para. 1 f) GDPR.

i) Competitions and Marketing Campaigns

As part of our business activities, we organize contests and marketing campaigns (hereinafter "Promotions") at irregular intervals.

We request personal data from you via web forms in order to carry out campaigns. This data is required so that you can participate in the respective campaign.

We process the data provided by you to carry out the respective campaign. In doing so, we obtain the following consent:

"I would like to participate in the action of the organising KES unit according to the action page. For this purpose, I consent to the processing of the personal data provided by me. I can revoke my consent at any time with effect for the future by sending a message to the e-mail address provided in the campaign."

The participation in these actions is voluntary. With your participation you agree to these data processing.

We process your data on the basis of your consent in accordance with Art. 6 Para. 1 a) GDPR.

To carry out campaigns, we make use of other service providers who support us in processing the campaign.

You will find further promotion-specific regulations on the respective promotion pages.

j) Website Analysis and Marketing

To enable the use of certain functions we use so-called cookies. These are short data packets that are stored on your end device and exchanged with other providers. Some of the cookies we use are deleted immediately after closing your browser (so-called session cookies). Other cookies remain on your terminal device and make it possible to recognize your browser the next time you visit us (persistent cookies).

You can delete all cookies stored on your terminal device and set the common browsers to prevent cookies from being stored. In this case you may have to change some settings each time you visit this website and accept the impairment of some functions.

We use cookies in connection with the following functionalities:

C. DURATION OF DATA STORAGE

We only store personal data for as long as it is necessary for the purposes for which it is processed or if your consent has been revoked. As far as statutory storage requirements are concerned, the storage period for certain data can be up to 10 years, regardless of the processing purposes.

D. DATA SUBJECTS’ RIGHTS

a) Information

Upon request, you will receive information about all personal data that we have stored about you free of charge at any time.For your own protection, we reserve the right to obtain further information upon request to confirm your identity in order to prevent unauthorized persons from gaining access to personal data that we undertake to protect. If identification is not possible, we reserve the right to refuse to process the request.

b) Correction, cancellation, limitation of processing (blocking), opposition

If you no longer consent to the storage of your personal data or if these have become incorrect, we will, upon appropriate instructions, arrange for the deletion or blocking of your data or make the necessary corrections (to the extent permitted by applicable law). The same applies if we are to process data in the future only in a restrictive way.

c) Data Portability

Upon request, we will provide you with your data in a standard, structured and machine-readable format so that you can, if you wish, submit the data to another person in charge.

d) Right to Complain

There is a right of appeal to the competent supervisory authority:

e) Right of revocation in the case of consent with effect for the future

Any given consent can be revoked at any time with effect for the future. Your revocation does not affect the lawfulness of the processing until the time of revocation.

f) Limitation

Data where we are unable to identify the data subject, for example, if they have been anonymised for analysis purposes, is not covered by the above rights. Information, deletion, blocking, correction or transfer to another company may be possible with respect to such information if you provide us with additional information that allows us to identify it.

g) Exercising your Rights

If you have any questions regarding the processing of your personal data, information, correction, blocking, opposition or deletion of data or the desire to transfer the data to another company, please contact cs@keshome.com.

E. DATA SECURITY

To ensure the security of the data transmitted to us, we use TLS encryption with 128 bits. You recognize such encrypted connections with the prefix "https: //" in the page link in the address bar of your browser. Unencrypted pages are identified by "http: //".

All data that you submit to our website - such as inquiries or logins - cannot be read by third parties thanks to SSL encryption.

F. CHANGE OF THE PRIVACY POLICY

In order to ensure that our data protection guidelines always comply with the current legal requirements, we reserve the right to make changes at any time. This also applies in the event that the data protection information must be adjusted due to new or revised offers or services.

Cookie List

A cookie is a small piece of data (text file) that a website – when visited by a user – asks your browser to store on your device in order to remember information about you, such as your language preference or login information. Those cookies are set by us and called first-party cookies. We also use third-party cookies – which are cookies from a domain different than the domain of the website you are visiting – for our advertising and marketing efforts. More specifically, we use cookies and other tracking technologies for the following purposes:

Functional Cookies

These cookies enable the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.

Category of Personal Information	Categories of Recipients
Identifiers	Between and among companies which are under common ownership with us; vendors, service providers and consultants that perform services on our behalf; companies which store and process data on our behalf; companies which perform data analytics for us; companies which help service and install our products; companies which help deliver and track our products that are ordered, replaced or repaired; companies which provide information to you about where to find or have installed our products and services; law firms; companies which send you information about products on our behalf; and companies which you have requested or authorized us to share your personal information with
Internet and electronic network activity information	Companies which store and process data on our behalf; companies which perform data analytics for us
Commercial information	Between and among companies which are under common ownership with us; vendors, service providers and consultants that perform services on our behalf; companies which store and process data on our behalf; companies which perform data analytics for us; companies which help service and install our products; companies which help deliver and track our products that are ordered, replaced or repaired; companies which provide information to you about where to find or have installed our products and services; law firms; companies which send you information about products on our behalf; and companies which you have requested or authorized us to share your personal information with
Audio and visual information (e.g., recorded customer service calls)	Companies which store and process data on our behalf
Demographic information	Vendors, service providers and consultants that perform services on our behalf; companies which store and process data on our behalf; companies which perform data analytics for us; companies which provide information to you about where to find or have installed our products and services; and companies which send to you information about products on our behalf