Annex 3.5 Framework for privacy policy of marketplace participants

Introduction

The operator of http://www.galaxus.de is Galaxus Deutschland GmbH (hereinafter referred to as «Galaxus»). On http://www.galaxus.de, Galaxus sells products/services in its own name, but also offers other marketplace participants (hereinafter referred to as «participants») the opportunity to offer products/services that you can purchase as a customer. In terms of data protection law, this circumstance leads to different responsibilities in connection with the processing of your data.

Principle regarding the assertion of data subjects' rights

Please note that the data subject rights to which you are entitled (e.g. right to information) must be asserted against the data controller for the respective data processing.

Part A - Declaration by Galaxus

Galaxus is the operator of the http://www.galaxus.de platform and collects and processes your data (personal data) in this capacity. This concerns in particular:

• Data about your browsing behaviour on http://www.galaxus.de. This includes, for example, information about the calling up of individual pages or information about articles viewed.

• Data in connection with the creation and maintenance of your customer account on . This includes, for example, name, user name or notification settings.

Galaxus also offers products/services itself on http://www.galaxus.de (under its own name). In this context, Galaxus, as the data controller, processes your data in the context of ordering and processing orders, among other things.

Details of the processing of your data by Galaxus in its capacity as operator of the platform http://www.galaxus.de and in its capacity as a supplier in its own name via the same website are available at https://www.galaxus.de/en/wiki/5567 .

Part B - Declaration of the participant

Participants are responsible, among other things, for those data (personal data) which arise in the context of an order and the processing of the order with a participant. This concerns, among other things: Name; postal address data; e-mail address; information about the products/services. If the participant provides further details on the processing of your data, you will find these below. The participant hereby complies with the legal obligation under data protection law (in particular from the General Data Protection Regulation).