I. Who is responsible and how can I contact the data protection officer?

Contact Data Controller:

Home Shopping Europe GmbH, Münchener Straße 101 h, 85737 Ismaning, Germany.

Contact Data Protection Officer:

datenschutz@hse.de

II. Your rights as a data subject

Every data subject has the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification of inaccurate data (Art. 16 GDPR)
• Right to erasure or a right to be "forgotten" (Art. 17 GDPR)
• Right to restriction of processing of personal data (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• You can object to the processing of personal data (Art. 21 GDPR). In this case, the objection to the processing of data must be justified.
• Right to lodge a complaint with a supervisory authority
• If the processing of data is based on consent, your consent can be revoked at any time with effect for the future.

As the data subject, the easiest way to exercise your rights is by e-mailing to service@hse.de or via the address provided in the imprint.

III. Purposes of use and legal basis

We process the personal data provided in the contact form in order to provide investors with access for financial company key figures or to answer press inquiries.

Art. 6, para. 1, letter b, of the GDPR is the legal basis for processing personal information for the purpose of registration for our information service.

In addition, we process the personal data provided in our contact form for purposes of protecting our legitimate interests in accordance with Art. 6, para. 1, letter f of the GDPR. Our legitimate interest is to offer inquirers a simplified way to contact us for any inquiries.

There is no legal obligation to provide the personal data. However, in order to grant you access to the Investor Portal, we need the information to clearly identify you as an investor. If you do not provide us with the information, we cannot grant you access.

IV. Storage period

If you register for investor access, we will delete your personal data when we receive the information that you are no longer an investor.

Press inquiries or inquiries that are not related to investor registration will be deleted after the request has been dealt with.

V. Automated decision-making

There is neither automated decision-making nor profiling.

VI. Recipients

We use service providers by way of order processing in the provision of services, in particular for the provision, maintenance and care of IT systems.