Data is collected in log files, and through search engines and forms, whenever our websites are used. When you visit our websites, our web servers permanently store the following as standard for the purposes of system security: the connection data of the inquiring computer; which of our websites you have visited; the date and duration of the visit; the recognition data of the browser and operating system used; the website from which you came. Additional personal information such as your name, address, telephone number, or email address are not collected, unless these are voluntarily provided by you, e.g. during registration, a survey, a contest, to execute a contract, or a request for information. The stored data will be used to track misuse on the web server and then deleted. The date/time of the last login is also used for advertising purposes, insofar as this is legally permissible.

Scope of processing of personal data

We integrate and use cookies on various pages to enable specific website functions and to integrate external web services. "Cookies" are small text files that your browser can store on your device. These text files contain a unique character string that identifies the browser when you return to the website. The process of saving a cookie file is also called "setting a cookie". Cookies can be set both by the website itself and by external web services.

We also use technologies on our websites that store data in the cache of the browser used (“local storage technology”). Third parties have no access to the data stored in their browser cache.

Details on the cookies and local storage technologies processed on our website can be found below in this privacy policy.

Legal basis for the processing of personal data

Art. 6 para. 1 lit. f GDPR (legitimate interest) or Art. 6 para. 1 lit. a or Art. 49 para. 1 lit. a GDPR (consent).

The relevant legal basis can be found in the cookie and local storage table listed later in this section.

As a general rule, in the case of cookies and local storage technology that are collected or saved on the basis of a legitimate interest, our legitimate interest is to ensure the functionality of our website and the services integrated into it (technically necessary cookies or local storage technology). Cookies and local storage technologies may also increase the user-friendliness and enable a more personalized presentation of the website. A legitimate interest also exists for cookies and local storage technologies used for website security and therefore also for your personal data security. With the cookies and local storage technologies listed in the table below, we take into consideration both your interests and ours.

Cookie and local storage technologies allows us to analyze and track individual website visitors only if the website visitor has consented to the use of cookies and/or local storage technologies. Displaying individualized advertising is also possible only with your consent.

Purpose of data processing

Cookies and local storage technologies are set by our website or external web services to maintain the site's full functionality, to improve user-friendliness or to pursue, with your consent, the stated purpose. Cookies and local storage technologies also allows us to identify individual visitors by using pseudonyms, e.g. individual or random IDs. We are then able to provide more personalized services. Details are shown in the following table.

Duration of storage

The cookies listed below are stored in your browser until you delete them or when the storage duration expires. Session cookies are deleted when the session has expired. The data stored in the local memory is saved in such a way that it remains stored in the browser cache and thus on the end device used after a browser window or tab has been closed or after the browser used has been closed. The data stored in the browser cache can be deleted manually. Most browsers offer you this deletion option via the “Delete browser data” or “Empty cache” function.

Details are listed in the following tables:

We use Microsoft Teams for telephone and/or video conferences, webinars and virtual tours (collectively: "online meetings"). Microsoft Teams is part of Microsoft 365 from the Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

Information on the legal basis for the transfer of your personal data to non-EU countries can be found in the "Transfer of personal data to non-EU countries" chapter under the "General information" tab.

If you are invited to an online meeting by TRUMPF, the following data can be processed: information on participant (first name, last name, email address, profile picture, video picture), online meeting data (subject, description) as well as further data provided by you via the Microsoft Teams' chat function within an online meeting. If required, chat transcripts can be logged by TRUMPF. In this case, the transcripts are stored until the purpose of the transcript recording is no longer valid.

The scope of the data processing by TRUMPF depends on which information you provide.

Legal basis for the processing of your personal data within the framework of online meetings is art. 6 para. 1 lit. b GDPR.

Online meetings are generally not recorded. If the meeting is recorded as an exception, all participants are asked to give their consent before and at the start of the recording. The recording will only take place if consent is given. If TRUMPF records an online meeting with your consent, the recordings are deleted as soon as the purpose for the recordings is no longer valid.

Legal basis for the processing in case of recording is your consent, art. 6 para. 1 lit. a GDPR.

Further details on data protection can be found in Microsoft's data protection statement under  https://docs.microsoft.com/en-us/microsoftteams/teams-privacy.

We use Google Analytics to analyze and statistically evaluate website usage. The data obtained is used to optimize our website and promotional activities.

Google Analytics is a web analytics service operated and provided by Google (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; for Europe: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).

We use the Adwords Remarketing function from Google (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; for Europe: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).

Google Remarketing allows us to show you only the products which truly interest you, when you are visiting websites that belong to the Google Display Network (GND). To that end, cookies are saved by your browser in order to recognize you when you visit GND websites again. Through analysis of your website use, you will then be shown advertisements for products which you have already viewed, or which you may be interested in.

When processing your data, your data may (temporarily) be transferred outside the EEA, e.g. to the USA.  Information on the legal basis for the transfer of your personal data to non-EU countries can be found in the "Transfer of personal data to non-EU countries" chapter under the "General information" tab.

To prevent the saving of cookies for remarketing, you can change your settings for personalized ads here http://www.google.com/settings/ads. Alternatively, you can proceed as instructed by the website of the NAI – Network Advertising Initiative nbsp; (http://www.networkadvertising.org/managing/opt_out.asp).

We use the Adwords conversion tracking function from Google (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; for Europe: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
Google conversion tracking allows us to track what happens after a user accesses our advertisement. For example, to identify whether a product is purchased or if there is a subscription to our newsletter. By clicking on our Google ad, a cookie is saved on your device to enable this function. This will not create a personal reference.

When processing your data, your data may (temporarily) be transferred outside the EEA, e.g. to the USA.  Information on the legal basis for the transfer of your personal data to non-EU countries can be found in the "Transfer of personal data to non-EU countries" chapter under the "General information" tab. 

To prevent cookies for conversion tracking from being saved, you can change the settings in your browser accordingly.

Additional information about conversion tracking can be found here https://support.google.com/adwords/answer/1722022?hl=en.

We provide a social media wall on our web page. For this purpose, we use a plug-in/widget from Walls.io GmbH, Schönbrunner Straße 213/215, 1120 Vienna, Austria. As soon as the plug-in/widget is loaded by your browser, your IP address, the web page visited and other device-specific information is transmitted to Walls.io GmbH.

For the purposes of marketing and optimization, products and services from the company wiredminds GmbH (https://www.wiredminds.de/en/) are used. In this context, data is collected, processed, and stored – and a pseudonymous usage profile is created from this. Where possible and reasonable, usage profiles are entirely anonymized. Cookies can be used for this. Cookies are small text files which are saved in the visitor's Internet browser for the purposes of recognizing the Internet browser. The collected data, which may also contain personal data, is transmitted to wiredminds, or directly collected by wiredminds. wiredminds is permitted to use information left behind from website visits to create anonymized usage profiles. The data collected in this process will not be used to personally identify the visitor of the website without separately granted consent by the data subject. It will also not be combined with personal data about the bearer of the pseudonym. If IP addresses are collected, these are immediately anonymized after they have been collected, by deleting the last block of numbers. You may object to the collection, processing, and storing of data at any time, with effect for the future.

We use a content delivery network  (CDN) from Akamai Technologies, Inc., 145 Broadway, Cambridge, Massachusetts, USA. A CDN is a service which can be used to deliver the content of our online offer, in particular large media files such as graphics or scripts, using regionally distributed servers that are connected via the Internet, faster.

For this purpose, we use the web application protector  service provided by Akamai. This service is used to check every request for possible security risks. This protects our web page against external threats. To ensure this, all data traffic between you and us is routed through Akamai's servers and IT infrastructure. Akamai states that it does not store any personal data.

Our web page also uses "mPulse". This sets a cookie on your end device, which helps us to measure and check the web page's response speed. This may result in the data recorded being passed on to Akamai.

In order to be able to offer updates for our products in MyTRUMPF for downloading, we use the "Download Delivery"  product from Akamai. Here too, it is possible that your personal data may be processed by Akamai.

When processing your data, as described above, your data may (temporarily) be transferred outside the EEA, e.g. to the USA.  Information on the legal basis for the transfer of your personal data to non-EU countries can be found in the "Transfer of personal data to non-EU countries" chapter under the "General information" tab.

Additional information can be found at https://www.akamai.com/legal/privacy-statement

The legal basis for the processing of your data as part of the CDN is art. 6  para.  1 lit b GDPR. The legal basis for the processing of your data as part of mPulse is formed by the consent according to art. 6 para. 1 lit. a GDPR. Data is transmitted to Akamai on the basis of suitable guarantees providing the affected persons enforceable rights and effective legal redress. We have ensured this via EU standard data protection agreements.

The TRUMPF Group takes all required technical and organizational security measures in order to protect your personal data against loss or misuse. This means your data is stored in a secure operational environment, which is not accessible to the public. In certain cases, your personal data will be encrypted during transmission by so-called Transport Layer Security technology (TSL). This means that data protected by TSL is communicated between your computer and our servers by using a recognized encryption procedure if your browser supports TSL. We use Ingenico Payment Services GmbH (https://www.ingenico.com/epayments) to offer you absolute security of your credit card data. This data is not stored on our servers, but is processed directly by the relevant payment institution. If you wish to contact us by email, we would like to point out that the confidentiality of the transmitted information is not guaranteed. The content of emails can be viewed by third parties. Therefore, we recommend that you send us confidential information exclusively by post.

We use Google Maps (a service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) on our website to show the location of our sites in the Google Maps plug-in. When using Google Maps, data which is necessary for this use is forwarded, along with additional data.  When processing your data, your data may (temporarily) be transferred outside the EEA.  Information on the legal basis for the transfer of your personal data to non-EU countries can be found in the "Transfer of personal data to non-EU countries" chapter under the "General information" tab.

This can be, for example, device-related information or log file data from servers, including IP addresses or data from the browser's web storage. In this regard, Google writes: "Under certain circumstances, we connect personal data from one service with information and personal data from other Google services."

You can find additional information and details in the data protection conditions for Google services (https://policies.google.com/privacy?hl=en).

These web pages use external fonts from Font Awesome (Fonticons, Inc. 710 Blackhorn Dr., Carl Junction, MO 64834, USA). These web fonts are incorporated when a server is accessed; generally a server from Font Awesome in the USA. This will inform the server about which of our websites you have visited. Font Awesome will also store the IP address of the browser of the end device of the visitor to these web pages. 

When processing your data, your data may (temporarily) be transferred outside the EEA.  Information on the legal basis for the transfer of your personal data to non-EU countries can be found in the "Transfer of personal data to non-EU countries" chapter under the "General information" tab.

Additional information about Font Awesome's data protection policy can be found here: https://fontawesome.com/privacy 

We analyze movement, clicking, and swiping behavior on our website on a randomized basis, in order to improve the design of our pages. To do this, we use the Hotjar service, which randomly records a small portion of the session. Hotjar stores this information in a pseudonymized user profile.  When processing your data, your data may (temporarily) be transferred outside the EEA.  Information on the legal basis for the transfer of your personal data to non-EU countries can be found in the "Transfer of personal data to non-EU countries" chapter under the "General information" tab.

The information is used by neither Hotjar nor us to identify individual users. The data is anonymized, stored, and deleted after 365 days.

Additional information can be found in Hotjar's data protection policy: https://www.hotjar.com/legal/policies/privacy

In order to optimally cater to your needs and interests, your email address will be used by different companies from the TRUMPF Group for the purposes of advertising. We use the TRUMPF newsletter and other mailings to inform you about us and our offers. To manage our email marketing efficiently, your data is used within the Group.

If you register via our website, we will verify your identity by means of a confirmation email in a double-opt-in process.

The subscription to mailings can be modified at any time, or canceled with immediate effect without giving a reason. To do this, please click on the "personal profile" link which is located at the end of the mailing, or send an email to info@us.trumpf.com. In your personal profile you can cancel the subscription entirely, or modify and supplement the information you have provided. Additionally, subscriptions to individual areas of interest can be edited or deselected.

We use the tool Episerver Campaign (Episerver GmbH, Wallstraße 16, 10179 Berlin, Germany) for our email processes. By setting a tracking pixel when you open our emails, information which allows us to evaluate the user behavior (opening the email, email address, time, IP address) is retrieved. The links in our emails are designed in such a way that we can trace whether they have been clicked on. Using this information we can adapt our offers to better suit your interests.

Our website features an online product finder. The product finder allows us to display suitable products selected on the basis of your responses to certain questions. The product finder is provided by excentos Software GmbH, Reiterweg 1, 14469 Potsdam (hereinafter referred to as "excentos").

If you have granted your consent, your selected responses, navigation activities and any purchases will be recorded for optimization purposes. We process this data for customer service purposes and to provide recommendations.

The product finder can be used without providing any additional personal data. Further personal data only needs to be disclosed in a form if you request a sample part or quote.

Your data will be processed on the basis of your provided consent in accordance with Art. 6 Para. 1 lit. a GDPR

Your responses, navigation activities and any purchases will also be saved in anonymous form in a web analytics system operated by excentos. The user's IP address and user activities will likewise be recorded by the necessary infrastructure services (such as Cloudflare) as part of the justified balancing of interests to prevent cyber attacks. This is a necessary safety precaution that permits us to offer the product finder services. The data collected in this manner will only be stored for a temporary period (up to 4 hours) to identify any potential attack patterns. During this period, it may be possible to indirectly assign the user activities to the user in question on the basis of time stamps under certain circumstances. Once the retention period expires, excentos will delete the IP addresses, including all log data.

By participating in sweepstakes, the participant expressly consents to the TRUMPF Group storing the required data for the period of the sweepstakes and afterwards, to carry out the sweepstakes. Participants also consent to the publishing of their full name on the participating web pages, in the event that they win. There is no claim to such publication. The data collected as part of the sweepstakes will also only be used by the TRUMPF Group in the legally permissible scope for advertising products. The data will not be forwarded to third parties.

On our website, so-called social plug-ins ("plug-ins") of the social networks Facebook, X and LinkedIn are used. These services are provided by the companies Facebook Inc., X Corp. and LinkedIn Inc. ("providers"). During the processing of your data, your personal data may be transferred to the USA.  For information on the legal basis for the transfer of your personal data to non-EU countries, please refer to the "Transfer of personal data to non-EU countries" section under the "General Information" tab.

Facebook is provided by the Meta Platforms, Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). You can find an overview of the plug-ins from Facebook and what they look like here: https://developers.facebook.com/docs/plugins

X is provided by X Corp., 1355 Market St., Suite 900, San Francisco, CA 94103, USA ("X“).

LinkedIn is provided by LinkedIn Inc., 2029 Stierlin Ct., Mountain View, CA 94043, USA ("LinkedIn“). You can find information on the "inShare" button of LinkedIn and settings for privacy protection here: https://www.linkedin.com/legal/privacy-policy

To improve data protection when visiting our website, the social media buttons are integrated as simple HTML links. Through a script, the social media service providers (such as Facebook, X) are queried about how often a page has been shared or tweeted. The query is made possible by interfaces between the TRUMPF servers or their service providers and the social media service providers. Therefore, when you simply load the page and the buttons located there, your IP address is not transmitted.

Transmission takes place only when you press one of the social media buttons. If you are logged on to one of the social networks, the providers can assign the visit of our website directly to your profile at Facebook, X or LinkedIn. If you interact with the buttons and, for example, use the "Like" button, the "Tweet" button or the "inShare" button, the corresponding information is also transferred directly to a server of the provider and stored there. The information is also published in the social network or on your Twitter account and displayed to your contacts there. You can find the purpose and scope of the data acquisition as well as the further processing and use of the data by the provider and your corresponding rights and setting options for the protection of your privacy in the data protection information of the provider.

Data protection information from Facebook: http://www.facebook.com/policy.php

Data protection information from X: https://twitter.com/privacy

Data protection information from LinkedIn: https://www.linkedin.com/legal/privacy-policy

If you do not want Facebook, X or LinkedIn to assign the data collected via our website directly to your profile in the corresponding service, you must log off before activating the plug-ins at the relevant service

At different areas of our website, under "Contact", visitors have the option to send us questions relating to our products. By clicking the "Send" button, you agree to the collection, processing, and use of your data. The data is processed, stored, and used to handle your question. For inquiries from the business environment (B2B), it will also be used for the purposes of advertising, if this is permissible without needing consent. You may object to this use at any time, via the contact information listed above. We delete user data once questions have been handled.

On our website we use the Friendly Captcha service from Friendly Captcha GmbH, Am Anger 3-5, 82237 Woerthsee. Friendly Captcha is integrated into our contact forms and is used to differentiate between legitimate requests from humans versus automated and abusive requests from computer programs. The purpose of this data processing is to minimize abusive inquiries via our contact forms. As soon as you access our contact form, the following personal data is collected: information about the browser you are using and the operating system, origin and referrer ID, cryptographic puzzle, version of the Friendly Captcha widget, and a time stamp. Friendly Captcha also stores an anonymous counter for dynamic adjustments to the cryptographic function. The IP addresses are anonymized using a hash value. The data is sent to a Friendly Captcha server. The server reports back to us whether the request was made by a human or by a computer program and releases the contact field for inquiries from humans. Art. 6 para. 1 letter f GDPR ("Legitimate Interest"). Our legitimate interest is to separate legitimate human inquiries from abusive inquiries generated by computer programs. After your inquiry has been processed, the data collected will be deleted immediately, provided there are no statutory retention periods. Further information can be found in Friendly Captcha's privacy policy at: https://friendlycaptcha.com/legal/privacy-end-users/.

You can upload drawings or images onto our website or have them uploaded via our marketing department. The uploaded content will be erased at the end of the business relationship. By uploading or transferring this content to TRUMPF, you declare that you own the necessary rights.

You have the option of booking digital events via our website. The data entered when booking a digital event is used for preparation and execution of events. We will store the login data you enter (email address and your self-selected password) for future bookings. Of course, the password is not stored in plain text but as a hash value. We will store your data until you notify us of your desire to have your data erased. We will erase your data automatically if a booking is not made over a longer period of time.

The notes on data protection listed below under the "MyTRUMPF" tab also apply for the use of the MyTRUMPF customer portal. The general instructions, in particular in relation to your rights, also apply for the use of MyTRUMPF.

You must register with our customer portal in order to use MyTRUMPF. During the registration, we will process the information you provide during the registration process. All information required for the registration process is specifically indicated. You can also provide further data, beyond the necessary information, on a voluntary basis.

We will use your data within the framework of your registration activation, as well as to identify you as the contact person of a customer and to display customer-specific content. During registration, you as a person will be assigned to one of our customers. Other employees of your company can access your information stored in MyTRUMPF using this allocation. The exception is of course the password you select, which we store as a hash value and cannot view in plain text. Third parties have no access, however.

If we activate the MyTRUMPF User Admin function for your company, the customer administrator authorized for your company can view the information you have provided during registration (see notes under "MyTRUMPF User Admin").

Before activating the account, we check all business partners to ensure they are not listed on published sanction lists. This check is carried out by a service provider selected by us. The name provided during registration is checked to ensure it is not included in the sanction lists. We will block the account if we determine that the name is listed in a sanction list. The check is carried out regularly even after registration due to the fact that the sanction lists are constantly updated. We will store the status of the check. We carry out the check on the basis of our legitimate interest, art. 6  para.  1  lit.  f GDPR. Our legitimate interests consist in ensuring that TRUMPF does not do business with persons included on a sanction list. You are welcome to get in touch with our data protection officer to find out which lists TRUMPF checks specifically.

TRUMPF has a representative in some countries. If this is the case, the representative is given access to the personal data you have provided. We use contractual regulations to ensure with the representatives that the processing of your data is in line with data protection standards.

Apart from that, your data is only processed for your MyTRUMPF account and is deleted at the latest one year after the account has been deactivated. The legal basis for the processing of the information deemed to be necessary is art. 6 para. 1 lit. b GDPR. The legal basis for the provision and processing of your voluntary information is your consent, art. 6 para. 1 lit. a GDPR.

MyTRUMPF can only be accessed after the log-in process has been completed. During the log-in procedure, we process your e-mail address and the password stored as a hash value so that we are able to identify you as the contact person of our customer. This ensures that only authorized users have access to our platform.

During the log-in process, we verify the status of the sanction list check by comparing it with the data in our system. We do not check the sanction lists. Only the authorization status is read out.

The legal basis for the processing of your data during the log-in procedure is art. 6 para. 1 lit. b GDPR. We carry out the status comparison of the sanction lists' checks on the basis of our legitimate interest, art. 6 para. 1 lit. f GDPR.

You can reset your password with the Recover Password function. You will have to enter the e-mail address you used during registration to do so. After entering the e-mail address, you will receive a link from us which you can use to create a new password. We will store the password you select as a hash value and not in plain text. Third parties have no access, however.

The legal basis for the processing of your e-mail address is art. 6 para.1 lit b GDPR.

We make it possible for customers to manage access to MyTRUMPF with the "MyTRUMPF User Admin" function. We activate the MyTRUMPF User Admin function in agreement with our customers on an individual basis.

Other members of the company can be invited to participate in MyTRUMPF User Admin. The e-mail address of the other members of the company must be entered for this. The invited members then receive an e-mail with a link to activate the account. If the link for account activation is not used within 30 days of being sent, the account to be activated will be automatically deleted.  The MyTRUMPF User Admin can access the personal data of members of their own organization. However, access to personal data of users from other organizations is not possible.

The MyTRUMPF User Admin is also authorized to activate or reject members from their own organization.

The legal basis for the processing is art. 6 para.1 lit b GDPR.

You can upload drawings or images using your MyTRUMPF account. The uploaded content can be viewed by all MyTRUMPF accounts of the same organization. Uploaded content is stored by TRUMPF until it is deleted by you or at the end of the business relationship. By uploading the content, you declare that you possess the necessary rights.

In the MyTRUMPF customer portal, you can report service cases for your TRUMPF products. Any data entered as part of the report and all subsequent communications via MyTRUMPF will be stored. Mandatory fields are marked. The amount of the data stored depends on the information you provide. TRUMPF processes your data for analysis and remedial action for the registered service case. Please remember that any personal information provided within the course of a service case registration can be viewed by other members of your company.

If you report a service case via the TRUMPF Service app, the corresponding instructions for the TRUMPF Service app additionally apply.

Your data will be deleted when it is no longer needed for the purposes listed above, including for billing or due to other legal requirements.

The legal basis for the processing is art. 6 para.1 lit b GDPR.

You have access to the TRUMPF E-Shops within your MyTRUMPF account. The data provided as part of orders from the E-Shops is used to fulfill these orders and then saved in accordance with the legally stipulated retention periods – for example, 10 years for taxation purposes. Furthermore, the data is used for advertising purposes by the TRUMPF Group, insofar as this is legally permissible without requiring consent from the parties concerned. You can opt out of this use at any time using the contact data listed above.

CONSENT:

TRUMPF analyzes the user's order process to check for a possible cancellation of the order process. This data is then evaluated by TRUMPF. TRUMPF uses the data obtained in this manner to get in touch with a user. You hereby agree to TRUMPF carrying out the aforementioned analysis and that TRUMPF may use the insights acquired to contact you. You can revoke your consent at any time. Information on exercising the right to revoke consent can be found in the data protection statement under "Your rights".

The legal basis for the processing of data provided during ordering is art.  6  para. 1 lit. b GDPR. Your consent is the legal basis for the evaluation process described, art.  6  para. 1 lit. a GDPR

The data protection information, which can be downloaded from the app, applies for orders using our Easy Order app.

You can use your MyTRUMPF account to book training courses offered by TRUMPF. An active MyTRUMPF account is required to make a booking. The data entered when making a booking is used for preparation and execution of training courses and to contact participants. We provide performance assessments as part of our training courses. If you participate in the performance assessments, the data you provide for this will be stored and evaluated. A test result is subsequently determined using this data. The test results are transmitted to the participant's employer once the assessment has been completed.

When booking training courses, you can upload a photograph of yourself on a voluntary basis. If conclusions concerning particular categories of personal data can be drawn from the photograph (for example, a person wearing glasses), your consent expressly includes this data as well.

Your contact data will be used to make you aware of further offers from TRUMPF if you agree to this when booking a training course.

The legal basis for the processing of data provided when booking training courses is art.  6  para. 1 lit. b GDPR. We process your voluntarily uploaded photograph based on your consent in accordance with art. 6 para. 1 lit. a GDPR and/or art. 9 para. 2 lit. a GDPR.