Thank you for your interest in our website. The protection of your personal data is important to us. Below you will find information on how we handle your personal data that is collected through your use of our website. Your data is processed in accordance with the statutory provisions on data protection. If links are provided to other websites, we have neither influence nor control over the linked content and the data protection provisions there. We recommend that you check the data protection statements on the linked websites. This will enable you to determine whether and to what extent personal data is collected, processed, used or made accessible to third parties.

By using our website, information (e.g. IP address) can be accessed or information (e.g. cookies) can be stored on your end devices. This access or storage can involve further processing of personal data within the meaning of the GDPR.

In cases where such access to information or such storage of information is absolutely necessary for the technically error-free provision of our services, this is done on the basis of Section 25 Paragraph 1 Sentence 1, Paragraph 2 No. 2 TTDSG.

In cases where such a process serves other purposes (e.g. the needs-based design of our website), this is carried out on the basis of Section 25 Paragraph 1 TTDSG only with your consent in accordance with Art. 6 Paragraph 1 Letter a of GDPR. Consent can be revoked at any time for the future. The provisions of the GDPR and the Federal Data Protection Act (BDSG) apply to the processing of your personal data.

Further information on the processing of your personal data and the relevant legal bases in this context can be found in the following sections on the specific processing activities on our website.

When you visit our website, it is technically necessary that data is transmitted to our web server via your Internet browser. The following data is recorded during an ongoing connection for communication between your Internet browser and our web server:

• Visited domain
• Date and time of request
• Page from which the file was requested
• Access status (file transferred, file not found, etc.)
• Web browser and operating system used
• IP address of the requesting computer
• Amount of data transferred

We collect this data to ensure a smooth connection to the website and to enable users to use our website comfortably. The log file is also used to evaluate system security and stability as well as for administrative purposes. The legal basis for the temporary storage of the data or log files is Art. 6 Para. 1 lit. f GDPR.

This website is hosted by the external service provider (hoster) Hetzner Online GmbH in Germany. Personal data collected on this website is stored on the hoster's servers. This may include IP addresses, contact requests, meta and communication data, website access and other data generated via a website.

We collect the data listed in order to ensure a smooth connection to the website and a technically error-free provision of our services. The processing of this data is absolutely necessary in order to make the website available to you. The legal basis for the processing of the data is our legitimate interest in the correct presentation and functionality of our website in accordance with Art. 6 Para. 1 lit. f GDPR.

We have concluded a data processing agreement with the provider in accordance with the requirements of Art. 28 GDPR, in which we oblige them to protect our customers' data and not to pass it on to third parties.

If you send us inquiries via the contact form or email, your details from the inquiry form or your email, including the personal data you provided there, will be stored by us to process the inquiry and in the event of follow-up questions. Providing an email address is required to contact you; providing your first and last name and telephone number is voluntary. We will never pass on this data without your consent. The legal basis for processing the data is our legitimate interest in answering your request in accordance with Art. 6 Para. 1 lit. f GDPR and, if applicable, Art. 6 Para. 1 lit. b GDPR, provided that your inquiry is aimed at concluding a contract. Your data will be deleted after your inquiry has been processed, unless there are any statutory retention periods to the contrary. In the case of Art. 6 Para. 1 lit. f GDPR, you can object to the processing of your personal data at any time.

Social networks (e.g. YouTube, LinkedIn) are only integrated into our website in the form of a link to the corresponding services. After clicking on the integrated text/image link, you will be redirected to the respective provider's website. User information is only transferred to the respective provider after redirection. For information on how your personal data is handled when using these websites, please refer to the respective data protection regulations of the providers you use.

Our website uses so-called "cookies". Cookies are small text files that are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or an automatic solution is carried out by your web browser.

Cookies have various functions. Many cookies are technically necessary because certain website functions would not work without them (e.g. the shopping cart function or language settings). Other cookies are used to evaluate user behavior or to display advertising.

The processing of data through the use of absolutely necessary cookies is based on a legitimate interest in accordance with Art. 6 (1) (f) GDPR in the technically error-free provision of our services. For details on the processing purposes and legitimate interests, please refer to the explanations on the specific data processing.

The processing of personal data through the use of other cookies is based on consent in accordance with Art. 6 Para. 1 lit. a GDPR. Consent can be revoked at any time for the future. If such cookies are used for analysis and optimization purposes, we will inform you separately about this in this data protection declaration and obtain consent in accordance with Art. 6 Para. 1 lit. a GDPR.

You can set your browser so that you

• be informed about the setting of cookies,
• Allow cookies only in individual cases,
• exclude the acceptance of cookies for certain cases or in general,
• Activate the automatic deletion of cookies when closing the browser.

Cookie settings can be managed for each browser using the following links:

• Google Chrome
• Firefox
• Edge (Microsoft)
• safari
• Opera

You can also manage cookies from many companies and features used for advertising individually by using the relevant user tools available at https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices .

Most browsers also offer a so-called “Do-Not-Track” function. When this function is activated, the browser informs advertising networks, websites and applications that you do not want to be “tracked” for behavioral advertising and the like.

Information and instructions on how to edit this function can be found under the following links, depending on the provider of your browser:

• Google Chrome
• Firefox
• Edge (Microsoft)
• safari
• Opera

In addition, you can prevent the loading of so-called scripts by default. "NoScript" allows JavaScripts, Java and other plug-ins to be executed only on trusted domains of your choice. Information and instructions on how to edit this function can be obtained from your browser provider (e.g. for Mozilla Firefox at: https://addons.mozilla.org/de/firefox/addon/noscript/ ).

Please note that if you deactivate cookies, the functionality of our website may be limited.

This website uses the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). This service allows website tags to be managed via an interface. The Google Tag Manager only implements tags. This means: no cookies are used and only the user's IP address is transmitted to Google to establish the connection. The Google Tag Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, it remains in place for all tracking tags as long as they are implemented with the Google Tag Manager.

We use the Google Tag Manager based on your consent in accordance with Art. 6 (1) (a) GDPR.

Since Google may transfer personal data to affiliated companies and subcontractors in countries outside the EU and EEA, additional protective mechanisms are required to ensure the level of data protection provided for in the GDPR. For the USA, the EU Commission has issued an adequacy decision pursuant to Art. 45 (1) GDPR with regard to companies certified under the EU-US Data Privacy Framework. Google LLC is certified under the EU-US Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search

For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 (2) (c) GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.

This website uses DoubleClick of the Google Marketing Platform, a service of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland ("Google").

DoubleClick uses cookies to show you advertisements that are relevant to you. A pseudonymous identification number (ID) is assigned to your browser or device in order to check which ads were displayed in your browser and which ads were viewed. This can improve campaign performance or, for example, prevent you from seeing the same ad multiple times. In addition, Google can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a Campaign Manager ad and later uses the same browser to visit the advertiser's website and buys something there. According to Google, the cookies do not contain any personal information. If you have given us your consent, the data will be processed in accordance with Art. 6 Para. 1 lit. a GDPR.

Due to the technology used, your browser automatically establishes a direct connection to the Google server. We have no influence on the scope and further use of the data collected through the use of this tool by Google and therefore inform you according to our current level of knowledge: By integrating DoubleClick, Google receives the information that you have accessed the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out and save your IP address.

Since Google may transfer personal data to affiliated companies and subcontractors in countries outside the EU and EEA, additional protective mechanisms are required to ensure the level of data protection provided for in the GDPR. For the USA, the EU Commission has issued an adequacy decision pursuant to Art. 45 (1) GDPR with regard to companies certified under the EU-US Data Privacy Framework. Google LLC is certified under the EU-US Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search

For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 (2) (c) GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.

Further information about the Google Marketing Platform can be found at https://marketingplatform.google.com/about/ and about data protection at Google in general: https://www.google.de/intl/de/policies/privacy .

We use "Google Ads" on our website, a service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as "Google"). We use Google Ads for marketing and optimization purposes, in particular to display ads that are relevant and interesting to you.

If you have given us your consent in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR, we can use Google Ads to draw attention to our attractive offers using advertising material on external websites. This enables us to determine how successful individual advertising measures are.

These advertisements are delivered by Google via so-called "ad servers". For this purpose, we use so-called ad server cookies, through which certain parameters for measuring success, such as the display of ads or clicks by users, can be measured.

If you access our website via a Google ad, Google Ads will save a cookie on your PC. These cookies usually expire after 30 days. They are not intended to identify you personally. The following information is usually saved as analysis values for this cookie: Unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), opt-out information (marking that the user no longer wishes to be contacted). These cookies enable Google to recognize your web browser. If a user visits certain pages of an Ads customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. Each Ads customer is assigned a different cookie. Cookies cannot therefore be tracked via the websites of Ads customers. We ourselves do not collect or process any personal data in the advertising measures mentioned. We only receive statistical evaluations from Google. Based on these evaluations, we can identify which of the advertising measures used are particularly effective. We do not receive any further data from the use of advertising materials, and in particular we cannot identify users based on this information.

Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence on the scope and further use of the data collected through the use of Google Ads by Google. To the best of our knowledge, Google receives the information that you have accessed the corresponding part of our website or clicked on an ad from us. If you have a user account with Google and are registered, Google can assign the visit to your user account. Even if you are not registered with Google or have not logged in, there is a possibility that Google will find out and save your IP address.

Since Google may transfer personal data to affiliated companies and subcontractors in countries outside the EU and EEA, additional protective mechanisms are required to ensure the level of data protection provided for in the GDPR. For the USA, the EU Commission has issued an adequacy decision pursuant to Art. 45 (1) GDPR with regard to companies certified under the EU-US Data Privacy Framework. Google LLC is certified under the EU-US Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search

For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 (2) (c) GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.

Further information on data usage by Google, setting and objection options, and data protection can be found on the following Google websites:

• Privacy Policy: https://policies.google.com/privacy?hl=de&gl=de

• Google website statistics: https://services.google.com/sitestats/de.html

You can prevent cookies from being installed by deleting existing cookies and deactivating the storage of cookies in your web browser settings. Please note that if you do this, you may not be able to use all of the functions of our website to their full extent. You can also prevent cookies from being installed by setting your web browser to block cookies from the domain “ www.googleadservices.com ” ( https://www.google.de/settings/ads ). Please note that this setting will be deleted if you delete your cookies. You can also deactivate interest-based ads using the link http://optout.aboutads.info . Please note that this setting will also be deleted if you delete your cookies.

We use "Google Fonts" on our website, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as: "Google"). Google Fonts enables us to use external fonts. When you access our website, the required Google Fonts are loaded from your web browser into your browser cache. This is necessary so that your browser can also display a visually improved representation of our texts. If your browser does not support this function, a standard font from your computer will be used for display. These Google Fonts are integrated by calling a server, usually a Google server in the USA. This transmits to the server which page of our website you have visited. The IP address of the browser on the visitor's device is also stored by Google.

We use Google Fonts for optimization purposes, in particular to improve the use of our website for you and to make its design more user-friendly. The processing takes place in accordance with Art. 6 Para. 1 lit. a GDPR on the basis of the consent you have given. This consent can be revoked at any time with effect for the future.

Since Google may transfer personal data to affiliated companies and subcontractors in countries outside the EU and EEA, additional protective mechanisms are required to ensure the level of data protection provided for in the GDPR. For the USA, the EU Commission has issued an adequacy decision pursuant to Art. 45 (1) GDPR with regard to companies certified under the EU-US Data Privacy Framework. Google LLC is certified under the EU-US Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search

For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 Paragraph 2 Letter c of GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe. Further information on data protection can be found in Google's privacy policy: http://www.google.de/intl/de/policies/privacy Further information on Google Fonts can be found at https://fonts.google.com/

This website uses "Google Photos", a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as: "Google"). Google Photos enables us to integrate and display image galleries on our website. The images are loaded by calling a server, usually a Google server in the USA. This transmits to the server which page of our website you have visited. The IP address of the browser on the visitor's device is also stored by Google.

We use Google Photos for optimization purposes, in particular to improve the use of our website for you and to make its design more user-friendly. The processing takes place in accordance with Art. 6 Para. 1 lit. a GDPR on the basis of the consent you have given. This consent can be revoked at any time with effect for the future.

Since Google may transfer personal data to affiliated companies and subcontractors in countries outside the EU and EEA, additional protective mechanisms are required to ensure the level of data protection provided for in the GDPR. For the USA, the EU Commission has issued an adequacy decision pursuant to Art. 45 (1) GDPR with regard to companies certified under the EU-US Data Privacy Framework. Google LLC is certified under the EU-US Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search

For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 Paragraph 2 Letter c of GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe. You can find more information on data protection in Google's privacy policy: http://www.google.de/intl/de/policies/privacy

On our website we embed videos from "YouTube", a social media platform of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as "Google"). The legal basis for the processing of your personal data in this context is your consent in accordance with Art. 6 Para. 1 lit. a GDPR.

If the playback of embedded YouTube videos is started with your consent, a server call is made, usually to a Google server in the USA. This transmits to the server which page you have accessed and the IP address of the browser on the visitor's device is transmitted to Google and stored by Google.

In addition, the provider "YouTube" uses cookies with your consent to collect information about user behavior. According to information from "YouTube", these are used, among other things, to collect video statistics, improve user-friendliness and prevent abusive behavior. If you are logged in to Google, your data may also be assigned to your account when you click on a video. If you do not want to be assigned to your YouTube profile, you must log out before activating the button. Google stores this data as usage profiles and uses it for the purposes of advertising, market research and/or needs-based design of its websites. Such an evaluation is carried out in particular (also for users who are not logged in) to display needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. Please contact Google directly about this.

Since Google may transfer personal data to affiliated companies and subcontractors in countries outside the EU and EEA, additional protective mechanisms are required to ensure the level of data protection provided for in the GDPR. For the USA, the EU Commission has issued an adequacy decision pursuant to Art. 45 (1) GDPR with regard to companies certified under the EU-US Data Privacy Framework. Google LLC is certified under the EU-US Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search

For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, we have also agreed standard data protection clauses with the provider in accordance with Art. 46 (2) (c) GDPR. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.

Further information on data protection and data usage by Google can be found on the following Google website: https://policies.google.com/privacy?hl=de&gl=de

Your personal data will not be transferred to third parties, unless

• if we have explicitly pointed this out in the description of the respective data processing,
• if you have given your express consent in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR,
• the disclosure is necessary in accordance with Art. 6 (1) sentence 1 lit. f GDPR to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
• in the event that there is a legal obligation to disclose data pursuant to Art. 6 (1) sentence 1 lit. c GDPR and
• insofar as this is necessary for the processing of contractual relationships with you in accordance with Art. 6 Paragraph 1 Clause 1 Letter b of GDPR.

We also use external service providers to carry out our services, whom we have carefully selected, commissioned in writing and with whom we have concluded order processing agreements in accordance with Art. 28 GDPR where necessary. These are bound by our instructions and are regularly monitored by us. These include service providers for hosting, sending emails and maintaining and servicing our IT systems, etc. The service providers will not pass this data on to third parties.

In accordance with Art. 32 GDPR, we take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of processing as well as the varying likelihood of occurrence and severity of the risk to the rights and freedoms of natural persons. This website uses SSL encryption for security reasons and to protect the transmission of confidential content.

The duration of storage of personal data is determined by the relevant statutory retention periods, e.g. from commercial law and tax law. After expiry of the respective period, the corresponding data is routinely deleted. If data is required to fulfill or initiate a contract or if we have a legitimate interest in continuing to store it, the data will be deleted if it is no longer required for these purposes or if you exercise your right of withdrawal or objection.

Below you will find a list of the rights of the data subjects that the data subject is entitled to vis-à-vis the controller with regard to the processing of their personal data: (1) The right to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on its details. (2) The right to request the immediate rectification of incorrect or completion of your personal data stored by us in accordance with Art. 16 GDPR. (3) The right to request the erasure of your personal data stored by us in accordance with Art. 17 GDPR, unless processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims. (4) The right to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, if you contest the accuracy of the data, the processing is unlawful but you refuse to erase it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR. (5) The right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another controller in accordance with Art. 20 GDPR. (6) The right to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state of our registered office stated above or, if applicable, that of your usual place of residence or place of work. (7) Right to revoke consent granted in accordance with Art. 7 Para. 3 GDPR. You have the right to revoke consent to the processing of data at any time with effect for the future. In the event of revocation, we will delete the data concerned immediately unless further processing can be based on a legal basis for processing without consent. By revoking the consent, the legality

If your personal data is processed by us on the basis of legitimate interests in accordance with Art. 6 Paragraph 1 Clause 1 Letter f of GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that this is done for reasons arising from your particular situation. If the objection is directed against the processing of personal data for the purpose of direct advertising, you have a general right of objection without the need to state a particular situation. If you would like to exercise your right of withdrawal or objection, simply send an email to welcome@rainhackers.com

The provision of personal data for the decision to conclude a contract, to fulfill the contract or to carry out pre-contractual measures is voluntary. However, we can only make the decision within the framework of contractual measures if you provide such personal data that is necessary for the conclusion of the contract, the fulfillment of the contract or pre-contractual measures.

Automated decision-making or profiling pursuant to Art. 22 GDPR does not take place.

We reserve the right to update this privacy statement if necessary, in compliance with the applicable data protection regulations. In this way, we can adapt it to current legal requirements and take into account changes to our services, e.g. when introducing new services. The latest version applies to your visit.