WEBSITE PRIVACY NOTICE

www.bestpick.com

This Privacy Notice was last updated on 01/09/2025

We’re pleased that you’re visiting www.bestpick.com (our “website”). The protection and security of your personal information when using our website is very important to us. Please read this notice carefully to understand how we collect, use and share your personal data and the measures we take to protect it.

Who is responsible and how can I reach you?

VGL Publishing AG, Oranienstraße 6, D-10997 Berlin (“we”, “us”, “our”) acts as data controller in relation to your personal data.

What personal data do we collect?

Your “personal data” is any information that is identifies or is linked or reasonably linkable, directly or indirectly, to you. The following are the categories and types of personal data that we may collect from or about you directly, depending on how you interact with us:

• Direct identifiers. Direct personal identifiers, such as name, a unique online identifier, online username, or social media handle.
• Contact information. Direct personal identifiers such as email address or phone number and indirect identifiers like postal address.
• Communication Information: Non-content information (like time of day and addressing information) and content information (the body of the message you send) through the use of chatrooms, forums, submission forms, or message boards provided by us, or through phone calls, emails, and text messages.
• Profile Information: Inferences drawn from any of the information described above to create a profile about you reflecting your preferences or characteristics.

We also collect personal data automatically as you navigate the website. The technologies deployed through the website collect your device information, browsing actions, and patterns as follows:

• Device Identifiers. Information about the device you are using, such as device identifier of the equipment you use to access the website, hardware model, Media Access Control (MAC) address, IP address, and operating system.
• Online Identifiers. Information gathered from Online Tracking Technologies (discussed in Information we collect automatically) and your website preferences.
• Usage Information. Information about your interaction with the website, such as the pages you access on the website, the frequency of access, what you click on, referring URL, traffic data, and when you accessed the website.
• Non-precise geolocation Information. Imprecise information about your location, which may be determined through your device’s IP address,
• Clickstream Data. We may record what you have clicked while on the website. This data can tell us the address of the webpage from which you linked to our website, and where you are clicking to when you leave our website.
• Social Media Platforms and Networks. The website may include social media features and plugins, such as Instagram and Facebook widgets. These plugins may use cookies or other tracking technologies(discussed in Information we collect automatically) to collect information. Such social media features are hosted by Third-Parties and your interactions with those features are governed by the privacy notices of the companies that provide them.

How do we collect personal data?

Information you provide directly to us

The information we collect on or through the website or through electronic communication directly from you may include:

• Webforms: If you fill out a contact form on the website, we will collect Direct Identifiers and Contact Information that you provide by filling in forms on the website.
• Newsletters: If you register on our website to receive our newsletter, we will collect your Contact Information (email) and Direct Identifier (name) and store this information together with the date of registration and your IP.
• Direct Messaging: If you direct message us on a social media network, we will receive Direct Identifiers, Contact Information, and Communication Information.

Information we collect automatically

We collect Device and Online Identifiers, Usage Information, Location Information, and Clickstream Data as you use the website through the use of cookies and Web Beacons (collectively, “Online Tracking Technologies”). For information about cookies, see our Cookie Policy.

We, or Third-Parties, may employ a software technology called “Web Beacons” (also known as web bugs, clear gifs or pixels). Web Beacons are tiny graphics with a unique identifier, similar in function to cookies, and are used to let us know when content is viewed. We, or Third-Parties, may tie the information gathered by web beacons to the other information we collect about you.

How exactly do we use your personal data?

Below, we will inform you about our individual processing operations, the scope and purpose of data processing , and the respective retention periods.

We do not use your personal data to build a profile for legally significant decision-making.

We do not process any categories of “sensitive” personal data.

We NEVER disclose your personal data to a Third-Party for money. However, we do disclose your personal data to Third-Parties for our benefit, such as for website analytics purposes to determine how the website is performing and to present you with relevant advertising based on your interests. Depending on where you live, this may be considered a “sale” of your personal data. For more information about how you can exercise control over your personal information, including any opt-out rights, see What rights do I have?

For example, sharing anonymized device or usage data with advertising partners like Meta or analytics providers like Google may be classified as a “sale” or “share” under certain U.S. state laws, even if we do not receive money in exchange.

What information do we disclose?

We only disclose your personal data with other parties if it is necessary to fulfil the purposes for which it is being processed. We disclose your personal data to our Service Providers, and sometimes with Third-Parties.

Service Providers

We share your personal data with companies who process it on our behalf, as follows:

Our Service Providers are required to meet appropriate security standards when processing your personal data, and only receive your personal data after entering into a written contract with us. The information we provide them, including your personal data, will only be processed in connection with the performance of their function. They will not be permitted to use your information for any purposes other than as permitted by the contract.

Third-Parties

We also disclose your personal data to other entities that are not our Service Providers or our affiliates (“Third-Parties”), or permit Third-Parties to collect your personal information on our website as follows:

We use Matomo by InnoCraft Limited to measure interaction with the Services and improve the functionality of the Website. To learn more about how Matomo uses this information, visit Matomo’s Privacy Policy.

Your personal data may be transferred to Third-Parties in certain other scenarios, such as:

• Corporate Reorganization. If we’re discussing selling or transferring part or all of our business–your personal data may be transferred to prospective purchasers under suitable terms of confidentiality. If we are reorganised or sold, information may be transferred to a buyer who can continue to provide services to you;
• Legal Purposes. If we’re required to by law, or under any regulatory code or practice we follow, or if we are asked by any public or regulatory authority–for example the Police (e.g. in order to assist fraud protection and minimise credit risk); or for the establishment, exercise, or defence of legal claims. Possible recipients may then include law enforcement authorities, lawyers, auditors and courts.
• Contractual proposes. To enforce or apply our terms of use and other agreements.
• To Prevent Harm. If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of our employees, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

Where will your information be held?

We store your personal data in the UK and European Economic Area.

If we process data outside of the UK and European Economic Area, we will only do so where we have an appropriate legal basis to do and appropriate safeguards as required by applicable data protection law are in place. This includes where a jurisdiction has been deemed adequate by the UK government or, where there is no adequacy decision, by putting in place Standard Contractual Clauses.

Please contact us at info@bestpick.com if you would like further information on the specific safeguards used by us when transferring your personal data.

What rights do I have?

Please note that we do not collect personal data that directly identifies individual users (such as full IP addresses, names, or account information), unless you provide it voluntarily through our contact forms or newsletter. Therefore, in most cases, we are not able to identify you in our systems, and we may be unable to respond to certain rights requests unless you have provided identifiable information.

If you are a resident of California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, or Virginia, subject to certain limitations, you have the following rights in relation to our handling of your personal data. These rights are not applicable in all circumstances, may have limitations depending on context, and exemptions may vary by jurisdiction. Your rights include the following:

• Access: you are entitled to ask us if we are processing your personal data and, if we are, you can request access to your personal data (commonly known as a data subject access request). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it;
• Correction: you are entitled to request that any incomplete or inaccurate personal data stored by us is corrected;
• Erasure: you are entitled to ask us to delete or remove personal data in certain circumstances. There are certain exceptions where we may refuse a request for erasure, for example, where the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, or to assert, exercise or defend legal claims;
• Data Portability: you may request the transfer of certain of your personal data to another party in some circumstances.
• Withdraw consent: where you have provided your consent to the collection and processing of your personal data for a specific purpose, you have the right to withdraw your consent for that specific processing at any time.
• Opt-Out of Sale: As described above, we disclose your personal data to Third-Parties for our benefit. You are entitled to request that we not disclose your personal information for those purposes.
• Opt-Out of Targeted Advertising: you may request that we not disclose your personal information to third-parties for purposes of advertising to you across differently branded websites and across the internet. Exercising this right does not prevent us from showing contextual advertising based on your use of our website.
• Non Discrimination. We may not engage in any discriminatory treatment against you for exercise your rights.

If you are an Oregon or Maryland resident, you have the following additional right:

The Right Know the Specific Third-Parties we have disclosed your personal data to.

If we decline to act in response to your rights request, we will tell you the justification for declining to act in response to your request, and you will have the Right to Appeal our decision. You can appeal by contacting us using the methods described below.

Because we do not process “sensitive” personal data, or use your personal data to create a profile used to make legally significant decisions, we do not offer those rights.

How do I Exercise my Rights?

You may also opt-out of the sale or sharing of your personal information by clicking the “Do Not Sell or Share My Personal Information” link in the footer of our website.

Data Subject Rights Submission

You can exercise any of your rights described above, or ask any questions related to this notice, by emailing us at info@bestpick.com or by mail to VGL Publishing AG, Oranienstrasse 6, 10997 Berlin, Germany.

Authorized Agents

If you are seeking to exercise the rights of another person and are legally entitled to do so, such as if you are the guardian of an adult under a protective arrangement or a child under the age of sixteen, you can do so by contacting us as described above. If you are the guardian of an adult, we will ask you to submit documentation evidencing your legal appointment, such as a signed power of attorney.

Do Not Track / Global Privacy Control

We honor Global Privacy Control (GPC) signals, a browser-based opt-out mechanism recognized by privacy laws in California, Colorado, and other jurisdictions. If your browser or extension sends a GPC signal, our website will automatically honor it by disabling data collection and sharing for targeted advertising purposes.

Do Not Track / Global Privacy Control

We honor Global Privacy Control (GPC) signals, a browser-based opt-out mechanism recognized by privacy laws in California, Colorado, and other jurisdictions. If your browser or extension sends a GPC signal, our website will automatically honor it by disabling data collection and sharing for targeted advertising purposes.

Security

We implement technical and organisational security measures to protect your data against accidental or intentional manipulation, loss, destruction, or access by unauthorised persons. Only our staff members who require access to your personal data for their role within the business are able to access it.

For security reasons and to protect the transmission of confidential content that you send to us as the website operator, our website uses SSL or TLS encryption. This ensures that data you transmit via this website cannot be read by third-parties. You can recognize an encrypted connection by the “https://” address bar in your browser and the lock symbol in the browser bar.

Children’s Personal Data

The website is not marketed to, and we do not knowingly collect or maintain personal data from, children under the age of 16. The website is not intended for children under 16 years of age. We do not use personal data collected from children for marketing or promotional purposes, and we do not disclose such information to any third-party for any purpose whatsoever. No one under age 16 may provide any personal data to or on the website.

If you are under 16, do not provide any information on the website or on or through any of its features, register for an account on the website, use any of the interactive or public comment features of the website, or provide any information about yourself to us. If we learn we have collected or received personal data from a child under 16 without verification of parental consent, we will delete that information.

Updates and Changes

We reserve the right to change, update, or supplement this Privacy Notice at any time.

You can tell when this Privacy Notice was last updated by looking at the date at the top of the Privacy Notice. If we make changes to this Privacy Notice, we will post the updated version on our website.

If we make a change that significantly affects your rights or, to the extent we are permitted to do so, significantly changes how or why we use personal data, we will notify you or bring that amendment to your attention through our website.

Any changes to this Privacy Notice will become effective upon posting. We encourage you to review this website from time to time for the latest information.

WEBSITE COOKIE NOTICE

www.bestpick.com

This Cookie Notice was last changed 01/09/2025.

This Cookie Notice describes how we use cookies, tag management and similar technologies on our website. For details on our use of data collection methods, please see our Privacy Notice at the top of this page. Detailed information about the cookies we use can be found in the Consent Manager of this website, where you can also change your cookie preferences.

What are cookies?

Cookies are small text files that are sent by us to the browser of your device when you visit our website and stored there. As an alternative to the use of cookies, information can also be stored in the local storage of your browser. Cookies are embedded in the HTTP information that travels back and forth between your computer and the servers that host the website.

We use the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the operation of our website, and our website cannot be offered without the use of cookies or local storage.
• Non-essential Cookies: These cookies enable us to carry out various analyses so that we are able, for example, to recognize the browser you use when you visit our website again and to transmit various information to us.

With the help of cookies, we can, among other things, make our website more user-friendly and effective for you by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your device. They cannot run programs and do not contain viruses.

There are two different types of cookies: Session and Persistent. They are used for different things and contain different information.

• Session cookies contain information that is used within your current browser session. These cookies are automatically deleted when you close your browser. Nothing is persisted on your machine beyond the time you spend on the website.
• Persistent cookies are used to hold information that is used between visits. This data allows websites to recognise that you are a returning customer and react accordingly. Persistent cookies have a lifetime value that is set by the website, which can vary between a few minutes or several years.

Tag Management

Our website also involves the use of tags. Tags are short pieces of code included in our website that direct the user's browser to obtain/capture information about that user, the website page or URL. This information may be used in relation to website functionality, optimisation, analytics, advertising or retargeting purposes. The use of tags on our website involves the sharing of certain information about your device and your interactions with our website with our third party partner(s).

Why do we use cookies and tags?

Cookies are used by our website to keep your session as you progress through the website.

Web analytics cookies allow us to track user interaction within the website. This gives us valuable insights which enable us to improve the website.

We also work with partners who will write third party cookies, tags and SDKs which are then used by advertisers on other websites to give you appropriate and relevant advertisements based on your browsing history as well as device identifiers, location information, application data and usage information and installation identifiers. Certain of these technologies may collect your email

Turning off and deleting cookies

You can change your cookie settings for cookies used on our website through our Consent Manager. You can amend these settings at any time and if you change the status of any of the categories of cookie to "off" then this category of cookies (or similar technologies) will no longer be deployed on your device.

All web browsers allow you to limit cookie behaviour or turn off cookies within the settings or options of the browser. The steps to do this are different for each browser, you can find instructions under the Help menu of your browser.

Through your browser you can also view the cookies that are on your computer, and delete individual ones, or purge them all.

If you turn off default cookies (those that are essential to our website), our website will not be able to remember your session and there will be issues with the functionality of the website.

Disabling other types of cookies will also affect the monitoring of your progress through the website but will not stop the analytics code from recognising your visit.

For clarity, cookie-based opt-outs must be performed on each device and browser that you wish to have opted out. For example, if you have opted out on your desktop or laptop browser, that opt-out will not be effective on your mobile device. You must separately opt out on each device. You may also have to renew this choice if you clear your cookies, or your browser is set to clear cookies automatically.

We do not control third parties' collection or use of your personal data to serve targeted advertising. However these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt out of receiving targeted ads from members of the Network Advertising Initiative ("NAI") on the NAI's website.

Please note that cookie-based opt-outs are not effective on some mobile services. Users may opt out of certain advertisements on mobile applications or reset advertising identifiers via their device settings. To learn how to limit ad tracking or to reset the advertising identifier on your iOS or Android device, click on the following links:

• iOS
• Android

Our website also honors Global Privacy Control (GPC) signals where supported.

You can opt out of the sale or sharing of your personal information at any time by clicking the “Do Not Sell or Share My Personal Information” link in the footer of this site.

This link opens our Consent Manager, where you can adjust your preferences or send a Global Privacy Control (GPC) signal.

What cookies and tags does the website use?

The session cookies that we write include data used by the web server hardware about which server is processing your session.

The persistent cookies and tags that are created by our website are used by our technology partners. They are used to recognise traffic to the site that is returning users rather than new users. The information that is stored is used to serve you appropriate advertisements on other sites on our behalf. Deleting these cookies and tags or disabling these cookies and tags will not affect your experience or the functionality of our website.

Detailed information about the cookies we use can be found in the Consent Manager of this website, where you can also change your cookie preferences.

Last updated: 17^th September 2025