PRIVACY POLICY

The protection of personal data is important to us. In this privacy policy, we explain
what personal data is processed when you visit and use www.earthum.eu ,
for what purposes this is done, and what rights data subjects have.

Data protection is a matter of trust

This privacy policy applies to the website www.earthum.eu, including
all subpages, content, forms, entries, shop functions, digital
products, physical products, members’ areas and digital assistant functions.

1. DATA CONTROLLER

Responsible for data processing on this website

EARTHUM
3833 Powerline Road
Florida, US 33309
United States

E-Mail: team@earthum.eu

Support: support@earthum.eu

Data Protection: privacy@earthum.eu

Website: www.earthum.eu

2. GENERAL DATA PROCESSING

We process personal data only to the extent necessary to provide this website,
respond to enquiries, offer newsletters and freebies, process orders, supply digital and physical
products, manage user accounts, improve content or comply with legal obligations.

Personal data may include, in particular:

⇒  Name

⇒  IP-Adress

⇒  E-Mail Adress

⇒ Billing and delivery address

⇒ Payment and order details

⇒ technical usage data

⇒ Communication content

⇒ Language settings

⇒ Newsletter and interest data

El tratamiento se lleva a cabo, según la finalidad, en particular con base en el art. 6, párr. 1, letra a) del RGPD
en caso de consentimiento; el art. 6, párr. 1, letra b) del RGPD en caso de cumplimiento contractual; el art. 6, párr. 1, letra c) del RGPD en caso de
obligación legal; y el art. 6, párr. 1, letra f) del RGPD en caso de interés legítimo.

3. HOSTING & SERVER LOG FILES

Al visitar este sitio web, se procesan automáticamente datos técnicos
para garantizar que el sitio web se muestre de manera segura y estable.

These include, in particular:

⇒  IP-Adress

⇒  Referrer-URL

⇒  Server-Logfiles

⇒ Date and time of access

⇒ Browser type and operating system

⇒ Page or file accessed

⇒ Amount of data transferred

This data is used for the technical operation, security, error analysis and stability of the website.

Legal basis: Article 6(1)(f) of the GDPR

Hosting-Provider: Allinkl

Where necessary, a data processing agreement will be entered into with the hosting provider.

4. COOKIE & CONSENT

This website uses cookies and similar technologies. Some of these are technically necessary,
e.g. for the shopping basket, checkout, login, language settings, security or cookie settings.
Others are used for statistics, analysis, marketing, external media or personalised features.

Technically necessary cookies are used to ensure that the website functions properly.

Legal Basis: Article 6(1)(f) of the GDPR and Section 25(2) of the TDDDG

Non-essential cookies are only used with your consent.

Legal Basis: Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG

Consent can be changed or withdrawn at any time via the website’s cookie or privacy
settings.

Consent-Tool: Complianz

5. CONTACT US

When you contact us by email, via the contact form or through a support enquiry, we process the data submitted
in order to deal with your enquiry. This may include your name, email address,
message, subject line, the time of the enquiry and technical metadata.

Legal Basis:
Article 6(1)(b) of the GDPR, where the enquiry relates to a contract
or pre-contractual measures.
Article 6(1)(f) of the GDPR for general enquiries.

The data will be deleted as soon as the enquiry has been finalised
and provided there are no statutory retention obligations to the contrary.

Datenschutz EN

We will use your details solely for the purpose of processing your data protection request. You can find further information in our privacy policy.

6. NEWSLETTER & FREEBIES

You can subscribe to a newsletter on this website. In addition, free content such as
freebies, guides, checklists, cheat sheets or other digital content may be offered.

In particular, the following data may be processed:

⇒  Language

⇒  IP-Adress

⇒  E-Mail Adress

⇒ Name, if provided

⇒ Selected Freebie

⇒ Date of registration

⇒ Date of confirmation

⇒ Interests or subject areas

Registration is usually carried out via a double opt-in procedure.

The newsletter may contain information about Earthum, new content, products,
offers, promotions, Librarium, Mercaria and thematic ideas.

Legal Basis: Article 6(1)(a) of the GDPR

Newsletter provider Brevo

Consent may be withdrawn at any time, for example via the
unsubscribe link in the newsletter or by emailing newsletter@earthum.eu

7. SHOP, ORDERS & CUSTOMER ACCOUNT

Mercaria can be used to provide digital products, physical products, free products
or other offers. When orders are placed and a customer account is
used, we process the data required for the purchase, provision,
payment, delivery, invoicing, customer service and legal obligations.

These include, in particular:

⇒  Name

⇒  E-Mail Adress

⇒ Billing Address

⇒ Order Details

⇒ Payment status

⇒ Invoice details

⇒ Customer account and login details

⇒ Purchased or downloaded products

Legal Basis: Article 6(1)(b) of the GDPR and Article 6(1)(c) of the GDPR

Order and invoicing data are stored in accordance with the applicable data retention requirements.

To display the relevant prices, taxes, delivery options and availability
, the shop may use an approximate location service. In doing so,
an approximate country or region may be determined based on the IP address.

Legal Basis: Article 6(1)(b) of the GDPR, Article 6(1)(c) of the GDPR and Article 6(1)(f) of the GDPR.

The purpose of determining the customer’s location is to ensure that country-specific tax rules, delivery methods, currencies
and shop functions are provided correctly. No precise GPS tracking takes place.

8. PAYMENT PROVIDERS

External payment service providers may be used to process payments.
Depending on the payment method selected, payment details are either transmitted directly to the
relevant payment provider or processed there.

Possible payment providers include, in particular:

⇒ PayPal, credit card providers

⇒  Apple Pay, Google Pay

⇒ Bank transfer

⇒  Klarna, Stripe

⇒ other payment methods displayed at checkout

Legal Basis: Article 6(1)(b) of the GDPR

The respective payment providers may process data on their own responsibility
process. Their data protection information also applies.

9. SERVICE PROVIDERS, PRODUCTION & DISPATCH

For physical products, print-on-demand products and deliveries,
external production, fulfilment and dispatch service providers may be used.

In particular, the following data may be disclosed:

⇒  Name

⇒ Delivery address

⇒ Product ordered

⇒ Email address, where required

⇒ telephone number, if required for delivery

Legal Basis: Article 6(1)(b) of the GDPR

Potential service providers, shipping or fulfilment partners.

Active service providers: Printful, QP Market Network

10. CONTENT & EXTERNAL MEDIA

This website may use embedded content and external media,
such as videos, music, audio players, maps, social media content or external graphics.

When loading such content, personal data may be transmitted
to third-party providers, in particular IP addresses, device information, browser data and usage data.

Where necessary, external media will only be loaded once consent has been given.

Legal Basis: Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG

Possible providers include, in particular:

⇒  YouTube / Google

⇒ Social media platforms

⇒ Audio or video services

⇒ Map or media services

Where used, the providers are listed in the cookie

and privacy settings on this website.

If external content fails to load, certain videos, audio files, maps,
social media content or embedded media may not be displayed at all, or may only be displayed to a limited extent.

11. ANALYSE, STATISTIK & MARKETING

This website may use analytics, statistics and marketing services to understand how the website is used
, improve its content, identify technical issues,
evaluate advertising and display relevant offers.

The following data may be processed in this context:

⇒ Page views

⇒ Click behaviour

⇒ Duration of stay

⇒   Referrer

⇒ Conversion data

⇒ Approximate origin

⇒ Device and browser information

⇒ Cookie or pixel IDs, where used

For privacy-friendly website statistics, Independent Analytics and/or
Plausible Analytics can be used in particular. These services are used for the statistical analysis of website
usage. Independent Analytics describes itself as a WordPress plugin that operates without external server communication,
without cookies and without storing personal data. Plausible Analytics describes itself as
cookie-free web analytics without personal tracking and without cross-page tracking.

Where analytics functions are used without cookies, without personal tracking and without the disclosure of personal data to third parties, the processing is carried out on the basis of our
legitimate interest in providing a user-friendly, secure and cost-effective website.

Legal basis: Article 6(1)(f) of the GDPR

Where analytics, tracking or marketing services use cookies, pixels,
personalised tracking, recognition, remarketing or external
advertising functions, such processing shall only take place with consent.

Legal Basis: Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG

Possible services include, in particular:

Plausible Analytics

Independent Analytics

Google Search Console

Google Analytics

⇒ Pinterest Tag

Google Ads

Meta Pixel

⇒ Further statistical or marketing services

You can withdraw your consent at any time via the cookie or privacy settings.

Where used, active services are listed in the cookie and privacy settings on this website.

12. AVA | Digital AI Librarian

Earthum can provide a digital assistant called Ava. Ava acts as an AI librarian, offering guidance and assistance in finding content, products, subject areas and information within Earthum.

When using Ava, the following data may be processed:

⇒  YouTube / Google

⇒ Social media platforms

⇒ Audio or video services

⇒ Map or media services

Where used, the providers are listed in the cookie

and privacy settings on this website.

Nutzer sollten keine sensiblen personenbezogenen Daten, Gesundheitsdaten,
Zahlungsdaten, Passwörter oder vertraulichen Informationen in Ava eingeben.

Ava is intended to provide general guidance. Ava is not a substitute for medical,
psychological, legal, tax or therapeutic advice.

Legal basis:
Article 6(1)(a) of the GDPR, insofar as Ava is used on the basis of consent
. Article 6(1)(f) of the GDPR, insofar as the processing is necessary for
the provision of a general assistance function.

 AI or chatbot providers: Google’s Gemini AI Engine

Where data is processed outside the EU or the EEA, this is done only on the basis of appropriate
safeguards under the GDPR, e.g. standard contractual clauses or an adequacy decision.

13. MULTILINGUALISM & SEARCH FUNCTIONS

The website can provide multilingual content, search functions, filters, lexicon entries and Librarium content.
This may involve the processing of technical data, language settings, search terms and filter selections.

This helps to display relevant content in a user-friendly way and to improve the website’s functionality.

Legal basis: Article 6(1)(f) of the GDPR

14. SOCIAL MEDIA PROFILE

Earthum may have a presence on social media networks and platforms
, such as Instagram, Facebook, Pinterest, YouTube, TikTok or X.

When users visit or interact with these profiles,
the respective platform operators may process personal data.
The privacy policies of the respective platforms also apply.

Earthum processes data from social networks to the extent that this is necessary for communication,
handling enquiries, community management or reach analysis.

Legal basis: Article 6(1)(f) of the GDPR

15. DATA TRANSFER & SERVICE PROVIDERS

Personal data will only be disclosed where this is necessary or permitted.

Data may be disclosed, in particular, to:

⇒  Hosting-Provider

⇒  Newsletter-Provider

⇒ Payment service provider

⇒ Technical service providers

⇒ Shipping and fulfilment service providers

⇒ AI or chatbot providers when using Ava

⇒ Analytics and marketing services, subject to consent

Where necessary, contracts for data processing on behalf of the organisation are concluded with service providers who process personal data on our behalf.

16. TRANSFER OF DATA TO THIRD COUNTRIES

Some services may process personal data outside the European Union or the European
Economic Area. This may be the case, in particular, with international technology, payment,
newsletter, marketing, analytics, delivery or AI services.

Such a transfer will only take place provided that the requirements of the GDPR
are met, for example through an adequacy decision, standard contractual clauses,
additional safeguards or explicit consent, where necessary.

17. RETENTION PERIOD

Personal data is only stored for as long as is necessary for the
relevant purpose or as required by statutory retention obligations.

Order, invoicing and accounting data are stored in accordance with legal requirements. Newsletter data are stored until consent is withdrawn. Enquiries are deleted as soon as they have been processed and there are no legal or legitimate grounds for further storage.

18. RIGHTS OF DATA SUBJECTS

Under the GDPR, data subjects have the following rights in particular:

⇒ Right of access

⇒ Right to erasure

⇒ Right to rectification

⇒ Right to object

⇒ Right to data portability

⇒ Right to withdraw consent

⇒ Right to restriction of processing

To exercise these rights, simply send a message to: team@earthum.eu

19. OBJECTIONS & WITHDRAWALS

Where personal data is processed on the basis of legitimate interests
, you have the right to object to such processing on grounds relating to your particular
situation.

You may withdraw your consent via:

⇒ The unsubscribe link in the newsletter

⇒ An email to team@earthum.eu

⇒ Cookie or privacy settings

Consent that has been given may be withdrawn at any time with future effect.
This applies in particular to newsletters, cookies, analytics, marketing, external
media and Ava functions, insofar as these are based on consent

20. SAFETY

We take technical and organisational measures to protect personal data
against loss, misuse, unauthorised access, alteration or disclosure.

This website uses SSL or TLS encryption. You can recognise an encrypted
connection by the fact that the website address begins with ‘https://’.

21. CHANGES TO THIS PRIVACY POLICY

We reserve the right to amend this privacy policy should there be any changes to legal requirements,
the services used, technical features or the content of this website.
The most recent version of the privacy policy on this website shall apply.

LAST UPDATED ON 1 JULY 2026

We therefore recommend that you consult this privacy policy regularly to keep up to date with
the latest developments regarding data processing on this website.

If you have any questions regarding the processing of personal data or wish to exercise your
data protection rights, you can contact us at any time. You can find our contact details
in the ‘Data Controller’ section of this privacy policy and in the legal notice on this website.

WITH CONFIDENCE THROUGH THE WORLD OF EARTHUM