1. Privacy at a Glance General Information The following information provides a brief overview of what happens to your personal data when you visit this website. Personal data includes all data that can be used to identify you personally. Detailed information on data protection can be found in the Privacy Policy set out below. Data Collection on This Website - Who is responsible for data collection on this website? Data processing on this website is carried out by the website operator. The operator’s contact details can be found in the section “Information on the Data Controller” in this Privacy Policy. - How do we collect your data? Some data is collected when you provide it to us. This may include, for example, data that you enter into a contact form. Other data is collected automatically or with your consent by our IT systems when you visit the website. This primarily includes technical data, such as your internet browser, operating system, or the time at which the page was accessed. This data is collected automatically as soon as you access this website. - How do we use your data? Some data is collected to ensure that the website functions correctly. Other data may be used to analyze your user behavior. Where contracts can be concluded or initiated via the website, the submitted data will also be processed for quotations, orders, or other service enquiries. - What rights do you have regarding your data? You have the right, at any time and free of charge, to obtain information about the origin, recipients, and purpose of your stored personal data. You also have the right to request that this data be corrected or deleted. If you have consented to data processing, you may withdraw your consent at any time with effect for the future. Under certain circumstances, you also have the right to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority. You may contact us at any time if you have questions about this or any other matter relating to data protection. Analytics and Third-Party Tools When you visit this website, your browsing behavior may be statistically evaluated. This is primarily carried out using analytics software. Detailed information about these analytics tools can be found in the following Privacy Policy. 2. Hosting We host the content of our website with the following providers: onepage.io We have integrated onepage.io into this website. The provider is Onepage GmbH, Neue Rothofstraße 13–19, 60313 Frankfurt am Main, Germany, hereinafter referred to as “onepage.io.” onepage.io enables us to create websites, landing pages, link trees, and quiz pages. The websites are generated entirely through onepage.io and are also hosted there. For this purpose, onepage.io processes personal data. Consequently, all personal data that you enter on this website or that is collected automatically will also be processed by onepage.io and stored on its servers. The legal basis for this data processing is Article 6(1)(f) GDPR. The website operator has a legitimate interest in providing the service. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time. Further details can be found in the provider’s Privacy Policy at: https://onepage.io/de/datenschutzerklarung Data Processing Agreement We have concluded a Data Processing Agreement with the provider for the use of the service described above. This agreement is required under data protection law and ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR. Strato The provider is Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, hereinafter referred to as “Strato.” When you visit our website, Strato collects various log files, including your IP address. Further information can be found in Strato’s Privacy Policy at: https://www.strato.de/datenschutz/ Strato is used on the basis of Article 6(1)(f) GDPR. We have a legitimate interest in presenting our website as reliably as possible. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time. Data Processing Agreement We have concluded a Data Processing Agreement with the provider for the use of the service described above. This agreement is required under data protection law and ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR. 3. General Information and Mandatory Disclosures Data Protection The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with applicable data protection legislation and this Privacy Policy. When you use this website, various types of personal data are collected. Personal data is data that can be used to identify you personally. This Privacy Policy explains which data we collect, how we use it, and for what purpose. Please note that transmitting data over the internet, for example when communicating by email, may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible. Information on the Data Controller The data controller responsible for data processing on this website is: monitorING Ingenieurgesellschaft mbH Süsterau 2d 52072 Aachen Germany Telephone: +49 (0) 157 88769890 Email: info@monitor-ingenieure.de The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names or email addresses. Data Retention Period Unless a more specific retention period is stated in this Privacy Policy, your personal data will remain with us until the purpose for which it was processed no longer applies. If you submit a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible grounds for retaining it, such as retention periods under tax or commercial law. In the latter case, the data will be deleted once these grounds no longer apply. General Information on the Legal Bases for Data Processing on This Website If you have consented to data processing, we process your personal data on the basis of Article 6(1)(a) GDPR or Article 9(2)(a) GDPR where special categories of personal data pursuant to Article 9(1) GDPR are processed. Where you have expressly consented to the transfer of personal data to third countries, the data processing is also based on Article 49(1)(a) GDPR. Where you have consented to the storage of cookies or access to information on your device, for example through device fingerprinting, the processing is additionally based on Section 25(1) TDDDG. Consent may be withdrawn at any time. Where your data is required to perform a contract or take steps prior to entering into a contract, we process it on the basis of Article 6(1)(b) GDPR. Where processing is necessary for compliance with a legal obligation, we process your data on the basis of Article 6(1)(c) GDPR. Data processing may also be based on our legitimate interests pursuant to Article 6(1)(f) GDPR. Information on the applicable legal basis in each individual case is provided in the relevant sections of this Privacy Policy. Recipients of Personal Data As part of our business activities, we work with various external parties. In some cases, this requires personal data to be transferred to such parties. We only disclose personal data to external parties where this is necessary for the performance of a contract, where we are legally required to do so, such as when disclosing data to tax authorities, where we have a legitimate interest in disclosure pursuant to Article 6(1)(f) GDPR, or where another legal basis permits the disclosure. When engaging processors, we disclose our customers’ personal data only on the basis of a valid Data Processing Agreement. Where processing is carried out jointly, a Joint Controller Agreement will be concluded. Withdrawal of Your Consent to Data Processing Many data-processing operations are only possible with your express consent. You may withdraw consent that you have already given at any time. The lawfulness of any data processing carried out prior to the withdrawal remains unaffected. Right to Object to Data Collection in Specific Cases and to Direct Marketing pursuant to Article 21 GDPR IF DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ARTICLE 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA. THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE APPLICABLE LEGAL BASIS FOR PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING IS REQUIRED FOR THE ESTABLISHMENT, EXERCISE, OR DEFENCE OF LEGAL CLAIMS. THIS CONSTITUTES AN OBJECTION PURSUANT TO ARTICLE 21(1) GDPR. WHERE YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES. THIS CONSTITUTES AN OBJECTION PURSUANT TO ARTICLE 21(2) GDPR. Right to Lodge a Complaint with the Competent Supervisory Authority In the event of an infringement of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work, or the place of the alleged infringement. This right to lodge a complaint is without prejudice to any other administrative or judicial remedy. Right to Data Portability You have the right to receive data that we process automatically on the basis of your consent or in the performance of a contract in a commonly used, machine-readable format and to have that data transmitted to you or a third party. Where you request the direct transfer of data to another controller, this will only be carried out where technically feasible. Access, Rectification, and Erasure Within the framework of applicable legal provisions, you have the right at any time and free of charge to obtain information about your stored personal data, its origin and recipients, and the purpose of the data processing. Where applicable, you also have the right to request the rectification or erasure of this data. You may contact us at any time regarding this or any other questions relating to personal data. Right to Restriction of Processing You have the right to request the restriction of the processing of your personal data. You may contact us at any time to exercise this right. The right to restriction of processing applies in the following cases: If you dispute the accuracy of the personal data stored by us, we generally require time to verify its accuracy. For the duration of this review, you have the right to request that the processing of your personal data be restricted. If the processing of your personal data was or is unlawful, you may request the restriction of processing instead of erasure. If we no longer require your personal data, but you require it for the establishment, exercise, or defence of legal claims, you have the right to request the restriction of processing instead of erasure. If you have objected to processing pursuant to Article 21(1) GDPR, a balancing of your interests against ours must be carried out. Until it has been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data. Where you have restricted the processing of your personal data, such data may—apart from being stored—only be processed with your consent, for the establishment, exercise, or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State. SSL or TLS Encryption For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the change in the browser’s address bar from “http://” to “https://” and by the padlock symbol displayed in your browser. When SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties. Objection to Promotional Emails We hereby object to the use of contact details published as part of our legal notice obligations for the purpose of sending unsolicited advertising or informational materials. The website operators expressly reserve the right to take legal action in the event of unsolicited promotional information, such as spam emails. 4. Data Collection on This Website Cookies Our website uses cookies. Cookies are small data files that do not cause any damage to your device. They are stored either temporarily for the duration of a session as session cookies or permanently as persistent cookies on your device. Session cookies are automatically deleted when your visit ends. Persistent cookies remain stored on your device until you delete them or they are automatically deleted by your web browser. Cookies may originate from us as first-party cookies or from third-party companies as third-party cookies. Third-party cookies enable the integration of certain third-party services into websites, such as cookies used to process payment services. Cookies serve various purposes. Many cookies are technically necessary because certain website functions would not work without them, such as shopping cart functions or video display. Other cookies may be used to analyze user behavior or for advertising purposes. Cookies required to carry out electronic communications, provide certain functions requested by you, such as a shopping cart, or optimize the website, such as cookies used to measure the website’s audience, are stored on the basis of Article 6(1)(f) GDPR unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to ensure the technically correct and optimized provision of its services. Where consent to the storage of cookies and comparable recognition technologies has been requested, processing is carried out exclusively on the basis of that consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time. You can configure your browser to notify you when cookies are set, allow cookies only in individual cases, reject cookies in specific cases or in general, and automatically delete cookies when you close your browser. Disabling cookies may limit the functionality of this website. Where additional cookies and services are used on this website, further information is provided in this Privacy Policy.

Server Log Files The website provider automatically collects and stores information in server log files, which your browser automatically transmits to us. This information includes: Browser type and browser version Operating system used Referrer URL Hostname of the accessing device Time of the server request IP address This data is not combined with data from other sources. The data is collected on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in ensuring the technically correct display and optimization of the website. Server log files must be collected for this purpose. Contact Form If you submit an enquiry using our contact form, the information entered in the form, including the contact details provided by you, will be stored by us for the purpose of processing your enquiry and addressing any follow-up questions. We will not disclose this data without your consent. This data is processed on the basis of Article 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is necessary to take steps prior to entering into a contract. In all other cases, the processing is based on our legitimate interest in effectively processing the enquiries submitted to us pursuant to Article 6(1)(f) GDPR or on your consent pursuant to Article 6(1)(a) GDPR where such consent has been requested. Consent may be withdrawn at any time. The data entered into the contact form will remain with us until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies, for example once your enquiry has been fully processed. Mandatory statutory provisions, particularly statutory retention periods, remain unaffected.

Enquiries by Email, Telephone, or Fax If you contact us by email, telephone, or fax, your enquiry, including all personal data arising from it, such as your name and the content of your enquiry, will be stored and processed by us for the purpose of handling your request. We will not disclose this data without your consent. This data is processed on the basis of Article 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is necessary to take steps prior to entering into a contract. In all other cases, processing is based on our legitimate interest in effectively processing enquiries submitted to us pursuant to Article 6(1)(f) GDPR or on your consent pursuant to Article 6(1)(a) GDPR where such consent has been requested. Consent may be withdrawn at any time. The data submitted to us through contact enquiries will remain with us until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies, for example once your request has been fully processed. Mandatory statutory provisions, particularly statutory retention periods, remain unaffected. 5. Social Media Social Media Elements Using Shariff This website uses elements from social media platforms, such as Facebook, X, Instagram, Pinterest, XING, LinkedIn, and Tumblr. These elements can generally be identified by the respective social media logos. To ensure data protection on this website, we use these elements only in conjunction with the Shariff solution. This application prevents the social media elements integrated into this website from transmitting your personal data to the respective provider as soon as you first access the website. A direct connection to the provider’s server is only established when you activate the relevant social media element by clicking the corresponding button. This constitutes consent. Once you activate the social media element, the respective provider receives information that you have visited this website using your IP address. If you are simultaneously logged into the relevant social media account, such as Facebook, the provider may associate your visit to this website with your user account. Activating the plugin constitutes consent within the meaning of Article 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw this consent at any time with effect for the future. The service is used to obtain the consent required by law for the use of certain technologies. The legal basis is Article 6(1)(c) GDPR. 6. Plugins and Tools hCaptcha We use hCaptcha on this website. The provider is Intuition Machines, Inc., 2211 Selig Drive, Los Angeles, CA 90026, USA, hereinafter referred to as “IMI.” hCaptcha is used to determine whether data entered on this website, for example through a contact form, is being submitted by a human or by an automated program. For this purpose, hCaptcha analyzes the behavior of website visitors on the basis of various characteristics. This analysis begins automatically as soon as a visitor accesses a website on which hCaptcha is enabled. For its analysis, hCaptcha evaluates various types of information, such as the visitor’s IP address, the amount of time spent on the website, and mouse movements made by the user. The data collected during this analysis is transmitted to IMI. Where hCaptcha is used in invisible mode, the analysis takes place entirely in the background. Website visitors are not notified that an analysis is being performed. The storage and analysis of data are based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its online services against abusive automated access and spam. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time. The data processing is based on Standard Contractual Clauses contained in IMI’s Data Processing Addendum to its Terms and Conditions or in the relevant data-processing agreements. Further information about hCaptcha can be found in its Privacy Policy and Terms of Service at: https://www.hcaptcha.com/privacy https://hcaptcha.com/terms

The company is certified under the EU–US Data Privacy Framework. The Data Privacy Framework is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards when personal data is processed in the United States. Every company certified under the Data Privacy Framework undertakes to comply with these data protection standards. Further information is available from the provider at: https://www.dataprivacyframework.gov/participant/6388