S
x
DE
M

Privacy

 

 

Information on data protection for shareholders and proxies participating in the virtual Annual Shareholders' Meeting of TAKKT AG

TAKKT AG (hereinafter also: "we" or "us") provides you with the present data protection declaration information in connection with the preparation, implementation and follow-up of our virtual Shareholders' Meeting in 2026 including the use of the website www.takkt.de/investoren/hauptversammlung/ (hereinafter: "InvestorPortal"). In this context, we attach particular importance to the trustworthy and secure handling of your personal data. The term "processing" covers the entire process from the collection, storage, processing and/or transfer to the deletion of the data (hereinafter: "processing"). Personal data is any information that relates to an identified or identifiable person and can be directly or indirectly assigned to that person (such as name, address, e-mail address).

If you as a shareholder authorize a third party to follow the virtual Shareholders' Meeting on the Internet and/or to exercise your rights, you must inform the authorized representative about the processing of his personal data by us.

1. Name and address of controller

The controller within the meaning of the General Data Protection Regulation ("GDPR"), other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is:

TAKKT AG
Presselstrasse 12
70191 Stuttgart
Germany

E-mail address: service(at)takkt.de
Phone: +49 711 3465-80

2. Name and address of our data protection officer

You can contact our data protection officer at:

TAKKT AG
Attn: Mr. Ismet Gülkanat
Presselstraße 12
70191 Stuttgart
Germany

E-mail address: datenschutz@takkt.de

3. Preparation, implementation and follow-up of the Shareholders' Meeting

We process the following personal data from shareholders and proxies:

  • First and last name;
  • Address;
  • Data relating to shareholding, such as number of shares, type of share ownership (third-party or own), information as proof of ownership, such as the number of the securities account, name of the account holder, unique identifier of the shareholder or authorised representative;
  • Data in connection with the Shareholders’ Meeting, such as information on the admission ticket, information on motions, questions or election proposals;
  • Other contact data, such as e-mail address;
  • Content data of communications, e.g. in the event of questions to us or an objection recorded in the notarized minutes; and
  • Registration confirmation number and Internet access code.

We process the data for the proper preparation, implementation and follow-up of the Shareholders' Meeting and for the fulfilment of our obligations under stock corporation law, supervisory law, securities law, commercial or tax law, such as sending out invitations to the Shareholders' Meeting, the obligation to draw up a list of and the storage of evidence of authorization for voting by proxy or for voting by postal vote. This also includes the inclusion of all shareholders attending the Shareholders' Meeting or their proxies in the list of participants to be kept by law. In the event of registration for the virtual Shareholders' Meeting, we will compare your admission ticket number, first and last name, address and number of shares with the data held by your custodian bank in order to check your shareholder status. In the event of a motion to add items to the agenda, countermotions or election proposals, we must publish some of your personal data in accordance with the provisions of stock corporation law. We publish statements submitted in advance in accordance with Section 130a German Stock Corporation Act ("AktG") on the InvestorPortal, stating the name of the submitting shareholder or proxy. When the right to speak is exercised and information is requested at the Shareholders' Meeting, the name of the respective shareholder or proxy may be mentioned.

The legal basis for this processing is generally Art. 6 (1) sentence 1 lit. c GDPR in conjunction with Sections 118 et seq. AktG or other requirements under stock corporation law, supervisory law, securities law, commercial or tax law, insofar as the processing is necessary to fulfil a legal obligation to which we are subject. This applies in particular in connection with the processing of registrations for the Shareholders' Meeting pursuant to Section 123 (2), (3) AktG in conjunction with Section 12 of the Articles of Association of TAKKT AG as well as the obligation to prepare and make available the list of participants pursuant to Section 129 AktG.

In addition, we base the processing on the protection of our overriding legitimate interests (Art. 6 (1) sentence 1 lit. f GDPR). This applies in particular to the organization and implementation of the Shareholders' Meeting in virtual form. Our legitimate interests in these cases are the proper conduct of the Shareholders' Meeting, the processing of inquiries and the protection of the health of all participants; these interests outweigh your interests in not having your personal data processed, as we ensure an appropriate level of data protection, limit the processing to an absolute minimum and because you are able to decide which information you provide to us in the context of an inquiry.

We delete your personal data insofar as processing of the data is no longer necessary and insofar as we are not obliged to retain the data due to legal obligations. Accordingly, the data is deleted when possible liability risks have expired and we are not obligated to store the data beyond this period due to retention obligations resulting, for example, from the relevant stock corporation, capital market, supervisory and tax law requirements. In general, the storage period for data in connection with the Shareholders' Meeting is up to 3 years, in individual cases up to 10 years.

4. Visting the InvestorPortal

When you visit our website, we process the following data for technical reasons:

  • name of the retrieved file,
  • date and time of the retrieval,
  • message whether retrieval was successful,
  • browser type and version,
  • if applicable, referrer URL (the previously visited page) and
  • IP address.

The processing of this data by the system is necessary to enable the technical provision of the website to your computer. This is also our overriding legitimate interest in the data processing according to Art. 6 (1) sentence 1 lit. f GDPR.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. In the case of storage of data in log files (including the IP address), this is the case after 32 days at the latest, unless an attack or threat by you has been detected.

5. Contacting us

If you communicate with us via e-mail or another channel, we process your personal data for the purpose of processing your inquiry, for example

  • Contact data, e.g. first and last name, address, e-mail address and
  • Content data of the communication, e.g. subject and message.

The legal basis for the processing of data is Art. 6 (1) sentence 1 lit. b GDPR. Accordingly, we are permitted to process data insofar as the processing is necessary for the performance of a contract to which you are a party or for the implementation of pre-contractual measures. Otherwise, we base the data processing on our overriding legitimate interests (Art. 6 (1) sentence 1 lit. f GDPR). Our legitimate interests in these cases are the proper conduct of the Shareholders' Meeting and the processing of inquiries; these interests outweigh your interests in not having your personal data processed, as we ensure an appropriate level of data protection, limit processing to an absolute minimum and because you are able to decide which information you provide to us in the context of an inquiry.

Please note that data on the Internet generally cannot always be transmitted securely. Especially in e-mail communication, the protection of data exchange cannot be guaranteed. We kindly ask you not to send us any sensitive data by e-mail.

6. Participation in the virtual Shareholders' Meeting via the Investor Portal

The Shareholders' Meeting will be held as a virtual Shareholders' Meeting without the physical presence of the shareholders or their proxies (with the exception of company proxies).

TAKKT AG offers you the opportunity to participate in the virtual Shareholders' Meeting in 2026 and exercise your voting rights via the InvestorPortal.

As part of the login process and during participation in the virtual Shareholders' Meeting, we process the following data about you:

  • registration confirmation number;
  • Internet access code on your registration confirmation;
  • your IP address; and
  • the time of access to your user account (collectively: "login data").

The processing of this data by the system is necessary to enable a technical provision of the website to your computer and to perform an automatic logout in case of inactivity for security reasons. This is also our overriding legitimate interest in data processing according to Art. 6 (1) sentence 1 lit. f GDPR.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data to perform the login, this is the case when the respective session has ended. In the case of participation in the virtual Shareholders' Meeting, this is the case when the livestream has ended.

7. Recipients of the data

Data categories

Recipient

Data within the meaning of Sections 3 to 6

C-HV AG, Gewerbepark 10, 92289 Ursensollen for the preparation (in particular printing and dispatch of personalized documents, invitation process), implementation (in particular registration process, voting data collection and provision of the Investor Portal) and follow-up of the Shareholders' Meeting. The said company operate on our behalf as a processor in accordance with Article 28 of the GDPR and shall act exclusively in accordance with our instructions.

Data in the list of participants, i.e. name, place of residence, number of shares and type of ownership (Section 129 (1) sentence 2, (4) AktG).

Participants in the Shareholders' Meeting; notary public.

Shareholder requests for additions to the agenda (Section 122 (2) AktG); countermotions and election proposals (Sections 126, 127 AktG); shareholder requests for information (Sections 118a (1) sentence 2 no. 4, 131 (1) AktG). 2 no. 4, 131 (1) AktG); statements (Sections 130a AktG); speeches (Sections 118 (1) sentence 2 no. 7, 130a (5) and (6) AktG); objections to resolutions (Section 118a (1) sentence 2 no. 8 AktG)

Participants in the Shareholders' Meeting; shareholders; publication in the Federal Gazette (Bundesanzeiger) and/or on the website as required by law.

Data within the meaning of Sections 3 to 6

IT service providers that provide general IT systems (for example, e-mail and file servers).

Depending on legal regulations that govern the transmission

Public entities, such as regulatory agencies.

Your personal data will not be transferred to recipients in countries outside the European Union.

8. Sources from which we obtain your personal data

In general, we collect your personal data directly from you.

When you register on the InvestorPortal, we will compare your registration confirmation number, first and last name, address and number of shares with the data of your custodian bank in order to check your shareholder status.

In the case of registration for the virtual Annual General Meeting, we receive the information on proof of share ownership from the last intermediary.

In case of proxy voting, we have collected your name and address from the respective shareholder who asked you to act as proxy.

9. Obligation to provide data

The provision of your personal data is generally not mandatory.

However, if you wish to participate in the virtual Shareholders' Meeting as a shareholder or as a proxy and/or exercise your voting right, proof of your authorization is required for this (Section 123 (2), (3) AktG in conjunction with Section 12 of the Articles of Association of TAKKT AG). If you wish to participate in the virtual Shareholders' Meeting and/or exercise your voting rights, it is therefore necessary that you provide us with the aforementioned personal data. If you do not provide us with your personal data, it will not be possible for you to participate in the virtual Shareholders' Meeting and exercise your voting rights.

In addition, we are required by law to compile a list of participants with your name, place of residence, number of shares and type of ownership, to make this list available to all participants before the first vote and to allow any shareholder to inspect the list of participants on request for up to two years after the Shareholders' Meeting (Section 129 (1) Sentence 2, (4) AktG). Shareholders who grant powers of attorney and issue instructions to the company's proxies are listed in the list of participants, with their names disclosed.

10. SSL encryption

Our InvestorPortal uses SSL encryption for security reasons and to protect the transmission of confidential content, such as inquiries that you send to us as the website operator. You can recognize an encrypted connection by the fact that the address bar of the browser changes from "http://" to "https://" as well as by the lock symbol in your browser bar. If SSL encryption is activated, the data you transmit to us cannot be read by third parties.

11. Rights of the data subject

Insofar as we process your personal data, you are a data subject within the meaning of the GDPR. In accordance with the legal requirements, you are therefore entitled to the following rights:

  • Right of access (Art. 15 GDPR): You can request information about whether we process your personal data. If this is the case, you have a right to be informed about this personal data and to receive further information related to the processing. Please note that this right of access may be restricted or excluded in certain cases (cf. Art. 15 GDPR).
  • Right to rectification (Art. 16 GDPR): In the event that personal data about you is not (or is no longer) accurate or incomplete, you may request that this data be rectified and, if necessary, completed.
  • Right to erasure or restriction (Art. 17 and 18 GDPR): If the legal requirements are met, you may request the deletion of your personal data (Art. 17 GDPR) or the restriction of the processing of this data (Art. 18 GDPR), for example if the processing of this personal data is no longer necessary for the purposes for which we collected it.
  • Notification obligation (Art. 19 GDPR): If you have asserted the right to rectification, deletion or restriction of processing against us, we are obliged to inform all recipients to whom the personal data relating to you have been disclosed of this rectification or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
  • Right to data portability (Art. 20 GDPR): Subject to certain conditions, you have the right to receive the personal data concerning you that you have provided to us in a specific format or to transfer this data to another controller (cf. Art. 20 GDPR).
  • Right to file a complaint with a supervisory authority (Art. 77 GDPR): You may file a complaint against the processing of your personal data by us with a data protection authority, in particular in the EU Member State where your habitual residence or place of work is located or where an alleged breach of applicable data protection laws has occurred (cf. Art. 77 GDPR).

The contact details of the supervisory authority at our registered office are:

Der Landesbeauftragte für Datenschutz und Informationsfreiheit Baden-Württemberg
Lautenschlagerstr. 20
70173 Stuttgart

Phone 0711/615541-0           
E-mail: poststelle@lfdi.bwl.de

Right to object

In addition, you have the right to object to the processing of your personal data by us on grounds relating to your particular situation, if we process your personal data to protect our legitimate interests on the basis of Art. 6 (1) sentence 1 lit. f GDPR (Art. 21 (1) and (2) GDPR).

In the event of an objection, we will stop processing your personal data in general, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.

In order to exercise your aforementioned rights, certain legal requirements must be met and in certain cases your rights may be limited due to legal exceptions, in particular the exceptions contained in Articles 17 (3) and 22 (2) of the GDPR or in national laws.

For any general questions or questions regarding the exercise of your rights, please contact us using the contact details provided in Section 1 or Section 2.

As of April 2026