Protecting your privacy during the processing of personal data is a matter of great importance to us.

The entity responsible for data processing within the meaning of the law is:

Minerva-AS GmbH
Justus-von-Liebig-Straße 2-14
85435 Erding

+49 8122 229 32 88

info(at)minerva-as.de

Personal Data
Personal data refers to data relating to you as an individual. The personal data we process may include your user ID from the Apple App Store or Google Play Store, as well as a unique, pseudonymized identifier generated from it, provided that you log in to the MASE app using your user ID. If you do not log in to the MASE app, we do not process any personal data.

Data Related to the Use of the MASE App
Currently, advertising identifiers are used to create usage profiles within our apps. We receive statistics directly from the App Store or Google Play Store, as well as from the MASE app's own administrative tool.

Security
We have implemented the necessary technical and administrative security measures to protect your personal data against loss, destruction, manipulation, and unauthorized access. All our employees, as well as service providers acting on our behalf, are bound to comply with applicable data protection laws.

Whenever we collect and process personal data, it is encrypted before transmission. This ensures that your data cannot be misused by third parties. Our security measures are subject to a continuous improvement process, and our privacy policies are regularly updated. Please ensure that you are referring to the most current version.

Your Information pursuant to Art. 13 GDPR
1. What data is processed, and from which sources is this data obtained? We process the data we have received from you in the context of initiating or fulfilling a contract, or based on your consent:

Personal data (see above)
Data related to the use of the App (see above)
2. For what purposes and on what legal basis is the data processed?
We process your data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act 2018, as amended:

• for the fulfillment of (pre-)contractual obligations (Art. 6 Para. 1 lit. b GDPR):
The processing of your data is carried out for the purpose of contract fulfillment—whether online or in one of our branches—and for internal contract administration within our company. In particular, data is processed during the initiation of business relationships and during the execution of contracts with you.

3. Processing of personal data for advertising purposes
We do not use the data we receive in connection with your use of the MASE App for advertising purposes.

4. Who receives my data?
If we engage a service provider acting as a data processor, we remain responsible for the protection of your data. All data processors are contractually obliged to treat your data confidentially and to process it solely within the scope of providing their services. The data processors commissioned by us receive your data only insofar as they require such data to fulfill their respective services. These include, for example, IT service providers whom we require for the operation and security of our IT systems. In the event of a statutory obligation or a court order, authorized government bodies and public authorities may also be recipients of your data.

5. How long is my data stored?
We process your data until the termination of the business relationship or until the expiration of applicable statutory retention periods (e.g., under the Commercial Code or the Fiscal Code); furthermore, data is retained until the conclusion of any potential legal disputes in which the data is required as evidence. 6. Are personal data transferred to a third country?
As a general rule, we do not transfer any data to a third country. In individual cases, a transfer takes place only on the basis of an adequacy decision by the European Commission, Standard Contractual Clauses, appropriate safeguards, or your explicit consent.

7. What data protection rights do I have?
You have the right at any time to access, rectify, or erase your stored data, or to restrict its processing; you also have the right to object to the processing, as well as the right to data portability and the right to lodge a complaint, in accordance with the requirements of data protection law.

Right of Access:
You may request information from us regarding whether—and to what extent—we process your data.

Right to Rectification:
If we process data of yours that is incomplete or inaccurate, you may request that we rectify or complete it at any time.

Right to Erasure:

You may request the erasure of your data from us, provided that we are processing it unlawfully or if the processing disproportionately infringes upon your legitimate interests requiring protection. Please note that there may be grounds precluding immediate deletion—for example, in cases involving statutory retention obligations. Irrespective of your exercise of your right to deletion, we will delete your data promptly and completely, provided that no contractual or statutory retention obligations to the contrary exist.

Right to Restriction of Processing:
You may request that we restrict the processing of your data if:
• You contest the accuracy of the data, for a period enabling us to verify the accuracy of the data;
• The processing of the data is unlawful, but you oppose its deletion and instead request a restriction of its use;
• We no longer require the data for the intended purpose, but you still require the data for the establishment, exercise, or defense of legal claims;
or
• You have objected to the processing of the data.



Right to Data Portability:
You may request that we provide you with the data you have supplied to us in a structured, commonly used, and machine-readable format, and that you be permitted to transmit this data to another controller without hindrance from us, provided that:
• We process this data based on consent you have granted (which is revocable) or for the fulfillment of a contract between us; and
• Such processing is carried out by automated means.

Where technically feasible, you may request that we transmit your data directly to another controller.

Right to Object:
If we process your data based on a legitimate interest, you may object to such data processing at any time; this also applies to any profiling based on these provisions. We will then cease processing your data, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or unless the processing serves the establishment, exercise, or defense of legal claims. You may object to the processing of your data for the purpose of direct marketing at any time without providing a reason.

Right to Lodge a Complaint
If you believe that we are violating German or European data protection law in the processing of your data, we ask that you contact us so that we may clarify any issues. Naturally, you also have the right to contact the supervisory authority responsible for you—specifically, the relevant State Office for Data Protection Supervision.

Should you wish to exercise any of the aforementioned rights against us, please contact us at the address listed below. In cases of doubt, we may request additional information to verify your identity.

8. Am I Obligated to Provide Data?
The processing of your data is required for the full utilization of all functionalities within the MASE App. By registering within the App, you agree to provide this data. You may decline to register or delete your registration at any time.

Changes to This Privacy Policy
We reserve the right to amend our privacy policy should this become necessary due to new technologies. Please ensure that you have the most current version available.

Contact for All Data Protection Inquiries
Minerva-AS GmbH
Justus-von-Liebig-Straße 2-14
85435 Erding

+49 8122 229 32 88

info(at)minerva-as.de | www.mase-safety.com | www.minerva-as.de

You may request the erasure of your data from us, provided that we are processing it unlawfully