Privacy Notice MAM

Your privacy and the security of your personal data are very important to us. We therefore make the following Privacy Notice available to you to transparently provide you with information according to the EU General Data Protection Regulation (EU 2016/679) - GDPR:

• Who is processing your data
• Why is the processing of your data important for us
• What kind of data we process
• When we process your data and
• Your rights concerning the processing of your data

Please read this Privacy Notice carefully.

1. Contact Details

If you want to know the contact details of the data controller for the website https://mam.om-digitalsolutions.com, please see our imprint.

To contact our Group Data Protection Officer please send an e-mail to data-protection@om-digitalsolutions.com.

2. General Information about the Processing of Your Data

Personal data is only collected and processed by us if this is necessary to provide a functional and conveniently operated website as well as to provide you with our contents and services.

We process your data only and insofar this is permitted by national and European legal regulations. The legal grounds on which processing is carried out is explained below. We also explain to you why we process your data and in which situations/regarding which services.

Your data will be stored until the purpose of storage no longer applies. In some cases, European or national regulations, laws or other regulations or contracts to which we are subject prescribe a longer or shorter storage period. The data will then be deleted at the end of this period. Further details can be found on a case by case basis below.

3. Processing of Your Data

3.1 Visiting our Website and the Creation of Logfiles

Every time you visit our website, our system automatically collects data and information from your computer system. We collect the following data as such:

• IP address
• Browser type/version
• Device
• Operating system
• Date and time of access
• Country
• Language

This data is stored on session cookies on your device and also stored in the log files of our system.

The aforementioned data is not stored together with other personal data. It is necessary that our system temporarily stores the users’ IP address so that the website can be delivered to your device. Your IP address must remain stored for the duration of the respective use of the website. The storage in log files therefore supports the functionality of the website. We also use this data to optimize our website and improve the security of our information technology systems. The data will not be used for marketing purposes in this context. The legal ground for the temporary storage of data and log files is Article 6 para. 1 lit. f GDPR .

The data is stored as long as it is necessary to achieve the purpose for its collection. The data that is required for the functionality of the website will be deleted after the respective session has ended. Any other data will be stored only for as long as is necessary to achieve the purpose for which it was collected.

The collection of data for the provision of the website and the storage of data in log files is necessary for the operation of the website.

For the use of this website only session cookies are installed on your device. No other cookies are installed on your device or track your activity and collect any data of yours during your use of our website except the session cookies described above.

3.2 Registration

On our website it is necessary to register as a user before being able to proceed with the use of its services. For further details regarding our registration platform, please read below:

Registration to create a Profile (Sign Up)

To create a personal profile on our website, you have to fill in certain data in an input mask. The inserted data are transmitted to us and stored only by us. The following data is collected necessarily during the registration process:

• E-mail Addresse (also used als login)
• Password
• Company
• First Name
• Last Name

As the registration is required for the performance of a contract (Terms & Conditions of the MAM Service) to which you are a party, Article 6 para. 1 b) GDPR serves as legal grounds.

Your data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. This applies to data in connection with contracts if this is no longer necessary for the execution of the contract. We may be contractually or legally obliged to store data even after termination of the contract (e.g. for tax purposes).

You can cancel your registration at any time by sending a request via e-mail to us to this end under marketing-services@om-digitalsolutions.com. If the data is necessary for the fulfillment of a contract or for the execution of pre-contractual measures, an early deletion can only take place if contractual or legal obligations permit such deletion.

3.3 Contacting us via E-Mail

If you contact us by sending an e-mail, the personal data transmitted with your e-mail will be stored.

The legal basis for data processing in this respect is Art. 6 para. 1 lit a and f GDPR as you are a party to a contract and, additionally, we have a legitimate interest to process these data. We process personal data from e-mails exclusively for the treatment of the establishment of contact. The data is used exclusively for correspondence.

We delete your data as soon as it is no longer necessary to achieve the purpose for which it was collected. This case occurs if the respective correspondence with you is terminated. Correspondence is terminated when it is obvious that the questions/reasons for sending the message have been finally clarified.

4. Termination of your account on our website

We verify that your account remains valid and active and maintain it in our records as long as you use it. You can terminate contract for using the service at any time and with future effect by contacting us via e-mail under marketing-services@om-digitalsolutions.com. Please note that with this step all information and benefits connected with your account will also be deleted. For further information you may also review our “Terms and Conditions”.

5. Your Rights

We want to inform you about your rights concerning the processing of your personal data by us. If you have any questions concerning your rights or if you want to exercise one or several of your rights towards us please send us an e-mail to data-protection@om-digitalsolutions.com.

5.1 Right to withdraw the data protection declaration of consent (Article 7 para. 3 GDPR)

In case that the processing of your data by us is based on your explicit consent you have the right to withdraw this consent at any time. The withdrawal of consent shall not affect the legality of the processing carried out on the basis of the consent until withdrawal. You will be informed about this right before you give your consent.

5.2 Right to information (Article 15 GDPR)

In accordance with Article 15 GDPR, you have the right to request confirmation from us as to whether we process personal data concerning you. If this is the case, you have a right to information about these personal data and to the following information:

• the purposes for which we use your personal data;
• the categories of personal data about you that we possess;
• the recipients or categories of recipient to whom your personal data have been or will be disclosed by us;
• where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
• if the source of personal data we have about you is not directly you, any relevant information as to how your personal data came to our possession; whether we use your use your personal data as part of any automated decision-making process and, if so, additional details as to its significance.

When personal data is transferred to a third country or an international organization you have the right to be informed about appropriate safeguards to ensure that the recipients are also in compliance with the provisions of the GDPR.

5.3 Right to correction (Article 16 GDPR)

You can request us to correct any incorrect data concerning you without delay. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data - also by means of a supplementary declaration.

5.4 Right to deletion or "right to be forgotten" (Article 17 GDPR)

You have the right to request the immediate deletion of your data if one of the following reasons applies:

• data is no longer necessary for the purposes for which they were collected or otherwise processed,
• you withdraw your consent on which the processing was based and there is no other legal basis for the processing,
• you oppose to the processing pursuant to Article 21 para. 1 GDPR for reasons arising from your particular situation and there are no overriding legitimate grounds for processing,
• you oppose to the processing for direct marketing in accordance with Article 21 para. 2 GDPR,
• the data have been processed unlawfully,
• the deletion of data is necessary to fulfil a legal obligation under European or national law,
• the data were collected in relation to an offer of information society services directly to a child provided in accordance with Article 8 para. 1 GDPR.

We will comply with the request for deletion unless we are legally obliged or entitled to continue storing and processing your data. In particular legal retention periods are considered as legal obligations. Furthermore we are entitled to continued storage if we are unable to assert, exercise or defend legal claims without your data.

If we have made your data public and are obliged to delete it, we will take appropriate measures, taking into account the available technology and the implementation costs, to inform those responsible if you have also requested the deletion from them.

5.5 Right to limitation of processing (Article 18 GDPR)

In accordance with Article 18 GDPR, we may only process data to a limited extent in the following cases:

• you dispute the accuracy of your data until we are able to verify its accuracy,
• the processing is unlawful and you refuse to delete your data and instead request that the use of personal data be restricted,
• we no longer need the data for the purposes of processing, but you do need them to assert, exercise or defend legal claims, or
• you object to the processing pursuant to Article 21 para. 1 GDPR for reasons arising from your particular situation, as long as it is not yet clear whether the legitimate reasons for the processing by us outweigh your interests.

If processing has been restricted we may only store this data. Any further processing in such case is only permissible with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State. You can revoke your consent given in this connection at any time. You will be notified by us before the restriction is lifted.

5.6 Notification Obligation regarding Rectification or Erasure of Personal Data (Article 19 GDPR)

We are obliged to inform all recipients to whom your data have been disclosed about a correction or deletion of your data or a restriction of the processing. This shall not apply if it is impossible or involves a disproportionate effort. We will inform you about these recipients if so requested.

5.7 Right to data transferability (Article 20 GDPR)

You have the right to receive the data concerning you that you have provided to us in a structured, common and machine-readable format. You also have the right to instruct us with the transmission of your data to a third party, provided that

• the processing of the data is based on your consent or on a contract and
• processing is carried out using automated methods.

You may request that we transfer your data directly to the third party if this is technically feasible.

However, this right must not impair the rights and freedoms of other persons, including our company. If this is the case, we are entitled to refuse the delivery or transfer of your data.

5.8 Automated Decision in Individual Cases including Profiling (Article 22 GDPR)

On our website your data is not subject of decisions made exclusively on the basis of automated processing (e.g. profiling). You have the right not to be subject to a decision based exclusively on automated processing - including profiling - if this has legal effect against you or significantly impairs it in a similar manner.

5.9 Right to Object (Article 21 GDPR)

If we process your data on the basis of a legitimate interest (Article 6 para. 1 lit. f GDPR), you have the right to object to this if the reasons for this arise from your particular situation. This also applies to profiling based on these provisions.

In this case, we will no longer process your data unless we can prove compelling reasons worthy of protection for the processing. This must outweigh your interests, rights and freedoms, or processing serves to assert, exercise or defend legal claims.

If we process your data for direct marketing purposes, you may object to the processing of your data. This also applies to profiling insofar as it is connected with such direct advertising.

After your objection your data will no longer be processed for these purposes.

5.10 Right of Appeal to a Supervisory Authority (Article 77 GDPR)

You have the right to complain to a supervisory authority, in particular in the Member State where you are staying, working or suspect that an infringement of the General Data Protection Regulation against you has taken place. Other administrative or judicial remedies that you may be entitled to remain unaffected.

6. Updates to our Privacy Terms

We reserve the right to update this privacy policy regularly if the legal, technical or economic conditions change. When we update our privacy policy, we undertake appropriate measures to inform you as required about the importance of the changes we have made. We will obtain your consent to all important changes to the privacy policy if and to the extent to which this is required under applicable data privacy laws.

7. Notice regarding hosting

Our website is hosted by hosting service providers which observe state-of-the-art data protection and data security standards.

Last modified: 20/08/2021