MSC (MicroSave Consulting) and its subsidiaries and affiliates (collectively referred to as “MSC,” “us,” or “we” in this document) recognize the importance of your privacy. We are committed to respecting and protecting your personal data.

This privacy policy explains how we handle and protect your personal data when we collect it through MSC’s websites, applications, online surveys, and digital assets, among others (collectively referred to as our “sites”). This policy applies when we interact with you and collect data for our use. It applies when MSC acts as a data controller or undertakes a similar role under applicable privacy laws.

This privacy policy applies to the information we collect:

• 1. Through this website;
  2. Through email, text, and other electronic messages between you and this website.

It does not apply to the information collected by:

• 1. MSC through an offline channel or any other means, which includes any other website operated by MSC or any third party, which includes our subsidiaries; or
  2. Any third party (which includes our subsidiaries) through any application or content (including advertising) that may link to MSC’s website or be accessible from it.

Please be aware that you are not obligated to share your personal data with us. However, not doing so may prevent MSC from providing you with our full range of services or a satisfactory user experience with our solutions, website services, or newsletters. This privacy policy may change from time to time. Your continued use of this website after we make changes to the privacy policy will be considered as your acceptance of those changes, so please check the privacy policy periodically for updates.

MSC acts as the data controller when it collects and processes your personal information under this privacy policy. This means we determine how your data is collected, used, protected, shared, and deleted. The specific MSC entity responsible for your data may vary based on your location or interaction with MSC.

MSC collects personal data directly from you and third parties during our business activities under the following circumstances:

• 1. When you interact with our websites, which includes instances when you manage your cookie preferences as described in our cookie policy;
  2. When you use MSC’s mobile apps;
  3. When you create or log into a user profile on our websites;
  4. When you register for MSC’s newsletters and alerts and engage with them;
  5. When you sign up for MSC’s conferences and events and participate in them;
  6. When you contribute to public content areas, such as bulletin boards, discussion forums, and MSC social media platforms;
  7. When you participate in online surveys, panel discussions, or individual discussions conducted by MSC;
  8. When you contact MSC or its employees via our websites, email, or telephone to ask questions, request information, or seek a response.

MSC may obtain personal information about you from third parties, such as service providers and data vendors. This information typically comes from publicly accessible sources, such as business websites, social media platforms, and other public records. We also acquire de-identified data from certain service providers. We verify that third parties have collected data legally and have the right to share it with MSC for our intended purposes, as outlined in the next section.

We may collect sensitive personal information directly when you participate in a survey or provide details for specific requests at conferences or events. We only use this data with your explicit consent unless another legal reason applies, such as public health requirements. We use de-identified datasets for research, data analysis, and statistical purposes. We may also combine your personal information with data from third parties to ensure all collection and usage adhere to this privacy policy and the purposes outlined in it.

MSC uses your personal data for different purposes and may combine data from multiple sources to accomplish those purposes. This section summarizes the purposes for which we process your personal data and the categories of personal data that we use for each purpose. It also specifies the legal grounds on which each data processing activity is based and who has access to your personal data.

MSC uses your data for various purposes, such as the management of client relationships, account access, newsletters, conferences, surveys, marketing communications, and service improvements, among others. The data collection is based on your consent, legitimate interest, or legal requirements. Data is accessed by MSC, affiliates, and third-party service providers as specified in their respective privacy policy.

MSC only processes your data when justified and necessary and will not use it in a way that harms your rights. The withdrawal of your consent may limit our ability to provide services. We do not make automated decisions that impact your legal rights, and human oversight is always involved in automated processes.

MSC uses cookies and tracking technologies to manage its websites and services and collect user data. You can manage your cookie preferences through our cookie policy . MSC uses security tools to protect against threats but does not use them for other purposes.

We do not acquire, use, or allow others to use de-identified data to identify or reidentify individuals. We make the following commitments when we receive de-identified data or transform personal data that we have collected into de-identified data:

• 1. Data maintenance: MSC stores de-identified data in its de-identified form;
  2. No re-identification: MSC does not attempt to identify or reidentify individuals within de-identified data or use it to associate individuals with characteristics;
  3. Third-party restrictions: MSC requires non-MSC recipients to maintain de-identified data in its de-identified form and not attempt to identify or reidentify individuals.

MSC may share your personal data with other MSC entities, service providers, and third parties to achieve specific business goals and support our interactions. The MSC entity that collects your data may share it with the following categories of recipients for business purposes:

• • 1. MSC’s subsidiaries, affiliates, and personnel across our global organization;
    2. MSC’s service providers and personnel;
    3. MSC’s legal and professional advisors;
    4. Third parties in the following circumstances;
       1. If we are required to do so by law or legal process;
       2. Under lawful request by law enforcement authorities or other government officials;
       3. When we believe disclosure is necessary or suitable to prevent physical harm or financial loss or in connection with an investigation of suspected or actual illegal activity;
       4. If disclosure is necessary to protect a person’s vital interests;
       5. To enforce our terms of use;
       6. To protect our property, services, and legal rights;
       7. To prevent fraud against MSC, our subsidiaries, affiliates or business partners, or both;
       8. To help MSC’s investigation of an actual or suspected security incident, such as a breach of confidential information or personal information or a violation of MSC’s policy;
       9. To support auditing, compliance, and corporate governance functions;
       10. To comply with all applicable laws.
    5. A successor or different business entity in the event of a reorganization, merger, sale, joint venture, assignment, or other transfer or disposition of all or any portion of our business.

MSC complies with all applicable data transfer laws to protect personal data transfer internationally. This includes the incorporation of required data transfer terms into our agreements with MSC affiliates, subsidiaries, service providers, and third parties.

MSC protects your data globally through robust security measures. We use technical and operational safeguards to prevent unauthorized access, loss, or misuse. Our subsidiaries, service providers, and third parties are required to follow the same security standards. Only authorized personnel have access to your data and are obligated to treat it confidentially. However, we cannot guarantee complete protection against unauthorized access.

MSC stores your data for as long as needed to fulfill business purposes, legal obligations, and contractual requirements. We securely delete it in adherence to industry practices when your data is no longer necessary. If you request deletion, we will comply with applicable laws and make reasonable efforts to delete your data, subject to retention rights. Please refer to Section 9 of our privacy policy for access, corrections, or deletion requests.

MSC does not collect personal data from individuals under 16 through its websites or business content. If we do collect data from individuals under 16 in other business activities, we only do so with necessary legal consent and in compliance with applicable laws.

Section 9.1. Your data protection rights

Subject to the law(s) as may be applicable to you related to the data protection rights. which includes exceptions, you have the following rights with regard to the personal data that we collect about you:

• 1. Right to access information: You can ask us for details about the personal data we have about you, which include details about how we use it, who can see it, and any terms related to third-party access.
  2. Right to a copy: You can request a copy of your personal data that we have.
  3. Right to data portability: You can ask us to provide your personal data in a structured, commonly used, and machine-readable format so you can give it to another data controller.
  4. Right to correction: You can ask us to correct or update your personal data if it is incorrect or incomplete.
  5. Right to deletion: You can request that we delete your personal data.
  6. Right to restrict processing: You can ask us to stop or limit the processing of your personal data.
  7. Right to withdraw consent: You can withdraw your consent at any time if we are processing your data based on your consent.
  8. Right to non-discrimination: You have the right to be treated fairly for exercising your rights related to your personal data.
  9. Right to review: You can request that MSC’s Data Protection Officer, or the Data Protection Officer for your jurisdiction, review our response to your request to exercise your data protection rights.
  10. Right to legal remedies: You can seek additional legal actions depending on your location. For instance, you can file a complaint with your data protection authority or start a legal case if you are unsatisfied with our response.

Section 9.2. How do you exercise your data protection rights?

You can contact the Data Protection Officer for your jurisdiction at privacy@microsave.net.

If you would like to exercise your data protection rights with regard to your personal data, you can email your request to us at privacy@microsave.net.

When we receive your request to exercise your data protection rights, we will confirm receipt within the time frame required by law and inform you of the next steps and expected timelines. We may take reasonable steps to verify your identity before we process certain data protection requests, as required by law. This is necessary to ensure your privacy and security. If you use an authorized agent who did not include a power of attorney with the initial request, we may ask for additional proof of the agent’s authority to act on your behalf. This may include a request for a valid written authorization or direct confirmation from you.

Please be aware that applicable laws may include exceptions that can prevent us from granting full access to your personal data or fully complying with your request. If such exceptions apply, we will respond to your request as much as possible and explain any limitations in our compliance.

Section 9.3. How do you unsubscribe to MSC newsletters and alerts?

• 1. Click the unsubscribe link in any MSC email.
  2. Edit your communication preferences in your Microsave.net account (if you have one).
  3. Email us at info@microsave.net.