In this Policy, we, as the Company for Production, Engineering Services and Trade MARVES Branislava DOOEL Skopje (hereinafter referred to as MASTERSPORT), the controller of personal data, will describe in detail your rights to confidentiality and privacy of personal data. This document provides details on the manner in which we collect, process, store and possibly transfer the data we collect and store about you, and why we may need to share some of your personal data with other organizations.

Information on the processing and protection of personal data

With this information we would like to inform you in detail about the processing of your personal data as:

• a visitor to the MASTERSPORT website,

• as a user of MASTERSPORT services and products,

• as a user of the online possibility for ordering and delivering MASTERSPORT products

• as a contracting party when concluding a business cooperation agreement, for the performance of a service or work,

• about the legal basis and purposes for data processing,

• the rights that you can exercise in relation to the processing of personal data.

1. Who is responsible for the processing of your personal data?

MASTERSPORT is the Controller who processes your personal data and is responsible for the processing of your personal data, as well as for establishing data security measures by creating and implementing physical, technical and organizational measures.

2. Purpose of processing personal data are:

• Delivery of your order

• Exercising rights when using MASTERSPORT services

• Receiving and responding to your requests sent by email

3. Legal grounds for processing personal data are:

• Fulfillment of a legal obligation - We process your personal data due to legal obligations (for example, the obligation to keep the personal file of employees).

• Fulfillment of a contractual obligation - We process your personal data also for the purpose of fulfilling the contractual obligations arising from the Employment Agreement and for the purpose of fulfilling other contractual obligations arising from any other commercial Agreement, but within the framework of the regulations set forth in the Law on Personal Data Protection and its by-laws.

• Legitimate interest of the company – The legitimate interest arises from a mutual obligation, with the aim of its realization (for example: realization of a completed order)

• Declaration of consent - The processing of your data, if it is not on a legal basis, can only be carried out on the basis of your express consent. In that case, we will take appropriate measures to promptly, in a transparent, understandable and easily accessible manner, inform you of the purpose of the processing for which we need your consent so that you can make an informed decision about whether you want to give us your consent. Additionally, you will be informed of your legal rights, as well as the manner of withdrawing the consent given on the basis of the Law on Personal Data Protection.

4. What categories of personal data do we process

• Delivery of an ordered product: name, surname, phone, e-mail address, city, postal code, country, region, company and address

• Complaints – name, surname, address, contact details (email and/or phone), details of the product purchased

• Service – name, surname, address, contact details (email and/or phone), details of the product purchased, additional comments

5. For what purpose is this data used

Our goal is to provide you with the product you have ordered. We may also use the information we collect and store about and from you to help us manage and improve our customer service. For example, the information provided may help MASTERSPORT to:

• Provide you with the best service

• Make sure that your order has been received

• Receive a report on the quality of our services

• Investigate complaints, legal claims and adverse incidents

• Meet future customer needs

• If necessary, the human resources department will be asked to prepare statistics on MASTERSPORT activities where your data may also be processed

To which categories of users may we provide personal data

• Insurance companies – for the purpose of exercising rights under your private employee insurance (health, pension or other type of insurance);

• Ministry of Economy (with headquarters: Yuri Gagarin 15, Skopje 1000), for the purpose of regular communication with the Consumer Protection Sector

• Public Revenue Office (with headquarters at Kuzman Josifovski-Pitu 1, 1000 Skopje), for the purpose of paying taxes generated from the sale of products, or paying taxes when organizing prize games

• Banks and other financial institutions – for the purpose of communication and regulation of debt-claim relations between consumers and MASTERSPORT and performing accounting tasks related to MASTERSPORT employees

• Consumer Organization of Macedonia, within the Ministry of Economy (with headquarters: ul. "50-ta Divizija" no. 10A,), for the purpose of regular communication, but most often the information shared is not personalized

• Ministry of Internal Affairs, (with headquarters ul. Dimche Mirchev no. 9, 1000 Skopje) in case of security incidents related to consumers, employees or other persons who could be involved in security incidents

• Personal Data Protection Agency (with headquarters bul. "Goce Delchev" no. 18), in case of security incidents with leakage of information of employees or users

• Financial Police (with headquarters: Ploshtad "Presveta Bogorodica" no. 3

1000 Skopje), for the investigation of irregularities

• Notaries, bailiffs or lawyers, in cases of need for legal assistance

• State Sanitary and Health Inspectorate (with headquarters Mihail Zonkov bb-Skopje), for the purpose of providing details related to carried out or planned inspection

• Holders of public authority, For law enforcement purposes, under certain circumstances, the Company may be required to disclose your personal data if required to do so by law or in response to valid requests from public authorities (for example, inspection services, a court, a prosecutor's office or another competent authority).

The Company may disclose your personal data if such action is necessary to:

• Compliance with a legal norm

• Prevention or investigation of possible errors in the provision of services by the Company

• Protection of the personal safety of service users or the public

Data processors who may have access to personal data

• Debt collection agencies - for the purpose of performing debt collection services in debtor-creditor relationships with consumers

• Marketing agencies - for the purpose of performing activities for the purpose of implementing marketing activities, informing consumers about new products and news related to MASTERSPORT

• External IT service providers - for the purpose of performing services for system maintenance, administration and development of systems and applications, which could have access to consumer consents or employee data

• Accountants - for the purpose of performing activities in the field of accounting, providing employee salaries, payment of duties and taxes.

• External service providers related to data archiving for the purpose of maintaining the archive that may have data about employees or customers

• Product servicing service – AUTOMAZAK (based: ul. Prvomajska 100A, Skopje)

• Product delivery company

MASTERSPORT will ensure that any international transfer of guest information is undertaken only in accordance with the Law on Personal Data Protection and with countries that can ensure an adequate level of protection of the rights and freedoms of our users.

If your data is subject to an international transfer, you will be notified appropriately and in a timely manner.

How long do we keep your data

The length of time we keep your information depends on the type of information in question.

All employee-related data is stored in accordance with the requirements of the Law on Labor Relations and the Law on Archival Operations, i.e. within a time limit of 45 years.

Data obtained from consumers or other customers through the signing of a contract is processed for a period of time until the obligations of that contract are fulfilled.

Data obtained through a consumer declaration of consent is stored until its withdrawal, but not longer than 10 years where it is necessary to renew the consent obtained by the personal data subject.

We keep our records for at least the minimum specified required retention period.

Lawful processing of personal data

We are only permitted to process your information if we have a legal basis for doing so.

The processing of personal data is lawful only if and to the extent that at least one of the following conditions is met:

• the data subject has given consent to the processing of his or her personal data for one or more specific purposes,

• the processing is necessary for the performance of a contract to which the data subject is a party, or in order to take steps at the data subject's request prior to entering into a contract,

• the processing is necessary for compliance with a legal obligation to which the controller is subject,

• the processing is necessary to protect the essential interests of the data subject or of another natural person,

• the processing is necessary for the performance of tasks carried out in the public interest or in the exercise of a public authority vested in the controller by law, the processing is necessary for the purposes of the legitimate interests of the controller or of a third party, except where such interests override the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.

Your rights

In accordance with the Personal Data Protection Law, as a subject whose personal data we process, you have the following rights:

• to be informed about the manner in which personal data is processed, including whether personal data is used in accordance with the purpose for which it was provided, by exercising the right of access to information set out in Article 26;

• to request MASTERSPORT to supplement, amend and/or update it if your personal data is incomplete, inaccurate, or out of date by submitting a request, in accordance with Article 10;

• to request MASTERSPORT to restrict the processing of personal data with appropriate indication of which personal data will be stored, in accordance with Article 10;

• to request MASTERSPORT to delete your personal data, in accordance with Article 10;

• to submit a request to MASTERSPORT to withdraw the consent given for the purposes of processing personal data, in accordance with Article 8;

• to object to the manner in which your personal data is processed.

Changes to the Privacy Policy

MASTERSPORT has the right to update this Privacy Policy at any time. When we do so, we will provide notice on the website and revise the update date at the end of this document. The user agrees that it is his responsibility to periodically check the Privacy Policy and to be aware of the changes.

COOKIE POLICY

Cookies and their use

Cookies are small text files located on your device to collect information. Cookies are used for the normal functioning of certain features of websites that facilitate users' access to content.

The website www.mastersport.mk uses cookies in order for the site to work properly and to improve your overall user experience on our website.

We use them to personalize content and advertisements, improve social media functionality and analyze traffic.

We do not use the information collected through cookies to identify you, but to understand trends in the use of our website in order to improve its performance. Cookies can store information about your usage habits, but they cannot read your personal data or information from your hard drive.

When you first access our website, you will receive a message explaining the use of cookies. After a brief explanation of the reason for using cookies, you have the right to agree or disagree with the use of cookies by checking one of the boxes provided. By checking the "Accept" box, you confirm that you agree to the use of cookies. You can also choose not to consent to the use of cookies by checking the "Customize settings" box. Although accepting cookies is not necessary for the functioning of the website, please note that cookies would provide you with a better browsing experience.

Types of cookies on the website www.mytime.mk

Necessary cookies

Analytics cookies

Functional cookies

Marketing cookies

2.1 Necessary cookies - also sometimes called HTML cookies, are used for navigation and to facilitate your access and use of the site. They are necessary for the transmission of network communications or for the provision of services requested by you. The use of these cookies allows for the safe and efficient use of cookies. Our website requires the use of these cookies to properly operate or provide necessary functions in connection with the services you request. For example, our website uses these cookies to identify confidential web traffic. These cookies do not contain any personal data and cannot be switched off with these settings.

2.2 Analytics cookies - these cookies allow us to improve the operation of our website by allowing us and our third party service providers to recognize and count the number of visitors and to see how visitors move around our website when using it. These cookies generate aggregate statistics that are not linked to an individualized profile.

2.3 Functional cookies - these cookies are useful for improving your website experience, but are not essential. For example, these cookies help us recognize that you are returning to our website and personalize content for you.

2.4 Marketing cookies – these may allow us to record information about your visit to our website in order to make our website and the advertising displayed on it more relevant to your interests. They help us understand the purchasing behavior of our visitors, which helps us to continue to improve our website for your benefit. Marketing cookies may also be third-party cookies. The information collected through these cookies may be used for marketing activities on Google Ads, Facebook, Instagram or for advertising on other websites that a user who has previously visited our website will visit. Google, Facebook, Instagram and other third parties display AdWords, i.e. advertisements across various websites and applications that the user visits and uses. These advertisements are also based on previous visits of users to our website using cookies. For more information about cookies set by third parties, please see their own privacy and cookie policies.

Contact

If you would like your data to be corrected or deleted or if you have any questions or suggestions in the field of personal data protection, you can contact us at the following email address: kontakt@mastersport.com.mk

We would like to point out that the email address from which you contact us and other personal data, as well as the content of your requests or suggestions, will not be used for any other purpose than to respond to your request, question or suggestion sent to us.