Privacy Policy - MSSG Analytics

1.Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

2.What Data We Collect and Why

2.1 Visiting the website

This website is hosted by Hetzner Online GmbH (see Section 4.2) on servers located in Germany. When you access the website, your browser establishes a connection to the server, which technically requires the transmission of your IP address to deliver the requested content. We do not operate any server-side access logging: your IP address, browser type, referrer or requested URLs are not recorded, stored or otherwise processed by us. Any technically necessary handling of connection data at the network infrastructure level (e.g. DDoS protection) is carried out by our hosting provider Hetzner under its own responsibility. Handling of connection data at the application level (reverse proxy) is carried out by us as the operator of the unmanaged server. (Art. 6(1)(f) GDPR).

2.2 Waitlist Registration

When you sign up for our MSSG Analytics waitlist, we collect the following personal data:

Providing this data is voluntary. You may withdraw your consent at any time with effect for the future (see Section 7), without affecting the lawfulness of processing carried out prior to withdrawal.

Consent is obtained when submitting the form by checking the following declaration:

“I agree that MSSG may process my TikTok username, and - if provided - my email address for the purpose of documenting product interest and for contact in the context of product validation. I may withdraw this consent at any time by sending an email to privacy@mssg.cloud.”

2.3 Contact Form

The contact form is provided by Tally and only loads after your active consent (see Section 4.1). The content you submit is processed to respond to your enquiry on the legal bases specified in the table below.

Providing your email address and message is required to process your enquiry. Your name is optional.

3.How We Use Your Data

The collected data is used exclusively for the following purposes:

• Documenting interest in our products
• Where applicable, contacting you via TikTok to ask a few questions as part of product validation
• Internal analysis for product development
• Responding to enquiries submitted via the contact form

We do not process your data for automated decision-making or profiling within the meaning of Art. 22 GDPR.

4.Disclosure to Third Parties and Third-Country Transfers

We do not share your data with third parties, with the exception of the service providers listed below, whom we use to provide our services. We have concluded data processing agreements in accordance with Art. 28 GDPR directly with Tally BV and Hetzner Online GmbH. Any further sub-processors engaged by these providers (e.g. Google Cloud or SendGrid in the case of Tally) are bound by corresponding sub-processor agreements under Art. 28(4) GDPR entered into by the respective provider, not directly by us.

4.1 Tally (Form Provider)

The waitlist form and contact form are provided by Tally (Tally BV, Belgium) and embedded via an iframe. To prevent any data transfer to Tally without your knowledge, the form is not loaded automatically. It is only loaded after you actively click “Load form”.

Once you load the form, the following technical data is transmitted to Tally before you enter anything, as is technically necessary to deliver the embedded form:

By clicking “Load form” you consent to this transfer. You may withdraw this consent with effect for the future at any time by not loading the form again. Withdrawal does not affect the lawfulness of any transfer already carried out. The technical connection data transmitted to Tally when a form is loaded (in particular your IP address) is processed by Tally under its own responsibility as part of operating the embedded form. According to Tally' s public documentation, IP addresses are not collected as part of form submissions. As we have no control over Tally's technical infrastructure or server log retention, we cannot specify the retention period for any technical connection data processed by Tally. For further information, please refer to Tally's privacy policy. (see tally.so/help/privacy-policy).

Email notifications for the contact form (SendGrid / USA): When you submit the contact form, Tally sends us an email notification containing your submitted data. This delivery is handled by SendGrid (Twilio Inc., USA), a sub-processor engaged by Tally, which involves a transfer of that data to the USA. The transfer is safeguarded primarily by Twilio Inc.'s certification under the EU-U.S. Data Privacy Framework (Art. 45 GDPR), supplemented by the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) as a contractual fallback. This applies to the contact form only. No such notification or transfer occurs for the waitlist form.

4.2 Hetzner (Website Hosting)

This website is hosted via Hetzner (Hetzner Online GmbH, Germany).

5.Retention Period

Your data will be stored for as long as necessary for the purpose of collection - specifically until you withdraw your consent or until no later than six months after the official product launch. After that, all waitlist data will be permanently deleted, unless another legal basis for continued processing exists. Contact form data is deleted once the enquiry has been fully resolved.

6.Your Rights

Under the GDPR, you have the following rights with respect to us:

• Access (Art. 15 GDPR): You may request information about the data we hold about you at any time.
• Rectification (Art. 16 GDPR): You may request correction of inaccurate data.
• Erasure (Art. 17 GDPR): You may request deletion of your data, provided no statutory retention obligation exists.
• Restriction of processing (Art. 18 GDPR): Under certain conditions, you may request restriction of processing.
• Data portability (Art. 20 GDPR): You may request your data in a commonly used, machine-readable format.
• Objection (Art. 21 GDPR): You may object to the processing of your data.
• Withdrawal of consent (Art. 7(3) GDPR): You may withdraw your consent at any time with effect for the future, without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise your rights, contact: privacy@mssg.cloud

7.Withdrawal of Consent

You may withdraw your consent at any time by sending us an email to privacy@mssg.cloud. Upon receipt of your withdrawal, your data will be deleted from our waitlist without delay.

8.Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a data protection supervisory authority.

The authority responsible for our registered place of business is:

You may also contact the supervisory authority of your habitual residence or place of work.

9.Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse. Access to form submissions stored in Tally is restricted to authorised persons. Our hosting provider Hetzner maintains its own technical and organisational measures, which are reviewed annually by TÜV Rheinland.

10.Changes to This Privacy Policy

We reserve the right to update this privacy policy as needed, for example if our services or the legal situation changes. The date of the last amendment is stated at the beginning of this document.