DATA PROTECTION DECLARATION

The confidential treatment of your data has the highest priority for us. We want to provide you with the greatest possible protection of your privacy. We process the data you provide through the use of the "Mamala" platform/ website exclusively within the scope of the consent you have given us as well as the legal data protection regulations. The processing is in accordance with this data protection declaration.

The data protection declaration will be updated if necessary. We will inform you about the updated conditions on the screen and then ask you to accept the changed conditions.

Status of data protection declaration: February 2020

1. RESPONSIBLE AUTHORITY

Mamala Inc. represented by the CEOs

Kenneth David Roach
Anna-Catarina Seminara

Nordhäuserstrasse 65 64380 Roßdorf Germany

Contact: https://mamala-family.com/contact/

2. DATA COLLECTED

We collect personal data on the basis of your consent, to fulfil the contract and/or to fulfil a legal obligation.

2.1. Registration details

If you would like to use the platform/website "Mamala", you must register as a user. For the registration we collect the following information:

• First and Last Name
• E-mail address
• Password
• IP-address

2.2. usage data

We also collect the following data:

• Device data
• Firmware version
• Application version of the browser

2.3 Information on the conclusion of a paid contract

When concluding a paid contract, you will be required to collect the following data:

• Birthday
• Date of delivery
• Declaration of a positive final examination
• Results of the entry-level test
• Training experience

In order to be able to offer you an optimal training plan that is perfectly adapted to your needs and to personalize your user profile, you have the possibility to provide further information:

• Number of births
• Type of birth
• Condition of the pelvic floor
• Condition of rectal diastasis
• Symphysis problems
• Breastfeeding situation
• Possibility of prone position
• Location data
• Profile picture

Some of the personal data collected are sensitive personal data, as some of the data can be used to draw conclusions about your health status (health data).

Consent text Data processing Subscription contract:

"By selecting "I agree", you confirm that you have carefully read and understood the Privacy Policy and consent to the processing of your personal data, including your health data (sensitive personal data), in accordance with the provisions of this Privacy Policy. You may revoke this consent at any time.

3. PURPOSE OF DATA USE

We process the personal data provided by you via the platform/website in order to provide the services or functions of the "Mamala" platform/website that you have requested. The obligatory details upon conclusion of a contract with costs serve to verify that you use the platform/website in accordance with our General Terms and Conditions and Terms of Use. Without the obligatory details, the services of "Mamala" cannot be used. Based on the additional voluntary details, "Mamala" calculates individually tailored training plans for you using complex algorithms.

4. DATA TRANSMISSION

Personal data will only be transferred to third parties or contractors of commissioned data processing if this is necessary for the respective purposes. Data will only be transferred to third countries if we expressly refer to this in this data protection declaration.

We take appropriate measures to ensure that the third parties maintain an adequate level of protection for personal data.

5. DATA DELETION

Stored personal data will be deleted if you revoke your consent to storage, if the information is no longer required to meet the purpose for which it was stored or if storage is or becomes illegal for other legal reasons. If your data is deleted or blocked, however, you can no longer use the corresponding services.

The voluntary data stored on our server will be deleted if you request us to do so. The request is made by simple message via our contact form: https:// mamala-family.com/contact/. In this case, only the obligatory information remains on the server. You can only delete these if you delete your account as a whole or if you request this.

6. PROCESSING OF PERSONAL DATA FOR PROMOTIONAL PURPOSES

We will be happy to inform you about topics concerning your personal Mamala Workout and our offer in our newsletter, if you have given us your consent or if it complies with legal regulations.

By registering (double opt-in procedure) for the newsletter, you agree to receive the newsletter. The collected data will only be used for sending the newsletter. Our newsletter is sent via Zoho Campaigns https://www.zoho.com/ campaigns/zc-terms.html

You can revoke your consent to receive the newsletter and the associated data collection and storage at any time. You can revoke your consent via a link in the newsletter or by informing Mamala Inc., Nordhäuserstrasse 65, 64380 Roßdorf, Germany or via our contact form: https:// mamala-family.com/contact/

Declaration of consent for the newsletter:

"I agree that Mamala Inc. to process my personal data in order to keep me regularly informed about news regarding my training, offers from Mamala Inc. as well as about training, nutrition and being a mom by e-mail. The processing of my personal data is carried out in accordance with the provisions of the privacy policy. I can withdraw my consent to the Mamala Inc. at any time.

7. COOKIES AND WEBSITE TRACKING

We use temporary session cookies and permanent cookies. Cookies are text files that are stored on your browser we use cookies and other data collection tools to collect information that helps us personalize the Mamala website.

We use the following tools to do this:

7.1 Google Analytics

We use Google Analytics on our website, a web analysis service of Google Inc. (hereinafter) "Google". Google Analytics enables an analysis of the use of the website by the user. For example, information on the operating system, the screen, your IP address, and the website pages viewed, the date and time of your visit to our website are recorded. The information generated about your use of the website is usually transferred to a Google server in the USA and stored there. We have activated IP anonymisation. Therefore, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before transmission. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of the website, Google will use this information to evaluate your use of the website, to compile reports on the activities within the app and to provide further services to the app provider in connection with the use of the website. The IP address transmitted by Google Analytics will not be merged with other data from Google.

You can prevent the collection of data relating to your use of the website (including your IP address) to Google and the processing of this data by Google by deactivating Google Analytics in your browser.

Further information on terms of use and data protection can be found at http://www.google.com/analytics/terms/de.html bzw. unter https://www.google.de/intl/de/policies/. We would like to point out that Google Analytics has been configured in the website in such a way that an anonymised recording of IP addresses (so-called IP masking) is guaranteed.

7.2. Google AdSense

We use Google AdSense on our website, a service for integrating advertisements. Google AdSense also uses so-called Web Beacons (invisible graphics). Through these web beacons information such as visitor traffic can be evaluated.

The information generated by cookies and web beacons about the use of the website (including your IP address) and delivery of advertising formats are transmitted to a Google server in the USA and stored there. This information may be passed on by Google to contractual partners of Google. However, Google will not merge your IP address with other data stored by you.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

7.3. Facebook Custom Audiences

We use Custom Audiences on our website, a service from Facebook. In principle, a non-reversible and non-personal checksum (hash value) is generated from your usage data, which can be transmitted to Facebook for analysis and marketing purposes.

For more information about the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your settings options for protecting your privacy, please see the following pages:

Facebook Link 1
Facebook Link 2

If you wish to contradict the use of Facebook Custom Audiences, please log off from our web services.

8. DATA SECURITY

We protect your personal data from the risks associated with data processing, in particular unauthorized access, use or publication. For this purpose, we maintain appropriate technical and organizational measures that are based on the current state of the art. Your personal data is always transmitted in encrypted form (SSL).

9. YOUR RIGHTS

9.1 Right of revocation

You have the right to revoke your consent to the processing of your personal data at any time with effect for the future.

A revocation shall not affect the legality of the processing carried out on the basis of consent until the revocation.

9.2. Right of access to information

You have the right to request information about the stored personal data free of charge. Upon your request, the information can also be provided electronically.

9.3. Correction, deletion and restriction of data

You have the right to request the correction, deletion or limitation of personal data concerning you. If your data is deleted or blocked, however, you will no longer be able to use the corresponding services.

Your right to deletion may be excluded by legal storage obligations.

9.4. Data export

You have the right that we provide you with data, which we process with automatic procedures or in whose use you have consented, in machinereadable form or transfer it to other responsible parties.

9.5. Exercise of rights

You can exercise your rights by informing Mamala Inc., Nordhäuserstrasse 65, 64380 Roßdorf, Germany or via our contact form: https://mamala-family.com/contact/

If you have any complaints, you can also contact the responsible supervisory authority for data protection in Ansbach.