PRIVACY POLICY

1. Introduction · 2. Who We Are · 3. Information We Collect · 4. How We Collect Information · 5. How We Use Your Information · 6. Legal Basis for Processing · 7. Data Retention · 8. Data Sharing and Disclosure · 9. International Data Transfers · 10. Your Rights · 11. Cookies · 12. Children’s Privacy · 13. Data Security · 14. Changes to This Policy · 15. Contact Us · 16. Supervisory Authority

The real-time blueprint of your entire IT landscape used to map, plan, execute, and monitor IT transformation projects.

1. Introduction

Mugato ApS ("we," "us," or "our") is committed to protecting the privacy of individuals who visit our website and use our services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://mugato.com, including any other media form, media channel, mobile website, or mobile application related or connected to it.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, pleased do not access the site or use our services.

2. Who We Are

Company Name: Mugato ApS
Address: Fruebjergvej 3, 2100 København Ø, Denmark
Website: https://mugato.com
Email: info@mugato.com

3. Information We Collect

3.1 Personal Information

We may collect personal information that you voluntarily provide when you:

• Register on our website
• Subscribe to our newsletter
• Complete forms on our website
• Request information or assistance
• Participate in contests or surveys

This information may include:

• Name
• Email address
• Phone number
• Job position
• Company name
• Username and password

3.2 Technical and Usage Information

When you visit our website, we may automatically collect certain information about your device and usage patterns, including but not limited to:

• IP address
• Browser type and version
• Operating system
• Device information
• Geographic location
• Entry and exit pages
• Time stamps and duration of visits
• Clickstream data
• Navigation patterns
• Referral sources

4. How We Collect Information

4.1 Direct Collection

We collect information directly from you when you:

• Fill out forms on our website
• Create an account
• Subscribe to communications
• Correspond with us by phone, email, or otherwise

4.2 Automated Collection Technologies

We use technologies that automatically collect information, including:

• Cookies: Small data files placed on your device to improve your experience and analyze website usage.‍
• Analytics Tools: Used to help understand how users engage with our website.

5. How We Use Your Information

We use the information we collect for various purposes, including but not limited to:

• Provide and improve our website
• Customize the website experience
• Analyze usage trends and patterns
• Creating promotions and marketing content based on analysis
• Enable use of our services
• Processing and responding to requests and inquiries
• Sending direct marketing content to data subjects
• Maintaining and improving the security of our websitey
• Comply with legal obligations

6. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal information based on the following legal grounds:

• Consent: When you have given clear consent for us to process your personal information for a specific purpose.
• Contractual necessity: When processing is necessary for the performance of acontract to which you are a party.
• Legitimate interests: When processing is necessary for the purposes of our legitimate interests, except where such interests are overriden by your interests of fundamental rights.
• Legal obligations: When processing is necessary for compliance with a legal obligation to which we are subject.

7. Data Retention

We will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy, or to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

We generally follow these retention periods:

• Website visitors: 9 months after the latest website visit
• ‍Persons using our services or subscribing to newsletters: 2 years after unsubscribing from the newsletter‍
• Persons requesting information on our services or otherwise contacting us: 9 months after the contact with the data subject‍
• Employees and other contact persons of our business partners and suppliers: 2 years after the termination of the agreement with the contact partner or supplier

We may retain certain information for longer periods if required by relevant tax laws, marketing practices laws, or as necessary to handle civil and criminal claims, including in relation to statutes of limitations.

8. Data Sharing and Disclosure

We may share your information with:

8.1 Service Providers

Third-party vendors, consultants, and other service providers who perform services on our behalf, such as hosting providers, analytics companies, and customer service providers.

8.2 Legal Requirements

If required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

8.3 Business Transfers

In connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.

9. International Data Transfers

Your information may be transferred to, and maintained on, computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction.

We transfer your personal data to third countries outside the EU/EEA, including the United States of America. Such transfers are based on one of the following legal mechanisms:

• Standard Contractual Clauses adopted by the European Commission (https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-dataprotection/standard-contractual-clauses-scc_en)
• Adequacy decisions from the European Commission (https://ec.europa.eu/info/law/law-topic/dataprotection/international-dimension-data-protection/adequacy-decisions_en)
• Recipients' self-certifications under the EU-U.S. and/or Swiss-U.S. Privacy Shield Frameworks (https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-dataprotection/eu-us-data-transfers_en)
• Any other applicable legal basis for such transfer

If you are located outside Denmark and choose to provide information to us, please note that we transfer the information to Denmark and process it there. Your submission of such information represents your agreement to that transfer.

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and that no transfer of your personal information will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.

10. Your Rights as a Data Subject

Under the GDPR, you have several rights regarding personal data relating to you:

• Right to Access: You have the right to access your personal data as well as additional information about how it's processed. ‍
• Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete. ‍
• Right to Erasure: In certain cases, you have the right to have personal data deleted before the end of our retention period. ‍
• Right to Restrict Processing: In certain cases, you have the right to have the processing of your personal data restricted. If you enforce this right, we will only process personal data (except for storage) with your consent, or to establish, exercise or defend a legal claim, or to protect a person or substantial public interests. ‍
• Right to Data Portability: In certain cases, you have the right to receive or transmit to third parties the personal data which you have provided to us in a structured, commonly used, and machine readable format. ‍
• Right to Object: In certain cases, and on grounds relating to your particular situation, you have the right to object at any time to the processing of your personal data. You may also object to our processing of your personal data for direct marketing purposes. ‍
• Right to Withdraw Consent: You have the right to withdraw any consent that you have given to the processing of your personal data, without affecting the lawfulness of processing based on consent before its withdrawal. ‍
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority (see Section 16).

To exercise any of these rights, please contact us using our contact information in Section 15.

11. Cookies

11.1 What Is a Cookie?

A cookie is a small electronic text file that is stored on and can be accessed via a user's computer or other electronic terminal equipment (e.g. smartphone, tablet, etc.) used to access our site. Cookies enable website optimization as they identify your terminal equipment over time.

Cookies cannot be used to spread virus, malware, or other harmful software.

11.2 Types of Cookies We Use

Cookies are categorized as "session" cookies or "persistent" cookies.

• Session cookies make it possible to navigate through our website efficiently and keep track of your behavior from page to page. Session cookies are erased when your web browser is closed.
• Persistent cookies store user preferences for later visits. They are still stored in your terminal equipment when you restart your browser.

11.3 Third-Party Cookies

Some of our business partners place cookies on your terminal equipment when you use www.mugato.com. Some of these cookies are session cookies while others are persistent cookies. For a detailed description of third parties which place cookies when you use our website please contact info@mugato.com.

11.4 Managing Cookies

You can avoid cookies by declining to accept cookies on www.mugato.com. You can also generally prevent cookies from being stored and accessed on your equipment by setting your browser to not accept cookies.

You can delete existing cookies by following the guide on cookie deletion available at https://www.aboutcookies.org/how-to-manage-and-delete-cookies.

Please note that if you do not accept cookies from our website or later delete these cookies, we may not be able to offer a number of our services to you.

12. Children’s Privacy

Our website is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at info@mugato.com.

13. Data Security

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.

14. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. You are advised to review this Privacy Policy periodically for any changes.

15. Contact Us

If you have any questions about this Privacy Policy, please contact us:
Mugato ApS
Fruebjergvej 3, 2100 København Ø, Denmark
Email: info@mugato.com
Phone: +45 89 80 88 81

16. Supervisory Authority

If you are a resident of the European Economic Area (EEA) and you believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection supervisory authority. You can find their contact details here: https://ec.europa.eu/justice/dataprotection/bodies/authorities/index_en.html

In Denmark, the supervisory authority is:
Danish Data Protection Agency (Datatilsynet)
Carl Jacobsens Vej 35, 2500 Valby, Denmark
Email: dt@datatilsynet.dk
Phone: +45 33 19 32 00
Website: www.datatilsynet.dk