PRIVACY POLICY

Data Protection Declaration for the Processing of Personal Data of Users in the European Economic Area

Effective Date: September 2025

Name and Address of Controller

The controller (also referred to as "Maxon"; "we", "us" or "our") in accordance with the General Data Protection Regulation (GDPR) and other national data protection regulations of European Union Member States as well as other data protection regulations is:

Maxon Computer GmbH
Basler Str. 5
61352 Bad Homburg vor der Höhe, Germany

With respect to certain processing activities, we jointly determine the purposes and means of processing together with other companies, i.e., as so-called joint controllers:

With respect to the transfer of personal data within the company group or to partner companies, Maxon and Recipients are joint controllers as further detailed in the section on “Transfer of personal data to other external recipients (third parties)” below.
With respect to Facebook Custom Audience, Maxon and Meta Platforms Ireland Limited are joint controllers as further detailed in the section on "Facebook Custom Audience" below.
In the context of email marketing towards event and raffle participants, Maxon and the relevant event organizers/raffle co-operation partners are joint controllers as further detailed in the section on "Other advertising" within the "By email" subsection below.

You may contact the controller at [email protected] with respect to questions about this Data Protection Declaration, the processing of your personal data in general and to exercise your rights towards the controller as outlined in the section on the rights of data subjects below.

Name and Address of Data Protection Officer

The data protection officer of the controller is:

FPS Rechtsanwaltsgesellschaft mbH & Co. KG
Eschersheimer Landstraße 27
60322 Frankfurt am Main, Germany
Phone: +49 69 95957-0
E-Mail: [email protected]

General Data Processing

Scope of processing of personal data
We process personal data that we receive in the course of your visit to our Website, if you contact us or use our services.

Legal basis for the processing of personal data
When processing personal data, we rely on the following legal bases:

The performance of a contract to which the affected person (the "data subject") is a party, Art. 6 para. 1 sentence 1 lit. b GDPR (this also applies to processing operations that are necessary for the implementation of pre-contractual measures).
Legitimate interests of our company or a third party, Art. 6 para. 1 sentence 1 lit. f GDPR, provided that the interests, fundamental rights and freedoms of the data subject do not override the former mentioned interests.
Fulfillment of legal obligations to which our company is subject, Art. 6 para. 1 sentence 1 lit. c GDPR.
Consent, Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR.

The purposes for which we process personal data, relevant legal bases and specific legitimate interests (where legitimate interests are the basis for processing) are stated further below.

Data processing by processors
In some cases, we use external service providers to process personal data (e.g., service providers for customer management, service providers for invoice management, IT service providers). These have been carefully selected by us and commissioned in accordance with data protection requirements, are bound by our instructions and are regularly monitored.

Transfer of personal data to other external recipients (third parties)
Various external recipients, which are not engaged as processors as outlined in the section above "Data processing by processors", may receive your personal data. Such external recipients are also called third parties. A data transfer to these external recipients may take place for the performance of a contract (Art. 6 para. 1 sentence 1 lit. b GDPR), if a corresponding consent has been given (Art. 6 para. 1 sentence 1 lit. b , Art. 7 GDPR), based on our legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR) or if it is required by law (Art. 6 para. 1 sentence 1 lit. c GDPR).

Recipients within the company group:
NEMETSCHEK SE - Konrad-Zuse-Platz 1 - 81829 Munich - Germany
Maxon Computer Inc. - 515 Marin St., Ste 322, Thousand Oaks, CA 91360 - USA
Maxon Computer Ltd. - 114 High Street, Cranfield - Bedfordshire, MK43 0DG - United Kingdom
Maxon Computer Canada Inc. - 434, rue St.-Pierre, bureau 400, Montréal, Québec, H2Y 2M5 - Canada
Maxon Computer KK - Hiroo 5-22-3, Hiroo Nishikawa Bldg. 2F - 150-0012 Shibuya-ku, Tokyo – Japan

Maxon may transfer personal data within the company group for the processing purposes listed in the section "Specific purposes of processing (including legal bases and legitimate interest)".

Legal basis for the processing of personal data in this context is consent (Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR), insofar as we have obtained consent for such processing, the performance of a contract (Art. 6 para. 1 sentence 1 lit. b GDPR), insofar as the processing is related to a contract with the person whose data is transferred, or our legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR) in transferring the data within the company group for internal administrative purposes.

Further information on international transfer of your personal data can be found under “Transfer to third countries”.

Transfer of personal data to partner companies (authorized resellers/distributors)

For contractual purposes
A transfer of your personal data to third parties may be necessary for the provision of the service. Your personal data will then be transferred to the authorized distributor or reseller who is responsible for your geographic region and for the provision of services. According to your language selection on the website, your personal data will be forwarded to one of these distributors or resellers.

The legal basis for the transfer of your personal data in this case is performance of a contract (Art. 6 para. 1 sentence 1 lit. b GDPR).
For advertising purposes
General information:
Your personal data will only be transferred to third parties for advertising purposes with your express consent. Your personal data will then be transferred to the authorized distributor or reseller who is responsible for your geographic region. This distributor will then send you general information in connection with Maxon products via email. According to your language selection on the website or according to the event location where the consent is obtained, your personal data will be forwarded to one of these distributors or resellers.

The legal basis for the forwarding of your personal data for advertising purposes is consent (Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR).

You can withdraw your consent to the forwarding of your personal data for advertising purposes at any time with effect for the future. An informal communication, e.g., by email to [email protected], is sufficient for the withdrawal of consent. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal (see also "Rights of data subjects").

Joint control in the context of transfer of personal data to authorized resellers for advertising purposes:

We and the authorized reseller (each also referred to as "Joint Controller") jointly process the personal data identified in the "General information" sub-section above ("Joint Data") in respect of the subsequent sharing of the data by us for the purpose of enabling the authorized reseller to carry out advertising purposes (i.e., as joint controllers). For any other processing activities we and the authorized reseller remain separate controllers.

The legal basis for the sharing of this personal data is consent (Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR).
You have the rights described in the "Rights of data subjects" section of this Privacy Policy. Please contact [email protected] if you would like to exercise your rights towards us or one of the other Joint Controllers. Alternatively you can also contact the other Joint Controllers.

The Joint Controllers have determined their responsibilities for compliance with the obligations under GDPR by means of an arrangement between them ("JC Arrangement").

Under the JC Arrangement, the Joint Controller other than Maxon are, in particular, responsible for:
Making available information on the processing of personal data in the context of collection and sharing of personal data with Maxon for the purpose of enabling Maxon to carry out email marketing activities.
Handling and fulfilling requests related to rights described in the "Rights of data subjects" section of this Privacy Policy.

Under the JC Agreement, every Joint Controller, in particular, is responsible for:
Making available information of the essence of the JC Arrangement to affected data subjects.
Ensure that they comply with all legal retention and deletion requirements in respect to the Joint Data they hold.
Determining appropriate security measures to protect personal data as well as documenting, reviewing and updating these measures as necessary in respect of the Joint Data they hold.
Notifying the competent data protection authority and affected individuals about data breaches where required under GDPR in respect of Joint Data which is affected by a personal data breach and which they hold.
Designating a contact person for data protection queries.

If you have any questions about the processing of your personal data under joint control or would like to receive information about the other Joint Controllers processing your personal data, please contact us at [email protected].

Further information on international transfer of your personal data can be found under “Transfer to third countries”.

Other external third party recipients
We may transfer personal data to third parties (e.g. authorities, courts, lawyers, auditors, external agencies to combat piracy) where necessary to safeguard our rights or comply with legal obligations to which we are subject.

The legal basis for the forwarding of your personal data for the purpose of safeguarding our rights is our legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR) in establishing, exercising and defending legal claims. The legal basis for the forwarding of your personal data for the purpose of complying with legal obligations to which we are subject is compliance with the respective legal obligations (Art. 6 para. 1 sentence 1 lit. c GDPR).

Transfer to third countries
A transfer of personal data to countries outside the European Economic Area ("EEA") only takes place if the requirements of Art. 44 et seq. GDPR are met. A third country is a country outside the EEA in which the GDPR is not directly applicable.

We transfer your personal data to the USA or other third countries only if either

An adequacy decision has been adopted by the EU Commission with respect to the relevant third country (Art. 45 para. 1 GDPR), which particularly is the case for Canada (regarding commercial organizations), Japan and the United Kingdom;
sufficient guarantees are provided by the recipient in accordance with Art. 46 GDPR for the protection of the personal data – for example, the conclusion of standard contractual clauses between us and the recipient with appropriate additional security measures (Art. 46 para. 2 lit. c GDPR) or binding internal data protection rules approved by the competent data protection authorities (Art. 46 para. 2 lit. b GDPR); in this way, the recipient assures us that it will provide sufficient protection for the data and thus ensure a level of protection comparable to the GDPR; or
one of the exceptions listed in Art. 49 GDPR applies – for example, your explicit consent (Art. 49 para. 1 lit. a GDPR) or if the transfer is necessary for the fulfillment of contractual obligations between you and us (Art. 49 para. 1 lit. b GDPR).
The EU Commission has not issued an adequacy decision for the USA pursuant to Art. 45 para. 1 GDPR. According to the European Court of Justice in its judgment of 17 July 2020 (Case C-311/18, "Schrems II"), there is no level of data protection in the USA that would be comparable to that in the EU. When personal data is transferred to the U.S., there is a risk that U.S. authorities may gain access to the personal data on the basis of the PRISM and UPSTREAM surveillance programs based on Section 702 of FISA (Foreign Intelligence Surveillance Act) and on the basis of Executive Order 12333 or Presidential Police Directive 28. According to the European Court of Justice, EU citizens have no effective legal protection against such access in the USA or the EU. Due to this, we intend – where necessary – to agree on additional security measures with relevant recipients to ensure an adequate level of data protection.

If you would like to receive further information on international transfers of personal data or a copy of the relevant guarantees (Art. 46 GDPR) referenced above, please contact us at [email protected].

Functions of the Website

If you visit or use our website purely for informational purposes, i.e., if you do not register or otherwise transmit information to us, we only collect the personal data that your browser or device transmits to our server. If you wish to view our website, we may collect the following data, that is technically necessary for us to display our website to you and to ensure stability and security:

IP address,
Date, time and duration of the visit,
Content of the request (specific page),
Access status/http status code,
Website from which the request comes,
Browser,
Operating system.

The legal basis for the processing of personal data for the use of our website are our legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR) in making the website available in order to present and develop our business and in resolving disruptions regarding our website and ensuring the security of the website and our systems.

The processing of personal data is technically necessary for us to display our website to you and to ensure stability and security.

Registration on Our Website

On our website, we offer you the opportunity to register for a MyMaxon account.

a. At the time of registration for a MyMaxon account, the following personal data may be processed:

First and last name,
Email address,
Country in which you are located.

The provision of further data, e.g., telephone number and language, is voluntary.

Various external recipients may receive your personal data. Further information on this can be found under "Data processing by Processors" and "Transfer of personal data to other external recipients (third parties)".

The legal basis for the processing of personal data in the context of the registration for a MyMaxon account is performance of a contract, including implementation of pre-contractual measures (Art. 6 para. 1 sentence 1 lit. b GDPR).

Your registration for a MyMaxon account is necessary for the provision of certain content and services and for the implementation of pre-contractual measures and the fulfillment of contracts. You must register for a MyMaxon account in order to be able to purchase our products online and to download our software.

The personal data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected (or otherwise processed) and there are no legal – in particular trade and tax law – retention obligations and they are not required for the establishment, exercise or defense of legal claims. This is generally the case for the personal data collected during the registration process when the registration on our website is cancelled or modified.

b. The personal data collected during the registration process for a MyMaxon account will in individual cases be linked to personal data collected in other systems. Detailed information on the linking of personal data can be found further down in this data protection declaration for the respective system.

Data Processing Related to Desktop Versions of Our Software

Downloading and activating a trial version
You can download and activate a trial version of our product on our website. To do so, you must register for a MyMaxon account.

In addition to the data processed during registration for a MyMaxon account, the following personal data may be processed:

System/Machine ID.

The legal basis for the processing of personal data in the context of downloading and activating a trial version of our product is performance of a contract (Art. 6 para. 1 sentence 1 lit. b GDPR). Exceptionally, to the extent personal data of persons, who are not our contractual partners, will be processed in this context (e.g. contact persons at business customers), the legal basis is our and our contractual partner's legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR) in efficiently and productively carrying out the contract between us and the contractual partner.

The processing of personal data in the context of downloading and activating the trial version serves the execution of the End User License Agreement (“EULA”), the provision of the software for download and assignement of the license as well as to ensure that a person downloads the respective trial version of our product only once.

In order to activate the trial version, you must consent to receiving personalized advertising.

The personal data is deleted as soon as it is no longer required to achieve the purpose for which it was collected (or otherwise processed) and there are no legal – in particular trade and tax law – obligations to retain it and they are not required for the establishment, exercise or defense of legal claims.

Further information on data processing in connection with the granting of advertising consent by you can be found under "Other advertising".

Purchase of licenses online
You can purchase licenses of our products online. The prerequisite for this is registration for a MyMaxon account.

Note: The purchase itself as well as the payment will be processed accordingly by the external service providers Verifone Payments B.V. dba 2Checkout, with its office at Singel 250, 1016AB Amsterdam, The Netherlands, or Avangate, Inc., with its registered address at CSC, 251 Little Falls Drive, Wilmington, New Castle, DE 19808, USA, depending on the country in which the customer is located; customers from the US are processed by Avangate, Inc., customers from the rest of world are processed by Verifone Payments B.V. dba 2Checkout. Verifone Payments B.V. dba 2 Checkout or Avangate, Inc. will be the contractual partner. Verifone Payments B.V. dba 2Checkout and Avangate, Inc. are each a separate controller with respect to processing of your personal data in the context of the purchase.

In addition to the data processed during registration for a MyMaxon account, the following personal data may be processed:

First and last name of the customer,
Address,
System/Machine ID.

Various external recipients may receive your personal data. Further information on this can be found under "Data processing by processors" and "Transfer of personal data to other external recipients (third parties)".

The legal basis for the processing of personal data in the context of the purchase of licenses of our products is performance of a contract (Art. 6 para. 1 sentence 1 lit. b GDPR). Exceptionally, to the extent personal data of persons, who are not our contractual partners, will be processed in this context (e.g. contact persons at business customers), the legal basis is our and our contractual partner's legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR) in efficiently and productively carrying out the contract between us and the contractual partner.

The processing of personal data during the purchase of licenses of our products via our website serves the execution of the purchase and the EULA as well as the provision of the software for download and assignement of the license. We also process your personal data to inform you about the expiration of your temporary licenses.

Purchase of licenses via Resellers/Distributors
It is possible to purchase licenses for our products through Resellers/Distributors.

In doing so, the following personal data may be processed:

First and last name,
Company, if applicable,
Address, if applicable,
Email address,
System/Machine ID.
The provision of further data, e.g., telephone and fax number, is voluntary.

The legal basis for the processing of personal data in the context of the purchase of licenses for our products via Resellers/Distributos is performance of a contract (Art. 6 para. 1 sentence 1 lit. b GDPR). Exceptionally, to the extent personal data of persons, who are not our contractual partners, will be processed in this context (e.g. contact persons at business customers), the legal basis is our and our contractual partner's legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR) in efficiently and productively carrying out the contract between us and the contractual partner.

The processing of personal data of a direct purchase of our products serves to execute the purchase and the EULA as well as to make the software available for download and to assign the license. We also process your personal data to inform you about the expiration of your temporary licenses.

The personal data is deleted as soon as it is no longer required for the purpose for which it was collected and there are no legal – in particular trade and tax law – retention obligations and they are not required for the establishment, exercise or defense of legal claims.

Direct purchase of licenses
It is also possible to purchase licenses for our products directly from us.

In doing so, the following personal data may be processed:

First and last name,
Company, if applicable,
Address,
Email address,
Payment details,
System/Machine ID.
The provision of further data, e.g., telephone and fax number, is voluntary.

The legal basis for the processing of personal data in the context of the direct purchase of licenses for our products is performance of a contract (Art. 6 para. 1 sentence 1 lit. b GDPR). Exceptionally, to the extent personal data of persons, who are not our contractual partners, will be processed in this context (e.g. contact persons at business customers), the legal basis is our and our contractual partner's legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR) in efficiently and productively carrying out the contract between us and the contractual partner.

The processing of personal data of a direct purchase of our products serves the fulfillment of pre-contractual (informational) obligations, to execute the purchase and the EULA, the invoicing and payment processing, and to make the software available for download and assign the license. We also process your personal data to inform you about the expiration of your temporary licenses.

Educational license for students and teachers
Students and teachers can download and activate the license of our products for educational purposes from our website as part of the classroom license of their university. This requires only the registration for a MyMaxon account.

Students and teachers can also purchase the license of our products for educational purposes from our website at the discounted price indicated on the website. This requires registration for a MyMaxon account and the verification of the student or teacher status.

Note: Verification of whether the interested party meets the requirements as a student or teacher is handled by the external service provider SheerID, Inc., 1300 SW Fifth Avenue, Suite 2100, Portland, Oregon 97201 USA (“SheerID”) with its sub-processors including but not limited to Onfido Ltd, 14-18 Finsbury Square, 3rd Floor, London EC2A 1AH. United Kingdom (“Onfido”). SheerID and its processors are responsible for processing your personal data as part of the verification process.

In addition to the data processed during registration for a MyMaxon account, the following personal data may be processed:

System/Machine ID,
Verification documents related to your student or teacher status (e.g., university/college enrolment papers of students, academic institution ID card of teachers),
Biometrics data (e.g., government ID, passport and facial scanning that enables to verify you as a student or a teacher).

SheerID and its processors shall be responsible for processing the biometrics data and verification documents listed above. We will not receive any sensitive personal data collected and processed by SheerID nor its processors.

The legal basis for the processing of personal data for downloading and activating the license for educational purposes is performance of a contract (Art. 6 para. 1 sentence 1 lit. b GDPR) and legitimate interest of the company in order to verify student or teacher status accurately (Art. 6 para. 1 sentence 1 lit. f GDPR).

The processing of personal data when purchasing licenses of our products via our website serves to execute the purchase and the EULA as well as to make the software available for download and assign the license.

The personal data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected and there are no legal – in particular trade and tax – retention obligations and they are not required for the establishment, exercise or defense of legal claims. Verification documents collected and processed by SheerID shall be deleted after 7 days after the completion of the verification process. Biometrics data collected and processed by SheerID’s sub-processor Onfido shall be deleted after 48 hours after completion of the verification process.

Please find more information in SheerID’s and Ondifo’s processes in their Privacy Policies by clicking the following links:
SheerID: https://www.sheerid.com/global-privacy-policy/
Onfido: https://onfido.com/privacy/

Mobile Apps

To use our mobile apps, you must register for a MyMaxon account.

In addition to the data processed during registration for a MyMaxon account, the following personal data may be processed:

System/Machine ID.

The legal basis for the processing of personal data in the context of using our mobile apps is performance of a contract (Art. 6 para. 1 sentence 1 lit. b GDPR).

The processing of personal data in the context of using our mobile apps serves the execution of the EULA and the assignement of the license.

In order to use our mobile Apps, you might be obliged to consent to receiving advertising.

Further information on data processing in connection with the granting of advertising consent by you can be found under "Other advertising".

Moves by Maxon
You can download the app "Moves by Maxon" via Apple Store. The prerequisite for using this app is registration on our website. Further information on the registration on our website can be found under "Registration on our website".

Via "Moves by Maxon" users can capture their facial expressions ("Captured Data") and store the Captured Data on their devices for the purpose of creating face animation with different poses in a Cinema 4D desktop application. Unless users themselves transfer the Captured Data to other devices/applications, the Captured Data stays on the user's device and is visible as well as accessible only from the Files folder in the iOS device, specifically inside the Moves folder. In any case, Maxon does not store, use or share the Captured Data with any third party. The legal basis for the processing of Captured Data a is performance of a contract (Art. 6 para. 1 sentence 1 lit. b GDPR). The Captured Data can be deleted by the user at any time either within the app or via the Files folder on the IOS device.

ZBrush for iPad
You can download the app "ZBrush for iPad" via Apple Store on iPad. The prerequisite for using this app is registration on our website. Further information on the registration on our website can be found under "Registration on our website".

Via “ZBrush for iPad”, users can take photos (“Captured Data”) and store the Captured Data in ZBrush for iPad on their devices for the purpose of using certain features of ZBrush for iPad, such as applying the Captured Data to the surface of models users create using the Surface Noises feature of ZBrush for iPad. Unless users themselves transfer the Captured Data to other devices/applications, the Captured Data stays on the user's device and is visible as well as accessible only from ZBrush for iPad. In any case, Maxon does not store, use or share the Captured Data with any third party and users remain responsible for the Captured Data at all times. The legal basis for the processing of Captured Data is performance of a contract (Art. 6 para. 1 sentence 1 lit. b GDPR). The Captured Data can be deleted by the user at any time either within ZBrush for iPad.

File Transfer Across Multiple Devices when Using Maxon Software

If allowed by the functionality of Maxon software, you can transfer your files created with the use thereof, across multiple devices. In order to use the feature as described above, you shall allow your end device to discover your other end devices registered in the same local network and connect to them. Maxon software will have access to the device names of the discovered end devices and as to whether Maxon software sessions are running on such devices, provided that above data remains exclusively within the local network. When you use the above file transfer feature, Maxon does not collect, store or use information about your location or any other data related to your local network, as well as does not create your profile. You can at any time remove permission for your end devices to be visible as well as revoke access to the local network in the end devices’ settings.

Data Collection Within the Scope of the Software – Technical Protection Functions

The prerequisite for using the software is registration on our website.

The software contains technical protection functions against piracy, unauthorized use and for the protection of our intellectual and industrial property rights and economic interest. This prevents you from using the software in a way that violates the EULA.

The following personal data may be processed as part of the technical protection functions:

E-Mail address,
Internet/Network related data (e.g. IP address Wifi, geolocation data),
Hardware related data (e.g. Operating System, Machine ID, HarDisk ID),
Data related to use of the software,
Eligibility data,
Transaction data,
Technical data.

We use technical protection functions to ensure the fulfillment of the EULA and to combat piracy and to protect the software from unauthorized use.

In the event that the software is used in a manner that violates the EULA, your data will be disclosed to third parties and therefore may be transferred outside of the EEA. Further information on international transfer of your personal data can be found under “Transfer of third countries”.

The legal basis for the use of personal data within the scope of technical protective functions as well as for any possible forwarding of this personal information to a third party is our legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR) in ensuring that our software is used in accordance with the EULA.

The processing of your data serves the purpose of being able to trace piracy, unauthorized use of the software as well as license infringements so Maxon can in such cases prevent such piracy, unauthorized use and take measures against license infringement. The forwarding of your data to third parties serves the purpose of pursuing unauthorized use of the software or license infringement in other countries, for example.

Your data will be deleted as soon as the purpose for which they were saved has been achieved and they are no longer needed and no legal obligations for retention – in particular with regard to trade or tax law retention provisions – exist and the data are not required for the establishment, exercise or defense of legal claims. In accordance with this, your data will be saved at least as long as Maxon can pursue piracy, the unauthorized use of the software or license infringement.

Customer Support

When requesting support with respect to our products, the following personal data may be processed:

Software details,
Hardware details.

The personal data that is gathered during in the context of support will generally not be forwarded by us to a third party. As an exception, such data may be shared within the Maxon company group where this is necessary to pursue the purpose of the support.

The legal basis for the processing of personal data in the context of support related to the purchased licenses of our products is performance of a contract (Art. 6 para. 1 sentence 1 lit. b GDPR). Exceptionally, to the extent personal data of persons, who are not our contractual partners, will be processed in this context (e.g. contact persons at business customers), the legal basis is our and our contractual partner's legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR) in efficiently and productively providing support to our contractual partner.

We process you personal data in the context of customer support to contact you about support issues and to resolve such issues.

To be able to resolve support issues, we offer the possibility of remote support.

Note: In order to use our remote support, customers might be required to download and install a conference tool. The provider of this conference tool is a separate controller with respect to processing of personal data within the scope of the download of the respective client.

The following personal data can be gathered by us in addition within the scope of remote support:

If applicable, the customer’s name if used as an alias/nickname used in the conference tool,
If necessary, we will take and save notes for individual sessions for protocolling results of a remote support session,
We can record remote support sessions and save these in order to safeguard ourselves against false claims for damages,
The chats that take place during communication with the customer via the conference tool’s chat function can also be saved.

The personal data that is gathered during in the context of remote support will generally not be forwarded by us to a third party. As an exception, such data may be shared within the Maxon company group where this is necessary to pursue the purpose of the remote support.

Legal basis for the processing of additional personal data in the scope of remote support is performance of a contract (Art. 6 para. 1 sentence 1 lit. b GDPR), our legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR) in documenting remote support sessions and in establishing, exercising and defending legal rights, or, where consent has been obtained, consent (Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR).

Personal data is deleted as soon as it is no longer required to achieve the purpose for which it was collected, and there are neither any legal – in particular trade and tax law – retention obligations nor it is required for the establishment, exercise or defense of legal claims.

Contact

Contact via contact form or email
You can contact us via the contact form or via the email address provided.

In doing so, the following personal data may be processed:

Contact data, in particular email address,
Other personal data provided by you,
Time of form submission.

The legal basis for the processing of personal data in this context is performance of a contract if the contact purpose is the conclusion of or otherwise related to a contract with the person contacting us (Art. 6 para. 1 sentence 1 lit. b GDPR). Otherwise, the legal basis for the processing of personal data in this context generally is our legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR) in contacting you due to your enquiry.

Contact due to important changes to our services (including our websites)
We may contact you to alert you regarding important changes to our services (including our websites), for example due to substantial changes to this data protection declaration or changes to our terms and conditions.

In doing so, the following personal data may be processed:

Contact data, in particular email address.

The legal basis for the processing of personal data in this context is performance of a contract if the contact purpose is related to a contract with you (Art. 6 para. 1 sentence 1 lit. b GDPR). Otherwise, the legal basis for the processing of personal data in this context generally is our legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR) in informing you about important changes to our services.

Contact Data Maintenance
We can maintain your contact data using different publicly available sources, including social media networks.

In doing so, we may process the following data:

First and last name,
Email address,
Company the person works for / represents and position, if applicable.

Legal basis for the processing of personal data in the context of maintaining contact data is our legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR) in keeping our contact data up to date in order to be able to address the correct persons with the use of an up to date contact information regarding existing business contracts.

Other Advertising

By email

General Non-Personalized Marketing
With your consent, you receive information about Maxon software products and Maxon product news, service offers and general topics about the Maxon Community by email.

In this context, we may process the following personal data:

First and last name,
Email address,
Country in which the person is located,
Proof of opt-in.

Various external recipients may receive your personal data, including partner companies. Further information on this can be found under “Data processing by processors” and “Transfer of personal data to other external recipients (third parties)”.

The legal basis for the processing of personal data for email advertising is consent (Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR) or our legitimate interest (Art. 6 para. 1 sentence 1 lit. F, Art. 7 GDPR).

In order to use certain services, you must consent to receiving advertising.

The personal data is processed in order to deliver emails, to address you personally in your respective language, and to prevent misuse of the services or the email address used.

The personal data is deleted as soon as it is no longer required to achieve the purpose for which it was collected respectively when you withdraw your consent (and where there is no other legal ground for processing than consent) and there are no legal – in particular trade and tax law – retention obligations and they are not required for the establishment, exercise or defense of legal claims.

You can withdraw your consent to receive emails at any time with effect for the future. For the withdrawal, changing the communication preferences in the MyMaxon email communication preferences of your MyMaxon account, an informal message, e.g. by email to [email protected] or using the "Unsubscribe" link in emails is sufficient. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal (see also "Rights of data subjects").

Personalized Product Support Marketing Communication
Based on your consent to personalized marketing communications in support of product, you will receive personalized information by email based on personal interests. Information based on personal interests means that, with your consent, we will evaluate which Maxon products you are interested in and provide you with personalized information on this basis. In order to determine your usage behavior, we use various service providers. These allow us to determine which product features you have used and which product features and other Maxon services and products may also be of interest to you so that we can send you email communications about (1) additional product features and (2) other Maxon services and products.

In this context, we may process the following personal data:

First and last name,
Email address,
Country in which the person is located,
Proof of opt-in,
Identifier ID,
Data related to use of the software (product name and trial start date).

In the context of personalized product support marketing communication, various external recipients may receive your personal data. Further information can be found under “Data processing by Processors” and “Transfer of personal data to other external recipients (third parties)”.

The legal basis for the processing of personal data for email advertising is consent (Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR).

In order to use certain services, you must consent to receiving personalized advertising.

The personal data is processed in order to deliver emails, to address you personally in your respective language, and to analyze product features you have used in order to send you email communications about (1) additional product features and (2) other Maxon services and products.

The personal data is deleted as soon as it is no longer required to achieve the purpose for which it was collected respectively when the you withdraw your consent (and where there is no other legal ground for processing than consent) and there are no legal - in particular trade and tax law - retention obligations and they are not required for the establishment, exercise or defense of legal claims. Personal data on your behavior will hence be deleted after you have withdrawn your consent to personalized marketing communications in support of product. Even without withdrawal of consent, the data will be deleted at the latest when it is no longer required for the purposes of the marketing measures.

Email Marketing Towards Event and Raffle Participants

General information:
Participants of events where we were represented may receive marketing communication via email based on their consent, obtained during the registration for the event. Such consent might have been obtained by event organizers on our behalf.

Participants of raffles in which we co-operated may receive marketing communication via email based on their consent, obtained during the registration for the raffle. Such consent might have been obtained by raffle co-operation partners on our behalf.

In this context, we receive the following personal data from such event organizers or raffle co-operation partners and subsequently process them for the purpose of sending marketing communication via email:

First and last name,
Email address,
Company the event participant works for / represents and position, if applicable,
Country in which the person is located.

The legal basis for the processing of personal data for email advertising is consent (Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR).

The personal data is processed in order to deliver emails, to address you personally in your respective language, and to prevent misuse of the services or the email address used.

The personal data is deleted as soon as it is no longer required to achieve the purpose for which it was collected respectively when the you withdraw´ your consent (and where there is no other legal ground for processing than consent) and there are no legal – in particular trade and tax law – retention obligations and they are not required for the establishment, exercise or defense of legal claims.

You can withdraw your consent to receive marketing emails at any time with effect for the future. For the withdrawal, changing the communication preferences in the MyMaxon email communication preferences of your MyMaxon account, an informal message, e.g. by email to [email protected] or using the "Unsubscribe" link in emails is sufficient. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal (see also "Rights of data subjects").

Joint control in the context of email marketing towards event and raffle participants:

We and the event organizers or raffle co-operation partners who collect your personal data and obtain your consent to email marketing activities by us (each also referred to as "Joint Controller") jointly process the personal data identified in the "General information" sub-section above ("Joint Data") in respect of the collection by such organizers or co-operation partners and subsequent sharing of the data with us for the purpose of enabling us to carry out email marketing activities (i.e., as joint controllers). For any other processing activities we and the event organizers or co-operation partners remain separate controllers.

The legal basis for the collection and sharing of this personal data is consent (Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR).

You have the rights described in the "Rights of data subjects" section of this Privacy Policy. Please contact [email protected] if you would like to exercise your rights towards us or one of the other Joint Controllers. Alternatively you can also contact the other Joint Controllers.

The Joint Controllers have determined their responsibilities for compliance with the obligations under GDPR by means of an arrangement between them ("JC Arrangement").

Under the JC Arrangement, the Joint Controller other than Maxon are, in particular, responsible for:

Making available information on the processing of personal data in the context of collection and sharing of personal data with Maxon for the purpose of enabling Maxon to carry out email marketing activities.
Handling and fulfilling requests related to rights described in the "Rights of data subjects" section of this Privacy Policy.

Under the JC Agreement, every Joint Controller, in particular, is responsible for:

Making available information of the essence of the JC Arrangement to affected data subjects.
Ensure that they comply with all legal retention and deletion requirements in respect to the Joint Data they hold.
Determining appropriate security measures to protect personal data as well as documenting, reviewing and updating these measures as necessary in respect of the Joint Data they hold.
Notifying the competent data protection authority and affected individuals about data breaches where required under GDPR in respect of Joint Data which is affected by a personal data breach and which they hold.
Designating a contact person for data protection queries.

By telephone
With your consent, you as a private user receive information about Maxon Software products and Maxon product news, service offers and general topics related to the Maxon Community by telephone.

We also contact commercial customers by telephone for information about Maxon software products and Maxon product news, service offers and general topics around the Maxon Community.

In this context, we may process the following personal data:

First and last name,
Telephone number,
Country in which the person is located,
Proof of opt-in, if applicable.

Various external recipients may receive your personal data. Further information can be found under "Data processing by processors" and "Transfer of personal data to other external recipients (third parties)".

The legal basis for the processing of personal data for telephone advertising is consent (Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR).

The legal basis for the processing of personal data for telephone advertising for commercial users is alternatively our legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR) in advertising our products and services.

The personal data is then processed in order to contact the you by telephone as well as to address you personally in your language. In this case, we consider the processing of personal data for the purpose of direct marketing to commercial users as processing serving our legitimate interest, Art. 6 para. 1 sentence 1 lit. f GDPR.

The personal data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected respectively – where relevant – when consent is withdrawn (and if there is no other legal ground for processing than consent) and there are no legal – in particular trade and tax law – retention obligations and they are not required for the establishment, exercise or defense of legal claims.

You can withdraw your consent to telephone advertising at any time with effect for the future. An informal communication, e.g. by email to [email protected], is sufficient for the withdrawal. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal (see also "Rights of data subjects").

Commercial users may at any time object to the processing of their personal data for telephone advertising based on our legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR). We will then no longer process the relevant personal data for conducting telephone advertising.

Webinars

Maxon offers (simulated) live webinars via external service providers who were carefully selected by Maxon and were commissioned in compliance with data protection requirements.

Note: In order to participate in a webinar, you must register on the website of the respective external service provider. The external service provider is separate controller with respect to the processing of personal data within the scope of this registration.

The following personal data may be collected for the participation in our webinars:

First and last name,
Email address.

Furthermore, inter alia, information about when the participation took place, how long participation lasted as well as if and which questions were asked in the chat will be processed. Tracking will also take place to determine if the webinar window was active or in the background.

Legal basis for the processing of personal data within the scope of participation in a webinar by us is performance of a contract (Art. 6 para. 1 sentence 1 lit. b GDPR) and our legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR) in understanding how people participate in our webinars.

In the event that the seat of the external service provider lies outside of the EEA your personal data might also be transferred to this third country. Further information on international transfer of your personal data can be found under “Transfer of third countries”.

Before the webinar, you have the option to provide questions through a form. When you wish to be contacted in case we have questions about your raised question, we can process the following personal data:

First and last name,
Country in which the person is located,
Email address.

The legal basis for the processing of personal data in this context is consent (Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR). You can withdraw your consent to receive emails at any time with effect for the future. For the withdrawal, an email to [email protected] is sufficient. The withdrawal of consent does not affect the lawfulness of the processing carried out based on the consent until the withdrawal (see also "Rights of Data Subjects").

At the end of the webinar, you might be given the opportunity to complete a survey. Additional information, inter alia, opinions about the webinar and improvement suggestions as well as information about whether or not you are a user of Maxon Software and the version with which you work and information about your profession and field of work will be requested. The processing of personal data serves the purpose of evaluating and processing webinars. Legal basis for the processing of personal data within the scope of a survey is our legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR) in obtaining and understanding feedback provided by you in order to improve our webinars or consent (Art. 6 para. 1 sentence 1 lit. a GDPR) where consent has been obtained in this context. The consent for participating in a survey after the conclusion of a webinar can be withdrawn by you at any time with effect for the future. For the withdrawal a simple message, e.g., via email to [email protected] is sufficient. The withdrawal of consent will not affect the lawfulness of processing of personal data prior to the revocation.

The personal data that is gathered during in the context of a webinar will generally not be forwarded by us to a third party. As an exception, such data may be shared within the Maxon company group where this is necessary to pursue the purposes listed above.

Personal data processed in connection with webinars is deleted as soon as it is no longer required to achieve the purpose for which it was collected, or when you withdraw consent (and where there is no other legal ground for processing other than consent) and there are neither any legal – in particular trade and tax law – retention obligations nor is it required for the establishment, exercise or defense of legal claims.

Surveys and Following Interviews

From time-to-time Maxon may conduct surveys to measure and analyze your interest in products, services, content, or technical support. The processing of personal data serves the purpose of continuously improving products, tools, processes, and services. Legal basis for the processing of personal data within the scope of a survey is our legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR) in obtaining and understanding feedback provided by participants in order to tailor our products, tools, processes and services to participants’ wishes and requirements or consent (Art. 6 para. 1 sentence 1 lit. a GDPR) where consent has been obtained in this context.
Surveys are carried out anonymously unless indicated otherwise. Participation in all Maxon surveys is voluntary. Participants can choose not to provide any data by not taking part.

The following personal data may be collected for the participation in our surveys (unless it is carried out anonymously):

First and last name,
Email address,
The company at which the person is working (in some cases),
Responses given during participation in the survey.

The surveys will be held on the website of different external service providers. The personal data that is gathered by the external service provider as a result of a survey will generally not be forwarded by us to a third party. As an exception, such data may be shared within the Maxon entities where this is necessary to pursue the purposes of surveys listed above.

Following the surveys, participants may be asked to participate in an interview. The processing of personal data serves the purpose of further improving products, tools, processes, and services. Legal basis for the processing of personal data within the scope of a survey is our legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR) in obtaining and understanding feedback provided by participants in order to tailor our products, tools, processes and services to participants’ wishes and requirements or consent (Art. 6 para. 1 sentence 1 lit. a GDPR) where consent has been obtained in this context.

These interviews are entirely on a voluntary basis. Participants can choose not to provide any data by not taking part.

Interviews will be held via MS Teams as a video call.

The following personal data may be collected for the participation in our interviews following the surveys:

In addition to the data collected during the above-mentioned survey process, inter alia information about when the interview participation took place, how long the interview lasted as well as if and which questions were asked in the interview and responses thereto will be processed,
Videocall recording (the videocall will not be recorded unless the participant gives consent).

The personal data that is gathered during the interview will generally not be forwarded by us to a third party. As an exception, such data may be shared within the Maxon company group where this is necessary to pursue the purposes of interviews listed above.

The documentation and possible publication of the survey and/or interview results will be done exclusively in an anonymous form, without disclosing participants’ name and without giving any information that could be used to draw conclusions about participants.

The consent for participating in a survey and/or a following interview can be withdrawn by the participant at any time with effect for the future. For the withdrawal a simple message, e.g., via email to [email protected] is sufficient. The withdrawal of consent will not affect the lawfulness of processing of personal data prior to the revocation.

The personal data will be deleted or anonymized as soon as it is no longer required to achieve the purpose for which it was collected (or otherwise processed) and there are no legal retention obligations, and they are not required for the establishment, exercise, or defense of legal claims. This is generally the case for the personal data collected during surveys and interviews within 6 months after collection of such personal data. Videocall recordings will be deleted within 90 days.

Maxon Events

We hereby inform you about the processing of personal data in the context of registration for and the carrying out of events by Maxon, either on-premises or online.

In this context, we may process the following personal data:

First and last name,
Email address,
Address,
Country in which the person is located,
Company / organization,
Photo, video and audio recordings at onsite events.

In addition, we may process other personal data that you voluntarily provide to us as part of your participation.

Online events may be hosted outside of the EEA. Further information on international transfer of your personal data can be found under “Transfer to third countries”.

The legal basis for the processing of your personal data in regard to your registration and participation at the event is the performance of a contract (Art. 6 para. 1 sentence 1 lit. b GDPR).

The legal basis for the processing of your personal data for photo, video and audio recordings at the event is either your consent (Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR) or our legitimate interests in documenting the event and using the documentation for promotional activities (Art. 6 para. 1 sentence 1 lit. f GDPR). Whether we rely on consent or our legitimate interests depends on the circumstances. In particular, when we single you out or interview you personally, we will always obtain your consent.

The provision of the livestream of an online event is based on our legitimate interests in providing livestreams to interested users to promote our activities (Art. 6 para. 1 sentence 1 lit. f GDPR).

Personal data is deleted as soon as it is no longer required to achieve the purpose for which it was collected, or when you withdraw consent (and where there is no other legal ground for processing other than consent) and there are neither any legal – in particular trade and tax law – retention obligations nor is it required for the establishment, exercise or defense of legal claims.

You can withdraw your consent in regard to photo, video and audio recordings at the event at any time with effect for the future. For the withdrawal, an email to [email protected] is sufficient. The withdrawal of consent does not affect the lawfulness of the processing carried out based on the consent until the withdrawal (see also "Rights of Data Subjects").

Contests, Raffles, or Other Competitions

Carried out by us
We hereby inform you about the processing of personal data in the context of (online) contests, raffles, or other (online) competitions carried out by us.

In this context, we may process the following personal data which we collect directly from you:

First and last name,
Email address,
Country in which the person is located.

In addition, we may process other personal data that you voluntarily provide to us as part of your participation.

Various external recipients may receive your personal data. Further information on this can be found under “Data processing by processors” and “Transfer of personal data to other external recipients”. In addition, if you participate in one of our raffles, we may share your information with vendors who we use to ship prizes to you.

The online contests or competitions may be hosted outside of the EEA. Further information on international transfer of your personal data can be found under “Transfer of third countries”.

The legal basis for the processing of your personal data for the administration of the raffle is performance of a contract (Art. 6 para. 1 sentence 1 lit. b GDPR); in particular, we process your personal data to verify the eligibility of entrants, select winners, administer and fulfil prizes, and to manage our interactions with you.

The personal data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. We might retain the personal data longer to comply with legal - in particular trade and tax law - retention obligations or if we need the personal data for the establishment, exercise or defense of legal claims.

Carried out by partners
We hereby inform you about the processing of personal data in the context of the provision of prizes for (online) contests, raffles, or other (online) competitions carried out by partners.

In this context, we may process the following personal data:

First and Last Name,
Country in which the person is located,
Email Address.

The legal basis for the processing of personal data for the provision of prizes is the performance of a contract (Art. 6 para. 1 sentence 1 lit. b GDPR).

Personal data is processed in order to send the prizes to the winners of the contests, raffles, or other competitions.

Certifications

Maxon may issue Pro User, Certified Trainer and Master Trainer certificates under certain conditions.

In this context, the following personal data may be processed:

Name,
Email address,
Address,
Country, in which the person is located.

Various external recipients may receive your personal data. Further information on this can be found under "Data Processing by Processors" and "Transfer of personal data to other external recipients (third parties)".

Legal basis for the processing of personal data within the scope of these certifications is the performance of a contract (Art. 6 para. 1 sentence 1 lit. b GDPR).

The personal data is then processed to conduct the certification process and to issue the certificate.

Facebook Custom Audience

Maxon uses Facebook Custom Audience for websites. In this context, personal data are processed in order to identify persons that may have the most interest in our products and services and enable us to provide such persons with corresponding information.

Maxon and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, ("Meta") jointly determine the purposes and means of processing with respect to Facebook Custom Audience, i.e. they are so called joint-controllers (Art. 4 no. 7, Art. 26 para. 1 sentence 1 GDPR). Maxon may share information about people and actions they take on our website and apps ("Event Data"). Meta may use this Event Data to ascertain people who have previously interacted with our business and create groups of Facebook users based on Event Data so that these can be targeted with advertisement ("Joint Processing").

Information on how to contact Meta and their data protection officer, on how Meta processes personal data (including relevant legal bases) and the ways to exercise data subjects' rights against Meta can be found in their data policy (available here).

Maxon has entered into a joint controller arrangement (Controller Addendum) with Meta (available here) in which Maxon and Meta have determined their responsibilities under GDPR. Under this Controller Addendum Maxon is obligated to provide the information included in this section to website users. Meta is responsible for enabling data subjects' rights (Art. 15 to 20 GDPR) with regard to personal data stored by Meta after the joint processing of such data.

Maxon's legal basis for processing of personal data in this context is consent (Art. 6 para. 1 sentence 1 lit. a , Art. 7 GDPR).

Data Processing in the Context of a Company Transaction

In the context of a sale of assets, it is possible that Maxon will transfer personal data of customers and users to the purchaser.

In this context, we may process the following personal data:

Contact details, especially email address,
Other contractual data,
Other personal data, submitted by the users themselves.

The purpose of the data transfer is to fulfill our obligations under the purchase contract with the purchaser and to enable the purchaser to continue the customer relationship with customers and users. The legal basis for the processing of the personal data here is either our legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR) in efficiently managing and disposing of our company and assets and in transferring personal data of customers who have not objected to this to the purchaser or the implementation of pre-contractual measures (Art. 6 para. 1 sentence 1 lit. b GDPR) if the customer is a natural person and agrees with the transfer of the customer agreement to the purchaser.

Safeguarding Our Rights

Maxon may process personal data to safeguard Maxon's rights.

Legal basis for the processing of personal data in this context is our legitimate interest (Art. 6 para. 1 sentence 1 lit f GDPR) in establishing, exercising and defending legal claims.

Compliance With Legal Obligations

Maxon may process personal data to comply with legal obligations to which Maxon is subject.

Legal basis for the processing of personal data in this context is compliance with the respective legal obligations (Art. 6 para. 1 sentence 1 lit. c GDPR).

We use cookies to improve the performance of our website and enhance the user experience for those who visit the website.

Cookies which are not strictly necessary for the provision of the website will only be stored on your device and accessed based on your freely-given consent. You may withdraw such consent at any time, without affecting the lawfulness of processing based on such consent before its withdrawal, by accessing our consent management platform. Further information on our use of cookies can be found in our cookie consent management tool, which can be accessed at the bottom left of every page of the website.

Data Deletion and Storage Period

The personal data of data subjects will generally be deleted as soon as they are no longer necessary in relation to the purpose for which they were collected (or otherwise processed).

As an exception, the data can be stored for a longer period of time for compliance with a legal obligation, i.e. if this has been set out by the European or national legislator in European Union regulations, laws or other regulations to which we are subject, or for the establishment, exercise or defense of legal claims; personal data that we store solely for these purposes will not be used for any other purpose.

Rights of Data Subjects

You have the following rights regarding personal data provided that the relevant legal requirements are met:

Right of access, Art 15 GDPR
You may request information about the processing of your personal data and a copy of the personal data undergoing processing insofar as such copy does not adversely affect the rights and freedoms of others.
Right to rectification (Art. 16 GDPR)
You may request correction of your personal data that is inaccurate and/or completion of such data which is incomplete.
Right to erasure 17 GDPR
You may request deletion of your personal data, in particular where (i) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, (ii) you objected to the processing and there are no overriding legitimate interests for the processing, (iii) your personal data has been unlawfully processed or (iv) your personal data has to be erased for compliance with a legal obligation to which we are subject. The right to erasure, however, does not apply in particular where the processing of your personal data is necessary for compliance with a legal obligation or for the establishment, exercise or defense of legal claims.

Such deletion requests might be processed via external service providers who were carefully selected by Maxon and were commissioned in compliance with data protection requirements.
Right to restrict processing, Art. 18 GDPR
You may request restriction of processing (i) for the period in which we verify the accuracy of your personal data if you contested the accuracy of the personal data, (ii) where the processing is unlawful and you request restriction of processing instead of deletion of the data, (iii) where we no longer need the personal data, but you require the data for the establishment, exercise or defense of legal claims or (iv) if you objected to processing until it has been verified whether our legitimate grounds override your interests, rights and freedoms.
Right to object, Art. 21 GDPR
You have the right to object, for reasons resulting from your particular situation, at any time, to the processing of your personal data which is based on legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR) this also applies to profiling based on this provision according to Art. 4 No. 4 GDPR. If you file an objection, your personal data will no longer be processed for the purpose you objected to unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or if the processing serves the establishment, exercise or defense of legal claims.

Generally, we assume that we will be able to demonstrate such compelling legitimate interests. However, we will review any objection based on the individual relevant facts.

In individual cases we may process your personal data for direct marketing purposes without your prior consent. You have the right to object to the processing of your personal data for direct marketing purposes at any time; this also applies to profiling in as far as it is connected with direct marketing. If you file an objection to the processing for direct marketing purposes we will no longer process your personal data for this purpose.

The objection can be made informally and should be sent to:
Maxon Computer GmbH
Basler Str. 5
61352 Bad Homburg vor der Höhe, Germany
Email: [email protected]
Right to data portability, Art. 20 GDP
You may request to receive your personal data, which you have provided to us, in a structured, commonly used machine-readable format and transmit those data to another controller without hindrance from us, where the processing is based on consent or a contract and the processing is carried out by automated means; in these cases you may also request to have the personal data transmitted directly to another controller where this is technically feasible.
Right to withdraw consent, Art. 7 (3) GDPR
Consent that was granted can be withdrawn at any time with effect for the future. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. This also applies for the withdrawal of consent that was given prior to the introduction of the GDPR, i.e., prior to May 25, 2018.

Within the scope of the right of access (Art. 15 GDPR) and the right to erasure (Art. 17 GDPR), the restrictions in accordance with Clauses 34, 35 of the German Federal Data Protection Act (BDSG) apply.

Furthermore, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of an alleged infringement if you consider that the processing of your personal data infringes the GDPR (Art. 77 GDPR).

Please address your requests to exercise your rights to [email protected] (with the exception of the right to lodge a complaint with a supervisory authority).

Data Security

We protect your data using modern security systems and we adhere to the data protection and security provisions in accordance with the GDPR.

We maintain current technical measures to ensure data security, in particular for the protection of your personal data against threats during data transfers or attainment by third parties. These measures are updated to meet state-of-the-art standards.

Online forms on our website are sent using SSL encryption for your protection. Nevertheless, we cannot guarantee that the information sent cannot be read by third parties during transmission. Please be aware that despite our efforts, no data security measures can guarantee security.

Obligation for Providing and Possible Consequences for not Providing Data

You are not obligated to provide your personal data to us. However, within the scope of the use of our services, you may be required to make the personal data available that is necessary for the fulfillment of the respective purpose or that we are legally obliged to collect. Without this data, we may not be able to conclude or execute a contract with you and/or provide you with our services.

Existence of Automatic Decision-Making, Including Profiling

Fundamentally, we do not use fully automated decision-making or profiling to start or carry out a business relationship in accordance with Art 22 GDPR. If we should implement this process in individual cases, we will inform you accordingly in as far as this is required by law.

Changes to Data Protection Notices

We continuously develop and optimize the services we offer. It can therefore occur that we add new functionalities. If this affects the way in which we process your personal data we will inform you accordingly in due time in our data protection notices (e.g. in this data protection declaration).

The last update of this data protection declaration was September 2025.

Data Protection Declaration for the Processing of Personal Data of Vendors, Service Providers and Business Partners in the European Economic Area

Effective Date: September 2025

Name and Address of Controller

Maxon Computer GmbH
Basler Str. 5
61352 Bad Homburg vor der Höhe
Germany

Name and Address of Data Protection Officer

The data protection officer of the controller is:

FPS Rechtsanwaltsgesellschaft mbH & Co. KG
Eschersheimer Landstraße 27
60322 Frankfurt am Main, Deutschland
Telefon: +49 69 95957-0
E-Mail: [email protected]

General Data Processing

Scope of processing of personal data
We process personal data that we receive in the course of your visit to our Website, if you contact us or use our services.

Legal basis for the processing of personal data
When processing personal data, we rely on the following legal bases:

The performance of a contract to which the affected person (the "data subject") is a party, Art. 6 para. 1 sentence 1 lit. b GDPR (this also applies to processing operations that are necessary for the implementation of pre-contractual measures).
Legitimate interests of our company or a third party, Art. 6 para. 1 sentence 1 lit. f GDPR, provided that the interests, fundamental rights and freedoms of the data subject do not override the former mentioned interests.
Fulfillment of legal obligations to which our company is subject, Art. 6 para. 1 sentence 1 lit. c GDPR.
Consent, Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR.

The purposes for which we process personal data, relevant legal bases and specific legitimate interests (where legitimate interests are the basis for processing) are stated further below.

Recipients within the company group
NEMETSCHEK SE - Konrad-Zuse-Platz 1 - 81829 Munich - Germany
Maxon Computer, Inc. - 515 Marin St., Ste 322, Thousand Oaks, CA 91360 - USA
Maxon Computer Ltd. - 114 High Street, Cranfield - Bedfordshire, MK43 0DG - United Kingdom
Maxon Computer Canada Inc. - 434, rue St.-Pierre, bureau 400, Montréal, Québec, H2Y 2M5 - Canada
Maxon Computer KK - Hiroo 5-22-3, Hiroo Nishikawa Bldg. 2F - 150-0012 Shibuya-ku, Tokyo – Japan

Maxon may transfer personal data within the company group for the processing purposes listed in the section "Specific purposes of processing (including legal bases and legitimate interest)".

Further information on international transfer of your personal data can be found under “Transfer to third countries”.

Transfer to third countries
A transfer of personal data to countries outside the European Economic Area (“EEA”) only takes place if the requirements of Art. 44 et seq. GDPR are met. A third country is a country outside the EEA in which the GDPR is not directly applicable.

We transfer your personal data to the USA or other third countries only if either

Artists

We’re contracting with artists to present our products at events, livestreams, or webinars.

In doing so, the following personal data may be processed:

First and last name of the artist,
Screenname/alias, if applicable,
Company, if applicable,
Address,
Country, in which the artist is located,
Email address,
Payment information, if applicable,
Headshot or logo, if applicable,
Artwork, if applicable,
Signature (for signing contracts),
Photo, video and audio recordings,
Your IP address at online events, livestreams, or webinars, if applicable,
The provision of further data, e.g., telephone, is voluntary.

Online events, livestreams, or webinars may be hosted outside of the EEA. Further information on international transfer of your personal data can be found under “Transfer to third countries”.

The legal basis for the processing of your personal data is performance of a contract (Art. 6 para 1 sentence 1 lit. b GDPR). The purpose for the processing is to manage your participation in or presenting at our event, livestream, or webinar, to process your payment, if applicable, as well as to conduct our due diligence.

The legal basis for the processing of your personal data for photo, video and audio recordings at the Maxon Event is your consent (Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR).

The provision of the livestream of an online event, livestream, or webinar is based on our legitimate interests in providing livestreams to interested users to promote our activities (Art. 6 para 1 sentence 1 lit. f GDPR).

In case we’ve obtained your consent, you can withdraw your consent at any time with effect for the future. For the withdrawal, an email to [email protected] is sufficient. The withdrawal of consent does not affect the lawfulness of the processing carried out based on the consent until the withdrawal (see also "Rights of Data Subjects").

Other Contractors & Vendors

We’re engaging with several contractors and vendors for various reasons.

In doing so, the following personal data may be processed:

First and last name of the contractor or vendor/ of the person included into contractor’s or vendor’s managing bodies and senior officers, legal and authorised representatives, persons acting on behalf of contractor or vendor and contractor’s or vendor’s contact persons,
Screenname/alias, if applicable,
Company, if applicable,
Address,
Email address,
Country, in which the person is located,
Payment information, if applicable,
Signature (for signing contracts),
Further identification data, e.g. passport, if applicable,
Data from publicly available sources such as open government databases, including first and last name, place and date of birth, residential address of persons who own and/or control the vendor and/or of politically exposed person connected with the vendor, if applicable.
The provision of further data, e.g., telephone, is voluntary.

Various external recipients may receive this personal data. Further information on this can be found under "Data processing by processors" and "Transfer of personal data to other external recipients (third parties)".

The legal basis for the processing of the personal data is performance of a contract (Art. 6 para 1 sentence 1 lit. b GDPR). The purpose for the processing is to set up contractors and vendors of Maxon, to communicate and collaborate with them, to operate our business, to process the payment, if applicable, to protect confidential data from unauthorized access and publication as well as to conduct our due diligence.

Personal data is deleted as soon as it is no longer required to achieve the purpose for which it was collected, or when given consent is withdrawn (and where there is no other legal ground for processing other than consent) and there are neither any legal – in particular trade and tax law – retention obligations nor is it required for the establishment, exercise or defense of legal claims.

Resellers

We’re engaging with Resellers, who are selling our products based on an Authorized Reseller Agreement.

In doing so, the following personal data may be processed:

First and last name of the person included into Resellers’ managing bodies and senior officers, legal and authorised representatives, persons acting on behalf of Resellers and Resellers’ contact persons,
Address,
Email address,
Company, if applicable,
Country in which the person is located,
Signature (for signing the contracts),
Further identification data, e.g. passport, if applicable,
Data from publicly available sources such as open government databases, including first and last name, place and date of birth, residential address of persons who own and/or control the Reseller and/or of politically exposed person connected with the Reseller, if applicable.The provision of further data, e.g. telephone and fax number, is voluntary.

The legal basis for the processing of your personal data is performance of a contract (Art. 6 para 1 sentence 1 lit. b GDPR). The purpose for the processing is to set up authorized Resellers of Maxon, to communicate and collaborate with them, to operate our business as well as to conduct our due dilligence.

Collaboration With Maxon

With your consent, you can register for different forms of collaboration with Maxon, for example in order to share your knowledge and creative talents with the Maxon community.

In this context, we can process the following personal data:

First and last name,
Country in which the person is located,
Email address.

The legal basis for the processing of personal data for the application for a collaboration with Maxon is consent (Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR).

Personal data is processed in order to keep a record of users, Maxon can potentially work together for different purposes, as well as to contact you via email to negotiate about and/or engage for a potential collaboration.

You can withdraw your consent to receive emails at any time with effect for the future. For the withdrawal, an email to [email protected] is sufficient. The withdrawal of consent does not affect the lawfulness of the processing carried out based on the consent until the withdrawal (see also "Rights of Data Subjects").

Data Processing in the Context of a Company Transaction

In the context of a sale of assets, it is possible that Maxon will transfer personal data of vendors, service providers, or business partners to the purchaser.

In this context, we may process the following personal data:

Contact details, especially email address,
Other contractual data,
Other personal data, submitted by the vendors, service providers, or business partners themselves.

The purpose of the data transfer is to fulfill our obligations under the purchase contract with the purchaser and to enable the purchaser to continue the business relationship with vendors, service providers, or business partners. The legal basis for the processing of the personal data here is either our legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR) in efficiently managing and disposing of our company and assets and in transferring personal data of vendors, service providers, or business partners to the purchaser or the implementation of pre-contractual measures (Art. 6 para. 1 sentence 1 lit. b GDPR).

Safeguarding Our Rights

Maxon may process personal data to safeguard Maxon's rights.

Legal basis for the processing of personal data in this context is our legitimate interest (Art. 6 para. 1 sentence 1 lit f GDPR) in establishing, exercising and defending legal claims.

Compliance With Legal Obligations

Maxon may process personal data to comply with legal obligations to which Maxon is subject.

Legal basis for the processing of personal data in this context is compliance with the respective legal obligations (Art. 6 para. 1 sentence 1 lit. c GDPR).

Data Deletion and Storage Period

The personal data of data subjects will generally be deleted as soon as they are no longer necessary in relation to the purpose for which they were collected (or otherwise processed).

Rights of Data Subjects

You have the following rights regarding personal data provided that the relevant legal requirements are met:

Right of access, Art 15 GDPR
You may request information about the processing of your personal data and a copy of the personal data undergoing processing insofar as such copy does not adversely affect the rights and freedoms of others.
Right to rectification (Art. 16 GDPR)
You may request correction of your personal data that is inaccurate and/or completion of such data which is incomplete.
Right to erasure 17 GDPR
You may request deletion of your personal data, in particular where (i) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, (ii) you objected to the processing and there are no overriding legitimate interests for the processing, (iii) your personal data has been unlawfully processed or (iv) your personal data has to be erased for compliance with a legal obligation to which we are subject. The right to erasure, however, does not apply in particular where the processing of your personal data is necessary for compliance with a legal obligation or for the establishment, exercise or defense of legal claims.

Such deletion requests might be processed via external service providers who were carefully selected by Maxon and were commissioned in compliance with data protection requirements.
Right to restrict processing, Art. 18 GDPR
You may request restriction of processing (i) for the period in which we verify the accuracy of your personal data if you contested the accuracy of the personal data, (ii) where the processing is unlawful and you request restriction of processing instead of deletion of the data, (iii) where we no longer need the personal data, but you require the data for the establishment, exercise or defense of legal claims or (iv) if you objected to processing until it has been verified whether our legitimate grounds override your interests, rights and freedoms.
Right to object, Art. 21 GDPR
You have the right to object, for reasons resulting from your particular situation, at any time, to the processing of your personal data which is based on legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR) this also applies to profiling based on this provision according to Art. 4 No. 4 GDPR. If you file an objection, your personal data will no longer be processed for the purpose you objected to unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or if the processing serves the establishment, exercise or defense of legal claims.

Generally, we assume that we will be able to demonstrate such compelling legitimate interests. However, we will review any objection based on the individual relevant facts.

In individual cases we may process your personal data for direct marketing purposes without your prior consent. You have the right to object to the processing of your personal data for direct marketing purposes at any time; this also applies to profiling in as far as it is connected with direct marketing. If you file an objection to the processing for direct marketing purposes we will no longer process your personal data for this purpose.

The objection can be made informally and should be sent to:
Maxon Computer GmbH
Basler Str. 5
61352 Bad Homburg vor der Höhe, Germany
Email: [email protected]
Right to data portability, Art. 20 GDP
You may request to receive your personal data, which you have provided to us, in a structured, commonly used machine-readable format and transmit those data to another controller without hindrance from us, where the processing is based on consent or a contract and the processing is carried out by automated means; in these cases you may also request to have the personal data transmitted directly to another controller where this is technically feasible.
Right to withdraw consent, Art. 7 (3) GDPR
Consent that was granted can be withdrawn at any time with effect for the future. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. This also applies for the withdrawal of consent that was given prior to the introduction of the GDPR, i.e., prior to May 25, 2018.

Please address your requests to exercise your rights to [email protected] (with the exception of the right to lodge a complaint with a supervisory authority).

Data Security

We protect your data using modern security systems and we adhere to the data protection and security provisions in accordance with the GDPR.

Obligation for Providing and Possible Consequences for not Providing Data

Existence of Automatic Decision-Making, Including Profiling

Changes to Data Protection Notices

We retain the right to change this privacy policy with effect for the future. We will inform you accordingly in due time in our data protection notices (e.g. in this data protection declaration).

The last update of this data protection declaration was September 2025.

Data Protection Declaration for the Processing of Personal Data Outside of the European Economic Area

Effective Date: September 2025

This Privacy Policy (“Policy”) supplements the information contained in Maxon Computer, Inc.’s (515 Marin Street, Suite 322, Thousand Oaks, CA 91360, United States) (“Company,” “we,” “our,” or “us”) Data Protection Declaration and applies to:

All visitors and users of our website, our Web Shop, any of our group company websites and applications where this Policy is posted (each, a “Site”), whether on our digital properties or on applications we make available on third-party sites or platforms;
The services available through our Site, Web Shop, and any such websites and applications (collectively, the “Services”); and
Our offline collection of personal information, such as via conferences, summits, trade shows, in-person demonstrations and workshops, and other in-person events.

This Policy describes the types of information, including personal information (which term includes sensitive personal information, as defined under certain applicable laws, when used in the Policy), we collect from visitors and users of our Site and Services, and our practices for collecting, using, maintaining, protecting, and disclosing that information.

By visiting a Site and using the Services, or providing consent where required by applicable law you agree that your personal information will be handled as described in this Policy. Your use of a Site and Services, and any dispute over privacy, is subject to this Policy and our Terms of Use, including its applicable limitations on damages and the resolution of disputes. The Terms of Use are incorporated by reference into this Policy.

Please keep in mind that when you provide information to us on a third-party site or platform, the information you provide may be separately collected by the third-party site or platform. The information we collect is covered by this Policy, and the information the third-party site or platform collects is subject to the privacy practices of the third-party site or platform.

Information We Collect About You and how We Collect it

Generally, (with your consent, where required under applicable laws and regulations), we may collect the following types of personal information depending upon the nature of our relationship and interactions with you:

Information We Collect Directly from You. We collect several types of information from and about users of our Services.

Account Information. We offer users the opportunity to register to create an account on our Sites in order to access the Services. When you create an account with us, we may collect your information, including your first and last name, e-mail address, telephone number, language, password, and the country in which you are located. In addition, on some of our Sites, you can log in using your credentials for Facebook, Google, Discord or other social media or similar sites. When you log-in using those credentials we or the provider of these other sites may request certain information or permissions from you, such as to share your profile information with us and to share certain information with us related to your account with that provider.
Service Information. When you use or access the Services, we may collect information required to deliver the Services to you, including commercial information, such as records of products or services purchased, obtained, or considered, or other purchasing or use histories or tendencies.
Payment Information. We may also collect information required to facilitate transactions through the Services, including financial or payment information, your address, and other contact information.
Facial Images/Expressions. Depending on the Services that you use, you may be able to upload facial images and expressions to the Services. This information is stored on your device and is not used to identify you.
Eligibility. When you request access to the Services, such as access to Maxon One Licenses for Educational purposes, we may collect professional information, such as employment-related information and business contact information, to verify that you meet eligibility requirements for purchasing the Services and to deliver the Services to you. We may also request education information, such as your school name and grade level, to confirm your eligibility for the Services and to deliver the Services to you. In order to verify your eligibility status to provide licenses for educational purposes, you shall be required to upload biometrics data. Verification of whether you meet the requirements as a student or teacher is handled by the external service provider SheerID, Inc., 1300 SW Fifth Avenue, Suite 2100, Portland, Oregon 97201 USA (“SheerID”) with its sub-processors including but not limited to Onfido Ltd, 14-18 Finsbury Square, 3rd Floor, London EC2A 1AH. United Kingdom (“Onfido”). SheerID and its processors are responsible for processing your personal data as part of the verification process. SheerID and its processors shall be responsible for processing the biometrics data and verification documents. The company will not receive any sensitive personal data collected and processed by SheerID nor its processors.
Survey Information. We may collect information you provide to us when you fill out a survey or questionnaire, or other type of form you complete through the Services.
Summits, Conferences, and Trade Shows. If you participate in one of our summits, conferences, or trade shows (including virtually), we collect information needed to administer the event. This information will vary depending on whether you participate as an artist, attendee or other type of participant and may include your name, screen-name/alias, studio, email address, physical address, headshot or logo, video and audio recordings of online or in-person events, artwork and your biography.
Prize Giveaways.If you win prize giveaways, we may share your information on our Site or in a chat.
Contests, Competitions, and Raffles. If you participate in one of our contests, competitions, or raffles, we collect information needed to administer the event. This may include your name, your streaming channel ID, and your email address and physical address, as well as video and audio recordings of you. We may share your information with sponsors or vendors who we use to ship prizes to you if you win and we may publish your name on our website, for example, if you place in a contest, or if we use your image for marketing purposes.
Communication Information. If you contact us, we may collect records and copies of your correspondence, including email addresses, direct chat history, and other correspondence and contact information.
Browsing Information. While you are navigating a Site or using the Services, we may collect your search queries or information about your viewing history.
Customer Support Information. When you submit a customer inquiry, complaint, or request assistance with use of a Site or the Services, we may collect your name, alias, or nickname for obtaining access via the TeamViewer platform. We may also collect and record information from remote support sessions, as well as notes from individual remote support sessions, for quality assurance purposes, and to safeguard ourselves against fraudulent claims for damages.
Subscription Information. When you subscribe to receive updates from us about new features of the Services, such as newsletters or e-mail alerts, we collect contact information from you, such as your name, email address, or telephone number.
Communication Content. We also collect any information you choose to email or communicate to us while using the Services.
User Generated Content. On some of our Sites, we invite you to post content, including your questions, comments, pictures, and any other information that you would like to be available on the Site. If you post content to our Site, the information that you post will be available to all visitors to our Site. If you post your own content on our Site or Services, your posting may become public and we cannot prevent such information from being used in a manner that may violate this Privacy Policy, the law, or your personal privacy.

Information We Collect Automatically. Whenever you visit or interact with our Site, we may automatically collect data about your visit through cookies, pixels, tags, log files, and other technologies. Such information includes but is not limited to your computer’s Internet Protocol (“IP”) address, device ID, device location information, browser type, browser version, the pages you visit, the time spent on those pages, the time and date of your visit, downloads you initiate, and other statistics. We gather such information through cookies and other web technologies. Please see the “Our Use of Cookies and Other Tracking Mechanisms” section below in our Policy to find out more.

Information We Collect from Third Parties. We may collect information about you from third party sources (which may be combined with other information we have collected about you), such as: service providers, marketing partners, third-party partners, public and third-party databases, social media platforms such as Facebook, Twitter, Instagram, YouTube, LinkedIn, (including from social media connections), platform providers, payment processors, and from other third parties.

How We Use Your Personal Information

Personal Information Under the California Consumer Privacy Act (CCPA). We collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.

Our Uses of Your Personal Information. We collect and use your personal information for the purposes described below (with your consent, where required under the applicable law):

To provide our Services to you.
To communicate with you about your use of our Services, to respond to your inquiries, and for other customer service purposes.
To manage summits, conferences, and tradeshows, or to manage our interactions with you at (and following) such events in which we participate but do not organize.
To manage contests, competitions, and raffles we organize, including verifying the eligibility of entrants, selecting winners, administering prizes, publishing the results, streaming the events to other viewers or the public generally and resolving disputes.
To administer workshops, demonstrations, and presentations of our products, including administering registration and follow-up communications, and managing artists or presenters who participate in or present at those events.
To tailor the content and information we may send or display to you, offer location customization, personalized help and instructions, or to otherwise personalize your experiences while using the Site or Services. Depending on the services that you use, you may be able to upload facial images and expressions to the Services. This information is stored on your device and is not used to identify you. In order to use some of the Services, you must agree to receive advertising. However, no facial images or expressions are shared with our third-party distributors or resellers.
For marketing, promotional, and customer support purposes in accordance with applicable laws. For example, we may use your personal information, such as your email address, to send you news and newsletters, special offers and promotions, informational materials, or to otherwise contact you about products, services, or other information we think may interest you.
To better understand how individuals access and use our Services, to improve and develop our Services, and to respond to individuals’ desires and preferences. This includes using personal data for purposes such as data analysis and conducting surveys or questionnaires, such as for market research or customer satisfaction purposes.
To help verify user activity, as well as to promote safety and security, such as by monitoring fraud, investigating suspicious or potentially illegal activity or violations of our terms of use or other policies, protecting our rights, or pursuing available remedies.
To comply with legal and regulatory obligations, as part of our general business operations, and for other business administration purposes, including authenticating your identity, maintaining customer records, monitoring your compliance with any of your agreements with us, collecting debts owed to us, safeguarding our business interests, and managing or transferring our assets or liabilities, for example in the case of an acquisition, disposition, or merger, as described below.
For purposes that we may notify you of or to which you consent.

How We Disclose Your Personal Information

We may disclose your information, including personal information, (with your consent, where required under the applicable law), as follows:

Vendors, Service Providers, and Other Processors. We may disclose the information we collect from you to vendors, service providers, or other processors, such as customer management providers, invoice management providers, and IT services providers, to help us provide our Services to you, to assist us in analyzing how our Services are used, and to provide other services.

Other Viewers. If you participate in one of our online contests or other competitions, we may stream those contests or competitions so that they may be viewed by other viewers, including the public generally.

Event Sponsors. If you attend one of our summits or other events, or participate in one of our contests, raffles, or other competitions, we may, with your explicit consent, share your information such as name, email address and country in which you are located with sponsors of those events and they might use your information for their own marketing purposes.

Subsidiaries and Affiliates. We may disclose the information we collect from you to our affiliates or subsidiaries as needed to provide the Services to you.

In addition, we may also disclose your information under the following circumstances:

Business Transfers. If (i) we or our affiliates are or may be acquired by, merged with, or invested in by another company, or (ii) if any of our assets are or may be transferred to another company, whether as part of a bankruptcy or insolvency proceeding or otherwise, we may transfer the information we have collected from you to the other company. As part of the business transfer process, we may disclose certain of your personal information to lenders, auditors, and third-party advisors, including attorneys and consultants.

In Response to Legal Process. We may disclose your information to comply with the law, a judicial proceeding, court order, or other legal process, such as in response to a court order or a subpoena.

To Protect Us and Others. We disclose your information when we believe it is appropriate to do so to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of our Terms of Use or this Policy, or as evidence in litigation in which we are involved.

Aggregate and De-Identified Information. We may disclose aggregate or de-identified information about users with third parties for marketing, advertising, research, or other purposes.

Others for Business Purposes. We may also share your personal information by disclosing it to a service provider for a business purpose, including the business purpose of sending general information in connection with Maxon products via email, of directly or indirectly enabling or effecting commercial transactions, and of pursuing unauthorized use of the software or license infringement in other countries, for example. We only make these business purpose disclosures under written contracts that describe the purposes, require the recipient to keep the personal information confidential, and prohibit using the disclosed information for any purpose except performing the contract. We may also share your personal data for purposes that we may notify you of or to which you consent (including where required by the applicable laws).

For more information about how we have disclosed personal information for business purposes, please see the Categories of Personal Information Under the CCPA and other applicable laws section below.

Authorized Distributors or Resellers for Advertising Purposes. If you provide your express consent, we will transfer your personal information to authorized distributors or resellers within your geographic region, which authorized distributors or resellers may use in connection with delivering advertisements regarding Maxon products to you via email. Depending on the Services that you use, you may be able to upload facial images and expressions to the Services. This information is stored on your device and is not used to identify you. In order to use some of the Services, you must agree to receive advertising and to share your name, email address and country with our third-party distributors and resellers. However, no facial images or expressions are shared with our third-party distributors or resellers.

For more information about sales of personal information, please see the Categories of Personal Information Under the CCPA and other applicable laws section below.

Categories of Personal Information Under the CCPA and Other Applicable Laws

While our collection, use, and disclosure of personal information varies based upon our relationship and interactions with you, in this section we describe, generally, how we collect and disclose (and have collected and disclosed in the prior twelve (12) months) personal information about consumers in the prior twelve (12) months (from the Last Updated date above with your consent, where required under applicable laws).

Sources of Personal Information. As further described in the Information We Collect About You and How We Collect It section above, we may collect personal information from the following sources:

directly from the individual
social networks
internet service providers
operating systems and platforms
government entities
business customers/clients

Categories of Personal Information Collected and Disclosed. In the table below, we identify the categories of personal information (as defined by the CCPA) we have collected and disclosed for a business purpose as defined by the CCPA (where required under applicable laws), as well as the categories of recipients to whom we may disclose such personal information. For more information about the business and commercial purposes for which we may disclose personal information, as defined by the CCPA, please see the How We Disclose Your Personal Information section above.

______________________________________________________________________________________________________________________________________________

Categories of
Personal Information

Description

Do We Disclose for a Business Purpose?

Do We Sell under the CCPA?

Categories of Recipients to Whom
Information can be Disclosed

______________________________________________________________________________________________________________________________________________

Identifiers

Includes direct identifiers, such as name, alias, salutation, user ID, username, account number or unique personal identifier; email address, phone number, address and other contact information; IP address and other online identifiers; and other similar identifiers.

YES

service providers
government entities and law enforcement
affiliates and subsidiaries
data analytics providers
internet service providers
operating systems and platforms

______________________________________________________________________________________________________________________________________________

Customer Records

Includes personal information, such as name, account name, user ID, contact information), that individuals provide us in order to purchase or obtain our products and services. For example, this may include information collected when an individual registers for an account, purchases or orders our products and services, posts content to one of our forums, or enters into an agreement with us related to our products and services.

YES

service providers
government entities and law enforcement
affiliates and subsidiaries
internet service providers
operating systems and platforms

______________________________________________________________________________________________________________________________________________

Commercial Information

Includes records of products or services purchased, obtained, or considered, or other purchasing or use histories or tendencies.

YES

service providers
government entities and law enforcement
affiliates and subsidiaries
internet service providers
operating systems and platforms

______________________________________________________________________________________________________________________________________________

Usage Data

Includes browsing history, clickstream data, search history, access logs and other usage data and information regarding an individual’s interaction with our websites, mobile apps and other Services, and our marketing emails and online ads.

YES

service providers
government entities and law enforcement
affiliates and subsidiaries
internet service providers
operating systems and platforms

______________________________________________________________________________________________________________________________________________

Geolocation Data

Includes precise location information about a particular individual or device.

service providers
government entities and law enforcement
affiliates and subsidiaries
advertising networks
data analytics providers
social networks
internet service providers
operating systems and platforms
business customers/clients

______________________________________________________________________________________________________________________________________________

Audio, Video and Electronic Data

Includes audio, electronic, visual, thermal, olfactory, or similar information such as photographs and images (e.g., that you provide us or post to your profile) and call recordings or recordings of remote support sessions (e.g., of customer support calls or remote sessions).

YES

service providers
government entities and law enforcement
affiliates and subsidiaries
internet service providers
operating systems and platforms

______________________________________________________________________________________________________________________________________________

Protected Classifications

Includes characteristics of protected classifications such as disability information and medical conditions (e.g., which we may collect in order to make available appropriate accommodations for events and other activities), information that you voluntarily include in your account profile (e.g., gender, marital status and political affiliation).

______________________________________________________________________________________________________________________________________________

Inferences

Includes inferences drawn from other personal information that we collect to create a profile reflecting an individual’s preferences. For example, we may analyze personal information in order to identify the offers and information that may be most relevant to customers, so that we can better reach them with relevant offers and ads.

YES

service providers
government entities and law enforcement
affiliates and subsidiaries
data analytics providers
internet service providers
operating systems and platforms

Our Use of Cookies and Other Tracking Mechanisms

We use cookies to improve the performance of our website and enhance the user experience for those who visit the website (with your consent, where required by applicable laws).

Your Consumer Rights Under the CCPA and Other Applicable Laws

You may have the following rights where permitted under the CCPA and other applicable laws, subject to certain conditions and exceptions:

Right to Know/Access. The right to request, free of charge, that we disclose information about our collection and use of your personal information over the past twelve (12) months or longer period where permitted under applicable laws, including:

The categories of personal information we collect about you;
What personal information we collect, use, or disclose about you;
The categories of sources of the personal information we collect about you;
Our business or commercial purpose for collecting the personal information;
For each category of personal information, the categories of third parties with whom it was disclosed; and
A copy of the specific pieces of personal information we collect about you.

You may request a copy of the personal information we hold about you. For more information on how to request information about our collection, use, and disclosure of your personal information, please see the Submitting Your Requests section below.

Right to Request Deletion. The right to request the deletion of your personal information that we collected. For more information on how to request deletion, please see the Submitting Your Requests below. Once we receive your request and verify your identity, we will review your request to see if an exception allowing us to retain the information applies. We will delete or de-identify personal information not subject to an applicable exception from our records and where required by applicable law, and will direct our service providers to take similar action.

You do not need to create an account with us to exercise your deletion rights. We will only use personal information provided in a deletion request to review and comply with the request.

Right to Request Opt-Out of the Sharing of Your Personal Information. If you are age 16 or older, you have the right to direct us to not sell your personal information. at any time. Please note that we do not sell the personal information of consumers of any age.

To exercise the right to opt-out, you or your authorized representative may submit an opt-out request by following the procedures specified in the Submitting Your Requests section below. Once you make an opt-out request, we will wait at least twelve (12) months before asking you to reauthorized personal information sales. However, you may change your mind and opt back in to personal information sales at any time by clicking this.

You do not need to create an account with us to exercise your opt-out rights. We will only use personal information provided in an opt-out request to review and comply with the request.

Right of Non-Discrimination. The right to be free from discriminatory adverse treatment for exercising these rights. We will not discriminate against you for exercising any of your CCPA rights, or your rights under other applicable laws where we are not permitted to do so. Under certain applicable laws, you also may have the right to refuse decisions based solely on automated decision making technology that materially affects you.

You may have the following rights under applicable laws:

Right to correct. The right to request correction of personal information we hold about you that is incorrect or inaccurate.

Right to limit the use or disclosure of sensitive personal information. The right to limit the use and disclosure of sensitive personal information to those purposes authorized by the CCPA.

Right to withdraw consent or deregister your account. The right to withdraw your consent to processing of your personal information. Processing prior to the withdrawal of your consent will be not affected. You also may have the right to deregister your account that you registered on any Site or any Services (if any).

Right to Transfer. The right to request transfer of your personal information to another organisation.

Right of Non-Discrimination. The right to be free from discriminatory adverse treatment for exercising these rights. We will not discriminate against you for exercising any of your CCPA rights, or your rights under other applicable laws where we are not permitted to do so. Under certain applicable laws, you also may have the right to refuse decisions based solely on automated decision making technology that materially affects you.

Submitting Your Requests

Requests to Know, Correct, Delete, Transfer, Withdraw- Your Consent or Deregister Your Account. To exercise your rights to know or delete described above, you may submit a request by contacting us through the following method:

Via email at [email protected]
By phone at 877-264-6283 (toll free)

Requests to Opt-Out of Sharing of Your Personal Information. To exercise your right to opt-out of sales or sharing of your personal information, you may submit a request by email at [email protected].

Verification of Requests. Only you, or an individual legally authorized to act on your behalf, may make a request to know, delete, or opt-out related to your personal information. To designate an authorized agent, please contact us by using the contact information above.

You may only submit a request to know twice within a 12-month period to the extent you are exercising a right under the CCPA.

Your request must:

Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information, or that your are authorized to make a request on someone else’ behalf.
Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We may request additional information from you in order to verify your identity. Additionally, we may require that authorized agents provide proof of their authorization. We cannot respond to your request or provide you with personal information if we are unable to verify your identity, your authority to make a request on behalf of another person, or if we cannot confirm that the personal information relates to you. In general, we will verify your request and your identity by matching the information you provided with the information we have in our records.

You do not need to create an account with us to submit a request to know, or to submit a request to delete your personal information or opt-out of sales of your personal information.

We will only use personal information provided in the request to verify the requestor’s identity or authority to make it.

Transfers of Personal Information Outside of China

If you are resident in China, with your separate consent, we may transfer, access or store your personal information outside of the People’s Republic of China where we are satisfied that adequate levels of protection are in place to protect the integrity and security of your personal information or adequate security measures are adopted and in compliance with applicable laws, such as contractual arrangements. Where required by applicable laws, we will put in place appropriate measures to ensure that processing of your personal information outside of the People’s Republic of China is safeguarded by the equivalent level of data protection as in the People’s Republic of China.

Third-Party Links

Our Site and Services may contain links to third-party websites. Any access to and use of such linked websites is not governed by this Policy, but instead is governed by the privacy policies of those third-party websites. We are not responsible for the information practices of such third-party websites.

Security of Your Personal Information

We have implemented reasonable and appropriate security precautions to protect the information we collect from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. Please be aware that despite our efforts, no data security measures can guarantee security.

You should take steps to protect against unauthorized access to your password, phone, and computer by, among other things, signing off after using a shared computer, choosing a robust, unique password that nobody else knows or can easily guess, and keeping your log-in and password private. We are not responsible for any lost, stolen, or compromised passwords or for any activity on your account via unauthorized password activity.

Minors

We do not knowingly collect or process personal information of minors under the age of 14 without the consent of their parents or guardians, or as otherwise permitted by applicable law. We will take steps to delete the information as soon as possible should we become aware of minors’ personal information. Parents or guardians can contact us to request such deletion.

Access to Your Personal Information

You may modify personal information that you have submitted by logging into your account and updating your profile information. Please note that copies of information that you have updated, modified, or deleted may remain viewable in cached and archived pages of the Site or Services for a period of time.

Your Choices Regarding Our Use of Your Personal Information

We may send periodic promotional e-mails to you (with your consent, where required by applicable laws). You may opt-out of promotional emails by following the opt-out instructions contained in the email. If you opt-out of receiving promotional emails, we may still send you e-mails about your account or any services you have requested or received from us.

Changes to this Policy

This Policy is current as of the Last Updated Date set forth above. We may change this Policy from time to time (with your consent, where required under the applicable law), so please be sure to check back periodically. We will post any changes to this Policy on our Site and Applications.

If you have questions about the privacy aspects of our Site or Services or would like to make a complaint, please contact us at:

Maxon Computer, Inc.
515 Marin Street, Suite 322
Thousand Oaks, CA 91360
United States
Phone: 805-376-3333
Email: [email protected]