Privacy Policy

MAPFOUR PRIVACY POLICY

Last updated: June 3, 2026

Valid from: June 3, 2026

Version: V2.0

§1

GENERAL PROVISIONS

This privacy policy (hereinafter referred to as “Explanation“ (designated) applies to the processing of personal data related to the operation of the website operated by MAPFOUR. 【https://mapfour.com/】 collected, and contains in particular provisions on the protection of personal data and the security of other data that you submit via the website.

§2

DEFINITIONS

The terms used in this document have the following meanings:

1. Responsible (hereinafter also referred to as “MAPFOUR”, “us” or “we”) – a term that collectively stands for the following:

1. GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

2. British GDPR (General Data Protection Regulation of the United Kingdom) – The version of the EU General Data Protection Regulation (Regulation (EU) 2016/679) which was transposed into UK law pursuant to Section 3 of the European Union (Withdrawal) Act 2018 and amended by the Data Protection, Privacy and Electronic Communications (Amendments etc.) (EU Exit) Regulations 2019.

3. users (hereinafter also referred to as “She“ designated) – a natural person who uses the website for their own purposes, i.e., visits the website, creates an account on the website, uses the services or purchases products offered by us.

4. Website – A website operated by us, through which you can, among other things, buy our products, contact us, etc.

§3

CONTACT THE RESPONSIBLE PARTY

If you have any doubts or questions about the processing of your personal data, please feel free to contact us:

· by email: [service@mapfour.com]

· Live chat on our website

§4

PROCESSING OF YOUR DATA

I. Is it necessary to provide your personal data?

Personal data, as defined by the GDPR and the UK GDPR, is any information that, alone or in combination with other information, allows for the direct or indirect identification of you. MAPFOUR may process your personal data in connection with your use of the website.

You provide us with your data when using the website, including when browsing the website, searching for products, or registering on the website. Providing your data is voluntary, but necessary for you to use the website and achieve other purposes. You can refuse to provide your personal data. However, such a refusal may prevent a contractual relationship with MAPFOUR from being established (e.g., you will not be able to place an order).

In some cases, your personal data will be processed after obtaining your explicit consent. You can withdraw your consent at any time by contacting us via one of the methods described in § Contact the 3 mentioned channels.

II. What types of data do we process?

When you use the website, we may collect (and process as described below) your personal data, such as:

1) Contact details and registration data (e.g.First name, last name, email address, telephone number)

2) Location data, but only at the country level, if you have not made a purchase.

3) Delivery address

4) Billing details (e.g., abbreviated account number, address)

5) Technical data (e.g. IP address, device identifier and associated information, details of the operating system and/or the search engine used)

6) statistical data (e.g. website usage, purchase history)

7) sData stored in your account (e.g., purchase history, incomplete purchases)

8) the content of your communication with us (e.g. via the contact form, live chat)

9) the content of your review and your comments on our website

10) Profile name and profile content if you use the social media plugins available on our website (e.g. Facebook, Instagram).

11) Your preferences and settings for the website's display (which are collected through cookies) – (see below)

We process the data collected through cookies. – For more information, please see our cookie policy.

III. For what purposes and for how long does MAPFOUR process your personal data?

We process your personal data on the basis of the following legal grounds in accordance with Regulation (EU) 2016/679 (the “EU GDPR“) or, where applicable, the “UK GDPR“ for the following purposes:

* The stated retention periods may be extended if further processing of the data is necessary to establish or defend legal claims. In this case, we will process the data for the duration of the respective proceedings.

Please note that we may use your data for profiling purposes for marketing, but we will not use your data for automated decision-making.

IV. How long will we process your personal data and How will we store them??

We may process your personal data based on legitimate interests until our legitimate interests are satisfied or until you object to this processing. We store data processed for other purposes for the period required by applicable laws, including those relating to tax and accounting. If no such legal provisions exist, we may process personal data for the duration of the contract and after its termination. – for a period that does not exceed the limitation period for potential claims. Please refer to the table under point III above for detailed information.

Currently storing Map Four Your personal data is stored in Germany. We retain the data in accordance with applicable data protection laws and regulations. We take the necessary and appropriate security measures to ensure data security, taking into account the nature, scope, and purpose of the processing of personal data, the risks involved in processing, and the serious consequences of any damage. For example, we implement a combination of technical measures for encryption and anonymization, as well as the necessary organizational and administrative measures to prevent data misuse, unauthorized access, and unauthorized modification, disclosure, or destruction, etc.

V. How do we share your personal data?

If necessary, we may share your personal data with the following groups of recipients:

· Service providers that support us in our day-to-day business (e.g., delivery, logistics, warehousing, payment processing or IT service providers)

· other companies within the MAPFOUR group, if this is necessary to fulfill our obligations to you.

· Supervisory authorities, courts or competent authorities (at their request, to comply with applicable regulations and laws or to protect their rights and interests)

· Companies that provide us with advice (e.g.our insurers, lawyers, tax advisors and, if necessary, other consultants)

· Companies involved in formal proceedings (e.g. restructurings, mergers, acquisitions or insolvency or liquidation proceedings)

· Postal service providers/courier services

· Providers of plugins for marketing purposes (email marketing, SMS marketing, social media marketing, loyalty programs)

§5

DATA TRANSFER

MAPFOUR is based in Luxembourg. When using the website, your data may be transferred to and processed by the company outside your country of residence. This may particularly affect China and the Hong Kong Special Administrative Region (SAR) in China.

As part of our business operations, we utilize the services of specialist companies from other sectors. In such cases, your personal data may be transferred to and processed in countries outside your country of residence. Specifically, this may include Canada, the United States of America, China, and the Hong Kong Special Administrative Region (China).

We only transfer personal data abroad when necessary. In the event of a transfer by MAPFOUR, we ensure that: (i) the personal data is transferred to countries that are recognized as having an equivalent level of data protection; or (ii) the transfer is carried out in compliance with appropriate safeguards, such as the Standard Contractual Clauses adopted by the European Commission. You can obtain a copy from: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en.

§6

YOUR RIGHTS

You have a number of rights regarding the protection of the personal data we process about you. Please note that these rights may be subject to certain limitations depending on the purpose and legal basis of the processing, as set out in the specific provisions of the GDPR and other applicable data protection laws.

Under the GDPR, you have the following rights, which allow you to determine your personal data and the associated processing operations:

· Right to information: You have the right to request information from us about your personal data and to receive a copy of it. The first copy is free of charge (for further copies we may charge a fee to cover the administrative costs incurred).

· Right to rectification: You have the right to correct your personal data if it is inaccurate or incomplete.

· Right to erasure or restriction of processing: You have the right to request the erasure of your data or the restriction of its processing. If the accuracy, lawfulness, or necessity of processing your personal data is challenged, we will restrict the processing of your personal data to the necessary minimum (storage) and, where appropriate, process it only for the purpose of establishing, pursuing, or defending legal claims, or, if necessary, for the protection of another natural or legal person, or based on other limited considerations arising from applicable law.

· Right to object: You have the right to object to processing if the data is processed to protect a legitimate interest and your objection is justified by a particular situation; this will result in us ceasing the processing of your personal data until we can demonstrate that there are compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or that there are grounds for the establishment, exercise or defense of legal claims;

· Right to data portability: You have the right to request data portability if the data is processed on the basis of consent or for the purpose of concluding or fulfilling a concluded contract and the processing is carried out automatically.

· Right to withdraw consent: You have the right to withdraw your consent to the processing of your personal data by us at any time (without prejudice to the lawfulness of the processing carried out on the basis of the consent before its withdrawal).

To a certain extent, you can exercise your rights directly on our website (e.g., by correcting inaccurate data). In other cases, please contact one of the following to exercise your rights: § 3 of the aforementioned channels to us.

Furthermore, if you believe that our processing of personal data does not comply with applicable data protection regulations, you have the right to lodge a complaint with a data protection supervisory authority. A list of data protection authorities within the European Union can be found at: https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm.

If you are based in:

The UK's data protection authority (Information Commissioner) is responsible for data protection matters.'s Office, https://ico.org.uk/global/contact-us/) responsible for you.

In Switzerland, the Federal Data Protection and Information Commissioner (https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/contact/address.html) Your responsible data protection authority.

In Ireland, the Data Protection Commission (https://www.dataprotection.ie/en/contact/how-contact-us) Your responsible data protection authority.

§7

How we handle children's personal data

We do not offer our products or services to children under the age of 13 or the equivalent age as defined by law in your jurisdiction (we primarily define children based on the laws and regulations of the country or region where our company is located, as the laws of different countries may vary regarding the definition of childhood). We do not knowingly collect personal information from children or use it for marketing purposes; our product does not actively request information from children. If you discover that information about a child has been submitted to us, please contact us by email at [service@mapfour.comWe will delete the relevant data as quickly as possible. If we become aware that a child has provided us with personal data, we will take steps to delete this personal data from MAPFOUR as quickly as possible.

§8

FINAL PROVISIONS

We reserve the right to update and amend this policy at any time. In this case, we will publish the changes to the policy on our website. Should significant changes be made to this policy, we may notify you through other channels, such as by direct email notification.