MSC collects and processes certain Personal Data from you and your mobile device. For the purposes of this Privacy Policy, "Personal Data" means all kinds of information recorded electronically or otherwise in relation to identified or identifiable natural persons. It does not include Personal Data or aggregate information after anonymous processing.

On our mobile app, or through the use of www.mymsc.com/mymsc portal, the Personal Data collected will depend on which of our services you utilize.

• First Name
• Last Name
• Company Name
• Street
• City
• Country
• State/Region
• Phone
• Postal Code
• MSC Agency
• Tax ID
• Additional Comments

• eBooking container services (Select port/ram/Barge/Door; Saling Schedule; Expected Time of Departure; Estimated Time of Arrival).
• Tracking services (MSC Agency; Bills of Lading Number; Container Number; Booking Number)
• Schedules of port (Port of load; Port of discharge; Expected Time of Departure; Weeks out)
• Booking history when you use myMSC for the container shipments services.
• VGM Solas (Verified Gross Mass). MSC recommend that shippers keep a record of VGM's for requests by authorities.
• The date, time, transaction details and location data for geolocation restrictions and preference version.
• Users' correspondence, communications and connections with our staff.
• Any information which is provided to us by you or on your behalf.

myMSC provides a wide variety of container shipping services to its clients. The following table details the key context for which ("Legal Basis") and why ("Purposes") we collect, obtain, and process your Personal Data:

a) Necessary for entering or performance of a contract

It is necessary to process your Personal Data to enter into and perform our services and provide the corresponding solutions services or support ("myMSC Services").

myMSC provides a wide variety of container shipping services to its clients, like the following ones:

• eBooking container services
• Tracking services
• Schedules of port
• Booking office location
• Request for tariff rates
• Instant Quote
• Shipping instructions
• Free time
• Templates
• Schedule
• Solas VGM
• Receive notification and announcements
• Support and contact
• Review the apps performance to guarantee a smooth running of myMSC Services
• Send communications via email and phone (prior consent)

IMPORTANT You are obliged to provide us with your Personal Data as it is necessary in the Sign In Form to register in myMSC Services. In the event that you do not wish to provide us with your Personal Data for the above purposes, you may not be able to access myMSC Services.

We may obtain, collect and process your Personal Data where we have a legitimate interest to do so part of your engagement with us as a recipient of myMSC Services:

• Improving Website and App Functionality and Efficiency
• To provide, improve, test and monitor the effectiveness of the myMSC app;
• To monitor metrics such as total number of visitors, traffic data and demographic patterns and other statistics provided from PlayStore and AppStore;
• To ensure the content on the app is presented in the most effective manner for you and to enhance your use of the myMSC Services.
• Improving myMSC services
• To better our services offering through online surveys.
• To process the reviews and punctuation published by the users to measure the level of satisfaction; and
• To process and communicate with you if you choose to cancel your myMSC account, and/or request we provide you with a report on the data held about you.

IMPORTANT Before we process your Personal Data to pursue our legitimate interests for the above purposes, we determine if such processing is necessary, and we carefully consider the impact of our processing activities on your fundamental rights and freedoms. On balance, we have determined that such processing is necessary for our legitimate interests and that the processing which we conduct does not adversely impact on these rights and freedoms.

It is necessary to process your Personal Data in order to comply with legal obligations to which we are subject. We obtain, collect and process your Personal Data in order to comply with the following legal obligations:

• To comply with Chinese Personal Data Protection Law; and
• To comply with other applicable laws (Corporate Law).

We partner with Microsoft Clarity and Contentsquare to capture how you use and interact with our website through behavioural metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the following Privacy Statements:

• Microsoft Privacy Statement
• Contentsquare Privacy Statement

a) Play Store

All developers that have an app published on Google Play must complete the Data safety form, including apps on internal, closed, open, or production testing tracks.

Even developers with apps that do not collect any user data are required to complete this form and provide a link to their privacy policy. In this case, the completed form and privacy policy can indicate that no user data is collected or shared.

All developers in PlayStore must how they collect and handle user data for the apps they publish on Google Play, and provide details about how they protect this data through security practices like encryption.

On myMSC Content Page in Play Store, we provide this information on the new Data safety section (Policy > App content). The information you provide will be reviewed by Google as part of the app review process. It will be shown on your store listing to help Google Play users understand how you collect and share data before they download your app.

b) App Store

On the App Store, mymsc app come from us as identified developers who have agreed to follow Apple guidelines, and are securely distributed to users with cryptographic guarantees against modification. Mymsc app and each update is reviewed to evaluate whether it meets requirements for privacy, security, and safety. This process, which is being constantly improved, is designed to protect users by keeping malware, cybercriminals, and scammers out of the App Store.

Persons that don't have a legally age recognized as adults, are not permitted to open a myMSC Account and operate any of the functionalities that the app can provide. We ask that persons under that legal range do not submit any Personal Data to us or use our services. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental’s or guardian’s consent, we take steps to remove that Personal Data from our servers.

A "vulnerable person" means a natural person who has the capacity to make his or her own decisions but who, because of individual circumstances, may require assistance to do so (for example, visually impaired); and/or has limited capacity to make his or her own decisions and who requires assistance to do so (for example, persons with intellectual disabilities or mental health difficulties).

Vulnerable Persons should contact us at support@msc.com before registering for an account with us or have their guardian or attorney contact us.

You have the following rights in Personal Data processing activities:

• Right to know
• Right to make decision
• Right of access
• Right to review and copy
• Right to correction
• Right to erasure
• Right of Personal Data portability
• Right to restriction or refusal of processing
• Right to object
• Withdrawal of consent
• Ask for an explanation of Personal Data processing rules
• Deactivate account (Remember that once you delete your profile, you won't be able to get it back. You'll lose all the data and content in that account, like messages, record services, Booking history…)

If you want to exercise the above rights, please fill out the Personal Data Request Form (Personal Data Request), or please contact us in the following ways:

Data Protection Team E-mail Address: data.protection@msc.com

If you contact us about any of the above rights, unless otherwise stipulated by laws and regulations, we will reply within 15 working days. If we need more time to process your request, we will notify you 15 days in advance.

1. categories of Personal Data collected about you within the past 12 months, as well as the related purposes for collection and the sources of the Personal Data;
2. specific pieces of Personal Data about you collected within the past 12 months; and
3. categories of Personal Data about you disclosed for a business purpose within the past 12 months.

You may make a verifiable consumer request for access or data portability from us twice within a 12-month period, free of charge.

• Right to Request Deletion of Personal Data

  California residents may have the right to request that a business that collects Personal Data about you delete that Personal Data, unless an exception in the CCPA applies. If MSC Group cannot grant your deletion request, we will specify the basis for denial.

• Right to Opt-Out of Sale of Personal Data

  As noted above, we will not sell and have not sold within the past 12 months the Personal Data we collect through this Website.

• Right to Non-Discrimination

  MSC Group will not discriminate against you for exercising any of your rights under the CCPA.

• How to Exercise Your Rights

  If you have the rights described above, you may exercise those rights by submitting a verifiable consumer request to us by filling out this form or by contacting us by phone +1 212 764 4800. Only you or an authorized agent (as described below) may make a verifiable consumer request related to your Personal Data.

• How to Authorize an Agent

  An authorized agent may submit a request on your behalf, but only if the authorized agent also submits your written permission and a copy of the agent’s registration with the California Secretary of State.

• How We Verify Your Request

  To respond to your request under the CCPA we must verify your identity or the authority of your authorized agent to make the request. Making a verifiable consumer request does not require you to create an account with us.

  To allow us to verify your consumer request, please include the following information: name, address, phone number and email address. We will verify your consumer request by comparing the information you provide, with information already in our possession, and taking additional steps to minimize the risk of fraud, including asking for your identification document.

  If you make contact with us in regards to any of the rights outlined above, we will respond within 30 days. If we require additional time to process your request, we will notify you within these first 30 days.