Mastmove is committed to ensure a high level of protection of personal data and information security.

In order to establish a high level of protection and security, we strive for compliance with data protection laws and regulations and principles for high standards of information security.

We are committed to ensure that processing of personal data is lawful, fair and done in a transparent manner to the persons, whose personal data are collected and processed. This privacy notice is an element of the transparency of our processing and informs the persons how to exercise their rights in relation to our processing. We inform explicitly about the specific purposes for which personal data are processed at the time of the collection of the personal data. We ensure that the personal data collected and processed are adequate, relevant and limited to what is necessary for the purposes for which they are processed. Personal data will only be processed if the purpose of the processing cannot reasonably be fulfilled by other means.

1. We are the data controller and how to contact us

MASTMOVE OÜ is the controller for the personal information we process. You can contact us by using this contact information:

MASTMOVE OÜ

Private limited company

Registry code 16901490

15551 Ahtri tn 12, Tallinn, Estonia

E-mail address:info@mastmove.com

2. The purpose and legal basis of our processing of personal information

We collect and process personal data including name, e-mail address, IP-address, telephone number, nationality, etc. when it is necessary for the performance of a contract or prior to entering a contract for the purpose of general communication, compliance with requirements etc. In addition, the data is processed where necessary to comply with legal obligations applicable to us. The legal basis of this process is Article 6 (1) (b) and (c) of the General Data Protection Regulation (GDPR).

In certain cases, we may use your contact information to send customer surveys based on the services we have provided. The processing and distribution of the customer survey is based on our legitimate interest in improving the services we provide. The legal basis of this process is Article 6 (1) (f) of the GDPR.

If your consent was given to other purposes, you can withdraw the consent by writing to our email info@mastmove.com.

3. How we collect your personal data

3.1. Newsletters

When you sign up to our newsletters, we collect and process your name, email address, nationality, timestamp, confirmation status and source URL, to provide you with company news, market updates and advisories, important notices, and other relevant information. The legal basis of this process is Article 6 (1) (a) and (f) of the GDPR.

You can always withdraw your consent. Our newsletters are provided with a link to remove your subscription.

3.2. Online forms

On our website, we provide some online contact and request forms. When you submit the forms, we process the personal data you choose to provide in order to handle and respond to your inquiry. The legal basis of this process is Article 6 (1) (a) and (b) of the GDPR.

If your inquiry relates to another company within our group, we may share your information with that entity and, where relevant, obtain additional information from them.

4. Transfers of personal information to other recipients

We transfer personal information to other recipients when it is necessary to conclude or perform a contract. Such third parties consist of IT-providers, customer service centers and affiliated companies. We transfer only the information which is necessary for the recipient to perform the specific activities relating to the contract. The legal basis of this processing is Article 6 (1) (f) of the GDPR.

The transfers to other recipients include transfers to third countries when it is necessary to the conclusion or performance of a contract. The basis for such transfer to third countries shall always be in accordance with the EU Commission's standard contracts (SCC) and Article (49) (1) (b) and (c) of the GDPR.

Aside from above, it is a general rule that your personal data is not disclosed to a third party without your permission. However, under certain circumstances and in accordance with applicable law, we may need to disclose your personal data to the Police, Lawyers, Auditors, Courts and Public Authorities in accordance with Article 6 (1) (e) and Article 49 (1) (d) and (e) of the GDPR.

5. Security measures

We protect confidentiality, integrity and accessibility of your personal data. Hence, we have implemented security measures to ensure that our internal procedures meet the established security standards and applicable legal requirements.

We have internal rules on information security that contain instructions and measures to protect your personal data from being destroyed, lost or altered, against unauthorized disclosure, and unauthorized access to and knowledge of them.

6. Cookies

When you enter our website, we may collect information via cookies. This may include information including your IP address, client ID, browsing history, and form data.

We use the collected information via cookies to ensure our website functions properly by enabling features such as page navigation and access to secure areas of the website, in accordance with your consent. We also use information collected through cookies to promote our brand and services, provided that you have consented to the use of marketing cookies, including for targeted advertising purposes.

The legal basis for the collection of personal data via cookies is Article 6 (1) (a) and (f) of the GDPR.

You may withdraw or change your consent to cookies at any time through the cookie management tools available, which you can find in the bottom left corner of our website.

6.1. Links to third-party websites

Our website may contain links to other websites. We are not responsible for the content of other companies’ websites or their practices in collecting personal data. When you visit other websites, you are advised to read the owner’s policy for protection of personal data and other relevant policies.

Cookies from third parties, to varying extent this may include:

Google Analytics, Google Ads, Facebook, LinkedIn.

6.2. Facebook

If you visit our website, you may be presented with information about our company when you visit Facebook.

To enable this, Facebook places a cookie on your device (such as your computer, phone, or tablet) when you visit this section of our website. This cookie collects information about your browsing behaviour, such as a unique identifier, allowing your device to be recognised and enabling targeted advertising on Facebook.

6.3. LinkedIn

LinkedIn cookies allow us to present relevant information about job openings and career opportunities when you visit LinkedIn, by recognising your device and associating it with your prior interaction with our website.

You can read more about our use of cookies in our Cookie Policy.

7. Limitation of storage period

We retain the personal data for as long as it is necessary to fulfill the purposes for which it was collected. This includes complying with legal requirements, fulfill contractual obligations, and pursuing other legitimate purposes as described above under section “2. The purpose and legal basis of our processing of personal information”.

In order to ensure that the personal data is not kept longer than necessary, we have established time limits for deletion and for periodic reviews. Every reasonable step is taken to ensure that inaccurate personal data are rectified or deleted.

We process data in a manner that ensures appropriate security and confidentiality of the personal data, including prevention of unauthorised access to or use of personal data and the equipment used for the processing.

8. Your rights regarding our processing

You have the right to object to our collection and further processing of your personal data. You have several rights which you can exercise regarding our processing of your personal data:

The right of access – you are entitled to information regarding the identity and contact information of the data controller, the purpose of the processing, the categories of personal data, the recipients or categories of recipients of the personal data, information regarding transfers to third countries, the storage period or criteria for storage, the right to withdraw a consent, the original sources of the personal data, and the additional rights, which are listed below.

The right of rectification – you are entitled to rectification of inaccurate information and have incomplete data completed.

The right of erasure – best known as ‘The right to be forgotten’ entitles you to a conditioned right to have your personal data erased.

The right of restriction of processing – you are entitled to the restriction of processing when another issue regarding the legality of the processing of personal data is unresolved. Until the other issue is solved, the controller is limited to processing the personal data by storage.

The right to data portability – you are entitled to obtain your personal data in a structured commonly used and machine-readable format, and to have those data transmitted to another controller without hindrance.

Use the contact information provided above if you wish to exercise your rights.

9. You can lodge a complaint

We work to high standards when it comes to processing your personal information. If you have queries or concerns, please contact us at info@mastmove.com, and we will respond.

If you remain dissatisfied, you can make a complaint about the way we process your personal information to the supervisory authority. You can make the complaint with the national authority in the state of your residence or your workplace.

We reserve the right to make changes to this privacy policy from time to time. When updated, the date at the bottom of the privacy policy will be updated accordingly. The, at all times, applicable privacy policy will be available at our website ”[mastmove.com]”. In the event of significant changes, you will be notified via email.

Last updated: 17.07.2026.