PERSONAL DATA PROTECTION POLICY
(FM World USA Group Corp., hereinafter referred to as 'FM World USA')

FM World USA is committed to protecting the personal data and privacy of its customers and users of the website https://usa.fmworld.com/ (hereinafter referred to as the "Service"). We comply with personal data protection regulations and implement appropriate cybersecurity measures. You can modify or update your personal data at any time, and we provide guidance and clarifications when needed.

FM World USA does not share users' personal data with unauthorized entities. Personal data is stored on secure servers with access limited to authorized personnel only. FM World USA employees undergo training on data protection and IT system management, and internal policies regulate data protection procedures.

This policy aims to help you understand how we process and protect your personal data.

COMPLIANCE WITH APPLICABLE LAWS

FM World USA prioritizes the security of your personal data and ensures compliance with:

• The General Data Protection Regulation (GDPR) (EU) 2016/679,
• The Electronic Communications Privacy Act (ECPA) and other applicable U.S. privacy laws,
• The California Consumer Privacy Act (CCPA) and similar state-level privacy regulations where applicable.

TABLE OF CONTENTS:

1. Who is responsible for your personal data?
2. How to contact the Data Administrator?
3. What personal data do we process?
4. On what basis and for what purpose do we process your personal data?
5. What are your rights regarding personal data processing?
6. Processing of sensitive personal data.
7. Who do we share your data with?
8. Transfer of personal data to third countries.
9. How long do we retain your personal data?
10. Automated decision-making.
11. Changes to the Privacy Policy.

1. WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA?

The data controller for Business Partners' personal data is FM World, a limited liability company based in Wrocław, Poland (51-129), at ul. Źmigrodzka 247, registered in the National Court Register (KRS) under number 0000517456, with NIP 8952033399 (hereinafter referred to as "FM GROUP WORLD").

The entity responsible for processing personal data of individuals who are not Business Partners is FM World USA Group Corp., headquartered in Miami :2750 SW 145th Avenue Miramar Florida 33027 EIN- 35-2703171

2. HOW TO CONTACT THE DATA ADMINISTRATOR?

For inquiries regarding the processing of your personal data, please contact FM WORLD GROUP's Data Protection Officer via:

• Mail: FM WORLD Sp. z o.o., Wrocław (51-129), ul. Źmigrodzka 247 (Poland) (Polish or English)
• Email: iod@fmworld.com

3. WHAT PERSONAL DATA DO WE PROCESS?

We may process the following personal data:

• Business Partner Number (Distributor ID)
• Name and surname / Business name
• National Identification Number (or equivalent)
• Date of birth
• Login credentials (username, connection ID, and password)
• Payment information (bank account number, credit/debit card details)
• Residential address
• Phone number (including fax)
• Email address
• Shipping address and pickup point selection (if applicable)
• Contact details of the order recipient

4. ON WHAT BASIS AND FOR WHAT PURPOSE DO WE PROCESS YOUR PERSONAL DATA?

FM World USA processes personal data based on contractual agreements and user consent, ensuring the proper provision of services. In some cases, processing may also be based on legal obligations or legitimate business interests, as outlined in Article 6 of the GDPR.

5. WHAT ARE YOUR RIGHTS REGARDING PERSONAL DATA PROCESSING?

Under the GDPR and applicable U.S. privacy laws, you have the following rights:

• Right to access your personal data.
• Right to rectification of inaccurate or incomplete data.
• Right to erasure ("Right to be Forgotten") in certain cases.
• Right to restrict processing under specific conditions.
• Right to data portability in a structured, commonly used format.
• Right to object to processing for direct marketing purposes.
• Right to withdraw consent at any time without affecting previous lawful processing.
• Right to lodge a complaint with the relevant data protection authority.

To exercise these rights, contact our Data Protection Officer at iod@fmworld.com or info@usa.fmworld.com

6. PROCESSING OF SENSITIVE PERSONAL DATA

FM World USA does not process sensitive personal data (such as health, racial, or religious information).

7. WHO DO WE SHARE YOUR DATA WITH?

Your data may be shared with:

• Service providers operating on our behalf, under strict contractual obligations.
• Government authorities when legally required.

8. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES

When transferring data outside the European Economic Area (EEA) or the U.S., FM World USA ensures compliance with data protection laws by using:

• Standard Contractual Clauses (SCCs) approved by the EU,
• Privacy Shield certification (where applicable),
• Adequacy decisions by the European Commission.

9. HOW LONG DO WE RETAIN YOUR PERSONAL DATA?

We retain personal data only for as long as necessary to fulfill the purposes for which they were collected, comply with legal obligations, or protect our legal interests.

10. AUTOMATED DECISION-MAKING

FM World USA does not engage in automated decision-making or profiling based on your personal data.

11. CHANGES TO THE PRIVACY POLICY

This Privacy Policy may be updated due to legal changes or operational adjustments. Any modifications will be communicated in advance to affected users.

SECURITY MEASURES

FM World USA implements technical and organizational measures to protect personal data against unauthorized access, modification, or misuse. Our security measures include:

• Data access controls ensuring only authorized personnel can access personal information.
• Encryption and secure storage of sensitive data.
• Regular security assessments to identify and mitigate risks.

For further inquiries, contact info@usa.fmworld.com