DRAFT — nerevizuit de avocat, de revizuit juridic (11.10.2026) DRAFT — not reviewed by a lawyer, subject to legal review (11.10.2026) # CONSENT TO THE COLLECTION OF TECHNICAL DEVICE FINGERPRINTS — MPSDesk Draft version 2, of 13.10.2026 This consent is given to XEGORA SRL, registered office at Piața 1 Mai nr. 1-2, Cluj-Napoca, Cluj County, Romania, VAT ID RO39061240, e-mail office@xegora.ro, phone +40 770 845 074 ("XEGORA"), by the company using MPSDesk (the "Company"), through the person who ticks the declaration below on its behalf. ## 1. What a "technical fingerprint" is For each monitored printing device (printer, multifunction device), MPSDesk reads over the network, using the SNMP protocol, the technical information the device provides. Of this, MPSDesk keeps only the **technical fingerprint of the model**: what kind of device it is and how it reports its data. ## 2. What is collected - the model identifier declared by the device (sysObjectID) and its technical description (manufacturer, model, firmware versions); - the list of information groups (MIBs) the device provides and the number of values in each; - the technical values: page counters, consumable levels and types, input trays and outputs, capabilities (for example duplex, fax, scanning) and status codes. ## 3. What is NOT collected Before the fingerprint is stored, MPSDesk removes from it: - **any personal data**: the device's job log (who printed, document names, computer names), the contact person and location written on the device, the text on the device's display, SNMP users and passwords, e-mail addresses; - **any identity**: the name of the Company, of its customers and of their locations; the serial number of the device and of its components; the name given to the device; IP and MAC addresses, of the device and of other computers on the network; computer names, web addresses and network paths; - the moment of the reading. The fingerprint is not linked to the Company, to its customers or to the device it comes from: it is not stored together with any of their identifiers. ## 4. Purpose Fingerprints serve a single purpose: **automatic recognition of device models** by MPSDesk — so that a new model is recognised and read correctly (counters, consumables, status) without manual configuration. Fingerprints are not sold, are not used for advertising and are not used to assess the Company or its customers. ## 5. Condition of the demo access Free access to the MPSDesk demonstration is granted **in exchange for** this consent. Without consent, no demo account is created and no fingerprint is collected. The demonstration runs in the hosted model (on servers operated by XEGORA). The data the Company enters into the demonstration is processed by XEGORA on the Company's behalf, under the Data Processing Agreement (DPA). **Contact details of the demonstration** (DRAFT, to be reviewed by a lawyer). When the demonstration starts, XEGORA keeps the Company's name, the contact person's name, their e-mail address and their phone number, so that XEGORA can follow up with the Company after the demonstration (questions, an offer). They are kept **separately from the technical fingerprints**: the fingerprints stay anonymous and are never linked to these contact details. The contact details remain after the demo account is deleted and are kept for **12 months from the start of the demonstration**; they are then deleted automatically. The Company may ask for their earlier deletion at any time, at office@xegora.ro. ## 6. Retention Fingerprints are kept on XEGORA's servers for as long as they are useful for model recognition. Being anonymous, they cannot be retrieved, on request, as belonging to the Company. ## 7. Withdrawal The Company may withdraw its consent at any time by writing to office@xegora.ro. From the withdrawal on, no new fingerprint is collected. Fingerprints collected before remain, since they can no longer be told apart from those of others. ## 8. Declaration By ticking the declaration "I have read and agree, on behalf of the Company, to the collection of anonymous technical device fingerprints under the terms above", the person ticking it declares that they are entitled to bind the Company. The following are kept: the Company, the person's name and e-mail address, the version of the text, its language and the date.