Privacy

I. Who processes personal data?

The responsible party within the meaning of data protection law is:

If you have any questions or suggestions regarding data protection, you can contact our company data protection officer, Andreas Logk, at any time by e-mail at support@deeptrue.com or by post at deeptrue AG, Dorfstrasse 53, CH-6375 Beckenried, Switzerland.

As deeptrue is based in Switzerland and therefore not in the European Union, we have appointed a representative in accordance with Art. 27 GDPR to represent us in the European Union regarding data protection concerns. If you are affected by data processing by us in the European Union, you can also address your concerns to him:

Representative

Andreas Logk

Contact

andreas.logk@deeptrue.com

II. What personal data do we process, for what purpose and on what legal basis?

Via the website www.deeptrue.com, deeptrue offers a web-based software solution in the area of market analysis and marketing as well as all related components and functions (hereinafter "platform"). In addition, deeptrue offers its customers related consulting services (consulting services and the platform together hereinafter "services").

1. When registering as a customer on our platform

You have the option of registering on deeptrue's website by providing personal data. Which personal data is transmitted in the process results from the respective input mask used for the registration. This is your first name, last name, e-mail address, name of your company and any other information about your company. During registration, your IP address and the date and time of registration are also stored. This serves to prevent misuse of the services.

We process this data for the purpose of fulfilling our contract with you in accordance with our General Terms and Conditions.

We may process this data as this is necessary for the performance of our contractual services in accordance with our General Terms and Conditions pursuant to Article 6 (1) (b) DSGVO.

2. When participating in surveys

Survey participants from customers: If deeptrue processes personal data of survey participants in the context of a specific product or market research study (e.g. by sending the survey link to your email address), this is only done on behalf of deeptrue's customers. In this context, deeptrue is a processor of its clients, for which deeptrue and the respective client have concluded a corresponding contract. The customer has guaranteed to deeptrue that the processing of the respective personal data of the survey participants by deeptrue is permitted under data protection law (by consent or another basis). Should you nevertheless feel that your data protection rights are affected, you can contact our data protection officer or data protection representative at any time.

Survey participants via panel providers: deeptrue conducts product or market research study with survey participants via so-called panel providers. Deeptrue does not receive any personal data of the survey participants in this context. As a survey participant, you are only contractually bound to your respective panel provider and the latter is responsible for processing your personal data. Should you nevertheless feel that your data protection rights are affected by deeptrue, you can contact our data protection officer or data protection representative at any time.

3. When visiting and using our website

3.1 When using the website for information purposes only, i.e. if you do not register or otherwise transmit information to deeptrue, deeptrue only collects the personal data that your browser transmits to deeptrue's server. If you wish to view the website, deeptrue collects the following data, which is technically necessary to display the website and to ensure stability and security. These are stored in the log files of the server. (Legal basis is Art. 6 para. 1 p. 1 lit. f DS-GVO):

• Your IP address
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• Amount of data transferred in each case
• Website from which the request came
• Your browser
• Your operating system and its interface
• Language and version of the browser software

3.2 Use of cookies: deeptrue uses cookies. Cookies are pieces of data that are stored on your computer system by your internet browser. The cookies can be transmitted to deeptrue when this page is called up and thus enable the user to be identified. Cookies help to simplify the use of Internet pages for users. It is possible to object to the setting of cookies at any time by changing the setting in your internet browser accordingly. Cookies that have been set can be deleted. However, if cookies are deactivated, it may not be possible to use all the functions of the website to their full extent.

3.3 Use of Google Analytics

• deeptrue uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymisation is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
• The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
• You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at http://tools.google.com/dlpage/gaoptout.
• This website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are processed in a shortened form, thus excluding the possibility of personal references. If the data collected about you is personally identifiable, this is immediately excluded and the personal data is immediately deleted.
• deeptrue uses Google Analytics to analyse and regularly improve the use of the website. The statistics obtained enable deeptrue to improve its offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework). The legal basis for the use of Google Analytics is Art. 6 para. 1 p. 1 lit. f DS-GVO.
• Information from the third-party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: http://www.google.com/analytics/terms/de.html, Overview of data protection: http://www.google.com/analytics/learn/privacy.html, as well as the data protection declaration: http://www.google.com/policies/privacy.

3.4 Use of Google Adwords

deeptrue uses Google Adwords to draw attention to attractive offers on external websites with the help of advertising media (so-called Google Adwords). This makes it possible to determine, in relation to the data of the advertising campaigns, how successful the individual advertising measures are. deeptrue thus pursues the interest of showing you advertising that is of interest to you, of making this website more interesting for you and of achieving a fair calculation of advertising costs.

These advertisements are delivered by Google via so-called "ad servers". For this purpose, deeptrue Ad Server uses cookies, which can be used to measure certain parameters for measuring success, such as the display of the ads or clicks by users. If you access this website via a Google ad, Google Adwords will store a cookie on your computer. These cookies usually expire after 30 days and are not intended to identify you personally. Analysis values usually stored for this cookie:

These cookies enable Google to recognise your internet browser. If a user visits certain pages of the website of an Adwords customer and the cookie stored on his computer has not yet expired, Google and the customer can recognise that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Adwords customer. Cookies can therefore not be tracked via the websites of Adwords customers. deeptrue itself does not collect and process any personal data in the aforementioned advertising measures, but is only provided with statistical evaluations by Google. Based on these evaluations, deeptrue can identify which of the advertising measures used are particularly effective. deeptrue does not receive any further data from the use of the advertising media; in particular, users cannot be identified on the basis of this information.

Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. deeptrue has no influence on the scope and further use of the data collected by Google through the use of this tool and therefore informs you according to this knowledge. Through the integration of AdWords Conversion, Google receives the information that you have called up the relevant part of our website or clicked on an ad from deeptrue. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address.

You can prevent participation in this tracking procedure in various ways:

• by adjusting your browser software accordingly; in particular, the suppression of third-party cookies will result in you not receiving advertisements from third-party providers;
• by disabling conversion tracking cookies by setting your browser to block cookies from the domain "www.googleadservices.com", https://www.google.com/settings/ads, which setting will be deleted when you delete your cookies;
• by disabling interest-based ads from the providers that are part of the self-regulatory campaign "About Ads", via the link http://www.aboutads.info/choices, this setting being deleted when you delete your cookies;
• by permanently deactivating them in your Firefox, Internetexplorer or Google Chrome browsers at the link http://www.google.com/settings/ads/plugin. You may then not be able to use all the functions of this offer to their full extent.

The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. f DS-GVO. Further information on data protection at Google can be found here: http://www.google.com/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

3.5 Use of Facebook

• deeptrue has integrated components of the company Facebook.
• The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If a data subject lives outside the USA or Canada, the controller of personal data is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
• Each time you call up one of the individual pages of this website on which a Facebook component (Facebook plug-in) has been integrated, the internet browser on your computer is automatically prompted by the respective Facebook component to download a representation of the corresponding Facebook component from Facebook. A complete overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/. Within the scope of this technical procedure, Facebook receives information about which specific sub-page of this website is visited by you.
• If you are logged in to Facebook at the same time, Facebook recognises which specific sub-page of our website you are visiting each time you call up this website and for the entire duration of your respective stay on this website. This information is collected by the Facebook component and assigned to your Facebook account by Facebook. If you click on one of the Facebook buttons integrated on our website, for example the "Like" button, or if you post a comment, Facebook assigns this information to your personal Facebook user account and stores this personal data.
• Facebook always receives information via the Facebook component that you have visited this website if you are logged into Facebook at the time of the call; this takes place regardless of whether you click on the Facebook component or not. If you do not want this information to be transmitted to Facebook, you can prevent it from being transmitted by logging out of your Facebook account before accessing this website.
• The data policy published by Facebook, which can be accessed at https://www.facebook.com/about/privacy/, provides information on the collection, processing and use of personal data by Facebook. It also explains which setting options Facebook offers to protect your privacy. In addition, various applications are available that allow you to suppress the transmission of data to Facebook. You can use such applications to suppress the transmission of data to Facebook.

3.6 Use of HubSpot

• deeptrue uses a HubSpot tracking code, which uses cookies or similar technologies to track website visitors and collect demographic information.
• HubSpot keeps track of the deeptrue.com websites and pages you visit within HubSpot. The data is used to provide customised content and promotions to users whose behaviour indicates that they are interested in a particular subject area.
• For more information about HubSpot’s privacy policy, please refer to HubSpot’s published privacy policy.

3.7 Use of LinkedIn

• deeptrue uses a LinkedIn tracking code, which uses cookies or similar technologies to track website visitors and collect demographic information.
• LinkedIn keeps track of the deeptrue.com websites and pages you visit within LinkedIn. The data is used to provide customized content and promotions to users whose behaviour indicates that they are interested in a particular subject area.
• For more information about LinkedIn’s privacy policy, please refer to LinkedIn’s published privacy policy.

III. Are you required to provide us with personal information?

In order for us to provide the platform and our services, you, as a customer, must provide us with the following data:

• Name and address of the company / organisation
• First name and last name
• Email address of the contact person of the company / contact person

Any other personal data is not mandatory for registration and use of the platform. Certain functions of the platform may not be used or not fully used or may not be optimally displayed (e.g. in the absence of consent to cookies).

IV. Will your personal data be passed on to third parties?

• Personal data is only passed on to our server provider Amazon AWS in Ireland for storage purposes.
• In addition, e-mail addresses are communicated to subcontractors for the processing of invoices or other activities necessary for the fulfilment of the contract with our customer.

V. Is your data transferred to countries outside of Switzerland and the European Union?

deeptrue is based in Switzerland and uses a server infrastructure in Ireland.

Personal data in connection with the use of our website and platform will only be transferred to countries outside Switzerland and the European Union in the following constellations:

• to carry out analyses with Google Analytics and Google Adwords;
• in the context of the social plugins from Facebook and LinkedIn;
• in the context of the use of HubSpot.

VI. How long will your data be stored?

Personal data is stored for the duration of the respective statutory retention period. After expiry of the period, the data is routinely deleted, unless there is a requirement for a longer-term contract initiation or contract fulfilment.

VII. What rights do you have with regard to your personal data?

If your personal data is processed, you have the following rights vis-à-vis deeptrue as the data controller:

• You may request confirmation from us as to whether we are processing personal data relating to you (right of access). If so, you can request information from us about this personal data.
• You have a right to rectification, a right to restriction of processing and a right to erasure of your personal data. In addition, you have a right to be informed about rectification, restriction or erasure.
• You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data that we process on the legal basis of legitimate interest.
• Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement, if you consider that the processing of personal data infringes the GDPR.

For more information on your rights, please visit the following official website of the European Commission: https://ec.europa.eu/info/law/law-topic/data-protection/reform/rights-citizens/my-rights_de.

To exercise your rights, contact our Data Protection Officer Andreas Logk by email at suppport@deeptrue.com or by post at deeptrue AG, Dorfstrasse 53, CH-6375 Beckenried, Switzerland.