Respecting Your Privacy Privacy Policy Last updated: 14 February 2020 BIDSWITCH GmbH respects your right to privacy. This Privacy Notice explains who we are, how we collect, share and use personal data about you, and how you can exercise your privacy rights. This Privacy Notice only applies to personal data that we collect through our website, www.BIDSWITCH.com (“Websites”). If you have any questions or concerns about our use of your personal data, then please contact us using the contact details provided at the bottom of this Privacy Notice. Quick links We recommend that you read this Privacy Notice in full to ensure you are fully informed. However, if you only want to access a particular section of this Privacy Notice, then you can click on the relevant link below to jump to that section. What does BIDSWITCH do? What information do we collect? For what purposes do we use your information for? How do we protect your information? Do we use cookies Do we disclose any information to third parties? International data transfers Data retention Third-party links Children’s Information Additional Disclosures for Data Subjects in the EEA Your Data Subject Rights Additional Disclosures for California Residents Changes to our Privacy Notice How to contact us What does BIDSWITCH do? BIDSWITCH is a provider of real time online advertising support services, headquartered in Switzerland, but with group companies all around the world. Our services enable buyers and sellers of online media to trade media with each other. For more information about BIDSWITCH, please see the “About” section of our Website at https://www.bidswitch.com/about/. What information do we collect? Information that you provide voluntarily: We may collect information from you when you register with us on our website, place an inquiry, apply for a job, respond to a survey or visit our websites. When registering on our website you may be asked to provide us with information such as your name, e-mail address, mailing address, phone number, website and company information. We use your personal information to respond to your requests for customer support, or to provide you with information you request about our products and services Information that we collect automatically: When you visit our Website, we may collect certain information automatically from your device. In some countries, including countries in the European Economic Area (“EEA”), this information may be considered personal data under applicable data protection laws. Specifically, the information we collect automatically may include information like your IP address, device type, unique device identification numbers, browser-type, broad geographic location (e.g. country or city-level location) and other technical information. We may also collect information about how your device has interacted with our Website, including the pages accessed and links clicked. Collecting this information enables us to better understand the visitors who come to our Website, where they come from, and what content on our Website is of interest to them. We use this information for our internal analytics purposes and to improve the quality and relevance of our Website to our visitors. Some of this information may be collected using cookies and similar tracking technology, as explained further under the heading "Do we use cookies?" below and in our full Cookie Statement, available. Information that we obtain from third party sources: From time to time, we may receive personal data about you from third-party sources, but only where we have checked that these third parties either have your consent or are otherwise legally permitted or required to disclose your personal data to us. The types of information and third parties we collect from include where you visit a website that displays advertising provided via one of our advertising technology partners, that partner may provide us with an extract from a cookie stored by the website that you are visiting to help select advertising or content relevant to your interests. For what purposes do we use your information for? Any of the personal data that we collect from you may be used in one of the following ways: To personalize your experience (your information helps us to better respond to your individual needs); To improve our website (we continually strive to improve our website offerings based on the information and feedback we receive from you); To improve customer service (your information helps us to more effectively respond to your enquiries, applications and support needs); To administer a survey or other website feature; To send periodic emails; or For any other purpose with your informed consent. Note: If at any time you would like to stop receiving emails or communications from us, you can contact us at info@bidswitch.net and we will remove you from our database. How do we protect your information? We implement a variety of security measures to maintain the security of your personal data. The measures we use are designed to provide a level of security appropriate to the risk of processing your personal data. Nevertheless, transmission via the internet is not completely secure and we cannot guarantee the security of information about you. Do we use cookies? Yes, for more information see our Cookie Statement To opt-out from our cookie(s), please click this link. Do we disclose any information to third parties? We do not sell, trade, or otherwise transfer to outside parties your personal data. This does not include trusted third parties who assist us in operating our website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect our or others rights, property, or safety. We may provide visitor information to third parties for marketing, advertising or other uses. We may disclose your personal data to the following categories of third parties: to our group companies, third party services providers and partners who provide data processing services to us (for example, to support the delivery of, provide functionality on, or help to enhance the security of our Website), or who otherwise process personal data for purposes that are described in this Privacy Notice or that you are notified of at the time we collect your personal data. to any competent law enforcement body, regulatory, government agency, court or other third party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person; to an actual or potential buyer (and its agents and advisers) in connection with any actual or proposed purchase, merger or acquisition of any part of our business, provided that we inform the buyer it must use your personal data only for the purposes disclosed in this Privacy Notice; to any other person with your consent to the disclosure. International data transfers Your personal data may be transferred to, and processed in, countries other than the country in which you are resident. These countries may have data protection laws that are different to the laws of your country (and, in some cases, may not be as protective). Specifically, some of our website servers are located in the USA and our group companies and third party service providers and partners operate around the world. This means that when we collect your personal data we may process it in any of these countries. However, we have taken appropriate safeguards to require that your personal data will remain protected in accordance with this Privacy Notice. For any transfers out of the EEA, we will put in place appropriate safeguards in accordance with European law, such as executing the European Commission’s Standard Contractual Clauses for transfers of personal data between our group companies, which require all group companies to protect the personal data that they process from the EEA in accordance with European Union data protection law. We have implemented similar appropriate safeguards with our third-party service providers and partners and further details can be provided upon request. Data retention We retain personal data we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements). When we have no ongoing legitimate business need to process your personal data, we will either delete or anonymise it or, if this is not possible (for example, because your personal data has been stored in backup archives), then we will securely store your personal data and isolate it from any further processing until deletion is possible. Third-party links Occasionally, at our discretion, we may include or offer third-party products or services on our website. These third-party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites. Children’s Information Our Website is intended for a general audience and is not directed at children who are under 13 years old. We do not knowingly collect personal information (as defined by the U.S. Children’s Online Privacy Protection Act) of children. We also do not knowingly “sell,” as that term is defined under the California Consumer Privacy Act, the personal information of minors under 16 years old who are California residents. Additional Disclosures for Data Subjects in the EEA Data protection laws in Europe distinguish between organizations that process personal data for their own purposes (known as “controllers”) and organizations that process personal data on behalf of other organizations (known as “processors”). BIDSWITCH acts as a controller with respect to personal data collected as you interact with our Website. Legal basis for processing personal data Our legal basis for collecting and using the personal data described above will depend on the personal data concerned and the specific context in which we collect it. However, we will normally collect personal data from you only (i) where the processing is in our legitimate interests and not overridden by your rights; (ii) where we need the personal data to perform a contract with you or (iii) where we have your consent to do so. In some cases, we may also have a legal obligation to collect personal data from you. If we ask you to provide personal data to comply with a legal requirement or to perform a contact with you, we will make this clear at the relevant time and advise you whether the provision of your personal data is mandatory or not (as well as of the possible consequences if you do not provide your personal data). If we collect and use your personal data in reliance on our legitimate interests (or those of any third party), this interest will normally be to operate our Websites and services; communicating with you as necessary to provide our services to you and for our legitimate commercial interest, for instance, when responding to your queries, improving our platform, undertaking marketing, or for the purposes of detecting or preventing illegal activities. We may have other legitimate interests and, if appropriate, we will make clear to you at the relevant time what those legitimate interests are. If you have questions about or need further information concerning the legal basis on which we collect and use your personal data, please contact us using the contact details provided under the How to contact us heading below. Your Data Subject Rights You have the right to access, rectify, or erase any personal data we have collected about you. You also have the right to data portability and the right to restrict or object to our processing of personal data we have collected about you. In addition, you have the right to ask us not to process your personal data (or provide it to third parties to process) for marketing purposes or purposes materially different than for which it was originally collected or subsequently authorized by you. You may withdraw your consent at any time for any data processing we do based on consent you have provided to us. To exercise any of these rights, please contact us as set out in the “How to contact us” section below and specify which right you are seeking to exercise. We will respond to your request within 30 days. We may require specific information from you to help us confirm your identity and process your request. If personal data about you has been processed by us as a processor on behalf of a client and you wish to exercise any rights you have with such personal data, please inquire with our client directly. If you wish to make your request directly to us, please provide the name of our client on whose behalf we processed your personal data. We will refer your request to that client, and will support them to the extent required by applicable law in responding to your request. Please note that we retain information as necessary to fulfil the purposes for which it was collected, and may continue to retain and use information even after a data subject request for purposes of our legitimate interests, including as necessary to comply with our legal obligations, resolve disputes, prevent fraud, and enforce our agreements. If you have any issues with our compliance, you may contact our Data Protection Officer at privacy@bidswitch.net. You also have the right to lodge a complaint with the data protection regulator in your jurisdiction. Additional Disclosures for California Residents Our Websites are intended to provide information and services to job applicants and existing or potential business clients. You understand and agree that information collected about you is solely within the context of either (i) your status as a job applicant; or, (ii) your role as an employee, owner, director, officer, or contractor of a company conducting due diligence regarding BIDSWITCH providing or receiving a product or service. Customers who are residents of California may request (i) a list of the categories of personal information disclosed by us to third parties during the preceding calendar year for those third parties’ own direct marketing purposes; and (ii) a list of the categories of third parties to whom we disclosed such information. To exercise a request, please write us at the email or postal address set out in “How to contact us” below and specify that you are making a “California Shine the Light Request.” We may require additional information from you to allow us to verify your identity and are only required to respond to requests once during any calendar year. As a California resident you can make choices about the sale and sharing of your personal information. Please click here for our CCPA Privacy Center for further details. Changes to our Privacy Notice If we decide to change this Privacy Notice, we will post those changes on this page, and/or update the Privacy Notice modification date at the top of this Notice. How to contact us If there are any questions regarding this Privacy Notice or your privacy rights you may contact us at privacy@bidswitch.net. The Data Controller of your personal data is BIDSWITCH GmbH of Bahnhofstrasse 28, Postfach 7563, 6302, Zug, Switzerland. BIDSWITCH is a member of the IPONWEB Group of companies. For details regarding other Data Controllers in the IPONWEB Group, please see https://www.iponweb.com/contact. Careers Policies and Legal Downloads © 2021 IPONWEB Holding Limited, All Rights Reserved.