Panel Privacy Policy intervista Footprints Panel

At intervista AG ("intervista", "we"/"us"/"our"), the protection and security of your personal data is our top priority. You can expect us to handle your data sensitively and carefully and to ensure a high level of data security.

We collect and use your personal data exclusively in accordance with the European Data Protection Regulation (EU GDPR), where applicable, and other applicable legal provisions, in particular the Swiss Data Protection Act (DSG) and the associated ordinance ( DSV ) and, as a market research institute, we are committed to the quality standard of the professional association ESOMAR (see e.g. ICC/ESOMAR, International Code of Conduct for Market, Opinion and Social Research and Data Analytics).

This privacy statement informs you about the most important aspects of data processing within the scope of our activities and about the data protection rights to which you are entitled. It describes how we collect and process your personal data (information relating to and directly or indirectly identifying an individual) when you ("you", "your", "panellist") visit our website, participate in our market research activities (the "Panel") or use our services.

1. Contacts

1.1 Name and address of the person responsible

The responsible person in terms of data protection law is the:
intervista AG
Optingenstrasse 5
3013 Bern
Tel.: +41 31 511 39 00
E-Mail: contact@intervista.ch
Webseite: https://www.intervista.ch

1.2 Name and address of the data protection officer

The data protection officer of the data controller is:
intervista AG
Data Protection Officer
Optingenstrasse 5
3013 Bern
E-mail: dataprivacy@intervista.ch

1.3 Name and address of the representative in the EU

The EU representative of the controller within the meaning of the GDPR is the:
horizoom GmbH
Clayallee 288
14169 Berlin
Germany
E-mail: intervista.dataprivacy@horizoom.de

2. Legal basis

The legal basis for processing your personal data depends on the purpose of the data processing in each individual case. In particular, the following come into question:

• Your consent, which you can revoke at any time. All you need to do is send us a message by e-mail. The legality of the data processing already carried out remains unaffected by the revocation;
• the formation or performance of a contract with you or to take steps at your request before entering into a contract;
• the protection of our legitimate interests, provided that your interests or fundamental rights and freedoms are not overridden;
• a legal obligation that allows us to process the data.

3. Collection, processing and use of personal data

3.1 Use of personal data

We use your personal data for the purposes described below and in accordance with your consent. We collect and process your personal data only to the extent necessary to fulfil the respective purposes. We will only use your personal data as described in this privacy policy. If we intend to use your personal data for purposes other than those described in the relevant consent form, we will inform you in advance and obtain additional consent.

For the purposes of communication (for example, about our services or to inform you about our policies and terms), we collect personal data such as your name, postal address, telephone number and email address ("Registration Data", also referred to as your "Master Data" in the case of the Panel).

We collect personal data from panellists (panel participants) in addition to the registration/master data:

• for location measurement/tracking for various research areas,
• within the framework of surveys conducted online, by telephone or in person,
• via cookies and similar technologies,
• in the context of specific projects that require your separate consent, in the form of automated data collection via hardware (special devices you receive from us) or software (special computer programs or mobile apps) for web tracking in the context of internet and advertising impact research (data about your use of the internet, streaming services and platforms of social media and other (online) media channels as well as digital services in general), or geolocation tracking,
• if you actively submit the data to us as part of your participation (e.g. via apps or devices)

3.2 Access data

When you access our website, i.e. if you do not register or otherwise transmit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the IP address, the type and version of the operating system and browser, the referrer URL, the date and time of the server request and similar. This is exclusively information that does not allow any conclusions to be drawn about your person.

This data is processed solely for the purpose of enabling the use of our website (connection establishment), to ensure system security and stability on a permanent basis, to optimise our offer and for internal statistical purposes. This data is not passed on to third parties or evaluated in any other way. A personal user profile is not created.

3.3 Contact

On our website, you have the option of contacting us via a contact form. In this case, the information you provide will be processed for correspondence with you or for the purpose of processing your enquiry and handling it. Which data is collected in the case of a contact form can be seen from the respective contact form. The information marked with * is mandatory. All other information can be provided voluntarily by the person making the enquiry.

You can object to this data processing at any time. Please send your objection to the following e-mail address: dataprivacy@intervista.ch. In such a case, your request will not be processed further.

3.4 Market and mobility research

The data collected as part of your participation in the Footsprints Research project will be used exclusively for the anonymous, summarised evaluation and analysis of mobility and market research studies. You will find detailed instructions (in particular on the evaluation of your information) within the framework of the respective survey or where you provide your information. The data of different measurements, surveys and projects can be merged.

You can revoke the consent you have given at any time. Please send your revocation to the following e-mail address: dataprivacy@intervista.ch.

3.5 Participation in panels and other interact

We also process personal data to the extent necessary in the context of your participation in the Panel and other interactions with you, as described in this Privacy Policy. The data processed in this way, the type, scope, purpose and necessity of its processing are determined by the underlying interaction.

Processed data includes master data (e.g. name and address), contact data (e.g. email address and telephone number) survey data, passively measured data, participation data and transaction data.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

4. Download the Footprints Research app

When you download the Footprints Research app, certain required information is transmitted to the app store you have selected (e.g. Google Play or Apple App Store). In particular, the user name, the e-mail address, the customer number of your account, the time of the download and the individual device identification number may be processed. The processing of this data is carried out exclusively by the respective app store and is outside our sphere of influence.

5. Permissions of the Footprints Research app

The app requires the following permissions:

• Internet access: This is required for data exchange
• Location release: This is required for the location measurement.
• Activity recognition: This is needed for the recognition of the mode of locomotion.
• Bluetooth: This is required so that the app can recognise beacons.
• Notifications: These are used to invite you to surveys, for example.

6. Cookies

We use so-called "cookies and similar technologies" on the basis of a contract or legitimate interests for the purposes of the intervista online access panel on our panel portal website (the "portal"), as part of online surveys (the "surveys") and with our intervista app (the "app").

6.1 What are cookies and similar technologies?

Cookies are small text files that are placed and stored on your computer or mobile device when you access websites. "First-party cookies" are set by the particular website you are visiting. "Third-party cookies" are set by domains other than the websites you visit.

Like cookies, local storage allows websites to store information on a computer or mobile device. Content in local storage is usually stored permanently, so it does not automatically expire after a certain period of time like cookies, and unlike cookies, data from local storage is not automatically transferred each time the website that stored the data is visited.

The Mobile Advertising ID is a unique identifier (ID) set by the operating system of your mobile device. This ID is shared with apps that you install on your device and that may contain advertising. Most devices allow apps to access the Mobile Advertising ID by default. However, you may be able to change your device settings to prevent this ID from being shared with apps. See the help menu of your operating system for more information on how to handle Mobile Advertising IDs. For Android devices this is the Android Advertising ID, for iOS devices it is the ID for Advertiser (IDFA).

We refer to cookies, local storage and Mobile Advertising ID collectively as "cookies and similar technologies".

6.2 Use of cookies and similar technologies

We use cookies and similar technologies as follows:

• in the Panel Portal,
• within the framework of online surveys,
• with apps,

• improve the performance of the respective websites and the user experience,
• Measure contacts with advertising and online media,
  • by identifying when, how often, on which websites and within which apps certain online advertising, media and other content is displayed on your device,
  • Simulate online advertising exclusively on panellists' devices for advertising testing purposes.

6.3 What types of cookies do we use?

Most cookies fall into one or more of the following categories:

Strictly necessary cookies
These types of cookies are necessary to provide the service specifically requested by website visitors. Without these cookies, websites do not function or cannot provide the requested services. For the purposes of the panel, we use strictly necessary cookies in the portal and in the context of online surveys.

Cookies for performance optimisation
These cookies collect information about how visitors use a website, such as which pages are the most popular, which method of linking between pages is the best, and whether users receive error messages from individual pages. These cookies allow us to ensure a high quality user experience. The information collected through these cookies is not intended to personally identify users. Rather, they are designed to help us optimise our website. We use cookies to optimise performance on the portal and in the surveys.

Targeting cookies
These cookies collect information about your browsing habits in order to show you advertising that is relevant to you and tailored to your interests. They are also used to control the frequency with which an advertisement is displayed and to measure the impact of advertising campaigns. While targeting cookies are usually placed by advertising networks or social media networks with the permission of the website operator, we as market researchers set these cookies to measure whether and how often and where you have been shown certain advertisements on the internet and to provide advertisers with aggregate statistical data about the impact of their campaigns.

6.4 How can you prevent the use of cookies or delete cookies?

Most browsers accept cookies automatically. If you do not wish to do this, you can set up your browser so that it informs you about the setting of cookies and you only allow the acceptance of cookies for certain cases in individual cases or generally exclude them. You can also activate the automatic deletion of cookies when closing the browser. Furthermore, cookies that have already been set can be deleted at any time via an internet browser or other software programmes.

You can set privacy settings in your browser to block all cookies, but this could have a significant impact on your browsing experience as many websites may not function properly. Your browser can allow you to delete all cookies as soon as the browser is closed. However, this option will also result in the deletion of cookies that are actually stored permanently, which can save your personalised preferences on the websites you visit regularly. However, desired cookies can be retained if your browser allows you to specify which websites may always or never use cookies.

If you no longer wish to allow the storage of targeting cookies as part of your intervista participation, you can revoke your consent to this at any time. To do so, remove the corresponding tick in your member area under "My profile".

7. Analysis tools

We do not use any external tracking and analysis tools.

8. Social Media

In addition to this website, we also maintain presences in various social media. If you visit such an online presence, personal data may be transmitted to the provider of the social network. We would like to point out that user data may also be transmitted to a server in a third country and thus processed outside of Switzerland.

Furthermore, user data within social networks is usually processed for market research and advertising purposes. For these purposes, cookies are usually stored on the computers of the users, in which the usage behaviour and the interests of the users are stored. Furthermore, data may also be stored in the usage profiles regardless of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).

For a detailed description of the respective forms of processing and the opt-out options, please refer to the data protection provisions and information of the operators of the respective networks. There you can also find out in which countries they process your data, which information, deletion and other data subject rights you have and how you can exercise these or obtain further information.

• https://www.facebook.com/privacy/policy/
• https://www.linkedin.com/legal/privacy-policy
• https://privacy.xing.com/de/datenschutzerklaerung

9. Collection of personal data from other sources

We also collect personal data about you from other sources, such as advertising networks, social media platforms and website and mobile app operators. We use such secondary data to supplement the data we collect from panellists in the course of your participation in the panel.

If and when this is the case, we will either ensure that the source informs you in advance of the data transfer or we will inform you that we have received your personal data and provide you with all the information required by law.

10. Processing of sensitive data

As part of your participation, we process particularly sensitive personal data about you ("sensitive data"). This data is treated as strictly confidential and is only passed on to third parties outside the intervista group in aggregated form, without the possibility of drawing conclusions about individual persons. Sensitive data is personal data about racial and ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, as well as genetic data, biometric data uniquely identifying a natural person, health data or data about a person's sex life or sexual orientation. For example, we may process sensitive data that you have made public. We may also process sensitive data where this is necessary to establish, exercise or defend legal claims. In addition, we may process sensitive data as part of your participation in the Panel based on your prior voluntary and explicit consent.

You can revoke the consent you have given at any time. Please send your revocation to the following e-mail address: dataprivacy@intervista.ch.

11. Disclosure of personal data

As a matter of principle, we treat your personal data as confidential and only pass it on if you have expressly consented to this, if we are obliged or entitled to do so by law or if this is necessary to enforce our rights, in particular to enforce claims arising from the contractual relationship. In addition, we will pass on your personal data to third parties if this is necessary or expedient in the context of your participation in the Panel. In doing so, we will, of course, comply with the legal provisions on the disclosure of personal data to third parties.

Recipients of personal data are, on the one hand, IT service providers (for example, hosting providers, App Store), partners for crediting bonus points, within the circumscribed purposes other companies of the intervista group or carefully selected research institutes or research departments of our clients. If, as part of your participation, you have agreed that your mobility and survey data may also be passed on to SBB and analysed by SBB specialists, the following provisions apply to the use of data by SBB and SBB's data protection provisions (https://www.sbb.ch/en/meta/legallines/data-protection.html).

The recipients may be in Switzerland or abroad (anywhere in the world). Depending on the nature of the service, personal data may need to be disclosed to recipients located in countries that do not have an adequate level of data protection. If a recipient is located in a country without an adequate level of data protection, we contractually oblige the recipient to comply with the applicable level of data protection (for this purpose, we use the standard contractual clauses of the European Commission, which are available here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?), unless the recipient is already subject to a legally recognised set of rules to ensure data protection and we cannot rely on an exemption clause.

12. Storage period

Unless expressly stated in this privacy policy, we process and store your personal data only for as long as is necessary for the fulfilment of our contractual and legal obligations or otherwise for the purposes pursued with the processing, and beyond that in accordance with the statutory retention periods. As soon as your personal data is no longer required for the above-mentioned purposes or a prescribed retention period expires, your personal data will be deleted or blocked as a matter of principle and as far as possible.

For research projects with apps, uninstalling the app does not automatically delete the data already collected. In this case, your data can continue to be used for the purposes described.

13. Data security

We take technical and organisational security precautions to protect your personal data against manipulation, loss, destruction or access by unauthorised persons. This includes, among other things, the use of recognised encryption procedures (e.g. SSL encryption). Our security measures are continuously improved in line with technological developments. Access to your personal data is only granted to those employees, service providers or partners of ours who need such access to fulfil a business purpose or to perform their duties.

We also take our own internal data protection seriously. Our employees and the service companies commissioned by us are obliged to maintain confidentiality and to comply with the provisions of data protection law. Moreover, they are only granted access to your personal data to the extent necessary.

14. Use of the website by minors

The website is aimed at an adult audience. Children under the age of 15 are prohibited from transmitting per-sonal data to us or registering for a service without the consent of their parents or legal guardians. If we discover that such data has been transmitted to us, it will be deleted. The parents (or the legal representative) of the child can contact us and request the deletion or deregistration. To do this, we require a copy of an official document that identifies you as the parent or legal guardian.

15. Links to websites of other providers

We take technical and organizational security precautions to protect your personal data against manipulation, loss, destruction or access by unauthorized persons. This includes, among other things, the use of recognized en-cryption methods (e.g. SSL encryption). Our security measures are continuously improved in line with technologi-cal developments. Access to your personal data is only granted to those of our employees, service providers or partners who require this access to fulfill a business purpose or to perform their duties.

We also take our own internal data protection seriously. Our employees and the service companies commis-sioned by us are obliged to maintain confidentiality and to comply with data protection regulations. Furthermore, they are only granted access to your personal data to the extent necessary.

16. Your rights

You have the right to exercise your data protection rights at any time and to obtain information about your personal data processed by us, to correct or supplement your personal data, to revoke any consent given to process your personal data and/or to object to the processing of your personal data or to request the deletion of your personal data, unless we are obliged to retain some of your personal data under applicable laws and regulations. Finally, you may have the right to receive your personal data that you have provided to us in a commonly used electronic format or to request that such data be transferred to a third party.

Please note that exceptions apply to these rights. In particular, we may need to process and store your personal data in order to fulfil a contract with you, to protect our own legitimate interests such as the assertion, exercise or defence of legal claims, or to comply with legal obligations. To the extent legally permissible, we may therefore also reject your data protection-related requests, e.g. requests for information and deletion, or only comply with them to a limited extent.

For questions in connection with our data protection practices and for information regarding your rights as well as for the assertion thereof, you can contact us at the contact options specified in section 1 of this data protection declaration. If necessary, we reserve the right to request your identification in an appropriate manner for the processing of enquiries.

17. Changes to the privacy policy

We expressly reserve the right to amend or modify this Privacy Policy at any time. All changes and amendments are at the sole discretion of the company.