Privacy Policy of Goldbach Neo ooh ag

Goldbach Neo markets outdoor advertising throughout Switzerland. We operate with enthusiasm, high quality standards and respect for our environment. We are also committed to a strong out-of-home advertising industry through selected partnerships and cooperation with associations and are constantly evolving. We advise you on effective and targeted communication solutions for analog and digital advertising spaces. You can choose between locations in large cities, conurbations and at various points of interest to reach your target group effectively. Goldbach Neo OOH AG is a subsidiary of the Goldbach Group AG based in Küsnacht. The Goldbach Group is a company of the TX Group.

Note: This privacy policy describes the processing of your data that takes place when you visit the Goldbach Neo website or contact Goldbach Neo OOH AG. It is important to us that you are informed about the processing of your personal data and that you consent to such processing where necessary. This privacy policy provides you with comprehensive information about our data processing methods. When we refer to the processing of your personal data in this privacy policy, we mean any handling of your personal data. This includes, for example, the collection, storage, administration, use, transmission, disclosure and deletion of your personal data. We process your personal data (hereinafter referred to as

"Data") always in accordance with and on the basis of the statutory provisions of the Federal Act on Data Protection of September 25, 2020, SR 231.1 (hereinafter "FADP") and Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter "GDPR").

The Goldbach Group is a registered member of the IAB Transparency and Consent Framework 2.2, an industry standard that allows all market participants (publishers, advertisers, technology service providers, etc.) to inform end users about the processing of their personal data and give them the opportunity to consent or object to it. You will find a Consent Management Platform at all operators of online platforms that participate in the framework: A control interface, usually in the form of a (cookie) banner, in which you can make your data protection settings. These settings are taken into account by all participants in the framework, including Goldbach Group.

We have technical and organizational security procedures in place to maintain the security of your personal data and to protect your session data and personal data against unauthorized or unlawful processing and/or against accidental loss, alteration, disclosure or access. However, you should always be aware that the transmission of information via the Internet and other electronic means involves certain security risks and that we cannot guarantee the security of information transmitted in this way. All data via the website, such as the newsletter registration or forms, are transmitted via SSL. We use the SSL process to protect the data that you as a customer send to our company's servers via the Internet. SSL provides 3-fold protection:

• The entries that are to be transmitted are encrypted.
• It is ensured that the form is only sent back to the server from which it was opened.
• It is checked whether the data reaches its respective recipient complete and unchanged.

We will retain your personal data for as long as we deem necessary or appropriate to comply with applicable laws or for as long as it is necessary for the purposes for which it was collected. We will delete your personal data as soon as it is no longer needed and in any event after the maximum retention period prescribed by law.

We are legally obliged to inform you of the owner of the data collection containing your personal data. The data controller is Goldbach Neo OOH AG.

We collect your personal data whenever we have contact with you. The situations in which we have contact with you are varied. For example, we collect your personal data in the following circumstances:

• You supply us with goods or services
• You take part in our conferences, customer events or seminars;
• You are using one of our services;
• You receive a newsletter
• You take part in a competition or prize draw; you become a member of one of our customer loyalty programs;
• You take part in one of our market research campaigns or opinion polls;
• You use or communicate with us or third parties via our websites, apps for mobile devices or offers on internet platforms, multimedia portals or social networks;
• You communicate with us via telephone, fax, e-mail, voice messages, text messages (SMS), picture messages (MMS), video messages or instant messaging or social media;
• You come into contact with us at customer events, advertising events, sponsoring events or similar occasions;
• You send us your application dossier.

Most of our services do not require registration, so you can visit our website without telling us who you are. However, some services may require you to provide personal information. In such a case, if you choose not to provide personal information requested by us, you may not be able to use certain areas of the website or we may not be able to respond to a request from you.

The personal data collected is diverse. On the one hand, we collect personal data that you provide to us. On the other hand, we collect personal data that is collected automatically or manually when you contact us, such as

6.1 Personal data

• Surname and first name;
• Birthday and age;
• Gender;
• Residential address;
• Delivery address;
• Billing address;
• Language preferences;
• Telephone number(s);
• E-mail address(es);
• Identification numbers of your technical devices;
• Information on subscribed newsletters or other advertising;
• Consent to receive advertising;
• Memberships within our business division;
• Photo and video recordings of visits to our events, conferences, seminars or other recordings on our premises.

6.2 Customer Activity Data

• Contract data (including contract date, contract type, contract content; contractual partner; contract term; contract value; claims asserted under the contract);
• Customer service information
• Session data relating to visits to our Internet pages, apps for mobile devices or offers on Internet platforms, multimedia portals or social networks (including duration and frequency of visits, language and country preferences, information about browser and computer operating system, Internet protocol addresses, search terms and search results; ratings given, comments in the blog);
• location-based data when using mobile devices;

We process your personal data for various purposes. These purposes can be summarized in different groups. In particular, we may process your personal data in whole or in part for one or more of the following purposes:

7.1. Processing purposes in connection with customer communication

• Provision, administration and implementation of customer communication by post and via electronic means of communication;
• business communication by post and by telephone, fax, e-mail, voice messages, text messages (SMS), picture messages (MMS), video messages or instant messaging;
• Evaluation of the use of our offers via telephone, fax, e-mail, voice messages, text messages (SMS), picture messages (MMS) or instant messaging such as: Type of use, frequency and duration of use, exact location of use.

7.2. Processing purposes in connection with special occasions

• Organization and implementation of competitions or prize draws, including notification and publication of the winners via our Internet pages, apps for mobile devices or our offers on Internet platforms, multimedia portals or social networks;
• Organization and implementation of special events such as conferences, seminars or customer events.

7.3. Right of objection (opt-out) regarding our direct marketing activities.

We process your data for the purposes stated in section 7.2 because we have a business interest in contacting you and convincing you of our services. Of course, you are free to object to this processing, which we will take into account accordingly. You can object to the processing via the same communication channel we used to contact you. You can find our contact details in section 17. You can unsubscribe from our newsletter directly using the opt-out link at the end of each newsletter (see also section 14). Information regarding your right to object to the use of cookies can be found below in section 10.4.

We may disclose your personal data to other subsidiaries of Goldbach Group AG and to the companies of our parent company TX Group for the purposes set out in this Privacy Policy. These other companies may use your personal data in their own interest for the same purposes as we do. The companies of Goldbach Group AG may process your personal data in particular for individualized and personalized analyses of customer behavior and for direct marketing activities in their own interest. Within Goldbach Neo OOH AG, employees only have access to your personal data insofar as this is necessary for the performance of their work.

We may also disclose your personal data to other subsidiaries of Goldbach Group AG, TX Group AG and to third parties outside Goldbach Group AG in order to use technical or organizational services that we require to fulfil the aforementioned purposes or our other business activities. These service providers are contractually obliged to process the personal data exclusively on our behalf and in accordance with our instructions. We also oblige our service providers to comply with technical and organizational measures that ensure the protection of personal data.

If the service providers are located in countries where the applicable laws do not provide for personal data protection comparable to Swiss or European law, we will contractually ensure that the service providers concerned comply with the Swiss and European level of data protection (for example, with the standard contractual clauses issued by the EU Commission) and take further technical measures where necessary.

The list of our service providers and what we use them for, updated from time to time, can be found here.

We may also disclose your personal data if we believe it is necessary to comply with applicable laws and regulations, in legal proceedings, at the request of the competent courts and authorities or due to other legal obligations in order to protect and defend our rights or property.

Most of the services available on this website are aimed at people aged 18 and over. Any person requesting information about any of our services that is authorized for use by children must be 18 years of age or older. We will not knowingly collect, use or disclose personal information from minors under the age of 18 without first obtaining the consent of a legal guardian (e.g. a parent or authorized representative). The legal guardian will receive (i) information about the specific type of personal data collected from the minor and (ii) the opportunity to object to any further collection, use or storage of such information. We comply with youth protection laws.

We also use so-called cookies on our website. These are small files that are stored on your computer or mobile device when you use one of our websites. We would also like to provide you with comprehensive information about our use of cookies.

10.1. Why do we use cookies?

The cookies we use initially serve to guarantee the functions of our Internet pages - such as saving your preferred language. In addition, we use cookies to adapt our website to your customer requirements and to make your surfing experience with us as convenient as possible.

10.2. Which cookies do we use?

Most of the cookies we use are automatically deleted from your computer or mobile device at the end of the browser session (so-called session cookies). For example, we use session cookies to save your country and language preferences across different pages of an Internet session.

We also use temporary or permanent cookies. These remain stored on your computer or mobile device after the end of the browser session. When you visit one of our websites again, it will automatically recognize which entries and settings you prefer. Depending on the type of cookie, these temporary or permanent cookies remain stored on your computer or mobile device for between one month and ten years and are automatically deactivated after the programmed time has expired. They are used to make our website more user-friendly, effective and secure. Thanks to these cookies, for example, you will be shown information on the site that is specifically tailored to your interests.

The cookies stored on your computer or mobile device may also originate from partner companies. These may be other Goldbach Group AG companies or companies outside Goldbach Group AG. The list of our partner companies, which is updated from time to time, and what we use them for can be found in section 8. The cookies of the partner companies remain stored on your computer or mobile device for between one month and ten years and are automatically deactivated after the programmed time has expired.

You can also find information about the purposes of cookies and which third parties set cookies when you visit our website in the cookie settings, which are displayed when you first visit our website or which you can easily find on our website. In the Privacy Center, you also have the option of objecting to the processing of your personal data for certain purposes or by certain companies.

10.3. What data is stored in cookies?

When a cookie is set, it is assigned an identification number. This number cannot be linked to specific personal data (such as your name or address) and is instead linked to the device you use to visit our website. The collection of data using a cookie identification number is therefore referred to as pseudonymous data. This pseudonymous identification number can be used, for example, to collect data about your interaction with our website.

10.4. How can you prevent cookies from being stored?

Most Internet browsers accept cookies automatically. However, you can instruct your browser not to accept cookies or to prompt you each time before accepting a cookie from a website you visit. You can also delete cookies on your computer or mobile device by using the corresponding function of your browser.

You can also use the Privacy Center mentioned in section 10.2 to object to the setting of cookies for certain purposes or by certain companies.

If you decide not to accept our cookies or the cookies of our partner companies, you may not be able to see certain information on our Internet pages or use some functions that are intended to improve your visit.

Every time you access our website, certain usage data is transmitted to us by your Internet browser for technical reasons and stored in log files. This involves the following usage data: Date and time our website was accessed; name of the website accessed; IP address of your computer or mobile device; address of the website from which you came to our website; amount of data transferred, as well as the name and version of your browser. The analysis of the log files helps us to further improve our website and make it more user-friendly, to find and rectify errors more quickly and to manage server capacities. We can use the log files to determine, for example, at what times our Internet services are particularly popular and provide the corresponding data volume to ensure the best possible user experience.

In order to constantly improve and optimize our website, we use so-called tracking technologies. Web analysis tools provide us with statistics and graphics that give us information about the use of our Internet pages. The data on the use of a website is transmitted to the server used for this purpose.

The analytics service providers we use can be found in the list of third-party service providers we use in Section 8. You can also use the Privacy Center mentioned in Section 10.2 to object to the setting of cookies by Google Analytics or other analytics tools used.

When you register for our newsletter, we process the data that you provide as a newsletter recipient. After your registration, we will send you an e-mail with a link to confirm your registration.

You can unsubscribe from the newsletter at any time by clicking on the link provided in each newsletter or by sending an email to info@goldbachneo.com. We will then immediately delete your data in connection with the newsletter mailing and you will not receive any further newsletters.

The partner we use for sending and analyzing the newsletter can be found in the list of our service providers in section 8.

Our newsletter contains a "web beacon". This is a pixel-sized file that is retrieved from the server of our newsletter service provider when the newsletter is opened. Technical information on the browser and operating system of the newsletter recipient as well as the IP address are collected for the purpose of technical improvement of the newsletter dispatch. We also analyze whether and when the newsletters are opened and which links are accessed in order to improve our newsletter content and make it more relevant for the recipients. We do not analyze or monitor individual newsletter recipients.

In some cases, we have to redirect you as a newsletter recipient within the newsletter to the websites of our external service providers, for example in order to be able to access the latest version of their privacy policy. Please note that cookies are set on the websites of such service providers and that personal data may therefore be processed by the service providers and their partners (e.g. Google Analytics). We have no influence over this. Further information can be found in the privacy policies of our service providers.

If you apply to Goldbach Neo OOH AG, we will store your application data as part of the application process. If the position is not filled or is filled by another person, the purpose of the original data storage no longer applies and we will delete your application data or return the documents to you. Application data will only be made accessible within the company to those persons who are involved in the application process. These are the potential supervisor (including other decision-makers) and the employees of the HR department (see section 8).

If you have any questions, concerns or comments about the processing of your personal data or this privacy policy, please contact us by e-mail or mail at:

Goldbach Neo OOH AG

Räffelstrasse 26
CH-8045 Zurich
Switzerland

Email: info@goldbachneo.com

If you contact us using the form on the website or by e-mail, the data you provide will be stored by us for six months for the purpose of processing the inquiry and in the event of follow-up questions. We will not pass on this data without your consent.

Data Protection Officer:

Goldbach Group Ltd
Meret Sagoo
Seestrasse 39
CH-8700 Küsnacht ZH
Switzerland

oba@ch.goldbach.com

For requests from the EU area, you can contact our representative (Art. 27 GDPR):

ePrivacy GmbH
Burchardstrasse 14
20095 Hamburg
Germany
www.eprivacy.eu/en

This Privacy Policy may be amended over time, in particular if we further develop our website, implement new technologies or if new legal provisions become applicable. In the event of significant changes, we will actively inform persons who are registered with us about such changes to the e-mail address provided during registration or by means of a corresponding notice in a suitable place, if this is possible without disproportionate effort. In general, the data protection declaration in the version current at the start of the relevant processing applies to data processing.

The original privacy policy is in German. The translated versions are provided for ease of understanding only. In the event of contradictions, the German text shall take precedence.