Privacy policy

This privacy policy describes the data processing activities carried out by the following subsidiaries of Goldbach Group AG:

• Goldbach Media AG
• Swiss Radioworld AG
• Goldbach Audience AG
• dreifive (Switzerland) AG, dreifive AG and dreifive GmbH
• Goldbach Manufaktur AG
• Goldbach Pemium Publishing AG
• Goldbach Germany GmbH
• Goldbach Austria GmbH

(hereinafter all collectively "Goldbach") in the course of providing their services. Goldbach Group AG, headquartered in Küsnacht, Switzerland, is a subholding of TX Group AG, headquartered in Zurich. Goldbach is a technology-enabled media service provider that counts advertisers as well as operators of media channels such as TV broadcasters (incl. ConnectedTV and HbbTV applications), online platforms (websites and mobile apps), (online) radio stations, DooH as well as print media (collectively "publishers") among its customers. We provide innovative products and services that enable advertisers to better reach their target audience and enable publishers to promote, grow and monetize their online platforms through ad sales.

Note: This Privacy Policy describes the data processing operations of Goldbach in the context of its above-mentioned services. For the data processing operations that take place when you visit Goldbach's website, i.e. Goldbach.com or contact Goldbach Group companies, please consult the privacy policy of Goldbach Group AG.

The protection of personal data is of particular concern to Goldbach. We believe that safe, secure and respectful practices in handling consumer information are fundamental to the success of our business and the growth and viability of the Internet as a whole. We are a member of IAB-Europe, the trade association of the European digital and interactive marketing industry ("IAB").

Goldbach Group is a registered member of the IABTransparency and Consent Framework 2.2 (Vendor ID 580) and adheres to the guidelines set forth for it. The IAB TCF 2.2 is an industry standard that enables all digital market participants (publishers, advertisers, technology service providers, etc.) to inform end users about the processing of their personal data and to give them the opportunity to consent or object to this. You will find a Consent Management Platform at all online platform operators participating in the Framework: A control interface, usually in the form of a cookie or privacy center, within which you can make your privacy settings. These settings are taken into account by all participants in the framework, including the companies of the Goldbach Group.

Goldbach processes your personal data (hereinafter "data") on the basis of the legal provisions of the SwissFederal Data Protection Act of 25 September 2020, SR 231.1(hereinafter "DPA") and, where applicable,Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data, on the free movement of such data and repealing Directive 95/46/EC(hereinafter "GDPR" for short).

In the following, we provide you with an overview of the most important aspects of data processing within the scope of our services, offers and products. We will inform you about your rights and explain the decisions you can make regarding the collection of your data. Following this, you will find a contact point to which you can turn for any questions or concerns regarding data protection.

Goldbach delivers advertisements (e.g. banners, video spots) from hundreds of advertisers on a variety of media channels (websites, mobile apps, DooH screens, HbbTV applications) (hereinafter referred to as "Goldbach Services"). A list of the websites and apps on which Goldbach delivers advertisements is availablehere.

As part of the Goldbach Services, Goldbach uses - on its own responsibility and independently of the website operator - innovative target group products which enable Goldbach to reach their target audience more precisely and to promote websites and apps through the sale of advertisements. These target group products can also be formed by using data that Goldbach collects and processes.

2.1 Cookies - definition and purpose

For the purpose of creating these target group products, Goldbach uses so-called cookies. These are small text files that are placed on the hard drive of the end device of a visitor to a website or app (hereinafter referred to as "user") with the help of the browser and are stored there for data collection purposes. If you as a user visit one of the websites or apps of the Goldbach Network, the automated systems of their service providers (e.g. ad servers, data management platforms) collect usage data with the help of cookies in relation to the visit of this website and apps or by means of third-party cookies also beyond the specific domian. Information can be written in these text files, which can be read again at a later time.

Some cookies remain stored on your terminal device until you as a user delete them. They enable Goldbach, for example, to recognize your browser on your next visit. Other cookies are only stored for the duration of your visit to a website.

If you do not wish data to be determined by means of cookies, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases. You can find out more about this in section 2.1.3 "Dealing with cookies".

2.1.1 Third party cookies or cookies from our service providers

Third party cookies are cookies that originate from a domain other than that of the website. Third party cookies are usually used by technology providers or advertising networks. For example, because some online or mobile advertisers ("Advertisers") and website and app operators ("Publishers") do not want to run campaigns on only one domain or website, third party cookies enable them to recognize users on different domains and store information in the third party cookie. For example, when a user visits a website, a third-party cookie is placed on the user's computer by the advertising network from which an ad is provided. With the help of the cookie, user data such as page visits and dwell time can be tracked. If the user later visits another website on which there is an ad from the same advertising network, the same cookie is used despite the different website - because it is the same third-party provider. In this way, the advertising network can track a user across domain boundaries and deliver targeted advertising.

Goldbach uses technologies from service providers or their sub-service providers, which contain cookies, in the optimized provision of its services. These are third party cookies.

Our most important service provider isGoldbach neXT AG, a subsidiary of the Goldbach Group, which in turn uses third party technology providers on behalf of Goldbach that use third party cookies. For more information, please see theprivacy policy of Goldbach neXT.

To the extent that their service providers process personal data on behalf of Goldbach (including Goldbach neXT), they have each entered into a contract processor agreement with Goldbach. Such a contract guarantees that the provider processes the personal data transmitted to it only in accordance with Goldbach's instructions and not for its own purposes and that it takes appropriate technical and organizational measures to ensure the legally compliant protection of your data. The respective data protection declarations of the providers can be found in the links above. Please note: Cookies are used on the websites of the aforementioned providers and personal data is thus processed by the providers, as well as possibly by their partners and service providers.

In addition, advertising customers may also store third-party cookies on the end devices of users via the advertising spaces provided in the Goldbach Network. In this case, the advertising customers contractually undertake to participate in the IAB Transparency and Consent Framework (see section 1) and to comply with all provisions of data protection law, whereby they become specifically responsible to the user for their data processing.

2.1.2 First Party Cookies

First party cookies are cookies that are bound to a specific domain (e.g. website). Only this domain can write information to the cookie and read it again at a later time. First party cookies are mainly used to provide the user with a better and faster browsing experience on a website, since, for example, certain user preferences are stored in the cookie and do not have to be re-entered by the user on each visit.

First party cookies are also used on Goldbach.com. For information on this, please refer to theGoldbach Group privacy policy.

2.1.3 Your handling of cookies

You can change the settings of your web browser and block all cookies. However, since cookies are widely used, blocking them in your web browser may restrict your use of various websites.

You will find a Consent Management Platform at all online platform operators that participate in the IAB Transparency and Consent Framework - including this website: A control interface, usually in the form of a (cookie) banner, where you can set your privacy preferences. Here you can allow or prohibit the use of cookies for various purposes. If we use cookies on an online platform you use, you will find us in theConsent Management Platform there. The settings you make there will be taken into account by all participants in the framework, including Goldbach.

Please note that the storage of your privacy settings made in this way may be based on cookie technology (this may vary depending on the operator of the online portal), which means that users of multiple computers or browsers must deactivate the receipt of cookies on each computer or for each browser. Also, if users change computers or delete cookies from their computer, they must repeat the deactivation process.

2.2 API Interface

An API interface is a programming interface that allows software to communicate with other software. Similar to cookies, this is a technology that can be used to collect usage data and is most often used in conjunction with apps. Specifically, this means that information about the use of, for example, a mobile or HbbTV app can be transmitted via such an interface to our service providers, who process the information on our behalf for the purposes mentioned above.

You can usually consent or object to the data collection via API interface within the corresponding application (mobile, HbbTV apps, etc.), depending on the legal basis of the processing (see section 4). This is done, similar to cookies, on a Consent Management Platform that complies with the IAB TCF standards.

3.1 Data that we process about you as a contractual partner, interested party and requester.

We collect your personal data when you contact us, e.g. as an interested party, enquirer or contractual partner. This is particularly the case if you are interested in our products, make inquiries, request offers or contact us by e-mail or telephone, as well as if you have an existing business relationship with us. We process the following personal data for the purpose of initiating and fulfilling contracts and for customer contact purposes:

• Personal identification data
  e.g. first and last name, address, date of birth, nationality, e-mail address, telephone number
• Company data
  e.g. industry and commercial register data
• Order and payment data
  e.g. product details; means of payment; customer number

3.2 Data we collect about you as an end user of online platforms marketed by Goldbach

In the course of offering its services and products, Goldbach does not process any personal information that directly identifies you as an end user (such as names, home addresses, email addresses). Identification of end users is not necessary for the purposes of data collection and is not sought in line with the principle of data minimization. User information (see next section) is instead linked to pseudonymized data points, such as IP addresses or device identification numbers. These cannot be assigned to an individual without additional major effort. IP addresses are pseudonymized immediately after collection (e.g., by deleting the last 8 bits). This means that only a rough determination of the user's location (at the level of postal codes) is possible.

The usage data collected by Goldbach from end users includes information such as websites visited, date and time at which websites or apps were viewed, interactions between content and ads, location data (only after explicit consent). The technologies used to collect this data include cookies or similar technologies that are deleted after a certain duration (see section 7 below).

In addition to the collected usage behavior of end users, Goldbach enriches the data pool created in the process with characteristics estimated by them or their service providers in order to derive interest profiles. These essentially include segment identifiers such as football fan, smart shopper, adventure traveler or similar. Under no circumstances does Goldbach determine probabilities for "sensitive" characteristics such as creditworthiness, susceptibility to illness, political orientation or similar for individual persons.

3.3 Where does the data processed by Goldbach come from?

Goldbach collects and processes your data as described in section 3.2 when you interact with online platforms - this can be, for example, a website, a mobile app or an HbbTV app - which are marketed by Goldbach.

We always treat personal data in accordance with the strict regulations of the applicable data protection provisions (namely the DSGVO and the DSG). We collect and store personal or usage-related data only insofar as

• we have your corresponding consent to do so or
• this is necessary for the fulfillment of a contractual or legal obligation or
• we have an overriding legitimate interest in processing your personal data .
  
  
• Data collection after consent

Where required by law, Goldbach will ask for your consent when processing your data. If you have given Goldbach your consent to process your data (for example via a Consent Management Platform in the IAB Transparency and Consent Framework, see section 1), this processing will be carried out in accordance with your consent. You can revoke the consent you have given at any time.

• Data collection for the fulfillment of our contractual obligations

In order to fulfill any contracts with you, we need to process your data. This also applies to pre-contractual information and contacts that you make with us in the context of an inquiry. The purposes of data processing depend primarily on the service or product in question. For example, in order to carry out the contractual relationship, we need your address, telephone number or e-mail address to be able to contact you.

In addition to this privacy policy, you can find details on the respective purposes of data processing in the contract documents, our General Terms and Conditions, and the product and service descriptions.

• Data collection to fulfill our legal obligations

The processing of your data may be necessary due to legal obligations to which we are subject (esp. for the retention of business letters and contractual documents). Such obligations may arise, for example, from the Swiss Code of Obligations (OR) or tax law.

• Data collection to protectoverridinglegitimate interests

Goldbach may process your data should it be necessary to safeguard its legitimate interests, unless conversely the interests of the users outweigh these or consent is required under applicable law. A legitimate interest of Goldbach may, for example, lie in the customization of the ads that users of the online platforms of the Goldbach Network see. The user benefits in this regard due to the better coordinated advertising placements and the resulting increase in general advertising quality. The processing helps advertisers to play out campaigns to the appropriate target groups. We also have a legitimate interest in processing your data for our own marketing purposes, for customer loyalty or the legally permissible direct advertising by means of newsletters. In addition, there is a legitimate interest in processing your data in the context of (potential) legal prosecution and for purposes related to the accounting and auditing obligations of the companies within the Goldbach Group.

Your data will be transmitted to the following recipient groups:

• Service providers and partners used by Goldbach, such as the providers under section 2.1.1 if they require your data to fulfill their respective tasks. These service providers are contractually obligated to treat your data confidentially and to process it only to the extent necessary for the provision of services. In particular, they are not authorized to further process the data received for their own purposes beyond the provision of their services. In this respect, your data remains within the sphere of Goldbach. A list of the current service providers of the Goldbach Group companies can be foundhere.
• Within the Goldbach Group and its parent company TX Group AG, your data is received by those employees and offices that require it for the fulfillment of the respective contractual and legal obligations, as well as the legitimate interests mentioned above.
• In the case of data transfers outside the Goldbach Group and the TX Group, we are particularly concerned that the protection of your data is guaranteed. Therefore, such a transfer does not usually take place or takes place under the strictest conditions. For example, we may have to disclose personal data to public bodies and authorities upon request because we are required to do so by law. In addition, data may be transferred exclusively in aggregated, anonymized form - in such a way that no conclusion can be drawn about an individual person - or in such a way that you always retain control over the processing of your data (e.g., via the Consent Management Platform in the IAB). via Consent Management Platform in the IAB Transparency and Consent Framework).
• Finally, it is possible for an advertising client of Goldbach to equip its advertising material with additional tags which enable it to collect data for its part at the time of delivery of this advertising material. However, this is not a transfer of data collected by Goldbach. The advertiser himself is responsible for this data collection and Goldbach can neither influence the application of such tags nor is it involved in their technically successful implementation. Should this be the case, such an advertiser will be listed in the Consent Management Platform of the publisher on whose website the advertisement is placed and you can object to this data collection. As a rule, Goldbach only works with advertisers who are registered in the IAB Transparency and Consent Framework.

We and our service providers have technical and organizational security procedures in place to maintain the security of your personal data and to protect your session data and personal data against unauthorized or unlawful processing and/or accidental loss, alteration, disclosure or access.

Goldbach does not store your data longer than necessary for the respective processing purposes.

We store your personal data at most for the duration until the termination of the contractual relationship with you or as long as our legitimate interest in processing exists. The latter is the case, for example, if legal claims arising from the contractual relationship can be asserted or for as long as legal storage and documentation obligations exist. Reasons for this may be, for example:

• The fulfillment of retention obligations under company and tax law: in particular under the Code of Obligations and tax law.
• The preservation of evidence for legal disputes within the framework of the statutory limitation provisions.

Temporary or permanent cookies remain stored on your computer or mobile device for between one month and ten years, depending on the type of cookie, and are automatically deactivated after the programmed time has expired. We process the information resulting from the cookies, on the other hand, for a maximum of only 90 days. Depending on the decision of the website operator, providers other than Goldbach may also use cookies based on consent. The deletion of data within the meaning of section 14.2 below can be requested at any time via [email protected].

In order to fulfill our contracts and for our business relations as well as for processing and answering contact requests, we need the following personal data from you:

• Data that is needed for the establishment and execution of a business relationship or contact request (e.g.: name, address, telephone number or e-mail address).
• Data that are necessary for the fulfillment of the associated contractual obligations.

Without this personal data, we are generally not in a position to enter into or execute a contractual relationship with you.

If you do not want Goldbach to collect your data by means of cookies, you can set this accordingly in the Consent Management Platform of the Goldbach website as well as the online platforms in the Goldbach partner network. However, this may restrict the functionality of the websites or apps concerned.

In order for Goldbach to create and continuously optimize services and products (target group products), the technical possibility of automated profiling is used, in particular to analyze or predict aspects relating to personal preferences, interests, behavior, location or change of location.

In some cases, Goldbach processes your data to evaluate certain personal aspects (profiling). This applies, for example, to the following cases:

• Through targeted marketing, Goldbach would like to make you only offers that are tailored to your needs.
• In order to assess the interests of the users of the websites and apps, Goldbach uses characteristics derived from the cookie data. This involves calculating the probability with which a user corresponds to a certain interest category. This calculation is based on statistical methods. The calculated interests support Goldbach in the allocation of its services and products.

You acknowledge that your data processed by Goldbach may be processed outside the country in which you reside. Goldbach assures its contractual partners and all users from whom data is collected that the data will only be processed in countries where an equivalent level of data protection as in Switzerland or the EU is guaranteed.

If data is processed by service providers (processors) outside the EEA, Goldbach will ensure that the company concerned provides sufficient protection for your data (e.g. by means of Binding Corporate Rules) or that it is obliged to do so, e.g. by means of Standard Contractual Clauses (SCC) of the EU Commission. If these precautions do not lead to sufficient protection of the data, additional measures are taken. Where possible and necessary, an alternative service provider will be used.

Data collected by us on our own behalf or on behalf of our customers may be stored and processed in any country in which Goldbach Group maintains subsidiaries, branches, representative or customer facilities. The user acknowledges and accepts that information provided by the user may be transferred outside the country in which the user resides and to all companies belonging to the parent company of Goldbach, i.e. Goldbach Group as well as to the parent company of Goldbach Group, i.e. TX Group AG. Goldbach assures its customers and all users from whom data is collected that the data will only be processed in countries where an equivalent level of data protection as in Switzerland or the EU is guaranteed. Should data be processed by a company in another country, the data transfer will take place in accordance with the criteria of section 10.

In the event that another company acquires all or substantially all of the assets of our company as a result of a consolidation, merger, purchase of assets or other transaction, we reserve the right to transfer to the acquiring party all data (including personal data) in our possession or maintained by us.

We reserve the right to make changes to this Privacy Policy by posting an updated version on this page. The date on which the current Privacy Policy was published will always be indicated at the top of this page. Any changes to this Privacy Policy will be made in accordance with applicable (data protection) laws.

Goldbach tries to answer your questions and concerns as quickly as possible. However, sometimes it can take up to one month before you receive an answer. If we need more than one month, we will of course let you know beforehand.

In some cases Goldbach cannot or may not provide information. If permitted by law, Goldbach will always inform you in a timely manner of the reason for the refusal in this case. You have the right to file a complaint (see below).

14.1 Right of access, information and rectification

You may request information about your data processed by Goldbach. If your data is incomplete, you can request that it be completed. If your information is not (or no longer) correct, you can request a correction. If Goldbach has passed on your details to third parties, Goldbach will inform these third parties of your correction if this is required by law.

14.2 Right to have your personal data deleted

You may request the immediate deletion of your data if:

• Your data is no longer required for the purposes for which it was collected,
• you revoke your consent and there is no other legal basis for processing by Goldbach,
• you object to the processing and there are no overriding legitimate grounds for processing,
• your data has been processed unlawfully,
• your data must be deleted in order to comply with legal requirements, or
• your data has been collected in relation to information society services (e.g. promotional offers) targeted at children (as defined in Art. 8 GDPR).

14.3 Right to restriction of the processing of your personal data.

You have the right to request a restriction (comparable to a block) of the processing of your data if

• the accuracy of your data is disputed by you for the period of time required by Goldbach to verify the accuracy,
• the processing is not lawful and you request a restriction of use instead of deletion,
• Goldbach no longer needs your data for the purposes of processing, but you need them to assert, exercise or defend against legal claims, or
• you have lodged an objection, as long as it has not yet been determined whether your interests prevail.

14.4 Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data which is carried out on the basis of legitimate interest or for the performance of a task in the public interest; this also applies to profiling. Goldbach shall no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the assertion, exercise or defense of legal claims.

Goldbach Group is a registered member of the IAB Transparency and Consent Framework 2.0 (Vendor ID 580) and adheres to the guidelines specified for this. The IAB TCF 2.0 is an industry standard that enables all digital market participants (publishers, advertisers, technology service providers, etc.) to inform end users about the processing of their personal data and to give them the opportunity to consent or object to this. You will find a Consent Management Platform at all online platform operators participating in the Framework: A control interface, usually in the form of a cookie or privacy center, within which you can make your privacy settings. When we process your data, you will find us in theConsent Management Platform of the websites, mobile and HbbTV apps, etc. that you use. The settings you make therein will be taken into account by all participants in the framework, including the companies of the Goldbach Group.

If personal data is processed for the purpose of direct marketing (via newsletter or telephone), you have the right to object at any time to the processing of personal data for the purpose of such marketing. Below you will find the contact details.

If you have any questions, concerns or comments about the processing of your personal data or this privacy policy, please contact us by e-mail or mail at:

Goldbach Germany GmbH
Feringastraße 12b
85774 Unterföhring

E-mail: [email protected]

If you contact us by form on the website or by e-mail, the data you provide will be stored by us for six months for the purpose of processing your inquiry and in case of follow-up questions. We will not pass on this data without your consent.

Company data protection officer:

ePrivacy GmbH
Burchardstrasse 14
20095 Hamburg
Germany

[email protected]