Data Privacy

Most areas of our Site do not require any form of registration. When accessing our Site, the following data is stored in log files: Your IP address, date and time of your access, browser request and general information about your operating system and browser. This usage data is processed based on our legitimate interests in, and forms the basis for, statistical, anonymous analysis in order to identify trends to further improve our Site and our offers accordingly and to enhance your experience when visiting our Site.

You may need to provide limited personal data in order to receive certain information and services from us. For example, the following services require that we collect certain personal data about you:

News Subscription
You can sign up for news by email or order publications in printed form where such service is provided on the Site. Only basic personal data, such as your name, address and email address, are needed for registration.

For verification purposes as well as for the purpose to confirm your consent, we will send you a confirmation email immediately after you have finished the registration process. During this process, we may also store your IP address and the date and time of registration. The personal data collected as part of your registration will be used for sending you our news and/or printed publications.

Our newsletters contain tracking pixels which enable log file recording for statistical analysis of our newsletter campaigns. We may see whether and when an email was opened, and which links in the email were activated. We may use email marketing service providers for achieving the purposes described. We, our group companies, and our service providers only process your email address for email marketing services.

You may opt out from receiving any, or all, of these communications from us by contacting us via marketing@ditsch.de or by following the unsubscribe link or instructions in any email we send you. Please note that responding to your email may take several days.

Contact Form and Emails
You may use a contact form (where provided) in order to ask questions about us or our products and services. When using the contact form, you will be asked to provide personal data such as your name, address, email address and a message you want to deliver to us. You may also contact us by writing us directly via email where we have provided a specific email address. We may use such information based on our legitimate interests to get in touch with you or to reply to your message.

Job Portal
If you are interested in working with us and would like to apply for an open job position, you may be requested to register on the website of our third party provider Umantis, Haufe-umantis AG, Unterstrasse 11, 9000 St. Gallen, Switzerland. More information about the application process and the necessary data may be found on the "DITSCH JOB PORTAL" in the career section.

Surveys
Occasionally, we conduct surveys via our Site. In addition to your opinion or feedback, you may be asked to provide personal data. The type of data collected depends on the survey; we will use the data only as indicated in the survey.

Events
You can attend our events and subscribe online to calendar alerts sending a notification to your email address when a particular event is due, where such service is provided on the Site. You can unsubscribe from an alert at any time on the same page of the Site. Where registration is necessary, we enable it via our Site or the websites of third parties. In such case, personal data may be collected through the registration forms for events; the type of collected data depends on the event. We may forward the personal data of registered persons in connection with an event to third parties, such as, among others, hotels, sponsors, hosts, or organizers (including those accessed via the websites of third parties).

Online shop
You may be able to purchase our products or services via our Site. In such case, you will be asked to provide certain personal data. We will use your data as follows:

• For the sale and supply of our products and services, including handling of orders (e.g. sending of order and dispatch order confirmations, delivery confirmations, delivery and invoicing);

• In order to conduct market research; and

• For verification of customer creditworthiness.

Media Distributors
We process contact data of media representatives, which we obtain from publicly accessible sources (e.g. imprint of a media company or PR media directories), unless the processing was expressly prohibited. In addition, we process contact data of media representatives who have already sent us a media enquiry on a specific topic. Relevant personal data are for example name, address, e-mail address and the relevant media company (e.g. the newspaper or the news portal). We use this data in our legitimate interest to include media representatives on our mailing list for media releases and to inform them of relevant news about the Valora group. Affected media representatives have the right to opt-out of this processing of their personal data at any time.

Social Plug-Ins
Our Website may contain links to external social networks such as Facebook or Twitter. You can also share the content of our Website in social networks. This Website uses a secure sharing tool that establishes direct contact between social networks and users only when users click on one of the appropriate buttons. This tool does not automatically transfer user data to the operators of such platforms. When users are logged in to one or more social networks, the use of social buttons for Facebook, Twitter, etc. will cause an information window to appear, allowing the user to confirm the text before it is sent. The user can share the content of this Website in social networks without their providers creating a profile of the users' surfing behavior.

We may give access to your personal data to the following categories of recipients and for the following purposes:

• To our service providers and Valora divisions (see www.valora.com/en/brands for further details on the Valora divisions), e.g. for personnel management, bookkeeping, accounting, marketing services, sales, products and services delivery, human resource services, telecommunications and IT;

• If you expressly request us to do so;

• If the disclosure is necessary to comply with a court order or a legal or regulatory requirement; or

• If disclosure of such personal data is reasonably connected to the envisaged sale or other disposal of our company or company assets or parts of it.

Our service providers and Valora divisions are contractually bound to process personal data only on our behalf and in accordance with our instructions. We also oblige them to comply with technical and organisational measures ensuring the protection and security of personal data.

Your data may be processed by us, our service providers and/or affiliated companies in Switzerland. The appropriate level of protection results from an adequacy decision of the European Commission for Switzerland.

If a service provider or a Valora affiliate processes data, or is located, in a country where the applicable laws do not provide an adequate level of protection for personal data, we will ensure by appropriate means that the respective data recipients maintain such adequate level of data protection.

The third parties and Valora divisions will only use personal data for the agreed purpose and not sell it to third parties or market it otherwise.

Security and Confidentiality
To ensure the security and confidentiality of personal data collected online, we use data networks protected, inter alia, by industry standard firewall and password protection. In the course of handling your personal data, we take measures reasonably designed to protect such data from loss, misuse, unauthorized access, disclosure, alteration or destruction.

Generally, we process your data only as long as it is necessary in order to achieve the respective purpose, or as long as required or permitted under applicable laws (such as data retention statutes). If the purpose has been achieved, your data will either be deleted or irreversibly anonymized.

More specifically, this means for you:

• If you have consented to receiving our newsletters or other publications, we will retain the necessary personal data until you revoke your consent or unsubscribe from the service.

• Such personal data which you provide in the context of your registration on this website will be retained for the life of your user account.

• Data collected in connection with surveys will be deleted immediately upon completion of the survey.

• Data that you submit to us as part of a request or registration for an event, as well as data in the context of an online order will be stored for as long as we are required under applicable laws. Afterwards, your data will be deleted.

• Log and analytics data is stored for the duration specified in the section on the relevant analytics service (see section 5 "Which analytics services do we use on this Website?" in our "Cookie Policy").

You have the right to request information about, and access to, the personal data we process about you. You also have the right to request your data's transmission, the correction of incorrect personal data, the restriction of access to and the deletion of personal data.

You may request the restriction of the processing of your personal data if (a) the accuracy of the data is disputed by you, (b) the processing is unlawful and you refuse that the data be deleted, (c) we no longer need the data, but you require the data in order to exercise or defend a legal claim; or (d) You have objected to the processing.

You have the right to object to the processing of personal data concerning you if the processing of such data is based on our legitimate interest or if the data is being processed for direct marketing purposes.

If you have given us your consent for the processing of your data (for example if you have consented to receive our newsletter), you have the right to withdraw your consent at any time.

If you wish to exercise any of your rights or if you have any questions or concerns, please contact our data protection officer (contact can be found in the first section of this Privacy Policy).

If you believe that your rights under applicable data protection laws have been violated, you have the right to file a complaint with the competent supervisory authority for data protection.

In addition to our privacy policy, this cookie policy describes how cookies are used in connection with this website and how you can manage your cookie settings.

1. What is a cookie?
When you visit a Website, cookies may be set on your device or information may be retrieved from previously set cookies. Cookies are small text files that are stored on your device. Cookies collect and store certain information for a certain period of time to ensure the functionality of the Website and to make your visit more comfortable (e.g. by remembering your preferred settings). Cookies also help to better understand how visitors use the Website. This allows us to continuously improve the Website and its usability, and to provide visitors with more relevant information, including personalized advertising.

2. How can you manage cookies?
We distinguish between cookies, which are mandatory for the technical functions of the Website, and optional cookies. For optional cookies, we want to give you the opportunity to make an informed decision for or against the use of these cookies. For this purpose we use the service "CookieBot". You can access the most current overview of all cookies at any time via the following link: Cookie settings. Here you can also conveniently and individually set which optional cookies you want to allow. You can also set your preferences regarding the cookie types "Statistics", "Comfort" and "Marketing".

Please note: If you reject cookies used for advertising purposes, you will receive less advertising that is tailored to your interests, but you will still be able to use the Website to its full extent.

Alternatively, you can either generally deactivate the setting of cookies in your browser settings or set your browser to block cookies from certain domains. These can typically be found in the "Internet Options", "Tools" or "Settings" submenu of your Internet browser. The procedure for disabling cookies may vary depending on the browser. We would also like to point out that changes to the settings only affect the respective browser. If you use different browsers or change the terminal, you may have to change the settings again.

Please note: If you decide against the use of absolutely necessary cookies, this may impair the user-friendliness of this Website.

3. What happens to cookies that are subsequently deleted?
The collection of your data by cookies can be stopped at any time. If cookies are subsequently deactivated, the information collected before the preference change can still be used in some cases, especially in the case of statistical cookies. However, no further information is collected via the deactivated cookie.

4. Which cookies are used on this website?
Depending on their lifetime, a distinction can be made between "session cookies" and "permanent cookies":

• «Session cookies» are temporary cookies that remain on your device until you leave the Website.

• A «permanent cookie» will remain on your device much longer or until you delete it manually (how long the cookie remains on your device depends on the duration or expiration date of the respective cookie and on your browser settings). Permanent cookies enable us to recognize you the next time you visit our Website.

Different types of cookies can be used on this Website:

• Necessary cookies: Necessary cookies are essential for the correct functioning of our Website and to improve your visit. These cookies are necessary for basic functions such as page navigation and online forms to function correctly and for your virtual shopping cart to remember the items you have selected.

• Comfort: Comfort cookies allow a Website to remember information that affects the way the Website behaves or looks, such as your preferred language or the region you are in.

• Statistics: Statistical cookies help us understand how visitors interact with our site by aggregating information collected to produce anonymous statistics (e.g. visitor numbers and whether problems occur during the visit). This information helps us to improve the Website experience for all our visitors and to resolve problems quickly.

• Marketing: Marketing cookies are based on third-party services (e.g. Facebook 'Likes', Google +1 Share Buttons) and are used to collect information about your use of our Website. These cookies allow you to submit 'likes', share content with friends, and connect to social media platforms. We share information collected via marketing cookies with the respective third party providers, and they use such information to display customized advertising on their own web platforms. We may also receive evaluations from the third parties regarding the effectiveness of our own advertising measures on their web platforms.

5. Which analytics services do we use on this website?
For the purpose of analysing, optimising and operating our online offer, we use the analytics services of third party providers described below. Analytics services usually work by setting cookies. You can deactivate the cookies by adjusting your browser settings as described above. For effective prevention of analytics services, you should make adjustments on all devices used.

MATOMO
Matomo is an open source web analytics platform and works by setting a statistics cookie. It is used by us to measure, collect, analyze and report visitor data in order to understand and optimize this Website.

You can prevent the use of Matomo by deactivating the setting of statistics cookies.

The processing of personal data at Matomo is based on our legitimate interest to recognize what works and what does not work on our Website. You also benefit from the processing, as it serves to make the Website work better and better. By analysing this data we can identify possible pitfalls: pages not found, problems with search engine indexing, which contents are most appreciated, etc. Once the data is processed (number of visitors reaching an unfounded page/only viewing a page/etc.), Matomo creates reports for us so that we can take measures to improve the experience of our visitors, e.g. changing the page layout, adapting our content, etc. Your personal information is not used for profiling.

With Matomo we process the following personal data: Cookies, IP address, user ID, user's location (country, region, city), date and time of visit, title of the page accessed, URL of the page accessed, URL of the page accessed before the current page, screen resolution, files clicked and downloaded, links to an external domain, time of page creation, main language of the browser, user agent of the browser.

All data collected through Matomo and processed for the above purposes are hosted in Switzerland. We may also transfer the personal data to our web partners: Mediacoding GmbH, Mettlenwaldweg 17, 3037 Herrenschwanden and webstyle GmbH, Tiergarten 1, 3400 Burgdorf.

The processing of your personal data in Switzerland is based on the adequacy decision of the Commission of the European Union.

We process the personal data collected via Matomo for a period of 36 months. After this period the data will be irrevocably deleted.

GOOGLE ADWORDS
This website uses Google's conversion tracking. If you access our website via an ad placed by Google, Google Adwords places a cookie on your computer. This cookie has a lifespan of 30 days. During this time, we and Google can recognize if you visit our website more than once. Every website operator who uses Google AdWords receives a different cookie and therefore has no insight into which other third-party websites his visitors access. The information collected using the conversion cookie is used to compile conversion statistics for us as website operators. This tells us the total number of users who clicked on our ad and were then redirected to our website. However, we do not receive any information that can be used to identify individual users.

FACEBOOK PIXEL
Our Website can use the visitor action pixel of Facebook, Inc. ("Facebook") for conversion measurement. Facebook Pixel is a marketing tool and will only be used if you have consented to the use of marketing cookies. The Facebook Pixel works similar to a cookie - but it sits on our Website rather than on your device. The Facebook pixel can be used to track the behavior of Website visitors who have been redirected to our Website by clicking on a Facebook advertisement. This allows us to evaluate the effectiveness of Facebook Ads for statistical and market research purposes and to optimize future advertising efforts. We as Website operators only receive pseudonymised data, so that no conclusions can be drawn about individual visitors. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes (in particular the placement of advertisements on pages of Facebook as well as outside of Facebook) in accordance with the Facebook data usage guidelines. We cannot influence this further processing of your data by Facebook. You can deactivate the remarketing function Custom Audiences in the settings for advertisements section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be logged in to Facebook to do this. If you do not have a Facebook account, you can disable usage-based advertising from Facebook on the European Interactive Digital Advertising Alliance website: https://www.youronlinechoices.com/.

We keep our Privacy Notice under regular review and may change it at any time. Your continued use of our Site and of our products and services is deemed as your acceptance with any such changes. Changes to the Privacy Notice will be communicated appropriately.