PRIVACY NOTICE

The Company will Process the Platform Data and Payment Data in direct connection with the conclusion or the performance of the contract, respectively with the Terms of the Platform, to which Users are parties when they use the Platform.

Indeed, Collecting and Processing the Platform Data and Payment Data enable the Company to provide its Services through the Platform. Therefore, Users understand that without this Collection and Processing, the Company would be unable to provide its services on the Platform.

The Company may disclose User's Personal Data under some circumstances specified in this Article. In any case, the Company shall ensure that an adequate protection is guaranteed for User's Personal Data, especially by using data transfer agreements or data processing agreement (if needed).

In some specific cases, when the level of protection is not guaranteed, the Company will obtain User's prior Consent or establish with the Recipient of Personal Data a contractual framework or sufficient safeguards that ensure an adequate level of protection abroad, especially by using Standard Contractual Clauses. The User may request access to a copy of these safeguards by contacting the Company. The User shall be informed of any cross-border transfer in the event that it occurs.

The Company may disclose Users' Personal Data under some circumstances to its Affiliates (which includes their employees, directors, representants, affiliates and partners), such as:

- Woorfee SA, CHE- 486.120.574, Avenue du Casino 32, 1820 Montreux, Switzerland.

The IT Service Provider, namely Karma Technologies LLC, (which includes its employees, directors, representants, affiliates and partners) may have access to some of the Users' Personal Data in the development operation and/or maintenance of the Platform.

The services agreement between the Company and the IT Service Provider guarantees that data protection principles are respected.

The Company stores Personal Data in servers located in Europe, provided by Woorfee Web Services Sàrl, Avenue du Casino 32, 1820 Montreux, Switzerland.

The hosting agreement between the Company and the hosting company guarantees that data protection principles are respected.

If required from time to time, the Company may disclose Personal Data to public authorities, regulators or governmental bodies, including when required by law or regulation, under a code of practice or conduct, or when these authorities or bodies require the Company to do so.

[ ] I understand and consent to the potential cross-border transfer of my Personal Data as described above and to the disclosure of my Personal Data to the Recipients described above. I acknowledge that I can request information about these transfers and the safeguards in place by contacting the Company.

In accordance with Applicable Laws, the Company will use Users' Personal Data for as long as necessary to satisfy the purposes for which User's Personal Data was Collected and/or to comply with applicable legal requirements.

The Company applies high industry standards and will always apply adequate technical and organizational measures, in accordance with Applicable Laws to ensure that User's Personal Data is kept secure.

In the event of a Breach, the Company shall without undue delay, and where feasible, notify the Breach to the Federal Data Protection and Information Officer, unless said Breach is unlikely to result in a risk to User's rights and freedoms. If the Breach is likely to result in a high risk to User's rights and freedoms, the Company shall communicate the Breach to the User, if it is necessary or when the Federal Data Protection and Information Officer demands it, if it is feasible, without undue delay.

In the cases where GDPR is applicable, in the event of a Breach, the Company shall without undue delay, and where feasible, not later than seventy-two (72) hours after having become aware of it, notify the Breach to the competent supervisory authority, unless said Breach is unlikely to result in a risk to User's rights and freedoms. If the Breach is likely to result in a high risk to User's rights and freedoms, the Company shall communicate this Breach to the User, if it is feasible, without undue delay.

The Company shall not be held liable for any Breach that occurs due to unforeseen circumstances beyond the reasonable control of the Company, including but not limited to natural disasters, acts of war, terrorism, cyber-attacks by third parties, or other events of force majeure. In such instances, the Company is absolved from all liability provided that it has exercised due diligence and adhered to generally accepted industry standards in safeguarding personal data.

The Company will, both at the time of the determination of the means for Processing and at the time of the Processing itself, implement appropriate technical and organizational measures, such as pseudonymization, which are designed to implement data-protection principles, such as data minimization, in an effective manner and to integrate the necessary safeguards into the Processing in order to meet the requirements of the Applicable Laws and protect User's rights.

The Company will implement appropriate technical and organizational measures, in order to ensure that by default, only Personal Data which are necessary for each specific purpose of the Processing are Processed.

This obligation applies to the amount of User's Personal Data the Company Collects, the extent of their Processing, the period of storage and their accessibility. These measures will ensure that by default. User's Personal Data is not made accessible without User's intervention to an indefinite number of third parties.

The User has the right to information regarding the data Processed about him/her/it. Indeed, the User has the right to request access to or information about his/her/its Personal Data which are Processed by the Company. The User may visualize the Personal Data the Company Collects and Processes in his/her/its profile information on the account of the Application.

Where provided by Applicable Law, the User, his/her successors, his/her/its representatives and/or proxies may (i) request deletion, correction or revision of User's Personal Data; (ii) oppose the data Processing; and (iii) limit the use and Disclosure of User's Personal Data.

Where the Company Processes User's Personal Data on the basis of his/her/its Consent, User has the right to withdraw that Consent at any time. The withdrawal of Consent shall not affect the lawfulness of Processing based on Consent before the withdrawal.

The User has the right to request erasure of his/her/its Personal Data that: (i) is no longer necessary in relation to the purposes for which it was Collected or otherwise Processed; (ii) was Collected in relation to Processing that User previously Consented to, but later withdraw such Consent; or (iii) was Collected in relation to Processing activities to which User objects, and there are no overriding legitimate grounds for the Company Processing

The User may request to receive his/her/its Personal Data in a structured, commonly used and machine readable format, and to have the Company transmit User's Personal Data directly to another Data Controller, where technically feasible, unless exercise of this right adversely affects the rights and freedoms of others (Portability of Personal Data).

In certain circumstances the Company may Process User's Personal Data through automated decision making, including profiling if this should occur.

Where this takes place, User will be informed of such automated decision-making that uses his/her/its Personal Data, be given information on the logic involved, and be informed of the possible consequences of such Processing. In certain circumstances, User can request not to be subject to automated decision-making, including profiling.

The right to request information about the data Processed, and the rights to deletion, correction or revision of a User's Personal Data may be exercised by the User, through its account's profile on the Application.

All the above-mentioned rights can be exercised by contacting the Company at: feedback@wizwood.com attaching a copy of User's ID. If the request is submitted by a person other than the User, without providing evidence that the request is legitimately made on User's behalf, the request will be rejected.

The request is free of charge unless User's request is unfounded or excessive. In such a case, the Company may charge the User a reasonable request fee according to Applicable Laws. The Company may refuse, restrict or defer the provision of Personal Data where it has the right to do so, for example if fulfilling the request will adversely affect the rights and freedoms of others.

The Company is the Data Controller of the User's Personal Data listed under Article 5 of this Privacy Notice.

The IT Service Provider (which includes its employees, directors, representants, affiliates and partners) is a Data Processor of Users' Personal Data and Processes these Personal Data on the basis of the services agreement concluded between the Company and the IT Service Provider which ensures a safe conservation of the Personal Data by the IT Service Provider in accordance with all the Applicable Laws.

The Company may modify this Privacy Notice from time to time and will post the most current version on the Website and/or Application.

If the Company makes any material changes it will notify the User by email, prior to the change becoming effective. If a modification reduces User's rights, a pop-up window will inform the User immediately when he/she/it will browse the Website and/or Application and the User will have to accept the changes.

The Website may contain links which direct the User to third party websites, applications, third parties' content, and may also contain information about third parties and/or third parties' content.

The Company rejects any liability relating to the privacy policy in force on said third party websites or applications, the collection and use of User's Personal Data by the latter and relating to the contents of said websites or applications (whether the links are hypertext links or deep links).

Furthermore, the User acknowledges and agrees that using the Website and/or Application could imply downloading or using third party applications. Under no circumstances the Company shall be liable for the utilization of these others applications, especially regarding the Personal Data protection rules.

This Privacy Notice and any questions relating thereto shall be governed by the laws of Switzerland, to the exclusion of any rules of conflict resulting from private international law.

Any dispute relating to this Privacy Notice must exclusively be brought before the courts of Lausanne, Switzerland, subject to possible recourse to the Federal Court.

To ask questions or make comments on this Privacy Notice or to make a complaint about the Company's compliance with Applicable Laws, please contact the Company through:

Email: feedback@wizwood.com or

- RadioMontreux Sàrl

  Avenue du Casino 32

  1820 Montreux

   Switzerland

You can also complain about the Processing of your Personal Data to the Office of the Federal Data Protection and Information Commissioner: FDPIC, Feldeggweg 1, 3003 Bern, Switzerland.

You understand that communicating by email/phone may not ensure confidentiality, integrity and authenticity. The Company will not answer any request which will be considered unsafe or not ensuring User's identity authenticity