Privacy Notice and

Cookie Notice

Indigita respects your right to privacy. Here are our main principles:

• We are committed to protecting your privacy and we want to offer you a tailored service. • We may collect personal data for specific purposes based on your consent, on a contract concluded with us or on a legitimate reason linked to the use of the website and platforms. • You have the right to access your personal data and ask for correction or deletion. • We do not sell your personal data to anyone. If necessary, we may share your data with group companies and service providers for a specific purpose. • We will take all reasonable steps to protect your information from misuse and keep it secure.

INDIGITA PRIVACY NOTICE

Thank you for visiting the website of Indigita SA, our platforms and social media pages (the “Sites”). This Privacy Notice explains how and for what purposes we use the information collected about you through our Sites, services, events or any other communication channels.

Here are a few terms we may use in this document: • “Personal data” is information relating to you as a living, identifiable individual. • “Processing” means collecting, recording, organizing, using, disclosing, storing and deleting your data. We are data controller for the data that you share with us as client, supplier, visitor of our Sites or a candidate applying to a position with our company.

SCOPE OF THIS PRIVACY NOTICE AND YOUR CONSENT By using our Sites or by giving us your personal data, you accept the practices described in this Privacy Notice. If you do not agree to this Privacy Notice, please refrain from using or visiting our Site or from providing personal data.

Indigita reserves the right to make changes to this Privacy Notice at any time and which changes are effective from the moment they are published on the Sites. We will communicate to you any substantial changes which have been made.

WHAT PERSONAL DATA WE COLLECT ABOUT YOU

We only collect personal information that is necessary for a specific purpose or that you provide to us with your consent, based on your clear actions, in relation with a contract or for a legitimate reason: • Personal and professional contact information such as name, email, phone number, and demographic information, including gender or location; • Quotes, queries or complaints; • Technical information when you visit our Sites such as your IP address, previous pages visited, web browser and search criteria entered; • Social media username and contact details if you interact with us through those channels; • Details about your work experience if you decide to apply for a position with us, including your CV, references or compensation details. • Your comments, including any photos and personal stories that you share with us. We also use cookies and other tracking technology to help us deliver relevant and interesting content in our communications in the future. You can find more information in our Cookie Notice.

WHY DO WE COLLECT PERSONAL DATA AND USE IT

We may collect and use your personal data for several purposes, including: • To respond to you, based on your request; • To grant you access to our platform based a subscription with your company subscription plan; • To contact you for marketing purposes, based on your consent or on our legitimate interest to expand our business; • To review compatibility with a position we advertised, based on your application via our Site or on partners websites; • For security and maintenance; for reporting; and for risk, dispute and record management based on our legitimate interest.

WITH WHOM DO WE SHARE PERSONAL DATA

We may share your personal data with the following list of recipients: • the Group companies related to Indigita as listed on the website www.brpsa.com; • the advertising, marketing and communication agencies delivering and analyzing our campaigns; • the data processing entities acting upon our instructions: recruitment agencies, hosting or security providers, IT developers, and web analytics tools such as Google Analytics; • authorities and regulatory bodies for legal reasons. We require such third parties, who may be based outside the country from which you have accessed the Sites, to comply with all relevant data protection laws and security requirements in relation to your personal data, usually by way of contract. At your request and provided there is no legal obligation to keep it, we might delete or anonymize your data from the Sites.

HOW DO WE STORE, SECURE AND RETAIN DATA

We take all reasonable technical and organisational measures to protect the personal data we hold against loss, unauthorised access or disclosure and against other misuse. Your personal data will not be sold or disclosed to any other third parties except as provided for in the Privacy Notice. When the personal data that we collect is no longer required for the given purpose, or for legal requirements, we destroy or delete it in a secure manner. In general, the following duration periods may apply: 1) Personal data of user’s account on our platforms: until the account is deleted; after this period, we will only store those data necessary for fulfilling security, legal or fiscal obligations. 2) Personal data or users requesting quotes, sending communication, complaints or enquiries: until the final processing of user’s request/complaint and subsequently retained where necessary for pursuing our legitimate interest (e.g. for defence needs).

Indigita SA 2020

YOUR RIGHTS

HOW YOU MAY ACCESS YOUR PERSONAL DATA AND SEEK ITS CORRECTION You can request access to the personal data we hold about you by contacting us at info@indigita.ch. You have the right to tell us if you would like to withdraw your consent, correct, update or delete your personal data in our records or object to any processing. To assist us in dealing with your request, please provide your full name and details. You may opt-out at any time from marketing communications by contacting us at info@indigita.ch. You may also limit the use of tracking technologies (such as the use of cookies by setting browser to warn you before accepting them, or you can simply set it to refuse them). HOW TO CONTACT US Indigita SA, a company registered in Geneva, Switzerland under number CHE-298.812.689, acts as the “data controller” for the personal data it processes within the framework of this Privacy Notice. Please contact us by phone at +41 22 552 30 80 or email at info@indigita.ch or regular mail at Indigita SA, Rue de Vermont 62, CP 82 CH-1211 Geneva 20, Switzerland. HOW TO COMPLAIN ABOUT OUR PROCESSING OF YOUR DATA If you feel that your data has been handled incorrectly, or you are unhappy with the way we have dealt with your query regarding the way we use your personal data, you have the right to complain. You should seek advice from the Supervisory Authority of the country where you reside.

COOKIES NOTICE

A cookie is a small piece of information which is sent to the hard drive of your device by a web server so that some information about your browsing activity can be collected.

We use the term “cookie’ for any technology that collects information from your device, such as information about your use of our apps and websites (Site), about your device such as the device ID, IP address and browser type, demographic data and if applicable the URL of the linking page. We also use web beacons or pixel tags to allow us to count visitors who have viewed our pages or read our promotional e-mail messages/newsletters. They are not used to access your personal information without your consent.

Necessary cookies are used to

o Remember information you have entered when you navigate on our Sites o Identify you as being logged in to our Sites Performance cookies are used to o Provide statistics on how our Sites are used o See how effective our adverts are o Detect any errors that occur o Test different designs of our Sites Functionality cookies are used to o Remember settings you have applied such as layout, language, or preferences o Show you when you are logged in to our Sites o Share information with partners to provide a service on our Sites. Targeting cookies are linked to services provided by third parties, such as ‘Like’ buttons and ‘Share’ buttons. We use them to o Link to social networks like Facebook, which may subsequently use information about your visit to target advertising to you on other websites o Provide advertising agencies with information on your visit so that they can present you with adverts that you may be interested in.

Here is a list of our cookies installed on the Site www.indigita.ch :

You can block our use of cookies by activating the settings in your browser (find out more at http://www.youronlinechoices.com/.

We reserve the right to make any changes and corrections to this Notice. Please refer to this page from time to time to review these and any new additional information presented.

Indigita SA 2020