Privacy Policy

The following provisions apply to all services provided by Tom Tasty and platforms (e.g., iOS or Android) where Tom Tasty is available as an app. Please note that these platforms also have their own and independent data or privacy policies, privacy statements, notices, and terms of use, which you should read carefully.

If you have concerns or questions, you can always contact our data protection officer. By mail to: Tom Tasty AG, Data Protection, Seestrasse 513, CH-8038 Zurich or by email at: datenschutz@tomtasty.ch.

The processing of personal data of our users is limited to the data necessary for providing a functional website and our content and services. It is carried out only for the purposes listed and when a legal basis exists. This is done in accordance with the Swiss Federal Act on Data Protection (DSG) of June 19, 1992. The privacy policy applies in addition to and within the framework of the General Terms and Conditions (AGB) of Tom Tasty.

1. PERSONAL DATA WE COLLECT

When you visit the website, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies installed on your device. As you navigate the website, we also collect information about the individual web pages or products you view, websites or search terms that led you to the website, and information about how you interact with the website. We refer to this automatically collected information as "Device Information."

We collect Device Information using the following technologies:

• "Cookies" are data files stored on a device or computer and often include an anonymous unique identifier. For more information about cookies and how to disable them, visit https://allaboutcookies.org.
• "Log files" track actions occurring on the website and collect data including IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.
• "Web beacons," "tags," and "pixels" are electronic files used to record information about how you navigate the website.

When you make a purchase or attempt to make a purchase through the website, we also collect certain information about you. This includes your name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number. We refer to this information as "Order Information."

In this Privacy Policy, we refer to both Device Information and Order Information as "personal data."

1. HOW DO WE USE YOUR PERSONAL DATA?

We typically use the Order Information that we collect to fulfill any orders placed through the website (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations).

Additionally, we use this Order Information to:

• Communicate with you
• Screen our orders for potential risk or fraud
• Provide you with information or advertising relating to our products or services in line with your privacy settings.

We use the Device Information we collect (especially your IP address) to screen for potential risk and fraud, and more generally to improve and optimize our website (e.g., by generating analytics about how our customers browse and interact with the website, and to assess the success of our marketing and advertising campaigns).

1. SHARING YOUR PERSONAL DATA

We share your personal data with third parties that help us use your personal data, as described above. For example, we use Shopify to power our online store. You can read more about how Shopify uses your personal data here: https://shopify.com/legal/privacy.

We also use Google Analytics to help us understand how our customers use the website. You can read more about how Google uses your personal data here: https://policies.google.com/privacy?hl=en. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

Finally, we may also share your personal data to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.

By using the services, you acknowledge and consent that personal data and/or usage data may be transferred to or accessible by parent, subsidiary, or third-party companies. Primarily, these are:

• Tom Talent Management AG, Zurich: Provision of financial services
• Teleboy AG, Zurich: Provision of management, support, and software development services
• Food on the Road AG, Zurich: Preparation and packaging services
• Teleboy Service GmbH, Berlin: Provision of support and software development services
• Prospective Media Services Dooel, Skopje: Provision of software development services
• Crif AG, Zurich: Provision of credit reporting services
• DPD AG, Buchs: Provision of logistics services
• Planzer AG, Seewen: Provision of logistics services

This also concerns payment providers (e.g., credit card companies, banks, mobile services, collection agencies), providers for creating and processing statistics, IT service providers (e.g., data centers, hosting providers, backup services, database services).

These service providers only have access to your personal data to the extent necessary to perform our services or their tasks. Both the companies presented and the service providers are obliged to treat the data in accordance with this privacy statement and the relevant data protection laws.

If another company acquires Tom Tasty AG or shares of Tom Tasty AG, including your personal data, the personal data collected by Tom Tasty AG will become the property of this company, including all rights and obligations set forth in these provisions.

1. USE OF COOKIES

Cookies are small files that are usually stored on your device when you use our services. They are used to ensure or improve functionality, to report information, and to support the personalization of services and advertising.

In general, you can prevent the storage of cookies on your hard drive by selecting "do not accept cookies" in your browser settings. You can also set your browser to ask you before setting cookies if you agree. Finally, you can delete set cookies at any time. How all this works in detail can be found in the instructions of your browser manufacturer. If you do not accept cookies, this may lead to functional restrictions in individual cases.

4.1 Necessary Cookies

These cookies are needed so that we can provide our services. For example, we can use these cookies to verify and identify you when you use our services, allowing us to offer you our service. They also help us enforce our terms of use, prevent fraud, and maintain the security of our service.

4.2 Performance and Functionality Cookies

These cookies are not necessary, but they help us personalize and enhance your experience. They allow us to save your settings, for example, and prevent you from having to re-enter information you have already provided (e.g., during registration). We also use cookies to collect information (such as popular pages, conversion rates, eating habits, click rates, and other information) about how Tom Tasty is used. This allows us to improve and personalize our services.

1. ANALYTICS TOOLS

5.1 Google Analytics

Tom Tasty uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics uses so-called "cookies," text files that are stored on your devices and enable an analysis of your use of the services. The information generated by the cookie about your use of our services (including your anonymized IP address) is transmitted to a Google server in the USA and stored there. Google will use this information to evaluate your use of our services, to compile reports on website activity, and to provide other services related to website activity and internet usage. Google may also transfer this information to third parties if required by law or if third parties process this data on behalf of Google. Google will in no case associate your IP address with other Google data. You can prevent the installation of cookies by setting your browser software accordingly; however, we would like to point out that in this case, you may not be able to fully use all functions of Tom Tasty. By using Tom Tasty, you consent to the processing of data about you by Google in the manner and for the purposes set out above. You can prevent the collection and storage of your data at any time with effect for the future.

Furthermore, Tom Tasty uses Google Analytics reports on demographic characteristics, which include data from Google's interest-based advertising and third-party visitor data (e.g., age, gender, and interests). This data cannot be attributed to a specific person and can be deactivated at any time via https://google.de/ads/preferences.

5.2 Google Ads

Tom Tasty uses Google Ads, an analysis service from Google, and as part of Google Ads, conversion tracking. Google places a cookie on your computer's hard drive (so-called "conversion cookie") when you click on an ad placed by Google. These cookies expire after 30 days and are not used for personal identification. If you visit certain pages on our website, Google and we can recognize that you clicked on the ad and were redirected to this page. The information obtained using the conversion cookies is used to compile statistics for Google Ads customers who use conversion tracking. Tom Tasty learns through these statistics the total number of users who clicked on the ad placed by Google and visited a page tagged with a conversion tracking tag. In addition to conversion tracking, Tom Tasty also uses the following functions:

• Remarketing
• Audiences with shared interests
• Custom audiences with shared interests
• Ready-to-buy audiences
• Similar audiences
• Demographic and geographic targeting

With Google's remarketing function, Tom Tasty reaches users who have already visited our website. This way, Tom Tasty can present advertising to audiences who are already interested in our products or services. Google Ads also determines the common interests and characteristics of Tom Tasty users based on user behavior on websites in Google's advertising network ("Display Network") in the last 30 days and using the contextual search engine. Based on this information, Google then finds new potential customers for marketing purposes whose interests and characteristics are similar to those of Tom Tasty website users. The audience-specific remarketing is carried out through the combined use of cookies, such as Google Analytics cookies and Google DoubleClick cookies.

5.3 Bing Ads

Tom Tasty uses conversion tracking from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, on the website. Microsoft Bing Ads places a cookie on your computer if you reach Tom Tasty's website via a Microsoft Bing ad. Microsoft Bing and Tom Tasty can thus recognize that someone clicked on an ad, was redirected to Tom Tasty, and reached a predetermined target page (conversion page). Tom Tasty learns only the total number of users who clicked on a Bing ad and were then redirected to the conversion page. No personal information about the user's identity is shared. If you do not want information about your behavior to be used by Microsoft as described above, you can refuse the required setting of a cookie – for example, via a browser setting that generally disables the automatic setting of cookies. You can also prevent the collection of data generated by the cookie and related to your use of the website and the processing of these data by Microsoft by declaring your objection under the following link: https://account.microsoft.com/privacy/ad-settings/signedout?lang=de-DE. For more information on privacy and the cookies used by Microsoft and Bing Ads, visit Microsoft's website at https://privacy.microsoft.com/de-de/privacystatement.

5.4 Google reCAPTCHA

Tom Tasty uses "Google reCAPTCHA" (hereinafter "reCAPTCHA") on the website. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). reCAPTCHA is used to check whether data entry on the Tom Tasty website (e.g., in a contact form) is made by a human or by an automated program. To this end, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g., IP address, duration of the website visitor's stay on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Google. The reCAPTCHA analyses run entirely in the background. Website visitors are not advised that an analysis is taking place. Data processing is based on the DSG. Tom Tasty, as the website operator, has a legitimate interest in protecting its web offers from abusive automated spying and from SPAM. For more information about Google reCAPTCHA and Google's privacy policy, please follow these links: https://google.com/intl/de/policies/privacy/ and https://google.com/recaptcha/intro/android.html.

5.5 Apple Sign-in

We offer you the option to register and sign in to our services with "Sign in with Apple". When registering with Apple, you will be redirected to the Apple page, where you can sign in with your Apple ID. This links your Apple profile and our services. Through the link, we automatically receive various profile information from Apple Inc. We exclusively use your name and email address to complete your user account at Tom Tasty. However, you have the option to hide your email address. If you activate this function, you will be assigned a unique, randomly generated email address so that your personal email remains private.

For more information about "Sign in with Apple" and privacy settings, please refer to the privacy notices and terms of use of Apple Inc. at https://apple.com/privacy.

5.6 Hotjar

Tom Tasty uses the web analytics service Hotjar for web usage analysis. Hotjar Ltd. (St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta) complies with the provisions of the Data Protection Act, Chapter 440 of the Laws of Malta ("Applicable Law"), which implements all relevant EU data protection directives. Hotjar is a service that analyzes the behavior and feedback of users on websites through a combination of analytics and feedback tools. Hotjar provides Tom Tasty with a "big picture" of how the user experience and performance of the website can be improved. For this purpose, the following information is collected: The IP address of the end device (it is collected and stored in an anonymized format), screen/display resolution, type of end device, operating system, browser type, geographic location (country only), preferred language, and mouse events (movements, position, and clicks). The collected data is transmitted and stored on servers located in Ireland (EU) via an encrypted connection. The sole purpose of this data collection is to improve the user experience on Hotjar-based websites. Personal data is neither collected nor stored. You can find more information about Hotjar's compliance with data protection here: https://hotjar.com/privacy. You can refuse the collection of your data by Hotjar when visiting Tom Tasty at any time by visiting Hotjar's support page. Here you will find more information: https://help.hotjar.com/hc/de/articles/6952777582999.

1. SOCIAL MEDIA TOOLS

6.1 Facebook Pixel

Within our website, for our interests in analyzing, optimizing, and economically operating our platform for these purposes, the so-called "Facebook Pixel" operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, is used. With the help of the Facebook Pixel, Facebook is able to determine the visitors to our website as a target group for the display of ads (Facebook Ads). Accordingly, we use the Facebook Pixel to display the Facebook Ads placed by Tom Tasty on Facebook to you accordingly. Additionally, we use the Facebook tool "Custom Audiences". A non-reversible checksum (hash value) is generated from your profile data and transmitted to Facebook for analysis and marketing purposes. If you do not wish data collection via Custom Audience, you can deactivate Custom Audiences. For more information about the purpose and scope of data collection and further processing and use of the data by Facebook, as well as your settings options for protecting your privacy, please refer to the privacy policies of Facebook, which can be found at https://facebook.com/ads/website_custom_audiences and https://facebook.com/privacy/explanation among others.

6.2 Facebook Connect

We offer you the option to register and sign in to our services with Facebook Connect. For registration, you will be redirected to the Facebook page, where you can sign in with your usage data. This links your Facebook profile and our services. Through the link, we automatically receive various profile information from Facebook Inc. We exclusively use your name, gender, age, and email address to complete your user account at Tom Tasty. For more information on Facebook Connect and privacy settings, please refer to the privacy notices and terms of use of Facebook Inc. at facebook.com/policy.php

1. DATA SECURITY

We use the SSL procedure in connection with the highest level of encryption supported by your browser within the website visit. Whether a single page of our internet presence is transmitted encrypted can be recognized by the closed representation of the key or lock symbol in the address bar of the browser. In addition, we apply further suitable technical and organizational security measures to protect the data against accidental or intentional manipulations, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological development.

1. WHAT RIGHTS DO YOU HAVE?

You can request information about the personal data stored at Tom Tasty at any time, as well as the correction of erroneous data and the termination of the collection of your personal data or its deletion. Legal provisions and orders from state authorities remain reserved. Requests for information should be sent by email to datenschutz@tomtasty.ch or in writing to Tom Tasty AG, Data Protection, Seestrasse 513, CH-8038 Zurich. If you want to delete your account or cancel a paid subscription, you can also do this in your user account. Tom Tasty can always request proof of identity for information and deletion requests.

1. CHANGES TO PRIVACY POLICY

New legal requirements, business decisions, or technical development may require changes to our privacy policy. These will then be adjusted accordingly. You can always find the latest version on our website or in our apps.

Date: September 14, 2023