A. Controller and Responsibility

The responsible for the processing of personal data and therefore the controller in accordance with this privacy statement is Code Craft Studio Körtge, Zwinglistrasse 35, 8004 Zurich. The data protection officer at our company can be reached at the aforementioned postal address, by e-mail to legal[at]podi-app.com.

B. Personal data and terminology

Personal data is all information relating to a specific or identifiable (i.e., identified or identifiable) natural person such as name, address, telephone number, e-mail address, date of birth, etc. ("personal data").

Processing means any operation with personal data, irrespective of the means applied and the procedure, and in particular the collection, storage, use, revision, disclosure, archiving or destruction of data (“processing” or processed”).

Data Subject is any natural person whose personal data is processed (“data subject").

Any private natural or legal person, public authority, agency or other entity that alone or jointly with others decides on the purpose and the means of the processing is a controller (“controller”).

Any natural or legal person, public authority, agency or other entity which processes personal data on behalf of the controller is a processor (“processor”).

C. Collection of personal data

You or the persons concerned provide us with some of the personal data yourself by making it available to us, using our services or contacting us by e-mail, telephone or in person. This includes, for example, name, contact data, date of birth, e-mail address, etc. We also process personal data that we receive from applicants for jobs. We may also collect personal data ourselves, e.g., if you or the company for which you work use our services, or we obtain data (e.g. information from media and Internet, credit information, your addresses and possibly interests and other socio-demographic data) from publicly accessible sources (e.g. debt enforcement registers, land registers, commercial registers, press, internet, media, social media). Furthermore, we may collect data from other companies, from authorities and other third parties or if you use our application. We collect this data for the purposes laid down in section D, unless otherwise referred to.

If you have given us consent to process your personal data for specific purposes (for example, when you register to our application), we will collect your personal data within the scope set and based on this consent. We may also base the collecting and processing of personal data on other legal grounds, if at all necessary. These include the fulfillment of a contract, the implementation of pre-contractual measures or the protection of other legitimate interests (see section D).

If you are acting on behalf of a third party or providing us with information about a third party, you declare that you are an authorized representative or agent of that third party and/or that you have obtained all necessary consents from that third party to the collection, processing, use and disclosure of their personal information to us or by us in accordance with the terms of this privacy statement.

For the usage of our Application Podi we collect the underneath mentioned personal data mainly for the purposes of providing and developing our products, services and apps:

After user authentication, the following data will be collected:

• Identifier: The user's email address

• Provider: Which auth provider the user has used (e-mail, Apple Sign in or Google Sign in)

• Signed In: The date on which the user last logged in

• User UID: A global identifier that uniquely identifies the user in the app

While using the App Podi the following User data is collected:

• Bookmarked/saved summaries

• Subscribed (the identifier of the podcast that the user follows)

• The user's settings/preferences for the creation of the summaries

• Reads (the identifiers of the podcast episodes that the user has read)

D. Purposes of processing

We use personal data in particular to fulfill the purposes of our organization, to provide our services and to initiate and execute agreements with our customers and business partners, as well as to comply with our legal obligations. If you work for our customers or business partners, your personal data may also be affected in this function.

In addition, we also process personal data about you and other individuals, to the extent permitted and as we deem appropriate, for the following purposes:

• providing and developing our products, services, apps and other platforms, on which we are active;

• communication with third parties and processing of their inquiries (e.g., job applications, media inquiries);

• credit or creditworthiness checks

• assertion of legal claims and defense in connection with legal disputes and official proceedings;

• prevention and investigation of crime and other misconduct (e.g., conducting internal investigations, data analysis to combat fraud);

• guarantees of our operations, in particular IT, our websites, apps and other platforms;

• purchase and sale of business units, companies or parts of companies and other transactions under company law and related transfer of personal data.

E. Duration of retention

Unless an explicit retention period is specified at the time of collection or in this privacy statement, we process and store personal data until it is no longer required to fulfill the purpose for which it was collected, unless legal retention obligations (e.g., commercial and tax retention obligations) do not allow deletion. It is possible that personal data will also be retained for the period in which claims can be asserted and insofar as we are otherwise legally obligated to do so, or legitimate business interests require this (e.g., for evidence and documentation purposes).

F. Rights of the data subject

Consent given can be revoked at any time, without affecting the lawfulness of the data processing carried out already. In addition, depending on the circumstances and the applicable data protection law you may have the right to Information, correction, deletion, or restriction of the processing of your personal data, the right to object to the processing and the right to data portability. Please note that the exercise of these rights may conflict with contractual agreements and may have consequences such as the premature termination of the contract or cost consequences. We will inform you in advance if this is not already contractually regulated. We are also entitled to make use of the statutory restrictions on your rights, for example if we are obliged to retain or process certain data, have an overriding interest in doing so, or require it for the assertion of claims.

In addition, every data subject has the right to enforce his or her claims in court or to file a complaint with the competent data protection authority, if the applicable law provides such a right. The data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC/EDÖB).

Regarding your rights as well as further questions, suggestions, and comments on the subject of data protection, please contact the person responsible for data protection at the contact data mentioned at the beginning (see section A).

G. Security

We take appropriate measures to protect personal data from loss, misuse, unauthorized access, disclosure, alteration, or destruction. For this purpose, we use appropriate technical and organizational measures. However, we cannot guarantee the absolute security of the data.

Unless otherwise agreed, we do not accept any liability for breaches of these safety regulations unless they are intentional or due to gross negligence.

H. Data transfer

Within the scope of our business activities, we also disclose personal data to third parties, insofar as this is permissible and appears to us to be appropriate, either because they process data for us or because they use the data for their own purposes. This concerns in particular the following entities:

• service providers of us (e.g., banks, payment service providers, insurance companies), including order processors (such as cloud or IT providers);

• dealers, suppliers, subcontractors and other business partners such as app-stores;

• domestic and foreign authorities, agencies or courts;

• acquirers of business units;

• other parties in possible or actual legal proceedings;

In this context, your personal data may be stored in Switzerland as well as in other countries in Europe and the United States where the service providers we use are located (such as Apple). If personal Data is processed outside of Switzerland or the European Economic Area, we will take the steps required by applicable data protection law to ensure that your personal Data is treated as securely and safely as it is in Switzerland or within the European Economic Area, unless we can rely on an exception clause. An exception may apply in the case of legal proceedings abroad, but also in cases of prevailing public interests, if the performance of a contract requires such disclosure or if you have consented.

I. Final provisions

This privacy statement is not part of any contract with you. We reserve the right to change the content of this privacy statement at any time and without notice. The current version published on our website applies. We therefore recommend that you consult this privacy statement regularly. In addition to this data protection statement, we may inform you separately about the processing of your data, if we deem it necessary.