Privacy Policy Verein PRS PET Recycling Schweiz

The privacy policy describes how and for what purpose we (Verein PRS PET Recycling Schweiz, hereinafter "PRS", "we" or "us") collect, process and use personal data. The responsible processing of data is an important matter for us. We are continually adjusting in order to protect the data of our stakeholders even better.

This privacy policy explains how we collect and otherwise process personal data. This is not an exhaustive description; general terms and conditions, conditions of participation or similar documents may govern specific matters. Personal data means any information relating to an identified or identifiable individual. If you do not agree to these terms and conditions, please do not access or use the PRS websites or the services offered. We reserve the right to change the privacy policy from time to time, at our sole discretion and without individual notification. Any changes to the privacy policy will be published on the PRS homepage. Material changes to the terms of the privacy policy will be posted on the homepage 30 (thirty) days prior to their effective date. Any use of the PRS websites is subject to the latest version of the privacy policy.

If you provide us with personal data of other persons (e.g. family members, data of work colleagues), please make sure that these persons are aware of this privacy policy and only share their personal data with us if you are allowed to do so and if this personal data is correct.

This privacy policy is designed to meet the requirements of the EU General Data Protection Regulation ("GDPR"), the Swiss Data Protection Act ("DSG") and the revised Swiss Data Protection Act ("revDSG"). However, whether and to what extent these laws are applicable depends on the individual case.

1. Responsibility / data protection officer

The management of PRS is responsible for the data processing that we carry out. If you have any data protection concerns, you can inform us accordingly at the following contact address: Verein PRS PET Recycling Schweiz, Data Protection, Hohlstrasse 532, 8048 Zurich or via e-mail at: info@prs.ch.

2. Collection and processing of personal data

We primarily process the personal data that we receive from our customers and other business partners in the course of our mutual business relationship and other persons involved in it, or that we collect from their users when operating our websites, apps and other applications.

To the extent permitted, we also take certain data from publicly accessible sources (e.g. enforcement registers, land registers, commercial registers, press, internet) or receive such data from authorities and other third parties (such as credit rating agencies or address dealers). In addition to the personal data that you give us directly, the categories of personal data that we receive about you from third parties include, in particular, information from public registers, information that we learn in connection with official and legal proceedings, information in connection with your professional functions and activities (e.g. so that we can conclude and process transactions with your employer by your help), information about you in correspondence and discussions with third parties, creditworthiness information (insofar as we process transactions with you personally), information about you received by people close to you (family, advisors, legal representatives, etc.) in a matter that allows us to conclude or process contracts with you or involving you (e.g. references, your address for deliveries, powers of attorney, information on compliance with legal requirements such as anti-money laundering and export restrictions, information from banks, insurance companies, sales and other contractual partners of ours on the utilisation or provision of services by you (e.g. payments made, purchases made), information from the media and Internet on your person (insofar as this is appropriate in the specific case, e.g. in the context of a job application, press review, marketing/sales, etc.), your addresses and, if applicable, interests and other socio-demographic data (for marketing), data in connection with the use of the website (e.g. IP address, MAC address of the smartphone or computer, details of your device and settings, cookies, date and time of the visit, pages and content accessed, functions used, referring website, location details)).

3. purposes of data processing and legal basis

We use the personal data we collect primarily to conclude and process our contracts with our customers and business partners, thus in particular in the context of the collection of PET-beverage bottles with our customers as well as the purchase of products and services from our suppliers and subcontractors, as well as to comply with our legal obligations in Switzerland and abroad. If you work for such a customer or business partner, your personal data may of course also be affected in this capacity.

In addition, where permitted and deemed appropriate, we also process personal data about you and other persons for the following purposes in which we (and sometimes third parties) have a legitimate interest:

• Offering and further development our offers, services and websites, apps and other platforms on which we are present;

• Communicating with third parties and processing their enquiries (e.g. applications, media enquiries);

• Review and optimisation of needs analysis for direct client engagement and collection of personal data from publicly available sources for client acquisition;

• Advertising and marketing (including the organisation of events), insofar as you have not objected to the use of your data (if we send you advertising as our existing customer, you can object to this at any time)

• Market and opinion research, media monitoring;

• Assertion of legal claims and defence in connection with legal disputes and authority proceedings;

• Prevention and investigation of criminal offences and other misconduct (e.g. conducting internal investigations, data analysis to combat fraud);

• Guarantees of our operations, in particular IT, our websites, Apps and other platforms;

• Video surveillance to maintain house rights and other measures in conection to IT, building and facility security as well as protection of our employees and other persons and assets belonging to or entrusted to us (such as access controls, visitor lists, network and mail scanners, telephone recordings);

• Purchase and sale of business divisions, companies or parts of companies and other transactions under company law and the associated transfer of personal data as well as measures for business management and insofar as for compliance with legal and regulatory obligations

Insofar as you have given us consent to process your personal data for certain purposes (e.g. when you register to receive newsletters), we process your personal data within the scope of and based on this consent, insofar as we have no other legal basis and we require such a basis. Consent which has been given can be revoked at any time, but this has no effect on data processing that has already taken place.

We will not sell, disclose or otherwise share your personal data without your consent. However, personal data may occasionally be disclosed to third parties who act for or on behalf of us or who process data on our behalf in accordance with the original purpose for which it was collected. When disclosing this personal data to third parties, we will require them to ensure that the processing is carried out in accordance with and within the scope of the purpose stated at the time of collection.

We process personal data in accordance with Swiss data protection law, in particular the Federal Act on Data Protection (FADP) and the Ordinance to the Federal Act on Data Protection (FADP).

We process personal data - if and to the extent that the General Data Protection Regulation (GDPR) is applicable - in accordance with at least one of the following legal bases:

• Art. 6 para. 1 lit. b GDPR for the necessary processing of personal data for the performance of a contract with the data subject as well as for the implementation of pre-contractual measures.

• Art. 6 para. 1 lit. f GDPR for the necessary processing of personal data to protect the legitimate interests of us or of third parties, unless the fundamental freedoms and rights and interests of the data subject prevail. Legitimate interests are, in particular, our interest in being able to carry out our activities and operations permanently, in a user-friendly, secure and reliable manner and to communicate about them, the guarantee of information security, protection against misuse, the enforcement of our own legal claims and compliance with Swiss law.

• Art. 6 para. 1 lit. c GDPR for the necessary processing of personal data to comply with a legal obligation to which we are subject under any applicable law of Member States in the European Economic Area (EEA).

• Art. 6 para. 1 lit. e GDPR for the necessary processing of personal data for the performance of a task which is in the public interest.

• Art. 6 para. 1 lit. a GDPR for the processing of personal data with the consent of the data subject.

• Article 6(1)(d) of the GDPR for the necessary processing of personal data to protect the vital interests of the data subject or another natural person.