PRIVACY POLICY

This Isobar Marketing Intelligence MindSight Direct (“MindSight”) Privacy Notice (“Privacy Notice”) is intended to inform you individually, or as a representative of an organization of which you are an employee or representative, (“you” or “your”) about how Isobar, a trading division of the global media group Dentsu Aegis Network, (referred to as “our”, “us” and “we” in this notice) may collect and further process your personal information when you use our MindSight service (mindsight.isobar.com).

1. The personal information MindSight collects

To deliver the Mindsight service, we process “personal information” or “personal data” –which is information that could be reasonably used to contact you, or to identify you personally, or that otherwise relates to you, such as, your name, email address and Mindsight account credentials (account username and password). We may also collect personal information you provide to us while interacting with our personnel via email.

2. How we use this information

Except where required by law, we only use the personal information you provide for the following purposes:

• To communicate with you in connection with your use of MindSight;
• To communicate with you about MindSight services that might be of interest of you;
• To provide you a unique account for the MindSight website;
• To deliver MindSight services you have requested; and
• To evaluate the services we provide to you.

3. Our legal basis for processing your personal information

MindSight will process your personal information:

• In performance of a contract with you (to provide you with our services, as described in our Terms of Use) when you registered for the MindSight service;
• If we have a legitimate interest in doing so, data protection law enables us to process your data as described in Section 2 of this Privacy Notice (for example, we use your personal information to communicate with you in connection with your use of the MindSight Services); and
• In order to comply with a legal obligation (for example, to notify you of changes to our privacy policy).

4. How we store your personal information

We are committed to ensuring your personal information is kept secure and confidential and not kept for longer than is necessary for your use of the MindSight services. When your personal information is no longer necessary (e.g., if you request that we delete your account), it will be deleted.

5. How we secure your personal information

We have appropriate security measures in place to prevent unlawful or unauthorised use, access or accidental loss of personal information. We also seek to ensure our service providers do the same.

6. How we share personal information we collect

MindSight will share your personal information:

• With affiliates in the Dentsu Aegis Network, a globally operating media group consisting of multiple companies;
• With trusted third party service providers who provide services such as website hosting, information technology infrastructure and email delivery, that may be located outside of your country of residence; and
• In response to legal process, for example in response to a court order or a subpoena, or in response to a law enforcement agency’s request, or where we believe it is necessary to investigate, prevent or take action regarding illegal activities, and as otherwise required by law

7. Transfer to Other Countries

The systems MindSight uses to process your data are located in the United States. If you provide your personal information to us by using MindSight’s services, or by other means (including via registration and email), you expressly consent to the collection, processing, maintenance, and transfer of such information to the United States, which has not been deemed to offer adequate data protection by the European Commission.

8. Your rights regarding the personal information you provide to us

• Please contact your company directly with regard to your personal data rights if you are using MindSight on behalf of your company in connection with an agreement with Isobar or Dentsu Aegis Network.
• Any emails we send will include an unsubscribe link. You may opt-out at any time.

Users from the European Economic Area If you are from the European Economic Area, you have rights (with some exceptions and restrictions) to:

• object to our processing of your personal data;
• access your personal data;
• request erasure of your personal data;
• request correction or updating of the personal data that we hold about you and that is inaccurate;
• request the restriction of our processing of your personal data in some situations; and
• complain to your local data protection authority about our collection or use of your personal data. For example, in the UK, the local data protection authority is the UK Information Commissioner's Office.

You may contact us about your rights or make the above requests by contacting our Data Protection officer in the any of the following ways: Address: Data Protection Officer, Dentsu Aegis Network, Regent’s Place, 10 Triton Street, London, NW1 3BF

Telephone: (+44) (0) 207 070 7700

Email: privacy@dentsuaegis.com

We will consider and respond to your request in accordance with the relevant law. If you exercise the rights above and there is any question about who you are, we may require you to provide information from which we can satisfy ourselves as to your identity. Updates

This Privacy Notice may be updated from time to time to reflect changes in law, best practice or a change in our practices regarding the treatment of personal information. If you do not agree to the changes, please do not continue to use our website. You should check this notice frequently for updates. This notice was last updated 24th May 2018.