This Privacy Statement of the THX. App, the THX. Audience (also known as the THX. Community) applies to users of the THX. application and all research activities of MeMo2 a Kantar company (hereinafter referred to as " MeMo2," "we," "us," or "our"). MeMo2 a Kantar company belongs to Kantar Netherlands BV. This Privacy Policy is meant to help you understand how and what data we collect, why we collect it and what we do with it.

1. Who We Are

THX. is a market research platform belonging to MeMo2 that conducts market research, through the THX. Application and the THX. Audience (also referred to as the THX. Community). MeMo2 is located and operates in Amsterdam, at Amsteldijk 166 (1079 LH). We are registered with the Chamber of Commerce under number 33134494. You can always contact the THX. team via support@thx.community or by phone at +31 20 679 4736.

2. Scope of this Privacy Statement

This Privacy Statement describes how MeMo2 collects and uses your personal data when you participate in the THX. Platform, THX. Audience, and/or use the THX. App. MeMo2 processes personal data about you, provided through the THX. app which includes questionnaires (hereinafter referred to as conversations), Profile Information, Giftshop, Chatboxes, Prize draws, THX. Giving, My Account and Audio Content Recognition (ACR) Research and Location Research. Privacy is essential to us at MeMo2, as we believe people only want to participate in our community if they know their personal data is protected. We will handle your information carefully and process it in a fair and lawful manner. This means that MeMo2 will always comply with the General Data Protection Regulation (Regulation (EU) 2016/679) and amendments, ensuring adequate protection of your personal data. The GDPR is a comprehensive data protection and privacy regulation enacted by the European Union. GDPR aims to harmonize data protection laws across the EU, strengthen individual privacy rights, and establish a framework for responsible and ethical handling of personal data by organizations.

3. How We Collect Your Data

To participate in the THX. Audience, and/or use the THX. App or conduct research within the app, we first ask for your consent to process your personal data according to this Privacy Statement. Once you become a registered user or download the THX. App, we may ask you questions via surveys (hereinafter referred to as conversations) through the app, email, or other means. The legal basis for the collection of survey responses is your explicit consent. If you use the THX. App, we may also track your location data and/or specific audio signals, only with your explicit consent. We process this data into aggregated and anonymized statistics and insights that we share with clients. This information is not traceable back to individual users. Please refer to section 5 and 6 to see how audio and location data is collected and processed.

4. Why We Process Your Personal Data / Purposes and Legal Basis of Processing

We want to be transparent about our data processing activities. Currently, the THX. application does not engage in automated decision-making or profiling that significantly impacts you or creates significant consequences.

Users of the THX. application and their responses are used for the research MeMo2 conducts for its clients. The purpose of processing is to collect research data and perform analyses for our clients, including commercial companies, government institutions, universities, and the market research industry itself. This includes social and opinion research (e.g., opinions on a specific media campaign). This allows us to gain insights for ourselves and assist companies in making decisions based on reliable statistical and empirical research. The THX. app operates with the explicit consent of its users. Each THX. User has the freedom to withdraw this consent at any time, which ceases the processing of their personal data. The withdrawal of consent does not impact the lawfulness of processing that occurred before the withdrawal. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal. We may also publish your personal data to announce prize winners, however we do this only after explicit with consent.

Users have the autonomy to revoke permissions and customize their data sharing preferences through the THX. App settings. In the Settings of the THX. App you can cancel and start these permissions at any time for any type of data you share with us, or we provide you with (such as notifications). This includes the following: News, Opinion invitations, Research invitations (which includes conversations and chatboxes), Prize draw announcements, THX. giving announcements, Giftshop announcements, sharing Audio Content, sharing Location. Additionally, you can choose to log out or delete your account which will automatically stop the processing of personal data.

In addition to THX. Conversations and completing your Profile, we ask THX. Users to participate in audio recognition and location registration measurements – in the THX. app referred to as Audio Content sharing and Location sharing. Additionally, we collect device-related data for monitoring purposes.

5. Why Audio Content Recognition?

We aim to assess the exposure to content amongst our THX. audience. For this purpose, we use an audio fingerprinting technique that automatically recognizes specific content via audio. To use this technique, we ask permission to access your mobile phone’s microphone. This is essential for the Audio Content Recognition (hereinafter referred to as ACR) technique, where we digitally (digitalize) fingerprint the audio directly on your mobile device itself. The process involves creating a unique audio fingerprint based on a few audio samples. This digital signal, in parts of 3 seconds, is then matched against our audio database situated in Europe. No audio is stored during this process; instead, a small data file known as the audio fingerprint is generated. When there is a match with the content present in the THX. database, an interaction with the content is registered. The audio fingerprint is a small data file and by no means an audio file that can be listened to or is saved anywhere. Is all audio recorded and stored? No. We do not store audio on our servers. We use the audio solely to generate the digital audio fingerprint and conduct a live match with our database. Consequently, we cannot recognize audio samples that are not present in the THX. database. Depending on your matches with pre-loaded audio content files, you may receive more targeted and relevant conversations. We aim to enhance your THX. experience while maintaining the highest standards of privacy and data security.

6. Why Location Registration?

The objective is to determine whether individuals pass by designated outdoor locations or stores. To achieve this, the app requires access to location data. You can turn this functionality on or off in the application at any time. Why is location sharing necessary for Research? This is necessary to measure the location among consumers of specific points of interest. In most cases, this involves locations that contain events, outdoor advertising, or stores. When you pass these points, a location interaction is registered for specific locations which are present in the THX. database. Is my location monitored continuously? While we do collect and track your location, it is solely utilized for pinpointing specific points of interest such as events, outdoor advertising, stores, or venues. When you pass these pre-loaded locations, a location interaction is recorded for analysis on a population scale. No additional location data is utilized, and the findings are only disclosed in aggregate and anonymized manner to clients and or other external stakeholders. Depending on location behavior, you may receive more targeted and relevant conversations.

7. Why device information?

We gather data about your mobile device, including the operating system (Android, iOS versions), device manufacturer, device model, app version and screen resolution. This aids us in troubleshooting when functionalities are not fully operable or in case of questions coming from THX. users. Additionally, amongst iOS users we collect Identifier For Advertiser (AAID or IDFA). This Advertising ID is used for tracking and identifying a user (without revealing personal information) and linking user actions and events to campaigns and channels. Users can opt-out of this form of tracking by going to Settings and Privacy and turn off the Tracking.

8. Who Receives Your Personal Data / Recipients of Your Personal Data

MeMo2 may share your personal data with suppliers and assisting companies that rely on MeMo2 to realize its services. For instance, for supporting services such as gift card suppliers or other affiliated services. We ensure that processors only receive data necessary to perform their assignment for us and make appropriate agreements about it. The market research we conduct uses services from amongst others cloud-based platforms, online survey platforms, omnichannel communication channels, visualization tooling programs.

9. What Personal Data We Process and How Long We Retain It

MeMo2 retains your personal data for as long as necessary for the purposes for which we process your personal data unless you request us to securely delete your personal data from our system. This means that we keep general data you provided to us before participating in the THX. App, and/or THX. Audience until you withdraw your consent. This includes data such as your contact details, gender, age, and answers to our general questions (e.g., your interests) and conversations. MeMo2 is not involved in the process of automated decision making, as we are not making decisions on an individual level based on your personal data, without human involvement. The answers you provide to questions for a specific study and any other data we receive from you in that context are anonymized immediately after the completion of the data collection. Our clients receive aggregated and anonymized data only, so we do not disclose information that is identifiable to individuals.

Additionally, we use your personal data to provide you with incentives and customer support. Your mail address and phone number are used to send gift cards and or authentication messages, hence they are used to enhance your personal experience. Once your account is deleted, your personal data will be untraceable, and your account cannot be recovered. So, this is a permanent decision.

10. Transfer to Countries Outside the European Economic Area

Your personal data may be transferred to a country outside the European Economic Area (EEA) where the level of data protection may be different from that within the EEA. For instance, certain online services we utilize might be based outside the EEA, necessitating the transfer of personal data. In such cases, if the destination country has a lower level of legal protection for personal data, we are committed to ensuring your data's security. We accomplish this by implementing appropriate safeguards in accordance with privacy legislation. These safeguards may include entering a contract with the recipient using an approved model from the European Commission or a national supervisory authority. Additionally, external services (such as cloud platforms or communication platforms) have a Data Processing Addendum in their service terms to ensure compliance with regional privacy standards.

If you have questions about these safeguards or wish to obtain more information, please contact us at support@thx.community.

11. Rights of THX. Users

According to the GDPR regulations, as a THX. User you have the following rights regarding the personal data MeMo2 processes about you:

You have the right to access the personal data we process about you

You can revoke your permissions at any time

You have the right to rectify any incorrect or outdated data about you that we may have

You have the right to request that we delete your data

You have the right to obtain restriction of the processing of personal data

You have the right to receive the personal data you provided to us in a structured, commonly used, and machine-readable format, and you have the right to transfer this data to another data controller.

Since our processing of your personal data is based on the consent you gave, the right to object does not apply. However, you can withdraw your consent at any time by disabling functionalities within the application and/or deleting your account. This does not affect the lawfulness of processing based on consent before the withdrawal.

You can exercise your rights by emailing support@thx.community or by contacting us using the above contact details. MeMo2 will provide information on action taken without undue delay and in any event within one month of receipt of the request. This period may be extended by two more months where necessary, considering the complexity and number of requests. MeMo2 does not use automated individual decision-making or profiling that has legal effects or significantly affects you.

12. Modification of the Privacy Statement

MeMo2 may change this Privacy Statement, for example, if necessary due to changed (interpretation of) regulations or changes in the way we work. If this happens, we will inform you via an in-app notification. Additionally, we would advise our users to regularly check whether this Privacy Statement has recently been updated, as we indicate the date of the last change at the top of the document.

13. Questions or Complaints?

If you have questions, comments, or complaints about this Privacy Statement or the processing of your personal data by MeMo2, we ask you not to participate in our research until these questions, comments, or complaints are resolved. For questions, comments, and complaints, you can contact us at the email address support@thx.community. You can send an email to this email address regardless of where you are located. In case you wish to have information on country specific GDPR, please inform us about your country within your email. Lastly, you also have the right to file a complaint with the Data Protection Authority at any time.

For more information about the THX. App, our terms and conditions and Frequently Asked Questions, please refer to the following URL: https://thx.community/

For more information on country specific regulations on GDPR, please refer to the following websites:

• Netherlands: Autoriteit Persoonsgegevens - https://www.autoriteitpersoonsgegevens.nl/
• France: CNIL - https://www.cnil.fr/
• United Kingdom: Information Commissioner's Office (ICO) - https://ico.org.uk/
• Germany: The German Federal Commissioner for Data Protection and Freedom of Information (BfDI) - www.bfdi.bund.de
• Belgium: Data Protection Authority - www.dataprotectionauthority.be