1. Who are we?

The following company is generally responsible ("we" or "us") for the data processing according to this privacy policy:

2. What personal data do we process for what purposes?

Depending on the occasion and purpose, we process different types of personal data. You will find more details on this in this section.

With this privacy policy, we aim to inform users of our website ("you" or "your") about how we process personal data. We generally collect your personal data directly from you, for example when you provide us with your personal data, when you use our services, and when you communicate with us. This is the case, for example, when you provide us with your email address and your first and last name when creating your user account.

However, personal data can also be collected from other sources. This concerns, in particular, the following data and sources:

• Information from public registers, such as the debt enforcement register, and from authorities;
• Information from private information providers such as credit agencies;
• Information from financial service providers when you make payments to us;
• Information about you that other people provide to us, for example, in the context of communication with us or in the context of a judicial or administrative procedure.

We primarily process your personal data to offer and provide our services and to use our website for the purposes listed below and, if necessary, for other purposes that we inform you of separately:

• To communicate with you and third parties
• To provide, manage, secure, and personalize websites, apps, and other infrastructure
• To conclude and execute contracts with you and for customer relationship management
• To conclude and execute contracts with our business partners with whom you are associated
• To better understand our users and their behavior and affinities and to assess and improve the acceptance of our services and our communication relating to services
• To check your economic performance capability
• For advertising and marketing for our own and third-party offers, such as holding events, competitions, and similar activities, and for sending target group-specific information and marketing messages by post and through electronic channels (if the recipient has not objected to direct marketing)
• To manage and manage our IT and other resources
• For accounting, archiving, training, and other administrative purposes
• To review and improve our internal processes
• To review and comply with legal obligations, including orders from a court or authority, for compliance and to detect, investigate, and prevent abuses
• To enforce our claims and defend against claims against us, our employees, and against our contractual and business partners in courts and authorities in Switzerland and abroad.
• for further purposes such as training and education, improving internal processes, creating anonymous statistics and evaluations, acquiring or disposing of claims, businesses, operational units or companies and safeguarding other legitimate interests
• other purposes, about which we will inform you separately, for example, in separate consent declarations.

3. To whom do we disclose your personal data?

If you provide your personal data on our website, our employees have access to this personal data to the extent necessary for the purposes described and the activity of the employees concerned. These employees act on our instructions and are obligated to confidentiality and secrecy in handling your personal data.

We may also disclose your personal data to third parties if we want to use their services (e.g. IT service providers).

It is also possible that we may disclose personal data to other companies. This applies, for example, to the following cases:

• If we transfer claims against you to other companies, such as collection agencies or a purchaser of our business operations.
• If we are legally required to disclose your personal data to third parties (e.g. courts and authorities in Switzerland and abroad). We reserve the right to process your personal data in order to comply with a court order or to assert or defend legal claims or if we consider it necessary for other legal reasons. In this context, we may also disclose personal data to other parties involved in legal proceedings.

4. When do we disclose your personal data abroad?

The recipients of your personal data may also be located abroad, outside of Switzerland or the countries of the EU and the European Economic Area (EEA). The countries concerned may not have laws that protect your personal data to the same extent as Switzerland or the countries of the EU or the EEA. If we want to transfer your personal data to such a state, we must ensure the protection of your personal data in an appropriate manner. One means of doing so is by concluding data transfer agreements with the recipients of your personal data that ensure the necessary data protection. In certain cases, we may also transfer data in accordance with data protection regulations without such agreements, for example, if you have consented to the disclosure in question or if the disclosure is necessary for the performance of a contract, for the determination, exercise, or enforcement of legal claims, or for overriding public interests.

5. How do we process personal data in connection with websites?

When using our website, certain data is generated for technical reasons and temporarily stored in log files, especially the IP address of the device, information about the internet service provider and the operating system of your device, information about the referring URL, information about the browser used, date and time of access, and the content accessed when visiting the website. We use this data to ensure that our website can be used, to ensure system security and stability, to optimize our website, and for statistical purposes.

We may also use cookies and similar technologies (such as local browser storage). These are small text files or entries that are stored in the browser or on the device and are read out when accessing the website again. We only use technologies that are necessary for the functioning of the website, for example to store your language preference. We do not use performance or marketing cookies.

If you do not agree to the use of cookies, you can configure your browser to not accept any cookies or not accept cookies from us. Our website remains usable, but certain functions may be unavailable or limited.

We process online data for the following purposes:

• Operation of the website and its contents;
• Provision of certain content and functions and communication with you (e.g. a contact form or registration);
• Security and stability;
• Statistics, measurement and improvement of offerings (aggregated evaluations of the use of the website);
• Communication with you via electronic channels;
• Compliance with legal and regulatory requirements;
• Defense and enforcement of claims.

6. How long do we store your personal data?

We store your personal data in identifiable form as long as it is necessary for the specific purpose for which we collected it, typically for the duration of the contractual relationship. For example, if you create a user account on our website, we will keep it available. We may delete user accounts if they are inactive for an extended period of time.

We also store personal data if we have a legitimate interest in doing so, such as for documentation and evidence preservation purposes, and for the protection and defense of legal claims. We also store your personal data for as long as it is subject to a legal obligation to retain it.

7. What rights do you have in connection with the processing of your personal data?

In order to make it easier for you to control the processing of your personal data, you have various rights in connection with our data processing under applicable law:

• The right to request from us information about whether and what data we process about you;
• The right to have data corrected if it is inaccurate;
• The right to object to our processing for certain purposes and to request the restriction or deletion of data, unless we are obliged or entitled to further processing;
• The right to request from us the release of certain personal data in a commonly used electronic format or their transfer to another controller;
• The right to revoke consent to the extent that our processing is based on your consent.

Under certain circumstances, applicable data protection law grants you the right to object to the processing of your data, particularly for direct marketing purposes, profiling for direct advertising purposes, and other legitimate interests.

Please note that certain conditions may need to be met for you to exercise your rights and that exceptions or restrictions may apply (e.g. to protect third parties or trade secrets).

If you wish to exercise your rights with us, please contact us in writing at the address specified in section 1. In order to prevent abuse, we must verify your identity.

If you do not agree with our handling of your rights or data protection, please let us know at the address specified in section 1.

You also have the right to complain to the competent supervisory authority about our data processing. In Switzerland, this is the EDÖB (www.edoeb.admin.ch/edoeb/de/home/der-edoeb/kontakt/adresse.html).

8. What else should be considered?

Depending on the applicable law, we may only process personal data if there is a legal basis for doing so. This applies to the European General Data Protection Regulation (GDPR), which may be applicable to some of our processing activities - this can only be determined on a case-by-case basis. To the extent that the GDPR applies, we rely on the following legal bases for processing your personal data:

• The performance of a contract with the data subject or for pre-contractual measures (Art. 6 (1) (b) GDPR);
• Legitimate interests, such as the interest in customer care and communication with customers outside of a contract; in marketing activities; in getting to know our customers and other individuals better; in improving and developing services; in combating fraud and preventing and investigating offenses; in protecting customers, employees, and other persons and data; in ensuring IT security, especially in connection with the use of websites, apps, and other IT infrastructure; in ensuring and organizing business operations, including the operation and development of websites and other systems; in corporate management and development; in the sale or purchase of companies, parts of companies, and other assets; in enforcing or defending legal claims; in complying with Swiss law and internal rules; and the interest of our customers in checking the economic performance of potential buyers or tenants (Art. 6 (1) (f) GDPR);
• Consent, if we request it separately (Art. 6 (1) (a) and Art. 9 (2) (a) GDPR);
• A requirement for compliance with legal obligations (Art. 6 (1) (c) and Art. 9 (2) (b), (g), (h), and (i) GDPR under European law and Art. 6 (1) (f) GDPR under Swiss law).

There is generally no obligation to disclose personal data to us unless you are in a contractual relationship with us that establishes such an obligation. However, we will need to collect and process those personal data that are necessary or legally required for establishing and performing a contractual relationship and fulfilling the associated obligations. Otherwise, we cannot conclude or continue the relevant contract. When communicating with us, we must also process at least those personal data that you provide to us or that we transmit to you.

9. Can this privacy policy be changed?

This privacy policy is not part of a contract with you. We reserve the right to update or modify this privacy policy at any time.

Date