1. Who are we?

The following company is generally responsible ("we" or "us") for the data processing according to this privacy policy:

2. What personal data do we process for what purposes?

Depending on the occasion and purpose, we process different types of personal data. You will find more details on this in this section.

With this privacy policy, we aim to inform users of our website ("you" or "your") about how we process personal data. We generally collect your personal data directly from you, for example when you provide us with your personal data, when you use our services, and when you communicate with us. This is the case, for example, when you provide us with your email address and your first and last name when creating your user account.

However, personal data can also be collected from other sources. This concerns, in particular, the following data and sources:

• Information from public registers, such as the debt enforcement register, and from authorities;
• Information from private information providers such as credit agencies;
• Providers of online services, such as providers of internet analysis services that collect and use information from our website for evaluations (for more information, see the section "How do we process personal data in connection with websites");
• Information from financial service providers when you make payments to us;
• Information about you that other people provide to us, for example, in the context of communication with us or in the context of a judicial or administrative procedure.

We primarily process your personal data to offer and provide our services and to use our website for the purposes listed below and, if necessary, for other purposes that we inform you of separately:

• To communicate with you and third parties
• To provide, manage, secure, and personalize websites, apps, and other infrastructure
• To conclude and execute contracts with you and for customer relationship management
• To conclude and execute contracts with our business partners with whom you are associated
• To better understand our users and their behavior and affinities and to assess and improve the acceptance of our services and our communication relating to services
• To check your economic performance capability
• For advertising and marketing for our own and third-party offers, such as holding events, competitions, and similar activities, and for sending target group-specific information and marketing messages by post and through electronic channels (if the recipient has not objected to direct marketing)
• To manage and manage our IT and other resources
• For accounting, archiving, training, and other administrative purposes
• To review and improve our internal processes
• To review and comply with legal obligations, including orders from a court or authority, for compliance and to detect, investigate, and prevent abuses
• To enforce our claims and defend against claims against us, our employees, and against our contractual and business partners in courts and authorities in Switzerland and abroad.
• for further purposes such as training and education, improving internal processes, creating anonymous statistics and evaluations, acquiring or disposing of claims, businesses, operational units or companies and safeguarding other legitimate interests
• other purposes, about which we will inform you separately, for example, in separate consent declarations.

3. To whom do we disclose your personal data?

If you provide your personal data on our website, our employees have access to this personal data to the extent necessary for the purposes described and the activity of the employees concerned. These employees act on our instructions and are obligated to confidentiality and secrecy in handling your personal data.

We may also disclose your personal data to third parties if we want to use their services (e.g. IT service providers).

It is also possible that we may disclose personal data to other companies. This applies, for example, to the following cases:

• If we transfer claims against you to other companies, such as collection agencies or a purchaser of our business operations.
• If we are legally required to disclose your personal data to third parties (e.g. courts and authorities in Switzerland and abroad). We reserve the right to process your personal data in order to comply with a court order or to assert or defend legal claims or if we consider it necessary for other legal reasons. In this context, we may also disclose personal data to other parties involved in legal proceedings.

4. When do we disclose your personal data abroad?

The recipients of your personal data may also be located abroad, outside of Switzerland or the countries of the EU and the European Economic Area (EEA). The countries concerned may not have laws that protect your personal data to the same extent as Switzerland or the countries of the EU or the EEA. If we want to transfer your personal data to such a state, we must ensure the protection of your personal data in an appropriate manner. One means of doing so is by concluding data transfer agreements with the recipients of your personal data that ensure the necessary data protection. In certain cases, we may also transfer data in accordance with data protection regulations without such agreements, for example, if you have consented to the disclosure in question or if the disclosure is necessary for the performance of a contract, for the determination, exercise, or enforcement of legal claims, or for overriding public interests.

5. How do we process personal data in connection with websites?

When using our website, certain data is generated for technical reasons and temporarily stored in log files, especially the IP address of the device, information about the internet service provider and the operating system of your device, information about the referring URL, information about the browser used, date and time of access, and the content accessed when visiting the website. We use this data to ensure that our website can be used, to ensure system security and stability, to optimize our website, and for statistical purposes.

We also collect further data about your behavior in connection with the use of our website. To do this, we also use cookies. These are small text files that are stored in the browser or on the device and are read out when accessing the website again. Cookies usually contain an anonymous identifier so that we can recognize recurring visitors as such and provide additional information about visitor behavior or settings on the website. Depending on the intended purpose, necessary cookies, performance cookies, and marketing cookies can be distinguished:

• Necessary cookies are essential for the functioning of the website.
• Performance cookies collect and analyze information about the use of our website so that we can improve content and presentation and tailor it to users.
• Marketing cookies are used by us and advertising partners to track viewed content and other actions within the website.

If you do not agree to the use of cookies, you can configure your browser to not accept any cookies or not accept cookies from us. Our website remains usable, but certain functions may be unavailable or limited.

Other technologies have a similar purpose as cookies and can also record behavior within the website. With "fingerprinting," for example, certain information such as your IP address and details about the browser, screen resolution, or language choice are combined. This combination is more or less unique, so that we can assign behavior data associated with individual - but not necessarily known by name - users. With "pixels," invisible image files are loaded on a webpage or email via a coded link from a server that records the corresponding call and the data transmitted with the link. This can also be used to capture behavior within the website.

We process online data for the following purposes:

• Operation of the website and its contents;
• Provision of certain content and functions and communication with you (e.g. a contact form or registration);
• Security and stability;
• Statistics, measurement and improvement of offerings (aggregated evaluations of the use of the website. For this we also use performance and marketing cookies; you will find further information on this above);
• Market research and marketing (e.g. newsletter, display of advertising within the website and on third-party sites, also personalization of content; for this we also use performance and marketing cookies;
• Communication with you via electronic channels;
• Compliance with legal and regulatory requirements;
• Defense and enforcement of claims.

We use service providers to analyze the behavior of visitors to our website. These service providers may receive log data and other online data from us and may also use cookies and similar technologies to collect online data about our website:

• Google Analytics: We use the analysis service "Google Analytics" operated by a subsidiary of Google in Ireland ("Google"). Performance cookies are used to record data about behavior on our website (duration and frequency of page views, accessed content, geographic origin of access, etc.), and Google creates evaluations of the use of our website based on this data. Google LLC in the United States is involved as a data processor, although IP addresses (which can be used to identify individual people most easily) are shortened before being forwarded to Google LLC. However, we cannot exclude the possibility that Google may draw conclusions about the identity of visitors from the collected online data for its own purposes, create personal profiles, and link this data to Google accounts. If you consent to the use of Google Analytics, you expressly agree to such processing, which also includes the transmission of online data to the United States. Information on data protection for Google Analytics can be found at https://support.google.com/analytics/answer/6004245, and if you have a Google account, you can find information on processing by Google at https://policies.google.com/technologies/partner-sites?hl=en. You can deactivate Google Analytics by installing a browser extension at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

We and our advertising contract partners have an interest in controlling advertising in a targeted manner, i.e., displaying ads only to people we want to reach with the advertising. For this purpose, we and our advertising contract partners also use cookies - if you consent - which can be used to record the accessed content. This enables us and our advertising contract partners to display advertising that we believe may be of interest to you on our website, as well as on other websites that display advertising from us or our advertising contract partners.

• We participate in the online advertising program "Google Ads" and use Google's conversion tracking, an analysis service provided by Google Inc., USA. When a user clicks on an advertisement placed by Google, a conversion tracking cookie is set, which does not serve to identify the user. Google and we can thus recognize that you were redirected from this advertisement to a target page. Conversion statistics can be created for other participants in Google Ads, who will then learn the number of users who clicked on their advertisement with us, but no identifying information. Further information and Google's privacy policy can be found at www.google.com/policies/technologies/ads/ and http://www.google.de/policies/privacy.

We may integrate content from third-party providers on our website, such as fonts, images, videos, etc. The respective providers may record the IP address of the users. They can also set their own cookies and use the data of the users for their own purposes. This applies in particular to the following providers:

• Google Fonts and Youtube: fonts and videos from Google, Inc., USA. Privacy policy: www.google.com/policies/privacy; Opt-Out: https://www.google.com/settings/ads
• Google Tag Manager by Google for managing Google Analytics and Google Ads. Terms of use: www.google.com/intl/de/tagmanager/use-policy.html
• reCAPTCHA by Google to detect machine input;
• Facebook Pixel by Meta. Information: https://www.facebook.com/policy.php.

6. How long do we store your personal data?

We store your personal data in identifiable form as long as it is necessary for the specific purpose for which we collected it, typically for the duration of the contractual relationship. For example, if you create a user account on our website, we will keep it available. We may delete user accounts if they are inactive for an extended period of time.

We also store personal data if we have a legitimate interest in doing so, such as for documentation and evidence preservation purposes, and for the protection and defense of legal claims. We also store your personal data for as long as it is subject to a legal obligation to retain it.

7. What rights do you have in connection with the processing of your personal data?

In order to make it easier for you to control the processing of your personal data, you have various rights in connection with our data processing under applicable law:

• The right to request from us information about whether and what data we process about you;
• The right to have data corrected if it is inaccurate;
• The right to object to our processing for certain purposes and to request the restriction or deletion of data, unless we are obliged or entitled to further processing;
• The right to request from us the release of certain personal data in a commonly used electronic format or their transfer to another controller;
• The right to revoke consent to the extent that our processing is based on your consent.

Under certain circumstances, applicable data protection law grants you the right to object to the processing of your data, particularly for direct marketing purposes, profiling for direct advertising purposes, and other legitimate interests.

Please note that certain conditions may need to be met for you to exercise your rights and that exceptions or restrictions may apply (e.g. to protect third parties or trade secrets).

If you wish to exercise your rights with us, please contact us in writing at the address specified in section 1. In order to prevent abuse, we must verify your identity.

If you do not agree with our handling of your rights or data protection, please let us know at the address specified in section 1.

You also have the right to complain to the competent supervisory authority about our data processing. In Switzerland, this is the EDÖB (www.edoeb.admin.ch/edoeb/de/home/der-edoeb/kontakt/adresse.html).

8. What else should be considered?

Depending on the applicable law, we may only process personal data if there is a legal basis for doing so. This applies to the European General Data Protection Regulation (GDPR), which may be applicable to some of our processing activities - this can only be determined on a case-by-case basis. To the extent that the GDPR applies, we rely on the following legal bases for processing your personal data:

• The performance of a contract with the data subject or for pre-contractual measures (Art. 6 (1) (b) GDPR);
• Legitimate interests, such as the interest in customer care and communication with customers outside of a contract; in marketing activities; in getting to know our customers and other individuals better; in improving and developing services; in combating fraud and preventing and investigating offenses; in protecting customers, employees, and other persons and data; in ensuring IT security, especially in connection with the use of websites, apps, and other IT infrastructure; in ensuring and organizing business operations, including the operation and development of websites and other systems; in corporate management and development; in the sale or purchase of companies, parts of companies, and other assets; in enforcing or defending legal claims; in complying with Swiss law and internal rules; and the interest of our customers in checking the economic performance of potential buyers or tenants (Art. 6 (1) (f) GDPR);
• Consent, if we request it separately (Art. 6 (1) (a) and Art. 9 (2) (a) GDPR);
• A requirement for compliance with legal obligations (Art. 6 (1) (c) and Art. 9 (2) (b), (g), (h), and (i) GDPR under European law and Art. 6 (1) (f) GDPR under Swiss law).

There is generally no obligation to disclose personal data to us unless you are in a contractual relationship with us that establishes such an obligation. However, we will need to collect and process those personal data that are necessary or legally required for establishing and performing a contractual relationship and fulfilling the associated obligations. Otherwise, we cannot conclude or continue the relevant contract. When communicating with us, we must also process at least those personal data that you provide to us or that we transmit to you.

9. Can this privacy policy be changed?

This privacy policy is not part of a contract with you. We reserve the right to update or modify this privacy policy at any time.

Date