2. Introduction

Forcentis AG (hereinafter “FORCENTIS AG”, “we” or “us”) undertakes to process all personal data (hereinafter “personal data”) collected via the portal in accordance with Swiss data protection law and to take appropriate security measures to protect it from unauthorized access. In this privacy policy, we inform you in particular about which personal data is collected and processed in connection with the use of the portal, for what purposes it is used, to whom it may be passed on and what your rights are in connection with the use of your personal data by FORCENTIS AG. Personal data is all information relating to an identified or identifiable natural or legal person, e.g. name, first name, address, e-mail, date of birth or telephone number. By accessing the online portal (hereinafter “Portal” or “Website”) and using our offered services and products, you declare that you have carefully read this privacy policy and agree to the data processing described. Any questions in connection with this privacy policy can be sent at any time by e-mail to info@forcentis.com. If you do not agree with this declaration, you must refrain from accessing the portal and using our services and products.

3. Who is responsible for your personal data

The controller within the meaning of data protection legislation is FORCENTIS AG, Kantonsstrasse 160, 6048 Horw, Switzerland, e-mail: info@forcentis.com. FORCENTIS AG determines the purposes and means of processing your personal data and is therefore responsible for the processing and use of your personal data in accordance with this privacy policy. If you have any questions or concerns regarding this privacy policy or the processing of your personal data, please contact us at any time by sending an e-mail to info@forcentis.com.

4. How we process personal data

All personal data collected via the website is processed in accordance with the Swiss Data Protection Act. We collect and process personal data carefully and for the purposes described in this privacy policy. In accordance with applicable law, we may also use your personal data in ways other than as described in this privacy policy. In this case, we will provide you with specific privacy statements or notices at the time of collection and, where appropriate, obtain your consent. We always endeavor to collect information in anonymized or pseudonymized form within reasonable limits so that we cannot identify you.

5. What personal data do we collect for what processing purposes

5.1 Personal data automatically transmitted via the use of the portal

FORCENTIS AG collects and stores information that your browser automatically transmits to us when you visit our website in “server log files”. The data is collected on the basis of your will and interest in visiting our website and our legitimate interests in operating the website. This may include the following data:

• Browser type and browser version

• Operating systems used

• Referrer URL (the website visited before)

• Host name of the accessing computer

• Date and time of the server request

• Internet Protocol address (IP address)

• Amount of data transferred

• Other similar data and information used for security purposes in the event of attacks on our IT systems.

This personal data is not merged with other personal data and is stored separately from any other personal data transmitted by the user. It will be deleted by us after 12 months at the latest.

FORCENTIS AG uses the automatically collected personal data to fulfill the following purposes:

• to enable the display, operation and functionality of the portal

• to ensure the stability and security of the system

• to improve and protect our services

• for statistical purposes in the event of attacks on the network infrastructure on which the website is made available

5.2 Personal data that the user transmits to us

FORCENTIS AG collects and processes personal data that the user voluntarily transmits to FORCENTIS AG directly on the portal via online form, via our contact e-mail address, via any other applications connected to the portal, by telephone or in any other way. This information includes, for example, the following personal data:

• Names, first names, postal addresses, e-mail address, telephone number, date of birth, gender

• Your message or your request.

• Function in the company

The provision of this personal data is expressly voluntary. Without this personal data, however, we will not be able to provide the services requested by the user in the desired quality or at all.

FORCENTIS AG uses the personal data that the user transmits to us to fulfill the following purposes:

• to provide, maintain, protect and optimize the services and information offered

• to communicate with you and provide you with the best possible and personalized information you need from us (e.g. about our products and services and for project management)

• to comply with legal or other regulatory requirements and internal regulations

• to establish, exercise and/or defend actual or potential legal claims, investigations or similar proceedings

• for other lawful purposes if such processing arises from the circumstances or was indicated at the time of collection

6. On what legal basis do we process personal data about you

The processing of this personal data is based on the following legal bases:

• Your consent, only if it can be revoked at any time (e.g. when you register for our newsletter and other marketing communications)

• for the performance of a contract with you or for the intention to conclude a contract with you (e.g. when accepting an order)

• to comply with a legal obligation (e.g. for tax reasons or for the purpose of judicial investigations or proceedings) or

• to protect our legitimate interests (e.g. protection and security of our services, systems, assets; compliance with legal, regulatory and contractual obligations; assertion, exercise or defense of legal claims; maintenance and efficient organization of business operations; improvement and development of our services as well as sale and marketing of our services)

If the processing is based on your consent or our legitimate interests, you can revoke your consent or object to this processing at any time by contacting us directly at info@forcentis.com. Please note, however, that the revocation of your consent does not affect the lawfulness of the processing based on the consent before its revocation.

7. To whom do we pass on your personal data

FORCENTIS AG takes the necessary measures to ensure that only our authorized personnel and our auxiliary staff who have the necessary knowledge have access to your personal data in order to fulfill the purposes for which your personal data was collected.

We may disclose your personal data in accordance with the purposes and legal bases of processing described above to the following possible categories of recipients, insofar as this is necessary for the intended data processing:

• Service providers who process the personal data on behalf of and on the instructions of FORCENTIS AG (so-called processors, such as in the area of IT, hosting and support)

• Customers, partners, suppliers, insurance companies and other business partners

• Media agencies, the public, including visitors to the group’s websites and social media

• Industry organizations, associations and other bodies

• Acquirers or prospective acquirers of business units, companies or other parts of the company;

• Courts, arbitration bodies, law enforcement agencies, supervisory authorities, lawyers and other parties in potential or actual legal proceedings, if this is necessary to comply with laws or to establish, exercise or defend rights or legal claims.

We select our partners and processors carefully and only if there is sufficient assurance that they have suitable technical and organizational measures in accordance with legal requirements. Our processors may only process personal data on documented instructions from us. They are all subject to confidentiality requirements and may only use your personal data to the extent necessary to fulfill the purpose for which your personal data was collected, unless otherwise required by law.

8. Transfer of personal data to countries outside the EEA

The personal data collected via our website is stored in Switzerland and Denmark. In addition, we may transfer, store and process your personal data to data locations around the world, e.g. where our third-party providers or partners are located. Therefore, we may transfer your personal data outside the European Economic Area (EEA) if this is necessary for the data processing described in this privacy policy in accordance with applicable law.

If data is transferred to countries that do not guarantee an adequate level of protection, we ensure adequate data protection by taking appropriate guarantees, such as contractual guarantees (e.g. on the basis of EU standard clauses), on the basis of binding corporate rules, the transfer of data in accordance with your express consent, for the conclusion or performance of a contract with you, or in connection with the determination, exercise or enforcement of legal claims. Further information about our appropriate security precautions can be obtained by contacting us by e-mail at info@forcentis.com.

9. How long do we keep information about you

In principle, the personal data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected, unless a longer retention is necessary to fulfill legal obligations (e.g. retention and documentation obligations), contractual or pre-contractual obligations or legitimate business interests of us (e.g. to assert, exercise or defend legal claims).

On this basis, we generally process personal data in compliance with the following rules and obligations:

• The personal data automatically transmitted by you through the use of our portal (see point 3.1) for the purpose of displaying, operating and ensuring the functionality of the portal will be deleted within three to six months.

• The personal data transmitted by you to us in connection with the use of our services and products that are offered on our portal or that you otherwise transmit to us via the e-mail contact address (see point 3.2) will generally be stored by us for as long as you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed).

• For contract-related personal data (including business documents and communications), we store personal data for as long as the contractual relationship exists and then for ten further years after the end of the contractual relationship, unless (i) a shorter or longer statutory retention obligation applies in individual cases, (ii) retention is required for reasons of proof or for another valid reason under applicable law, or (iii) the deletion of the data is required earlier (e.g. because the data is no longer required or we have to delete the corresponding data).

10. Cookies

When you access or use the website, we may place so-called cookies – small text files – or similar tools on your computer. We use these cookies to recognize you as a user of the website, to customize content, to improve the performance of the website and to improve its user-friendliness.

a) Categories of cookies that we use

Depending on their function and intended purpose, the cookies we use can be divided into the following categories: functional cookies, performance cookies and advertising cookies.

• functional cookies: These cookies serve a variety of purposes for the presentation, functionality and performance of a website and, in particular, to improve the experience and enjoyment of visitors to the website. They allow a website to store information already provided (e.g. user name, location or language selection) and offer visitors improved, more personalized functions. Functional cookies are used, for example, to remember things like your access data. These cookies cannot track your movement on other websites.

• Performance cookies: These cookies are used to collect information about how a website is used – e.g. how visitors came to our website, which pages a visitor opens most often, how you navigated our website during your visit and whether you receive error messages from a page. We may also use these cookies to provide us with certain statistical and analytical information, e.g. how many visitors have come to our website. These cookies are used to monitor the level of website activity and improve website performance.

These cookies may be placed by us or a third party on our behalf. Further information about cookies and their use can be found at: http://www.allaboutcookies.org/.

The legal basis for data processing arises from your consent (Art. 6 para. 1 lit. a GDPR) or our legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR). Our legitimate interest arises from the requirements for IT and data security and the smooth and secure operation of our website.

You can configure your browser settings so that no cookies are stored on your computer. The complete deactivation of cookies may mean that you cannot use all functions of our website.

By continuing to use our website and/or agreeing to this privacy policy, you consent to the setting of cookies by us and the associated collection, storage and use of personal usage data, even beyond the end of the browser session. You can revoke this consent at any time by activating the browser pre-setting to refuse cookies from third-party providers.

b) Google Maps

This website uses the offer of Google Maps API, a map service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This allows us to display interactive maps directly on the website and enables you to use the map function conveniently.

The legal basis of the processing results from your consent due to your voluntary information for the creation of a route plan and our legitimate interests in the presentation of our location as well as an easy findability of the place indicated by us on the website.

By using Google Maps, information about the use of our website, including your IP address, may be transmitted to a Google server in the USA and stored there. Google may transfer the information obtained through Google Maps to third parties if this is required by law or if third parties process this data on behalf of Google.

Under no circumstances will Google associate your IP address with other Google data. Nevertheless, it would be technically possible for Google to identify at least individual users based on the data received. It would be possible for personal data and personality profiles of users of the website to be processed by Google for other purposes over which we have no influence and can have none.

It is possible to deactivate Google Maps and prevent data transfers to Google if you deactivate JavaScript in your browser. However, we would like to point out that in this case you will not be able to use the map display.

Further information on the purpose and scope of data collection and its processing by Google, as well as further information on your rights and setting options to protect your privacy, can be found at: www.google.de/intl/de/policies/privacy.

c) No automated decisions, including profiling, with legal effect

We do not make any decisions about you that are based exclusively on automated processing—including profiling—and that have legal effect on you or similarly significantly affect you.

d) Security

FORCENTIS AG has implemented organizational and technical measures to maintain the security of personal data and to protect it against unauthorized or unlawful processing, accidental loss, alteration, disclosure, or access.

FORCENTIS AG may use third parties as data processors to collect and process your personal data. The data processors we engage will process your personal data only in accordance with our instructions and are legally obliged to take strict security precautions when handling personal data. Unfortunately, the transmission of information via the internet is not entirely secure. Although we do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website; any transmission is at your own risk. For this reason, you are free to transmit your personal data to us by other means, e.g. by telephone, at any time. Once we have received your data, we apply strict procedures and security measures to prevent unauthorized access.

e) Privacy statements of third-party providers

Please note that if you click on a link to a third-party website (e.g. Google or social media or other websites), you will be redirected to a website that we do not control and our privacy policy will no longer apply. Your browsing and interaction on another website are subject to the terms of use and privacy policies and notices of those third-party websites. In addition, we cannot guarantee the correctness and topicality of these links. We encourage you to read the terms of use and privacy statements and notices of other websites carefully before submitting personal data through that website. We are not responsible or liable for the informational content and data processing of such third-party websites.

f) Children

Our website is not intended for children, and we do not knowingly collect personal data from children under the age of 16 unless we have the express consent of their parents. If we are notified or otherwise become aware that personal data of a child under the age of 16 has been improperly collected, we will take all reasonable steps to delete that personal data.

g) What are your rights

You may request information from FORCENTIS AG, providing proof of your identity, as to whether personal data about you is being processed. In addition, you have the right to request the correction, destruction, or restriction of personal data about yourself, as well as to object to the processing of your personal data. If the processing is based on your consent or our legitimate interests, you may revoke your consent or object to this processing at any time by contacting us directly by e-mail at info@forcentis.com. In certain cases, you have the right to receive personal data generated during the use of online services in a structured, common, and machine-readable format, so that further use and transfer to a possible third-party provider is possible.

Requests in this regard should be addressed to FORCENTIS AG via the following e-mail address: info@forcentis.com. FORCENTIS AG reserves the right to restrict your rights within the framework of applicable law and, for example, not to disclose comprehensive information or to delete personal data. Please note that even after a request to delete your personal data, we must retain it in whole or in part within the scope of legal and contractual retention obligations. The deletion of your personal data may result in you no longer being able to use our services.

If we reject your application or you are not satisfied with our processing, you are also entitled to lodge a complaint with the competent supervisory authority and to lodge an appeal with the competent authority. The competent authority is the Federal Data Protection and Information Commissioner (FDPIC) in Bern (http://www.edoeb.admin.ch).

h) Changes to our privacy policy

FORCENTIS AG reserves the right to adapt, supplement, or otherwise change this personal data protection declaration at any time and without giving reasons. The current personal data protection declaration as published on the portal applies.

FORCENTIS AG

Version 01.00, November 11, 2023