Data protection declaration Tradingzone AG

1. General information

Data protection is an important concern for us. We therefore process your personal data (“personal data”) with great care and in accordance with the applicable legal requirements. Tradingzone AG, Allmendstrasse 2, 8105 Regensdorf, Switzerland processes your personal data for various purposes and provides transparent information about this data processing. “Personal data” means all information that can be associated with a specific or identifiable natural person. The term “editing” includes any handling of personal data, e.g. obtaining, disclosing, storing, deleting, etc.

Please read the entire privacy policy carefully. You will find out how and why we process your personal data and what rights you have in connection with this data processing.

To whom and when does this data protection declaration apply?

• if you purchase services or products from us or have a contractual relationship with us
• Visitors to our websitehttps://www.tradingzone.ch
• when you contact us, e.g. via email, letter, via our contact form or another contact tool
• when you receive information or marketing communications from us
• when you register for certain offers (e.g. events).
• when you subscribe to our newsletter
• when you apply to us
• if you deal with us in the context of further data processing that is related to our offers

2. Accountability

The company responsible for processing personal data is the one that determines for what purpose and by what means Processing takes place. For data processing in accordance with this data protection declaration, the following company or person is the “responsible party” within the meaning of the DSG, i.e. the body responsible under data protection law, unless otherwise communicated in the specific individual case (identity):

Tradingzone AG Allmendstrasse 2 8105 Regensdorf Switzerland

If you have any concerns or questions about data protection, you can contact us at the following address:

mail@tradingzone.ch

If you are in contact with another group company, e.g. because you are in direct contact with this company, this company is responsible for data protection.

3. Personal data to be processed

We also process different categories of personal data based on different purposes. For contractual partners who are companies, we process less personal data - here we process in particular data from contact persons of the companies (e.g. name, email address, function in the company, communication data). You provide us with much of the following personal data yourself. However, you are generally not obliged to do this. If you provide us with data about other people, we will assume that you are authorized to do so and that this data is also correct . You automatically confirm this when you provide us with data from these third parties. Please ensure that the affected third parties have been made aware of this data protection declaration.

3.1. Basic data and contact information

Basic data and contact information relate directly to your person and characteristics (e.g. to contact you). For example, we process the following basic data:

• Name, first Name
• Gender
• birth date
• Address/address
• E-mail address
• Telephone number
• Information about language preferences
• Information on professional function and employment (e.g. employment relationship, employer)

We receive this master data directly from you. Under certain conditions, we can also obtain personal data from third parties, such as our contractual partners, associations and address dealers and from publicly accessible sources such as the Internet.

3.2. Contract data

Contract data is information that arises in connection with the execution of the contract. We process the following data:

• Information from the run-up to the conclusion of a contract and information about the conclusion of the contract itself (e.g. on the subject matter of the contract), as well as the information required or used for processing
• Date, information about the type and duration as well as conditions of the contract in question, data on termination of the contract
• Customer history
• Information on payments and payment modalities, mutual claims
• Information about complaints, information about customer satisfaction, complaints, feedback
• Answers to customer and satisfaction surveys
• Access data and logins

3.3. Application data

Application data is data that we collect in connection with your application, e.g. the following data:

• CV, letter of motivation
• Work and graduation certificates
• Information about your current job (e.g. notice period)
• Wage expectations
• Information related to an interview

3.4. Communication data

Communication data is data that arises in connection with communication with you, e.g. the following data:

• Contact details such as postal address, email address and telephone number
• Content of all correspondence
• Information on the type, time and other peripheral data of the communication

3.5. Behavioral data

In order to tailor our offers and services to you, we try to get to know you better. To do this, we process data about your behavior. Behavioral data is information about your use of our website. They can also be collected based on technical data. We may also use your other interactions with us as behavioral data, and we may combine behavioral data with other information. This data then gives us information about what needs and interests you are likely to have. For this purpose, we evaluate behavioral data. This gives us overall knowledge of your preferences and expected behavior or groups of people with similar characteristics.

3.6. Location data and technical data

When you visit our website, technical data is collected. This includes, for example, the following data:

• Standort- und Verkehrsdaten
• IP address of the end device and device ID
• Information about your device, the operating system of your device
• Information about your internet provider
• Content accessed or logs in which the use of our systems is recorded
• Date and time of access to the website

3.7. Other possible dates

Depending on the need, we can then also process the following additional data:

• We may collect data about whether you participate in promotions (e.g. competitions).

4. Purposes of our data processing

We process your personal data, to the extent permitted, for various purposes in which we have a legitimate interest corresponding to the purpose:

• To fulfill the contract
• To improve our services and products
• For communication (e.g. replying to your messages)
• For marketing and information purposes (so that we can, for example, inform you about offers or new activities based on your personal interests)
• Reviewing your application (so that we can assess whether you are suitable for a position with us)
• To maintain our IT security (in particular to monitor the performance of our website)
• To enforce measures for operational and building security as well as to protect our employees, other people and valuables
• For internal administration (e.g. as part of accounting or data archiving)
• To comply with legal requirements (e.g. to process complaints, prevent and investigate crimes or other misconduct)
• Asserting legal claims (if necessary, we also process personal data to enforce claims in court, out of court and before authorities at home and abroad or to defend ourselves against legal claims)
• For corporate development (e.g. for corporate management, for processing the purchase and sale of business areas and the associated transfer of personal data)

5. Data processing in connection with social media

If you contact us via social media and our profiles there, e.g. on Facebook, Instagram, YouTube, TikTok, LinkedIn, Xing, Twitter, Pinterest, etc., comment on content or redistribute posts, we collect information that we, for example, can use for marketing purposes. The respective provider of a social media platform also collects data itself when you visit our profile.Further information on data processing by a social media provider itself can be found in the respective data protection declaration of this provider. strong>

On our website we offer you the option of using a so-called social media plugin from Facebook, Instagram, YouTube, TikTok, LinkedIn, Xing, Twitter, Pinterest in order to integrate functions of the respective provider on our website. These plugins are disabled by default, but are activated when you click on the social media icon on the website. You can address requests for information and other data subject inquiries in connection with these social media providers directly to the provider concerned.

6. Online Advertising Techniques

We use online advertising techniques such as cookies on our website. We use this to measure the user-friendliness and success of the website and online advertising campaigns.

6.1. What are online advertising techniques such as cookies?

If we track you, we can distinguish your access from access by other users so that we can ensure the functionality of the website and carry out statistical evaluations. Every time you visit a page, you are recognized as an individual visitor and can therefore be distinguished from other people, for example by the server assigning your browser a unique identification number (this is then referred to as a so-called “cookie”). Cookies are automatically stored on your device when you visit our website. We use cookies, for example, to save settings between your visits to the website or to collect statistical, technical data.

6.2. Which cookies or online advertising techniques do we use?

We use analysis services so that we can optimize our website. Below we will explain how our most important analysis service providers work by way of example. Other third-party providers of corresponding tools generally process personal data in a similar manner.

• Google Analytics, an analysis service provided by Google LLC and Google Ireland Ltd. Google Ireland Ltd. is the person responsible for processing personal data. Google uses cookies and online advertising techniques to analyze certain information about the behavior of individual users on the website. Based on the analyzed data, Google provides us with evaluations, but also processes data for its own purposes. Information on data protection with Google Analytics can be found here: https://policies.google.com/privacy

• Facebook Pixel, an analysis tool from Meta Platforms Ireland Ltd. This allows us to control ads on Facebook and Facebook's partners so that they are only shown to those users who may be interested in the corresponding advertising. The data is stored on servers in the EEA and the USA. Users can address requests for information and other inquiries directly to Meta. You can find information about data protection at Meta here: https://www.facebook.com/privacy/policy.

• LinkedIn Insight Tag, an analysis tool from LinkedIn Ireland Unlimited Company. This tool informs us that you have visited our website and your IP address is processed here. We can use the tool to evaluate the use of our website. The data is stored on servers in the EEA and the USA. Please note that LinkedIn can establish a connection to a user profile and use evaluated data for its own advertising purposes. Further information about LinkedIn's data protection and corresponding setting options can be found here: https://www.linkedin.com/legal/privacy-policy.

7. Profiling

We can process and evaluate your personal data automatically. This includes so-called profiling, i.e. automated evaluations of data for analysis and forecasting purposes, as well as to identify misuse and security risks. Examples include profiling for fraud prevention, credit checks, customer care and marketing purposes. Specifically, information about order and payment processing can be forwarded to the Swiss association Creditreform.https://www.creditreform.ch/datenschutz

8. Automated individual decisions

In certain cases we make so-called automated individual decisions. This means that a computer-aided program makes an exclusively automated decision according to certain rules and without checking by an employee, which can have negative legal consequences for you or significantly affect you. If decisions are made exclusively automatically, we will inform you accordingly in individual cases. In the case of automated individual decisions, you also have the right to express your point of view and request that a natural person review the decision. To do this, please use the contact details in section 2.

9. Disclosure of data to other companies and other recipients

We disclose your personal data to service providers. This particularly affects IT service providers, but can – where necessary – affect analysis service providers, debt collection service providers, credit reporting agencies, marketing service providers, etc. To the extent that these service providers process personal data as processors, they are obliged to process personal data exclusively in accordance with our instructions and to take measures to ensure data security. Data can then also be disclosed to other recipients, e.g. to courts and authorities in the context of legal proceedings.

In particular, we may pass on your personal data to other companies in the group. A transfer can serve the purpose of intra-group administration or to support the relevant group companies and their own processing purposes.

In individual cases, it is possible that we pass on personal data to other third parties for their own purposes, e.g. if you have given us your consent to do so or if we are legally obliged or entitled to pass it on.

10. Duration of data processing

We store and process your personal data for as long as it is necessary for the purpose of processing (for data in connection with contracts, this is usually for the duration of the contractual relationship), as long as we have a legitimate interest in storing the data (e.g. to enforce legal claims , or to ensure IT security) and as long as data is subject to a legal retention obligation (e.g. for certain data there is a ten-year retention period, which we must strictly adhere to). We destroy or anonymize your personal data after the storage or processing period has expired, unless legal or contractual obligations prohibit this.

11. Rights of those affected

You have certain rights under applicable data protection law so that you can obtain further information about and influence our data processing. These are in particular the following rights:

• You have a right to information. This means that you can request information about our data processing. We are at your disposal for this. You can also submit a so-called information request if you would like further information and a copy of your data.
• You have a right to transfer. This means that you have the right to receive the personal data that you have provided to us in a structured, common and machine-readable format or to have it transferred to a third party, provided that the corresponding data processing is based on your consent or is necessary to fulfill the contract.
• You have the right to deletion and objection. This means that you can object to our data processing so that we can no longer process your data. You can then request that we delete your personal data. However, we would like to point out that we will continue to process and store your data if we are obliged to do so.
• You have a right to correction. This means that you can correct or complete incorrect or incomplete personal data or then have it provided with a so-called dispute note.
• You have the right to withdraw your consent. This means that you can revoke your consent at any time, provided you have previously given your consent to data processing. The revocation applies from this moment onwards, meaning only for the future and not for the past. However, if you revoke your consent, we may continue to process your data on a different basis.

If you assert your rights as a data subject, we must check your identity (this is done, for example, by providing a copy of your ID). The rights of those affected listed are then subject to legal requirements and restrictions. This means that the exercise of rights is not fully possible in every case. For example, we still need to process your personal data in order to fulfill an order with you, to protect our own interests worthy of protection or to comply with legal obligations. To the extent legally permissible (e.g. to protect the privacy of third parties and to protect our own interests worthy of protection such as the existence of trade secrets), we can restrict or deny your exercise of rights. It should also be mentioned that you also have the option of contacting the responsible data protection authority with your concerns.

12. Status of the data protection declaration

This data protection declaration is up to date and dated August 31, 2023.