Pargesa SA, having its registered office at 11 Grand-Rue, 1204 Geneva, Switzerland ("Pargesa" or the "Company"; the terms "we" or "us" also refer to the Company) is committed to protecting your privacy. This global privacy policy (the "Privacy Policy") explains how we collect and use your personal data and which rights and options you have in this respect. Additional provisions may supplement this Privacy Policy pursuant to the terms of engagement or any other contractual relationship we may have with you or your representative and which form an integral part of the Privacy Policy. In case of contradictions and discrepancies between this Privacy Policy and any other additional provision, this Privacy Policy shall override any other additional provisions, unless the additional provisions expressly provide that they depart from this Privacy Policy and precisely identify the terms of this Privacy Policy from which they intend to depart.

This Privacy Policy is addressed to:

• our website’s visitors and any third parties following our company, such as analysts and individuals having registered for our press releases, annual reports, events or other information mailings (collectively referred to as the "Users");

• our prospective, current and former investors (including, for the avoidance of doubt, those who invested in Pargesa Holding SA, a company that was absorbed by Parjointco Switzerland SA, afterwards renamed Pargesa SA), shareholders, agents, suppliers and consultants who are natural persons (such as self-employed persons) or the representatives or contact persons of legal entities, including our prospective, current and former investors, shareholders, agents, suppliers, consultants and the competent authorities (collectively referred to as the "Partners"); and

• our candidates for recruitment purposes.

The Company is responsible for the processing of your personal data as it decides why and how it is processed, thereby acting as the "Controller".

1. What type of personal data do we collect?

We collect basic identification information about all individuals with whom we interact, which may include for instance your name, title, position, company name, address (incl. city, country, zip code), phone number, email address, signature.

The information may either be directly provided by you, communicated to us by the legal entity for whom you work (e.g. if you are the contact person designated by your employer to interact with us), supplied to us by one of our service providers (e.g. financial institutions or recruiters) or obtained from publicly available sources.

Our services are directed at a general audience and not directed to those under the age of 16. If we obtain actual knowledge that a User or Partner is under 16 years of age, we will take steps to remove that individual’s personal information from our systems, unless the consent is given or authorised by the holder of parental responsibility over the minor.

1.1 Users

With respect to Users, we may collect further information, such as electronic identification data, information provided by you during registration to receive one or more press releases (e.g. address, function and interest in press releases and/or management reports), or, for analysts following our company, their estimates and any related opinions.

1.2 Partners

With respect to Partners, we may collect further information, such as information relating to shareholders’ shares (e.g. number and type of rights), or notes about our meetings.

1.3 Candidates for recruitment purposes

For candidates for recruitment purposes, we may in addition also collect further information, such as additional identification information (e.g. date and place of birth, nationality, copy of ID card or passport), education and experience, any other information relating to you and which you may provide to us.

2. How do we collect your personal data?

• We collect your personal information as part of our contractual relationship, or when you provide it to us, or interact with us directly, for instance engaging with our staff, using our contact form.

• We may collect or receive information about you from other sources, such as keeping the contact details we already hold for you, accurate and up to date, using publicly available sources.

• We do not use any "performance" cookies nor any other technology tools monitoring visitor behaviour on our website.

3. Personal data about other people which you provide to us

If you provide personal data to us about someone else, you must ensure that you are entitled to disclose that personal data to us and that, without our taking any further steps, we may collect, use and disclose that personal data as described in this Privacy Policy. In particular, you must ensure the individual concerned is aware of the various matters detailed in this Privacy Policy, as those matters relate to that individual, including our identity, how to contact us, our purposes of collection, our personal data disclosure practices (including disclosure to overseas recipients), the individual's right to obtain access to the personal data and make complaints about the handling of the personal data, and the consequences if the personal data is not provided (such as our inability to provide services).

4. How do we protect your personal information?

We will take appropriate technical and organisational measures to help protect your personal information from unauthorised access, use, disclosure, alteration or destruction consistent with applicable data protection laws.

5. Who do we share your personal data with?

We may transfer or give access to personal data to third parties to complete the purposes listed below in Section 6, to the extent they need it to carry out the instructions we have given to them. Such third parties may include:

• third parties who process personal data, such as our (IT) systems providers, website designers and hosting provider, our recruitment providers, payment services providers, banks, insurances companies, social security bodies, event organisers, email delivery service providers, database and cloud providers and consultants;

• any third party to whom we assign or novate any of our rights or obligations under a relevant agreement;

• our advisors and external lawyers in the context of the sale or transfer of any part of our business or its assets; and

• any national and/or international regulatory, enforcement or exchange body or court where we are required to do so by applicable law or regulation or at their request.

The above third parties are contractually and/or legally obliged to protect the confidentiality and security of your personal data.

In the event that your personal data should be transmitted to a country which does not guarantee an adequate level of protection for the protection of personal data according to the European Commission and / or the Swiss Federal Officer for Data Protection and Transparency, we will implement appropriate safeguards in accordance with applicable legal requirements to ensure adequate protection of your personal data. In such a case, you will be able to obtain further information on the guarantees put in place by contacting us at the email address mentioned below in Section 10.

6.  For which purposes and on what basis do we process personal data?

We may use your personal data for the following purposes:

• provision of services you may have requested, in particular the sending of our annual reports and press releases via email;

• protection of the security of and managing access to our premises, IT and communication systems, online platforms, website and other systems;

• implementation of tasks in preparation of or under existing contracts;

• for undertaking marketing activities relating to our activity, including roadshows, presentations to potential or existing investors, and other activities (such as sending best wishes cards);

• when the processing is necessary to perform our contractual obligations towards you or to take pre-contractual steps at your request;

• when processing is necessary for purposes of our legitimate interest or those of any third party recipients that receive your personal data, provided that such interests are not overridden by your interests or fundamental rights and freedoms;

• in relation to prospective members of the personnel, we may also process personal data for recruitment activities (for example, performing employment and background checks); and

• any purposes related and/or ancillary to the above or for which your personal data was provided to us, or any purposes imposed by our legal and regulatory obligations and authorities.

7. How long do we retain your personal data?

Your personal data will be deleted when it is no longer reasonably required, if you withdraw your consent or exercise your rights to erase or oppose processing and we are not legally required or otherwise permitted to continue storing such data. We will, however, retain your personal data where required for Pargesa to assert or defend against legal claims until the end of the relevant retention period or until the claims in question have been settled.

8. What are your rights regarding your personal data?

Subject to certain legal conditions, you have the right to request a copy of your personal data which we hold, to have any inaccurate personal data corrected, to request that your personal data be deleted and to object to or restrict our using of your personal data, by sending an email to privacypolicy@pargesa.ch.

When the processing of your personal data is based on your consent, you also have the right to withdraw your consent at any time, without this affecting the lawfulness of the processing based on the consent carried out before the withdrawal of the consent.

If you object to the processing of your personal information, request its erasure or withdraw your consent previously given, we will respect that choice in accordance with our legal obligations.

Your objection, erasure request or withdrawal of any previously given consent could mean that we are unable to perform the actions necessary to achieve the purposes set out above in Section 6 or that you may not be able to make use of the services and products offered by us. Please note that even after you have chosen to withdraw your consent or exercised your rights of objection and / or erasure, we may be able to continue to process your personal data to the extent required or otherwise permitted by law, in particular in connection with exercising and defending our legal rights or meeting our legal and regulatory obligations.

We must ensure that your personal data is accurate and up to date. Therefore, please advise us of any changes to your information by sending an email to privacypolicy@pargesa.ch.

We will make every effort to ensure a fair resolution of any complaint or concern you may have in relation to the respect of your personal data. If, despite our efforts, you believe that we have not been able to provide appropriate assistance, you have the right to lodge a complaint with the competent data protection supervisory authority.

9. Updates to this Privacy Policy

This Privacy Policy may be subject to amendments. Any future changes or additions to the processing of personal data as described in this Privacy Policy affecting you will communicate to you through an appropriate channel, depending on how we normally communicate with you. The changes or additions will take effect as soon as they are posted on this website.

10. How to contact Pargesa?

If you would like to contact us, please send us an email to privacypolicy@pargesa.ch.