I Fracc is responsible for the data processing described in this privacy policy.

If you have any questions or would like to exercise your rights under data protection law, please contact us at info@ifracc.ch or write to us at I Fracc Sagl, I Fracc 26 a, 6513 Montecarasso

We collect the information you provide to us as follows:

• when you contact us;
• when you register as a user on the website or the online platform;
• when you order goods or services;
• when you apply for a job with us.

This includes general personal data, e.g. name and contact details (such as address, telephone number or e-mail address), details of your position or role at the organization on whose behalf you are contacting us and information of any kind from correspondence, contacts and interactions with us.

If you order chargeable goods or services, we will also ask for your financial data, e.g. your preferred payment method and billing address.

We also process personal data that we receive from third parties. This regularly includes personal data that we receive in correspondence or in meetings with customers or business partners, e.g. your name and details of your activity as a team member of the customer or business partner.

To the extent necessary to achieve the purposes described in this Privacy Policy, we also collect general personal data from publicly accessible registers, websites or platforms (e.g. to verify your authorization to sign) or by obtaining information from third parties (e.g. for reference purposes in the application process, if you consent to this).

You can find out about I Fracc and our range of services on the website without telling us who you are. As with any connection to a web server, the server on which we have the website and the online platform made available automatically logs and stores certain technical data and stores it for a short period of time. This includes the IP address and operating system of your device, the date and time of use and the type of browser you use to access the website or online platform.

We operate a web store (“Online Platform”). When you register as a user on the Online Platform, we collect the information you provide to us. This includes general personal data such as name and contact details as well as personal information that you or other users enter, upload, generate, store and process when using the Online Platform.

We use web analysis services (currently Google Analytics) to evaluate the use of the website and to obtain information for its optimization. The web analysis services we use collect and store usage data using cookies. Before being transmitted to a server outside Switzerland/EU/EEA, the requesting IP addresses are truncated. We therefore do not transmit any personal data to the provider of the web analysis services abroad.

We use advertising technologies from Google and Facebook on the website. This allows us to target people who visit our website with advertising that is relevant to them when they visit other websites. The advertising material is displayed on the websites you visit based on an analysis of your previous use of our website. For this purpose, the providers of the advertising technologies set cookies when you visit our website.

The social plugins used on the website allow you to recommend and share our content on social networks. You can recognize the social plugins on the website by the logos of the respective social network. When you interact with the social plugin, data is sent to the respective provider of the social network.

When accessing these resources, the operator of the external server learns your IP address and/or certain marginal data that is necessary for the use of the external operator’s server.

We use cookies, tags and similar technologies on the website to provide you with the best possible user experience and to help us improve the website. Cookies are text files that are downloaded to your computer or mobile device when you visit a website or use an app.

Some of the cookies we use are necessary to provide certain functions of the website. In addition, we use cookies to analyze the use of the website and to obtain information to optimize the website.

You can instruct your browser not to accept cookies or to ask you each time before a cookie is set. You can also delete cookies on your device by using the corresponding function of your browser.

On our social media pages, you will find posts on current developments at I Fracc and on our range of services. The social media providers collect and analyze usage data such as the number of visits and demographic information about visitors to our company pages.

We receive evaluations from the social media providers based on this data. These only contain aggregated or otherwise sufficiently anonymized data. Only the respective provider can identify you on the basis of the usage data collected. Therefore, please note the data protection information of the respective provider.

We process your personal data primarily to inform you about our range of services and to provide, document and invoice our services in accordance with our contractual and legal obligations.

We also process your personal data for the following purposes:

• Answering your inquiries and communicating with you;
• Processing your registration or orders;
• Answering applications;
• Provision of the website and the online platform;
• Analysis and optimization of the use of the website and the online platform;
• Marketing and advertising;
• Optimization of our posts on our social media company pages;
• Information about new developments at I Fracc and about new services;
• fulfillment of legal obligations; and
• Enforcement of legal claims.
• Other purposes, e.g. as part of our internal processes and administration, for training and quality assurance purposes, for corporate governance or for risk management.

We have a legitimate interest in the processing of your personal data in accordance with the stated purposes. Some processing is also necessary so that we can fulfill our contractual obligations towards you or our legal obligations (e.g. retention obligations). On this basis, we process your personal data if and insofar as the applicable data protection law requires a legal basis or justification for the lawfulness of data processing in general or for certain processing activities.

We store your personal data only to the extent and for as long as is necessary to fulfill the purposes described in this privacy policy or to comply with legal obligations.

In the interest of the integrity and confidentiality of personal data, we take appropriate technical and organizational measures. In particular, we implement access controls, access controls and procedures for regularly reviewing, assessing and evaluating the effectiveness of the measures in accordance with our risk assessment.

In order to achieve the purposes described in this privacy policy, it may be necessary for us to pass on your personal data to other companies. These are the following categories of recipients:

• external service providers;
• Suppliers and business partners;
• (if applicable) authorities and courts.

We only store and process your personal data in Switzerland. Under certain circumstances, however, your data may also be processed in Europe; in exceptional cases, in any country in the world. We may also transfer the personal data to recipients who process the personal data in other countries, including those that do not guarantee a level of data protection comparable to Swiss law. We will do the latter based on consent or standard contractual clauses, or if it is necessary for the fulfillment of a contract or the enforcement of legal claims.

You have the following rights in relation to personal data concerning you:

• The right to receive information about what personal data we store about you and how we process it;
• the right to receive or transfer a copy of your personal data in a commonly used format;
• the right to rectification of your personal data;
• the right to erasure of your personal data; and
• the right to object to the processing of your personal data.

Please note that legal requirements and exceptions apply to these rights. To the extent permitted by law, we may refuse your request to exercise these rights. You also have the right to lodge a complaint with the competent data protection supervisory authority.

We may amend this Privacy Policy at any time, in particular if we change our data processing or if new legislation becomes applicable. The version provided on www.swissmerlot.com/datenschutz applies in each case.