Privacy policy

1. What is it about?

SHARKGROUP AG (hereinafter "we", "us") collects and processes personal data concerning you in connection with operation of the website https://www.workconnect.ch (hereinafter "Website").

"Personal data" is all information that is linked to a specific or identifiable person and allows conclusions to be drawn about their identity. This includes, in particular, name, address, telephone number and e-mail address. Any handling of personal data, i.e. amendment, erasure, disclosure, procurement, storage and use of this data, constitutes "processing" of the data.

In this privacy policy, we inform you how we process which personal data, where, for what purpose and for how long when you use our Website and register on workconnect.ch. The SHARKGROUP AG privacy policy at https://www.sharkgroup.swiss/datenschutz shall otherwise apply. If necessary, we will inform you in good time about further processing activities that are not mentioned in this privacy policy.

If you provide us with data about other people, you only provide us with this data if you are authorised to do so and this data is correct. Please also ensure that these third parties have been informed of this privacy policy.

2. Who is responsible for processing your personal data?

We are responsible for the data processing described below:

SHARKGROUP AG Rietwiesenstrasse 17 8156 Oberhasli

If you have any questions about data protection, please do not hesitate to contact us:

info@workconnect.ch

3. For what purposes do we process which data about you?

We mainly process personal data that you provide to us when using and registering on our Website or when contacting us; data that we collect about you in the course of operating our Website; or data that we receive from third parties (in particular other workconnect.ch users).

This includes the following categories of personal data:

• Operation of our Website: we collect technical data such as IP address, information about the operating system and your end device's settings, the region, the time and the type of use in order to maintain our Website's security and stability. Cookies and similar technologies may also be used. For further information, see section 4. • Registration on our Website: we process all the data that you provide when you register on our Website (user name, password, e-mail address, etc.). You register directly with us. In addition, we collect data in connection with use of the user account and our offer and services. • Advertising on our Website: we process the personal data that you make available to us when you place an advert. • Communication: we process personal data that we receive when you or third parties contact us via a form, e-mail, telephone, letter or in any other way. Communication data includes all marginal and content data that we collect in the course of communication. • Improvement of our electronic offers: in order to continually improve our Website, we collect data about your behaviour and preferences, for example by analysing how you navigate through our website. • Security purposes and risk management: we obtain and process personal data to ensure and continually improve our IT infrastructure's security and as part of risk management (e.g. to protect against criminal offences). This includes monitoring and control of electronic access to our IT systems, analyses and tests of our IT infrastructure, system and error checks and the creation of backup copies. • Compliance with laws, directives and recommendations from authorities as well as internal regulations: we obtain and process personal data to comply with applicable laws, self-regulation, certifications and our corporate governance, and for internal and external investigations to which we are a party (e.g. by law enforcement or supervisory authority, or a mandated private body).

4. What applies in particular when using our Website?

When using our Website, data is generated that is stored in logs (in particular technical data). We may also use cookies and similar technologies (e.g. pixel tags or fingerprints) to recognise Website visitors, evaluate their behaviour and identify preferences. A cookie is a small file that is transmitted between the server and your system and enables a specific device or browser to be recognised. You can set your browser so that it automatically rejects, accepts or deletes cookies. You can also deactivate or delete cookies in individual cases. You can find out how to manage cookies in your browser in your browser's help menu.

Neither the technical data nor the cookies we collect generally contain any personal data. However, personal data that we store about you (e.g. if you have a user account with us) may be linked to the technical data or to the information stored in and obtained from cookies and may therefore be associated with you.

We may use social media plug-ins. Social media plug-ins are small software components that establish a connection between your visit to our Website and a third-party provider. The social media plug-in informs the third-party provider that you have visited our Website and may transmit cookies to the third-party provider that it has previously placed on your web browser. For more information on how these third-party providers use your personal data collected via their social media plug-ins, please refer to their respective privacy policies.

We may also use our own tools and third-party services (which may themselves use cookies) on our Website, in particular to improve our website's functionality or content (e.g. integration of videos or maps), to compile statistics and to display advertising.

We currently use the following service provider where applicable, whereby their contact details and further information on individual data processing can be found in their privacy policy: • Matomo Publisher: InnoCraft description: Matomo uses cookies. For this purpose, the usage information generated by the cookie is transmitted to our servers and stored there. The information generated by the cookie is used for statistical purposes and to improve the Website and server. Link to the privacy policy: https://matomo.org/privacy-policy/ What data is collected? Browser information; date and time of visit; usage data; device information; referrer URL; user agent; geographic location; screen resolution; time zone; number of visits; user ID; anonymised IP address; page title; files clicked or downloaded; links to external domains clicked; time of the user's first visit; time of the user's previous visit; page URL purpose of data collection; advertising; analysis; optimisation; content delivery; personalisation; payment; cloud computing; functionality; Website security; online audio distribution; tracking; web hosting; creation of individual user profiles and supplementation with personal data about me by the provider; observation; target group measurement; Session cookie: anonymised key for secure user identification and cookie; session handling; cookie disclaimer; session tracking.

Third-party providers that we may use may be located outside Switzerland. Information on data disclosure abroad can be found in section 7. In terms of data protection law, some of them are "only" processors for us and some are controllers. Further information on this can be found in the privacy policies of the third-party providers.

5. What do we respect when processing your data?

We process your personal data in accordance with the applicable data protection legislation and take into account the processing principles. This means that we process your data in good faith and for the purposes mentioned above. We pay attention to transparent and proportionate processing.

If, in exceptional cases, we do not comply with a processing principle, the data processing may still be lawful, as we rely on one of the following justifications: • Your consent • Predominant private or public interest (e.g. fulfilment of the contractual relationship) • Legal basis.

If, in exceptional cases, the EU General Data Protection Regulation (GDPR) applies to certain processing activities, we base our processing activities on the fact that they are necessary for initiation or execution of a contract with you, that we or third parties have a legitimate interest (e.g. compliance with legal regulations), or that there is a legal basis. In some cases, we also base processing on your consent. We will inform you separately about the respective purposes.

We require certain personal data from you in order to be able to provide our services (e.g. master data, contract data and registration data). Without this data, we cannot fulfil a contract with you or the Website cannot be used (e.g. technical data).

6. To whom do we disclose your personal data?

As part of operation of our Website and services, we pass on your personal data to the following categories of recipients, to the extent necessary to fulfil the abovementioned purposes:

• External IT service providers with access to your personal data (for Website, support, cloud service etc.; in particular Microsoft); • Providers of tracking, conversion and advertising services; • Authorities, courts, parties (social insurance companies, criminal prosecution authorities, civil courts, opposing parties and other parties involved, witnesses, etc.); • The public, in particular other registered users of workconnect.ch.

These recipients process your data on our behalf, as joint or independent controllers, and may in turn involve third parties, so that your data is also accessible to them. We ensure by contractual agreement with the recipients who process your data on our behalf that the service providers engaged also comply with data protection regulation requirements. Please refer to the respective companies' privacy policies, which you can find on their websites.

7. Will your personal data be disclosed abroad?

We process your data exclusively in Switzerland and the European Union. However, we may transfer the personal data to recipients who in turn process the personal data in other countries in the EU/EEA. We may also be legally obliged to transfer data to authorities and other persons abroad.

If some of these countries do not guarantee an adequate level of data protection, we specifically use recognised standard contractual clauses to ensure adequate data protection, or rely on your consent on a case-by-case basis. In individual cases, disclosure is also necessary for overriding private or public interests, such as fulfilment of a contract or enforcement of legal claims.

8. When will your data be erased?

We process your personal data as long as this is necessary for fulfilment of our contractual and legal obligations and retention is necessary for documentation, or for evidentiary or technical reasons, insofar as a longer statutory retention obligation exists in individual cases. The data is then anonymised or erased.

We generally retain data that we collect as part of our services for up to ten years after the end of the contractual relationship. Data that we collect when you visit our Website is stored for twelve months, although analysis and tracking data may be stored for longer.

9. How do we protect your data?

We have taken appropriate technical and organisational security measures to ensure confidentiality, integrity, availability and traceability, such as employee training, access restrictions and encryption of data carriers.

We would like to point out that we use external IT service providers and cloud providers with servers in Switzerland as part of our services. We also use certain IT services and means of communication that may be associated with data security risks (e.g. email, video conferencing). It is your responsibility to inform us of any request for special security measures.

10. What rights do you have in relation to your personal data?

As a data subject, you have the following rights: • Right to information: you have the right to receive information about your personal data processed by us free of charge and at any time.

• Right to data disclosure: you have the right to receive certain personal data in a commonly used and machine-readable format, or to have it transmitted to a third party.

• Right of rectification: you have the right to have your data corrected free of charge and at any time if it has not been recorded correctly.

• Right to be forgotten: in principle, you have the right (subject to legal obligations) to instruct us to delete your personal data.

• Right of cancellation: you have the right to withdraw your consent at any time with effect for the future, insofar as processing is based on this consent.

• Right of objection: you have the right to object to future processing of your data at any time. This applies in particular to processing for the purpose of direct marketing.

• Legal action: you have the right to enforce your rights in court at any time or to file a complaint with the Federal Data Protection and Information Commissioner.

In individual cases, some of these rights may not apply or may only apply to a limited extent or with a delay. In such a case, we would inform you accordingly.

To assert these rights, please contact: info@workconnect.ch

11. Can we amend this privacy policy?

We may have to adapt this privacy policy. The changes will be published on https://www.workconnect.ch/privacy-policy. You will not be informed separately. The current version published on our Website applies.

Oberhasli/Status: 16.01.2025