When you use our offerings without further information from you, the web server technology we use automatically logs general technical visit information in so-called log files. This includes, among other things, the IP address of the device used to access, browser type, internet service provider, operating system used, offerings accessed on our platform, reference/exit pages, the time, and duration of the visit.

The collection and processing of this information serve the purpose of enabling the use of our website (establishing a connection), ensuring and increasing the security and stability of our systems and offerings, analyzing the use of our offerings and services, collecting general demographic information, enabling the optimization of our offerings, and for internal statistical purposes. User identification does not take place. Likewise, no connection is generally made between this automatically collected information and personal data stored by us. However, the automatically collected information and personal data stored by us can be linked if you have a registered user account on our platform or use certain functions of our website as a guest, such as our contact form or inquiry function. The connection of this information can be made to analyze the use of our offerings and services, collect general demographic information, and enable the optimization of our internet offerings:

• If you send a message to a third party (e.g., an advertiser) via a corresponding function of our portal, these messages including content may be stored by us.

• You can also receive free services on our portal. Your personal data (e.g., email address, telephone number, etc.) disclosed when using a free service or sending a message may be used by us, for example, for marketing and analysis purposes (see below in Chapter CIX).

If personal data is processed by us during the visit to our offerings for the purposes described above, this processing is carried out in our legitimate interest in enabling the use of our website (establishing a connection), ensuring and increasing the security and stability of our systems and offerings, analyzing the use of our offerings, statistically evaluating, adapting, and improving them, as well as enabling the optimization of our internet offerings.

For personalized services or access-restricted areas or for processing inquiries and administration of your subscriptions, your registration and thus the establishment of a user account may be required. This involves entering specific personal data. This may include, for example:

• Your email address, which can also serve as a username

• Password, as well as, depending on the context and offer, additional information such as:

• First and last name

• Address (full postal address, zip code, city)

• Phone number

• Date of birth

• Gender

• Information about subscribed newsletters or other advertisements

• Language preferences

In addition to the information marked as mandatory for using a specific offering, you may voluntarily enter and store further personal data. By confirming at the completion of the registration for the collection and modification of your user account information, you ensure the accuracy of the information you have provided. We use the data for processing and administering our digital offerings, checking the entered data for plausibility, i.e., for establishing, structuring, executing, and amending the contractual relationships concluded with you via your user account, as well as for proper invoicing of paid services. Accordingly, we process your data in this context in accordance with applicable data protection law.

If you use our mobile applications with a mobile device and have enabled the transmission of your GPS signal data to third parties in the settings of your mobile device, we may collect information about the location of your mobile device (longitude and latitude, information about horizontal accuracy) using GPS signal data.

We use the location data to enhance your user experience by displaying location-based online advertising and other location-based digital content (such as location-based weather information and news) via the mobile application(s) on your mobile device. We will ask for your consent in accordance with applicable data protection law before collecting your location data for the mentioned applications. Even after giving consent, you have the option to revoke your consent or disable or object to the collection, processing, and sharing of your location data at any time. If you do not want to receive location-based online advertising and content, you can either decline access to your location or disable location services in the settings of your mobile device at any time. To disable location services, please follow the instructions provided by the device manufacturers:

For Apple devices:

https://support.apple.com/de-ch/HT207092

For Android devices:

https://support.google.com/accounts/answer/3467281?hl=de

When you purchase a product or obtain a paid service, providing data such as first and last names, address (full postal address, zip code, city), and possibly other data (such as delivery address, billing address, payment information, etc.) is mandatory, as we need this information for processing the contract with you in accordance with applicable data protection law.

If you choose an online payment option such as credit card, TWINT, or PayPal to purchase a product or service, the payment is processed through the online payment system of the respective provider. The processing of personal and payment data takes place directly through the provider of the respective payment system. We do not know or store your payment details. The privacy policies of the respective provider of the online payment system also apply.

We may store your data collected for the purchase or acquisition of a paid offering in the user account for the next purchase / contract conclusion according to our internal archiving and data protection policies or based on legal requirements. We use this information for optimizing, improving, and further developing our offering, for marketing purposes, as well as for statistical purposes. For this purpose, we can store all information about your current and previous purchases and contract conclusions, i.e., the products, the services, the number of products and services per purchase, as well as the payment amount.

If you contact our customer service, we may process your contact details (such as title, first and last name, phone number, email address, or postal address) as well as the content of the conversation to respond to your inquiry. This is in our legitimate interest in accordance with applicable data protection law to provide you with competent information and to process your inquiry correctly.

Incoming and outgoing advisory conversations with our customer service may be recorded and stored for training and quality purposes if you have consented to it.

If you fill out a contact form on our offerings, we process the provided personal data (such as title, first and last name, phone number, email address, or postal address, as well as the content of the inquiry). This is also in our legitimate interest to provide you with competent information and to process your inquiry correctly (in accordance with applicable data protection law).

By registering through one of our offerings, we may also use your data for personalized advertising measures by us as well as by affiliated companies, third parties, and our shareholders. Personalized advertising measures include, in particular, the customization of advertising through digital advertisements on our web offerings and mobile applications, via email, such as emails with general information or promotional content (newsletters), via telephone, postal mail, fax, text messages, picture messages, as well as on instant messaging services. At the end of each email sent by us, there is a link through which you can unsubscribe from the newsletter at any time. You can also unsubscribe from the newsletter at any time by emailing dpo@carindex.ch.

We will only send you newsletters if they relate to similar offers or if you have expressly consented. Otherwise, the delivery of personalized content and advertising, for example, on our portals or portals of affiliated companies, is in our legitimate interest according to applicable data protection law to offer you products or services that may interest you and to market our offerings optimally. If prior consent, especially for processing your data by affiliated companies or by our shareholders, is necessary, we will obtain it in advance.

For this purpose, ongoing user-specific historical and future data available to us may be linked using various analytical tools, and user behavior may be analyzed, aggregated, pseudonymized, and anonymized across offerings. To improve our database, we may also use publicly available data or data from third-party providers. The insights from your use of our offering may be used and exploited within the scope of analyzing user behavior at other participating companies. Such data processing generally takes place with pseudonymized or anonymized data. You can object to the processing of your data for these purposes at any time by contacting dpo@carindex.ch via email.

Furthermore, we process your data for analytical purposes, such as continuously improving our digital offerings and making them more tailored and secure. This is in our legitimate interest according to applicable data protection law to align our offerings with the needs of our customers, to improve them according to market requirements, and to ensure the security of our offerings. By registering a user account, you are automatically subscribed to one of our newsletters, and your email address can accordingly be used to promote similar offers until you unsubscribe from the corresponding newsletter. For the purposes described here, we may also engage contract data processors to handle advertising measures and advertising for us, who process your data exclusively for the purposes described above at our direction (see Chapter E below).

Disclosure to partners of CARINDEX AG under this Chapter E generally occurs with pseudonymized or anonymized data. To the extent compatible with the purposes described in Chapter C above or legally permissible, your data as well as usage data related to your person or user account may be used and disclosed to partners of CARINDEX AG for evaluation, improvement, and customized design of our offerings, customer care, personalization, and marketing purposes. If your consent is required for this purpose, we will obtain it from you in advance. Such consent can be revoked at any time. If no consent is required, the disclosure of your data is based on our legitimate interest or the legitimate interests of a partner of CARINDEX AG, in accordance with applicable data protection law, to enable the use of our website (establishing connections), to ensure and enhance the security and stability of our systems and offerings, to analyze, statistically evaluate, adapt, and improve the use of our offerings, to display or send you advertising, and to enable the optimization of our internet offerings.

We may disclose your data to shareholders of CARINDEX AG in accordance with Chapter E. The shareholders may in turn pass on the data to their held subsidiaries, provided they process your data only for the same purposes (described below) as the shareholders themselves are permitted to do.

Such disclosure is for the evaluation, improvement, and customized design of the products and services of our shareholders, personalization, marketing purposes, as well as fraud and abuse prevention. The disclosure of data as described herein is only made if legally permissible or if we have obtained your consent in advance. Such consent can be revoked at any time.

If you click on integrated offers from third parties or use integrated contact forms from third parties, we may disclose your data according to the offer or contact form. In addition, we may disclose your data to third parties when offering personalized advertising or advertisements on our offerings. Furthermore, your data may be disclosed to third parties when we offer an offer together with a third party.

Apart from the disclosure of your data as described above, we will only disclose your data if you have expressly consented to it in accordance with applicable data protection law, if there is a legal obligation to do so, or if it is necessary to enforce our rights, especially to enforce claims from the contractual relationship, which represents a predominant interest of ours.

In the event of a sale, merger, or other reorganization of some or all of our company“s assets, personal data may be transferred, sold, or otherwise shared with third parties as part of such transaction or reorganization.

If we advance payments, for example, in the case of a purchase on account, we may, if necessary for the protection of our legitimate interests in concluding contracts with solvent customers (in accordance with applicable data protection law), obtain credit information based on mathematical-statistical methods from a credit agency. For this purpose, we transmit the personal data required for a credit check to a credit agency and use the information obtained about the statistical probability of a payment default to make a decision about the establishment, execution, or termination of the contractual relationship. The credit report may include probability values (score values) calculated on the basis of scientifically recognized mathematical-statistical methods, which, among other things, incorporate contact data into their calculation. Your legitimate interests will be taken into account in accordance with legal provisions.

Any other disclosure, transmission, or sale of your personal data to third parties outside of CARINDEX AG and our shareholders will not occur unless it is necessary for the processing of a contract you have concluded with us or you have expressly consented to it.

Cookies help to make your visit to our website easier, more pleasant, and more meaningful, as well as to ensure the functioning of our offerings and portals and to provide you with interest-based advertising. Cookies are information files that your web browser automatically stores on the hard drive of your computer when you visit our website. Our digital offerings can generally be used without accepting cookies, but individual functionalities may be restricted.

When using our website, the cookies used by us may collect and store usage data such as the IP address of your device, visited pages, browser used, date, time, etc. These data generally do not allow conclusions to be drawn about your person, unless you are logged into your user account. Cookies are stored in a text file on the computer when the browser is closed and are retrieved when the web server is accessed again. Cookies do not damage the hard drive of your computer, nor do they transmit personal data of users to us.

For example, we use cookies to recognize you after your first visit to our websites, offerings, or portals; in this case, the user is generally not recognized, only the computer used or the mobile device or the browser used. Furthermore, we use them to track who has visited our offerings and portals and to derive how frequently certain pages or offerings are visited, which parts of the portal are particularly popular, and to generally collect information about how the portal is used. We also use other cookies to allow you to move freely on our portal and use its functionalities, for example, when accessing protected areas, for efficient navigation between different pages, and for storing preferences. Such cookies may also be necessary to use shopping carts or payment functions. Cookies can also be used to use options chosen by you or decisions made as settings to make your visit to the portal more convenient. In general, the use of cookies is intended to improve our services, make them more effective and secure.

Using cookies also enables us to gather information to offer you advertising that may be of interest to you. Ultimately, our cookies help tailor online advertisements more closely to your potential interests, thereby reducing the display of advertising that may not be of interest to you or may be of minimal interest. Most internet browsers accept cookies automatically. However, you can configure your browser at any time to prevent cookies from being stored on your computer or to receive a notification whenever a new cookie is received (visit the corresponding settings in your browser for this purpose). You can also delete cookies on your computer or mobile device by using your browser's corresponding function.

You can decide at any time whether you want to benefit from targeted advertising tailored to your potential interests or not. However, rejecting targeted advertising does not mean that you will no longer see online advertisements. It simply means that the advertising displayed on the websites may not be tailored to your presumed interests and may therefore be less relevant to you. For further information about the cookies we use and corresponding links, please visit www.carindex.ch. Most of the cookies we use are temporary session cookies that are automatically deleted from your computer or mobile device after the end of the browsing session. However, we also use permanent cookies. These cookies remain stored on your computer or mobile device after the end of the browsing session. Depending on the type of cookie, these permanent cookies remain stored on your computer or mobile device for a period between one month and ten years and are only automatically deactivated after the programmed time has elapsed.

The use of our digital offerings is also measured and evaluated using various technical systems, mostly provided by third parties such as Google Analytics. These measurements can be both anonymous and personally identifiable. It is possible that the data collected by us or the third-party providers using these technical systems may be further passed on to third parties for processing.

We use Google Analytics, a service provided by Google Inc. With this service, the collected data can generally be transmitted to a Google server in the United States, with IP addresses being anonymized using IP anonymization, making identification impossible. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data from Google. You can opt out of the collection and processing of this data using Google Analytics by setting an opt-out cookie that prevents the future collection of your data when visiting this website: http://tools.google.com/dlpage/gaoptout?hl=de. For the non-personal analysis of the usage of our portals and for statistical evaluation, the tool “Hotjar“ is used on the websites. Information such as operating system, browser, geographical origin (country only), pages visited during the current visit, and interactions (e.g., mouse movements, clicks, and inputs on the website) are recorded. For further information about the systems used by us, especially regarding opt-out options, please visit www.carindex.ch.

Our digital offerings are connected in various ways with functions and systems of third parties, such as through the integration of plug-ins from third-party social networks like Facebook, Instagram, Google+, YouTube, or X (Twitter).

If you have a user account with these third parties, it may also be possible for them to measure and evaluate your use of our digital offerings. Further personal data, such as IP address, personal browser settings, and other parameters, may be transmitted to these third parties and stored there. When using a social login service such as Facebook Connect, the provider may transmit to us personal data such as name, email address, and profile picture that they have stored about you. We have no control over the use of personal data collected by third parties in this way and assume no responsibility or liability. We refer to the detailed additional information linked above. Information on the collection and use of data by third-party providers can be found in the data protection notices of the respective third-party providers.