1 INTRODUCTION

This privacy notice applies to personal data processed by Rata Services SA and its contractors (“Rata Services” or “Company””) including e.g. any information provided when you exchange emails with Rata Services or other storage of data.

2 WHO IS RESPONSIBLE: CONTACT DETAILS

Rata Services SA is not intending to be the “controller” as pursuant to the General Data Protection Regulations (GDPR) and the Swiss Federal Data Protection Act (nLPD), with respect to the processing of personal data undertaken on behalf of any individual legal entity. However Rata Services is committed to ensure compliance with all applicable laws relating to data privacy. If you have any questions or requests related to our processing of your personal data please contact us.

3 PURPOSE OF PROCESSING -WHAT DATA ARE USED FOR

3.1 General

We only process personal data as necessary for the administration of the relationship with the contracting entity. Specifically, this may involve processing personal data such as name, address, telephone number and other contact information, national identity number, position and role, employer, account number, customer/supplier history (what was purchased when, etc.), information about meetings, communication and correspondence, cloud services, logins and activity on website and information required for audit purposes. In some case we will have to conduct due diligence reviews, and data from such reviews will be processed. In general, the Company does not process special categories (sensitive) personal data.

3.2 The use of cookies

We use cookies on our Website and we may receive information about you from the use of cookies when you access our Website. The Company may use cookies for the purposes of facilitating basic website functionality, enhancing the user experience or supporting the contracting entity's IP address, operating system and the browser used. This information does generally not include data that allows for individual identification of the information to a specific user.

4 LEGAL BASIS

Personal data may be processed where the processing is necessary for the performance of a contract with the principal contracting entity or in order to take steps at the request of a contracting entity prior to entering into a contract. Legal basis for the processing may also be Rata Services' legal or regulatory requirement to process the data or where it is required to protect a person's vital interests or where such processing is necessary for the performance of a task carried out in the public interest.

5 PERSONAL DATA RELATING TO OTHER INDIVIDUALS

We might receive personal data relating to third parties from the contracting entity. Before processing any personal data on third parties, the contracting entity must ensure that they have provided the relevant third parties with any necessary privacy notices in connection with Rata Services processing of their personal data.

6 RECIPIENTS – TRANSFER

Rata Services will restrict access as instructed by the contracting entity but the Company may share such data with sub-suppliers and other partners and, when specifically required, with advisers, auditors, lawyers, IT consultants and others. The Company may also transfer personal customer data abroad, including to non-EU/EEA countries whose data privacy laws do not offer the same level of protection as under the GDPR. The typical reasons for such transfers include the use of external data storage services. The transfer of personal data abroad will only take place if there is a legal basis for such transfer.

7 USE OF THIRD PARTY LINKS

Rata Service Website may include links or forms to third party websites. Clicking on those links and/or providing information in forms related to third parties may allow third parties to collect and/or share data about you. Data processed under this section are not controlled or accessible by Rata Services and we encourage you to read the privacy notice on each third party website you visit or access from our website.

8 FOR HOW LONG IS DATA STORED?

Personal data related to you will only be stored for as long as necessary for the purpose of the processing, and will then be erased.

9 HOW IS PERSONAL DATA PROTECTED?

The Company has implemented the technical and organisational security measures to ensure that personal data is processed in a secure manner. The security measures are considered adequate however the need for additional security measures shall be evaluated on an on-going basis based on the contracting entity's requirements.

1. WHAT ARE COOKIES?

Cookies are text files containing limited amount of information which are placed on your device. Cookies are used to store certain data e.g. to keep track of pages you visit on a website, identify the device you use and remembering settings such as language preferences for your next visit.

We use cookies on our website and we may receive information from you through the use of cookies when you access our website. When you first access our website, a popup banner gives you choice to accept all cookies, refuse all cookies or manage cookies. By clicking “I accept all cookies”, you agree to our use of your information as described in this Policy. By clicking “I refuse all cookies”, please be aware that non-essential cookies will be disabled and not all features of the website may operate as intended. By clicking “Manage cookies”, you will be able to select which cookies to accept.

See further details below on which categories of cookies we use and why we use them. See also below a description on how to give or withdraw your consent or manage your cookies preferences at any time and how to remove cookies.

2. WHY DO WE USE COOKIES?

2.1 Essential cookies

These cookies are required for basic website functions such as navigation and the website will not function properly without the use of these cookies.

2.2 Cookies for site experience

These cookies are used to enhance the site experience and they might be able to e.g. identify the device you use to access the website. Generally no personal identifiable data are collected by these cookies.

2.3 Cookies for statistics

These cookies help us collect statistics on our visitors to understand how you interact with the website by collecting and reporting information from you anonymously.

3. EMBEDDED CONTENT

We may embed content from third parties' e.g. video content and application forms. These third parties may use cookies and may receive information collected from those cookies. These parties may also use other categories of cookies than those listed above. Please refer directly to each third party website for more information on how they use cookies.

4. HOW TO MANAGE COOKIES

Recent version of all major browsers gives you as a user control over cookies on your device. You can choose to accept all, certain or no cookies. Information about how to manage cookies should be provided under the help section of your browser.

Rata Services SA Terms and Conditions, September 2024

1. DEFINITIONS

1.1 “Agreement” means these Terms and Conditions, Privacy Policy and the Proposal made available to the Client, and subsequent contract if any.

1.8 “Proposal” means the scope of work including fees and pricing from Rata Services specific to the Client's needs.

2. SUPPORT SERVICES

2.8 Price adjustment: Prices for operational services and hourly rates may be adjusted at the beginning of every calendar year by an amount equivalent to the increase in Swiss Consumer Price Index.

3. RATA SERVICES RESPONSIBILITIES

3.4 Subcontractors. Rata Services may subcontract all or a portion of its responsibilities without Client's prior approval, as long as Rata Services remains responsible for its obligations under the Agreement.

4. RESPONSIBILITIES OF CLIENT

4.5 For the provision of the Support Services, the Client shall make their Microsoft tenant available for use by Rata Services owned Microsoft information portal, which is used with the Client's tenant as necessary for the provision of Services.

5. RELATIONSHIP OF PARTIES

Rata Services is solely responsible for the payment of all wages and other compensation and benefits due to Rata Services employees, all employer and withholding taxes, and social or medical coverage as applicable.

6. CONFIDENTIAL INFORMATION

6.4 Rata Services may from time to time issue press releases, or make public disclosure of the existence or status of this Agreement, including but not necessarily limited to the use of Client's name in its promotional materials and with actual and prospective customers.

7. WARRANTIES

7.3 Each Party warrants and represents that when contracting that:

• a) it has the full power and authority to enter into and perform its obligations, and
• b) the provisions of these Terms and conditions constitute valid and binding obligations enforceable against it in accordance with the terms of this Agreement.

8. INDEMNIFICATION

The indemnified party shall provide cooperation and participation of its personnel as required for such defence at the cost and expense of the indemnifying party.

9. TERM AND TERMINATION

10.4 Effect of Termination: Upon termination of this Agreement or the expiration of this Agreement, without renewal of the Agreement, it shall not affect any compensation due to Rata Services up to the date of the end of the current term.

10. NON-INTERFERENCE WITH EMPLOYEES

Generalized solicitations by other parties not associated with the Client, such as job postings and newspaper advertisements, shall not be considered to be covered by this Section.

11. FORCE MAJEURE

A Party whose obligations have been suspended as aforesaid shall resume the performance of such obligations as soon as reasonably possible after the removal of the cause and shall so notify the other Party.

12. GOVERNING LAW & DISPUTE RESOLUTION

If the Parties are unable to resolve the dispute at this level, the dispute shall be escalated to give the other Party written notice of the dispute, setting forth the dispute with the Disputing Party's position and all relevant facts and support.

13. INTELLECTUAL PROPERTY

Ownership by Rata Services: All work product is provided to Client on a nonexclusive, non-assignable basis and Rata Services retains all Ownership Rights therein.

14. AUDIT RIGHTS

Client will provide Rata Services a minimum of fifteen (15) business day's written notice of an audit. Any access granted shall not unreasonably interfere with Rata Services' operation or security needs. Rata Services shall have the right to review any audit reports or work papers generated by the audit.