PRIVACY POLICY Effective: [April 2026]

1. Data Controller

The entity responsible for processing your personal data within the meaning of the Swiss Data Protection Act (DSG) is:

EFEXCON GROUP HOLDING AG

Baarerstrasse 52 6300 Zug Switzerland

[email protected] +41 41 5100 675

2. Principles of Data Processing

We process personal data only to the extent necessary for the respective purpose. We base this on the following legal grounds:

• Consent, when you actively provide us with data (e.g., via the contact form).
• Legitimate interests for the secure operation of our website (server log files).
• Legal obligations, to the extent that we are required to retain or disclose data.

3. Contact Form

When you use our contact form, we collect your name, email address, message content, and any optional additional fields. The data is used exclusively to process and respond to your inquiry and is not shared with third parties. The legal basis is your consent. The data is stored until the inquiry is fully processed and is then deleted or archived in accordance with legal retention periods.

4. Server Log Files

When you visit our website, the web server automatically collects technical data: anonymized IP address, browser type, operating system, date and time, page accessed, and referrer URL. This data is used to ensure proper operation, troubleshoot issues, and prevent misuse. It is generally deleted automatically after 30 days and is not combined with other personal data.

5. Images and Media Content

The images used on this website come exclusively from the following sources:

• Canva: Licensed images and graphics via the Canva platform (canva.com), used in accordance with the applicable Canva license terms.
• Own material: Our own photographs and graphics. The individuals depicted in these images have consented to their publication.

No personal data regarding the image sources is collected or shared.

6. Cookies and Tracking

This website does not use tracking cookies or any analytics or marketing tools (e.g., Google Analytics, Meta Pixel). Technically necessary session cookies may be used, which serve exclusively to ensure the proper functioning of the website and are automatically deleted when the browser is closed. A cookie banner is therefore not required.

7. Disclosure of Data to Third Parties

We do not, as a rule, disclose your personal data to third parties. Disclosure occurs only in exceptional cases, such as by official order or legal obligation, or to assert or defend legal claims.

Our web host processes technical access data on servers in Switzerland. A data processing agreement is in place.

8. Retention Period

We store personal data only for as long as necessary for the respective purpose or as required by statutory retention periods:

• Contact inquiries: until fully processed, max. 12 months
• Server log files: 30 days
• Business correspondence: 10 years in accordance with Swiss Code of Obligations Art. 958f

After the respective period has expired, the data will be securely deleted or irrevocably anonymized.

9. Your Rights

Under the revised Data Protection Act (revDPA, in force since September 1, 2023), you have the following rights: access to your stored data (Art. 25 DPA), correction of inaccurate data (Art. 32 DPA), deletion of your data provided there is no legal obligation to the contrary, restriction of processing, objection to processing, and lodging a complaint with the Federal Data Protection and Information Commissioner (FDPIC).

To exercise your rights, please contact: [email protected]

10. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy at any time to comply with legal requirements or to reflect changes to our services. The current version is available on this website. We will notify you in an appropriate manner in the event of significant changes.