We process your data for the purposes we explain below. These purposes or the objectives underlying them represent legitimate interests of us and possibly third parties.

We process your data for purposes related to communication with you, in particular to respond to inquiries and to assert your rights and to contact you in case of queries.

For this purpose, we use in particular communication data and master data and, in connection with offers and services used by you, also registration data. We store this data in order to document our communication with you, for training purposes, for quality assurance and for follow-up queries. This includes all purposes in connection with which you and we communicate, whether in customer service or in consulting, in authentication in case of a use of the website or for training and quality assurance (e.g. in the area of customer service). We continue to process communication data so that we can communicate with you by email and telephone, as well as chat, social media, letter and/or fax. Communication with you usually takes place in connection with other processing purposes, e.g. so that we can provide services or answer an information request. Our data processing also serves to prove communication and its contents.

We process data for the establishment, administration and handling of contractual relationships.

We conclude contracts of various types with our business and private customers, suppliers, subcontractors or other contractual partners, such as partners in projects or with parties in legal disputes. In doing so, we process in particular master data, contract data and communication data and, depending on the circumstances, also registration data of the customer or the persons to whom the customer mediates a service. This includes, for example, the recipients of our products or services who receive vouchers and invitations from our customers and can in turn become our customers when redeeming them. In this case, we process data for the processing of the contract with these recipients, but also with the contractual partners who invited them. As part of the business initiation, personal data - in particular master data, contract data and communication data - is collected from potential customers or other contractual partners (e.g. in an order form or contract) or results from a communication. Also in connection with the conclusion of the contract, we process data to check creditworthiness and to open the customer relationship. In some cases, this information is checked for compliance with legal requirements.

In the context of processing contractual relationships, we process data for the administration of the customer relationship, for the provision and demand of contractual services (which also includes the involvement of third parties, such as logistics companies, security services, advertising service providers, banks, insurance companies or credit agencies, which can then in turn provide us with data), for consulting and customer support. The enforcement of legal claims arising from contracts (debt collection, legal proceedings, etc.) is also part of the processing, as is accounting, termination of contracts and public communication.

We process data - if given - for marketing purposes and to maintain relationships, e.g. to send our customers and other contractual partners personalized advertising for products and services from us and from third parties (e.g. advertising contractual partners).

This can be done, for example, in the form of newsletters and other regular contacts (electronically, by mail, by telephone), via other channels for which we have contact information from you, but also as part of individual marketing actions (e.g. events, competitions, etc.) and may also include free services (e.g. invitations, vouchers, etc.). You can refuse such contacts at any time or revoke your consent to be contacted for advertising purposes. With your consent, we can target our online advertising on the internet more specifically to you.

For example, with your consent, we send you information, advertising and product offers from us and from third parties within and outside the group (e.g. advertising contractual partners), as printed matter, electronically or by telephone. For this purpose, we process mainly communication and registration data. Like most companies, we personalize messages so that we can provide you with individual information and make offers that meet your needs and interests. To do this, we link data that we process about you and determine preference data and use this data as a basis for personalization. We also process data in connection with competitions, prize draws and similar events.

Relationship maintenance also includes the - possibly based on behavioral and preference data personalized - addressing of existing customers and their contacts. As part of relationship maintenance, we may also operate a Customer Relationship Management system ("CRM") in which we store the data necessary for maintaining the relationship with customers, suppliers and other business partners, e.g. about contact persons, relationship history (e.g. about products and services purchased or supplied, interactions, etc.), interests, wishes, marketing measures (newsletters, invitations to events, etc.) and other information.

All these processing activities are important for us not only to be able to advertise our offers as effectively as possible, but also to make our relationships with customers and other third parties more personal and positive, to concentrate on the most important relationships and to use our resources as efficiently as possible.

We further process your data - if given - for market research, to improve our services and our operations and for product development.
We strive to continuously improve our products and services (including our website) and to be able to react quickly to changing needs. We therefore analyze, for example, how you navigate through our website or which products are used by which groups of people in which way and how new products and services can be designed (for further details, see section 12). This gives us indications of the market acceptance of existing products and services and the market potential of new products and services. For this purpose, we process in particular master data, behavioral and preference data, but also communication data and information from customer surveys, surveys and studies and other information e.g. from the media, from social media, from the internet and from other public sources. Wherever possible, we use pseudonymized or anonymized data for these purposes. We may also use media monitoring services or conduct our own media monitoring and process personal data in the process to conduct media work or to understand and react to current developments and trends.

We may also process your data for security purposes and for access control.

We continuously check and improve the appropriate security of our IT and our other infrastructure (e.g. buildings). Like all companies, we cannot rule out data security breaches with absolute certainty, but we do our best to reduce the risks. We therefore process data, for example, for monitoring, controls, analyses and tests of our networks and IT infrastructures, for system and error checks, for documentation purposes and in the context of security backups. Access controls include, on the one hand, the control of access to electronic systems (e.g. logging in to user accounts), and on the other hand, physical access control (e.g. building access). For security purposes (prevention and investigation of incidents), we may also keep access logs or visitor lists and use monitoring systems (e.g. security cameras). We inform you about monitoring systems at the relevant locations by means of appropriate signs.

We process personal data for compliance with laws, instructions and recommendations from authorities and internal regulations ("Compliance").

This includes, for example, the legally regulated fight against money laundering and terrorist financing. We are obliged to carry out certain checks on customers ("Know Your Customer", "KYC") or to report to authorities. The fulfillment of information, disclosure or reporting obligations, e.g. in connection with supervisory and tax law obligations, also requires or involves data processing, e.g. the fulfillment of archiving obligations and the prevention, detection and investigation of criminal offenses and other violations. This also includes the receipt and processing of complaints and other reports, the monitoring of communication, internal investigations or the disclosure of documents to an authority if we have sufficient reason to do so or are legally obliged to do so. We may also process personal data about you in connection with external investigations, e.g. by a law enforcement or supervisory authority or a commissioned private entity. Furthermore, we process data to support our shareholders and other investors and to fulfill our related obligations. For all these purposes, we process in particular your master data, your contract data and communication data, but possibly also behavioral data and data from the categories of other data. In the case of legal obligations, these may be Swiss law, but also foreign provisions to which we are subject, as well as self-regulation, industry standards, our own "Corporate Governance" and official instructions and requests.

We also process data for purposes of our risk management and as part of prudent corporate governance, including business organization and corporate development.
For these purposes, we process in particular master data, contract data, registration data and technical data, but also behavioral and communication data. For example, as part of our financial management, we must monitor our debtors and creditors, and we must avoid becoming victims of crimes and abuses, which may require the evaluation of data for corresponding patterns. For these purposes and for your and our protection against criminal or abusive activities - if given - we may also carry out profiling and create and process profiles. As part of planning our resources and organizing our operations, we need to evaluate and process data on the use of our services and other offers or exchange information about them with others (e.g. outsourcing partners), which may include your data. The same applies to services provided to us by third parties. As part of corporate development, we may sell businesses, business units or companies to others or acquire them from others or enter into partnerships, which may also lead to the exchange and processing of data (including yours, e.g. as a customer or supplier or as a supplier representative).

We may process your data for other purposes, e.g. as part of our internal processes and administration or for training and quality assurance purposes.
These other purposes include, for example, training and education purposes, administrative purposes (such as the management of master data, accounting and data archiving and the testing, management and ongoing improvement of IT infrastructure), the preservation of our rights (e.g. to enforce claims in court, pre-trial or out-of-court and before authorities at home and abroad or to defend ourselves against claims, e.g. by securing evidence, legal clarifications and participation in judicial or official proceedings) and the evaluation and improvement of internal processes. We may use recordings of (video) conferences for training and quality assurance purposes. The preservation of other legitimate interests is also part of the further purposes, which cannot be exhaustively named.

Specific facts