Privacy Policy — Website

Note: This English translation is provided for convenience only. The legally binding version is the German original.

Preamble

The protection of your personal data is important to us. With this privacy policy, we inform you about the nature, scope and purpose of the processing of your personal data when you visit our publicly accessible marketing websites.

We operate a data protection management system and work closely with external specialist bodies in order to meet the applicable legal requirements at all times. In doing so, we observe the requirements of the EU General Data Protection Regulation (GDPR), the revised Swiss Data Protection Act (revFADP) and other relevant national data protection provisions.

This privacy policy reflects the status as of 2026-06-11. We reserve the right to make changes – you can find the current version at any time under: Legal Notices

Important note: In contrast to our marketing websites (which are covered by this privacy policy), we do not use any cookies for marketing or advertising purposes on our Platform. There is no user-based advertising, no profiling and no retargeting. See the Privacy Policy for the use of the beUnity Platform.

General information

Scope

This privacy policy applies to the use of the publicly accessible websites of beUnity AG, in particular under the following domains:

• www.beunity.io
• as well as all associated subdomains and landing pages (e.g. campaign- or product-related)

It explains how and for what purpose personal data is processed when you visit our websites – regardless of whether access takes place via desktop, tablet or smartphone.

Controller

The controller for data processing within the meaning of the GDPR and the revFADP is:

beUnity AG
Gattikonerstrasse 123
8136 Gattikon, Switzerland
E-mail: datenschutz@beunity.io

Further details can be found in the Imprint.

Definitions

Where this privacy policy uses terms such as "personal data", "processing", "controller", "processor" or "data subject", their meanings are governed by the definitions in Art. 4 GDPR.

These terms are gender-neutral and refer to all data subjects regardless of gender or identity.

Purpose and scope of data processing

We process personal data exclusively for the following purposes:

• Display and optimisation of the websites
• Statistical analyses (web analytics)
• Communication via contact forms or e-mail
• Sign-up for newsletters and events

Data collected

When you visit our website, we automatically collect:

• IP address
• Browser type/version
• Operating system used
• Referrer URL
• Date and time of website visits
• Pages visited (interactions)

For forms or newsletter sign-ups, we additionally store:

• First name, surname, e-mail address
• Any further voluntary details (e.g. place of residence)

Cookies & tracking

We use cookies and comparable technologies to ensure the operation of the website and to analyse its use. On your first visit, our cookie banner (CookieYes) asks for your consent. You can adjust or withdraw your choices at any time via the "Cookie settings" link in the footer.

• Required cookies: Necessary for the operation and security of the site — this includes the cookie that stores your cookie choices (CookieYes). Legal basis: Art. 6 para. 1 lit. f GDPR / revFADP.
• Web analytics (PostHog, EU Cloud): To optimise the website, we use PostHog in the EU Cloud (hosted in the EU, Frankfurt). PostHog operates cookieless — no data is stored on your device — and analysis takes place in anonymised form; no user-based advertising profiling takes place. Legal basis: Art. 6 para. 1 lit. f GDPR / revFADP (legitimate interest in improving our offering).
• Marketing/advertising cookies: Set exclusively with your express consent via the cookie banner (Art. 6 para. 1 lit. a GDPR / revFADP), e.g. for advertising services of Meta (Facebook/Instagram), LinkedIn or Google Ads. Without your consent, these services remain deactivated.

Questions about cookies can be sent at any time to datenschutz@beunity.io.

Tools used & processors

We use the following third-party providers as processors pursuant to Art. 28 GDPR:

Embedded content (YouTube)

On individual pages we embed videos from YouTube (Google). When an embedded video is played, data (e.g. IP address) is transferred to Google and Google may set cookies. To the best of our knowledge, no transfer to Google takes place unless the video is played.

Newsletter

You can sign up for our newsletter. In doing so, we collect your e-mail address and voluntary details such as first name, surname or place of residence. Sign-up takes place via double opt-in. Processing and dispatch take place via our service provider HubSpot. You can unsubscribe at any time via the unsubscribe link or by e-mail to hello@beunity.io.

Contact forms

If you contact us via a form or by e-mail, we use your data exclusively to process your request. The form data is processed via our service provider HubSpot.

Social media

We maintain profiles on the following networks:

• Facebook (Meta)
• Instagram (Meta)
• LinkedIn
• Twitter (X)

When you visit these platforms, the respective privacy policies of the providers apply. We have no influence on their data processing.

Data transfers to third countries

Some of our service providers are based outside Switzerland or the EU (e.g. in the USA). In these cases, we ensure that appropriate safeguards exist in accordance with Art. 44 et seq. GDPR or the revFADP (e.g. EU standard contractual clauses).

Retention period and erasure

Personal data is stored only for as long as is necessary for the respective purpose or as required by statutory retention periods. The data is then routinely erased.

Your rights

Overview of your rights

You have the following rights under the EU General Data Protection Regulation (GDPR) and the revised Swiss Data Protection Act (revFADP):

• Information about the data stored about you
• Rectification of inaccurate or incomplete data
• Erasure ("right to be forgotten")
• Restriction of processing
• Data portability
• Objection to certain processing operations
• Withdrawal of consent given
• Right to lodge a complaint with a competent data protection supervisory authority

Legal foundations

Detailed information on these rights can be found in the respective legal texts:

• Chapter III of the EU General Data Protection Regulation (GDPR) on EUR-Lex
• Revised Swiss Data Protection Act (revFADP)

Right to lodge a complaint / legal protection

You have the right to lodge a complaint with a data protection supervisory authority –

• in the EU pursuant to Art. 77 GDPR,
• in Switzerland pursuant to Art. 15 revFADP.

To exercise your rights, you can contact us at any time at: datenschutz@beunity.io

Data security

We take appropriate technical and organisational measures (TOM) to protect your personal data against loss, misuse, unauthorised access or disclosure – in line with the current state of the art and the legal requirements (GDPR, revFADP).

These include in particular:

• Encryption of all data transmissions using TLS (Transport Layer Security)
• Access restrictions through role and authorisation concepts
• Firewalls, security updates and regular system checks
• Logging and monitoring of security-relevant events

The protective measures are continuously reviewed and adjusted as necessary to ensure an appropriate level of protection.