Data protection and data security are important to RALY GmbH (RALY; we, us). This privacy policy describes how we collect and process personal data when you visit a website operated by RALY or use our services.

1. Collection and processing of personal data

Information we collect and process to provide the website and services

You can visit the website and obtain information about RALY and our services without telling us who you are. As with any connection to a web server, the server on which we provide the website automatically logs and stores certain technical data for a short period of time. This includes the IP address and operating system of your device, the date and time of use, and the type of browser you use to access the website. This is necessary for the optimal and secure provision of the website.

Personal data that we collect and process to respond to your enquiries

When you contact us via our contact forms or by email or telephone, we collect and process the information you provide to us. This regularly includes personal data such as your name, (business) email address and telephone number, as well as information about any affiliation with a company you work for or represent.

Personal data that we collect and process to enable access to and use of the services

We collect and process the following types of personal data to enable you to use our services: your organisation or company, your name, your e-mail address, your address, your phone number and other data related to your request.

Use and optimisation of our newsletter

When you sign up for our newsletter, we collect the data you provide to us. This includes general personal data such as first name, last name and email address. We use analytics services to measure and analyse the use of our newsletter. The analytics services collect and analyse usage data such as the number of people who have opened a newsletter or clicked on certain posts. On this basis, we receive evaluations. These allow us to optimise our newsletter and provide you with content that interests you.

You can also inform us at any time that you no longer wish to receive our newsletter in the future. To do so, please use the unsubscribe link at the end of the newsletter. If you click the link, we will no longer measure and analyse your use of the newsletter in the future.

2. Notice about our use of cookies

We use cookies, tags and similar technologies on the website to provide you with the best possible user experience and to help us improve the website. Cookies are text files that are downloaded to your computer or mobile device when you visit a website or use an app.

Some of the cookies we use are necessary to make certain features of the website available. In addition, we use cookies to enable web analytics. You can set your preferences in your browser.

3. Purposes and legal bases

We collect and process your personal data to inform you about our range of services and to provide our services to you or the company or organisation you represent. This includes the following purposes:

• Providing the website.

• Responding to your enquiries

• Providing the services

RALY has a legitimate interest in this processing of your personal data in accordance with the purposes pursued. The data processing is also usually necessary for us to fulfill our contractual obligations to you or our contractual obligations to your company or organisation (in which we have a legitimate interest).

We also process your personal data (and certain non-identifiable technical data) for the following purposes. We have a legitimate interest in processing your personal data in accordance with these purposes:

• Analysis and improvement of website usage

• Sending information about new developments at RALY or new services or offers (you can inform us at any time that you do not wish to receive such information)

• Organisation of events

• Protection against misuse of our contact forms

• Fulfilment of legal obligations

• Enforcement of legal claims

The legal basis for the processing of personal data described in this Privacy Policy is therefore primarily our legitimate interest in pursuing the purposes described, our legitimate interest in fulfilling our contractual obligations to your company or organisation, or the need to fulfill our contractual obligations to you. In addition, we carry out some data processing in order to comply with our legal obligations (e.g. retention obligations).

We may separately ask for your consent to process your personal data for certain purposes (e.g., our transfer of your personal data to a third party) for the third party's own purposes that are compatible with the original purposes. Please inform yourself in the data protection guidelines of the respective third party about the further processing of your personal data.

If you give us your consent, we will process your personal data only to the extent and to the extent based on that consent that there is no other appropriate legal basis for doing so or as set out above and only to the extent that we need a legal basis or justification for the relevant data processing. You have the right to revoke any consent you have given. The revocation has no effect on the legality of data processing that has already taken place.

4. Data security

In the interest of the integrity and confidentiality of personal data, we take appropriate technical and organisational measures. In accordance with our risk assessment, we implement in particular access controls, access controls as well as procedures for the regular review, assessment and evaluation of the effectiveness of the measures

5. Duration of data processing

We store your personal data only to the extent and for as long as necessary to fulfil the purposes described in this privacy policy, we have a legitimate interest in storing it or are obliged to do so by law.

6. Place of data processing

We store and process your personal data in Switzerland. However, in order to achieve some of the purposes described in this Privacy Policy, it may also be necessary for us to process your personal data in the EU or, alternatively, in countries outside of Switzerland and the EU or to transfer it to such countries.

We transfer data to countries without adequate data protection on the basis of standard contractual clauses or legal exceptions (necessity to fulfil our contractual obligations).

7. Disclosure of your personal data to third parties

To the extent necessary to provide the website and our services or to pursue the legitimate interests described herein, we share your personal data with the following categories of recipients:

• External service providers,

• If applicable, suppliers or other business partners with whom we need to coordinate the processing of your enquiry,

• If necessary, authorities and courts.

Such recipients are generally located in Switzerland or in an EU or EEA member state. If we need to transfer your personal data to recipients in countries without an adequate data protection standard, we will do so on the basis of appropriate safeguards or otherwise in accordance with the applicable legal provisions on the international transfer of personal data.

8. Your rights in relation to your personal data

You have the following rights in relation to our processing of personal data relating to you:

• The right to obtain information about the personal data we process about you

• The right to obtain a copy of your personal data

• The right to correct your personal data

• The right to have your personal data deleted

• The right to object to the processing of your personal data.

Please note that exceptions apply to these rights. Where permitted by law, we may refuse your request to exercise these rights. In particular, we may need to continue to process and retain your personal data in order to fulfil a contract with you or your company or organisation, to comply with legal obligations or to protect our own legitimate interests. However, you have the right to lodge a complaint with a competent supervisory authority.

9. Responsible Party / How to contact us

RALY GmbH, Märzengasse 23, CH-5430 Wettingen, Switzerland is responsible for the data processing described in this privacy policy.

If you have any questions about data protection at RALY or wish to exercise your rights as a data subject under applicable data protection law, you can contact us at privacy@raly.ch.

10. Changes to this privacy policy

We reserve the right to change this privacy policy at any time. The version provided on our website applies.

Last updated: 19 June 2025