Politique de confidentialité

In this privacy policy (the "PrivacyPolicy") we, Egidays SA (hereinafter "Egidays", "we",“us” or “our”), explain how we collect and process some personal data in connection with your consultation of our website <www.egidays.com> (the "Website") in particular. The Privacy Policy may not cover all of our data processing activities and may be superseded by specific information we provide for certain of our processing activities. In this Privacy Policy, the term "personal data" refers to any information that relate to an identified or identifiable individual in the meaning of applicable data protection laws.

If you provide us with personal data of other individuals (e.g. about family members or work colleagues), it is your excusive responsibility to ensure that the individuals concerned are aware of this PrivacyPolicy and that you provide us with their personal data only if authorized todo so and if such personal data is accurate and up to date.

1 Who are we?

The party responsible as data controller forthe processing of your personal data described in this Privacy Policy is EgidaysSA, Route de Suisse 11 c/o Noëlle Demole, 1297 Founex, Switzerland.

If you have any questions or requestsrelating to this Privacy Policy or to the processing of your personal data in connectionwith your use of the Website, please contact us at the following address:

Egidays SA, Route deSuisse 11 c/o Noëlle Demole, 1297 Founex, Switzerland

E-mail: noelle.demole@egidays.com.

2 What personal data do weprocess?

We primarily process personal data about usersof our Website, our customers, potential customers, business partners andprivate individuals, such as persons reaching out to us with business or generalinquiries or further to a specific interest.

We usually collect personal data directlyfrom the persons concerned but, if and to the extent legally admissible, we mayalso collect personal data from publicly available sources (such as the debtenforcement register, the land register or the commercial register, the press,the Internet) or from any other third parties, including background screeningagencies, insurance companies, brokers, energy consultants or legal, tax,hiring or media advisors.

In addition to the data you have provided directly to us, the categories of data about you that we collect from third parties may typically include information from public registers, information relating to your position and professional activities, your personal background, information such as your financial history, professional or business background, criminal history, personal reputation and integrity, legal and regulatory compliance and sources of funding, bank details, contact details(e.g. name, address, telephone number, e-mail address, date of birth),information about you found in the media or on the Internet, your possible interests as well as other socio-demographic data and data relating to your use of our Website (such as IP address, MAC address of your smartphone or computer, information about your device and settings, cookies, date and time of your visits, sites and content consulted, applications used, referring website, location data).

3 Why do we process personal data?

In accordance with applicable law and where applicable, Egidays may process personal data for the following purposes:

- to provide and develop our products, processes, services and websites (including but not limited to theWebsite), applications and other platforms on which we may operate;

- to communicate with you and process your requests or inquiries (e.g. general request for information, media inquiry or a request from you concerning the exercise of your rights);

- to assess and process business requests or job applications from prospects;

- to the extent permitted by law, to advertise and market our products and services, including but not limited to through the organization of events or the processing of sales and marketing communications (unless you are not interested);

- for market research and tobetter understand you as a customer and your interests;

- for media and press monitoring;

- to ensure efficient management of the administrative and technical aspects of our business and proper conduct of our operations, including our computer systems, websites, apps and other applications, as the case may be;

- to comply with applicable legaland regulatory framework (such as tax and accounting regulations) and our internal rules such as our ethical standards;

- assert and defend our rights inlitigation and legal proceedings;

- fornetwork and information security purposes, i.e. to take measures to protect ourand your information from loss, damage, theft or unauthorized access; and/or

- to guarantee the security of our premises, systems, property, assets and interests as well as the protection of any persons working with us.

4 Do we use cookies, tracking or similar technologies to monitor our Website?

This Website uses cookies and similar technologies to enable basic features of the Website (necessary cookies) and to help us understand how you interact with the Website by providing information on metrics such as the number of visitors, bounce rate or traffic source (analytics cookies). We may also use cookies to enhance the user experience by remembering your preferences and behaviors (preference cookies) and to show personalized ads more relevant to you and to improve marketing campaigns (marketing cookies).

For more details on the cookies and other similar technologies we may use, please refer to our cookie banner and related information available on our Website.

5 Do we share your personal data?

In the course of our business activities and in accordance with the purposes described in section 3 above, we may transfer personal data to third parties, insofar as such transfer is authorized and we deem it appropriate, so that these third parties may process the data on our behalf or, as the case may be, for their own purposes. In particular, the following categories of data recipients ("recipients") may receive some personal data from us:

- our service providers and subcontractors, which can be affiliates of Egidays or external service providers (such as customer service centers, HR and employment service providers, background screening agencies);

- information technology serviceproviders (for telecommunications, data storage and hosting and IT security services purposes in particular);

- marketing and public relationship agencies;

- financial establishments and insurance companies or brokers;

- partners, suppliers and other business associates;

- legal and tax advisors as well as other professional advisors (including but not limited to auditors);

- national and foreign authorities or courts, as well as arbitral tribunals;

- the media;

- the public, including users of our Website and social media; and/or

- other parties involved in possible or pending legal proceedings.

We take necessary measures to ensure that data recipients that process your personal data comply with applicable data protection laws and protect your information, just as we do. We only disclose personal information that is necessary for them to provide the service they are delivering. Wherever possible, we will endeavor to anonymize your information or use aggregated, non-specific data sets.

Please feel free to contact us (contact details in section 1above) if you would like further details about the recipients with whom we may share your information.

Where we choose to outsource certain services to carefully selected recipients, we take precautions regarding the practices of such recipient to ensure that your personal data is stored and processed in a lawful and secure manner. We will do our utmost to protect your personal data and will not sell it to third-party companies.

Egidays is hosting personal data in Switzerland and processes personal data within Switzerland. However, while most recipients are located in Switzerland, others may be located abroad and process personal data in countries such as in the United States.

If we transfer personal data to a third countrythat does not provide for an adequate level of data protection, we will takenecessary measures to guarantee an appropriate level of data protection of such personal data despite the data transfer to such third country. Such measures may typically include implementation of binding corporate rules or standard contractual clauses, in each case as approved by the competent supervisory authority. We may also rely on statutory derogations such as your consent, contract necessity, the recognition, safeguarding or exercise of rights, an overridingpublic interest, personal data made public without objection and/or theprotection of integrity of data subjects.

6 How long do we keep your personal data?

We only process and store your personal data for as long as necessary to meet the purposes described in section 3hereof. As soon as your personal data is no longer required for the above-mentioned purposes, it will be deleted or anonymized as far as possible.As a general rule, operational data (e.g. system logs) are stored for a shorter period, up to a maximum of twelve months.

Please note that we may retain relevant personal data for a longer period if we are required to (e.g. due to legal or contractual obligations for retention and documentation purposes) or if we have a legitimate interest in doing so (e.g. for evidential purposes in order to assert, exercise or defend our rights). In any event, personal data will not be kept for longer than legally permitted.

7 How do we protect personal data?

We take appropriate technical and organizational measures in order to avoid accidental or unlawful loss, deletion, destruction or modification or unauthorized disclosure or access to personal data and to protect their confidentiality, integrity, availability and traceability, such as by means of internal regulations, training, IT and network security solutions, physical and logical access controls and restrictions, encryption of data carriers and transmissions and pseudonymization.

8 What are your rights?

In accordance with and within the limits of applicable law, you may exercise your statutory rights to access, rectify, erase or request portability of your personal data, as well as to limit or object to its processing.

It is important that your personal data processed by Egidays is accurate and up-to-date. It is your responsibility to promptly inform us of any changes to personal data that you have provided us, as well as of any inaccuracies that you may have identified.

Please also note that exercising these rights may conflict with your contractual obligations, as applicable, which may result in consequences such as early termination of the contract or costs. If this is the case, we will inform you in advance, unless this has already been contractually stipulated.

As a general rule, the exercise of these rights presupposes that you can prove your identity (e.g. by producing a copy of your identity papers, if your identity is unclear or cannot be verified in any other way). To exercise these rights, please contact us at as set out in section 1 above.

In addition, any data subject may assert his or her rights before a court or lodge a complaint with the competent data protection authority. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).

9 Changes to this PrivacyPolicy

We may amend this Privacy Policy at anytime and without prior notice. The current version published on our Website is authoritative. If the Privacy Policy forms part of an agreement with you, we will inform you of any changes by e-mail or other appropriate means.

Privacy policy