Data Protection Statement of Mutter Partners AG

Version of 8 September 2026

1. Controller and contact

The controller responsible for the processing of personal data described in this statement is:

Mutter Partners AG

Neugasse 23, CH-6300 Zug, Switzerland

UID: CHE-327.310.104

E-mail: info@mutter-am.com (please mark your message "Data protection")

We have not appointed a data protection officer. Please address all data protection matters to the contact above.

2. Scope

This statement explains how we collect and process personal data when you visit our website www.mutter-am.com (the "Website") and when you contact us by e-mail.

It does not cover the processing of personal data of clients, or of the beneficial owners, controlling persons and representatives connected with a business relationship. That processing is governed by our client documentation and by our statutory and regulatory obligations, in particular under the Swiss Anti-Money Laundering Act; see section 11 below.

3. Legal framework

We process personal data in accordance with the Swiss Federal Act on Data Protection of 25 September 2020 (revFADP) and its implementing ordinance. Where the EU General Data Protection Regulation (GDPR) applies to a particular processing operation, we also comply with the GDPR.

4. Categories of personal data

Data generated automatically when you visit the Website. When you access the Website, your browser and device automatically transmit data which is recorded by our platform provider, including your IP address, the date and time of access, the pages and files retrieved, the referring website, your browser type and version, your operating system and language settings, and an approximate geographic location derived from your IP address.

Data you provide to us. If you contact us by e-mail, we process the data contained in your message, including your name, e-mail address, any other contact details you provide and the content of your enquiry.

The Website does not contain a contact form, a newsletter sign-up or a user account function.

5. Cookies

The Website is operated on the Squarespace platform, which places cookies on your device. Only necessary cookies are used. Non-essential cookies, including analytics cookies, are restricted in the platform settings and are not placed on your device.

Necessary cookies. These are required for the Website to function. Which of them are set depends on the features in use.

Crumb — protection against cross-site request forgery. Session.

Test — checks whether your browser supports cookies. Session.

RecentRedirect — prevents redirect loops. 30 minutes.

_ssid — recognises devices for fraud prevention. 4 years.

dds — records browser errors. 4 hours.

ddcookie_test, ddsite_test — check whether cookies are supported. Expire immediately.

Under Art. 45c of the Swiss Telecommunications Act, the processing of data on your device is permitted provided you are informed of the processing and its purpose and are told that you may refuse it. You may refuse or delete cookies at any time through your browser settings; instructions are available in the help pages of the common browsers. Refusing necessary cookies may impair the functioning of the Website.

6. Delivery of content

When you visit the Website, your browser retrieves content and technical resources from our platform provider and, where applicable, from other providers of such resources. In each case your IP address is transmitted to the provider concerned so that the content can be delivered to your device.

7. Purposes and legal basis

We process personal data in order to make the Website available and to keep it stable and secure, to respond to enquiries you send us, and to comply with our legal and regulatory obligations.

Where the GDPR applies, this processing is based on our legitimate interest in operating and securing the Website (Art. 6(1)(f) GDPR), on pre-contractual measures where you contact us about our services (Art. 6(1)(b) GDPR), and on our legal obligations (Art. 6(1)(c) GDPR). Under the revFADP, this processing does not require your consent. Where consent is required, we will ask for it separately and you may withdraw it at any time with effect for the future.

8. Recipients

We do not sell personal data and do not disclose it to third parties for their own marketing purposes.

The Website is hosted on the platform of Squarespace Ireland Limited, Ireland, which processes personal data on our behalf and on our instructions as our processor. Squarespace engages its own sub-processors for this purpose. Squarespace Ireland Limited may transfer personal data to its parent company, Squarespace, Inc., in the United States (see section 9).

We also use providers of IT and communication services, which process personal data on our behalf and on our instructions.

We may disclose personal data where we are required to do so by law, by a court order or by a decision of a competent authority, or where disclosure is necessary to establish, exercise or defend legal claims.

9. Disclosure abroad

Ireland. Ireland is a member of the European Economic Area and is recognised as providing an adequate level of data protection. No additional safeguards are required.

United States. Squarespace, Inc. has self-certified its adherence to the Swiss-U.S. Data Privacy Framework with the U.S. Department of Commerce. Where that framework does not cover a particular transfer, Squarespace's data processing addendum provides for the European Commission's Standard Contractual Clauses (Decision 2021/914) to apply, as recognised and adapted by the Federal Data Protection and Information Commissioner.

10. Retention

We retain personal data only for as long as necessary for the purposes set out above or as required by law.

Technical and log data relating to the Website is collected and retained by our platform provider as our processor, in accordance with its own retention schedule, and is used only to deliver and secure the Website. Cookies are stored for the periods set out in section 5. E-mail correspondence is retained for as long as necessary to deal with your enquiry, and for a further period of up to ten years where the correspondence relates to a business relationship or where retention is required under Art. 958f of the Swiss Code of Obligations or Art. 7 of the Anti-Money Laundering Act.

11. Client data

Where you become a client of Mutter Partners AG, or are a beneficial owner, controlling person or authorised representative in connection with a business relationship, we process personal data on the basis of the client agreement and of our statutory duties, in particular under the Anti-Money Laundering Act. That data, including identification documents, is retained for ten years after the end of the business relationship or the conclusion of the transaction. Details are set out in the client documentation provided to you.

12. Data security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse and alteration. The Website is delivered over an encrypted connection. Access to personal data within our organisation is restricted to persons who need it to perform their duties. No transmission over the internet can be guaranteed to be completely secure.

13. Your rights

Subject to the conditions and exceptions of applicable law, you have the right to:

obtain information about whether and which personal data concerning you we process, and to receive a copy;

have inaccurate personal data corrected;

request the deletion of personal data or the restriction of its processing;

object to processing based on our legitimate interests;

receive certain personal data in a structured, commonly used and machine-readable format, or to have it transferred to another controller;

withdraw a consent you have given, with effect for the future.

To exercise these rights, please contact us using the details in section 1. We may need to verify your identity before responding.

You also have the right to lodge a complaint with the competent supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner, Feldeggweg 1, CH-3003 Bern, www.edoeb.admin.ch.

14. Automated individual decision-making

We do not use personal data for automated individual decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.

15. Amendments

We may amend this Privacy Policy to reflect changes to our processing activities or to the applicable law. The version published on the Website applies. The version date at the top of this page indicates when it was last changed.