General Data Privacy Statement.

Statement of Commitment to Data Protection

SATI hereby affirms its unwavering commitment to the protection of personal data in accordance with applicable national and international data protection legislation, including but not limited to the European Union's General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP).

To this effect, SATI has established and maintains comprehensive organisational and technical safeguards designed to ensure the confidentiality, integrity, and availability of all personal data under its control.

Furthermore, SATI reserves the right to supplement or modify the provisions of this Statement, either on its own initiative or pursuant to legal or regulatory obligations, by providing additional information regarding its data processing activities.

For detailed information, stakeholders are invited to consult the subsequent sections of this Statement.

Scope of Application and Underlying Legal Foundations

This General Data Protection Statement (hereinafter the "Statement") governs the processing of personal data by SATI in the context of the provision of transport and logistics services (the "Services"), the administration of commercial and informational communications, and the operation of SATI's websites and digital platforms.

By engaging with SATI—whether through the procurement of Services, subscription to communications, or utilisation of SATI's websites—you expressly acknowledge and consent to the collection and processing of your personal data by SATI in accordance with the terms of this Statement and SATI's Statement of Legal Terms, accessible via the following link: (insert link).

Corporate Structure and Internal Cross-Border Data Transfers

SATI operates as a multinational corporate entity within the international transport and logistics sector. As part of its regular business operations, SATI entities may exchange data, including personal data. All such transfers are conducted in full compliance with the applicable data protection laws and regulations.

For the purposes of applicable data protection legislation, the SATI entity with which you are engaging shall be regarded as the data controller of any personal data collected or processed in relation to the Services rendered or websites accessed.

SATI expressly reserves the right to amend the present Statement at any time and without prior notice.

Classification of Personal Data, Purposes of Processing, and Applicable Legal Bases

Processing of Personal Data in Connection with the Delivery of Service

SATI collects and processes personal data obtained either directly from the data subject or indirectly via third-party data controllers for the explicit purpose of fulfilling its contractual obligations, responding to service-related requests, or performing tasks preliminary to contract formation.

Personal data may include, inter alia, names, professional titles, postal addresses, email addresses, telephone numbers, and any other information deemed necessary for the performance of the Services.

The lawful bases for such processing are set forth in Articles 6(1)(a), (b), (c), and (f) of the GDPR, and Article 6(6), Article 31(1), Article 31(2)(a), (b), (c) of the FADP and may include:

• The performance of a contract or the execution of pre-contractual measures,
• Compliance with a legal obligation,
• The data subject's explicit consent,
• The pursuit of SATI's legitimate business interests.

Upon request, SATI shall provide the identity of third-party data controllers from whom such data may have originated.

Processing Activities Related to the Use of SATI's Digital Platforms and Online Services

When accessing SATI's websites, certain information from your computing device—such as IP address, access time, browser specifications, and navigational data—may be collected and processed to ensure technical functionality and system security. This processing is governed by SATI's Cookie Policy.

Moreover, should you voluntarily provide personal data via online forms (e.g., contact or enquiry forms), such data shall be processed strictly in accordance with applicable data protection regulations.

The legal basis for this processing shall be the data subject's consent or SATI's legitimate interest, pursuant to Article 6(1)(a) and (f) GDPR, and Article 6(6), Article 31(1) and Article 31(2)(c) of the FADP.

Processing for the Distribution of Newsletters and Other Promotional Communications

SATI may process contact details (e.g., name, email address) to disseminate newsletters, event invitations, and other communications pertaining to SATI's business activities and Services.

Such processing shall be undertaken solely on the basis of the data subject's explicit consent, in accordance with Article 6(1)(a) GDPR and Article 6(6) of the FADP.

The data subject retains the right to withdraw consent at any time, without prejudice to the lawfulness of processing based on consent prior to its withdrawal.

Notice: Data subjects are strongly discouraged from submitting special categories of personal data (as defined in Article 9 GDPR and Article 5(c), of the FADP), such as those relating to racial or ethnic origin, political opinions, religious beliefs, health status, or biometric data.

In addition, SATI reserves the right to aggregate and anonymise data collected for the purposes of statistical analysis, product development, and enhancement of Services.

Transmission of Personal Data to Affiliated Entities and External Recipients

Personal data may be disclosed to:

• Affiliates within SATI,
• Contractually engaged service providers and professional advisors,
• Competent public authorities where required by law,
• Entities involved in a corporate transaction such as a merger, acquisition, or dissolution.

Examples of service providers include transport operators, customs brokers, IT infrastructure vendors, and marketing agencies. The identity of third-party recipients may be disclosed upon written request by the data subject.

Duration of Data Retention and Conditions Governing Erasure

Personal data shall be retained only for the duration necessary to fulfil the specific purpose for which it was collected, unless a longer retention period is mandated by applicable laws or regulations.

Retention periods may vary based on:

• Contractual obligations,
• Consent validity,
• Legitimate interest assessments,
• Statutory requirements (e.g., fiscal or regulatory obligations).

Statutory Rights of the Data Subject Under Applicable Data Protection Law

In accordance with applicable legislation, you are entitled to exercise the following rights:

• Right of Access: To obtain confirmation as to whether or not your personal data is being processed and, where applicable, to access such data.
• Right to Rectification: To request correction of inaccurate or incomplete personal data.
• Right to Erasure: To request deletion of your personal data under certain legal conditions.
• Right to Restriction of Processing: To restrict the processing of your personal data in specific circumstances.
• Right to Object: To object, on grounds relating to your particular situation, to the processing of personal data based on legitimate interest.
• Right to Data Portability: To receive your personal data in a structured, commonly used format and to transmit it to another data controller.
• Right to Withdraw Consent: To withdraw your consent at any time by contacting SATI at privacy@sati.ch.