Privacy Statement of SIX

The User agrees to SIX¹ processing Personal Data in accordance with the Privacy Statement. Legal or contractual duties to maintain confidentiality to which SIX is subject in relation to the User's Personal Data are not affected by this Privacy Statement.

SIX may amend the Privacy Statement unilaterally at any time. The most recent version is published online by SIX.

Type of collected Personal Data

SIX processes Personal Data about the User if the latter

• visits websites of SIX,
• applies for or uses products or services offered by SIX online; this includes, in particular, registration for specific services or web content only accessible by means of a personal login and subscriptions to print media or online newsletters,
• obtains, installs and/or uses apps of SIX from the relevant app stores, or
• takes part in a competition.

In selected cases, Personal Data is processed if SIX records telephone calls with Users, whether this be to meet its own legal obligations or for training or quality assurance purposes.

SIX processes the personal data (such as name, gender, address, e-mail address, telephone and fax number) that the user expressly and actively makes available to SIX. This also applies if the user takes part in events of SIX (online or in person). The web server of SIX – and in the case of www.six-structured-products.com the web server of Ariva.de AG – automatically records details of the user's visit (such as IP address, browser type and version, operating system used, originating website, pages accessed, date, length of visit).

Cookies

The websites of SIX use cookies, which are saved on the User's computer. These enable SIX to retrace the User's visit and to save their preferences if they switch pages or revisit the website at a later date.

Cookies particularly serve the following purposes:

• save the User's preferred language and country settings
• perform a statistical analysis of the number of users and of their usage habits
• improve the loading speed of the individual pages

The User can control cookie specifications via their browser settings. The relevant browser options and instructions on use can generally be found in the browser manual or help file. If the User rejects, blocks or deactivates cookies, this may restrict the availability of the services offered via the website. In addition, parts of the website may not work correctly under certain circumstances.

Web analysis

SIX analyses how its websites are used with the help of third-party analysis tools, such as Google Analytics or etracker (hereinafter «Analysis Service Providers»). SIX assumes no responsibility or liability for any data processed by Analysis Service Providers.

Google Analytics
Google Analytics, a web-based analysis service by Google Inc. (hereinafter “Google”), uses cookies, which are saved on the User's computer. The information generated by the cookie concerning their visit is usually sent to and stored on a Google server in the USA. If SIX activates IP anonymization for this website, Google shortens the User's IP address within Member States of the European Union or in other partner states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and anonymized there. Google evaluates the information that has been saved on behalf of Google for the purpose of compiling reports on the website's usage and in order to provide other associated services for SIX. Google may combine the IP address transmitted from the User's browser by Google Analytics with other data that has been collected.

etracker (only for SIX Structured Products)
The www.six-structured-products.com website uses technologies of etracker GmbH (www.etracker.com) to collect and store data for marketing and optimization purposes. User profiles may be created from this data under a pseudonym. The data collected with etracker technologies is not used without the data subject's specific consent to identify the visitor of this website personally and is not combined with personal data about the bearer of the pseudonym.

Detailed information on this can be found at https://tools.google.com/dlpage/gaoptout?hl=en and https://www.google.com/intl/en/analytics/privacyoverview.html (general information on Google Analytics and data protection) and at https://www.etracker.com/en/data-privacy/ (general information on data protection of etracker).

HubSpot (only for business unit Financial Information)

SIX uses the services of HubSpot in the context of sending out electronic newsletters in business unit Financial Information. HubSpot uses cookies. HubSpot analyzes the information that has been stored and anonymized (e.g. click behavior, IP address, geographical location, browser type, time spent, pages viewed) on behalf of SIX for the purpose of compiling reports on the website's usage. SIX may use this to conduct targeted marketing activities.
Data processing by HubSpot and storage at third-party companies take place in the United States. All companies involved in the United States are certified under the EU-US Privacy Shield. More information can be found at https://www.hubspot.com/security.

Usage and protection of Personal Data

By processing Personal Data according to this Privacy Statement, SIX is able to improve the quality of its products and services.

Personal Data is processed for the following purposes in particular:

• technical management as well as research and further development of websites
• user administration and marketing
• user information on the services and products rendered by SIX, provided the User has given their consent for this
• selecting competition winners and awarding prizes

The User authorizes SIX to transmit Personal Data to employees, agents or other third parties within or outside the country where the User lives in order to provide services and for the purposes indicated above. Employees, agents and other third parties which have access to Personal Data are required by SIX to ensure compliance with all applicable data protection provisions. Any person who authorizes SIX to access their Personal Data as defined in this Privacy Statement will be made aware of the data security and data protection implications.

SIX protects Personal Data with appropriate physical, electronic and process-related security measures, such as firewalls, personal passwords, encoding and authentication technologies. Personal Data collected via a website owned by SIX will be encrypted during transmission using SSL Secure Sockets Layer (SSL) technology, which currently provides the best-available security for data transfers.

SIX reserves the right to disclose Personal Data to regulatory and supervisory authorities, as well as, pursuant to this Privacy Statement, to Analysis Service Providers. In so doing, SIX will comply at all times with applicable regulations, laws, court orders or official requests.

Information on processed Personal Data

Persons whose Personal Data is processed within the scope of this Privacy Statement have the following rights:

• to receive information on whether SIX may save Personal Data and what form this Personal Data may take (which categories of data, recipients or categories of recipients, retention periods for Personal Data or criteria governing retention periods)
• to receive a copy of the Personal Data
• to request the rectification of Personal Data if it is incorrect
• to request the deletion of Personal Data
• to request restrictions on processing Personal Data
• to receive Personal Data in a structured, accessible and machine-readable format
• to submit an objection to processing, especially for the purpose of direct advertising

The rights specified above may be denied or restricted if the interests, rights and freedoms of third parties take precedence or if processing is necessary to establish, exercise or defend legal claims of SIX.

Queries in relation to processing Personal Data are to be directed to the Data Protection Officers of SIX:

SIX
Compliance
Hardturmstrasse 201
8005 Zurich
Switzerland

Please use this link for questions or information regarding this Privacy Policy.

Links

The websites of SIX may contain hyperlinks to other websites which are not operated or monitored by SIX. Third-party websites are not subject to this Privacy Statement. SIX is not responsible for their content or how they handle Personal Data.

Social Media Buttons

Functions (plugins) of third-party providers or social media platforms (Facebook, Twitter, Google+, etc.) are embedded into the websites of SIX. These plugins enable the User to share content on the social networks mentioned. The interfaces are deactivated by default when the website is accessed. This means that no Personal Data is transmitted to the respective third-party providers without intervention on the part of the User. Once the User has activated the interfaces, data (incl. also Personal Data) is automatically transmitted to the relevant third-party providers by the plug-ins. If the User is simultaneously logged in to the network of the respective third-party provider when they visit the website, the third-party provider can assign the visit to the User's network account. SIX has no influence on this. The purpose and scope of such a form of data collection and the further processing and usage of Personal Data are outlined in the data protection guidelines of the individual social networks. Users can also obtain information there on rights and settings options in relation to protecting their privacy.

Responsible SIX Unit

SIX
Marketing & Communication
Pfingstweidstrasse 110
8005 Zurich
Switzerland

E-Mail: communication@six-group.com

Right to withdraw consent in respect of data protection

Anyone affected by the processing of Personal Data can withdraw their consent to this effect at any time. This must be done in writing or by e-mail to the Data Protection Officer of SIX.

¹ For the purpose of this Privacy Statement, “SIX” refers to SIX Group Ltd and all of its subsidiaries and branches.