Privacy Notice

1. About this notice

This Privacy Notice explains how Voltarra collects, uses, stores and shares personal information when you:

• visit our website;
• contact us or submit an enquiry;
• communicate or work with us as a client, prospective client, supplier, consultant or business partner; or
• otherwise interact with Voltarra in a professional capacity.

This notice is intended to meet the requirements of the Swiss Federal Act on Data Protection and, where applicable, the UK GDPR and EU GDPR.

2. Who we are

This website is owned and operated by:

Voltarra Group AG Swiss UID: CHE-377.875.779 Richtistrasse 2 8304 Wallisellen Switzerland

Email: enquiries@voltarragroup.com

Voltarra Group AG is the controller responsible for personal information collected through this website.

Voltarra operates through a group of companies. We may share an enquiry with the appropriate Voltarra operating company where this is necessary to respond to you or support a project in a particular country.

If you subsequently enter into a contract or direct business relationship with another Voltarra group company, that company may become a separate controller for the personal information processed in connection with that relationship.

3. The information we collect

We may collect the following categories of personal information.

Identity and contact information

Your name, job title, employer or organisation, business address, email address, telephone number and professional contact details.

Enquiry and correspondence information

Information contained in website enquiries, emails, telephone calls, meeting notes and other communications with us.

Business relationship information

Information relating to a potential or existing project, appointment, contract, supplier relationship, professional introduction or other business activity.

Technical and website information

Your IP address, browser type, device information, approximate location, pages visited, access times, referring website and information recorded through essential cookies, server logs and similar technologies.

Marketing preferences

Your preferences concerning business communications and whether you have asked us not to contact you.

We do not normally seek sensitive or special-category personal information through the website. Please do not include sensitive personal, confidential project or security information in a general website enquiry unless it is necessary and appropriate to do so.

4. How we obtain your information

We may obtain personal information:

• directly from you;
• through our website contact form;
• through emails, calls, meetings and professional correspondence;
• from your employer, colleagues, advisers or other professional contacts;
• from clients, suppliers, consultants or business partners who introduce you;
• from publicly available professional sources, including corporate websites, public company registers and professional networking platforms such as LinkedIn; and
• automatically when you use our website, through server logs and similar technologies.

5. How and why we use your information

We use personal information only where there is an appropriate legal basis or other lawful justification for doing so.

Responding to enquiries

We use your information to review and respond to enquiries, understand potential project requirements and arrange meetings or further discussions.

Where the UK GDPR or EU GDPR applies, we rely on taking steps at your request before entering into a contract and our legitimate interest in responding to business enquiries and developing professional relationships.

Delivering projects and managing business relationships

We use personal information to prepare proposals, manage appointments and contracts, coordinate project delivery, communicate with project teams and administer relationships with clients, consultants, suppliers and business partners.

Where the UK GDPR or EU GDPR applies, we rely on performing a contract, taking steps before entering into a contract, complying with legal obligations and our legitimate interest in operating and managing our business.

Business development and professional communications

We may use professional contact information to send relevant information about Voltarra's services, capabilities, published content or events where we reasonably believe it may be of interest.

We rely on consent where consent is legally required. In other business-to-business circumstances, we may rely on our legitimate interest in developing our business and maintaining professional relationships.

You may ask us to stop sending marketing communications at any time by replying to the communication or contacting enquiries@voltarragroup.com.

Operating and protecting our website and systems

We use technical information to operate the website, maintain security, prevent fraud or misuse, diagnose technical problems and protect our systems and information.

Where the UK GDPR or EU GDPR applies, we rely on our legitimate interest in operating a secure and reliable website and, where relevant, compliance with legal obligations.

Improving our website and services

We may use aggregated or appropriately anonymised information to understand how the website is used and improve its content, performance and accessibility.

Where optional analytics or similar cookies require consent, we will request that consent before using them.

Legal, regulatory and record-keeping purposes

We may use personal information to maintain appropriate records, respond to legal or regulatory requests, establish or defend legal claims and comply with applicable laws.

Corporate administration

We may use personal information in connection with audits, insurance, financing, investment, restructuring, mergers, acquisitions or the sale or transfer of part of our business.

6. Our legitimate interests

Where we rely on legitimate interests, those interests may include:

• responding to business enquiries;
• developing and maintaining professional relationships;
• delivering and improving our services;
• managing projects and commercial relationships;
• protecting our systems, personnel, information and legal rights;
• maintaining appropriate business records; and
• developing and administering the Voltarra group.

We consider the necessity and proportionality of the processing and balance our interests against your rights and reasonable expectations.

7. When we share personal information

We may share personal information with:

• Voltarra Group Ltd and other Voltarra group companies;
• website-hosting, IT, communications, cloud-storage, CRM and cybersecurity providers;
• professional advisers, including lawyers, accountants, auditors, insurers and consultants;
• project clients, consultants, contractors, suppliers and delivery partners where necessary for a relevant enquiry or project;
• banks, investors and finance providers where appropriate;
• public authorities, regulators, courts, law-enforcement bodies or other parties where disclosure is required by law; and
• potential purchasers, investors or advisers in connection with a corporate transaction.

We require service providers handling personal information on our behalf to use it only for authorised purposes and to protect it appropriately.

We do not sell personal information.

8. International transfers

Voltarra operates across Switzerland, the United Kingdom and Europe. Personal information may therefore be accessed or processed by Voltarra group companies and service providers in different countries.

Where personal information is transferred to a country that is not recognised as providing an adequate level of protection, we will use an appropriate lawful transfer mechanism. This may include:

• recognised adequacy decisions;
• approved standard contractual clauses;
• the UK International Data Transfer Agreement or UK Addendum, where relevant; or
• another safeguard or exception permitted by applicable data-protection law.

Where required, we will also undertake an appropriate assessment of the risks associated with the transfer.

You may contact us for further information about the safeguards applying to a particular transfer.

9. How long we retain information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including applicable legal, accounting, contractual and reporting requirements.

In general:

• website enquiries and related correspondence are retained for up to 24 months after our last meaningful contact, unless the enquiry develops into an active business relationship;
• client, project, supplier and contractual records may be retained for the applicable contractual and legal limitation period — generally six years and, where relevant, up to 12 years;
• technical and security logs are normally retained for up to 12 months unless required for investigating a security incident;
• marketing information is retained until you opt out or we determine that it is no longer accurate or relevant; and
• a limited record may be retained after an opt-out to ensure that your preference continues to be respected.

Information may be retained for longer where required by law or where reasonably necessary to establish, exercise or defend legal claims.

10. How we protect personal information

We use appropriate technical and organisational measures designed to protect personal information against accidental or unlawful loss, alteration, disclosure, access or misuse.

Access is limited to people and service providers who require the information for an authorised business purpose and are subject to appropriate confidentiality and security obligations.

No internet-based system can be guaranteed to be completely secure. You should therefore avoid sending highly sensitive or security-critical information through the general website contact form.

11. Cookies

Our website uses cookies and similar technologies where necessary to operate securely and effectively.

Where we introduce optional analytics, functional or marketing cookies, we will provide appropriate information and obtain consent where required.

12. Your rights

Depending on the law applying to the processing and the circumstances of your request, you may have the right to:

• ask whether we process personal information about you;
• request access to the personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• ask us to erase or destroy personal information in certain circumstances;
• ask us to restrict how personal information is used;
• object to certain processing;
• object to direct marketing at any time;
• request the transfer of certain information in a portable format;
• withdraw consent where processing is based on consent; and
• complain to an applicable data-protection authority.

These rights are subject to applicable legal conditions and exemptions.

To exercise a right, contact enquiries@voltarragroup.com. We may need to request information to verify your identity. We will respond within the period required by applicable law.

13. Automated decision-making

We do not use personal information collected through this website to make decisions producing legal or similarly significant effects solely by automated means.

14. Children

This website is intended for business and professional users. It is not directed at children, and we do not knowingly collect personal information from children through the website.

15. External websites

Our website may contain links to external websites, including LinkedIn and other third-party platforms.

Those organisations control their own processing of personal information, and their privacy notices apply when you use their services.

16. Complaints

We would appreciate the opportunity to address any concern first. Please contact enquiries@voltarragroup.com.

As Voltarra Group AG is established in Switzerland, you may submit a data-protection concern to:

Federal Data Protection and Information Commissioner Feldeggweg 1 3003 Bern Switzerland

Website: www.edoeb.admin.ch

If the UK GDPR applies to the relevant processing, you may also have the right to complain to the UK Information Commissioner's Office at www.ico.org.uk.

If the EU GDPR applies, you may have the right to complain to the data-protection authority in the country where you live or work, or where you believe an infringement occurred.

17. Changes to this notice

We may update this Privacy Notice to reflect changes to our activities, website, service providers or legal obligations.

The latest version will be published on this page together with the date on which it was last updated.