The H2 Energy Group (“H2 Energy”, “we” or “us”) provides customers with highly specialized services in the field of hydrogen from renewable energies in order to expand the entire value chain through production, distribution and consumption in a sustainable and economical way. In doing so, we process information from our customers, which may include personal data. We also process data collected when you visit this website (from representatives of our customers or website users). We handle your personal data with great care and in accordance with the applicable statutory data protection regulations. In this privacy policy, we explain which personal data we process, for what purpose it is processed and what rights you have.

1 Contact

The entity responsible for data processing is:

H2 Energy AG
Hohlstrasse 186/188
8004 Zurich Switzerland
Tel: +41 43 343 90 00

2 Collection and processing of personal data

We primarily process the personal data that we receive from our customers and other business partners in the course of our business relationship with them and other persons involved, or that we collect from their users in the course of operating our websites and other applications. To the extent permissible, we also extract certain data from publicly accessible sources (e.g. debt collection registers, land registers, commercial registers, press, internet) or receive such data from other companies within the H2 Energy Group or from authorities and other third parties.
- As part of our business activities, we process the following categories of personal data:
  - Information relating to your professional functions and activities, information about you in correspondence and meetings so that we can enter into and execute contracts with you or your organization;information from public registers;Information we learn in connection with regulatory and judicial proceedings;information on compliance with legal requirements, such as anti-money laundering and export restrictions;Information provided by banks, insurance companies, distributors and other contractual partners of ours regarding the use or provision of services such as payments made;Details of applicants who are interested in working for us. This includes the information that you provide to us yourself as well as information that we may obtain about you, e.g. from professional social networks, the Internet, the media and, with your consent, references.
  - We collect data in connection with the use of the website, such as IP address, MAC address of your smartphone or computer, information about your device and settings, cookies, date and time of visit, pages and content accessed, functions used, referring website, location information.

3 Purposes of data processing

We use the personal data we collect primarily to conclude and fulfill our contracts with our customers and business partners, for the purpose of procuring products and services from our suppliers, as well as to comply with our legal obligations at home and abroad. If you work for one of our customers or one of our business partners, it is possible that we process your personal data.
- In addition, we also process your personal data for the following purposes, in which we have a legitimate interest corresponding to the purpose:
  - Offering and further developing our offers, services and websites and other platforms on which we are present;Communicating with third parties and processing their requests;Assertion of legal claims and defense in connection with legal disputes and official proceedings;Measures for business management and compliance with legal and regulatory obligations as well as internal regulations of H2 Energy.Warranties for our operations, including but not limited to IT, websites, apps and other platforms;Testing and optimization of needs analysis procedures for the purpose of direct customer contact and collection of personal data from publicly available sources for the purpose of customer acquisition;Advertising and marketing, for example with our Newsletter or by inviting you to events, provided that you have not objected to the use of your data for these purposes. If we send you advertising, you can object to this at any time, and we will then put you on a blacklist;Market and opinion research as well as media monitoring;Measures for IT, building and plant security or for the protection of our employees and other persons as well as assets owned or entrusted to us (such as access controls, visitor lists, network and mail scanners);Prevention and investigation of criminal offences and other misconduct, e.g. conducting internal investigations or data analysis to combat fraud;Information in connection with a job application and the implementation of the application process;Purchase and sale of business units, companies or parts of companies and other corporate transactions and the related transfer of personal data.If you have given us your consent to process your personal data for specific purposes (e.g. when you register to receive Newsletters), we will only process your personal data on the basis of this consent, unless we have any other justification. Any consent given can be revoked at any time and we will cease the corresponding data processing, unless we have an overriding legitimate interest in further data processing. A revocation of consent has no effect on data processing that has already taken place.
  - When you contact us by e-mail or via a contact form on our website, the personal data you provide (your surname, first name, company and e-mail address) will be processed by us in order to answer your questions.

4 Our newsletter

By subscribing to our Newsletter, you agree to receive it. We only send Newsletters and other electronic notifications (hereinafter referred to as “Newsletters”) with your consent or in order to comply with a legal obligation. To sign up for the Newsletter, all you need to do is enter your email address.
- You can unsubscribe from our Newsletter at any time, i.e. withdraw your consent. We may store the unsubscribed e-mail addresses on the basis of our legitimate interests before deleting them in order to be able to prove a previously given consent. The processing of this personal data is limited to the purpose of a possible defense against claims. An individual deletion request is also possible at any time.

5 Collection of data when you visit our website

5.1 General Information

When you simply visit our website for information purposes, we only collect the technically necessary data that your browser transmits to our server in order to display our website to you and to ensure its stability and security:
- Date and time of access
  - Referrer URL of the website from which our website was accessed
  - IP address of the accessing computer
  - Browser type and version used
  - Amount of data transferred
  - Success or error during loading
  - In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive associated with the browser you are using and thus provide us with certain technical information. Cookies cannot run programs or transmit viruses to your computer. They serve to make the website more user-friendly and effective overall.
  - Session cookies are automatically deleted as soon as you close the browser. These store a so-called session ID, which can be used to assign various requests from your browser to the common session. This allows your computer to be recognized when you return to our website. The session ID does not store your name, IP address or similar data. The session cookies are deleted when you log out or close the browser. Other cookies, on the other hand, are automatically deleted after 12 months. You can delete cookies at any time in the security settings of your browser.
  - You can configure your browser settings according to your preferences and refuse to accept cookies. We would like to point out that if you do so, you may not be able to use all the functions of this website.

5.2 Web analytics services and tracking tools

5.2.1 Google Analytics

We use Google Analytics to analyse and statistically evaluate website usage. The data obtained from this is used to optimize our website and advertising measures. Google Analytics is a web analytics service operated and provided by Google (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; for Europe: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
- During your visit to the website, the following information is collected, among others:
  - Visitor-related dataIP address (in abbreviated form, so that no clear assignment is possible)Origin (country and city)Language Operating system Device (PC, tablet or smartphone)Browser and all add-ons used Resolution of the computerTraffic sources, source of origin of your visit (i.e. via which website or advertising medium you came to us)User BehaviourGoogle processes the personal data relating to the use of the website on our behalf and contractually undertakes to take measures to ensure the confidentiality of the data processed. Google also processes this personal data for its own purposes (e.g. to create a profile or link to any Google accounts). The data collected by the cookie about your website usage is usually transmitted to a Google server in the USA for analysis and stored there.Google Analytics stores cookies in your web browser for a period of 26 months from your last visit. These cookies contain a randomly generated user ID that can be used to recognize you on future website visits.The recorded personal data is stored together with a randomly generated user ID, which enables the evaluation of pseudonymous user profiles. This user-related data will be automatically deleted by us after 26 months.IP anonymization takes effect on our website. The IP address of the user is shortened within Switzerland and in the member states of the European Economic Area and is only transmitted anonymously to Google. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and only shortened there. On our behalf, Google processes this information in order to evaluate your use of the website, to compile reports on website activity and to provide us with other services related to website and internet usage.For example, you can prevent this processing by Google by means of the appropriate settings in your browser, but this may mean that our website is not fully functional. In addition, you can use a Google browser add-on to prevent data collection by Google: https://tools.google.com/dlpage/gaoptout?hl=de.
  - For more information about data protection at Google, see https://policies.google.com/privacy.

5.2.2 reCAPTCHA

We use the reCAPTCHA service provided by Google LLC. (Google), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The query is used to distinguish whether the input is made by a human or improperly by automated, machine processing. This request includes the transmission of your IP address and, if applicable, other data required by Google for the reCAPTCHA service to Google. For this purpose, your entry will be transmitted to Google and further processed there. Since IP anonymization is activated on our site, your IP address will be shortened by Google within Switzerland and in member states of the European Economic Area beforehand. Google evaluates this information on our behalf for the purpose of qualifying your entry. The IP address transmitted by your browser as part of reCaptcha will not be merged with other personal data held by Google.
- For more information, please refer to Google’s privacy policy: Privacy Policy: https://policies.google.com/privacy.

5.2.3 YouTube Videos

Our website contains videos that we have published on YouTube. YouTube (YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA) is a service provided by Google (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). When you watch a video on our website, a connection to YouTube’s servers is established and the video is displayed. At the same time, the information is transmitted to the servers of this platform that you have visited our website.
- If you are logged in as a member of YouTube, YouTube will also assign this information to your personal user account. The personal data collected about you will be processed by YouTube and, if necessary, transferred to countries outside Switzerland or the European Economic Area. We have no influence on the type and scope of the personal data processed by Google, the way in which this personal data is processed and used, or the transfer of this personal data to third parties, in particular to countries outside Switzerland and the European Economic Area.
  - You can prevent this assignment by logging out of your respective user account and deleting the corresponding cookies before using our website.
  - Further information, in particular about opt-out options and deletion options, can be found in the privacy policy: https://policies.google.com/privacy.

6 If you want to share our site

On our website, we use interaction elements, so-called share buttons, from
- LinkedIn (small „in“)
  - X (symbol big X)
  - Facebook (lowercase “f”)
  - Pinterest (big “P”)
  - to simplify the referral process so that the user of our site can make recommendations without much effort and in this way our company is better known. The plugins of these services are used for this purpose. To protect your personal data and privacy, we use the two-click method for recommendations on social networks. By using this method, our websites contain inactive buttons that do not transmit any personal data to these providers. However, you have the option of activating the buttons manually and thus establishing the connection to your preferred network (= first click). After you have logged in there, you can make your recommendation in the second step (= second click). If you are already logged in to the social network in question, it can immediately assign your visit to our website to your profile after the second click. The post will be made visible in your user account in accordance with your privacy settings of the service, e.g. only to a certain group of people on the network or publicly.
  - When accessing the respective networks and platforms, the terms and conditions and data processing policies of the respective services apply in order to be able to offer personalized advertising, to inform other users of the social network about your activities on our website and to design the service in line with your needs. Responsibility for data protection-compliant operation is to be guaranteed by their respective providers:
  - If you do not want the respective operator of the above-mentioned networks to directly assign the data collected via our website to your profile, you must log out before visiting our website.

7 Who do we share your data with?

In the course of our business activities, we rely on the fact that we pass on personal data to third parties in order to achieve the purposes mentioned in Section 3. These recipients may be our processors or they may process this data as controllers for their own purposes. These recipients may include, but are not limited to:
- H2 Energy group companies that provide services to the group or individual group companies;
  - Service providers who process personal data on our behalf, such as IT providers or other specialist service providers;Service providers who process personal data in order to provide services to us as controllers, such as banks, and
  insurance companies; Customers; domestic and foreign authorities, offices,
  - or courts;Media;competitors, industry organizations, associations;acquirers or interested parties in the acquisition of divisions, companies or other parts of the H2 Energy Group;
  - Parties in legal proceedings.

8 Do we disclose your data abroad?

The aforementioned recipients of personal data may be in Switzerland as well as abroad. As a matter of principle, we process persons in all countries in which we are active in business and maintain a presence (group companies, branches). In addition, we also transfer personal data to other countries in the EEA or the USA, where the service providers we use are located.
If a recipient is located in a country without adequate legal data protection, we contractually oblige the recipient to comply with the applicable data protection law. Unless the recipient is subject to a legally recognized set of rules to ensure data protection and we cannot rely on an exception provision, the transfer will be based on the revised standard contractual clauses of the European Commission including an annex in accordance with the requirements of the Swiss Federal Data Protection and Information Commissioner (Swiss Addendum).

9 Retention period

As a matter of principle, we store your data for as long as our processing purposes in accordance with Section 3, the statutory retention periods and our legitimate interests, in particular for documentation and evidence purposes, require it, or as long as storage is required for technical reasons. If there are no legal or contractual obligations or technical reasons to the contrary, we will generally delete or anonymize your data after the storage or processing period has expired within the framework of our usual processes and internal instructions. As a rule, we store business-relevant information for 10 years, while shorter retention periods of twelve months or less generally apply to technical and operational data (e.g. system logs, logs).

10 Data integrity

We take appropriate technical and organizational security precautions to protect your personal data from unauthorized access and misuse and review them regularly.

11 Your rights

You have the right to request information about the processing of your personal data (right of access). You can also request that we correct or supplement incorrect or incomplete personal data (correction). You can also object to the processing for specific purposes or revoke your consent, in each case with effect for the future. Finally, you can also request the deletion of your personal data.
Please note that the aforementioned rights may be subject to exceptions and limitations, in particular, e.g. to protect the overriding interests of us or of third parties.
If you wish to exercise your rights, please contact us in writing and enclose a legible copy of your identity document for identification and prevention of misuse.

12 Final provisions

We reserve the right to amend this privacy policy at any time, for example in order to adapt it to the changed legal situation or in the event of changes in data processing. Please check the content of this privacy policy regularly.