Superlab Suisse AG and Affiliates

Privacy Policy

Last updated: April 28, 2022

Superlab Suisse AG and our affiliates (collectively “Superlab Suisse”, “we”, “us”, or “our”) care about your privacy. We are committed to maintaining your trust by protecting your Personal Information. This Privacy Policy (“Policy”) describes how Superlab Suisse collects, uses, discloses, and otherwise processes your Personal Information in connection with your use of our websites (“Website Services”), applications, or other services that refer to or link to this Policy, as well as any offline products, programs, courses, and services (collectively our “Services”).

Superlab Suisse has many affiliated entities that act as data controllers around the world who will act as the data controller for your Personal Information, and your Personal Information may therefore be shared with entities outside of the jurisdiction in which it was collected.

Before you use our Services, please read this Policy in its entirety, to help you make informed decisions about your relationship with us.

1. INTRODUCTION

According to Art. 4 GDPR Definitions

For the purposes of this Regulation:

‘personal information’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

‘processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

‘restriction of processing’ means the marking of stored personal data with the aim of limiting their processing in the future;

‘profiling’ means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements;

‘recipient’ means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;

‘third party’ means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data;

‘consent’ of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;

‘genetic data’ means personal data relating to the inherited or acquired genetic characteristics of a natural person which give unique information about the physiology or the health of that natural person and which result, in particular, from an analysis of a biological sample from the natural person in question; ‘representative’ means a natural or legal person established in the Union who, designated by the controller or processor in writing pursuant to Article 27, represents the controller or processor with regard to their respective obligations under this Regulation;

2. INFORMATION WE COLLECT

The Personal information that we collect, and our use of that information depends on your relationship with us and the requirements of applicable law as described below.

We collect information:

• that you provide to us directly.
• that your company, broker, host, parent, or guardian provides to us;
• about your devices and their location, and your use of our Services, including through cookies, pixels, web beacons, logs, and other Internet technologies. For more information about these technologies, please see our Cookie Policy;
• If you opt-in to certain features or depending on your device settings, we obtain geo-location data and information about your contacts;
• from third parties such as our landlords, building managers, licensees and property brokers); and
• that we obtain from other sources, including data brokers or information providers (such as Dun & Bradstreet).

2.1 INFORMATION COLLECTED FROM YOU

Superlab Suisse requests different types of Personal Information from you and your company or others, depending on the Services you use and your relationship with us. We may collect the following categories of information, depending on the Services that you use:

• Contact Information and other Identifiers, including your name, mailing address, phone number, email address, and other information that enables us to contact you;
• Verification Information, including your personal photograph, photo ID or government issued identification, and date of birth;
• Professional and Employment-Related Information, including your company name, title, role, team, and other information about your profession;
• Payment Information, including your credit or debit card details, bank account information, and payment or other information required when you make a purchase;
• Email Calendar Information, when we integrate with your corporate email calendar (e.g., Gmail or Microsoft Outlook) and collect data regarding the conference rooms you book;
• Preferences, including your requested or preferred temperature, consumables, bench type, desk location, phone booth, beverage, snack, and other preferences related to the Services;
• Utilization Information, including how frequently you visit, how long you stay, and what types of Services you use when you visit a Superlab Suisse location. These include services such as printer or Wi-fi usage, and desk or conference room bookings;
• Communications, and any other information that you intentionally share, send, or receive using the Services, including your e-mail, SMS, Slack, requests made through feedback platforms, automated chatbots or similar technology, calendar invitations, and any other information you choose to share with us — including your photos, videos, blog entries, interests, hobbies, lifestyle choices, and groups with which you are affiliated — and that you send or receive using the Services;
• Device and Usage Information, including information about your computer or device and Internet or other electronic network activity information. This includes:

• Device identifiers, such as IP address, Wi-Fi MAC address, and Bluetooth address.
• Geolocation information, such as through your mobile device’s GPS signal or Wi-Fi signal, and information about your contacts, depending on your device settings;
• Information about your online activity, including information collected through the use of standard Internet technologies, such as cookies, pixels, web beacons, logs, and other Internet technologies, as further set forth in our Cookie Policy, and your offline activity, including information about events you attend at Superlab Suisse locations; and
• Information gathered by sensors about how you use our Services, including through Spatial and People Analytics Sensors (“SPA Sensors”) in offices, kitchens, conference rooms, and other spaces of some facilities that you may work in or visit, to promote more efficient and comfortable uses of the Services. Examples of SPA Sensors include desk occupancy sensors, environmental sensors, Wi-Fi network hubs, and optical camera-powered sensors.

Other Personal Information, including, in addition to all of the information described above, instant messenger and social media screen names, usernames and passwords, relationship to emergency point of contact, vehicle identification, and other details such as the time and purpose of your visit, photos of you, and data or files that you input, upload, or store with the Services, such as search queries that you submit, and documents that you upload to the Services. We will also process Personal Information included in content and information that you add to your member network or other community profile.

2.2 INFORMATION COLLECTED ABOUT YOU

• Social Media. Superlab Suisse collects Personal Information to enable you to use online social media resources, including the use of our Member Network (MENA). If you register or log into your account through a third-party social media service, we will have access to some of your account information from that service, such as your name and other information in that account, as authorized by your settings on that service. You have the ability to disable the connection between our Services and your third-party social media account(s) at any time.
• Third-Party Sources. We obtain Personal Information about you from your company, broker, parent or guardian, or from your host if you are a visitor or guest to one of our spaces. We also may receive your Personal Information from publicly and commercially available sources, as permitted by law and other third parties with whom we have an arrangement. We combine this information with Personal Information or other information that we receive from or about you, where necessary to provide the Services you requested. If we obtain Personal Information about you from a third party, we will confirm that the Personal Information is from a legitimate source.
• Google and Other Third-Party Analytics. We use a tool called “Google Analytics” to collect information about the use of our Website Services (e.g., Google Analytics collects information such as how often users visit the Website Services, what pages they visit when they do so, and what other sites they used prior to visiting the Website Services). Google Analytics collects only the IP address assigned to you on the date that you visit the Website Services, rather than your name or other identifying information. The information collected through the use of Google Analytics is not combined with your Personal Information. You can learn more about how Google Analytics collects and processes data and opt-out options at http://www.google.com/policies/privacy/partners/. We also may use other third-party analytics tools to collect similar information about use of certain online Services.
• “Do Not Track.” If you have enabled the feature, your web browser may transmit “do-not-track” signals to our websites and other online services with which your browser communicates. We currently do not take any action in response to these signals.
• Mobile Computing. We provide websites and online resources that are specifically designed to be compatible and used on mobile computing devices. Mobile versions of the Services may require you to log in with an account. In such cases, information about use of each mobile version of the website may be associated with user accounts. In addition, Superlab Suisse enables you to download an application, widget, or other tool that can be used on mobile or other computing devices. Some of these tools may store information on mobile or other devices. These tools transmit Personal Information to Superlab Suisse to enable you to access your user accounts and to enable Superlab Suisse to track use of these tools. Some of these tools enable you to e-mail reports and other information from the tool.

2.3 DATA WE COLLECT IN DAILY OPERATION

Please note: Superlab Suisse does not collect or process any scientific data.

The Purpose of Data Processing

We process personal data exclusively for the following purposes:

– Security & Access Control: Ensuring safety within our facilities.

– Operational & Administrative Functions: Managing facility access, equipment reservations, and membership services.

– Equipment Maintenance & Monitoring: Ensuring proper functionality of lab infrastructure and machines.

– Facility management

– Legal & Compliance Obligations: Meeting regulatory requirements under GDPR, FADP, and other applicable laws.

– Authorities

– Information published by the community members, or shared by the companies.

The types of data we collect in daily operation include:

– Identity Data: Name, company name, job title.

– Contact Data: Email address, phone number, business address.

– Usage Data: Information about interactions with our platforms (e.g., Envoy, Bisner, woocommerce, wordpress).

– Technical Data: IP address, browser type, device information, and cookies.

– Security & Facility Data: Access logs, surveillance footage, visitor registration data.

– Equipment Maintenance Data: Records of machine usage, maintenance logs, and service reports.

– Waste tracking.

2.4 ANONYMOUS, AGGREGATED, AND OTHER INFORMATION

We also collect certain information about you that is not Personal Information. This may include intellectual property or other company information you share with us or through the Services, in accordance with any applicable agreements between you or, if applicable, your company, including, for example, trademarks, logos, and other intellectual property you own.

In addition, we collect and/or generate anonymized and aggregated information from your use of the Services. We use anonymized and aggregated information in various ways, including to measure your interest in and use of portions or features of the Services. Anonymized or aggregated information is not Personal Information.

3. USE OF PERSONAL INFORMATION

How we use your Personal Information depends on your relationship with us. In general, we use your Personal Information to:

• provide you with our products and Services, including online and offline events, and other materials you request;
• protect against fraud, abuse, or harm and to otherwise provide a Secure Environment (“Secure Environment” as used in this Policy means both physical and online environments);
  respond to or fulfill customer service requests;
• analyze, better tailor, and improve our products and Services;
  contact you about our Services, promotions, and sweepstakes, tailor and provide you with relevant advertising, enhance your engagement with us, and otherwise communicate with you through various means, which may include by email, telephone, post, or by other means as communicated to you from time to time; and
• comply with our legal obligations and enforce our legal rights, such as, among other things, to exercise contractual rights, to comply with financial reporting obligations, court orders, warrants, or subpoenas in accordance with applicable law.
  Inform you for urgent information about your scientific properties.

LEGAL BASES FOR PROCESSING PERSONAL INFORMATION IF RESIDENT IN THE UK AND EU

The processing of your Personal Information as described above is necessary to meet our contractual obligations to you or your company, to meet our legal obligations, or to meet our legitimate interests in providing our Services. Our legitimate interests may include providing you and others with a secure environment, analyzing, improving, and better tailoring our products and Services, being more efficient, fulfilling any contracts you have with us and helping to prevent fraud.

We also generally rely on our legitimate interests in marketing our Services to you, whether on our own websites or on third-party websites, and in providing promotions or sweepstakes, where permitted by applicable law. We provide you with choices about how we use your Personal Information, in accordance with applicable law, by allowing you to opt-out of receiving all such communications (unless they are transactional solely related to the provision of our Services to you and have no marketing element) and, where required, by not sending you any such messages without your prior consent. Where applicable, we also may process Personal Information with your consent. Remember that in certain circumstances, and where permitted by applicable law, you may have the right to object to our uses of your Personal Information as further described in Section 5 of this Policy.

4. SHARING OF PERSONAL INFORMATION

We disclose your Personal Information in limited circumstances to Superlab Suisse, our community, our service providers and advertisers, other end users, in order to provide our Services and to improve ways of working in our community and where required by applicable law. Where required by applicable law, we will only share your Personal Information with particular third parties with your consent. We will require all parties receiving your Personal Information to take appropriate measures to protect your Personal Information and to process your Personal Information only for the purposes described:

• Among Superlab Suisse. We may share your Personal Information among Superlab Suisse businesses or entities depending on where you are located and the Services that you use. Superlab Suisse uses your information in accordance with this Policy, and we share this information for our administrative purposes including activities such as IT management, for them to provide services to you, or to support and supplement the Services that we provide.

Our Community. Our Services include online and offline member communities, forums, networks, and other features through which you may share information and connect with others. This includes:

• Our Services may make member networks, chat rooms, forums, and/or other groups available to users. Remember that anyone can read, collect, or use your postings on a network or forum or in a chat room or group and we cannot be responsible for any unauthorized third party’s use of information that you publicly disclose online.
• We foster our community by creating profiles for members or permitting members to create their own profiles on member networks or forums. Typically, such a profile contains your name, the name of your company, and other information you provide or add to your profile (content, comments, photos, etc.). Depending on the Services you use, this profile might be created automatically and be accessible to other members of the network or forum. Member Network profile information is accessible to all members. You can also share your profile with a broader audience (e.g., via social media).
• When we receive information about you in connection with your relationship with our members or clients—for example, if you are a member’s employee or if you are visiting one of our clients—we may share your information with the member or client with which you have such a relationship, for example, by alerting the member or client that you have arrived to visit. Please note that we are not responsible for the privacy practices of our members or clients, or their third-party service providers, including those they integrate with our Services.
• We also may share information about you with others in the community to provide you with certain features. For example, if you sign up for a mentoring program, we may share information about you with potential mentors.

• Primary Members. Information on the utilization of our services by individual members may be shared with the primary member or the organization who purchased the memberships. Examples of individual members are employees of a member company or students of a member university.
• Suppliers and Vendors. We rely on various third parties to perform a variety of services on our behalf and to help us grow and improve our business. We take steps to ensure that when we share your Personal Information with these third parties, these act only in line with our instructions and on our behalf, or otherwise use Personal Information as described in this Policy.

Landlords, Building Management, equipment vendors, specific service providers. In some cases we may share your Personal Information with our landlords, building management, and equipment vendors, service providers at Superlab Suisse properties so that they can effectively manage and operate the building, and deliver the services.

• We share your Personal Information with our licensees, for the purposes described in this Global Privacy Policy, such as providing and personalizing the products and services, fulfilling your requests, providing their own marketing and complying with their legal and contractual obligations. For example, this sharing of Personal Information enables you to utilize Superlab Suisse’s products and services in certain countries.
• Research / Survey Solicitations. From time to time, we will share your Personal Information to perform research (online and offline) via surveys on our behalf. Participation is voluntary, and we will use the information that we collect for research and reporting purposes, and to help us to improve the quality of our Services. We use the survey responses to determine the effectiveness of our Services, including the quality of our communications and our advertising and/or promotional activities. If you participate in a survey, your responses will be used along with other participants’ responses.
• Third-Party Advertising Partners. We share limited Personal Information with third parties that serve our advertising online, so that they can display our advertisements to individuals who may find them most relevant. We share this information in order to meet our legitimate interests in advertising our products effectively.
• Other Parties When Required by Law and as Necessary to Provide and Protect Our Services. There may be instances when we disclose your Personal Information to other parties:

• to provide you with the Services that you or your company request;
• to comply with our legal obligations, including with auditors, lawyers, CPAs, financial consultants, or other consultants;
• to comply with applicable law or respond to a legal process or a request for cooperation by a government entity or law enforcement;
• to detect, limit, and prevent fraud, or verify and enforce compliance with the policies governing our Services; or
• to protect our rights, property, and safety or that of any of the Superlab Suisse companies, business partners, members, or employees; and
• where otherwise required by applicable law.

We share Personal Information in this way either to comply with legal obligations to which we are subject, or to meet our legitimate interests in protecting our business, including from fraud and legal claims.

• Other Parties in Connection with a Corporate Transaction. We disclose or share your information in the event that we purchase, sell, finance, transfer, or acquire all or a portion of a business or assets, such as in connection with a merger, or in the event of a bankruptcy reorganization or liquidation.
• Other Third-Party Partners, in Connection With your Membership Agreement. When the terms of your Membership Agreement allow, and where permitted by applicable law, we may disclose or share your contact information with select third-party partners who may contact you to offer additional services related to your Membership. You may opt out of further communications with such third-party partners by contacting Superlab Suisse and are under no obligation to meet with third-party partners or purchase additional services.
• Other Third-Party Partners, With Your Consent. We may request your consent to share Personal Information about you with certain third parties so that they can provide you with special offers, promotional materials, and other materials that may be of interest to you. With your consent, we also use and publicize your name, likeness, and other personal characteristics and private information for advertising, promotion, and other commercial and business purposes.

4.1 THIRD PARTIES THAT PROVIDE CONTENT OR FUNCTIONALITY ON OUR SERVICES

We partner with certain third parties to collect, analyze, and use some of the Personal Information described in this Policy. For example:

• Third parties that provide features and functionality on the Services by means of plug-ins. Even if you do not click on or interact with social networking services or other plug-ins, they collect information about you, such as your IP address and the pages that you view.
• Advertising providers help us, and our advertisers provide advertisements on our Services or elsewhere, including advertisements that are targeted based on your online behavior, and analytics companies help us measure and evaluate the usage of our services.
• Other content providers offer products and services on our Services and operate contests, sweepstakes, or surveys on our Services.

We, as well as certain of these third-party partners may use tracking tools (e.g., cookies, web beacons, and Internet technologies) to collect information regarding your activities (e.g., your IP address or page(s) visited). For more information on these types of tracking tools, please see our Cookie Policy. We also share such information that we have collected with third-party advertising partners. These advertising partners use this information (and similar information collected from other websites) to deliver future targeted advertisements to you when you visit non-Superlab Suisse related websites within their networks. This practice is commonly referred to as “interest-based advertising” or “online behavioral advertising.”

Some of these companies participate in industry-developed programs designed to provide consumers choices about whether to receive targeted advertising. Please visit the websites operated by the Network Advertising Initiative, the Digital Advertising Alliance, and the European Interactive Advertising Digital Alliance (EDAA) to learn more. Canadian users may also visit the Digital Advertising Alliance of Canada. Further information in local languages is available at www.aboutads.info or www.youronlinechoices.eu.

4.2 SOCIAL MEDIA

We are active on social media (e.g., Twitter, Facebook, LinkedIn, Instagram etc.) and share information, images, and videos with the public through unaffiliated external social media sites. We encourage you to read their policies. Remember that the social media sites are public, which means that anyone can see your posts, and your posts may even show up in search engine results.

While we will not edit comments, we may delete a comment from our page on a social media site if it, for example, does not relate to the post, promotes a commercial product or service, uses obscene, threatening, or harassing language, or if it is a personal attack or hate speech that targets or disparages any ethnic, racial, age, or religious group (or other legally protected group), or if it advocates illegal activity or violates copyright laws.

5. RIGHTS IN YOUR INFORMATION: ACCESS, RECTIFICATION, ERASURE, AND RESTRICTION

We value your rights to your data. In accordance with applicable law, you may have the right to:

1. request confirmation of whether we store, use, or share any of your Personal Information and be informed about third parties with whom your Personal Information has been shared;
2. obtain access to or a copy of your Personal Information;
3. receive an electronic copy of the Personal Information that you have provided to us, or ask us to send that information to another company (the “right of data portability”);
4. restrict our uses of your Personal Information or, as described above, object to those uses or restrict our sharing of your Personal Information;
5. seek correction of inaccurate, partial, untrue, or incomplete Personal Information; In some cases, we may provide self-service tools that enable you to update your Personal Information;
6. request erasure, anonymization, or blocking of Personal Information held about you by Superlab Suisse, subject to certain exceptions prescribed by law, when processing is based on your consent or when processing is unnecessary, excessive or noncompliant;
7. withdraw your consent to our processing of your Personal Information. If you refrain from providing Personal Information or withdraw your consent to processing, some features of our Service may not be available;
8. object to an automated decision Superlab Suisse has made and request the review of decisions taken exclusively based on automated processing if that could affect data subject rights; or
9. cancel your online account if one has been created.

If you would like to exercise any of these rights, please contact us at [email protected] or at one of the physical addresses set out in the list of global entities top of this Policy.

We will process all such requests in accordance with local laws. To protect your privacy, Superlab Suisse will take steps to verify your identity before granting access or making any changes to your Personal Information. The California Privacy Rights section below provides additional information for California residents.

6. OPT-OUT and WITHDRAWAL OF CONSENT

You may have the right to opt-out or withdraw your consent for certain uses and disclosures of your Personal Information.

6.1 SENSITIVE PERSONAL INFORMATION

Where you have consented to Superlab Suisse’s use of “sensitive” Personal Information (e.g., Personal Information relating to your health, religious or philosophical beliefs, or biometric information which is used to uniquely identify you) (“Sensitive Personal Information”), you may withdraw that consent, in accordance with applicable law.

Prior to disclosing Sensitive Personal Information to a third party or processing Sensitive Personal Information for a purpose other than its original purpose or a purpose authorized subsequently by the data subject, Superlab Suisse will endeavor to obtain your explicit consent (opt-in). Where your consent for the processing of Personal Information is otherwise required by law or contract, Superlab Suisse will comply with the law or contract.

6.2 EMAIL AND TELEPHONE COMMUNICATIONS

• Opting Out of Marketing Communications. We will provide a means to unsubscribe in our marketing-related email communications. Note that we will continue to send transaction-related emails regarding products or services that you have requested following an unsubscribe. We may also need to send you certain communications regarding operation and administration of the Services, and you will not be able to opt-out of those communications, e.g., communications regarding updates to our Terms of Use or this Policy. If you no longer desire to be contacted by us, you must terminate your relationship with Superlab Suisse and can no longer use our Services.
• We do not sell your Personal Information to third parties for their direct marketing purposes. We may partner with other organizations to run events or programs. The Personal Information and other information that you provide to sign up or participate in that event or program will be available to that organization, and you may receive emails or other communications from it after the event. Please refer to that organization’s privacy policy for information on how to opt-out of its communications.
• Text Messages. We may send you SMS text messages related to our Services or transactions. You can opt-out of these messages at any time by replying STOP.

7. COMPLAINTS AND SUPERVISORY AUTHORITY

If you would like to make a complaint or if you have any questions about how we use or keep your Personal Information, you may contact Superlab Suisse at [email protected].

If you are based in India you may submit any complaints to our Grievance Officer at: [email protected]

For visitors to our Services you may have the right to lodge a complaint with the relevant supervisory authority for your jurisdiction, if you believe our processing of your Personal Information violates applicable law.

8. INTERNATIONAL TRANSFERS

Superlab Suisse is headquartered in Switzerland. Your information will likely be collected in your country and subsequently transferred to or stored in another country, including countries that may have privacy protections less stringent than your jurisdiction. In accordance with applicable law, we implement measures, such as standard contractual clauses, to ensure that any transferred Personal Information remains protected and secure. You can obtain further information about these measures by contacting us using the contact details set out at the top of this Policy and below in Section 12.

If data is transferred outside Switzerland/EU, we ensure protection through legal frameworks such as Standard Contractual Clauses (SCCs).

9. RETENTION

We retain the personal information we receive for as long as you use our Services or as necessary to fulfill the purpose(s) for which it was collected, provide our Services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws.

When determining how long this retention period will last once the purpose of processing the Personal Information has been satisfied, we take into account the length of time Personal Information is required to:

• Continue to develop, tailor, upgrade, and improve our Services;
• Maintain business records for analysis and/or audit purposes;
• Comply with record retention requirements under the law;
• Defend or bring any existing or potential legal claims; or
• Address any complaints regarding the Services.

10. INFORMATION SECURITY

The security of all Personal Information provided to Superlab Suisse is important to us. Superlab Suisse takes reasonable steps endeavoring to use appropriate technical or organizational measures to protect your Personal Information, including against unauthorized or unlawful processing and accidental loss, destruction, or damage.

By using our Services or providing Personal Information to us, you agree that we may communicate with you electronically regarding security, privacy, and administrative issues relating to your use of our Services. If we learn of a security system’s breach, we may attempt to notify you electronically by posting a notice on our Services, by mail or by sending an email to you.

11. OTHER RIGHTS AND IMPORTANT INFORMATION

11.1 CCTV

Superlab Suisse’s buildings and facilities have CCTV installed to meet our legitimate business interests in protecting the safety of Superlab Suisse’s employees, members, and guests and their property. These recordings may be accessed by Superlab Suisse. Superlab Suisse may also make CCTV footage available to members and other third parties authorized by Superlab Suisse. These recordings may be shared with competent authorities in accordance with applicable laws, if required. The recordings are generally retained for a limited period of time but may be kept longer where Superlab Suisse or an applicable member determines that it is appropriate, for example in connection with the investigation of an incident, or when competent authorities request us to retain them.

Superlab Suisse’s CCTV practices are based on an assessment of the data protection interests of affected data subjects against our legitimate interests. This may entail consideration, for example, of the likelihood and impact of unlawful or impermissible conduct on our communities and expectations of privacy in particular facilities or spaces that may be subject to CCTV. The recordings are generally retained for a limited period of time in accordance with Section 9 of this Global Privacy Policy.

11.2 COLLECTION OF INFORMATION FROM CHILDREN

Generally, our Services are not directed to children, and we do not knowingly collect Personal Information from children except as permitted under applicable law. If we become aware that a child has provided us with Personal Information, we will delete such information from our files or obtain parental consent in accordance with applicable law.

11.3 THIRD PARTIES

This Privacy Policy does not address the privacy, data, services or other practices of any entities other than Superlab Suisse, including landlords, building managers, licensees and brokers.

We display advertisements and other content from third parties or partners that link to third-party websites that we do not own or operate. We provide links to these third-party sites as a convenience to you. They are not intended as an endorsement of or referral to the linked services. The linked services are subject to their separate and independent privacy statements, notices, and terms. Additionally, third parties may sell goods or offer services at our facilities or in combination with our Services. We are not responsible for those third parties’ services or their privacy practices.

We cannot control or be held responsible for third parties’ privacy practices and content. Please read their privacy policies to find out how they collect and process your Personal Information prior to submitting any Personal Information. The collection, use, and disclosure of your Personal Information will be subject to the privacy policies of the third party and not this Policy. We are not responsible for the data collection, privacy, and information sharing policies and procedures or content of such third-parties.

11.4 CHANGES TO THIS POLICY IN THE FUTURE

Any information that is collected via the Services is covered by the Policy in effect at the time such information is collected. We reserve the right to change, modify, add, or remove portions of this Policy at any time and at our sole discretion.

If we make any material changes to this Policy, we will notify you of those changes by posting them on the Services or by sending you an email or other notification, as required by applicable law, and we will update the “Last Updated” date to indicate when those changes became effective.

We encourage you to review this Policy periodically to remain informed of how we use and protect your information, and to be aware of any policy changes. Your continued relationship with us after the posting or notice of any amended Policy shall constitute your agreement to be bound by any such changes. Any changes to this Policy take effect immediately after being posted or otherwise provided by Superlab Suisse.

11.5 QUESTIONS OR COMMENTS

If you have any questions or comments regarding this Policy, please contact us at [email protected].

If you would like to contact us in writing, please see our list of global entities at the top of this Policy for contact information of the data controller for your jurisdiction.

If you are based in Singapore and have any questions, please contact our Data Protection Officer at [email protected].

If you are based in India you may submit any questions to our Grievance Officer at: [email protected].

If you are based in a jurisdiction where the law requires that Superlab Suisse has a Data Protection Officer, please submit your query to [email protected].

Superlab Suisse will address your concerns and attempt to resolve any privacy issues in a timely manner.

Sensitive Information. Because email communications are not always secure, please do not include credit card or other Sensitive Personal Information (e.g., racial or ethnic origin, religion, health, or the like) in your emails to us.

12. Data Protection Rights under GDPR & FADP

Your Rights Under GDPR & FADP

Superlab Suisse AG and our affiliates (collectively, “Superlab Suisse”, “we”, “us”, or “our”) are committed to protecting personal data under the General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP).

If you are a registered member or user of our services, you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete personal data.
• Request deletion (Right to be Forgotten) of personal data where legally permissible.
• Restrict processing of personal data in certain circumstances.
• Object to the processing of your personal data, including for direct marketing purposes.
• Request data portability, allowing you to transfer your personal data to another service provider.

Category of Personal Information Explanation.

• Contact Information and other Identifiers, including your name, mailing address, phone number, email address, and other information that enables us to contact you.
  We may use this information to respond to your inquiries, provide access to our facilities, enable participation in programs and events, facilitate membership services, and for other business purposes related to the operation of Superlab Suisse.
• Professional and employment-related information, including your company name, title, role, team, and other information about your profession.
  We may use this information to provide you with the services you request, manage access to lab facilities, and for operational and security purposes.
• Commercial information, such as a record of your purchases, memberships, and utilization data, including how frequently you visit, how long you stay, and what types of services you use at a Superlab Suisse location.
  We may use this information to provide you with the services you have subscribed to, manage access to shared and private lab spaces, and identify additional services or resources that may be relevant to you.
• Internet and electronic network activity information, such as logs of your interactions with our online platforms, including Envoy, Bisner, and internal management systems.
  We may use this information to improve our services, enhance user experience, ensure secure access to our facilities, and analyze operational efficiency.
• Geolocation data, collected via facility access systems and security logs for location-based authentication.
  We may use this information to enhance security, monitor facility access, and ensure compliance with operational and safety regulations.
• Other electronic or visual information, including CCTV footage for security and compliance purposes.
  We use this information to maintain a secure environment for our members and visitors, ensure compliance with legal and regulatory requirements, and monitor facility operations.

As mentioned above, we collect this type of information from you through direct interactions, access control systems, operational logs, and third-party service providers. This information is disclosed only within Superlab Suisse entities, facility management teams, security partners, and regulatory authorities, as needed to comply with GDPR, FADP, and other applicable data protection laws.

No Sale of Personal Data

Superlab Suisse does not sell personal data under any circumstances. We do not engage in data monetization, nor do we transfer personal data to third parties for advertising or commercial purposes. Any processing of personal data is strictly for security, operational, and facility management purposes, in full compliance with the General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP).

Non-Discrimination

Under GDPR and FADP, all individuals have the right to access and control their personal data without discrimination.

• Exercising your data protection rights will not affect your access to Superlab Suisse facilities, memberships, or services.
• We ensure that all data subject requests (e.g., access, rectification, deletion) are handled fairly and transparently.

Exercising Your Rights

You may exercise your rights as a California resident by contacting Superlab Suisse at [email protected]. We will not discriminate against you for exercising your rights and choices, although some of the functionality and features available on the Services may change or no longer be available to you. In order to verify your request, you must provide sufficient information to allow us to reasonably verify you are the person about whom we collected Personal Information, and you must describe your request with sufficient detail to allow us to properly understand, evaluate, and respond to your request.

When We Will Respond. We will try to respond to your request for access or deletion within 45 days. If we require additional time, we will inform you of the reason and extension period.

Authorized Agent. Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. To designate an authorized agent, please contact us as set forth above.

Verification. To protect your privacy, we will take the following steps to verify your identity before fulfilling your request. When you make a request, we will ask you to provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative, which may include your name, email address, phone number, and/or mailing address.

Superlab Suisse AG and affiliates

Cookie Policy

Effective Date: April 28th, 2022.

Safeguarding your privacy is important to Superlab Suisse AG and our affiliates (collectively, “Superlab Suisse”, “we”, “us”, or “our”). We, as well as certain third parties that provide content and other functionality on our websites and mobile applications (“Services”) use cookies, web beacons, pixels, and other similar tracking technologies on our online Services. This Cookie Policy (“Policy”) explains how we use such technologies to enable certain functionalities, as well as to analyze and improve your use of our Services. Some of these cookies may lead to us collecting personal information about you, and you can learn more about how we use that personal information in our Privacy Policy.

1. WHAT TECHNOLOGIES WE USE

COOKIES

• A cookie is a small file stored on your computer or other device. A cookie enables the entity that put the cookie on your device to recognize it across different websites, services, devices, and browsing sessions. By storing such information, cookies can, among other things, remember your preferences and settings for the Services and helps us analyze how you use the Services. To see the categories of cookies that we use, please see Section 3 of this Policy.

WEB BEACONS / PIXEL TAGS

• Web beacons or pixel tags and similar technologies are small bits of code, which are embedded in web pages, ads, and e-mail, that communicate with third parties. Pixel tags can collect information such as the Internet Protocol (“IP”) address of the computer that downloaded the page on which the web beacon appears; the URL of the page on which the pixel tag appears; the time the page containing the pixel tag was viewed; the type of browser that fetched the pixel tag; and the identification number of any cookie on the computer previously placed by that server. We may use web beacons, for example, to count the number of users who have visited a particular web page, to deliver or communicate with cookies, and to understand usage patterns. We also may include web beacons in e-mails to understand whether messages have been opened, acted on, or forwarded.

OTHER TECHNOLOGIES

• There are other local storage and Internet technologies, such as Local Shared Objects (also referred to as “Flash cookies”) and HTML5 local storage that operate similarly to the cookies discussed above in that they are stored on your device and can be used to store certain information about your activities and preferences across different services and sessions.
• Please note that these technologies are distinct from cookies, and you may not be able to control them using standard browser tools and settings. For information about disabling or deleting information contained in Flash cookies, please click

Envoy, Bisner, wordpress, woocommerce

2. WHY WE USE THESE TECHNOLOGIES

Our websites use these technologies for the following general purposes:

• Administering and improving our Services, including helping us measure and research the effectiveness of our content, features, advertisements, and other communications. For example, we measure which pages and features website visitors are accessing and how much time they are spending on our webpages. We may include web beacons in e-mails, for example, to understand whether messages have been opened, acted on, or forwarded.
• Storing your sign-in credentials and preferences so that you don’t have to enter those credentials and preferences every time you log on to a Service.
• Helping us and third parties provide you with relevant content and advertising by collecting information about your use of our Services and other websites.

Cookies are an important part of our Services, so you should be aware that if you choose to remove cookies, this could affect the availability and functionality of the Services.

When you use a web browser to access the Services, many browsers allow you to configure your browser to accept all cookies, reject all cookies, or notify you when a cookie is sent. Click the “Help” menu of your browser to learn more about how to change your cookie preferences. The operating system of your device may contain additional controls for cookies. Please note that disabling cookies may affect your ability to access and use certain features of the Services. To learn more about cookies and how to manage them, please click here. To opt-out of internet-based advertising by all companies which participate in the self-regulatory Digital Advertising Alliance (“DAA”), please visit http://www.aboutads.info/choices/. If you are located in the EU, you can find out about cookies and opt out of interest-based advertising by visiting youronlinechoices.com.

To limit interest-based advertising on your mobile device, you can review and adjust the settings provided by your device manufacturer, such as “Limit Ad Tracking” for iOS or “Opt-out of interest-based ads” for Android.

3. THE TYPES OF COOKIES WE USE

In an effort to provide increased transparency with respect to our use of cookies, we wanted to provide you with additional information about the types of cookies we employ. We may use any of the following types of cookies on the Services as described in the table below:

Cookie Type – Description

• Essential Cookies: These cookies are necessary for the functionality of the Services. These cookies can be disabled in your browser but may prevent certain parts of the Services from functioning.
• Analytics Cookies: These cookies help us to determine the source and amount of traffic to the Services and help us to better understand how our visitors use the Services. If you choose to disable these cookies, it will impact our ability to measure the performance of the Services.
• Functionality Cookies: These cookies help us to enhance the functionality of our website, including through the use of customization or personalization. These cookies may be set by third parties. Disabling these cookies may prevent certain parts of the Services from functioning.
• Advertising or Targeting Cookies: Advertising or targeting cookies may be set by third parties to facilitate the delivery of targeted advertising, including through the delivery of interest-based advertising, and helping us measure the effectiveness of our campaigns. If you disable these cookies, you may receive less relevant or targeted advertising.

4. QUESTIONS

If you have any questions or comments regarding our Policy, please contact us at:

Privacy Superlab Suisse AG, Am Schanzengraben 27, 8002 Zurich

Email: [email protected]

Superlab Suisse will address your concerns and attempt to resolve any privacy issues in a timely manner.

Data subjects’ rights are covered under EU and Swiss law.