Privacy Policy

01 · CONTROLLER

First Health Management AG

Breitenstrasse 34
8852 Altendorf
Switzerland

Tel. +41 55 515 76 80
E-mail: office@firsthealth.ch

You may contact us using these details for privacy-related enquiries.

02 · SCOPE

Basis of processing

We process personal data in accordance with applicable Swiss data-protection law, in particular the Federal Act on Data Protection (FADP) and the Data Protection Ordinance. Where the EU General Data Protection Regulation (GDPR) applies to a specific processing activity, we also observe its requirements.

03 · SERVER LOGS

Visiting our website

When you access our website, technically necessary access data may be processed, including IP address, date and time, requested file or URL, referrer URL, browser type and version and operating system. These data are used to provide and secure the website, analyse errors and, where permitted, produce statistics.

04 · CONTACT & BUSINESS RELATIONSHIPS

Data you provide voluntarily

If you contact us, submit an enquiry or enter into a business relationship, we process the information you provide, for example name, company, contact details, communications and business or contractual information. Processing is carried out to respond to enquiries, establish and manage business relationships, fulfil legal obligations and safeguard legitimate business interests.

05 · INVESTOR PORTAL

Digital signatures & subscription data

If an investor portal or digital signing process is used, contractual and form data, a digital signature image and technical evidence such as IP address and timestamp may be processed for contract preparation, authentication, documentation and statutory retention purposes.

06 · RECIPIENTS

Disclosure to third parties

Personal data are not disclosed without a factual reason. Recipients may include IT, hosting, communications, analytics, advisory or other service providers, as well as authorities or other recipients where required by law or necessary to establish, exercise or defend legal claims.

07 · INTERNATIONAL TRANSFERS

Processing abroad

When external services are used, personal data may be processed outside Switzerland. Where data are transferred to a country without an adequate level of protection, we use appropriate safeguards where required, in particular recognised standard contractual clauses, or rely on an applicable statutory exception.

08 · RETENTION

Storage period

We retain personal data only for as long as necessary for the relevant purpose. Statutory retention and documentation obligations, contractual requirements and the establishment or defence of legal claims may require longer retention.

09 · DATA SECURITY

Technical and organisational measures

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or unlawful disclosure. Our website uses SSL/TLS encryption. Absolute confidentiality of e-mail transmission cannot be guaranteed.

10 · GOOGLE ANALYTICS

Web analytics

If Google Analytics is used and activated through the cookie/consent settings, we use the service for statistical analysis of website use. Analytics and other non-essential technologies are activated only in accordance with the consent configuration and applicable legal requirements.

11 · COOKIES

Cookies & similar technologies

Our website may use technically necessary session cookies and, depending on the functions in use and your selection, additional cookies or similar storage technologies. You can restrict or delete cookies in your browser. If a consent-management system is used, you can manage your choices there.

12 · NEWSLETTER

E-mail communications

If you subscribe to a newsletter or comparable information, we process your e-mail address and the technical data required to manage and send the communication. You may unsubscribe at any time using the provided option or by contacting us.

13 · YOUR RIGHTS

Access, correction and other rights

Subject to applicable data-protection law, individuals may request information about the processing of their personal data and correction of inaccurate data. Depending on the applicable law and circumstances, additional rights may include data portability, deletion, restriction, objection or withdrawal of consent. Statutory restrictions and retention duties remain reserved.

14 · UPDATES

Changes to this Privacy Policy

We may update this Privacy Policy if our processing activities, services or legal requirements change. The version published on this website is the applicable version.

Last updated: September 2026