WAAS Privacy Policy

WAAS Privacy Policy

About us

This privacy policy ("Privacy Policy") explains how we process and protect your personal data when

you use waas's website available on https://waas.rent/ ("Website") or WAAS App ("App"; the Website

and the App together referred as "Platform") or our services provided via the Platform (together, the

"Services").

These Services are operated by waas AG, c/o excent AG, Zweigniederlassung Zug, Gartenstrasse 7,

6300 Zug (the "Company", "we", "our", or "us"). The Company is the controller for the data processing

described below.

Unless otherwise defined in this Privacy Policy, the definitions used in this Privacy Policy have the same

meaning as in the Swiss Federal Act on Data Protection (FADP) or the EU General Data Protection

Regulation (GDPR).

1. Personal data we collect

We may collect or receive personal information for a number of purposes connected with our business

operations when you use our Services, namely as listed in sections 1.1 and 1.2 below.

There is no obligation to provide your personal data. However, please note that our Services cannot be

provided if you do not provide the required data strictly necessary for performing the contract between

you and us.

1.1 On the Website

  • Usage and analytics information (e.g., identifiers, numbers of clicks, tracking data)
  • Contact details (e.g., name, address, phone number, birth date)
  • Recruitment details (e.g., CV, letter of motivation)
  • Request details (e.g., details and content of your inquiries)
  • Website visitor details (e.g., IP address, logfiles, terminal ID)

1.2 On the App

  • Usage and analytics information (e.g., identifiers, numbers of clicks, tracking data)
  • Contact details (e.g., name, address, phone number, birth date)
  • Geolocation (e.g., your actual location, GPS data)
  • Login details (e.g., password, username, session)
  • Payment details (e.g., billing information, credit card details)
  • Request details (e.g., details and content of your inquiries)
  • App visitor details (e.g., IP address, logfiles, terminal ID)

2. How we collect personal data

We collect information about our users when they use our Services, including taking certain actions

within it.

Directly

  • Via our Website and/or our App, as applicable, and electronic communication
  • When you use our Services
  • When you provide services to us
  • When you correspond with us by electronic means using our Services
  • When you browse, complete a form or make an inquiry while using our Services

Indirectly

  • Through public sources
  • From public registers (such as commercial registers), news articles and internet searches
  • When our business customers engage us to perform professional services which involve them

sharing personal data they control with us as part of that engagement

  • From external Service Providers (see section 5.)

4. Data retention

We retain personal data for so long as it is needed for the purposes for which it was collected and in

line with legal and regulatory requirements or contractual arrangements. After this period, we delete or

fully anonymize your personal data.

5. Data recipients

We engage third-party companies ("Service Providers") to facilitate the operation of our Services,

assist in analysing the usage of the Services, or perform necessary services, such as payment and the

provision of IT services. These third parties have access to your personal data only to the extent

necessary to perform these tasks.

Type(s) of Service Providers who might access your personal data:

  • Professional advisers that we use, such as accountants and lawyers
  • Other group entities that are involved in your matter
  • Third parties who provide IT and software services
  • Third parties who help us with client insights and marketing
  • Rental partners providing the Services to the End-Customer

6. Data transfers

We and/or our Service Providers may transfer your personal data to and process it in the following

countries:

  • EU and EEA
  • USA

We may use Service Providers partly located in so-called third countries (outside the European Union

or the European Economic Area or Switzerland) or process personal data there, i.e., countries whose

level of data protection does not correspond to that of the EU or Switzerland.

We safeguard your personal data per our contractual obligations and applicable data protection

legislation when transferring data abroad.

Such safeguards may include:

  • The transfer to countries that have been deemed to provide an adequate level of protection

according to the Federal Council, as well as to countries where there is an adequacy decisions

by the European Commission in place

  • Applying standard data protection model clauses, binding corporate rules or other standard

contractual obligations that provide appropriate data protection

If a third country transfer takes place and there is no adequacy decision or appropriate safeguards, it is

possible and there is a risk that authorities in the third country (e.g. intelligence services) can gain

access to the transferred data and that the enforceability of your data subject's rights cannot be

guaranteed.

7. Data disclosure

We may disclose your personal data in the good faith belief that such action is necessary:

  • To comply with a legal obligation (i.e., if required by law or in response to valid requests by

public authorities, such as a court or government agency)

  • To protect the security of our Services and defend our rights or property
  • To prevent or investigate possible wrongdoing in connection with us

8. Data security

We take reasonable technical and organizational security measures that we deem appropriate to protect

your stored data against manipulation, loss, or unauthorized third-party access. Our security measures

are continually adapted to technological developments.

We also take internal data privacy very seriously. Our employees and the service providers that we

engage are required to maintain secrecy and comply with applicable data protection legislation. In

addition, they are granted access to personal data only insofar as this is necessary for them to carry

out their respective tasks or mandates.

The security of your personal data is important to us, but remember that no method of transmission

over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable

means to protect your personal data, we cannot guarantee its absolute security. We recommend using

antivirus software, a firewall, and other similar software to safeguard your system.

9. Your rights

You have the below data protection rights. To exercise these rights, you may contact the above address

or send an e-mail to: hello@waas.rent. Please note that we may ask you to verify your identity before

responding to such requests.

  • Right of access: You have a right to request a copy of your personal data, which we will provide

to you in an electronic form.

  • Right to amendment: You have the right to ask us to correct our records if you believe they

contain incorrect or incomplete information about you.

  • Right to withdraw consent: If you have provided your consent to the processing of your

personal data, you have the right to withdraw your consent at any time with effect for

the future. This

includes cases where you wish to opt-out from marketing

communications. Once we have received notification that you have withdrawn your

consent, we will no longer process your information for the purpose(s) to which you

initially consented to unless there is another legal basis for processing. To stop

receiving emails from us, please click on the 'unsubscribe' link in the email you received

or contact us at hello@waas.rent.

  • Right to erasure: You have the right to request that we delete your personal data when it is no

longer necessary for the purposes for which it was collected or when it was unlawfully

processed.

  • Right to restriction of processing: You have the right to request the restriction of our

processing of your personal data where you believe it to be inaccurate, our processing is

unlawful, or where we no longer need to process it for the initial purpose, but where we are not

able to delete it due to a legal obligation or because you do not want us to delete it.

  • Right to portability: You have the right to request that we transmit your personal data to

another data controller in a standard format such as Excel, if this is data which you have

provided to us and if we are processing it on the legal basis of your consent or to perform our

contractual obligations.

  • Right to object to processing: Where the legal basis for our processing of your personal

data is our legitimate interest, you have the right to object to such processing on

grounds relating to your particular situation. We will abide by your request unless we

have a compelling legal basis for the processing which overrides your interests or if we

need to continue to process the personal data for the exercise or defence of a legal

claim.

  • Right to lodge a complaint with a supervisory authority: You have the right of appeal to a

data protection supervisory authority if you believe that the processing of your personal data

violates data protection law. The competent data protection authority in Switzerland is the

Federal

Data

Protection

and

Information

Commissioner

(www.edoeb.admin.ch/edoeb/en/home.html). In the EU and EEA, you can exercise this right,

for example, before a supervisory authority in the Member State of your residence, your place

of work or the place of the alleged infringement. You can find a list of the relevant authorities

here: https://edpb.europa.eu/about-edpb/board/members_en.

11. Newsletter

We send newsletters and other notifications by email and through other communication channels and

may deliver them with the help of third parties.

In principle, you must expressly consent to receive newsletters and other notifications from us unless

this is permitted for other legal reasons. We use "double opt-in" for any consent in the case of e-mails,

i.e., you will receive an e-mail with a web link that you must click to confirm so that no misuse by

unauthorized third parties can take place. We may log such consents, including Internet Protocol (IP)

address, date, and time.

Newsletters and other notifications may contain web links or tracking pixels that record whether an

individual newsletter or notification has been opened and which web links were clicked (performance

measurement). Such web links and tracking pixels record the use of newsletters and other notifications.

We use this statistical recording of usage, including success and reach measurement, in order to be

able to offer newsletters and other notifications effectively and in a user-friendly manner, as well as

permanently, securely, and reliably, based on the reading habits of the recipients.

You can unsubscribe from newsletters and other notifications at any time and thereby object in particular

to the aforementioned collection of usage. You can do so by contacting us directly or following the link

included in the footer of each newsletter we send you.

12. Changes to this Privacy Policy

We may update our Privacy Policy from time to time. We therefore encourage you to review this Privacy

Policy periodically for any changes.

Changes to this Privacy Policy are effective when they are posted on this page.

13. Contact us

If you have any questions about this Privacy Policy, do not hesitate to get in touch with us at:

waas AG, c/o excent AG, Zweigniederlassung Zug, Gartenstrasse 7, 6300 Zug, Switzerland

hello@waas.rent