General Information

It is very important to us that you are comprehensively informed about the collection and processing of your personal data. We treat your personal data confidentially and in accordance with applicable data protection laws.

Following the entry into force of the revised Swiss Data Protection Act on September 1, 2023, we are publishing this privacy policy for visitors to our website and for our customers, business partners and suppliers.

This privacy policy is designed to comply with the requirements and provisions of the EU General Data Protection Regulation (GDPR) and the revised Swiss Data Protection Act (revFADP). Whether and to what extent these laws apply depends on the individual case.

If you provide us with personal data of other persons, please ensure that those persons have read and understood this privacy policy and that you are authorized to share their personal data and that such data is correct.

This privacy policy applies to all services of NOBLE ART PARTNERS as well as to internal processes and policies.

If you have data protection concerns, you may contact us at:

NOBLE ART PARTNERS
Messeplatz 10
4058 Basel

Contact person: Lorenz Jakob

Principles of Processing Personal Data

Personal data means any information relating to an identified or identifiable person (Art. 5 lit. a FADP), i.e. information that allows conclusions to be drawn about their identity.

A data subject is a person whose personal data is processed (Art. 5 lit. b FADP).

Processing includes any handling of personal data regardless of the means or procedures used, in particular collection, storage, use, modification, disclosure, archiving or deletion (Art. 5 lit. d FADP).

Sensitive personal data includes categories of data that are particularly sensitive and require enhanced protection. This includes data concerning religion, political views, health data, criminal or administrative sanctions and social assistance (Art. 5 lit. c FADP).

Processing of sensitive personal data always requires prior explicit consent (Art. 6 para. 7 lit. a FADP).

We collect personal data transparently and in accordance with the principles of proportionality and purpose limitation (Art. 6 FADP). Data is processed only to the extent and for as long as necessary to fulfill our tasks and obligations.

Collection and Processing of Personal Data

We primarily process personal data that we receive from customers and business partners in the course of our business relationship or that we collect when operating our website and applications.

Where permitted, we also obtain data from publicly accessible sources such as public registers, press or the internet, or from authorities and third parties.

This may include:

• Information from third parties

• Public registry data

• Information from legal proceedings

• Professional activity information

• Correspondence and meeting records

• Creditworthiness data

• References from personal contacts

• Powers of attorney and compliance data (e.g. AML checks)

In rare cases, this may include sensitive personal data.

We may also process:

• Information from financial institutions and insurers

• Transaction data from partners

• Media information

• Address and demographic data

• Website usage data (IP address, device data, cookies, time of visit, pages accessed, location data)

Purpose of Data Processing and Legal Basis

We process personal data to:

• Conclude and perform contracts

• Comply with legal obligations

• Protect legitimate interests

• Develop and improve services

• Conduct marketing and customer outreach

• Enforce legal claims

• Prevent misconduct or crime

• Ensure IT and operational security

• Conduct access control and monitoring measures

Cookies, Tracking and Website Technologies

We use cookies and similar technologies to identify your browser or device.

Cookies may be session-based or persistent. You can configure your browser to block or delete cookies.

We use cookies to:

• Save user preferences

• Analyze usage behavior

• Provide personalized content and advertising

We may use Google Analytics or similar services provided by third parties such as Google Ireland. These services measure website usage in anonymized form.

Our website also uses Google Maps to display interactive maps. This may involve transferring usage data (such as IP addresses) to servers in the United States.

We protect data transmission using TLS encryption. Hosting and certificate management are handled by external service providers who process data only as required to provide their services.

Data Sharing and International Transfers

Your data is generally not shared with third parties unless:

• Required to provide our services

• Required by law

• Necessary to protect legitimate interests

• You have given consent

Where data is processed by service providers, we conclude data processing agreements to ensure compliance with data protection laws.

If data is transferred abroad to countries without adequate protection, we implement safeguards such as EU Standard Contractual Clauses.

Profiling

We may process personal data automatically to evaluate certain personal aspects (profiling), for example to provide targeted information about products.

We do not use fully automated decision-making for establishing or managing business relationships.

Retention Period

We retain personal data only as long as necessary to fulfill contractual, legal or business purposes.

Data may be retained for legal limitation periods or documentation requirements.

When no longer required, data is deleted or anonymized.

Physical documents are securely destroyed using certified processes.

Data Security

We implement appropriate technical and organizational security measures to protect personal data from unauthorized access or misuse, including:

• Access controls

• Staff training

• Encryption

• Two-factor authentication

• IT security monitoring

• Secure document destruction

Rights of Data Subjects

You have the right to:

• Access your personal data

• Request correction

• Request restriction or deletion

• Receive your data (data portability)

• Withdraw consent

• Object to processing

• Lodge a complaint with the competent authority

To exercise your rights, please contact us at the address above.

Identity verification may be required.

Changes

We may update this privacy policy at any time without prior notice. The current version published on our website applies.

If part of a contractual relationship, we will notify you of changes appropriately.

Last updated: January 2026

Contact for Data Protection Questions

If you have any questions regarding data protection, please contact us by email or reach out directly to the designated data protection contact person within our company.