peaq Service Portal – Privacy Policy

peaq GmbH ("peaq", "we", "us") respects your privacy. This Privacy Policy explains what personal data we process when you use the peaq Service Portal at service-portal.peaq.ch (the "Portal") and the rights you have. It is written to comply with the Swiss Federal Act on Data Protection (revDSG) and, where applicable, the EU General Data Protection Regulation (GDPR).

This Policy covers your use of the Portal as an account holder. Personal data we process inside our products (SAM4H, IOportal) on behalf of a customer is governed by the relevant customer agreement and Data Processing Agreement, not by this Policy. The public peaq.ch website is covered by a separate privacy policy.

1. Who is responsible

peaq GmbH, Neugutstrasse 12, 8304 Wallisellen, Switzerland (company register no. CHE-115.302.255) is the controller for personal data processed through the Portal.

Contact for any privacy question or to exercise your rights: privacy@peaq.ch

2. What data we process, and why

• Account data. To create and operate your account we process the data held on it – your name, company or organisation, email address, phone number, country and role. Legal basis: performance of, or steps taken before entering into, the agreement between peaq and the organisation you act for, and our legitimate interest in operating the Portal.
• Authentication and security data. We process the credentials and sign-in data needed to protect access: your password (stored only in encrypted form), any two-factor authentication secret, and sign-in records (sign-in count, timestamps and IP address). Legal basis: our legitimate interest in securing the Portal, and compliance with our security obligations.
• Quotes and trial-license requests. When you create a quote or submit a trial-license request, we process the content you enter – including organisation, contact details, storage-array serial numbers, machine types and any message – to provide the service you asked for and to prepare and document the commercial relationship. Legal basis: steps taken at your request before entering into a contract, and performance of that contract.
• Support and feedback. Messages you send through the Portal create a support ticket in our help-desk system so we can respond. Legal basis: our legitimate interest in handling your request.
• Usage and log data. The infrastructure records technical data when you use the Portal (IP address, date and time, actions performed including downloads, pages requested, browser and operating system) so we can operate, troubleshoot and secure the service. Legal basis: our legitimate interest in a functioning, secure Portal.

We do not process special categories of personal data through the Portal, and we ask that you do not send us such data.

3. Cookies

The Portal uses only strictly necessary cookies – for your login session, authentication, security, and remembering your language and date-format preference. These are required for the Portal to work and are set without consent. The Portal does not use advertising or statistics cookies. Where a public form on the Portal (for example a trial-license request) is protected by a third-party anti-abuse service, that service may set its own cookies when the form is used.

4. Hosting, help-desk and sub-processors

The Portal is operated on infrastructure provided by service providers acting on our behalf and under contract, and support requests are handled in our help-desk system. An up-to-date list of approved sub-processors is available at service-portal.peaq.ch/sub-processors.

Personal data is processed in Switzerland and the European Economic Area, between which an adequate level of data protection is recognised.

5. Data retention

We keep personal data only for as long as necessary for the purpose, or as required by law. Account data is kept for the duration of your account and the underlying business relationship. Quotes, orders and trial-license records are kept for as long as needed for the commercial relationship and to meet legal record-keeping obligations. Support correspondence is kept for as long as needed to handle and document your request. Log data is kept for a limited period for security and troubleshooting and then deleted or anonymised.

6. Data security

We use appropriate technical and organisational measures to protect personal data, including encrypted transport and the option of two-factor authentication on your account. No transmission over the internet can be guaranteed to be completely secure.

7. Your rights

Subject to applicable law, you may request access to your personal data, its rectification or erasure, restriction of or objection to processing, and data portability, and you may withdraw consent at any time with effect for the future. Some data is needed to keep your account and the underlying agreement in place, and cannot be deleted while that relationship is active. To exercise these rights, contact privacy@peaq.ch.

You may also lodge a complaint with a supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, edoeb.admin.ch. In the EEA, you may complain to the authority of your country of residence.

8. Acceptance and changes

You are asked to accept this Policy when you first sign in to the Portal; we record the date and IP address of your acceptance. We may update this Policy to reflect changes in the law or in how we operate the Portal. The current version is always available in the Portal, and where changes are material you may be asked to accept the updated version on your next sign-in.

Controller: peaq GmbH, Neugutstrasse 12, 8304 Wallisellen, Switzerland · privacy@peaq.ch

Effective date: November 4, 2026