Stübi & Löw Krav Maga KlG (hereinafter referred to as ‘we’ or ‘us’) operates the website www.krav-maga-global.ch. On this website, you can find out about our organisation, view our services and get in touch with us. The protection of your personal data is of great importance to us. In this privacy policy, we provide you with transparent and clear information, in accordance with the Swiss Data Protection Act (DSG), about what data we process via our website and how we handle it. What information do we provide?

- Who is responsible for data processing;

- What data is collected;

- The purpose for which this data is collected;

- To whom we disclose this data;

- What rights you have and how you can exercise them.

What is personal data? Personal data is any information relating to an identified or identifiable natural person (Art. 5(a) DSG). This includes, for example, name, address, date of birth, email address or telephone number, as well as the IP address.

What is personal data requiring special protection? This includes, amongst other things, data relating to religious, philosophical or political views, data relating to health, privacy or ethnic origin, as well as biometric data that uniquely identifies a person (Art. 5(c) of the Data Protection Act). We process such data only if you expressly and voluntarily provide it to us on a case-by-case basis. What is the processing of personal data? Processing refers to any handling of personal data, regardless of the means and procedures used, in particular the collection, storage, retention, use, alteration, disclosure, archiving, erasure or destruction (Art. 5(d) of the DSG). What is the disclosure of personal data? This is the transmission or making available of personal data, for example, disclosure to a service provider (Art. 5(g) DSG). Contact If you have any questions or concerns regarding our protection of your data, you may contact: Stübi & Löw Krav Maga KlG, info@krav-maga-global.ch Data security

We will store your data securely and take all appropriate technical and organisational measures (Art. 8 DSG) to protect your data against loss, unauthorised access, misuse or alteration. On our website, we use the SSL/TLS protocol in conjunction with a modern level of encryption. Our contractual partners (data processors) who have access to your data are obliged to comply with data protection regulations and to maintain confidentiality. Data subjects’ rights

In accordance with Articles 25 et seq. of the DSG, you are entitled to various rights: - Right of access: You may at any time request information about the data we process concerning you. - Erasure and rectification: You have the right to request the erasure or rectification of inaccurate data, provided that this does not conflict with any statutory retention obligations (e.g. under the Swiss Code of Obligations). - Restriction of processing: You also have the right to request a restriction on processing if you contest the accuracy of this data, the processing is unlawful, the data is no longer required, or you have objected to the processing. - Right to data access and portability: You have the right to request that we provide you with data processed by us in digital form in a commonly used format. - Right to object: You have the right to object at any time, on grounds relating to your particular situation, to processing – including profiling – carried out on the basis of our legitimate interests. This right also applies to processing for the purposes of direct marketing. - Legal recourse: If you are affected by the processing of personal data, you have the right to enforce your rights through the courts or to lodge a complaint with the competent supervisory authority. The supervisory authority in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC) https://www.edoeb.admin.ch/de/adresse. To exercise your rights, please contact us at the address given above. Under what conditions do we process your data? We process your data in good faith and in a proportionate manner. The Swiss Data Protection Act (DSG) does not, in principle, require prior consent, unless there is an infringement of personal rights. Processing is generally carried out for the purpose of performing a contract, taking pre-contractual measures, or based on our legitimate interests (e.g. the secure operation of the website) in accordance with Article 31 of the DSG. In what circumstances do we disclose your data to third parties and abroad? We rely on the services of third parties (so-called data processors in accordance with Article 9 of the Swiss Data Protection Act). Specifically, for the operation of this website, we use: - The Onepage CMS (Onepage GmbH, Germany) - The hosting provider ALL-INKL.COM (Germany) We process your personal data primarily in Switzerland, the EU and the EEA (in particular in Germany via Onepage and ALL-INKL). However, global data transfers may be necessary to provide our services. For data transfers to the USA, where the recipients are certified, we rely on the Swiss-US Data Privacy Framework (DPF), which, according to the Swiss Federal Council, ensures an adequate level of data protection. If the destination country or the specific recipient does not have an adequate level of data protection recognised by the Federal Council (Annex 1 of the Data Protection Act), we ensure the protection of your data through contractual measures, usually by means of standard data protection clauses recognised by the Federal Data Protection Commissioner (FDPO) or other suitable safeguards. We may also rely on your explicit consent or on the strict necessity for the performance of a contract. How long do we retain your data? We only store personal data for as long as is necessary to fulfil the specific purposes or as required by law (e.g. 10 years for business correspondence and accounting records). Data processing in detail: Provision of the website and creation of log files Simply by visiting our website www.krav-maga-global.ch, technical data is automatically transmitted to the server by our hosting and system providers (ALL-INKL / Onepage). - What data do we process? IP address, technical information such as browser and operating system, date and time of access. - For what purpose? This processing is carried out to guarantee the functionality of the website and to ensure the security of our systems. - How can you prevent this? The storage of these log files is absolutely essential for the secure operation of the website. You can only prevent this by not visiting our website. Contact If you contact us (e.g. by email or via the contact form) and provide personal data, this will result in data processing. - What data do we process? Name, email address, telephone number, the content and time of your enquiry. - For what purpose? To respond to your enquiry, for customer service and communication. - How can you prevent this? You can choose not to contact us. Cookies Our website uses cookies via the Onepage system. These are text files that are stored on your device. - What data do we process? We primarily use so-called ‘session cookies’ and technically necessary cookies, which are essential for the operation and security of the website. - For what purpose? To ensure the website is functional, secure and user-friendly. - How can you prevent this? You can block the storage of cookies or delete existing ones in your browser settings. However, this may restrict the functionality of the website. Does our privacy policy always remain the same? We may amend this privacy policy at any time.

Any changes will be published on www.krav-maga-global.ch. Last updated: March 2026