1. General information

This Privacy Policy explains how Nanolynx Biologics AG collects and processes personal data when you visit the website www.nanolynx.bio, contact us or otherwise interact with us.

Personal data means any information relating to an identified or identifiable natural person.

We process personal data in accordance with the Swiss Federal Act on Data Protection (“FADP”) and other applicable data protection laws. Where applicable, we also comply with the European Union General Data Protection Regulation (“GDPR”).

2. Data controller

The controller responsible for the processing of personal data described in this Privacy Policy is:

Nanolynx Biologics AG
Wirtsgartenweg 44
4123 Allschwil
Switzerland

Email: partnering@nanolynx.bio

3. Personal data we process

Depending on how you interact with us, we may process the following categories of personal data:

• name, title and professional role;
• company or organisation;
• postal address;
• email address and telephone number;
• information contained in correspondence or enquiries;
• application documents and information relating to job applications;
• technical information such as IP address, browser type, operating system, device information and access time;
• information concerning the use of our website;
• any other information you voluntarily provide to us.

We generally receive personal data directly from you. We may also obtain information from publicly available sources, professional networks, business partners, service providers or other third parties, where legally permitted.

4. Purposes of data processing

We may process personal data for the following purposes:

• operating, maintaining and securing our website;
• responding to enquiries and communicating with website visitors;
• initiating, managing and developing business relationships;
• communicating with investors, partners, service providers and other stakeholders;
• evaluating partnership, licensing, research or investment opportunities;
• processing job applications;
• organising meetings, events and presentations;
• analysing and improving our website and communications;
• complying with legal and regulatory obligations;
• establishing, exercising or defending legal claims;
• preventing fraud, misuse, cyberattacks and other security incidents.

Where the GDPR applies, processing may be based on your consent, the performance of a contract or pre-contractual measures, compliance with legal obligations, or our legitimate interests in operating and developing our business.

5. Visiting our website and server log files

When you visit our website, our hosting provider may automatically collect technical data and store it in server log files.

This may include:

• IP address;
• date and time of access;
• requested page or file;
• referrer URL;
• browser type and version;
• operating system;
• device information;
• access status and transferred data volume.

This information is processed to provide the website, ensure system security, identify technical problems and prevent misuse.

Our website is hosted by:

BSNsoft Solutions GmbH – Catharina-Loth-Str 1, 66133 Saarbrücken, Deutschland

The hosting provider may process data on our behalf in connection with the provision and security of the website.

6. Contacting us

When you contact us by email, through a contact form or by another communication channel, we process the information you provide in order to respond to your enquiry and manage the related communication.

Mandatory fields in a contact form are marked accordingly. Without the required information, we may not be able to process your enquiry.

Please be aware that ordinary email communication may not be fully secure. Do not send confidential medical information, patient data, sensitive research data or other particularly sensitive information through an unsecured email or website form.

7. Job applications

When you apply for a position with Nanolynx Biologics AG, we process the information contained in your application, including your contact details, curriculum vitae, qualifications, professional history, references and other documents you submit.

We use this information to assess your application, communicate with you and conduct the recruitment process.

If your application is unsuccessful, we generally delete or anonymise your application data after the recruitment process, unless legal obligations require longer retention or you have consented to the storage of your data for future opportunities.

8. Cookies

Our website may use cookies and similar technologies.

Cookies are small text files stored on your device. Some cookies are necessary for the technical operation, security and functionality of the website. Other cookies may be used for analytics, preferences, embedded media or marketing purposes.

Where required by applicable law, non-essential cookies are only activated after you have provided your consent. You may withdraw or change your consent at any time through the cookie settings available on the website.

You can also configure your browser to block or delete cookies. Disabling certain cookies may affect the functionality of the website.

9. Website analytics

[KEEP THIS SECTION ONLY IF AN ANALYTICS SERVICE IS USED.]

We may use a website analytics service to understand how visitors use our website and to improve its content and performance.

Analytics data may include shortened or complete IP addresses, device and browser information, approximate location, visited pages, time spent on the website and interactions with website elements.

Analytics provider:

[NAME OF ANALYTICS PROVIDER, E.G. GOOGLE ANALYTICS OR MATOMO]
[PROVIDER ADDRESS AND COUNTRY]

Depending on the provider and configuration, data may be processed outside Switzerland or the European Economic Area.

Where required, the analytics service is activated only after you have provided your consent through the cookie banner.

10. Embedded content and external services

[ADAPT THIS SECTION TO THE SERVICES ACTUALLY USED.]

Our website may integrate content or services from third-party providers, such as:

• YouTube or Vimeo videos;
• LinkedIn content or links;
• Google Maps;
• web fonts;
• scheduling or meeting tools;
• document or presentation platforms;
• newsletter or email services.

When you access content provided by a third party, the provider may receive technical data, including your IP address, browser information and information about the page you visited.

Where possible and appropriate, external content is only loaded after you have provided your consent.

Third-party providers process personal data under their own responsibility and in accordance with their own privacy policies.

11. Social media

We may maintain profiles on professional and social networks such as LinkedIn.

When you visit or interact with these profiles, the respective platform operator may collect and process personal data. This processing is governed primarily by the privacy policy and terms of the relevant platform.

Links to social media profiles on our website do not necessarily transmit data to the platform until you click the relevant link, provided that no external social media plugins are embedded.

12. Disclosure of personal data

We may disclose personal data to third parties where necessary for the purposes described in this Privacy Policy.

Recipients may include:

• IT, hosting and cloud service providers;
• website and communications service providers;
• analytics and security providers;
• professional advisers such as lawyers, auditors and consultants;
• research, development and business partners;
• investors and potential transaction partners;
• recruitment service providers;
• authorities, courts and regulatory bodies;
• other parties where disclosure is required or permitted by law.

Service providers that process personal data on our behalf are contractually required to process it only in accordance with our instructions and to implement appropriate security measures.

13. International data transfers

Recipients of personal data may be located in Switzerland, the European Economic Area or other countries.

Where personal data is transferred to a country that does not provide an adequate level of data protection, we use appropriate safeguards where required. These may include recognised standard contractual clauses, contractual data protection obligations or another legally permitted transfer mechanism.

In certain cases, transfers may also be based on consent, contractual necessity, the establishment or defence of legal claims, or another statutory exception.

14. Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected.

We may retain data for a longer period where required by statutory retention obligations, contractual requirements, regulatory requirements, documentation duties or the need to establish, exercise or defend legal claims.

Once personal data is no longer required, it is deleted or anonymised where reasonably possible.

15. Data security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include access controls, encryption, secure hosting, backups, system monitoring and internal confidentiality requirements.

However, no method of transmission or electronic storage is completely secure. We therefore cannot guarantee absolute security.

16. Your rights

Subject to applicable data protection law and any legal limitations, you may have the right to:

• request information about whether we process your personal data;
• obtain a copy of your personal data;
• request the correction of inaccurate data;
• request the deletion of personal data;
• object to or restrict certain processing activities;
• withdraw consent with effect for the future;
• request the release or transfer of certain personal data;
• lodge a complaint with a competent data protection authority.

In Switzerland, the competent supervisory authority is the Federal Data Protection and Information Commissioner.

To exercise your rights, please contact us using the details provided above. We may need to verify your identity before processing your request.

17. Automated decision-making

We do not generally use fully automated decision-making that produces legal effects or similarly significant effects for website visitors.

Should we use such procedures in an individual case, we will provide the information required by applicable law.

18. Changes to this Privacy Policy

We may amend this Privacy Policy at any time to reflect changes to our website, our data processing activities or applicable legal requirements.

The current version published on this website applies.

Last updated: September 2026