Parvati Experiences GmbH
41, Polenstrasse
3902 Glis
Switzerland
E-mail: info@parvati.ch

Authorised
representatives

Erika Rieder

Name of the company: Parvati Experiences GmbH

Data protection officer:
Erika Rieder
+41787892398
info@parvati.ch

General / Introduction
Based on Article 13 of the Swiss Federal Constitution and the data protection regulations of the Swiss Confederation (Data Protection Act, DSG), every person
has the right to protection of their privacy as well as protection against misuse of their personal data. The operators of these pages take the protection
of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations as
well as this data protection declaration.

In cooperation with our hosting providers, we endeavour to protect the databases as well as possible against unauthorised access, loss, misuse or falsification. We would like to point out that data transmission on the Internet (e.g. communication by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible. By using this website, you consent to the collection, processing and use of data as described below. This website can generally be visited without registration. Data such as pages accessed or names of files accessed, date and time are stored on the server for statistical purposes without this data being directly related to your person. Insofar as personal data (e.g. name, address or e-mail addresses) is collected on our pages, this is always done on a voluntary basis as far as possible. This data will not be passed on to third parties without your express consent.

Processing of personal data

Personal data is any information relating to an identified or identifiable person. A data subject is a person about whom personal data is processed. Processing
includes any handling of personal data, regardless of the means and procedures used, in particular the storage, disclosure, acquisition, erasure, retention,
alteration, destruction and use of personal data.

We process personal data in accordance with Swiss data protection law. If and to the extent that the EU GDPR is applicable, we also process personal
data on the following legal bases in connection with Art. 6 (1) GDPR:

lit. a) Processing of personal data with the consent of the data subject.

lit. b) Processing of personal data for the performance of a contract with the data subject as well as for the implementation of corresponding
pre-contractual measures.

lit. c) Processing of personal data for compliance with a legal obligation to which we are subject under applicable EU law or under the applicable law of a country in which the GDPR applies in whole or in part.

lit. d) Processing of personal data to protect the vital interests of the data subject or another natural person.

lit. f) Processing of personal data to protect the legitimate interests of us or of third parties, unless the fundamental freedoms and rights and
interests of the data subject override these. The legitimate interests include, in particular, our business interest in being able to provide our website,
information security, the enforcement of our own legal claims and compliance with Swiss law.

We process personal data for the duration required for the respective purpose or purposes. In the case of longer-term retention obligations due to
legal and other obligations to which we are subject, we restrict processing accordingly.

With SSL/TLS encryption

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as enquiries that you send to us
as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Server log files

The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically
transmits to us. These are:

Browser type and browser version

Operating system used

Referrer URL

Host name of the accessing computer

Time of the server request

This data cannot be assigned to specific persons. This data is not merged with other data sources. We reserve the right to check this data
retrospectively if we become aware of specific indications of illegal use.

Contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored
by us for the purpose of processing the enquiry and in the event of follow-up questions. We do not pass on this data without your consent.

Rights of the data subject

Right to confirmation

Every data subject has the right to request confirmation from the website operator as to whether personal data relating to him or her is being
processed. If you wish to exercise this right of confirmation, you may contact the Data Protection Officer at any time.

Right to information

Every person affected by the processing of personal data has the right to receive information about the data stored about him or her and a copy of
this information from the operator of this website at any time and free of charge. In addition, information may be provided about the following, if
applicable:

Purposes of the processing

Categories of personal data processed

recipients to whom the personal data have been or will be passed on

if possible, the planned duration of the storage of the personal data or, if this is not possible, the criteria for determining this duration

the existence of a right to rectification or erasure of personal data concerning them or to restriction of processing by the controller or a right to
object to such processing

the existence of a right of appeal to a supervisory authority

if the personal data are not collected from the data subject: Any available information on the origin of the data.

In addition, the data subject has the right to be informed whether personal data have been transferred to a third country or to an international
organisation. If this is the case, the data subject also has the right to receive information about the appropriate safeguards in connection with the
transfer.

If you wish to make use of this right to information, you can contact our data protection officer at any time.

Right of rectification

Every person affected by the processing of personal data has the right to demand the immediate rectification of inaccurate personal data concerning
him or her. In addition, the data subject has the right, taking into account the purposes of the processing, to request that incomplete personal data be
completed, including by means of a supplementary declaration.

If you wish to exercise this right of rectification, you can contact our data protection officer at any time.

Right to erasure (right to be forgotten)

Any person concerned by the processing of personal data has the right to obtain from the controller of this website the erasure without delay of
personal data concerning him or her, where one of the following grounds applies and the processing is no longer necessary:

The personal data were collected or otherwise processed for purposes for which they are no longer necessary

The data subject withdraws the consent on which the processing was based and there is no other legal basis for processing

The data subject objects to the processing on grounds relating to his or her particular situation and there are no overriding legitimate grounds for the
processing, or the data subject objects to the processing in the case of direct marketing and related profiling

The personal data have been processed unlawfully

The erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is
subject

The personal data has been collected in relation to information society services offered directly to a child

If one of the above reasons applies and you wish to arrange for the erasure of personal data stored by the operator of this website, you can
contact our data protection officer at any time. The data protection officer of this website will arrange for the deletion request to be complied with
immediately.

Right to restriction of processing

Any person concerned by the processing of personal data has the right to obtain from the controller of this website the restriction of processing if one
of the following conditions is met:

The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data

The processing is unlawful, the data subject objects to the erasure of the personal data and requests instead the restriction of the use of the
personal data

The controller no longer needs the personal data for the purposes of processing, but the data subject needs them for the purposes of asserting The
data subject has objected to the processing on grounds relating to his or her particular situation and it is not yet clear whether the legitimate interests
of the controller override those of the data subject

If one of the aforementioned conditions is met, you may at any time contact our Data Protection Officer to request the restriction of the
processing of personal data concerning the operator of this website. The data protection officer of this website will arrange the restriction of the
processing.

Right to data portability

Any person concerned by the processing of personal data has the right to obtain the personal data relating to him or her in a structured, commonly used
and machine-readable format. In addition, the data subject has the right to obtain that the personal data be transferred directly from one controller to
another controller, where technically feasible and provided that this does not adversely affect the rights and freedoms of other individuals.

To exercise the right to data portability, you may at any time contact the Data Protection Officer designated by the operator of this website.

Right to object

Any person concerned by the processing of personal data has the right to object at any time, on grounds relating to his or her particular situation, to
the processing of personal data concerning him or her.

The operator of this website will no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate
grounds for the processing which override the interests, rights and freedoms of the data subject, or for the assertion, exercise or defence of legal claims.

To exercise your right to object, you can contact the data protection officer of this website directly.

Right to revoke consent granted under data protection law

Every person affected by the processing of personal data has the right to revoke a given consent to the processing of personal data at any time.

If you wish to exercise your right to withdraw consent, you may contact our data protection officer at any time.

Copyright

The copyright and all other rights to the content, images, photos or other files on the website belong exclusively to the operator of this website
or the named rights holders. The prior written consent of the copyright holders must be obtained for the reproduction of any files.

Anyone who commits a copyright infringement without the consent of the respective copyright holder may be liable to prosecution and may under certain
circumstances be entitled to claim damages.

Disclaimer

All information on our website has been carefully checked. We make every effort to ensure that the information we provide is up-to-date, correct and
complete. Nevertheless, the occurrence of errors cannot be completely ruled out, so that we cannot accept any liability for the completeness, correctness
and up-to-dateness of the information, including journalistic and editorial information. Liability claims regarding damage caused by the use of any
information provided, including any kind of information which is incomplete or incorrect, will therefore be rejected.

The publisher may change or delete texts at his own discretion and without prior notice and is not obliged to update the contents of this website.
The use of this website or access to it is at the visitor’s own risk. The publisher, its customers or partners are not responsible for damages, such as
direct, indirect, incidental or consequential damages, allegedly caused by visiting this website and consequently do not accept any liability for such
damages.

The publisher also accepts no responsibility or liability for the content and availability of third-party websites that can be accessed via
external links from this website. The operators of the linked sites are solely responsible for their content. The publisher therefore expressly distances
itself from all third-party content that may be relevant under criminal or liability law or that may offend common decency.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the data controller on this website is located
outside the European Economic Area or Switzerland, the Google Analytics data processing will be carried out by Google LLC. Google LLC and Google Ireland
Limited are hereinafter referred to as “Google”.

The statistics obtained enable us to improve our offer and make it more interesting for you as a user. This website also uses Google Analytics for a
cross-device analysis of visitor flows, which is carried out via a user ID. If you have a Google user account, you can deactivate the cross-device analysis of
your usage in the settings there under “My data”, “Personal data”.

The legal basis for the use of Google Analytics is Art. 6 para. 1 p. 1 lit. f DS-GVO. The IP address transmitted by your browser as part of Google
Analytics will not be merged with other Google data. We would like to point out that on this website Google Analytics has been extended by the code
“_anonymizeIp();” in order to ensure anonymised collection of IP addresses. This means that IP addresses are processed in shortened form so that
they cannot be associated with a specific person. If the data collected about you can be assigned to a person, this is immediately ruled out and the personal
data is deleted immediately.

Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this
website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other
services relating to website activity and internet usage to the website operator. For the exceptional cases in which personal data is transferred to
the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Google Analytics uses cookies. The information generated by the cookie about your use of this website is generally transmitted to a Google server in
the USA and stored there. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this
you may not be able to use the full functionality of this website. In addition, you can prevent the collection of data generated by the cookie and related to
your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser
plugin available under the following link: Deactivate Google Analytics.

In addition, you can also prevent the use of Google Analytics by clicking on this link: Deactivate Google Analytics. This will save a so-called
opt-out cookie on your data carrier, which prevents the processing of personal data by Google Analytics. Please note that when you delete all cookies on your
terminal device, these opt-out cookies will also be deleted, i.e. you must set the opt-out cookies again if you wish to continue to prevent this form of data
collection. The opt-out cookies are set per browser and computer/end device and must therefore be activated separately for each browser, computer or other end device.

Data transfer to the USA

Among others, tools from companies based in the USA are integrated on our website. If these tools are active, your personal data may be transferred
to the US servers of the respective companies. We would like to point out that the USA is not a safe third country in the sense of EU data protection law. US
companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It
can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for
monitoring purposes. We have no influence on these processing operations.

Changes

We may change this privacy policy at any time without prior notice. The current version published on our website will apply. Where the Privacy Policy
forms part of an agreement with you, we will notify you of the change by e-mail or other appropriate means in the event of an update.

Disclaimer

The author assumes no liability for the correctness, accuracy, up-to-dateness, reliability and completeness of the information.

Liability claims regarding damage caused by the use of any information provided, including any kind of information which is incomplete or
incorrect,will therefore be rejected.

All offers are subject to change. Parts of the pages or the complete publication including all offers and information might be extended, changed or
partly or completely deleted by the author without separate announcement.

 Source: BrainBox Solutions

Translated with www.DeepL.com/Translator (free version)