Imprint & Contact Information (Headquarter)

Tenity Group AG and its subsidiaries

Pfingstweidstrasse 110 8005 Zurich Switzerland info@tenity.com

Commercial register entry

Registered company name: Tenity Group AG Commercial Register No: CHE-285.606.270

Disclaimer

The information on this website is provided for general information purposes only. While we make reasonable efforts to keep the information accurate and up to date, we do not warrant the completeness, reliability, or accuracy of any content.

Liability for content and links

As a service provider, we are responsible for our own content on these pages under applicable law. We are not obliged to monitor transmitted or stored third-party information or to investigate circumstances indicating illegal activity. If we become aware of specific legal infringements, we will remove the content in question promptly. This website may contain links to external third-party websites. We have no control over the content of those sites and accept no liability for external content. Responsibility for linked content lies solely with the operators of those websites.

Privacy Policy

This Privacy Policy applies to Tenity Group AG as the controller and describes how we process personal data in connection with www.tenity.com and related communications, events, programs, and services. Where specific programs or activities are operated by other entities within the Tenity group as separate legal entities, those entities may process personal data in accordance with this Privacy Policy and applicable data protection law.

We primarily offer B2B and professional ecosystem services and process personal data mainly in a professional and business context.

Last updated: January 2026
We may update this Privacy Policy from time to time. The current version is available at www.tenity.com.

1. Scope of this Privacy Policy

This Privacy Policy applies to personal data we process about users, clients, partners, applicants, event participants, newsletter subscribers, and other individuals when they:

• visit or interact with our websites,
• register for events or programs,
• subscribe to communications,
• contact us, or
• otherwise interact with our services.

We primarily process personal data under Swiss data protection law (nDSG). Where applicable, we also comply with the EU General Data Protection Regulation (GDPR).

2. What Personal Data We Process and Why

2.1 Visiting our website (server logs)

When you access our website, our servers may automatically collect and store information in log files, including:

• IP address (typically in shortened/anonymized form where feasible),
• date and time of access,
• requested page/URL,
• referrer URL,
• browser type and device information,
• technical data necessary for security, troubleshooting, and service improvement.

Purpose: ensuring website operation, security, stability, and performance. Legal basis (GDPR): legitimate interests (Art. 6(1)(f) GDPR). Legal basis (Swiss nDSG): processing necessary for operation and security of the service.

2.2 When you contact us (email, forms, inquiries)

If you contact us by email or via a contact form, we process the personal data you provide (e.g., name, email address, message content, company/role where relevant) to:

• respond to your inquiry,
• provide requested information,
• manage our relationship and communications.

Legal basis (GDPR): performance of a contract / pre-contractual steps (Art. 6(1)(b)) where applicable, otherwise legitimate interests (Art. 6(1)(f)) or consent (Art. 6(1)(a)) depending on the context. Legal basis (Swiss nDSG): processing necessary to respond to inquiries and manage communications.

2.3 Program applications / scouting

When we scout startups or receive program applications, we may process:

• name, email, company, role, phone number,
• LinkedIn profile URL (if provided),
• application-related information.

Purpose: evaluating applications, scouting, program management, and related communications; aggregated analytics for internal insights. Legal basis (GDPR): legitimate interests (Art. 6(1)(f)) and/or pre-contractual measures (Art. 6(1)(b)), depending on the situation. Legal basis (Swiss nDSG): processing necessary for program administration and evaluation.

2.4 Newsletters and marketing communications

If you subscribe to our newsletters, we process:

• email address (and optionally name/preferences if provided).

Purpose: sending newsletters and updates. Legal basis (GDPR): consent (Art. 6(1)(a)); you can withdraw at any time via unsubscribe links. Legal basis (Swiss nDSG): consent where required; otherwise in line with applicable marketing rules.

2.5 Reports and gated content

When we distribute reports or allow downloads, we may process:

• name, company, email address.

Purpose: providing access to requested content and follow-up communications where consent exists. Legal basis (GDPR): consent (Art. 6(1)(a)) or legitimate interests (Art. 6(1)(f)) depending on the form and opt-in mechanism used. Legal basis (Swiss nDSG): processing necessary to provide requested content.

2.6 Event photography and recordings

At some Tenity events, photos or video recordings may be taken. Purpose: documentation and promotion of Tenity events and activities. If you prefer not to appear in photos or recordings, please inform us in advance or at registration/on-site where feasible. Legal basis: legitimate interests and/or consent depending on the event context and local requirements.

2.7 Event Registrations and Audience Qualification

When you register for a Tenity event, we may collect additional professional information such as:

• job title,
• company or organization,
• LinkedIn profile URL (where provided).

Purpose: This information helps us:

• ensure audience relevance and quality,
• tailor event content to participants,
• manage invitations, access, and follow-up communications.

Legal basis (GDPR):

• legitimate interests (Art. 6(1)(f)) for professional event curation and quality assurance, and/or
• consent (Art. 6(1)(a)) where required by the registration mechanism.

Providing this information is voluntary unless explicitly marked as required for participation.

2.8 Program applications and corporate partner programs

When startups or individuals apply to a specific Tenity program, accelerator, or scouting initiative that is conducted together with, or on behalf of, a corporate or institutional partner, we process the personal data provided as part of the application (such as name, role, company, contact details, pitch information, and professional background). Where a program is explicitly linked to a specific corporate or institutional partner, relevant application data may be shared with that partner for the purpose of:

• evaluating applications,
• selecting participants,
• conducting due diligence related to the program,
• and running the program.

Applicants are informed of the involvement of the relevant partner as part of the application or program description.

2.9 Automated decision-making and profiling

We do not engage in automated decision-making, including profiling, that produces legal effects or similarly significant effects on individuals within the meaning of Art. 22 GDPR.

2.10 Children and minors

Our services are directed at professionals and businesses and are not intended for use by minors. We do not knowingly collect personal data from minors. If we become aware that personal data of a minor has been collected without appropriate consent, we will take steps to delete such data.

3. Cookies and Similar Technologies

We use necessary cookies to ensure the basic functionality, security, and performance of our website. Where we use non-essential cookies or similar technologies (for example, for marketing or conversion measurement), these are activated only with your consent via our cookie banner. You can withdraw or modify your consent at any time through the cookie settings available on our website. We do not use cookies or tracking technologies that are not required for website operation without your explicit consent.

4. Third-Party Service Providers and Tools

We use selected service providers to operate our website, manage communications, events, and internal processes. Depending on the service, personal data may be processed in Switzerland, the EU/EEA, the UK, Canada, or the United States. Plausible Analytics We use Plausible Analytics to understand how our website is used and to improve its performance. Plausible is a privacy-focused analytics tool that:

• does not use cookies,
• does not track users across websites,
• does not collect personally identifiable information,
• anonymizes all data by design.

This processing is based on our legitimate interest in operating and improving our website (Art. 6(1)(f) GDPR). No consent is required for this analytics tool in its configured form. HubSpot (CRM and Forms) We use HubSpot to manage contact details, form submissions, email communication, and engagement history (such as name, email address, company, job title, and form interactions). Where applicable, HubSpot may also support marketing and conversion tracking only where you have provided consent via the cookie banner. Mailchimp (Email Communications) We use Mailchimp to manage and send newsletters and updates. We send communications only where an appropriate opt-in exists. You can unsubscribe at any time via the links included in each email. Zapier (Automation) We use Zapier to automate data flows between systems (for example, syncing event registrations or newsletter subscriptions). Zapier processes only the data required for each automation workflow. Airtable (Operational Data Management) We use Airtable to organize operational data related to program applicants, portfolio companies, partners, and internal workflows. Access is restricted to authorized personnel only. Event Platforms (e.g. Eventbrite, Lu.ma) We use third-party event platforms to manage registrations and attendance. Registration data may be transferred to our CRM for event management and follow-up communication, based on consent and/or legitimate interest.

5. Data Sharing and Recipients

We may share personal data:

• with service providers (processors) who support our operations (hosting, CRM, email delivery, analytics, event tools),
• with professional advisors (e.g., legal, auditors) where necessary,
• with authorities or courts where required by law,
• with group entities within the Tenity group (separate legal entities), where necessary for internal administration, program delivery, service provision, and the operation of joint or group-wide activities.

We do not sell personal data.

6. International Data Transfers

Where personal data is transferred outside Switzerland and/or the EEA to countries that may not provide an equivalent level of data protection, we implement appropriate safeguards, such as:

• Standard Contractual Clauses (SCCs), and where applicable,
• additional safeguards required by law.

Where a service provider is certified under an applicable adequacy framework (e.g., EU–U.S. Data Privacy Framework and/or Swiss–U.S. Data Privacy Framework, where applicable), we may rely on that mechanism in addition to other safeguards.

7. Retention

We retain personal data only as long as necessary for the purposes described in this Privacy Policy, and as required by applicable legal retention obligations. We then delete or anonymize the data.

8. Your Rights

Where applicable under GDPR and/or Swiss nDSG, you may have rights to:

• access your personal data,
• request rectification,
• request deletion (where applicable),
• object to or restrict processing (where applicable),
• withdraw consent at any time (where processing is based on consent),
• receive a copy of certain data in a portable format (GDPR),
• lodge a complaint with a supervisory authority.

If you wish to exercise your rights, please contact us using the details below.

9. Contact

This Privacy Policy applies to data processing by: Tenity Group AG Pfingstweidstrasse 110 8005 Zurich, Switzerland Email: info@tenity.com Supervisory authority (Switzerland): Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, Switzerland For EU/EEA users, you may also contact your local data protection authority.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The most current version is available at www.tenity.com     ‍

SFDR Disclosures – Tenity Incubation GP II S.à r.l. and Tenity Incubation Fund II SCSp

December 27, 2022 Tenity Incubation GP II S.à r.l. (the AIFM), a Luxembourg-based registered alternative investment fund manager within the meaning of article 3(2)(b) of Directive 2011/61/EU of 8 June 2011 on alternative investment fund managers (AIFMD), makes the following disclosures for the purposes of Regulation (EU) 2019/2088 of 27 November 2019 on sustainability‐related disclosures in the financial services sector (SFDR) and Regulation (EU) 2020/852 of 18 June 2020 on the establishment of a framework to facilitate sustainable investment (the Taxonomy Regulation). The AIFM acts as registered alternative investment fund manager of Tenity Incubation Fund II SCSp (the Fund).

I. AIFM-related disclosures

Transparency of sustainability risk policies – article 3(1)

General overview Sustainability risks are defined in SFDR as environmental, social or governance ("ESG") events which if they occur could cause an actual or a potential negative impact on the value of the Fund's investments (sustainability risks are referred to herein as "ESG risks"). Sustainability due diligences may be conducted on an ad hoc basis for the Fund before making an investment to assess potential ESG risks, the status of regulatory compliance, determine the potential for positive contribution to social and/or environmental issues and set up the management structures to measure, report and verify performance. There can be no assurance, however, that such due diligence will reveal all ESG risks or sustainability liabilities relating to an investment that could emerge from adverse impact or from the failure to perform and positively contribute to environmental or social issues. Relevance of sustainability risks Based on the Fund’s investment objective and investment strategy, the AIFM considers that ESG risks will have a limited impact on the returns of the Fund.

No consideration of adverse impacts of investment decisions on sustainability factors – article 4(1)(b)

Principal adverse impacts are defined in the SFDR as those impacts of investment decisions that result in negative effects on sustainability factors. For the purpose of the SFDR, sustainability factors comprise environmental, social and employee matters, respect for human rights, anti-corruption and anti-bribery matters. Article 4(1) of the SFDR requires fund managers such as the AIFM to provide a clear statement as to whether or not they consider such principal adverse impacts. Although ESG and sustainability risks are important to the AIFM, the latter does not consider the adverse impacts of investment decisions on sustainability factors in the manner prescribed by article 4(1) of the SFDR, in particular due to the fact that (i) no reliable and sufficiently available or accessible data are available to perform such impact measurement and provide the mandatory reporting imposed by the regulatory technical standards in a consistent manner; (ii) the investment strategy and objectives of the Fund and thus its overall portfolio are neither ESG-focused nor, in the opinion of the AIFM, likely to have an impact on sustainability factors and (iii) the underlying investments are not generally required to, and may not currently, report on such factors.

Fund-related disclosures

Transparency of other financial products in pre-contractual disclosures and in periodic reports – article 7 of the Taxonomy Regulation The investments underlying this financial product do not take into account the EU criteria for environmentally sustainable economic activities.