General Terms and Conditions

1 Scope / Application

The following general terms and conditions (GTC) govern the fundamental, generally applicable mutual rights and obligations between baseVISION AG (hereinafter referred to as baseVISION) and its customers within the framework of contracts for the purchase of merchandise and the provision of IT services (hereinafter referred to as services), unless otherwise agreed in writing in the respective legal relationship. Oral agreements are invalid.

2 Contract Conclusion and Cancellation

The contract is concluded when baseVISION confirms acceptance of the order (merchandise) or the assignment (services) in writing within the usual processing period of a maximum of five days or delivers the ordered merchandise or executes the assignment after receiving the order. If baseVISION agrees to a cancellation or reduction, the customer must bear the costs already incurred by baseVISION or those resulting from a price increase due to the reduction. Orders for merchandise outside the standard assortment cannot be canceled.

Unless otherwise regulated in the individual contract, the following cancellation conditions apply to services: For workshops, assessments, and hourly billed services with a planned duration of one day or more, a free cancellation is possible up to four weeks before the planned date. If the cancellation occurs between two and four weeks before the date, 100% of the planned hours of the first day will be charged to cover the effort for preparation and reserved capacities. In the case of a cancellation or postponement less than one week before the date or no-show, the full scope of the planned hours that would have been incurred within the first four weeks after the announcement of the cancellation will be charged. For meetings with a planned duration of less than two hours, one hour will be charged for a cancellation less than one week in advance. Further claims for damages remain reserved.

3 Delivery and Performance

The ordered merchandise is ready for pickup at the baseVISION headquarters after completion of the work. If the merchandise is delivered to the customer, the associated transport and packaging costs are borne by the customer. baseVISION is entitled, after prior consultation with the customer, to involve qualified third parties for the execution of services. baseVISION reserves the right to adjust the services if necessary or for important reasons. The working time provided is documented by a work report. The time that the baseVISION employee works for the customer or is available is considered working time, regardless of the location where the services are provided. The customer provides baseVISION with all available information, facilities, and other necessary support and access to the system environment free of charge for the provision of the contractually agreed services, provided that this does not violate contractual obligations towards third parties. The delivery and performance dates specified by baseVISION (hereinafter referred to as delivery dates) and delivery and performance periods (hereinafter referred to as delivery periods) are non-binding. All delivery dates, including those agreed as binding, are subject to correct and timely delivery to baseVISION by third parties and the exclusion of unforeseen incidents. In the event of force majeure and other unforeseeable, extraordinary, and unintentional circumstances, the delivery period of baseVISION is extended by the duration of such events plus a reasonable start-up period if baseVISION is thereby prevented from fulfilling its delivery obligation on time. If delivery becomes impossible or unreasonable, baseVISION is released from the delivery obligation. If the delivery delay lasts longer than two months, the customer is entitled to withdraw from the contract. As far as possible, baseVISION will inform in a timely manner about operational interruptions necessary for the rectification of disruptions, maintenance work, introduction of innovations, etc.

4 Delimitation

Services not offered must be communicated to the customer by the baseVISION employee before realization and commissioned by the customer.

5 Prices / Conditions / Payment

All prices are exclusive of VAT and any other charges. Price changes by the manufacturer are expressly reserved. baseVISION is entitled to change prices at any time. Discounts and rebates are only granted by special agreement. Deployments outside business hours (see www.baseVISION.ch) and on public holidays are subject to special conditions. The surcharges are generally 50% for Saturday and night work and 100% for Sundays and public holidays on the agreed service rates. If the customer is in default of payment, baseVISION is entitled to suspend all services of existing contracts with the customer. In case of late payment, reminder costs of CHF 20.– per reminder and a default interest of 5% from the due date are due.

6 Retention of Title

The delivered merchandise remains the property of baseVISION until full payment is made. In addition, baseVISION is entitled to make a corresponding entry in the retention of title register.

7 Liability

baseVISION is liable for personal and property damage up to the price of the defective merchandise or faulty services in case of fault. In the case of recurring services (maintenance, etc.), an annual fee is considered the price of the services. Liability for financial losses such as lost profits, unrealized savings, the customer’s own expenses, third-party recourse claims, delay damages, damages from the commercial use of the merchandise, and costs resulting from the involvement of third parties is excluded to the extent legally permissible. baseVISION’s liability for data recovery is excluded unless the destruction was caused intentionally or through gross negligence and the customer has ensured that this data can be reconstructed from data material kept in machine-readable form with reasonable effort.

8 Intellectual Property Rights

The customer acknowledges the manufacturers’ rights to programs and documentation and will leave the corresponding rights notices unchanged. Ideas, concepts, experiences, and methods related to IT processing, developed during the provision of services under this contract by baseVISION personnel alone or in collaboration with the customer’s employees, belong jointly to both parties and can be freely utilized. However, the customer undertakes not to make this information accessible to third parties in whole or in part or to publish it unless they have written permission from baseVISION.

9 Data Protection

Both parties undertake to comply with the data protection obligations applicable to them as data controllers in their respective areas of influence and responsibility concerning the processing of personal data in connection with the provision and use of baseVISION’s services.

baseVISION may process personal data on behalf of and for the purposes of the customer (‘order processing’) in the course of providing its services. The provisions of the order processing agreement apply to order processing. The agreement on order processing, which can be accessed here https://www.basevision.ch/en/legal/, is automatically an integral part of the contract.

10 Confidentiality Obligation of the Parties

All information, documents, materials, and data that the parties provide to each other in the course of providing services or of which they become aware in connection with the provision or use of services and which are either marked as ‘confidential’ or ‘secret’ or whose confidentiality must be assumed in good faith due to the nature of the information or the circumstances of the provision, must be treated confidentially by the respective recipient and adequately protected from access by third parties, with at least the same care used to protect their own information of the same or similar nature. Confidential information may only be used in connection with the provision or use of the contractual services, unless otherwise agreed.

The obligation of confidentiality applies indefinitely and continues after the termination of the contractual relationship or the provided service as long as there is a presumed interest in confidentiality regarding the specific information. Statutory disclosure, information, and especially disclosure obligations remain reserved.

The parties transfer the confidentiality obligation to all employees and subcontractors and their employees who reasonably need access to confidential information to use or provide services under the respective contract or otherwise in connection with the execution of the contractual relationship between the parties. Such contractual transfer may be omitted if statutory confidentiality obligations, such as professional secrets, provide comparable protection.

11 Warranty and Guarantee

Manufacturers of the merchandise have assured that baseVISION is authorized to sell the merchandise to third parties and that such sales do not violate any existing third-party rights. baseVISION does not assume any warranty towards the customer for the defect-free and error-free condition of the delivered merchandise. This is the responsibility of the manufacturers. If a warranty claim is made by the customer, baseVISION will mediate with the manufacturer upon request for a fee. The warranty claim expires entirely if the defects are due to careless maintenance or incorrect operation by the customer. The warranty does not cover the elimination of errors caused by normal wear and tear, external influences, operating errors, or other improper handling. The warranty lapses as soon as the customer or a third party unauthorizedly changes the merchandise themselves or has it changed by third parties. In the case of obvious and system-related defects, a written defect list must be submitted to baseVISION within seven days. After the deadline, the merchandise is considered approved.

12 Non-Solicitation

The customer undertakes not to enter into an employment relationship or a similar legal relationship with a baseVISION employee during the duration of ongoing assignments. In case of violation, the customer is obliged to pay compensation in the amount of at least one annual salary of the respective employee per individual case as a contractual penalty. The assertion of further damages remains reserved.

13 Final Provisions

Rights and obligations under the contract are not transferable in whole or in part without the prior written consent of baseVISION. These GTC are binding in any case. They apply in particular even if they differ from those of the business partner.

Should any provision be wholly or partially invalid, the present contract remains otherwise effective. The invalid part is to be reinterpreted so that the economic purpose pursued with it is achieved as far as possible. The same applies to necessary interpretations or additions.

These GTC are governed by Swiss law. For cases not regulated in these GTC, the Swiss Code of Obligations and the Federal Act on Data Protection apply. The place of jurisdiction for any legal disputes is Olten, Solothurn. However, baseVISION also has the right to take legal action against the customer at the competent court of their business or residence.

baseVISION reserves the right to change these GTC at any time. The amended GTC apply in this case to all orders and contracts placed after their publication. SLAs, packages (subscriptions), and maintenance contracts are an integral part of these GTC.

Order Processing Agreement for GTC

A. General Provisions

1 Subject and Scope of this Agreement

1.1 This agreement is an integral part of the GTC. It supplements and specifies the rights and obligations of the parties concerning order processing, which arise for them from the applicable data protection law. It supplements the contractual agreements between the parties in this regard. This may involve one or more contracts between the parties for the provision of IT services for the customer (‘contract’).

1.2 The agreement applies only to services where baseVISION processes personal data on behalf of and for the purposes of the customer (‘order processing’), with the customer either being the controller or processor and baseVISION either being the processor or sub-processor.

1.3 The provisions of this agreement do not restrict the rights and obligations of the parties concerning the provision of services under the contract. Regarding their regulatory subject matter, the provisions of this agreement take precedence over the provisions of the GTC or the contract.

2 Term of the Agreement

2.1 The term of this agreement corresponds to the term of the contract, unless obligations arising from the provisions of this agreement extend beyond this term. In the case of such continuing obligations, this agreement remains in effect until the corresponding obligations have expired.

2.2 This regulation does not modify the termination rights agreed in the contract.

3 Definitions

3.1 The terms highlighted in bold and enclosed in quotation marks in this agreement have the meaning assigned to them throughout the agreement.

3.2 The data protection-related terms used in this agreement, such as ‘personal data’, ‘data subject’, ‘controller’, ‘processor’, or ‘data protection impact assessment’, have the meaning assigned to them in the Swiss DPA or (where applicable) in the EU GDPR.

B. Description of Order Processing and Obligations of the Parties

4 Details on Order Processing and Purpose

4.1 The subject and purpose of order processing are derived from the contract and the service descriptions of baseVISION in conjunction with any separate instructions from the customer. If a separate instruction is not mandatory under applicable data protection law and leads to additional costs for baseVISION, baseVISION may charge these additional costs to the customer.

4.2 The nature of the processing, the type of processed personal data (‘contract-related personal data’), and the categories of data subjects are also determined by the contract, the service descriptions, or the statement of work in conjunction with any separate instructions from the customer.

4.3 Order processing takes place in Switzerland and in EU/EWR states as well as worldwide, whereby baseVISION ensures the data protection legality of the transfer to sub-processors in states without an adequate level of data protection by concluding EU standard contractual clauses (Module 2 or Module 3). baseVISION additionally obtains the customer’s consent in advance for a transfer to sub-processors in states without an adequate level of data protection.

4.4 The duration of processing is determined by section 2.

5 Binding Instructions, Purpose Limitation, and Control

baseVISION undertakes and assures that baseVISION will process all contract-related personal data (i) solely for the purpose described in section 4, (ii) in accordance with the customer’s instructions, and (iii) in accordance with this agreement; and (iv) not use it for its own purposes.

6 Data Security

6.1 baseVISION undertakes to take appropriate technical and organizational protective measures in the interest of the confidentiality, integrity, and contractual availability of the contract-related personal data.

6.2 baseVISION implements access controls, access restrictions, and procedures for regular review, assessment, and evaluation of the effectiveness of technical and organizational measures. Further information on these measures will be provided upon request. In selecting the measures, baseVISION considers the state of the art, implementation costs, as well as the nature, scope, circumstances, and purposes of processing, and the varying likelihood and severity of risk to affected individuals.

6.3 baseVISION is entitled to change security measures at any time, (i) if baseVISION deems it necessary to adapt to new or amended legal provisions or regulatory requirements, or (ii) if the state of the art or the adaptation of internal processes require such changes, provided that these do not lead to a deterioration of the general security of order processing for the customer according to this agreement or (at the discretion of baseVISION) do not negatively affect the rights of the data subjects. baseVISION will inform the customer in a timely manner about such changes.

7 Reporting of Data Security Breaches

7.1 If baseVISION notices a security breach consisting of the accidental or unlawful loss, deletion, destruction, or alteration of contract-related personal data or unauthorized disclosure or access, as well as in the event of a cyber incident (‘data security breach’), baseVISION will report the data security breach to the customer as soon as possible and without culpable delay, but no later than within 36 hours after becoming aware of the data security breach. baseVISION will then (i) investigate the data security breach and determine the impact, (ii) inform the customer in detail about the information security breach, and (iii) take appropriate measures to mitigate the impact and minimize the risk arising from the data security breach for affected individuals.

7.2 baseVISION will reasonably support the customer in fulfilling their obligations to report data security breaches to competent supervisory authorities or affected individuals. This includes, in particular, the provision of results from a forensic investigation (on an ongoing basis) with a description of the affected systems, technologies, data, and/or information.

8 Information and Support Obligations

8.1 baseVISION undertakes to inform the customer as soon as possible and on its own initiative, (i) if baseVISION believes that baseVISION will not be able to fulfill the obligations under this agreement in the foreseeable future; and (ii) about any request to exercise data subject rights that baseVISION has received directly from data subjects in relation to contract-related personal data (provided baseVISION can assign it to the data subject based on the information provided by the data subject; otherwise, baseVISION will ask the data subject to contact the party responsible for data processing).

8.2 baseVISION undertakes to support the customer upon request and for a separate fee in responding to requests from data subjects to exercise data protection rights.

8.3 In addition, baseVISION undertakes to support the customer upon request and for a separate fee in data protection impact assessments and prior consultations with data protection supervisory authorities.

8.4 baseVISION provides the customer with all information reasonably required by the customer to demonstrate compliance with their obligations under applicable data protection law concerning order processing.

9 Confidentiality

9.1 baseVISION undertakes to maintain the confidentiality of the contract-related personal data and to obligate the persons entrusted with order processing to maintain confidentiality.

9.2 These confidentiality obligations continue indefinitely even after the termination of this agreement.

10 Sub-Processors

10.1 Sub-processors are natural or legal persons that baseVISION involves for order processing. baseVISION is entitled to involve sub-processors. In such cases, baseVISION is obliged to conclude an agreement with sub-processors to the necessary extent on the (sub-)order processing, which enables baseVISION to comply with the provisions of this agreement between baseVISION and the customer. This also includes the transfer of baseVISION’s confidentiality obligations to the sub-processor.

10.2 baseVISION will inform the customer upon request of the identity and country of residence as well as the type and location (country) of data processing of the sub-processors involved by baseVISION at the time this agreement comes into effect.

10.3 baseVISION will inform the customer in writing 90 days in advance if baseVISION intends to involve new sub-processors or replace existing ones after the entry into force of this agreement. If the customer does not object in writing to the involvement or replacement of the sub-processor within thirty (30) days from the date of the notification, the new or replaced sub-processor is considered approved.

10.4 The customer must justify any objection to the new or replaced sub-processor. If the objection is due to compelling legal or regulatory reasons, baseVISION may either involve another sub-processor or grant the customer an extraordinary right of termination. If the objection is not due to legally or regulatorily compelling reasons and baseVISION insists on the sub-processor, baseVISION will initiate an attempt to reach an agreement with the customer, to which baseVISION may involve other parties (namely other customers of baseVISION and the sub-processor). If the attempt to reach an agreement fails, the customer is free to refrain from using the services and to terminate the contract extraordinarily.

11 Liability

For liability under this agreement, the liability exclusions and limitations according to the main agreement apply.

12 Return or Deletion of Contract-Related Personal Data upon Termination of Contract

baseVISION will delete the contract-related personal data after the termination of the contract in accordance with the relevant provisions in the contract or, if the customer wishes, return it to the customer in an appropriate format.

13 Audit

13.1 The customer may conduct or have conducted an audit at baseVISION once a year to verify the security measures or other compliance with this agreement. The costs are borne by the customer. baseVISION supports the audits within a reasonable effort free of charge.

13.2 The audit and inspection rights under this agreement apply only insofar as the customer’s contract does not otherwise permit the fulfillment of this agreement by baseVISION.

13.3 If the audit is conducted by third parties, they must commit to confidentiality.

13.4 If the customer operates in a regulated area where an audit right of the supervisory authority is mandatory, baseVISION will allow an audit by a supervisory authority under analogous conditions.

Version 2 – As of: November 1, 2025