Federal Data Protection Act (nLPD)

The revised FDPA and the GDPR share many key principles, such as transparency, data minimization, and accountability. Notable differences include: - The FDPA applies only to data about natural persons (not legal entities). - Some data breach reporting obligations and data subject rights are less extensive than the GDPR. - The FDPA does not require the appointment of a Data Protection Officer (DPO) in all cases, but international companies may need a Swiss representative.

The FDPA applies to all organizations—public or private—processing personal data within Switzerland, as well as organizations abroad that process data relating to individuals in Switzerland, if the effects are felt in Switzerland.

Individuals have the right to: - Be informed about data processing - Access their personal data - Request rectification or deletion of inaccurate data - Restrict or object to certain types of processing - Be notified in the event of a high-risk data breach - Obtain information about cross-border data transfers

Exoscale maintains a comprehensive privacy and security framework based on both the FDPA and the GDPR. We regularly review and update our privacy statements, implement robust technical and organizational measures, and provide transparent information to customers about data protection practices.

The FDPA places restrictions on transferring personal data outside Switzerland. Exoscale ensures that any cross-border transfers are conducted only to countries with adequate data protection laws, or with appropriate safeguards (such as Standard Contractual Clauses) in place.

You can access our privacy policies, compliance documentation, and additional reports at the Exoscale Compliance Center. For more detailed information or specific requests, our Compliance Team is ready to help.