Cookies and Tracking Policy

We may collect information about you when you use our websites as well as our mobile applications, or when you apply for or use other services offered by Credit Suisse in the following ways:

• We collect certain information about you (i.e. browsing history, usage of mobile application and website) through our use of cookies, pixels, plugins, software development kits (SDKs) and other tracking technologies when you use our website and/or our mobile applications. For example, we identify and store the region where you are located based on your partially-masked IP address (which is anonymized immediately thereafter) in order to direct you to the appropriate country specific webpage. The collection of information on our websites and mobile applications are described in more detail below.
• We may also collect personal information about you as a result of us recording communications, such as telephone calls or chat conversations, with you. We may store those recordings, in order to satisfy our legal and regulatory obligations, for quality assurance, or for the other purposes described in this Policy.
• If you use the password-protected or country-specific portions of our website, we may ask you to provide us with certain information about yourself. This information may include your name, company name, title, address, country of residence, e-mail address, telephone number, account number, assets, income and/or financial situation. We use such information about you to verify your identity and eligibility to receive certain products or services, to provide information to you about products and services that we believe may be of interest to you, to record your interest in products and services that we offer, and to respond to your requests for information. We may also use cookies or other tracking technologies on portions of our websites or mobile applications to collect website and mobile application usage information and to optimize your user experience on our website and mobile application (e.g. remembering your country of residence). We may also collect personal information you provide to us in applications, forms, questionnaires or agreements you enter into with us or in the course of your establishing or maintaining a customer relationship with us, including information about your credit history or financial situation and your transactions with us or our service providers.
• Under certain circumstances, third parties may collect anonymized information about your use of our and other websites or mobile applications and make this data (in anonymized form) available to us, to help us understand (i) from which geographical regions users have viewed our website or used our mobile application, (ii) user behavior with respect to Credit Suisse ads that are posted on other websites and (iii) the names of other websites on which you were shown Credit Suisse ads.

To the extent permitted by law, Credit Suisse may disclose your information to its affiliates, and their agents and third-party service providers, inside or outside your country of residence, to perform services for Credit Suisse. All Credit Suisse service providers that have access to personal data collected through our websites or our mobile applications are required to treat the information confidentially, use personal data only for the purpose for which it is provided, and respect all applicable data protection laws, Credit Suisse policies, and data protection contractual terms.

Credit Suisse may also disclose your information to governmental agencies or entities, regulatory authorities or other persons in line with:

• Applicable law, regulations, court order or official request;
• Any requests from or guidelines issued by regulatory or other authorities; or
• Similar purposes as are (i) either required or permitted by applicable law and (ii) permitted by Credit Suisse policies.

Please note that if you transfer your information to us through an open network, (such as the internet or an email service), such open network may not be a secure environment, and there is a possibility that your information may be (i) lost, (ii) transferred to another country and/or (iii) viewed and/or used by unauthorized third parties. If you decide to provide information to us through an open network, Credit Suisse cannot ensure the security and confidentiality of your information. Therefore, we ask that you consider using alternative methods of communication when sending us your sensitive personal or confidential information.

We use your personal information to enhance the quality of our products and services as well as to maintain contact details for those with whom we interact. We restrict access to personal information about you to the employees, agents or other parties who need to know that information to provide products or services to you. We maintain physical, electronic and procedural safeguards to guard your personal information, including firewalls, individual password, encryption, and authentication technology. Other than as set forth in this Policy, we do not use or disclose your personal information to third parties, except with your consent or if disclosure is permitted by both law and as contemplated in the privacy notice(s) that we provide to you. In cases where we believe that additional products and services may be of interest to you, we may share your personal information with affiliates of Credit Suisse to the extent permitted by both applicable law and internal Credit Suisse policies.

We will retain your personal information in accordance with applicable data protection laws for so long as it is needed. Your personal data will be processed in accordance with the Credit Suisse Privacy Notice accessible through the official Credit Suisse website (e.g. for Switzerland please visit https://www.credit-suisse.com/ch/en/legal.html). If you are a resident of California U.S., please see our Annual Notice for California Resident Web-Users (found here: https://www.credit-suisse.com/media/assets/legal/ccpa-annual-notice-for-webusers.pdf), or any other privacy notices that may have been separately provided to you, for additional information about personal information that we collect and your rights under the California Consumer Privacy Act of 2018 ("CCPA").

All electronic messages sent to and from Credit Suisse are automatically retained in a distinct log system, which preserves the evidential validity of the e-mails.

Electronic messages are protected by reasonable technical and organisational measures and may only be accessed in justified cases in line with applicable laws, regulations and internal Credit Suisse polices to specific persons in defined functions (e.g. Legal, Compliance, and Risk).

If a visitor uses one of the contact e-mail addresses or the forms published by Credit Suisse on our websites or in our mobile applications in order to contact Credit Suisse, he/she expressly authorizes Credit Suisse to respond by the same means either to the sender address or to another indicated address. E-mail is not a suitable means for sending confidential information. Please note that banking secrecy cannot be guaranteed when using any means of electronic communication. Information provided via forms may be merged with analytics data - subject that the visitor has provided explicit consent to tracking - to deliver more tailored information while processing an inquiry.

On our websites and mobile applications, we employ cookies, plugins, pixels (on certain webpages), software development kits (SDKs) and other technologies to improve the functionality, improve your online and mobile user experience, and to help us deliver better and more relevant online advertising campaigns. On certain portions of our websites and mobile applications, we use products and services provided by third-party service providers who, as part of the product or service being provided, utilize tracking technologies (including cookies, pixels, plugins, software development kits (SDKs) and other technologies), which may track, use and/or share your personal information. Information collected by different tracking technologies can be merged to further tailor our campaigns.
Information on our use of tracking technologies (e.g. cookies, plugins, pixels) is further described in the sections below. With the exception of tracking by "Necessary Cookies" (as defined in the table below), we will not track you using cookies, pixels or plugins or other technology unless you explicitly consent to such tracking via either the consent manager you receive when first accessing our websites or the consent manager screen when you first launch our mobile applications. The privacy settings can be amended at any time either via the link in the footer on the website by clicking on "configure cookies" or in your personal settings within the mobile applications.

For users using our U.S. country-specific pages, please see "Use of Tracking Technologies for U.S. Users" below for additional information specific to you.

Cookies

Cookies are small files, which are stored on your device to ensure the functioning of websites and mobile applications. These files document your visit to a website or a mobile application, and allow developers to track and implement your preferences and settings. Cookies can also help websites or mobile applications developers gather statistics about how often certain areas of the website or mobile application are visited and tailor the website or mobile application to be more useful and user-friendly. For more information about cookies, including how to control or delete them, please feel free to visit the U.K. Information Commissioner's Office website (https://ico.org.uk) or https://gdpr.eu/cookies/.

We use cookies both created and implemented by Credit Suisse and third-party cookies created by vendors who provide services to us. The cookies that we use on our websites or mobile applications, and the purposes for which they are used, are listed in the table below.

Plugins

A plugin is a piece of software that adds a specific functionality or type of content to a website or a mobile application. For example, our website uses social media plugins, which, when clicked, connect to Credit Suisse's profile pages on various social media platforms. Other types of plugins – although not necessarily used on our website – could include code to allow for a video to be displayed and viewable on a particular webpage or code to display the social media feed from a particular social media user's profile directly onto a webpage

Our website uses the social media plugins listed in the table below to provide you with the opportunity to access our profile pages on third-party social media platforms. By clicking on a social media plugin, you acknowledge that you will leave our website and access a third-party social media platform, and you understand that your personal information may be collected, used and/or shared in accordance with such third-party social media platform's privacy policy. For more information about the social media provider plugins used on our website and such third-party social media provider's privacy practices, please click on the applicable "privacy" link in the table below.

Tracking-Pixels

A tracking pixel is a small piece of code we use to collect and share with online advertisers information on your usage of our webpages and mobile applications, such as the pages that you have visited, or the way you have interacted with them. Through the tracking pixels, your browser automatically establishes a connection with the server of an online advertiser. In this way, the online advertiser receives the information that you have accessed one of our websites or mobile apps. This allows us to ensure that we are serving ads that match your interests, when you are visiting any of the websites of the online advertiser, or a website that includes ads served by the online advertiser. If you are authenticated to an online advertiser using tracking pixels, e.g. by being registered and logged in to a social network, the online advertiser can assign the visit to one of our websites or the access of our mobile applications to your account. We have no influence on the extent to which the data collected through the tracking pixels is used by the online advertisers and therefore direct you to their privacy notices linked to in the table below.

Please note that this Policy is a global policy reflecting Credit Suisse websites and mobile applications activities across all Credit Suisse country and global websites and mobile applications and some third-party tracking technologies described in this Policy are not used on the U.S. Country Specific Pages.

Tracking pixels are not used on portions of our websites or mobile applications intended primarily for U.S.-based users. This includes the U.S. homepage and other U.S.-specific webpages, but it does not include certain global portions of our website (such as the "Careers" page).

Consent Manager on our website and mobile applications

You can decline consent for us to use third-party cookies, pixels, social media plugins and other tracking technologies when your device first accesses our website and/or mobile application by adjusting your privacy settings on the consent manager screen. The consent manager will display when:

Website (i) your device accesses our website for the first time, (ii) your device accesses our website for the first time after deleting cookies in your browser, or (iii) you click the "Privacy Preferences" link at the bottom of each page of our website. Please note that if you are using a shared device, consent preferences may already have been set. You cannot decline consent for the use of Necessary Cookies (as defined in the table above) that are used to ensure the functionality and/or maintenance of our website.

Mobile Applications (i) when you first install and launch one of our mobile applications, (ii) you delete, reinstall and launch one of our mobile application, (iii) you first install and launch our mobile applications on a new or additional device, or (iiii) open the "Privacy Preferences" in your personal settings within the mobile applications.

Do Not Track settings

Through certain web browser settings, you may have the option to utilize Do Not Track technology to control the tracking of your online activities across websites and/or mobile applications. Please note, however, that Credit Suisse may not always be able to recognize Do Not Track signals from your browser. The use of Do Not Track technology may prevent the consent manager from properly displaying.

Please note that, unlike cookies, you cannot control the deletion of tracking pixels yourself (e.g. by deleting them from your browser cache) because tracking pixels, unlike cookies, are stored on the servers of online advertisers and not in your browser.

By providing your e-mail address, you consent to receive newsletters and other marketing e-mails from Credit Suisse.

In order to constantly improve our offers and to send you content that corresponds to your interests, we track your behavior in connection with the newsletters and other marketing e-mails (e.g. e-mail opens and clicks).

We reserve the right to share your data with affiliated entities of the Credit Suisse Group globally and to have such data processed by a service provider globally on our behalf.

Our websites and mobile applications may contain hyperlinks to other websites that are not operated or monitored by Credit Suisse. These other websites are not subject to this Policy and we are not responsible for their content or for their treatment of personal data. Your use of these links will be at your own risk.