Privacy Policy
Last updated: November 28, 2025
At ExitAce AG ("ExitAce", "we", "us", "our"), we take data protection seriously. This Privacy Policy explains how we collect, use, disclose and protect personal data when you visit our websites, use our online tools or interact with us.
This Privacy Policy is designed to comply with the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR), where it applies to our processing activities.
The controller responsible for processing your personal data:
This Privacy Policy applies to:
- ›visitors to our websites
- ›users of our online tools and calculators
- ›recipients of our newsletters and marketing communications
- ›business contacts and prospective clients who interact with us
It does not apply where we process personal data under specific engagement letters or mandates that contain separate privacy provisions.
DATA_YOU_PROVIDE
- ›identification and contact details (name, job title, company, email, phone)
- ›company and deal information (industry, size, revenue, metrics you enter into our tools)
- ›information in enquiries, forms and messages (including attachments)
- ›newsletter and marketing preferences
DATA_COLLECTED_AUTOMATICALLY
- ›technical data (IP address, browser type, device type, operating system)
- ›usage data (pages visited, date/time of access, time spent on pages)
- ›referrer data (the website or source that linked you to our site)
DATA_FROM_OTHER_SOURCES
- ›publicly available sources (commercial registers, company websites, professional networks)
- ›business partners and service providers in accordance with applicable law
OPERATION_OF_WEBSITES_TOOLS
To operate, maintain and secure our websites and tools, including ensuring technical availability and preventing misuse or security incidents.
Legal basis: Legitimate interests; contract performance where applicable
RESPONDING_TO_ENQUIRIES
To respond to enquiries, send requested materials (pitch decks, research, valuations), schedule and conduct calls, and evaluate potential business relationships.
Legal basis: Contract/pre-contractual measures; legitimate interests
MARKETING_NEWSLETTERS
To send newsletters, market insights, invitations and marketing communications. We only send electronic direct marketing after obtaining explicit consent, typically via double opt-in.
Legal basis: GDPR Art. 6(1)(a) consent; FADP consent and legitimate interests
ANALYTICS_IMPROVEMENTS
To understand how our websites are used and improve content, usability and performance.
Legal basis: Consent for analytics cookies; otherwise legitimate interests
COMPLIANCE_LEGAL
To comply with legal obligations, establish or defend legal claims, and prevent fraud or unlawful activities.
Legal basis: Legal obligation; legitimate interests
We may share personal data with:
- ›IT and hosting providers
- ›CRM, email and marketing automation providers
- ›analytics providers
- ›professional advisers (lawyers, tax advisers, auditors) where necessary
- ›authorities and courts where required by law
Where third parties process personal data on our behalf, we conclude appropriate data processing agreements with them.
We use cookies and similar technologies (tags, pixels, local storage) on our websites:
For visitors in jurisdictions requiring consent (EU/EEA), non-essential cookies are only set with your consent via our cookie banner. You can grant or withdraw consent at any time and configure your browser to block or delete cookies.
We primarily process personal data in Switzerland and the European Economic Area (EEA). If we transfer personal data to countries without adequate data protection, we ensure appropriate safeguards such as standard contractual clauses approved by the European Commission and/or Swiss authorities.
We retain personal data only as long as necessary:
Legal retention obligations (commercial or tax law) may require longer retention.
Under the FADP and GDPR, you have the following rights:
- ›Access: know whether we process your data and receive a copy
- ›Rectification: have inaccurate or incomplete data corrected
- ›Erasure: request deletion, subject to legal retention obligations
- ›Restriction: request processing be restricted under certain conditions
- ›Portability: receive your data in a machine-readable format
- ›Object: object to processing based on legitimate interests or direct marketing
- ›Withdraw consent: at any time, without affecting prior lawful processing
To exercise your rights, contact:
info@exitace.comYou also have the right to lodge a complaint with a competent data protection authority.
If you subscribe to our newsletter, we will send you information about M&A, market developments, valuations and our services. We use a double opt-in process to confirm your subscription.
You can unsubscribe at any time by:
- ›clicking the unsubscribe link in any marketing email
- ›contacting us at info@exitace.com
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
We may update this Privacy Policy from time to time. We will publish the updated version on our website with an updated "Last updated" date. Material changes may be highlighted separately. Your continued use of the Services after changes become effective constitutes your acknowledgement of the updated Privacy Policy.
If you have any questions about this Privacy Policy or our data protection practices: