Last updated: June 2026

This Privacy Notice explains how C Capital Holdings AG processes your personal data when you visit and use our website, and the rights you have in relation to that data.

C Capital Holdings AG (formerly Youngtimers AG), a company listed on the SIX Swiss Exchange (ticker CCAP), is the controller responsible for the processing of personal data described in this Notice (referred to as “C Capital”, “we”, “us” or “our”).

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where it applies to visitors in the European Economic Area, the EU General Data Protection Regulation (GDPR).

Why do we use your personal data?

1. Delivering the Website

When you access our Website, certain data is processed automatically so that we can deliver the pages to you securely. This includes:

• the IP address of your device;

• the date and time of access;

• the pages visited on our Website;

• the website from which you reached us (referrer);

• whether access was successful, and the volume of data transferred;

• your browser type and operating system.

The legal basis for this processing is our legitimate interest in operating a secure and functional website (Art. 6(1)(f) GDPR; Art. 31(1) FADP).

2. Log data

Access data may be stored in server log files to ensure the functionality and security of the Website and, where necessary, to investigate and enforce our rights. Log files are kept only as long as needed for these purposes and for no longer than [30] days. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR; Art. 31(1) FADP).

3. Analytics

We may use analytics services to understand how the Website is used and to improve it. These services let us analyse traffic and usage patterns without separately identifying you. The legal basis is our legitimate interest in improving the Website (Art. 6(1)(f) GDPR), or your consent where the tool sets non-essential cookies (Art. 6(1)(a) GDPR).

4. Cookies

For details of the cookies we use and how to manage your preferences, please see our [Cookie Notice].

5. Contact and enquiry forms

If you contact us — by email, through a form on our Website, or otherwise — we process the personal data you provide (such as your name, email address and the content of your message) to respond to your enquiry and manage our correspondence with you. The legal basis is the performance of, or steps taken at your request prior to, a contract, and otherwise our legitimate interest in responding to you (Art. 6(1)(b) and (f) GDPR; Art. 31 FADP). Providing this data is necessary for us to reply.

6. Investor relations and shareholder communications

As a company listed on the SIX Swiss Exchange, we process personal data of shareholders, prospective investors and other capital-market participants to manage the investor relationship, to send requested investor-relations updates and event invitations, and to organise and document general meetings. The legal basis is the performance of a contract, compliance with our legal and regulatory obligations as a listed issuer, and our legitimate interest in maintaining investor relations (Art. 6(1)(b), (c) and (f) GDPR; Art. 31 FADP).

7. Newsletters and updates

Where you sign up for our updates, we send them on the basis of your consent or your expressed interest, and we may measure deliverability and engagement to improve our communications. You can unsubscribe at any time using the link in each message or by contacting us. The legal basis is your consent (Art. 6(1)(a) GDPR; Art. 6(6) FADP).

8. Events

If you register for an event we host, we use your data to manage your registration and attendance, to contact you about the event, and to send related materials afterwards. The legal basis is the performance of a contract and our legitimate interest in administering the event (Art. 6(1)(b) and (f) GDPR; Art. 31 FADP).

9. Social media

We maintain profiles on platforms such as LinkedIn, which you can reach via links on our Website. When you interact with us there, the relevant platform processes your data under its own privacy policy and, in some cases, as a joint controller with us. We use only aggregated, anonymous statistics provided by these platforms to understand and improve our presence. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR; Art. 31 FADP).

10. Further purposes

Where necessary, we also process personal data to fulfil contracts, to comply with legal obligations and orders of public authorities, and to protect our rights and those of others, including establishing or defending legal claims (Art. 6(1)(b), (c) and (f) GDPR; Art. 31 FADP).

Who do we share your personal data with?

1. Service providers

We share personal data with third-party service providers who act on our behalf — for example for website hosting and maintenance, data storage, email delivery and event administration. These providers process data only on our instructions and are bound by contract to keep it secure.

2. Group companies

We may share personal data within the C Capital group of companies where this is necessary to provide the services or information you have requested, or to administer events, on the basis of a contract or our legitimate interest (Art. 6(1)(b) and (f) GDPR; Art. 31 FADP).

3. Other recipients

We may also share personal data with:

• our professional advisers (e.g. auditors, lawyers and accountants) when we obtain their advice;

• counterparties, investors and advisers in connection with an actual or potential corporate transaction;

• courts, regulators and authorities where required to comply with a legal obligation or binding order.

Where is your personal data transferred?

C Capital is based in Switzerland and operates with a focus on Asia-Pacific markets. Some of our service providers, group companies and other recipients may process personal data outside Switzerland and the EEA. Where we transfer data to a country that does not provide an adequate level of protection, we put appropriate safeguards in place — typically the European Commission’s standard contractual clauses together with the Swiss addendum, or equivalent guarantees. You can request a copy of the relevant safeguards using the contact details below.

How long do we keep your personal data?

Unless this Notice specifies otherwise, we keep your personal data only as long as necessary for the purposes described above. Once the purpose no longer applies and any statutory retention periods have ended, the data is deleted or anonymised in the ordinary course. As a listed company we are, in some cases, required to retain certain records for longer to meet legal and regulatory obligations.

What are your rights?

Subject to the conditions and limits of applicable law, you have the right to:

• request access to the personal data we hold about you;

• request the correction, deletion or restriction of your personal data;

• receive personal data you provided on the basis of consent or a contract in a commonly used, machine-readable format (data portability);

• withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand;

• object, on grounds relating to your particular situation, to processing based on our legitimate interests — and to object to direct marketing at any time, without giving a reason.

To exercise any of these rights, please contact us using the details in section F.

You also have the right to lodge a complaint with a supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern. If you are in the EEA, you may complain to the authority in your country of residence, place of work or the place of the alleged infringement.

Data security

We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access and disclosure. Please be aware that no transmission of data over the internet can be guaranteed to be completely secure.

Who can you contact?

For any question or request regarding the processing of your personal data, please contact:

We may update this Privacy Notice from time to time. The current version is always available on our Website, with the date of the latest revision shown at the top.