Privacy Policy For Geberit mobile apps

This Privacy Policy applies to the use of the Mobile Apps and the services offered through them to the extent that your personal data is processed. “Personal Data” is all information relating to an identified or identifiable natural person.

2.1 The operator of the Mobile Apps and the Controller responsible for processing your Personal Data is Geberit International AG, Schachenstrasse 77, 8645 Rapperswil-Jona, Switzerland (“GEBERIT INTERNATIONAL AG”, “we”, “us”).

2.2 You can contact our Data Protection Officer by email at dataprotection@geberit.com or by post at the address given above, for the attention of the “Data Protection Officer”.

We process your data in accordance with applicable data protection legislation. You can find out the purposes for which the data is processed and the specific legal basis on which it is based in the description of the relevant processing activity. We will only process your data if this can be done in a fair and lawful manner and, where a legal basis is required, on the basis of one or more of the following legal grounds:

3.1 You have given your consent to the processing of your data for one or more specific purposes. You may withdraw your consent at any time with future effect by contacting us using the details provided above; this will not affect the lawfulness of the processing carried out prior to your withdrawal.

3.2 The processing is necessary for the performance of a contract to which you are a party, or for the implementation of pre-contractual measures taken at your request;

3.3 The processing is necessary for compliance with a legal obligation to which we are subject;

3.4 The processing is necessary to safeguard our legitimate interests or those of a third party, unless your interests or fundamental rights and freedoms, which require the protection of your data, take precedence. We have carried out a prior balancing of interests to ensure that your interests are adequately taken into account and do not take precedence. The interests we pursue are described in the context of each specific processing activity. You may object to the processing of your data at any time for a legitimate reason relating to your personal circumstances, with effect for the future. We will no longer process your data unless there are compelling legitimate grounds for doing so that override your interests, rights and freedoms, or that serve to establish, exercise or defend legal claims. If you require further information regarding the balancing of interests or wish to lodge an objection, please contact us using the contact details provided above.

This section provides information about what Personal Data we collect from you and how we process it.

4.1 Downloading the Mobile Apps

When you download the Mobile Apps, certain information is forwarded to the online store for mobile applications that you have chosen. As this data is processed exclusively by the relevant online shop, we have no control over how it is handled. Further information can be found in the terms and conditions and privacy policy of the relevant online shop provider.

4.2 Use of Mobile Apps

4.2.1 When you open the Mobile Apps for the first time, we ask you to specify the country where you intend to use the Mobile Apps, so we can provide services in the appropriate language and with the intended functionality. The legal basis for this is our contractual relationship with you in accordance with the ‘Terms of Use for Geberit Mobile Apps’.

4.2.2 When you use the Mobile Apps, the backend servers – which, for example, provide connectivity for the Cloud Services or user manuals for Geberit products – automatically and temporarily collect information transmitted from your mobile device in server log files. The data in question is as follows:

• The IP address of the mobile device sending the request
• Request path and arguments
• Time of request
• Operating system of the mobile device sending the request

The data in these server log files is not processed in a way that allows conclusions to be drawn about specific individuals. In cases where the information listed above contains Personal Data (in particular the IP address), the legal basis for the collection of such data is our legitimate interest in the proper functioning of our Mobile Apps. Logging and analysing this data also helps us ensure the security of our IT systems. Your Personal Data will not be processed further. Your Personal Data will be deleted as soon as it is no longer necessary for the purposes for which it was collected or processed. If the data is stored for other similar reasons, your Personal Data will be anonymised so that it can no longer be linked to or used to identify you.

4.2.3 If the Geberit ID is used for user authentication and/or authorisation in the Mobile Apps, the following information is stored locally on your mobile device: Unique identifier (UID) of the Geberit ID, your name, your address (optional), your email address, your telephone number and your country. This information is required to authenticate and/or authorise the user. When you log out, this locally stored data is automatically deleted. No data is transmitted outside your mobile device except for authentication and/or authorisation purposes. This local data is automatically deleted when you log out. The processing takes place on the basis of the contract that you concluded with us when the Geberit ID was created.

4.3 Analysis data

When using the Mobile Apps, the online shop you choose for apps and/or the operating system provider may collect usage and diagnostic data, such as the frequency of use of the Mobile Apps and information about app crashes, and provide us with this data in an aggregated and anonymised form. The collection of such data is subject to the terms of use and privacy policies of the online shop and/or the operating system provider and is therefore beyond our control. The legal basis for reviewing and evaluating this data is our legitimate interest in the analysis, optimisation and economic operation of the Mobile Apps.

Personal Data is only stored locally on your mobile device. GEBERIT INTERNATIONAL AG has no access to this data and does not disclose it to third parties. This may be different when using the Geberit ID. Please therefore refer to the corresponding Privacy Policy for the Geberit ID.

As a data subject, you have the right to access, rectify or erase your Personal Data, as well as the right to restrict or object to its processing.

Since we do not have access to the Personal Data stored on your local device, you can exercise these rights yourself by updating or deleting your information directly within the Mobile Apps.

If you have any questions, please send them to us in writing using the contact details provided above or via email to the following address: dataprotection@geberit.com.

The latest version of this Privacy Policy is always available in the Mobile Apps (usually under the “About” or “More” menu items).

Last updated: September 2026

Updates from the previous version of this document (October 2025):

• Clarification: GEBERIT INTERNATIONAL AG designated as the operator of the Mobile Apps
• Chapter 3: Information on legal bases revised
• Section 4.2.1: Legal basis added
• Section 4.2.2: Wording revised
• Section 4.2.3: Information regarding Geberit ID added