Terms of Use – Alum+

Date of issuance: 26 June 2026

Last update: 26 June 2026

Classeek SA, with its headquarters at Unlimitrust Campus, 46 route des Flumeaux, 1008 Prilly (Switzerland), offers a Platform called "Alum+"

Defined terms

For the purposes of these Terms of Use, the following terms shall have the meanings set forth below.

• "Alumni" means the graduates of the Customer
• "Classeek" means Classeek SA, the legal entity that owns and operates the Platform
• "Content" means all information, data, files, text, images, and other materials made available on the Platform.
• "Customer" means the music institution managing its Alumni database on the Platform
• "Data Protection Laws" means all applicable laws and regulations relating to the processing, of Personal Data, including but not limited to the General Data Protection Regulation (GDPR), the Swiss Federal Act on Data Protection (FADP) and any relevant local legislation.
• "Personal Data" means any information relating to an identified or identifiable individual, as defined under applicable Data Protection Laws
• "Platform" means the platform "Alum+" as well as related services
• "Terms of Use" means these Terms of Use
• "Users" means the individuals that use the Platform as employees, representatives or agents of the Customer

Description of the Platform

The Platform allows music institutions to manage their Alumni database by automatically scanning public sources to find and organize the achievements and performances of alumni. Further explanations are available on https://alum-plus.com

Acceptance of the Terms of Use

These Terms of Use constitute a legally binding agreement between Classeek and the Customer using the Platform. They set out the legal terms and conditions on which Classeek allows the Customer to access and use the Platform.

By accessing, creating an account or otherwise using the Platform, the Customer acknowledges that it has read and understood these Terms of Use and agrees to be bound by them and to comply with all applicable laws and regulations. The User acting for the Customer warrants that it has the legal capacity to enter into these Terms of Use. If the Customer does not agree with these Terms of Use, it shall immediately refrain from accessing and using the Platform.

Classeek reserves the right to make any changes to these Terms of Use, at its sole discretion. The continued use of the Platform, with or without having expressly accepted the new Terms of Use, shall constitute consent. If the Customer does not agree to such changes, it has no right to use the Platform and must immediately cease use of it. The Customer is responsible for regularly verifying these Terms of Use in their current version, an up-to-date version of which may be retrieved at any time on the Platform.

The Customer shall instruct and ensure that all of its Users comply with the terms and conditions of these Terms of Use. The Customer shall be responsible for any act or omission by its Users that would constitute a breach of these Terms of Use if committed by the Customer itself.

Account and registration

The use of the Platform requires an account. The use of the Platform is subject to a fee. More information is available at https://alum-plus.com

The Customer must ensure that the personal information given for the registration process is accurate, complete and respects in all aspects the Terms of Use. The information must be kept up-to-date.

There will be one account per Customer. The creator of the account will be automatically the admin of it. After signing in, the first admin can add a second admin or transmit the role to another person.

Only the admins of the account can :

• Add until maximum 8 members to the account
• Add or delete alumni on the platform
• Proceed to payment
• Increase or reduce the subscription tiers
• Teminate the subscription
• Delete the account

Classeek may block, terminate or suspend any account or ability to use or access the Platform, in whole or in part, without notice and at all times, at the sole discretion of Classeek, as well as close the Platform.

Permitted use of the Platform

The Customer is entitled to visit the Platform only in conformity with the laws of Switzerland and any other laws that apply. It may solely make legal use of the Platform and any illegal or inappropriate use of them is banned.

In particular, the Customer agrees not to do any of the following in connection with the Platform:

• upload, post, transmit, distribute or otherwise make available any material that contains software viruses or any other computer programs that may harm the Platform or the interests or property of Classeek;
• record, copy, modify, scrape or distribute protected Content from the Platform in any way;
• use any Content or information of the Platform to compete with Classeek;
• commercialize any code or information or software associated with the Platform;
• access, or try to gain access to, data contained in a non-public part of the Platform without having been granted the right to use it;
• use the Platform in any way that, in the sole judgment of Classeek, is objectionable, illegal, inappropriate or which restricts or inhibits any other person from using the Platform, or may harm or make Classeek liable;
• use or attempt to use another's account or create a false identity;
• provide misleading or deceptive information;
• share false information or use the Platform to shock or intimidate others;
• share pornographic or violent Content on the Platform;
• process Personal Data in violation of Data Protection Laws;
• facilitate or assist another person to do any of the above acts.

The Customer shall fully indemnify Classeek and/or its employees for any claim, costs, damage or expense (including lawyer or judicial fees) resulting from the Customer's behavior, in particular (i) their use of the Platform (ii) any breach or non-fulfillment of an obligation contained in the present Terms and conditions and (iii) any other cause resulting in some damage to Classeek.

Payment & Cancellation Policy

The use of the Platform is a yearly paid service. All payments after 30 days are non-refundable, including in case of the closure of an account or of the Platform.

Classeek reserves the right to modify pricing available on https://alum-plus.com and in the Account Settings with prior notice to the Customer.

After first year payment, the Customer can cancel within 30 days and receive a prorated refund for the remainder of their subscription year.

Subscription will be auto renewed after 12 months except if the Customer cancels his subscription. If the Customer cancels his subscription, the Customer will no longer have access to his data after the end of the yearly subscription.

Availability of the Platform

Classeek strives to ensure continuous availability of the Platform but does not guarantee uninterrupted or error-free operation.

Classeek may, at its discretion, modify, suspend, or discontinue any part of the Platform at any time, with or without notice. Classeek shall not be held liable for any loss or damage resulting from planned or unplanned downtime.

If you need to be able to access certain information at any time, you are solely responsible for ensuring that you have a copy that is accessible at all times.

Security

Classeek takes security matters seriously and makes all the reasonable efforts to ensure the best possible security level according to its means. In this regard, Classeek takes standard security measures, implemented by specialists.

However, absolute security cannot be guaranteed. The Customer acknowledges and accepts this inherent risk and shall takes its own security measures, including but not limited to:

• Protect the confidentiality of the login information
• Limit access to the Platform to authorized persons
• Immediately notify Classeek of any unauthorized use of the Platform
• Make sure to log out of the Platform at the end of each session

Disclaimer of warranties and limitation of liability

Within the limits of the law, Classeek excludes all and any warranty, guarantee and responsibility in relation to the Platform.

In particular, Classeek does not give any warranty in relation to the Content of the Platform, should it be its availability, accuracy or lawfulness. Classeek does not warrant that the Platform will be available at all times and expressly reserves the possibility of discontinuing its availability without notice.

Classeek shall not be liable for any damages of any kind, including loss of income or data, suffered by the Customer or any third party, by act of Classeek or of a third party.

Privacy

In relation to the Personal Data relating to Alumni, the Customer acts as data controller and Classeek acts as data processor. The Customer is responsible for ensuring that their collection, storage, and use of Personal Data relating to Alumni comply with all Data Protection Laws. The data processing addendum annexed to the Terms of Use sets out the conditions on which the Customer allows and instruct Classeek to process Personal Data relating to Alumni.

In relation to the Personal Data of Users, Classeek acts as a data controller. The purpose of the processing is to provide and operate the Platform, process transactions, respond to inquiries and requests, detect fraud, recovers debts, review complaints and comply with legal obligations. The legal basis are the pursuit of Classeek's legitimate interests – in this case the execution of the contract between the Customer and Classeek, governed by the present Terms of Use – and compliance with legal obligations. Personal Data is retained as long as an account exists. For information regarding recipients of Personal Data, international transfer and data subject's rights, see Classeek's privacy policy, available at https://classeek.com/company/privacy.

Intellectual property

Intellectual property rights, in particular on brands, logos, designs, photos, videos and domain names, and all other property rights in the Content available on the Platform, are the exclusive property of Classeek and its licensors. This includes rights to all software associated with the Platform. Nothing in these Terms of Use constitutes a transfer of any intellectual property rights.

Licenses

Classeek grants the Customer a limited, non-exclusive, non-transferable, and revocable license to use the Platform and to display the Content of the Platform on their computer screen or on other devices (such as smartphones or tablets), subject to compliance with these Terms of Use. All other uses are prohibited without Classeek's prior written consent.

Assignment

The Customer may not transfer any of it rights or obligations under these Terms of Use without Classeek's prior written consent.

Classeek may transfer all of its rights and obligations under these Terms of Use without the Customer's prior consent, including any Personal Data, in order to ensure the continued operation of the Platform.

Final provisions

If any provision of these Terms of Use is found to be invalid by a court or competent jurisdiction, that provision only will be limited to the minimum extent necessary and the remaining provisions will remain in full force and effect.

These Terms of Use, as well as all matters arising out or in relation to them (including non-contractual disputes or claims and their interpretation), shall be governed by the laws of Switzerland, to the exclusion of the rules on conflicts of laws.

Any claim or dispute in relation to these Terms of Use (including for non-contractual disputes or claims and their interpretation) shall be subject to the exclusive jurisdiction of the Courts of Lausanne, Switzerland.

Data Processing Addendum (DPA)

Parties

This Data Processing Addendum for the outsourcing of the processing of Personal Data (hereinafter referred to as the "DPA") is an integral part of the Terms of Use. For this DPA, Classeek is the "Data Processor" and the Customer is the "Data Controller" (together the "Parties")

Object

The Data Controller entrusts the Data Processor with a certain number of services agreed under the terms and conditions of the Terms of Use, and pursuant to which the Data Processor has undertaken to process personal data on behalf of the Data Controller.

The DPA defines the obligations of the Parties with regard to the protection of personal data and aims to ensure compliance with Data Protection Laws.

The DPA applies to all processing of personal data by the Data Processor on behalf of the Data Controller within the scope of the DPA and solely sets out the obligations relating to the protection of Personal Data between the Parties.

General provisions

Definitions

The concepts of "Personal Data", "processing of Personal Data", "communication of Personal Data", "data controller" or "data processor" used in this DPA are defined in the Art. 1 of the Terms of Use or by the Data Protection Laws.

Order of priority of contractual documents

In the event of any contradiction or inconsistency between the DPA or with any other agreement binding the Parties (including after the conclusion of this DPA), the terms of the DPA shall prevail.

Description of processing

Categories of data subject: Graduate students (alumni) of the Data Controller

Categories of Personal Data: First name, last name, main instrument, graduation year, information about career milestones and other publicly available information

Nature of Processing: Hosting of Personal Data, automated collection and analysis of Personal Data from the web

Purpose(s) of Processing: Provide a platform to manage the Data Controller's alumni database and conduct automated research on alumni's career milestones

Duration of storage of Personal Data or, where this is not possible, the criteria used to determine this duration: As long as the Customer is using the Platform

For transfers to (subsequent) data processors, please also specify the purpose, nature and duration of the Processing: Transfer to subprocessors to ensure provision of IT services (collection, hosting, etc.), for the same duration as mentioned above.

Obligations of the Parties

Data Controller

The Data Controller warrants that it will process the Personal Data that is the subject of this DPA in accordance with Data Protection Laws (including the provision of information to data subjects). It also guarantees that the processing delegated to the Data Processor and its instructions comply with Data Protection Laws. The Data Controller is solely responsible for taking the necessary measures, particularly in terms of security and instructing its staff, to ensure the security of the Personal Data it processes.

The Data Controller has the power to instruct the Data Processor with regard to the processing of delegated Personal Data. In particular, it shall ensure that no processing is carried out other than that which it has entrusted to the Data Processor. It will respond to requests and assist the Data Processor to the extent necessary.

The Data Controller shall communicate the Personal Data to the Data Processor solely for the purpose and for the processing thereof in connection and in compliance with this DPA.

The Data Controller shall inform the Data Processor of any legal and specific obligations incumbent upon it pursuant to Data Protection Laws of which the Data Processor could not reasonably be aware.

Data Processor

Instructions

The Data Processor is required to process the Personal Data entrusted to it in accordance with the Data Controller's instructions, the DPA, and Data Protection Laws, as well as in accordance with the purpose and duration of the processing agreed with the Data Controller.

Confidentiality

The Data Processor shall ensure the confidentiality of the Personal Data processed under the DPA.

The Data Processor ensures that the persons under its responsibility authorized to process Personal Data, in particular its staff, undertake to respect confidentiality and the DPA. It shall ensure that access to Personal Data by these persons is limited to what is necessary. The obligation of confidentiality is maintained even after the end of the activity and the departure of the person for whom the Data Processor is responsible.

The Data Processor shall ensure that its employees responsible for processing are appropriately and continuously trained, instructed and supervised regarding compliance with information security and Personal Data protection requirements.

Security of Personal Data

The Data Processor shall ensure that all appropriate technical and organizational measures have been taken to ensure the security of Personal Data, in particular to prevent Personal Data from being accessed by unauthorized persons, to ensure the availability of Personal Data, to prevent Personal Data from being altered without right or inadvertently and to enable the processing to be traced.

In particular, the Data Processor implements the following measures:

• Measures for pseudonymization and encryption of Personal Data
• Measures to ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services
• Measures to ensure that means are available to restore the availability of and access to Personal Data within an appropriate timeframe in the event of a physical or technical incident
• Procedures to regularly test, analyze and evaluate the effectiveness of technical and organizational measures to guarantee the security of processing
• User identification and authorization measures
• Data protection measures during transmission
• Measures to protect data during storage
• Measures to ensure the physical security of the premises where Personal Data is processed
• Measures for the governance and management of internal IT and IT security
• Measures to ensure data minimization
• Measures to ensure data quality
• Measures to ensure limited data retention
• Measures to ensure accountability
• Measures to ensure data portability and erasure

These measures are considered sufficient by the Data Controller according to the nature of the Personal Data being processed and the circumstances of the processing.

In the event of a breach in the security of Personal Data or an incident relating to the security of Personal Data, the Data Processor shall immediately inform the Data Controller and shall immediately take steps to identify and understand the reasons for and circumstances of the breach or incident. It will take the necessary measures to put an end to the breach and mitigate its consequences for the data subjects.

Assistance

Where applicable and necessary, the Data Processor shall assist in drawing up and updating the register of processing activities subject to the DPA, carrying out impact analyses relating to the protection of data and responding to requests from authorities and data subjects. The time spent will be invoiced at the usual rate by the Data Processor.

Return and deletion of Personal Data

At the end of the DPA, the Data Processor shall delete all Personal Data in its possession unless the Data Controller has previously requested its return.

This is without prejudice to the Data Processor's statutory retention obligations.

Rights of data subjects

The Data Controller is solely responsible for the rights of the data subjects. The Data Processor will assist the Data Controller as best it can in responding to the claims of data subjects relating to the processing delegated pursuant to the DPA (right of access, rectification, deletion, opposition, limitation, portability, etc.).

Requests and queries addressed directly to the Data Processor will be forwarded by the latter without delay to the Data Controller for response, unless otherwise required by law.

The Data Processor will not respond to a data subject's claim, rectify, erase or restrict the processing of Personal Data on its own initiative, but only on the documented instructions of the Data Controller.

Subprocessing

The Data Processor is generally authorized to use one or more subprocessors or to replace an existing subprocessor.

The Data Processor shall inform the Data Controller of any new subprocessor at least 30 days in advance. If the Data Controller objects, the Data Processor may terminate the access to and use of the Platform immediately without penalty. The Data Controller is informed and accepts that the Data Processor may use the following subprocessors: Google Ireland Ltd (Gemini AI Studio), OpenAI Ireland Ltd (Open AI), Anthropic Ireland Ltd (Antropic) and Perplexity AI Inc. (Perplexity).

At the Data Controller request, the Data Processor will indicate which subprocessor effectively processes Personal Data.

The Data Processor shall remain liable to the Data Controller for compliance by its own subprocessors with the obligations relating to the protection of Personal Data in accordance with the DPA, the Main DPA and Data Protection Laws. The subprocessor shall comply with all the obligations imposed on the Data Processor by the DPA.

Any processing of Personal Data by subprocessors may only relate to processing operations that are authorized by the DPA.

Cross-border transfers

Even if the Data Processor process Personal Data mainly in Switzerland, some subprocessors are based abroad.

Personal data may be communicated outside of Switzerland if (i) the country of destination ensures an adequate level of protection for the transfer in question or, failing that, if (ii) the Data Processor and the importers have engaged in standard contractual clauses recognized and approved by the competent supervisory authority for the protection of Personal Data.

Responsibilities

The Data Controller shall indemnify and defend, at its own expense, the Data Processor, against all costs, claims, damages or expenses incurred by the Data Processor or for which the Data Processor may become liable as a result of any breach or instruction by the Data Controller or its employees or agents.

The Data Processor shall indemnify the Data Controller for any damage caused by its breach of the DPA. In any event, the Data Processor's liability is limited to an amount not exceeding the last twelve (12) months of its remuneration as from the date of the Data Controller's damage.

Notwithstanding the liabilities set out in this section, neither party shall be liable for any indirect or consequential damages of the other party, such as (but not limited to) loss of revenue, loss of profit, loss of opportunity, loss of goodwill and third party claims.

No limitation or exclusion of liability shall apply in cases of dol or gross negligence.