Privacy Policy
- Introduction: This Privacy Policy explains how your data is collected, used, disclosed, and safeguarded when you visit this website and use the provided services. For the sake of simplicity, the terms and definitions of the GDPR are used in this Privacy Policy rather than those of the Swiss Data Protection Act.
- Information collected: The following data may be collected and processed:
- Personal information: Name, email address, phone number, billing address, and payment information.
- Usage data: Details of your visits to the website and the resources you access, including but not limited to, traffic data, location data, and other communication data.
- Communication data: Records of any correspondence with you, including emails, messages, and any other communication.
- How your personal, communcation and usage data is used: These information is used in the following ways:
- To provide legal services: To provide, manage, and administer to the legal services to you.
- Communication: To communicate with you regarding your inquiries, requests, and services.
- Billing and payments: To process payments and manage billing.
- Improvement: To improve the website and services based on user feedback and usage patterns in case of technical issues. No cookies or analysis tools are used.
- Disclosure of your information: Your personal information may be shared with:
- Service providers: Third parties who assist us in providing the services, such as payment processors and IT service providers.
- Legal obligations: Government authorities or other third parties if required by law or necessary to protect rights.
- Data security: Appropriate technical and organizational measures are implemented to safeguard your personal data against unauthorized access, alteration, disclosure, or destruction. End-to-end encrypted third-party providers that use servers located in Switzerland, such as ProtonMail and Tresorit, are used.
- Legal basis: The legal basis for the processing in connection with the legal services is the performance of a contract or taking steps at the request of the data subject prior to entering a contract according to Art. 6 (1)(b) GDPR.
The communication with you happens on the ground of taking steps at the request of the data subject prior to entering a contract according to Art. 6 (1)(b) GDPR or because it’s necessary for the purposes of the legitimate interest in an efficient communication pursuant to Art. 6 (1) (f) GDPR, e.g. if you have reached out to us with a general question and get a respond. In other cases, the legal basis is your consent pursuant to Art. 6 (1)(a). You can withdraw your consent at any time for the future.
Billing and payments is performed on the grounds of Art. 6 (1)(b) GDPR (performance of a contract).
Improvement of the website and services happens on the grounds of Art. 6 (1)(f) GDPR (our legitimate interest in an efficient and economic online presence).
- Third party suppliers:
- MailerLite (Newsletter Service): MailerLite is used as the service provider for newsletter distribution and email marketing automation. If you subscribe for the newsletter, MailerLite will process your personal data in order to enable the creation, management, and delivery of email newsletters, as well as the administration of subscriber lists and analysis of campaign performance.
The categories of personal data processed include your email address, name (if provided), and other information you provide when subscribing to the newsletter or interacting with emails we send. In addition, MailerLite collects usage data, such as information about when and how you interact with the newsletters (for example, the time and date of opening an email, browser and device information, location data, actions taken within the email, and click statistics).
The purpose and legal basis for processing these data are as follows:
The processing of your data is necessary to manage your newsletter subscription, send you email newsletters, and respond to your related requests or inquiries. This processing is based on your consent (pursuant to Article 6(1)(a) GDPR) and, where applicable, for the performance of a contract (Article 6(1)(b) GDPR).
Usage data is processed to analyze the performance of the email campaigns, optimize the marketing activities, and improve MailerLite’s services, which is based on the legitimate interest in effective marketing and service optimization (Article 6(1)(f) GDPR).
MailerLite Limited may transfer your data to MailerLite, Inc. 548 Market St, PMB 98174, San Francisco, CA 94104-5401, United States of America. MailerLite, Inc. is certified in the EU - US Data Privacy Framework, which is an adequacy decision by the European Commission.
For more details on the processing by MailerLite, please see their data privacy at https://www.mailerlite.com/legal/privacy-policy
- Calendly (Meeting Tool): Calendly, LLC, 115 E Main St., Ste A1B, Buford, GA 30518, USA is used for online appointment scheduling. Calendly enables the client to book appointments directly via an online booking page, which is integrated on the website or linked in the communications.
The categories of personal data processed include the data you provide when booking an appointment (such as your name and email address). In addition, Calendly automatically collects usage data, such as your IP address, device and browser information, cookies, location data, and information about your interactions with the Calendly booking page.
The use of personal data your provide us during the booking is based on out legitimate interest pursuant Art. 6 (1) (f) GDPR in providing and managing appointment scheduling services efficiently. If consent is requested—for example, for receiving appointment reminders via email or SMS—the legal basis for processing is Article 6(1)(a) GDPR. As always, such consent is voluntary and may be withdrawn at any time with effect for the future.
Usage data and technical information are also processed for analytics, service optimization, product improvement, and to ensure the security and reliability of the booking system. This is based on the legitimate interest in the economic and efficient operation of the website and the continuous enhancement of the services (Article 6(1)(f) GDPR).
Transactional emails, such as booking confirmations, reminders, and follow-ups, are also sent as part of the appointment process on the basis of contract performance (Article 6(1)(b) GDPR).
Data is processed in the USA. Transfers are based on the EU-U.S. Data Privacy Framework, in which Calendly, LLC is certified.
For further questions regarding Calendly's processing of your data, please see their privacy notice at https://calendly.com/legal/privacy-notice
- Proton (E-Mail): Proton Mail, Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Geneva, Switzerland is used as the secure email hosting service for regular business correspondence. In this context, Proton Mail processes personal data of email recipients. The categories of personal data processed include the recipient’s email address, subject line, email size, timestamp, and, where applicable, the names of attachments. In addition, technical log data such as the time of delivery, storage usage, and email activity may be processed. If relevant, Proton Mail also processes the recipient’s IP address during email transfer.
The purpose and legal basis for processing these data are as follows:
For the purpose of email communication, the processing of recipient data is necessary to deliver and manage emails and to respond to your inquiries (pursuant to Article 6(1)(b) GDPR). Where required, processing may also be based on the legitimate interest in ensuring efficient and secure business communication (Article 6(1)(f) GDPR).
For spam and virus protection as well as abuse prevention, metadata related to the recipient (such as email address, subject line, and IP address) is analyzed, based on the legitimate interest in maintaining the security and integrity of the communication infrastructure (Article 6(1)(f) GDPR).
For further questions regarding ProtonMail’s processing of your data, please see their privacy notice at https://proton.me/de/legal/privacy
- Web Hosting and Server: OVH Groupe SAS, 2 Rue Kellermann, 59100 Roubaix, France (“OVHcloud”) as the web hosting provider. OVHcloud is responsible for hosting the website and storing all related data on servers located in France or other countries of the European Union, depending on the chosen data center.
When you visit the website, OVHcloud processes technical and usage data required to establish a connection and display content. This includes your IP address, date and time of access, requested files, browser type and version, operating system, referrer URL, and the requesting provider. In the course of hosting, all personal data that you submit via the website (e.g., via contact forms or user registration) may also be processed and stored on OVHcloud’s servers.
The processing of this data is necessary to ensure the reliable operation of the website (pursuant to Article 6(1)(f) GDPR—our legitimate interest in a secure and efficient website infrastructure).
For more information about OVHcloud’s data processing and security practices, please visit https://www.ovhcloud.com/en/about-us/security-compliance/ and https://www.ovhcloud.com/en/personal-data-protection/
- Your rights: You have the following rights regarding your personal data:
- Access: You can request access to the personal information is held about you.
- Correction: You can request correction of any inaccurate or incomplete information.
- Deletion: You can request deletion of your personal data, subject to certain legal obligations.
- Objection: You can object to the processing of your personal data.
- Data portability: You can request the transfer of your data to another service provider.
- Complaint: If you believe that the processing of your personal data violates applicable data protection regulations, you have the right to lodge a complaint with a supervisory authority.
- Withdrawal of consent: You can withdraw a consent that you have given regarding the processing of personal data at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
- Restriction: You can obtain restriction of processing.
- Data storage: Your data is stored until the purpose of storage has been fulfilled and no statutory retention periods require further storage.
- Cookies and tracking technologies: This website does not use cookies.
- Changes to this privacy policy: This Privacy Policy may be updated from time to time to reflect changes in practice or for other operational, legal, or regulatory reasons. You will get updated by the posting of the new Privacy Policy on this website.
- Contact information of the data controller: Imprint
