Privacy Policy

This Privacy Policy explains which personal data we process in connection with our activities, services and website, for which purposes, how and where we process it, and the rights of data subjects. Additional legal documents may apply to individual services.

1. Contact details

Controller: Edoardo Köppel, Köppel-Legal AG, Maihölzli 6, 6331 Hünenberg, Switzerland; [email protected]. We will indicate where another controller is responsible in an individual case.

Data protection adviser

The contact for data subjects and authorities is Edoardo Köppel at the above address or [email protected].

2. Terms and legal bases

2.1 Terms

Personal data means information relating to an identified or identifiable natural person. A data subject is a person about whom we process data. Processing means any operation involving personal data, including collecting, storing, adapting, using, disclosing, linking, deleting or destroying it.

2.2 Legal bases

We process data under Swiss law, especially the Federal Act on Data Protection (FADP) and Data Protection Ordinance (DPO).

3. Nature, scope and purpose

We process data required to provide our activities and services securely and reliably. This may include master and contact data, browser, device, content, metadata, usage, location, sales, contract and payment data. We retain data only as long as required for its purpose or by law, then anonymise or delete it. Specialist third parties may process data for us or jointly with us under appropriate safeguards. Processing is generally based on consent or, where permitted, on a contract, legal obligation or overriding interest. We may also use data from third parties, public sources or our activities where lawful.

4. Communication

We process contact data provided by post, email or other channels and may store it in an address book or CRM. Persons providing data about others must ensure its accuracy and protect their privacy. We use bexio (bexio AG, Switzerland) for customer relationship management.

5. Applications

We process applicant data to assess suitability and, where applicable, perform an employment contract. This includes requested information and data voluntarily supplied in cover letters, CVs, other documents and online profiles. With consent, we may retain data in a talent pool for future vacancies and maintain contact.

6. Data security

We use appropriate technical and organisational measures to protect confidentiality, availability, traceability and integrity, although absolute security cannot be guaranteed. The website uses SSL/TLS transport encryption (HTTPS). Digital communications may be subject to lawful or unlawful surveillance by authorities in Switzerland or abroad, over which we have no direct control.

7. Personal data abroad

We generally process data in Switzerland but may transfer it abroad. Transfers are made to countries recognised by the Swiss Federal Council as providing adequate protection or on the basis of safeguards such as contracts and standard data protection clauses. Exceptional transfers without adequate protection may occur where legal requirements are met, including express consent or a direct connection with a contract. Information about safeguards is available on request.

8. Rights of data subjects

8.1 Data protection rights

Data subjects may request access and information, rectification, completion, restriction, erasure, objection, and release or transfer of data. We may defer, restrict or refuse requests where permitted, for example to protect business secrets, other persons or statutory retention duties. Exceptional costs are communicated in advance. We must identify persons exercising rights and they must cooperate.

8.2 Legal protection

Data subjects may pursue legal remedies or complain to a competent authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC).

9. Use of the website

9.1 Cookies

We may use first- and third-party cookies. Session cookies are deleted when the browser closes; persistent cookies remain for a defined period. Cookies may recognise a browser, measure reach or support marketing. You may disable or delete cookies, although some functions may then be unavailable. Where required, we request consent. Advertising opt-outs are available through YourAdChoices and Your Online Choices.

9.2 Logging

We may log date, time, time zone, IP address, HTTP status, operating system, browser, language, page, data volume and referrer to provide our online presence reliably and securely.

9.3 Tracking pixels

We may use small invisible images or scripts known as tracking pixels or web beacons. They can collect information comparable to log files.

9.4 Comments

Where comments are enabled, we process submitted information, IP address, date and time to publish comments and prevent misuse. Email notifications of new comments can be unsubscribed from at any time.

10. Notifications and communications

We send communications by email and channels such as instant messaging or SMS.

10.1 Performance and reach measurement

Messages may contain links or pixels recording openings and clicks, including on a personal basis, so we can improve relevance, usability, security and reliability.

10.2 Consent and objection

Unless another legal basis applies, we require consent to use contact details. Where possible, we use double opt-in and may log IP address, date and time. You may object to newsletters and related statistics at any time; necessary service communications remain reserved.

10.3 Service providers

We use Brevo (Sendinblue GmbH, Germany) for email and instant-messaging communications.

We use social media and online platforms to communicate and provide information. Data may be processed outside Switzerland. Each platform’s terms and privacy policy also apply and explain rights directly against the platform.

12. Third-party services

We use specialist third-party services and may embed their functions and content. They may temporarily collect IP addresses and process aggregated, anonymised or pseudonymised usage data. We use services from Google (Google LLC / Google Ireland Limited) and Microsoft (Microsoft Corporation / Microsoft Ireland Operations Limited).

12.1 Digital infrastructure

We use Hetzner (Germany) for hosting and infrastructure.

12.2 Appointment scheduling

We use Calenso (Calenso AG, Switzerland) for online appointments. Its terms and privacy policy apply.

12.3 Audio and video conferencing

We use Google Meet, Microsoft Teams and Zoom for online meetings and webinars. Their terms and privacy policies apply. We recommend muting the microphone by default and blurring or replacing the background where appropriate.

12.4 Maps

We use Google Maps and Google Maps Platform to embed maps.

12.5 Digital audio and video content

We use YouTube to play video content.

12.6 Fonts

We use Google Fonts to embed fonts, icons, logos and symbols.

13. Website extensions

We use extensions including Google reCAPTCHA for spam protection.

14. Performance and reach measurement

We measure use of our online offering, including third-party links and A/B tests, to correct errors and improve content. IP addresses are generally shortened. Cookies and pseudonymised profiles may record pages viewed, screen size and approximate location. Signed-in third-party services may associate use with an account. We use Google Analytics, including cross-device tracking with pseudonymised IP addresses. Full addresses are transferred to the USA only exceptionally. An opt-out add-on is available.

15. Final provisions

This policy was created using the Datenschutzpartner privacy policy generator. We may amend it at any time and will publish the current version on our website.