1. What is this privacy policy about?
“Personal data” (hereinafter also referred to as “data”) is all information that can be linked to a specific person. In this privacy policy, we explain how we use data, particularly in the context of our business activities and in connection with our website. If you would like further information on our data processing, please contact us (section 2).
2. Who is responsible for processing your data?
The person responsible for data processing in accordance with this privacy policy is attorney at law lic. iur. Kim Mauerhofer as owner of the sole proprietorship: reason.
reason
Attorney-at-law lic. iur. Kim Mauerhofer
Beethovenstrasse 47
8002 Zurich
Phone:+41 79 712 24 79
Email: km@rea-son.ch
Website: www.rea-son.ch
VAT: CHE-263.703.373
Registered in the Attorney Register of the Canton of Zurich
You may provide us with data that also relates to other persons (e.g. related persons, deputies or represented persons, parties to proceedings, etc.). In this case, we assume that this data is correct and that you may transmit this data to us. As we often have no direct contact with these persons and are not allowed or able to inform them directly about our data processing, we ask you to inform these persons – if possible – about our data processing (e.g. by referring them to this privacy policy).
3. How do we process data in connection with our services?
If you engage us or if you are in contact with us with regard to a mandate, we will process data to prepare and, if necessary, to execute a mandate.
- If you are in contact with us with regard to awarding a mandate, we will obtain and use data, e.g. if you send us instructions, documents and other information. This primarily concerns data that you disclose to us, e.g. name and contact details, information regarding the subject of a possible mandate and further details about them, the related documents and their communication with you. If you involve other companies or persons in addition to us (e.g. representatives, other law firms, tax consultants or other experts), we may – in accordance with your instructions – exchange information with these companies or persons.
- We may carry out relevant assessments for a possible mandate, e.g. money laundering, conflict and credit checks relating to you or connected persons. For these purposes, we may obtain relevant information from information providers, such as public registers (e.g. the commercial register), the media and the Internet.
- If we conclude a contract of mandate with you, we will process the data gathered before the conclusion of the contract and information on the mandate contract itself (e.g. on the conclusion date and the subject matter of the contract). We also process personal data during and after the term of a mandate. This concerns, for example, information about our services, meetings and discussions, payments, mutual claims, the termination of a mandate and – in the event of disputes in connection with the contract – also about these and corresponding proceedings. As part of our services, we may obtain and process further personal data, for example in connection with investigations, communication with authorities, parties to proceedings, experts and third parties and in connection with participation in court, administrative and other proceedings.
We process less personal data for contractual partners that are companies because data protection law only covers data relating to natural persons (i.e. people). However, we process data on the contact persons with whom we are in contact, e.g. name, contact details, professional details, details from communications, and details about managers etc. as part of the general information about companies for which we provide services.
4. How do we process data in connection with our website?
When using our website, certain data is collected for technical reasons and temporarily stored in log files (log data), in particular the IP address of the end device, information about the Internet service provider and the operating system of your end device, information about the referring URL, information about the browser used, date and time of access, and content accessed when visiting the website. This data is used so that our website can be operated, but also for system security and stability.
In addition to cookies which are necessary for technical reasons, we also use cookies from our service provider in accordance with the following paragraphs:
We use the Google Analytics service from Google LLC, Mountain View, California, USA (hereinafter “Google”) to statistically record access to the website and user behavior on the website. The IP address of visitors is transmitted to the service provider in anonymized form for this purpose. Third-party cookies are also created by the service. The service provider may track your use of the website and use this information for our and its own purposes. The stored data does not constitute personal data, as visitors cannot be identified on the basis of the stored information (IP address (anonymized), browser type, access method, etc.).
We use the services of specialized third parties to embed maps in our website (Google Maps). Where this is the case, the services used record the Internet Protocol (IP) addresses of the users, at least temporarily, for compelling technical reasons and create cookies independently.
5. How can we disclose personal data?
We may initially disclose personal data to our clients under a mandate. However, we also disclose data to other bodies, e.g. authorities, courts, parties to proceedings, experts and other third parties, insofar as we are released from our duty of confidentiality under criminal law (Art. 321 of the Swiss Criminal Code).
We also use various third-party services, in particular IT services (examples are providers of hosting services), shipping and logistics services, banking services, and the services of the post office, consultants, etc. These service providers may also process personal data to the extent necessary.
6. Is there any further processing?
Yes, because many processes are not possible without processing personal data, including standard and unavoidable internal processes:
- Communication with you: If we are in contact with you by email, telephone or in any other way, we process information about the content of the communication and the type, time and place of the communication. Please note that data transmission over the Internet (e.g. when communicating by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.
- Compliance with legal requirements: We may disclose data to authorities within the scope of legal obligations or powers and to comply with internal regulations.
- IT security: We also process data for monitoring, controlling, analyzing, securing and checking our IT infrastructure, as well as for backups and archiving data. We do not use servers with locations outside Switzerland.
- Other purposes: We process data to the extent necessary for other purposes such as administration (e.g. contact management, accounting), enforcement of and defense against claims, evaluation and improvement of internal processes and to safeguard other legitimate interests.
7. How long do we process personal data?
We process your personal data for as long as it is necessary for the purpose of the processing, as long as we have a legitimate interest in storing it (e.g. to enforce legal claims) and in any case as long as data is subject to a statutory retention obligation.
8. What are your rights?
Under certain conditions and with certain restrictions, you have the following rights relating to your personal data:
- You can request a copy of your personal data and further information about our data processing;
- You can object to our data processing;
- You can correct or complete incorrect or incomplete personal data or have it notated;
- You have the right to receive certain personal data in a structured, commonly used and machine-readable format, provided that the corresponding data processing is based on your consent or is necessary for the performance of a contract;
- If we process data on the basis of your consent, you can revoke your consent at any time. The revocation shall only be valid for the future, and we reserve the right to continue processing data in the event of revocation based on another principle.
If you wish to exercise such a right, please contact us (section 2). As a rule, we have to check your identity (e.g. with a copy of your ID).
Data subjects also have the right to enforce their data protection claims through legal action or to lodge a complaint with a competent data protection supervisory authority. The data protection supervisory authority for private controllers and federal bodies in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).