We, Künzi Hess MacNab Rechtsanwälte, take data protection seriously and protect the personal data that we collect or receive in the course of our business activities. We process personal data in accordance with the Swiss Data Protection Act and, where applicable, the EU General Data Protection Regulation.

In this data protection policy, we explain how we handle personal data and what rights you are entitled to.

 

Who is responsible for your personal data?

Künzi Hess MacNab Rechtsanwälte, Florastrasse, 47, 8008 Zurich. You can therefore contact us at any time with data protection concerns.

 

Which data is collected?

Personal data is all information that relates to a specific or identifiable person.

In particular we collect the following information:

(i) When you visit our website:

• the IP address of the requesting computer,
• the date and time of access,
• the name and URL of the retrieved file,
• the website via which our website is accessed (referrer URL),
• the browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

(ii) When we collect information in the course of provision of our professional service:

• your name and contact information, information about your company, about your position, title and other basic information;
• identification and background information that you share with us;
• information which is disclosed to us by or on behalf of our clients or which we receive or create as part of our services to clients;
• information provided to us to attend meetings or events;
• any other information related to you that you provide to us.

How do we collect personal data?

We receive the data when you visit our website, directly from you, our clients, other persons involved and their respective representatives and employees. We may also receive or procure Personal Information from third parties such as employers, other organizations with which you are in contact, regulators, government agencies, courts, other law firms or other advisers. We also obtain personal data from publicly available sources.

For what purpose and on what basis is personal data processed?

We process your personal data in accordance with the Swiss Data Protection Act and, where applicable, the EU General Data Protection Regulation.

We process personal data for the following purposes:

• to communicate with you;
• to provide you and our clients with services and to improve them, using personal data from third parties that you provide to us or that we collect on behalf of our clients;
• to ensure administration in connection with the provision of services by us to you and our clients;
• to ensure marketing and advertising for the services we provide, including sending you invitations to events, publications and updates about our services (unless you have opted out, which you can do at any time);
• to maintain, provide and improve our website based on analysis of usage;
• to conduct conflict and reputation checks;
• to comply with our legal and regulatory obligations, including enforcing and defending against legal claims.

We primarily use the personal data we collect to provide legal services to our clients. Personal data can also be used if we engage lawyers or experts in Switzerland or abroad to fulfill our contracts with clients or if we have to comply with legal obligations in Switzerland or abroad. In this case we will inform our clients to which country his/her personal data will be disclosed. If we transmit data to a country that does not have appropriate data protection, we ensure an appropriate level of protection by employing contracts accordingly, or we act on the basis of the following statutory/legal exemptions: consent, performance of the contract, the establishment, execution or enforcement of legal claims, overriding public interests, published personal data, or the need to protect the integrity of the persons in question.

In principle, we only process your personal data

• as far as it is necessary for the execution of the contract,
• to protect legitimate interests, or
• based on consent.

We do not use collected information for automated decision-making or profiling.

 

How long do we store personal data?

Personal data is stored for as long as there is a legal obligation to retain it. In addition, personal data is stored as long as it is necessary for the purpose for which it was collected and as long as there is a legitimate interest in the personal data, e.g. to implement or defend legal claims, for archiving purposes, for IT security or to check conflicts of interest.

 

To whom can personal data be passed on?

We may share your personal data with the following trusted third parties in order to fulfill the purpose as described in this privacy policy:

• Providers to whom we outsource certain support services for KHM’s services (e.g. IT services and accounting);
• Third parties that we use with the prior consent of our clients to perform our services (e.g. law firms for partial clarifications, technology providers for the provision of a data room, translation agencies);
• The auditors from KHM;
• Third parties involved in the implementation or organization of events (e.g. conference room providers).

For the purposes set out in this data protection policy and if this appears necessary, we may, to the extent permitted by law, pass on personal data to courts, law enforcement authorities and other authorities. Personal data may also be passed on to third parties if this is necessary to comply with legal or regulatory provisions.

We use the following Google services:

• Google Fonts
• Google Maps

In order to display our content correctly and graphically appealing across browsers, we use script libraries and font libraries Google Fonts API on our website for display of writings. Google fonts are cached in your transfer browser. If your browser does not support Google Fonts or access prevents, content is displayed in a standard font. Calling script libraries or font libraries automatically releases a connection to the operator of the library. It is theoretically possible that the operator collects Google data in this case.

We do not collect any personal data through the integration of Google Fonts. For more information about Google Fonts, see Frequently Asked Questions https://developers.google.com/fonts/faq/privacy and Google’s privacy policy: https://policies.google.com/privacy?hl=en-ch.

You can object to data processing by Google Fonts by disabling JavaScript in your browser or install a JavaScript blocker. Please note that this can lead to functional restrictions on the website.

Google Maps

We use Google Maps API on our website for the visual display of geographical information (maps). By using Google Maps, information about the use of our website, including your IP address, is transmitted to a Google server in the USA and stored there.  You can object to this data processing at any time by notifying us.

It is possible to disable Google Maps and prevent data transfers to Google by disabling JavaScript in your browser or install a JavaScript blocker. This will result in you not being able to use the map display.

For more information about the collection, processing and use of your data by Google and your rights in this regard, please refer to the privacy policy of Google and Google Maps: policies.google.com/privacy and google.com/help/terms_maps.

 

Use of our website, communication

If you call up our website and use it, we automatically record and store it for a limited period of time a Log data and device-specific information. We process this data based on this and insofar as this is necessary for us to operate, maintain and improve our websites.

We typically use cookies and other similar techniques which can identify your browser or your device. A cookie is a small file which is sent to your computer or stored automatically on your computer or mobile device by your web browser when you visit our website.

You can refuse the use of cookies by selecting the appropriate settings in your browser. Please note, however, that this can affect the possibilities regarding the use of our website. For more information about cookies, including how to manage, refuse or delete them, visit www.allaboutcookies.org.

We may use your name and email address(es) to send publications, warnings, updates, invitations to events and other information via e-mail and will ask for your consent beforehand, unless we have received your contact details as part of our services and you have not refused from receiving of such marketing communications. If you no longer wish to receive any advertising communications from us, you can opt out at any time using the appropriate link and to unsubscribe from the respective emails. Please note that we keep personal data to check whether you read our e-mails or whether you click on the corresponding links contained therein.

Our websites or social media may contain links to third-party sites that are not governed by this Privacy Policy. If you click on a link to a third-party site, you will be taken to a site we do not control. We are not responsible for the privacy practices used by third-party sites. We suggest that you read the privacy policies of those sites carefully.

 

What rights do you have?

The right to access – you have the right to request KHM for copies of your personal data. We may charge you a small fee for this service.

The right to rectification – you have the right to request that KHM correct any information you believe is inaccurate. You also have right to request us to complete information you believe is incomplete.

The right to restrict processing – you have the right to request that KHM restricts the processing of your personal data, under certain conditions.

The right to object processing – you have the right to object to KHM’s processing of your personal data, under certain conditions.

The right to data portability – you have the right to request that KHM transfers the data we have collected to another organization, or directly to you, under certain conditions.

If you have consented to the collection, processing or transfer of your personal information for a specific purpose, you may withdraw your consent for that specific processing at any time. Once we have received notification that you are withdrawing your consent, we will no longer process your personal data for these specific purposes, unless we have another legitimate interest in doing so.

If you make a request, we have one month to respond to you.

Please note that the granting of these rights can sometimes be refused or restricted for legal reasons or based on data protection law. We can refuse to provide information to the extent that data protection law or other laws, in particular the attorney-client privilege, allow or require us to do so. If legally required or permitted, we will inform you of the reasons for our decision.

If you are of the opinion that we have not dealt with your inquiry or concern to your satisfaction or you believe that we are not processing your data in accordance with data protection regulations, you can contact the responsible supervisory authority; in Switzerland it is the Federal Data Protection and Information Commissioner.