Consulting
At HütteLAW are aware that the protection of the privacy of our clients, but also of visitors to our website, is very important. We have therefore taken the necessary steps to fulfil the applicable data protection requirements.
The processing of personal data (this term also includes so-called personal data in accordance with the GDPR), for example the name, address, e-mail address or telephone number of a data subject, is carried out in accordance with the requirements of the Swiss Data Protection Act and the EU General Data Protection Regulation (GDPR 2016/679).
By means of this privacy policy, HütteLAW would like to inform the public about the type, scope and purpose of the personal data we process. Furthermore, this privacy policy informs data subjects about their rights.
The use of our website is generally possible without providing any personal data. However, if the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject.
HütteLAW has implemented numerous technical and organisational measures to ensure the most complete possible protection of personal data obtained in the context of a client relationship, but also processed via this website. Nevertheless, internet-based data transmissions can in principle involve security risks.
1 Collected data
We will only collect personal data from you (such as name, address, telephone number, e-mail address or other identifying information) if you provide it to us voluntarily. Processing of this personal data is only lawful if at least one of the following conditions is met:
- Consent of the person entitled to protection
- Fulfilment of a contract (including implementation of any pre-contractual measures)
- Protection of overriding legitimate interests
- Necessity for the fulfilment of a legal obligation
It is possible that certain services (e.g. Google Maps or YouTube etc.) are offered that are based on third-party applications and content tools. These third parties may automatically receive certain information content when you communicate with us via our website and use such third-party applications and tools.
2 Your Choices
You have several choices when using our website. You can choose not to provide any personal data at all by not filling in any relevant forms or data fields on our sites and not using any of the personalised services available.
If you choose to provide personal data, you have the right to view and correct your data at any time by selecting the relevant application or notifying us.
You also have the ‘right to be forgotten’: you can request that we delete your personal data at any time. If the purpose of storage no longer applies, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.
The controller shall process and store the personal data of the data subject only for the period necessary to achieve the purpose of storage or if this has been provided for by the Swiss or European legislator or another legislator in laws or regulations to which the controller is subject.
3 Usage and protection of data
HütteLAW will use all personal data that you voluntarily disclose to us to fulfil your requests. The control and responsibility for the use of such information remains with us. Our document management systems are secure and our archives are protected against unauthorised access. We have also taken the necessary technical and organisational measures to ensure an appropriate level of protection for your data. In particular, our employees are trained in handling personal data and informed about the content of the Federal Act on Data Protection and the GDPR.
We will not sell or otherwise disclose personal data that you provide to us on our website to third parties for their own direct marketing purposes unless we clearly inform you of this and obtain your express consent to such disclosure of your data.
HütteLAW is obliged to report breaches of data protection, such as theft, loss or disclosure of personal data to unauthorised persons, to the data protection authority within 72 hours.
4 Purpose of data processing
We process your personal data for the fulfilment of various purposes. First and foremost, the processing of personal data serves to fulfil our contractual obligations with our clients and business partners. This primarily involves the provision of legal services to our clients.
When you visit our website, we process personal data to ensure a smooth connection process and convenient use of our website. We also process your personal data to answer your enquiries or when you contact us via the contact form. In the context of a job application, the necessary personal data is processed for the assessment of a possible employment.
5 Is your personal data also sent abroad?
We generally process personal data in Switzerland and the European Economic Area (EEA). However, we may also export or transfer personal data to other countries, in particular in order to process it or have it processed there.
We may export personal data to all countries, provided that the law there guarantees adequate data protection in accordance with the decision of the Swiss Federal Council and – if and insofar as the General Data Protection Regulation (GDPR) is applicable – in accordance with the decision of the European Commission.
We may transfer personal data to countries whose law does not guarantee adequate data protection, provided that data protection is guaranteed for other reasons, in particular on the basis of standard data protection clauses or with other suitable guarantees. Exceptionally, we may export personal data to countries without adequate or appropriate data protection if the special requirements under data protection law are met, for example the express consent of the data subjects or a direct connection with the conclusion or fulfilment of a contract. We will be happy to provide data subjects with information about any guarantees or provide a copy of any guarantees upon request.
6 Analysis tools and advertisement
Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called cookies. These are text files that are stored on your computer and enable your use of the website to be analysed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.
IP-anonymisation
We have activated the IP anonymisation function on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Browser plugin
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Objection to data collection
You can prevent the collection of your data by Google Analytics by following the instructions at the following link: [gaOptoutGoogleAnalytics]
For more information on how Google Analytics uses user data, please see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.
Demographic characteristics with Google Analytics
This website uses the ‘demographic characteristics’ function of Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of visitors to the site. This data comes from interest-based advertising from Google and visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section ‘Objection to data collection’.
Google reCAPTCHA
We use ‘Google reCAPTCHA’ (hereinafter referred to as ‘reCAPTCHA’) on our websites. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, ‘Google’).
The purpose of reCAPTCHA is to check whether the data input on our websites (e.g. in a contact form) is made by a human or by an automated programme. For this purpose, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent on the website by the website visitor or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place.
Further information about Google reCAPTCHA and Google’s privacy policy can be found at the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.
7 Plugins und Tools
Google Web Fonts
This site uses so-called web fonts provided by Google for the standardised display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to Google’s servers. This informs Google that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers.
If your browser does not support web fonts, a standard font will be used by your computer.
Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=en.
Google Maps
This site uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.
The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places we have indicated on the website.
You can find more information on the handling of user data in Google’s privacy policy: https://policies.google.com/privacy?hl=en.
7.1 Social Media
The website www.huettelaw.ch integrates plugins from the social network Facebook (Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). You can recognise the Facebook plugins by the Facebook logo or the ‘Like’ button on our site. You can find an overview of the Facebook plugins here: http://developers.facebook.com/docs/plugins/. When you visit our website, a direct connection is established between your browser and the Facebook server via the plugin. Facebook receives the information that you have visited our site with your IP address. If you click on the Facebook ‘Like’ button while you are logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate your visit to our pages with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Facebook. Further information on this can be found in Facebook’s privacy policy at http://de-de.facebook.com/policy.php.
Facebook Custom Audiences
Facebook Custom Audiences enables us to compile groups and lists of users from existing data records (e.g. our newsletter subscribers) according to certain criteria in order to be able to offer them information and advertising on Facebook services that is tailored to their interests and preferences. Before being transmitted to Facebook, this data is irreversibly encrypted on our computers into so-called hash values (encrypted numerical values), which Facebook uses to compare it with its user databases. You can refuse this form of advertising by changing your browser settings, which you can do on the Digital Advertising Alliance selection page.
Facebook Lookalike Audiences
Facebook Lookalike Audiences are used to compile groups and lists of users from existing data sets (e.g. our newsletter subscribers) according to certain criteria in order to be able to offer relevant information to users with similar interests and preferences on Facebook services. The data is irreversibly encrypted to so-called hash values (encrypted numerical values) on our computers before being transmitted to Facebook. You can reject this form of advertising by changing your browser settings, which you can do on the Digital Advertising Alliance selection page.
Facebook Connect
Facebook Connect is a Facebook function that allows Facebook users to log in to other websites, apps and services using their Facebook identity. In doing so, this other service receives access to certain preferences and social and links stored in Facebook, on which it can base its own offers. This follows the user’s settings in Facebook. Further details can be found in Facebook’s explanations. Facebook can use data about the steps taken by users on such other services to recognise visitors to our website on its services in order to be able to offer advertising based on the interests and preferences of the user. You can opt out of this form of advertising by changing your browser settings, which you can do on the Digital Advertising Alliance’s opt-out page.
Functions of the Twitter service are integrated on the www.huettelaw.ch website. These functions are offered by X Corp., 1355 Market Street, Suite 900 San Francisco, CA 9413, USA. By using Twitter and the ‘Re-Tweet’ function, the websites you visit are linked to your Twitter account and made known to other users. Data is also transmitted to Twitter. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Twitter. Further information on this can be found in Twitter’s privacy policy at http://twitter.com/privacy. You can change your data protection settings on Twitter in the account settings at http://twitter.com/account/settings.
Twitter Advertising
Twitter offers advertising services that use cookies or mobile device IDs or the hash values (irreversibly encrypted numerical values) for email addresses to recognise visitors to our website on its services in order to offer advertising relevant to the user’s interests and preferences. These options can be restricted or rejected in the Twitter account settings.
Social media plugins
We offer recommendation buttons for the following social networks on our website: LinkedIn, Facebook, Twitter, Instagram and YouTube. These allow you to recommend selected website content to other internet users via the relevant social network and add it to your personal profile. The recommendation buttons are provided by the operators of the social networks.
By integrating these plugins on our website, the operators of the relevant social networks may receive the information that you have visited our website. If you are logged in to one of these networks during your visit to our website, the operator can assign this visit to your user account. If you do not wish such an assignment, we recommend that you log out of social networks before visiting our website.
If you use the buttons, the corresponding information is transmitted to the relevant social network and stored there. For more information on the purpose and scope of data collection, the further processing and use of the data and setting options to protect your privacy, please refer to the data protection notices of the social network operators:
Facebook: http://de-de.facebook.com/policy.php
Twitter: https://twitter.com/en/privacy
Instagram: https://help.instagram.com/155833707900388
YouTube: https://policies.google.com/privacy?hl=en-GB
LinkedIn: https://www.linkedin.com/legal/user-agreement
8 Attorney-client privilege and statutory retention obligations
HütteLAW does not primarily receive personal data via this website, but rather on the basis of the client relationships entered into with us. As a law firm, we are subject to (Swiss) attorney-client privilege for client-related data, which places a very high value on the confidentiality of data. The level of protection of the data provided to us therefore regularly goes beyond the Federal Act on Data Protection and the GDPR. We do not collect, store or process any data without a client relationship. We may not disclose any data without the consent of the data subject or without a release from the attorney-client privilege. This applies all the more to any personal data of customers, suppliers or processors of our clients. Your personal data will only be transferred to third parties in exceptional cases if this is necessary under Swiss data protection law and Art. 6 para. 1 sentence 1 lit. b GDPR for the fulfilment of client relationships with you.
In connection with a client relationship, files are regularly provided to us or created by us. The documentation obligation of lawyers includes a retention obligation of ten years after termination of the client relationship, which is why we keep at least copies of the files with us. Once this ten-year statutory retention obligation has expired, we will duly destroy the data and files, unless a justification for even longer retention can be asserted (data minimisation and deletion routine). As already stated, no data will be disclosed during the period of this retention obligation without your consent.
.
9 Rights of the person affected
As data subjects, users have the following rights vis-à-vis the controller:
Right to withdraw consent: Once you have given your consent, you can withdraw it at any time. The consequence of this is that the data processing based on this consent will no longer be continued in the future.
Right to information: You can request confirmation at any time as to whether personal data concerning you is being processed by us. If such processing is taking place, you can request information from the controller (processing purposes, category of personal data, storage period, etc.).
Right to rectification: The right to rectification and completion of your stored personal data is guaranteed.
Right to erasure: You can have your personal data erased at any time. If client files have been stored by us (for retention obligation, see point 4), we will anonymise the file so that only the data protection officer can access it using a pseudonym. There is also a right to restriction of processing under certain circumstances.
Right to data security and data portability: You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format.
Right to lodge a complaint with a supervisory authority: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes relevant legal provisions.
10 Which law is applicable to our data processing?
The Swiss Data Protection Act (DPA) applies to visits to our website from Switzerland. If you visit our website from the European Union and we process your data, the EU General Data Protection Regulation (‘GDPR’) applies.
11 Name and address of the data protection officer
Should you have any questions or requirements regarding the correction or deletion of your profile please contact HütteLaw (by letter or via e-mail address below). The data protection officer of HütteLaw stays at your disposal:
HütteLAW AG, Data protector, Alte Steinhauserstrasse 1, CH-6330 Cham
Appointed as EU-Representative: HütteLAW AG, Mr. Gerald Pöschl, Maximilianstrasse 32, DE-80539 München.
12 Name and address of the data protection officer
We can adapt this data protection declaration at any time. The version published on this website is the current and valid version.
In case of any need for interpretation, the german version prevails.
Status as of December 2024
