1. I process personal data (data that directly or indirectly identifies natural persons) which I receive from you or third parties involved in the client relationship or which I collect myself. Schreiber Anwaltskanzlei, Gerbestrasse 12, 3072 Ostermundigen, Switzerland, is responsible for the processing of personal data as described in this privacy policy.
2. you or the persons concerned provide me with some of the personal data themselves when you or they contact me by e-mail or telephone and enquire about my services. This includes, for example, name and contact details as well as information about the role of the data subject in the company or organisation for which you or the respective contact persons work or on whose behalf you or they contact me. I also process personal data that I receive in my correspondence with third parties (namely clients, counterparties, authorities and courts and their employees or other contact persons) as part of the client relationship (e.g. name, contact details, date of birth, information on employment, income and assets, family circumstances or state of health). I also collect some personal data myself, e.g. from public registers or websites.
3. I process the aforementioned types of personal data in order to provide, document and invoice my legal services.
4. in order to fulfil the purposes described in this privacy policy, it may be necessary for me to disclose personal data to the following categories of recipients External service providers, clients, counterparties and their legal representatives, business partners with whom I may need to coordinate the provision of legal services, as well as authorities and courts.
5. I process the personal data within my area of responsibility in Switzerland. However, I may transfer the personal data to recipients (namely clients, counterparties or authorities) who in turn process the personal data in other countries, including those that do not guarantee a level of data protection comparable to Swiss law. I will do the latter on the basis of consent or standard contractual clauses, or if it is necessary for the fulfilment of a contract or the enforcement of legal claims.
6. I will only store personal data for as long as is necessary to fulfil the client relationship, for as long as there is a legal obligation to retain and document data or if I have an overriding private or public interest in doing so. I take proportionate and reasonable precautions to protect personal data from loss, unauthorised alteration or unauthorised access by third parties. If you provide me with personal data via a third party (e.g. via your employees or other contact persons), it is up to you to inform them in a general manner about the processing by legal service providers (such as me) or other external service providers (e.g. in a data protection declaration for employees). 7.
7. I would like to point out that I use external IT service providers and cloud providers with servers in Switzerland to manage the mandate. I then use certain IT services and means of communication that may be associated with data security risks (e.g. e-mail, video conferencing). It is your responsibility to inform me if you wish to take special security measures.
8. I have a legitimate interest in the processing of personal data corresponding to the purposes mentioned. Some processing is also necessary so that I can fulfil my contractual obligations towards you or my legal obligations (e.g. retention obligations).
9. data subjects have in particular the right to information about the personal data stored about them and the purpose of the data processing, the right to rectification, erasure or restriction of the processing of their personal data, the right to object to the processing, the right to seek a judicial remedy from a competent supervisory authority and the right to data portability/transferability. Please note, however, that conditions and exceptions apply to these rights. To the extent permitted or required by law, I may refuse requests to exercise these rights. For example, I may or must retain or otherwise continue to process the personal data despite a request to erase the personal data or restrict processing for legal reasons.
10. no consent is required from the client, their employees or other contact persons to the data protection declaration. The data protection declaration merely provides information about the type, scope and purpose of the use of personal data by Schreiber Anwaltskanzlei. Schreiber Anwaltskanzlei reserves the right to unilaterally change the content of the aforementioned data protection declaration at any time and without prior notice.
11. if you have any questions or if you or your employees or other contact persons wish to exercise your or their data protection rights, please contact me at ursula.schreiber@schreiber-anwaltskanzlei.ch or write to Schreiber Anwaltskanzlei, Ursula Schreiber, Attorney at Law, Gerbestrasse 12, 3072 Ostermundigen.
Ostermundigen, January 2024