Controller
We, the law firm RUOSS VOEGELE, are the controller according to the terms of the data protection laws. Please send any questions regarding this statement or concerns regarding data protection to the following address:

RUOSS VÖGELE
Kreuzstrasse 54
8032 Zurich
privacy@ruossvoegele.ch

Personal data
Personal data is understood to be all information relating to an identified or identifiable person.

Collection and processing of personal data
RUOSS VOEGELE collects and processes your personal data, for example, when you contact us with the intention to establish a mandate relationship or when you have a mandate relationship with us. In addition, we also process personal data that arise from the business, contractual or other legal relationships of our clients with third parties.

Furthermore, to the extent permitted and to the extent necessary for the provision of our services, we process personal data that we obtain from publicly accessible sources (e.g. debt collection register, land register, commercial register, etc.). Personal data may also be processed in connection with information showing that we act in compliance with legal requirements, e.g. anti-money laundering, export restrictions, etc.

Finally, to the extent permitted, we also process personal data that we receive from the respective users when operating our website (e.g. by using cookies).

Purpose of data processing and legal basis
Your data will be processed for the following purposes:

To fulfil contractual obligations
We store and process personal data for the purpose of fulfilling our contractual obligations, which arise in particular from the client relationship. The processing of personal data is carried out, among other things, for providing legal services to our clients. We store and process personal data for the purpose of, among other things, providing, administering and carrying out communication with the client by post and telephone as well as by electronic means of communication. In addition, data is processed to implement pre-contractual measures in response to client requests. Furthermore, personal data is processed, among other things, when purchasing products and services from our suppliers and auxiliary persons and in order to comply with our legal obligations at home and abroad. If you work for such a client or business partner, your personal data may be processed in this context.

Within the limits of the legitimate interest
We also process personal data as far as this is permitted and justified. Processing is carried out for purposes in which our clients or we have a legitimate interest, including the following purposes:

• Ensuring the operation of the law firm, in particular IT operations, IT security, communication systems, website, building security, etc.
• Assertion of legal claims and defence in legal disputes and official proceedings.
• Prevention and investigation of criminal offences and other legally relevant misconduct.
• Information events, advertising and marketing measures, insofar as there is no objection to the corresponding use of data, as well as measures for business management and information about our services.
• Analysis of the internet traffic on our website to improve the functionality of our website.
• Communication with third parties (e.g. media enquiries)

Within the scope of a granted consent
If you have given us your consent to process personal data for specific purposes, your personal data will be processed within this framework and based on this consent. Any consent given to us can be revoked at any time. The revocation of the consent does not affect the legality of the data processing until revocation.

Transmission of personal data
Personal data may be shared or submitted exclusively and in compliance with the legal requirements if there is a sufficient legal basis for this, e.g. the purpose of fulfilling the contract, a legitimate interest or your consent. In addition, data may be shared or submitted to other responsible parties if we are obliged to do so by law or by enforceable official or court order.

Service providers engaged by us may also receive data, subject to the legal and professional requirements for data transfer, if they maintain the corresponding confidentiality. These include companies in the categories of IT services, telecommunications, payroll accounting and sales and marketing. We have carefully selected these service providers and oblige them to handle the data stored with them carefully in accordance with the data protection regulations.

In addition, personal data may be shared with or submitted to auxiliary persons, such as lawyers and law firms, tax experts and other specialists, in compliance with the legal and professional requirements.

In addition, personal data may be passed on to clients, domestic and foreign counterparties, interested parties in the context of transactions, domestic and foreign authorities, official bodies, courts and arbitration tribunals, in compliance with legal and professional requirements.

Within the scope of our business activities, personal data may be shared with or submitted to recipients who are based outside Switzerland, the EU or the EEA, in so-called third countries, in compliance with the legal and professional requirements. In the event of such a transfer, we ensure in advance that the recipient has an adequate level of data protection and, if necessary, that your consent to the transfer has been obtained.

Storage of personal data
We process and store your personal data for as long as it is necessary for the fulfilment of our contractual and legal obligations or other purposes pursued with the processing and for as long as we have a justified interest in the storage of the respective personal data. In addition, such personal data is stored which is subject to statutory retention periods or which is still required for criminal prosecution or to secure, assert or enforce legal claims.

Data security
All collected, processed and stored personal data we treat confidentially. In order to protect this data adequately against unauthorized access and misuse, we take appropriate technical and organizational measures (e.g. controlled access restrictions, IT security applications and measures, etc.). In addition, electronic data is stored exclusively on servers in Switzerland and is kept with all due care.

We would like to point out that in the case of data being submitted via e-mail, data is transmitted unencrypted. Therefore, it cannot excluded that data may be lost or accessed by third parties during transmission. Any such online transmission of personal data is therefore at your own risk.