Barandun AG, Mühlebachstrasse 25, P.O. Box, CH-8024 Zurich (hereinafter also «we», «us») is responsible for your personal data (hereinafter also «data») and the data processing described in this data protection declaration.
1. DATA WHICH WE PROCESS
1 We collect and record data when you interact with us, for example in communications by correspondence, email, telephone, social media and/or when attending meetings. We also collect or create data in the course of providing services and when we obtain data from other sources (for example, by consulting publicly available sources) to update or supplement your information.
2 We process data that we receive from the data subjects themselves or third parties involved (e.g. counterparty, courts, authorities) in the course of our business relationship with you as a client and for the handling of other business and contractual relationships. The data we collect and process about you includes:
2. PURPOSE OF THE DATA PROCESSING
3 We process data if it appears necessary for us to communicate, process a contract, provide services or to assert, implement, or defend legal claims, comply with legal and regulatory obligations and protect legitimate interests. In particular, we process your data in order to provide, document and invoice our services professionally and in accordance with our contractual and legal obligations.
4 The purpose of processing your data includes:
5 We take reasonable security measures to maintain the confidentiality, integrity and availability of your data and to protect such data against unauthorised or unlawful processing, loss, accidental alteration, disclosure or access.
3. DISCLOSURE OF DATA TO THIRD PARTIES
6 As part of and to the extent of the provision of our services, complying with our legal obligations or otherwise to safeguard our legitimate interests, we also transfer data to third parties, some of whom can decide for themselves how they process your data. These are in particular, but not exclusively:
7 These categories of recipients may in turn involve third parties, so that your data could also become accessible to them. Within the scope of the purpose of data processing, we may disclose data to courts, law enforcement agencies, regulatory and governmental authorities as well as law enforcement and enforcement agencies, if deemed necessary. Furthermore, we may be required to share your data to comply with legal requirements and regulatory obligations.
4. PROCESSING OF DATA ABROAD
8 In principle, we process your data in Switzerland. However, it cannot be ruled out that, through the use of web-based services, your data may also be transferred to other countries for processing, including those without an equivalent level of data protection.
9 If a recipient – for example a third party in the context of the processing of a mandate – is located in a country without adequate statutory data protection, we contractually oblige the recipient of the data to comply with the applicable data protection as far as possible, unless the recipient is already subject to a legally recognised set of rules to ensure data protection and we cannot rely on an exemption clause.
5. BASIS FOR DATA PROCESSING
10 If we ask for your consent for certain processing, we will inform you separately about the corresponding purposes of the processing. You can revoke your consent at any time in writing (by post) with effect for the future.
11 If we do not specifically ask for your written or verbal consent to process your data, we will protect that data in accordance with this statement for the purposes described in section 2.
6. DURATION OF DATA PROCESSING
12 We process your data for as long as our processing purposes, in particular for the handling of the client relationship, the statutory retention periods and our legitimate interests in processing for documentation and evidence purposes require it or storage is technically necessary.
7. YOUR RIGHTS
13 You are entitled to request detailed information about what data we hold about you and how we process it, as well as a copy of your data. You can also have your data corrected or deleted, restrict our processing activities concerning this information and object to the processing of your data.
14 You may also decide to withdraw your consent to data processing. Please note that even if you choose to withdraw your consent to data processing, we may continue to process your data to the extent required or permitted by law.
15 If you wish to exercise the aforementioned rights against us, please contact us in writing (Barandun AG, Mühlebachstrasse 25, P.O. Box, CH-8024 Zurich). So that we can rule out any misuse, we ask you to identify yourself (for example by means of a notarised statement, unless this is otherwise possible).
16 Please note that legal requirements and exceptions apply to your exercise of rights. To the extent permitted by law, we may refuse your request to exercise these rights.
17 You have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).
8. PROVISION AND USE OF THE WEBSITE
18 You can use our website without telling us who you are. When you access and use our website, we automatically collect and store relevant log data and device-specific information for a limited period of time. This information includes, but is not limited to, specific information about how you use our website, IP address, access data, information regarding your hardware and software, and device-specific and other similar information. We process this data based on and to the extent necessary for us to operate, maintain and improve our website.
19 On our website, we use technologies with which we and third parties engaged by us can recognise you during your use and possibly also track you over several visits. We do this so that we can ensure the functionality of the website and carry out evaluations and personalisations. We do not want to infer your identity, even if we or third parties engaged by us could identify you through combination with registration data. Even without registration data, however, the technologies used are designed in such a way that you are recognised as an individual visitor each time you access the site, for example by our server (or the servers of the third parties) assigning you or your browser a specific identification number (so-called «cookie»).
21 Our website uses Google Analytics, a service provided by Google LLC, USA, which monitors and records the way our website is used. Google Analytics does this by setting cookies on your computer or other devices. Cookies record information about the number of visitors to this website, visits to individual pages and the length of time for which this website is visited. This information is in aggregate form and is not identifiable with respect to the individual. This integration of Google Analytics is always carried out using anonymised IP addresses.
22 Our website contains a social media plug-in for LinkedIn Corp, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA. When you visit our website, no data is passed on to the provider of a plug-in. If you click on the corresponding LinkedIn icons, you will automatically be redirected to our profile. In order to use the functions of LinkedIn there, you must log in to your user account in some cases. When you open the link to LinkedIn, a direct connection is established between your browser and the LinkedIn server. This provides the network with the information that you have visited our website with your IP address and accessed the link. If you access a link to a network while logged into your account on the network in question, the content of our site may be linked to your profile on the network, which means that the network can link your visit to our website directly to your user account. If you want to prevent this, you should log out before clicking on the relevant links. In any case, an association takes place when you log into the corresponding network after clicking on the link.
Last update: 1 September 2023