Splügen Attorneys at Law
Splügenstrasse 6, 8002 Zurich
P.O. Box 1764, 8027 Zurich
As of: September 2026
“Personal data” or hereinafter also “data” refers to all information relating to an identified or identifiable natural person.
The Splügen Rechtsanwälte AG (“Splügen Rechtsanwälte,” “we,” or “us”) processes personal data as part of its business and legal activities. This particularly concerns personal data of existing and potential clients, persons associated with them, opposing parties and other participants in proceedings, courts and authorities, other lawyers and consultants, business partners, service providers, applicants, visitors to our website, and other persons with whom we are in contact.
In this Privacy Policy, we explain how and for what purposes we process such personal data.
Our data processing is governed in particular by the Swiss Federal Act on Data Protection (“FADP”) and the associated implementing provisions. In addition, statutory and professional regulations apply to our legal activities, in particular attorney-client privilege.
Supplementary data protection or other notices may apply to individual data processing activities.
The following entity is responsible for the data processing described in this Privacy Policy:
Splügen Rechtsanwälte AG
Splügenstrasse 6
8002 Zurich
Switzerland
Phone: +41 43 344 34 00
Email: office@spluegenlaw.ch
The internal contact person for data protection matters is:
Dr. Daniela Dardel
Email: dardel@spluegenlaw.ch
When you mandate us or contact us regarding a potential mandate, we process personal data for the review, preparation, acceptance, execution, and handling of the mandate.
Initiation of Mandates
With regard to a potential mandate, we process in particular the information that you provide to us or that we receive in connection with the potential mandate.
This includes in particular:
With regard to the acceptance or execution of a mandate, we may carry out necessary clarifications. These include, in particular, conflict, identity, sanctions, anti-money laundering, compliance, and, if applicable, credit checks.
For these purposes, we may obtain information from you or from third parties and, in particular, consult public registers, sanctions lists, media, publicly accessible internet sources, and specialized information services.
Execution of Mandates
When we accept a mandate, we process the personal data required for the advice and representation of our clients.
This includes in particular:
As part of our legal services, we may also obtain personal data from or disclose it to courts, authorities, opposing parties and their representatives, experts, witnesses, other consultants, and other participants in proceedings.
If you provide us with personal data about other persons, such as employees, governing bodies, beneficial owners, family members, representatives, opposing parties, witnesses, or other participants in proceedings, we assume that the information concerned is correct and that you are authorized to transmit it. To the extent possible and appropriate, we ask you to inform the persons concerned of this Privacy Policy. Statutory and professional confidentiality obligations remain reserved.
Depending on the subject matter of a mandate, we also process particularly sensitive personal data. This may include, in particular, health data, information about private and intimate life, as well as information about administrative or criminal prosecutions and sanctions.
We process such data to the extent necessary for our legal activities, the protection of our clients’ interests, or the fulfillment of statutory and professional obligations.
In the case of clients or other contractual partners that are companies or other legal entities, we process in particular personal data of their employees, governing bodies, and other contact persons, such as names, contact details, functions, and information from business communication.
When you communicate with us by email, telephone, letter, video conference, or in any other way, we process the personal data generated in the process.
This includes in particular your contact details, the content of the communication, documents transmitted, and information about the type and time of communication.
We process such data in particular:
We may use the contact details of existing and former clients, business partners, and other professional contacts to the extent permitted by law to provide information about our activities, events, or other professionally relevant topics.
You can object to such use of your contact details at any time.
When we hold events, we may process personal data in particular for the invitation, organization, execution, and follow-up of the event.
To the extent that we use information about clients or mandates for lawyer directories, rankings, references, publications, or comparable purposes, we comply with our statutory and professional confidentiality obligations and, where necessary, obtain the prior consent of the client concerned.
When using our website, certain data is processed for technical reasons and stored in log files.
This may include in particular:
We process this data in particular to provide our website, ensure its security and stability, and to identify and resolve technical problems.
To the extent that we use cookies or comparable technologies, you can control their use depending on the type of cookie via your browser or the settings options provided for this purpose.
To the extent that third-party services or content are integrated into our website, the providers concerned may process technical data and, if applicable, use cookies or comparable technologies.
We receive a significant part of the personal data we process directly from you, in particular when you:
As part of our legal activities, we also regularly receive personal data from third parties.
This includes in particular:
We may also obtain personal data from publicly accessible sources. This includes in particular public registers, official publications, media, websites, and other publicly available information sources.
You are generally not obliged to disclose personal data to us. However, certain information is required so that we can process an inquiry, review a potential mandate, conclude a contract, or provide our services. Without this information, we may therefore not be able to accept a mandate or provide a requested service.
Our legal activities are subject to statutory and professional confidentiality obligations, in particular attorney-client privilege.
We only disclose personal data to the extent that this is necessary and permissible for the fulfillment of our tasks and mandates, an appropriate authorization or waiver exists, or the disclosure is provided for by law.
As part of our activities, personal data may be disclosed to the following categories of recipients in particular:
Clients and other contractual partners:
We disclose personal data to our clients and other contractual partners to the extent necessary for the execution of the respective mandate or contract.
Courts and authorities:
Personal data may be disclosed in particular to courts, arbitration tribunals, administrative, supervisory, law enforcement, and other authorities, to the extent necessary for the management of the mandate or provided for by law.
Opposing parties and other participants in proceedings:
In the context of consultations, negotiations, and proceedings, personal data may be disclosed to opposing parties and their representatives as well as other persons involved.
Other consultants and professionals:
This includes in particular other lawyers and correspondence firms, notaries, tax advisors, trustees, experts, translators, and other experts, to the extent that they are involved in connection with a mandate.
Service providers:
We use service providers who support us in the operation of our law firm. This may include, in particular, providers of IT, hosting, cloud, and communication services, providers of law firm and document management systems, banks and other financial service providers, accounting service providers, postal, shipping, and courier services, as well as providers of archiving and document destruction services.
Service providers process personal data on our behalf or under their own data protection responsibility, depending on their function.
When engaging service providers, we take into account our statutory and professional confidentiality obligations in addition to data protection requirements. We select service providers carefully and ensure through appropriate contractual, organizational, and technical measures that personal data is adequately protected and existing confidentiality obligations are maintained.
As part of our activities, personal data may also be disclosed to recipients outside of Switzerland or processed there.
This may be the case in particular:
If a recipient is located in a state whose legislation does not guarantee adequate data protection according to Swiss law, we ensure contractually that the same protection as in Switzerland is guaranteed. This includes, in particular, recognized standard data protection clauses (e.g., standard contractual clauses of the EU Commission) and, if necessary, additional protective measures.
In cases provided for by law, personal data may also be disclosed abroad on the basis of an exception, for example if the disclosure is necessary for the execution of a contract or for the establishment, exercise, or enforcement of legal claims, takes place in connection with proceedings before a foreign authority, or the person concerned has expressly consented.
In addition to processing in connection with mandates, we process personal data in particular for the following purposes:
Administration:
We process personal data for the organization and management of our law firm, in particular for contact and mandate management, accounting, billing, and payment transactions.
Compliance with legal and professional requirements:
We process personal data to comply with statutory, regulatory, and professional obligations as well as internal requirements.
IT and information security:
We process data to secure our IT systems and other infrastructure, to monitor and control technical access, for error analysis, to prevent and investigate security incidents, and for data backup and archiving.
Legal claims:
We may process personal data to the extent necessary to establish, exercise, or enforce our own or third-party legal claims or to defend against claims.
Improvement of our services:
We may use information from our business activities to review and further develop our internal processes and services. In doing so, we particularly observe our statutory and professional confidentiality obligations. To the extent possible and appropriate, we use anonymized or aggregated information for this purpose.
Applications:
If you apply for a position with us, we process in particular your contact details, application documents, and other information relevant to the application process to review your application and, if necessary, to prepare an employment contract.
We process and store personal data for as long as is necessary for the respective processing purpose.
In addition, we store personal data in particular as long as:
In doing so, we take into account in particular the applicable statutory limitation and retention periods.
Once the respective reasons for retention no longer apply, personal data is deleted, destroyed, or anonymized as part of our usual processes, unless further retention is required or permitted.
We take appropriate technical and organizational measures to protect personal data from loss, unauthorized access, misuse, alteration, and unauthorized disclosure.
Our protective measures are based on the type, scope, and purpose of the data processing as well as the sensitivity of the data concerned.
Our employees and engaged persons are subject to the respectively applicable statutory, contractual, or professional confidentiality obligations.
Despite appropriate security measures, risks in electronic data processing and communication cannot be completely excluded.
In the case of ordinary emails, in particular, confidentiality during transmission cannot be technically fully guaranteed. For particularly confidential information, suitable secure communication channels can be used by arrangement.
Within the framework of the applicable data protection law and under the respective legal conditions, you have in particular the right:
Legal conditions, exceptions, and restrictions apply to these rights. Their exercise may be restricted in particular to the extent necessary to protect third parties, due to statutory provisions, or due to our statutory and professional confidentiality obligations.
In particular, we may redact information in a disclosure or only disclose it in part to the extent necessary to protect attorney-client privilege or other protected interests.
If you wish to exercise your rights, please contact:
Dr. Daniela Dardel
Splügen Rechtsanwälte AG
Splügenstrasse 6
8002 Zurich
+41 43 344 34 00
Email: dardel@spluegenlaw.ch
We may require appropriate proof of your identity before we process a corresponding request.
You can also contact the Federal Data Protection and Information Commissioner (FDPIC) regarding data protection concerns.
This Privacy Policy is not part of a contract. We may adapt it at any time, in particular if our data processing activities or the legal requirements change.
The current version published on our website is authoritative.
As of: October 2026