Privacy notice for the Swiss Fintech Law app
This notice explains how Swiss Fintech Law AG handles personal data in the Swiss Fintech Law app for iPhone and its web version. It applies in addition to the terms of our engagement with clients.
Who is responsible
Swiss Fintech Law AG, Hinterbergstrasse 53, 6312 Steinhausen, Switzerland. Email: contact@swisstechlaw.com.
Without an account
You can read the guides and regulatory updates without an account. We do not use advertising, tracking or analytics tools, and we do not build profiles. Our server records technical data needed to deliver the app securely (such as IP address and time of a request) for up to 30 days.
If you send us a message with the contact form, we receive your name, email address, company (if given), the topic and your message. We use them only to answer you and, if you instruct us, to prepare a possible engagement. Please don't send confidential information before we have agreed to act for you.
Clients with an account
Access to the client area is by invitation only. To provide it, we process:
- your name and email address, and the companies you may see;
- information about those companies that we hold as your lawyers: corporate data, documents, invoices, time records and due dates;
- one-time sign-in codes (valid 10 minutes) and session data (valid up to 30 days or until you sign out);
- a log of access to documents and data (date, time, action, IP address), which protects you and us and lets us show who saw what.
Client information is covered by professional secrecy (Article 321 of the Swiss Criminal Code). Messages you send through the app reach our team by email.
Service providers
We use carefully selected providers who process data on our behalf and under our instructions:
- Hetzner Online GmbH, Germany: hosting of the app's server in a data centre in Germany.
- Google (Google Workspace): sending emails and storing documents. Google may process data in other countries, including the United States. Transfers are protected by appropriate safeguards, such as the Swiss–US Data Privacy Framework or standard contractual clauses.
We do not sell personal data or share it for marketing.
How long we keep data
- Contact form messages: up to 12 months, unless an engagement follows.
- Sign-in codes and sessions: as stated above.
- Client data and access logs: for the duration of our engagement and the statutory retention periods that apply to us as a law firm.
On your device
The iPhone app stores only your session key, in the iOS keychain. The web version stores it in your browser. Documents you open or save are handled by your device and are under your control.
Your rights
Under the Swiss Federal Act on Data Protection and, where it applies, the EU GDPR, you can ask for access to your data, its correction or deletion, and object to processing. Clients can ask us at any time to close their app access. Write to contact@swisstechlaw.com. You may also complain to the Federal Data Protection and Information Commissioner (FDPIC) or, in the EU, your local data protection authority.