Privacy Policy

WHAT IS THIS PRIVACY POLICY ABOUT?

Eggert+Friends LLC (referred to as “Eggert+Friends,” “we,” or “us” hereafter) is a company based in Zurich, Switzerland. In the course of our business activities, we collect and process personal data, particularly data about our clients, associated individuals and authorities, professional and other associations, visitors to our website, participants in events, recipients of newsletters, and other entities or their respective contact persons and employees (hereafter also referred to as “you”). This privacy policy provides information about these data processing activities. In addition to this privacy policy, we may inform you separately about the processing of your data (e.g., in order confirmations).

If you disclose data about other individuals to us (e.g., event participants), we assume that you are authorized to do so, that the data is accurate, and that you have ensured these individuals are informed about the disclosure, insofar as a legal obligation to provide information exists (e.g., by bringing this privacy policy to their attention in advance).

WHO IS RESPONSIBLE FOR PROCESSING YOUR DATA?

The party responsible under data protection law for the data processing described in this privacy policy is:

Eggert+Friends LLC

Heinreichstrasse 267e

8005 Zurich

welcome@eggertandfriends.ch

FOR WHAT PURPOSES DO WE PROCESS YOUR DATA, AND WHAT DATA DO WE PROCESS?

When you use our services, visit www.eggertandfriends.ch (hereafter referred to as the “Website”), or otherwise engage with us, we collect and process various categories of your personal data. In general, we may collect and process these data particularly for the following purposes:

Communication:

We process personal data to communicate with you and third parties via email, telephone, mail, or other means. This includes providing our clients, contractual partners, and other interested parties with information about events, news about our company, or similar updates. Such communication may occur in the form of newsletters or other regular contacts (electronically, by post, or by phone). You can decline such communication or revoke your consent for it at any time. To this end, we process the content of the communication, your contact details, metadata about the communication, as well as image and audio recordings of (video) calls. In the case of audio or video recordings, we will inform you separately, and you are free to object to the recording or terminate the communication. If we need or wish to verify your identity, we may collect additional data (e.g., a copy of an ID).

Initiation and Conclusion of Contracts:

For concluding a contract, we may collect and process your name, contact details, authorizations, consent declarations, information about third parties (e.g., details about event participants), contract details, contract date, creditworthiness data, and any other information you provide to us or that we gather from public sources or third parties (e.g., commercial registers, credit agencies, sanctions lists, media, or the internet).

Management and Fulfillment of Contracts:

We collect and process personal data to meet our contractual obligations to our clients and other contractual partners (e.g., suppliers, service providers, project partners) and to provide and enforce contractual services. This also includes accounting and public communication (if permitted). For this purpose, we process data collected during the initiation, conclusion, and execution of the contract, as well as data generated as part of our contractual services or gathered from public sources or third parties (e.g., information services, media, or the internet).

Operation of Our Website and Improvement of Our Electronic Services:

To operate our website securely and reliably, we collect technical data such as IP addresses, details about your device’s operating system and settings, region, time, and type of use. We also use cookies and similar technologies. For further information, see section 8.

To continuously improve our website and other electronic services, we collect data about your behavior and preferences, for example, by analyzing how you navigate our website and interact with our social media profiles and other electronic offerings.

Security Purposes and Access Control:

We collect and process personal data to ensure and continuously improve the security of our IT and other infrastructure. This includes monitoring and controlling electronic access to our IT systems, analyzing and testing our IT infrastructure, system and error testing, and creating backups.

Compliance with Laws, Orders, and Recommendations from Authorities and Internal Regulations (“Compliance”):

We collect and process personal data to comply with applicable laws (e.g., anti-money laundering regulations, tax obligations, or our professional responsibilities), self-regulations, certifications, industry standards, our corporate governance requirements, as well as for internal and external investigations where we are a party (e.g., by a law enforcement or supervisory authority or an appointed private entity).

Risk Management and Corporate Governance:

We collect and process personal data as part of risk management (e.g., to protect against criminal activities) and corporate governance. This includes our operational organization (e.g., resource planning) and corporate development (e.g., acquisitions or sales of business units or companies).

Job Applications:

If you apply for a position with us, we collect and process relevant data to evaluate your application, conduct the application process, and, in the case of a successful application, prepare and conclude a corresponding contract. In addition to your contact details and the information provided in your application documents, we may also process data obtained from professional social networks, the internet, the media, and references (if you consent to us obtaining references).

Other Purposes:

Other purposes include training and educational purposes as well as administrative purposes (e.g., bookkeeping). For training, evidence, and quality assurance purposes, we may monitor or record phone or video calls. In such cases, we will inform you separately (e.g., through a notification during the video call), and you are free to object to the recording or end the communication. If you only object to the recording of your image, you may turn off your camera.

Additionally, we may process personal data for the organization, implementation, and follow-up of events, including participant lists, contents of presentations and discussions, as well as image and audio recordings created during these events. Protecting other legitimate interests, which cannot be exhaustively listed, is also included in these other purposes.

WHERE DO THE DATA COME FROM?

From You:

The majority of the data we process is provided by you (or your device) directly to us (e.g., in connection with our services, the use of our website and apps, or communication with us). Except in certain cases (e.g., legal obligations), you are not obligated to provide your data. However, if you wish to enter into contracts with us or use our services, you must provide certain data. Similarly, using our website is not possible without data processing.

From Third Parties:

We may also obtain data from publicly accessible sources or receive it from (i) authorities, (ii) your employer or principal who has a business relationship or other interaction with us, and (iii) other third parties. This includes, in particular, data processed as part of the initiation, conclusion, and execution of contracts, data from correspondence and meetings with third parties, as well as all other categories of data listed in Section 5.

TO WHOM DO WE DISCLOSE YOUR DATA?

In connection with the purposes outlined in Section 3, we may transmit your personal data to the following categories of recipients. Where necessary, we obtain your consent for such disclosures:

Service Providers:

We collaborate with service providers domestically and abroad who (i) process data on our behalf (e.g., IT providers), (ii) share joint responsibility with us, or (iii) process data on their own responsibility that they receive from us or collect on our behalf. We typically enter into agreements with these third parties regarding the use and protection of personal data.

Clients and Other Contractual Partners:

This category includes clients and other contractual partners of ours, where the transfer of your data is derived from the contract. It also includes entities with whom we cooperate. These recipients generally process the data under their own responsibility.

Authorities and Courts:

We may disclose personal data to offices, courts, and other authorities domestically and abroad if we are legally required or permitted to do so or if such disclosure is necessary to protect our interests. These recipients process the data under their own responsibility.

Other Individuals:

This includes other cases where the involvement of third parties arises from the purposes outlined in Section 3. Examples include recipients of deliveries or payments specified by you, third parties in the context of representation relationships (e.g., your lawyer or bank), or individuals involved in administrative or judicial proceedings.

If we collaborate with media and provide them with materials (e.g., photos), you may also be affected.

As part of corporate development, we may sell or acquire businesses, parts of businesses, assets, or companies, or enter into partnerships, which may involve disclosing data to individuals participating in these transactions.

In the context of communication with our competitors, industry organizations, associations, and other bodies, there may also be an exchange of data concerning you.

All these categories of recipients may, in turn, involve third parties, making your data accessible to them as well. We can limit the processing by certain third parties (e.g., IT providers), but not by others (e.g., authorities, banks, etc.).

We also allow certain third parties to collect personal data about you independently on our website and at our events (e.g., media photographers, providers of tools integrated into our website, etc.). To the extent that we are not significantly involved in these data collections, these third parties are solely responsible. For inquiries or to exercise your data protection rights, please contact these third parties directly. We have outlined your rights in Section 7. Information about activities on our website can be found in Section 8.

DO YOUR PERSONAL DATA GET TRANSFERRED ABROAD?

We primarily process and store personal data in Switzerland and the European Economic Area (EWR), but depending on the case, your personal data may potentially be transferred to any country in the world. As part of our activities for clients, your personal data could also be transferred worldwide.

If recipients are located in a country without adequate data protection, we contractually require them to maintain an adequate level of data protection. For this, we use the revised Standard Contractual Clauses of the European Commission, available here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj, including the necessary additions for Switzerland. This is provided they are not already subject to a legally recognized framework ensuring data protection.

We may also disclose personal data to a country without adequate data protection without entering into a contract if we rely on an applicable legal exemption. Such an exemption applies, for example, when the execution of a contract in your interest requires such a disclosure, when you have given your consent, or when obtaining your consent within a reasonable timeframe is not possible, and the disclosure is necessary to protect your or a third party’s life or physical integrity. An exemption also applies when it involves data you have made publicly accessible and whose processing you have not objected to. We may also rely on the exemption for data from a legally provided register (e.g., a commercial register) to which we have lawful access.

WHAT RIGHTS DO YOU HAVE?

You have certain rights in connection with our data processing. Under applicable law, you may, in particular:

Request information about the processing of your personal data.
Request the correction of inaccurate personal data.
Request the deletion of personal data.
Object to data processing.
Request the release of certain personal data in a commonly used electronic format or its transfer to other responsible parties.

If you wish to exercise your rights with us, please contact us; our contact information is provided in Section 2. To prevent misuse, we may need to verify your identity (e.g., by requiring a copy of your ID, if necessary).

Please note that these rights are subject to conditions, exceptions, or limitations (e.g., to protect third parties, business secrets, or due to our professional confidentiality obligations). We reserve the right to redact or provide copies only in part for data protection or confidentiality reasons.

HOW ARE COOKIES, SIMILAR TECHNOLOGIES, AND SOCIAL MEDIA PLUGINS USED ON OUR WEBSITE?

When using our website (including the newsletter), data is collected and stored in logs (particularly technical data). Additionally, we may use cookies and similar technologies (e.g., pixel tags or fingerprints) to recognize website visitors, evaluate their behavior, and identify preferences. A cookie is a small file that is transmitted between the server and your system, enabling the recognition of a specific device or browser.

You can set your browser to automatically reject, accept, or delete cookies. You can also disable or delete cookies individually. For instructions on how to manage cookies in your browser, please refer to the help menu of your browser.

Both the technical data we collect and cookies generally do not contain personal data. However, personal data that we or third-party service providers we engage (e.g., if you have a user account with us or these providers) store about you may be linked with the technical data or the information stored in the cookies, potentially identifying you.

Furthermore, we use our own tools and third-party services (which may also use cookies) on our website, especially to improve the functionality or content of our website (e.g., integrating videos or maps), and to generate statistics.

Currently, we may use services from the following providers and advertising partners, and their contact details and further information about the respective data processing can be found in their respective privacy policies:

Google Analytics

Provider: Google Ireland

Privacy Notice: https://support.google.com/analytics/answer/6004245

Information for Google Accounts: https://policies.google.com/technologies/partner-sites?hl=en

Some of the third-party providers we use may be located outside of Switzerland. Information on the transfer of data abroad can be found in Section 6. In terms of data protection, some of these providers are “only” data processors on our behalf, while others are data controllers. Further details can be found in their respective privacy policies.

HOW DO WE PROCESS PERSONAL DATA ON OUR PAGES ON SOCIAL NETWORKS?

We operate pages and other online presences on social networks and other platforms operated by third parties and process data about you in this context. We receive data from you (e.g., when you communicate with us or comment on our content) and from the platforms (e.g., statistics). The platform providers may analyze your usage and process this data along with other data they have about you. They also process this data for their own purposes (e.g., marketing and market research purposes, and for managing their platforms) and act as independent data controllers for these purposes. For more information about the processing by the platform providers, please refer to the privacy policies of the respective platforms.

We currently use the following platforms, with the identity and contact details of the platform provider available in their respective privacy policies:

Facebook

www.facebook.com

Instagram

www.instagram.com

YouTube

www.youtube.com

LinkedIn

www.linkedin.com

We are entitled, but not obligated, to review third-party content before or after its publication on our online presences, to delete content without prior notice, and to report it to the providers of the respective platform if necessary.

Some of the platform operators may be located outside of Switzerland. Information regarding the transfer of data abroad can be found in Section 6.

WHAT ELSE IS TO BE CONSIDERED?

If the EU General Data Protection Regulation (“DSGVO”) is applicable to certain data processing activities, the provisions of Section 10 apply exclusively for the purposes of the DSGVO and the data processing activities subject to it.

We base the processing of your personal data primarily on the fact that:

it is necessary as described in Section 3 for the initiation and conclusion of contracts, as well as their management and enforcement (Art. 6 Abs. 1 lit. b DSGVO);

it is necessary to safeguard legitimate interests of us or third parties as described in Section 3, namely for communication with you or third parties, to operate our website, to improve our online offerings and register for certain services and offers, for security purposes, to comply with Swiss law and internal regulations, for our risk management and corporate governance, and for other purposes such as training and education, administration, proof and quality assurance, organization, execution, and follow-up of events, and to protect other legitimate interests (see Section 3) (Art. 6 Abs. 1 lit. f DSGVO);

it is required by law due to our mandate or position under the law of the EEA or a member state (Art. 6 Abs. 1 lit. c DSGVO) or is necessary to protect your vital interests or those of another natural person (Art. 6 Abs. 1 lit. d DSGVO);

you have separately consented to the processing (Art. 6 Abs. 1 lit. a and Art. 9 Abs. 2 lit. a DSGVO).

We would like to point out that we process your data generally as long as our processing purposes (see Section 3), statutory retention periods, and our legitimate interests, especially for documentation and evidence purposes, require it, or as long as storage is technically necessary (e.g., in the case of backups or document management systems). If there are no legal or contractual obligations or technical reasons preventing it, we generally delete or anonymize your data after the expiration of the storage or processing duration as part of our usual procedures and in accordance with our retention policy.

If you do not provide certain personal data, this may result in the inability to provide the related services. We indicate where personal data requested by us is mandatory.

The right to object to the processing of your data, as stated in Section 7, applies specifically to data processing for direct marketing purposes.

If you do not agree with how we handle your rights or data protection, please let us know (see contact details in Section 2). If you are located in the EWR, you also have the right to lodge a complaint with the data protection authority in your country. A list of authorities in the EWR can be found here: https://edpb.europa.eu/about-edpb/board/members_de.

Our representative in the EWR under Art. 27 DSGVO (if applicable) is:

Eggert+Friends LLC

Heinreichstrasse 267e

8005 Zürich

welcome@eggertandfriends.ch

CAN THIS PRIVACY POLICY BE CHANGED?

This privacy policy is not part of a contract with you. We may adjust this privacy policy at any time. The version published on this website is the current version.