Privacy Policy
Last updated: 6 November 2026
This Privacy Policy explains how Swiss Firm Consultancy GmbH (“we”, “us”) processes personal data when you visit sf-consult.ch, contact us or use our services. We process personal data in line with the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR).
1. Who is responsible
Swiss Firm Consultancy GmbH, Obere Fischbachstrasse 2, 8932 Mettmenstetten, Switzerland. UID: CHE-114.445.544. E-mail: info@sf-consult.ch. Phone: +41 78 460 31 33.
If you have any question about this policy or your personal data, write to info@sf-consult.ch.
2. What data we process and why
2.1 Visiting our website
Our website is hosted by Framer. When you open a page, technical data such as your IP address, the date and time of access, the page visited, your browser and your operating system are processed. This is needed to deliver the website, keep it secure and fix technical problems.
Framer also gives us basic visitor statistics, such as page views and the visitor’s country. According to Framer, these statistics do not use cookies, the IP address is not stored, and the data cannot be linked to you.
2.2 Fonts
Some fonts on our website are loaded from Google servers (Google Fonts). Your browser connects to Google for this, and Google receives your IP address. We use this to display the website correctly.
2.3 Contacting us
When you use our contact form, write to us by e-mail or call us, we process the data you give us. This is usually your name, e-mail address, phone number, company and the content of your message. We use it to answer your request and, if you wish, to prepare an offer.
Messages from the contact form are processed by Framer and forwarded to our e-mail. Our e-mail runs on Google Workspace.
2.4 Clients and prospective clients
If you become our client, we process the data we need to provide our services. This may include identification documents, contact details, information about shareholders, directors and beneficial owners, company documents, financial and tax information, and our correspondence.
We also process data to meet our legal obligations, for example under company law, tax law, the Anti-Money Laundering Act (AMLA) and the rules on the Swiss Transparency Register. Where your mandate requires it, we share data with notaries, commercial registers, banks, tax authorities and other parties involved.
2.5 Cookies, analytics and advertising
We use Google Tag Manager to load tools on our website. With your consent, we use:
Google Analytics 4, to understand how visitors use our website, for example which pages they visit and for how long;
Google Ads conversion tracking, to measure whether people who came from our ads contact us.
These tools use cookies and similar technologies. They are only set after you accept them in the cookie banner. Technically necessary functions, such as saving your cookie choice, work without consent. You can change your choice at any time via the cookie settings button on every page.
2.6 Links to other websites
Our website links to external sites, such as official registers and legal sources. When you follow such a link, the operator of that site is responsible for its own data processing.
We do not use your data for automated decisions that have legal or similarly significant effects on you.
3. Legal basis under the GDPR
Where the GDPR applies, we rely on the following legal bases:
performance of a contract or steps before a contract at your request (Art. 6(1)(b) GDPR), for contact requests and client mandates;
compliance with legal obligations (Art. 6(1)(c) GDPR);
our legitimate interest in running a secure and working website and in managing our business (Art. 6(1)(f) GDPR);
your consent for analytics and advertising cookies (Art. 6(1)(a) GDPR), which you can withdraw at any time.
4. Service providers and other recipients
We work with service providers who process data on our behalf and are bound by contract to protect it:
Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, Netherlands: website hosting, contact form and visitor statistics. Framer uses Amazon Web Services, including servers in the United States.
Google Ireland Limited, Dublin, Ireland, and Google LLC, USA: e-mail (Google Workspace), Google Tag Manager, Google Analytics 4, Google Ads and Google Fonts.
In the course of a mandate, we may also disclose data to notaries, commercial registers, the Transparency Register, banks, auditors, tax and other authorities, and to professional advisers we involve with your knowledge. We do not sell personal data.
5. Disclosure abroad
Some recipients are located outside Switzerland, in particular in the European Union and the United States. The Swiss Federal Council recognises the EU and the EEA as providing adequate data protection.
For the United States, we rely on the Swiss-U.S. Data Privacy Framework where the recipient is certified under it. Google LLC is certified. Otherwise, we rely on standard contractual clauses recognised by the Federal Data Protection and Information Commissioner (FDPIC) or another safeguard permitted by law.
6. How long we keep data
We keep personal data only as long as needed for the purposes above or as required by law:
contact requests that do not lead to a mandate: 12 months;
business records and documents relating to client mandates: 10 years (Art. 958f of the Swiss Code of Obligations);
documents we must keep under anti-money laundering law: at least 10 years after the business relationship ends (Art. 7(3) AMLA);
analytics data: 14 months.
7. Data security
We take appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. These include encrypted transmission (HTTPS), restricted access and confidentiality obligations for everyone who works with us.
8. Your rights
Within the limits of the applicable law, you have the right to:
ask whether we process personal data about you and which data;
have incorrect data corrected;
have data deleted or its processing restricted;
object to processing and withdraw your consent for the future;
receive data you gave us in a common electronic format.
To use these rights, write to info@sf-consult.ch. We may ask you to confirm your identity. Some rights may be limited where the law requires us to keep data or where overriding interests apply.
You can also file a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch) or, if you live in the EU, with the data protection authority in your country.
9. Changes to this policy
We may update this policy when our services or the legal requirements change. The current version is always available on this page.