Privacy Policy
The following Privacy Policy provides information about how your personal data is processed in connection with the website www.lezzilegal.ch (the “Website”) or within the context of a client relationship by the law firm LezziLegal (LezziLegal, “we”).
The following information is regularly reviewed to ensure it is up to date and is updated as needed.
The purpose of this information is:
- comprehensive information about how LezziLegal processes your personal data;
- an explanation of your rights regarding the processing of your personal data; and
- Providing the contact information of the entity responsible for processing your personal data.
Your trust is important to us, which is why we take data protection seriously and ensure appropriate security measures are in place. We are committed to handling your personal data responsibly. Of course, we comply with the provisions of the Federal Act on Data Protection (DSG), the Ordinance to the Federal Act on Data Protection (VDSG), the General Data Protection Regulation (GDPR) (EU) 2016/679, the Telecommunications Act (FMG), and, where applicable, other data protection regulations.
To help you understand what personal data we collect from you and for what purposes LezziLegal uses it, please review the information below.
1. Scope and Purpose of the Collection, Processing, and Use of Personal Data
1.1 Visiting the Website
When you visit the website, the servers of Squarespace.com (21 Fitzwilliam Square South, Dublin 2, D02 RD28
Ireland) temporarily store each visit in a log file. The following data is collected automatically without any action on your part and is stored until it is automatically deleted by LezziLegal:
- Date and time of the call
- IP address
- The IP address is used to track the approximate location of the Internet connection
- The operating system used, e.g., Apple or Windows
- The browser type, e.g., Safari, Firefox, Explorer, etc.
- Where does the traffic come from—via Google, Yahoo, etc., or directly by entering the https:// domain?
- Error Messages
- Information about the transferred data (e.g., the length of a question, answer, or comment in a blog post)
This data is collected and processed for the purpose of enabling the use of the website (establishing a connection), ensuring the long-term security and stability of the system, optimizing our website, and for internal statistical purposes. With regard to the purposes described above, there is a legitimate interest in data processing within the meaning of Article 6(1)(f) of the GDPR.
In the event of an attack on the network infrastructure or if there is suspicion of any other unauthorized or abusive use of the website, the IP address will be analyzed for investigative and defensive purposes and, if necessary, used in criminal proceedings to identify the users in question and to take civil or criminal action against them. For the purposes described above, we have a legitimate interest in data processing within the meaning of Article 6(1)(f) of the GDPR.
Finally, cookies and other cookie-based technologies are used when you visit the website. For more information, see Section 3, “Cookies.”
1.2 Contact via Email
You are responsible for the communication and/or the content you send to LezziLegal. Personal data is collected only if you voluntarily provide it to LezziLegal. In order to answer your questions, we may ask you to provide LezziLegal with additional information, such as your address, phone number, and other details. LezziLegal collects personal data from you only when it is necessary to answer your questions or to provide the services you have requested.
When processing your inquiry via email, there is a legitimate interest in data processing within the meaning of Article 6(1)(f) of the GDPR. You may object to this data processing at any time.
1.3 Client-Attorney Relationship
As part of a client relationship, we process the following personal data, among other things:
- Your name and contact information (for example, name, address, phone number, or email address), information about the company you represent, your position or title, and/or your relationship to a person, as well as other basic information);
- Identification and background information that you provide to LezziLegal or that LezziLegal collects from you as part of establishing the client relationship;
- Billing and financial information, such as payment information;
- Information that you have disclosed to LezziLegal in connection with and for the purposes of handling your case, or that we generate as part of the services we provide to you, including case-related communications
- Information regarding documents and communications that we send to you electronically.
- Any other information about you that you provide to us.
LezziLegal processes this information to communicate with you; to conduct money laundering, conflict of interest, and reputation checks prior to establishing a client relationship; to provide you with the services or legal advice you have requested; to bill you for services rendered; and to manage our business relationship with you, including the assertion, enforce, and defend legal claims.
The legal basis for the processing of your personal data for the aforementioned purposes is premised on pre-contractual measures and the performance of a contract within the meaning of Article 6(1)(b) of the GDPR, in the fulfillment of legal obligations under Article 6(1)(c) of the GDPR, and, where applicable, in our legitimate interest in the targeted and efficient management of the client relationship within the meaning of Article 6(1)(f) of the GDPR.
1.4 Training Courses
Personal data of participants is processed as part of the FIDLEG refresher courses and GWG training sessions. This processing is carried out for the purpose of organizing and conducting the training sessions, documenting participation, creating and managing user accounts, and fulfilling regulatory training and documentation requirements under financial market law. In particular, the following data is processed: contact information (last name, first name, email address), details regarding professional role or organization, supporting documentation, and login credentials associated with the user account.
2. Location of Data Storage
The personal data covered by and mentioned in the Privacy Policy is stored on local data storage devices at LezziLegal’s offices, in addition to on JMC Software AG’s servers.
All personal data is processed in Switzerland. In exceptional cases, data collected through the use of Google Analytics may be transferred to the United States.
3. Cookies
A cookie is a small piece of data stored in text files that are placed on your browser or another device when websites are loaded in the browser. Cookies are used to “remember” you and your preferences when you visit the LezziLegal website, either for a single visit (via a “session cookie”) or for multiple repeat visits (referred to as a “persistent cookie”). A session cookie is deleted when you close your browser or after a short period of time. A persistent cookie is stored for a specific period of time, after which it expires and is deleted.
Neither the technical data we collect nor cookies generally contain any personal data. However, personal data that LezziLegal or third-party providers commissioned by LezziLegal may store about you (e.g., if you have a user account with us or with these providers) can be linked to the technical data or to the information stored in cookies and derived from them, and thus potentially linked to you personally.
LezziLegal uses session cookies and persistent cookies on our website to provide users with a consistent and efficient experience. Cookies also perform functions that allow users to remain logged in to the website, if applicable. There are generally the following types of cookies:
- Strictly Necessary: These cookies are essential for enabling you to use our website and its features. The information collected by these cookies relates to the operation of the website, such as language detection, the website's scripting language, and security tokens used to maintain secure areas of the website.
- Performance and Analytics: These cookies collect anonymous information about how you use our website, such as which pages you visit most often, whether you receive error messages, and how you arrived at our website. They are also used to track details such as the number of unique visitors and page views in order to improve the user experience. The information collected by these cookies is used solely to improve the user experience on my website and never to identify you. These cookies are sometimes set by trusted third parties.
- Functionality: These cookies store the choices you have made, such as the country from which you are visiting our website and any changes you have made to the text size or other customizable parts of web pages, to enhance your experience on our website and make your visits more personalized and enjoyable. The information collected by these cookies may be anonymized and cannot be used to track your browsing activity on other websites.
- Third-party / embedded content: These cookies enhance the user experience on the website. They allow you to share your activities on our website with social media platforms such as Facebook and Twitter. We have no control over the information collected by these cookies.
Our website automatically uses only the cookies that are strictly necessary to enable you to use our website and its features and to ensure the website functions properly. Other cookies can be enabled in the cookie banner.
The legal basis is our legitimate interest, within the meaning of Article 6(1)(f) of the GDPR, in providing a stable and fully functional website.
4. Google Analytics
We use Google Analytics, an analytics tool provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google). Google Analytics uses methods, such as cookies, that enable the analysis of how our website is used. The information generated by the cookie regarding your use of our website:
- Browser information,
- Click path,
- Date and time of the visit,
- Device information,
- Downloads,
- Flash version,
- Location information,
- IP address,
- JavaScript support,
- pages visited,
- Purchasing activity,
- Referrer URL,
- Usage data,
- Widget interactions,
- The navigation path a visitor takes on the websites,
- Time spent on the websites and subpages,
- The page from which users leave the website,
- The country, region, or city from which access is made,
- Device (type, version, color depth, resolution, width, and height of the browser window),
- Returning or new visitor,
- Browser provider/version,
- The operating system used,
- The referrer URL (the previously visited website),
- Hostname of the accessing computer (IP address),
- Time of the server request,
are generally transmitted to a Google server in the United States and stored there. When IP anonymization (“anonymizeIP”) is enabled, the IP address is truncated within the member states of the European Union or in other signatory states to the Agreement on the European Economic Area, or in Switzerland, prior to transmission. According to Google, the masked IP address transmitted as part of Google Analytics is not combined with other data held by Google. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and truncated there. In such cases, we ensure through contractual guarantees that Google maintains an adequate level of data protection.
The information is used to analyze the use of lezzilegal.ch, to compile reports on activity, and to provide other services related to the use of lezzilegal.ch for the purposes of market research and to tailor lezzilegal.ch to user needs. This information may also be disclosed to third parties if required by law or if third parties process this data on our behalf.
The legal basis for this data processing using the following tools is your consent within the meaning of Article 6(1)(a) of the EU GDPR. You may withdraw your consent or object to the processing at any time by rejecting or disabling the relevant cookies in your web browser settings or by using the service-specific options described below.
5. Google Ads
This website uses Google Conversion Tracking. If you arrived at our website via an ad placed by Google, Google Ads will set a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad placed by Google. These cookies expire after 30 days and are not used to identify individuals. If the user visits certain pages on our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to that page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across the websites of Ads customers. The information collected using the conversion cookie is used to generate conversion statistics for Ads customers who have opted in to conversion tracking. Customers are informed of the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can refuse the placement of the cookie required for this purpose—for example, by using a browser setting that generally disables the automatic placement of cookies, or by configuring your browser to block cookies from the domain “googleleadservices.com.” Please note that you must not delete the opt-out cookies as long as you do not wish to have your measurement data recorded. If you have deleted all cookies from your browser, you will need to set the respective opt-out cookie again.
6. Notice Regarding Data Transfer to the United States
Google is headquartered in the United States. For the sake of completeness, we would like to point out to users residing or headquartered in Switzerland that U.S. authorities have surveillance measures in place that generally allow for the storage of all personal data pertaining to any individual whose data has been transferred from Switzerland to the United States. This occurs without differentiation, restriction, or exception based on the intended purpose and without an objective criterion that would allow the U.S. authorities’ access to the data and its subsequent use to be limited to very specific, strictly defined purposes capable of justifying the intrusion associated with both access to and use of this data. Furthermore, we point out that in the United States, data subjects from Switzerland have no legal remedies available that would allow them to obtain access to the data concerning them and to secure its correction or deletion, nor is there any effective judicial protection against the general access rights of U.S. authorities. We explicitly inform the data subjects of this legal and factual situation so that they can make a fully informed decision regarding their consent to the use of their data.
7. Links to LezziLegal's social media accounts
LezziLegal also uses social media plug-ins, which are small software components that establish a connection between your visit to our website and a third-party provider. The social media plug-in notifies the third-party provider that you have visited our website and may transmit cookies to the third-party provider that it has previously placed on your web browser. Further information on how these third-party providers use your personal data collected via the social media plug-ins can be found below.
The website includes links to our social media profiles on the following social networks:
- LinkedIn Corp., 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA;
When you click on the corresponding social media icons, you will be automatically redirected to our profile on that social media platform. To use the features of that platform, you may need to log in to your account on that platform.
When you click a link to one of my social media profiles, a direct connection is established between your browser and the server of the respective social network. This informs the network that you have visited our website using your IP address and clicked on the link. If you click on a link to a social network while logged into your account on that network, the content of our site may be linked to your profile on that network—in other words, the network can directly associate your visit to our website with your user account. If you wish to prevent this, you should log out before clicking on the relevant links. An association will occur in any case if you log in to the relevant network after clicking the link.
As a result, LezziLegal receives data from you (e.g., when you communicate with us or comment on our content) and from the platforms (e.g., statistics). The platform providers may analyze your usage and process this data together with other data they hold about you. They also process this data for their own purposes (e.g., marketing and market research purposes and to administer their platforms), and act as separate data controllers for this purpose. For more information on processing by the platform operators, please refer to the privacy policies of the respective platforms.
By clicking on one of these links, you are giving your consent, as defined in Article 6(1)(a) of the GDPR, to the following data processing activities.
8. Disclosure of Data to Third Parties
Personal data is shared for the purpose of providing and maintaining the websites' functionality.
LezziLegal shares your personal data with the following categories of recipients:
Service Providers: LezziLegal works with service providers in Switzerland who process data about you on our behalf or under joint responsibility with us, or who receive data about you from us under their own responsibility (e.g., IT providers and accounting firms). LezziLegal generally enters into agreements with these third parties regarding the use and protection of personal data.
JMC Software AG is our primary IT service provider.
The primary service provider for accounting is bexio AG (headquartered in 8640 Rapperswil, SG).
Government Agencies: LezziLegal may disclose personal data to government agencies, courts, and other authorities in Switzerland and abroad if we are legally required to do so. These agencies then process this data under their own responsibility.
Counterparties and Other Involved Parties: To the extent necessary to fulfill our contractual obligations—in particular, to manage client matters—LezziLegal may also disclose your personal data to counterparties and other involved parties (e.g., guarantors, lenders, affiliated companies, other law firms, informants, or experts, etc.).
Other Individuals: This refers to other cases where the involvement of third parties arises from the purposes set forth in Section 3. This includes, for example, delivery recipients or payees you have specified, third parties acting in a representative capacity (e.g., your attorney or bank), or individuals involved in administrative or court proceedings. LezziLegal may also disclose your personal data to our supervisory authority, particularly if this is necessary in individual cases to release us from our professional duty of confidentiality. If LezziLegal collaborates with the media and provides them with material (e.g., photos), you may also be affected. As part of our business development, LezziLegal may sell or acquire businesses, business units, assets, or companies, or enter into partnerships, which may also result in the disclosure of data (including yours, e.g., as a client, supplier, or their representative) to the parties involved in these transactions. In the course of our communications with our competitors, industry organizations, associations, and other bodies, data concerning you may also be exchanged.
All of these categories of recipients may, in turn, engage third parties, which means that your data may also be made available to them. We can restrict the processing carried out by certain third parties (e.g., IT providers), but not by other third parties (e.g., government agencies).
9. Job Application
When you apply for a position with us, LezziLegal collects and processes the relevant data for the purpose of reviewing your application, conducting the application process, and—if your application is successful—preparing and finalizing the corresponding contract. To this end, in addition to your contact information and details from the relevant correspondence, LezziLegal processes, in particular, the data contained in your application documents and any additional data we may collect about you—for example, from professional social networks, the Internet, the media, and from references, provided you consent to our obtaining references. Data processing in connection with the employment relationship is the subject of a separate privacy policy.
10. Right to Access, Deletion, and Correction
You may object to the processing of your data. You have the following rights:
Right of Access: You have the right to request access to your personal data stored by us at any time and free of charge, provided that we are processing such data. This allows you to verify what personal data we are processing about you and to ensure that we are using it in accordance with applicable data protection regulations.
Right to Rectification: You have the right to have inaccurate or incomplete personal data corrected and to be notified of the correction. In such cases, we will inform the recipients of the data in question about the corrections made, unless this is impossible or would involve a disproportionate effort.
Right to Erasure: You have the right to have your personal data erased under certain circumstances. In some cases, the right to erasure may not apply.
Right to Restriction of Processing: Under certain conditions, you have the right to request that the processing of your personal data be restricted.
Right to Data Portability: Under certain circumstances, you have the right to receive the personal data you have provided to us in a readable format, free of charge.
Right to File a Complaint with a Supervisory Authority: You have the right to file a complaint with a competent supervisory authority regarding the manner in which your personal data is processed.
Right to Withdraw Consent: You generally have the right to withdraw your consent at any time. However, processing activities carried out in the past based on your consent do not become unlawful as a result of your withdrawal.
If you wish to exercise your rights with us, please contact us; our contact information is provided below. To prevent misuse, we must verify your identity (e.g., with a copy of your ID, if necessary). Please note that these rights are subject to certain conditions, exceptions, or restrictions (e.g., to protect third parties or trade secrets, or due to our professional duty of confidentiality). We reserve the right to redact copies or provide only excerpts for data protection or confidentiality reasons.
11. Retention Periods
LezziLegal stores your personal data only for as long as necessary to provide you with the services you have requested or for purposes for which you have given your consent.
Please note that certain types of data may be subject to specific statutory retention periods. We are required to store this data until the end of the retention period. After that, for example, business correspondence or concluded contracts must be retained for up to 10 years. LezziLegal uses this data exclusively to fulfill our legal obligations.
12. Data Security
LezziLegal protects your personal data with appropriate physical, electronic, and procedural security measures, including firewalls, personal passwords, and encryption and authentication technologies. In cases where personal data is collected via the website, it is transmitted in encrypted form using SSL (Secure Sockets Layer), currently the most widely used and secure data transmission protocol.
In this context, please also note that data transmitted via an open network, such as the Internet or an email service, is publicly accessible. If you share personal data via an open network, you should be aware that third parties may access this data and collect and use it for their own purposes.
13. Contact
If you have any questions about data protection, would like more information, or wish to request the deletion of your personal data, please contact us by email at lezzi@lezzilegal.ch. Alternatively, you can write to:
LezziLegal
Dr.iur. Lukas Lezzi
P.O. Box
Etzelstrasse 3
8038 Zurich
LezziLegal has appointed the following data protection representative pursuant to Article 27 of the GDPR in the European Economic Area (EEA)—including the European Union (EU) and the Principality of Liechtenstein—as an additional point of contact for supervisory authorities and data subjects for inquiries related to the General Data Protection Regulation (GDPR):
VGS Datenschutzpartner UG A
m Kaiserkai 69 2
0457 Hamburg, Germany
info@datenschutzpartner.eu
Date: May 28, 2025
