1 We process personal data (data that directly or indirectly identifies natural persons) which we receive from you or third parties involved as part of the client relationship or which we collect ourselves. Kaiser Odermatt & Partner AG, Baarerstrasse 12, CH-6300 Zug, Switzerland, CHE-158.726.787 is responsible for the processing of personal data described in this data protection declaration.

2 You or the data subjects provide us with some of the personal data when you contact us via email or telephone and inquire about our services. This includes, for example, name and contact details as well as information about the role of the data subject in the company or organization for which you or the respective contact persons work or on whose behalf you or they contact us. We also process personal data that we receive in our correspondence with third parties (namely clients, counterparties, authorities and courts and their employees or other contact persons) as part of the attorney-client relationship (e.g. name, contact details, date of birth, information on the employment relationship, income situation, family relationships, etc.). on health status). We also collect some personal data ourselves, for example from public registers or on websites.

3 We process the types of personal data mentioned primarily to provide, document and bill for our legal services.

4 We observe the following principles when processing data (Art. 6 DSG):

a) Principle of legality
b) Principle of processing in good faith
c) Principle of transparency
d) Principle of purpose limitation
e) Principle of necessity/data minimization
f) Principle of accuracy
g) Principle of storage limitation
h) Principle of integrity and confidentiality

5 In order to achieve the purposes described in this data protection declaration, it may be necessary for us to pass on personal data to the following categories of recipients: external service providers, clients, counterparties and their legal representatives, business partners with whom we may have to coordinate the provision of legal services, as well as authorities and courts .

6 We process the personal data in our area of ​​responsibility in Switzerland. However, we can transmit the personal data to recipients (namely clients, counterparties or authorities) who in turn process the personal data in other countries, including those that do not guarantee a level of data protection comparable to Swiss law. We will do the latter based on consent or standard contractual clauses, or if it is necessary to fulfill a contract or enforce legal claims.

7 We only store personal data for as long as it is necessary to process the client relationship, for as long as there is a legal retention and documentation obligation or for as long as we have an overriding private or public interest in doing so. We take proportionate and reasonable precautions to protect personal data from loss, unauthorized modification or unauthorized access by third parties. If you provide us with personal data via a third party (e.g. your employees or other contact persons), it is up to you to inform them in a general manner about the processing by legal service providers (such as us) or other external service providers (e.g. in a data protection declaration for employees ).

8 We would like to point out that we rely on external IT service providers and cloud providers with servers in Switzerland as part of our mandate management. We then use certain IT services and means of communication that may involve data security risks (e.g. email, video conferences). It is your responsibility to inform us about your desire for special security measures.

9 We have a legitimate interest in processing personal data corresponding to the stated purposes. Some processing is also necessary so that we can fulfill our contractual obligations towards you or our legal obligations (e.g. retention obligations).

10 Data subjects have, in particular, the right to information about the personal data stored about them and the purpose of the data processing, the right to correction and deletion or restriction of processing of their personal data, the right to object to the processing, the right to take legal action responsible supervisory authority and on data transfer/portability. Please note, however, that these rights are subject to conditions and exceptions. To the extent permitted or required by law, we may refuse requests to exercise these rights. We may or must retain or otherwise process the personal data despite a request to delete the personal data or restrict processing for legal reasons.

11 No consent to the data protection declaration is required from the client, their employees or other contact persons. The data protection declaration only provides information about the type, scope and purpose of the use of personal data by Kaiser Odermatt & Partner AG. Kaiser Odermatt & Partner AG reserves the right to unilaterally change the content of the aforementioned data protection declaration at any time and without notice. It is therefore recommended that you regularly consult Kaiser Odermatt & Partner AG's data protection declaration on our website.

12 If you have any questions or if you or your employees or other contact persons would like to exercise your or their data protection rights, please contact us via info@kaiserodermatt.ch or write to Kaiser Odermatt & Partner AG, Baarerstrasse 12, 6300 Zug

* * *