Data protection
Who we are
CLL Switzerland AG is responsible for the data processing described here. You can inform us of any data protection concerns at the following address: Langstrasse 64, 8004 Zurich, Switzerland, office@cll-ag.com, +41 43 883 90 37. References in this Privacy Policy (the Statement) to “CLL”, “we” or “us” are references to CLL Switzerland AG.
If you provide us with personal data of other persons (e.g. family members or work colleagues), we assume that you are authorized to do so, that this data is correct and that you have ensured that these persons are informed about this disclosure, insofar as a legal obligation to provide information applies.
Personal data that we process
The personal data that we process about you includes
- Your name and contact details (for example, name, address, telephone number and e-mail address), information about the company you work for, your position or title and/or your relationship with a person and other basic information), information about your business relationship with us, for example, if you are a former employee or partner of ours;
- Identification and background information that you provide to us or that is collected from you as part of our onboarding process;
- Financial information, for example payment information;
- Information which is disclosed to us by or on behalf of our customers or which we create as part of our services to customers;
- Information provided to us for the purpose of attending meetings, seminars or events;
- Information about your education, previous jobs and references as well as any other information you submit to us when applying for a job;
- Information in connection with documents and communications that we send to you electronically, such as your use of promotional e-mails.
- All other information relating to you that you provide to us.
We collect and record this information when you interact with us, for example when you communicate with our staff, register to receive information by e-mail, attend a meeting, seminar or other event, or as part of an application process. We also collect or create personal data as part of the services we offer and when we obtain personal data from other sources, for example by consulting publicly available sources to update your details. As part of the application process, we consult job-related social networks, the internet, media and, with your consent, obtain references.
Insofar as this is permitted, we also obtain certain data from publicly accessible sources (e.g. debt collection registers, land registers, commercial registers, media, internet including social media) or receive such data from our customers and their employees, from authorities, (arbitration) courts and other third parties (such as counterparties, business and contractual partners of our customers, your employer or client).
Why we process your personal data
We process your personal data:
- to communicate with you and with third parties, such as counterparties, lawyers, tax advisors, banks, courts or authorities;
- to carry out money laundering, conflict and reputation checks;
- to provide and improve our services to you and our customers, in particular in the context of providing services to our customers;
- in the context of the purchase of products and services from our suppliers and auxiliary persons (such as, in particular, experts engaged in Switzerland and abroad), including personal data of third parties which are disclosed to us or which we collect on behalf of our customers, for example the processing of identification and background information as part of our onboarding process, financial-related data and data in the context of our administrative and marketing processes/work;
- to manage the business relationship with you and our customers;
- for the purpose of reviewing your job application, carrying out the application process and, if your application is successful, preparing you to take up the position and concluding a corresponding contract;
- to maintain, provide and improve our websites, including monitoring and analysing their use (for more information, see section 4 below);
- to send you invitations to events, publications, alerts, updates, news about us or similar. This may take the form of newsletters and other regular contact (electronically, by post, by telephone). You can reject such communication at any time or refuse or revoke your consent to such communication;
- for market and opinion research and media monitoring;
- to comply with our legal, regulatory and risk management obligations, including the assertion, enforcement and defence of legal claims;
- based on your consent.
We process personal data for these purposes on the following basis: if it is necessary for us to perform a contract, such as contacting a person to offer services, to assert, exercise or defend legal claims or (in) legal proceedings; to comply with legal and regulatory obligations, to protect legitimate interests, including the interests mentioned and listed above; and/or based on consent.
We use various technical and organizational measures to help protect your personal data from unauthorized access, unlawful use, disclosure, alteration, or destruction.
Use of our website, communication
When you access and use our website, we automatically collect and store log data and device-specific information for a limited period of time. This information includes, but is not limited to, specific information about how you use our website, IP address, access dates and times, hardware, and software information as well as device-specific and other similar information. We process this data on this basis and as far as this is necessary for us to operate, maintain and improve our website.
Our websites use Google Analytics, a service of the Google Group which monitors and records the way our websites are used. Google Analytics does this by placing small text files called cookies on your computer or other device. Cookies record information about the number of visitors to these websites, the visits to the individual pages and the duration for which these websites are visited. This information is available in aggregated form and is not individually identifiable. This integration of Google Analytics is always carried out using anonymized IP addresses by shortening them within the EU/EEA.
You can refuse the use of cookies by selecting the appropriate settings on your browser. Please note, however, that this may affect your ability to use our websites. For more information about cookies, including how to manage, reject or delete them, please visit www.allaboutcookies.org.
We may use your name and e-mail address(es) to send you publications, alerts, updates, invitations to events and other information by e-mail and will ask for your consent before doing so, unless we have received your contact details as part of our services and you have not opted out of receiving such marketing communications. If you no longer wish to receive marketing communications from us, you can unsubscribe at any time by clicking on the unsubscribe link in the relevant e-mails. Please note that we use personal data to track whether you read our e-mails or whether you click on the links contained in them.
To the extent permitted by law, we exclude liability for the security of data that you transmit to us via the internet (e.g. by e-mail) or other electronic channels and for any direct or indirect damage. We ask you to choose other means of communication if this appears necessary or sensible for security reasons.
To whom we disclose your personal data
We may disclose your personal data to trusted third parties in connection with the processing purposes mentioned above, including the following categories of recipients:
- providers to whom we have outsourced certain support services such as translation work or document checks;
- IT service providers;
- Third parties who have been commissioned with their prior consent as part of the services we offer our customers, for example other real estate service providers, banks, tax consultants, lawyers, or technology service providers for data room services;
- Any counterparties, interested parties in the context of transactions under company law, and other persons involved (e.g. guarantors, financiers, or affiliated companies);
- industry organizations, associations, organizations, and other bodies and their members;
- our auditors;
- third parties who are also involved in the implementation or organization of events and seminars;
- media and the public, including visitors to websites and social media;
- other persons where the involvement of third parties results from the aforementioned processing purposes. This applies, for example, to delivery recipients or payment recipients specified by you, third parties in the context of agency relationships (e.g. your bank) or persons involved in authorities or legal proceedings.
We may disclose personal data to courts, law enforcement agencies, regulatory and governmental authorities and law enforcement agencies for the purposes set out in this policy and as deemed necessary. We may also be required to disclose your personal data to comply with legal and regulatory requirements.
All these categories of recipients may in turn involve third parties, so that your data may also become accessible to them. We can restrict the processing by certain third parties (e.g. IT providers), but not by other third parties (e.g. authorities, banks, etc.).
Countries to which we transfer your personal data
We may transfer your personal data to recipients abroad, including countries that do not guarantee a level of data protection equivalent to Swiss law. We will normally make such a transfer if this is necessary for the performance of a contract with or in the interest of a data subject, or for its conclusion, or for the assertion, enforcement or defence of legal claims.
If, in exceptional cases, we transfer data to a country without adequate statutory data protection, we ensure an adequate level of protection as required by law by using appropriate contracts (in particular on the basis of the European Commission’s standard contractual clauses, which can be found here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?, including the supplements required for Switzerland) or binding corporate rules. Binding Corporate Rules for an appropriate level of protection or rely on the legal exceptions of consent, contract processing, the establishment, exercise, or enforcement of legal claims, overriding public interests, published personal data or because it is necessary to protect the integrity of the data subjects.
How we store your personal data
We store your personal data for as long as it is necessary for the purpose for which it was collected and as long as we have a legitimate interest in retaining personal data, for example to implement or defend legal claims or for archiving purposes and for IT security. We also store your personal data if and for as long as we are legally obliged to do so.
Your rights
You are entitled to request detailed information about whether we have personal data about you and, if so, what personal data we have, why and how we process it, how long we keep it and, if available, information about its origin. You are also entitled to request a copy of your personal data. You can also have your data corrected or deleted, restrict our processing activities relating to this information and object to the processing of your personal data. You can also decide to withdraw your consent.
Please note that conditions, exceptions, or restrictions may apply to these rights (e.g. to protect third parties, business secrets, to fulfil legal obligations or because we are obliged to retain the data). We reserve the right to redact copies for reasons of data protection or confidentiality or to provide only excerpts. The exercise of your rights may conflict with contractual agreements, and this may have consequences such as premature termination of the contract or cost consequences. We will inform you in advance if this is not already contractually regulated. Please also note that even if you have decided to withdraw your consent or request the deletion of your data, we may continue to process your personal data to the extent required or permitted by law.
You can also lodge a complaint with a local supervisory authority, in Switzerland with the Federal Data Protection and Information Commissioner.