Privacy Policy

Introduction

This privacy policy of Koller Law Ltd (“Koller Law") explains how Koller Law processes personal data within the scope of its business activities and your rights in relation to personal data.
Please read this privacy policy carefully. Your acceptance of the privacy policy is deemed to occur upon your first use of the website of Koller Law ("Website").
If you provide Koller Law with personal data of other persons, please make sure that you are allowed to share this personal data and that this personal data is correct.

Controller

Koller Law AG, Münsterhof 14, CH-8001 Zurich, is responsible for processing personal data in accordance with this privacy policy. The contact person responsible for data protection at Koller Law can be reached at the above postal address with the reference “Data Protection,” by email at info@koller.law, or by phone at +41 43 544 78 00.

Definitions

Personal data is all information relating to a specific or identifiable (i.e. identified or identifiable) person, such as name, mailing address, telephone number, e-mail address, date of birth, etc.
Processing means any operation with personal data, in particular the collection, storage, use, revision, disclosure, archiving or destruction of data.

Purposes of processing

Koller Law processes the following personal data for the following purposes:

Optimization of our website and personalization of our offering

Type of personal data: IP address (see below section on Google Analytics).

Purpose of use: See below (‘Visiting our Website’)

Marketing

Type of personal data: First name; last name; gender; address; telephone numbers; email address.

Purpose of use: Marketing and direct marketing purposes to inform you about publications, events, news (legal or non-legal), services, and/or offers from Koller Law or third parties that may be of interest to you.

Fulfillment of contracts with clients

Type of personal data: First name; last name; gender; address; telephone numbers; email address; any other data that is transmitted to Koller Law in the course of the contractual relationship or pre-contractual relationship or in the processing of which Koller Law has a legitimate interest.

Purpose of use: Establishment or execution of the respective contractual relationship (e.g., regarding legal advice).

Fulfillment of contracts with business partners

Type of personal data: First name; last name; gender; address; telephone numbers; email address; account numbers; any other data whose processing is necessary in the context of a project or the execution of a contractual relationship with Koller Law or which is provided or made available to Koller Law by business partners, e.g., in the context of inquiries made, the discussion and review of project details; any other relevant data that is transmitted to Koller Law in the course of the contractual relationship or pre-contractual relationship or in the processing of which Koller Law has a legitimate interest.

Purpose of use: Planning, implementation, and management of the (contractual) business relationship between Koller Law and the business partner.

Recruitment

Type of personal data: First name; last name; gender; address; telephone numbers; email address; social security number; information from the CV; qualifications; payroll account number; criminal record and debt collection register extract; any other relevant data that is transmitted to Koller Law in the course of the employment relationship or to which Koller Law has a legitimate interest in processing.

Purpose of use: Conducting the application process; conducting pre-contractual relations (e.g., negotiating employment contracts); conducting the employment relationship; fulfilling employer obligations (e.g., paying wages); fulfilling legal obligations (e.g., settling accounts with social security authorities, issuing employment references).

Legal basis for the processing of your personal data and your rights

If required by applicable data protection regulations, we will ask for your consent to the processing of your personal data, which will then form the legal basis for the processing. However, you hereby acknowledge that, depending on the circumstances and the applicable data protection law, the legal basis for processing may also lie in the performance of the contract, the implementation of contractual or pre-contractual measures, or the protection of legitimate interests, provided that the applicable data protection provisions require such a legal basis in the first place. You may revoke any consent at any time without affecting the lawfulness of the processing that has taken place on the basis of the consent given until revocation. In addition, depending on the circumstances and the applicable data protection law, you have, in particular,

• the right to disclosure of or access to the personal data concerned;

• the right to correct, delete, or restrict the processing of personal data;

• the right to object to the processing;

• the right to file an appeal with a competent supervisory authority; and

• the right to data transfer/portability (i.e., disclosure of personal data in a commonly used electronic format).

The above rights do not affect personal data that is processed for you as part of an ongoing contractual relationship or service provision, or that we are required or permitted to retain for legal reasons. To withdraw your consent or exercise your other data protection rights, or if you have any further questions, suggestions, or comments on the subject of data protection, please contact the person responsible for data protection using the contact details provided at the beginning of this document (see Introduction).

Visiting our Website

During your visit on the Website, general information is automatically recorded (e.g. date of your visit, type of web browser, your IP address, the operating system used and the domain name of your internet service provider). Koller Law uses this data for administration purposes and to ensure the functionality of the Website. This data is required in order to correctly deliver and optimize the contents of the Website, to guarantee the long-term operability of our IT systems and of the Website and to provide law enforcement authorities with the information they need for criminal prosecution in the event of a cyber-attack. However, none of this information allows Koller Law to draw any conclusions about your personal identity.

Cookies

Cookies are small text files which are automatically stored on the hard drive of your computer when visiting the Website. They do neither cause any damage nor transmit personal data.
You can change your browser settings to block cookies, only save cookies for one session or otherwise delete them prematurely. Most browsers are preset to accept cookies. However, you can prevent cookies from being saved on your computer's hard drive by changing your browser settings. In addition, you can delete cookies already set on your hard disk at any time. Please note that if you decide to disable cookies, certain functions may no longer work.

Types of cookies

Mandatory and non mandatory cookies
Mandatory cookies are information sent to the browser on your computer's hard drive allowing Koller Law to offer you certain functions. They do not require the consent of the users of the Website. Non mandatory cookies enhance the user-friendliness of the Website. Koller Law uses the following mandatory, temporary cookies: webserver, storage of user data during a session, duration of a session.

Temporary cookies
Temporary cookies store information that is used by you as a visitor during your current browser session. You are assigned a session-ID so that you can navigate between the different pages of the Website of Koller Law without interruption. Based on the session ID, it is not possible to identify you as a person. These cookies do not leave any retrievable information on the hard drive of your computer. Once the browser is closed, these cookies are automatically deleted.

Permanent cookies
Permanent cookies store information between two visits of the Website. Due to these cookies, visitor patterns can be recognized over a longer period of time and evaluated on a regular basis. Depending on their function, these cookies are stored on the hard drive of a computer between few minutes up to several years. With these cookies, you can, for example, access information on the Website that is specifically tailored to your interests. Koller Law itself does not use permanent cookies. Cookies from third parties remain reserved (see below).

Third party cookies
Koller Law also cooperates with Google Analytics, a web analytics service provided by Google LLC (USA) and Google Ireland Limited (Ireland), especially in the fields of web analysis and advertising. Google Analytics also uses cookies. By saving data in its cookies, Google Analytics can determine which pages were viewed by users in order to display appropriate advertisements. The cookies from Google Analytics do not save any personal data. Further information on Google Analytics and data protection can be found via the following link: https://support.google.com/analytics/answer/6004245?hl=en

Newsletter

You may be able to subscribe to our company's newsletter using a form or by email. We will use dedicated software to send the newsletter, which ensures compliance with data protection regulations.

You can unsubscribe from newsletters at any time. Each newsletter contains a corresponding unsubscribe link. If this link is missing or does not work, please contact our data protection officer (see section A). Our newsletter may contain a tracking pixel. A tracking pixel is a miniature graphic that is embedded in such emails to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns. The analysis can be carried out anonymously or with reference to personal data.

Storage

To the extent required by applicable data protection laws, your personal data will be deleted with respect to the purpose of processing for which they were collected as soon as they are not required anymore to meet such purpose of processing. The storage of your personal data in accordance with the legal storage and documentation obligations remains reserved.

Data transfers to third parties and abroad

Koller Law will not pass on your personal data to third parties unless

• it is expressly stated otherwise in this privacy policy;

• it is necessary to protect your interests;

• it is necessary to maintain or uphold your business relationship with Koller Law; or

• you have given your prior consent.

In addition, Koller Law appoints processors for hosting, maintenance, administration, storage, and other services (such as backup, cloud storage, CRM tools, media agency services, other IT services, HR services, marketing agency services, email marketing services, financial services such as accounting and fiduciary services) that process personal data to the extent necessary to fulfill the above or similar purposes. In this respect, some of your personal data may be stored outside of Switzerland and the European Union. If Koller Law does store data outside Switzerland or the European Union, Koller Law will take all reasonable steps required by applicable data protection laws to ensure that your personal data is treated as safely and securely.

Security and liability

Koller Law protects personal data against loss, misuse, unauthorized access, disclosure, modification or destruction by taking appropriate measures. For this purpose, Koller Law uses appropriate technical and organizational security measures, which are continuously improved in line with technological developments. However, Koller Law cannot guarantee the absolute security of the data it processes.

Final provisions

Koller Law reserves the right to amend the content of this privacy policy at any time without prior notification. Thus, it is recommended that this privacy policy is consulted on a regular basis.
Subject to potential mandatory applicable foreign data protection laws, this privacy policy shall be governed by, and construed and enforced in accordance with, the laws of Switzerland, excluding its conflicts of law provisions. Subject to potential (additional) foreign places of jurisdiction which apply by mandatory foreign law, the exclusive place of jurisdiction shall be Zurich 1, Switzerland.

Koller Law Ltd
August 2025