Privacy Policy

The protection of your personal data is important to us. SteuriFisch AG processes your data in accordance with the Swiss Data Protection Act (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR). Below we inform you about the processing of your data in connection with the use of our website.

Controller

SteuriFisch AG
Zürcherstrasse 19 (Villa India)
9500 Wil SG, Switzerland
info@steurifisch.ch
+41 71 511 45 05

Collection and Processing of Personal Data

You provide us with data when you contact us, engage us or apply for a position. This includes in particular:

First and last name
E-mail address
Phone number
Your matter / message content, preferred time slot for a call back

Independently of this, technical data arises from operating the website (IP address, date and time of access, page requested, browser and operating system). It serves secure operation and troubleshooting.

Contact Form

Enquiries submitted through the contact form are transmitted in encrypted form and delivered to the firm by e-mail. As a fallback we additionally store enquiries on the server for a short period so that none is lost, and we keep an anonymous counter of enquiries received. This storage is blocked from outside access and cleared regularly. If your enquiry leads to a mandate, the information becomes part of the case file.

Retention

Enquiries that do not lead to a mandate are kept for as long as necessary to answer them and handle follow-up questions, as a rule no longer than twelve months. Case files are subject to professional and supervisory retention duties and to Art. 958f of the Swiss Code of Obligations, and are destroyed once those periods expire. Job applications are deleted no later than six months after the process concludes, unless you agree to longer retention. Server logs are deleted after a short period.

Attorney-Client Privilege

Everything you entrust to us is covered by attorney-client privilege from the first contact (Art. 321 Swiss Criminal Code, Art. 13 BGFA) — even if no mandate comes about. Professional secrecy may limit your right of access and the rights of third parties (Art. 26 para. 1 lit. b and para. 2 lit. b FADP); we will always give reasons for any such limitation.

Purpose of Processing

Your data is used exclusively for the following purposes:

Processing your enquiries and managing mandates
Communicating with you
Improving and ensuring the operation of our website
Fulfilling legal obligations

Legal Basis

Swiss data protection law requires no specific legal basis for private controllers: processing is permitted as long as it does not unlawfully infringe the personality of the data subject (Art. 30 f. FADP). We process your data to initiate and conduct the mandate, to comply with statutory duties and on the basis of our legitimate interest in the secure operation of the website. Where the GDPR applies, we rely on Art. 6(1)(b), (c) and (f) GDPR or on your consent.

Cookies and Local Storage

This website sets no cookies. Your browser's local storage holds your choice of appearance (key “sf-theme” with the value “light” or “dark”). This entry never leaves your device, is not evaluated by us and allows no conclusions about you as a person. If you make no choice, the display follows your system setting; clearing the site data in your browser removes the entry.

If you use the maintenance calculator (German only, /de/themen/unterhalt-berechnen), your entries are likewise kept only in your browser's local storage (keys starting with “uhr.”) so they are still there on your next visit. The calculation runs entirely in your browser; your entries are not transmitted to us or to third parties. Use “Leeren” in the calculator or clear the site data in your browser to remove them.

If you reach our website via an advertisement or a link carrying a campaign identifier, your browser keeps that identifier and the referring website for as long as the tab is open (session storage, key “sf-herkunft”). It is transmitted to us only if you submit an enquiry form and serves solely to assess our advertising. Closing the tab deletes the entry.

Access Statistics

We keep our own server-side access statistics, without third-party analytics services and without scripts in your browser. For each page view we store the date and time, the page requested, the language, the referring website or campaign identifier, and a check value that counts requests from the same device on the same day only once. This check value is derived from the IP address and browser identification using a random value that changes daily and is deleted after two days; from then on, not even we can link it to an address. The IP address itself is not stored. Your browser's “Do Not Track” setting is respected. The data remains on our server in Switzerland and is used exclusively to assess the use of our website and the effectiveness of our advertising.

Recipients and Processors

Your data is disclosed only where this is necessary to conduct your mandate, where you have consented or where a legal obligation applies. Recipients are in particular:

courts, authorities, opposing parties and their representatives — within the mandate you have given us;
our hosting provider Metanet AG, Zurich (servers in Switzerland);
IT and software providers supporting the operation of our systems;
Stripe for payment processing where you pay for a service online — a data processing agreement is in place with Stripe (see "Disclosure Abroad");
experts, translation services or correspondent lawyers, where you agree to their involvement.

Processors are contractually bound to confidentiality and data security (Art. 9 FADP).

Transparency Register Service

If you use our service for reporting beneficial owners, a personal area is created under an address that cannot be guessed. In addition to the details from your enquiry, we process there:

details of the company (name, UID, legal form, registered office);
details of the beneficial owners under Art. 9 of the Transparency Act: name, date of birth, nationality, municipality and country of residence, and the nature and extent of control;
documents you upload, in particular copies of identity documents, the share register and further supporting records;
the processing history and the status of the filing.

This data is held on the same Swiss server as the rest of the website. The database lies outside the area reachable from the internet; uploaded files are stored encrypted and released only after you have signed in through the website. Access to your personal area is additionally secured by a code we send to the e-mail address given in your enquiry.

Recipients in this process are:

the federal transparency register or the cantonal commercial register office — to which we file the legally required details on your behalf;
EasyGov.swiss (State Secretariat for Economic Affairs SECO) for the authorisation to act in your name;
Stripe for payment, if you pay online — see the next section. Stripe receives the amount, currency, your e-mail address, the company name and an identifier for your file, but not the details of the beneficial owners or your documents;
our own mail server in France for the messages in this process (acknowledgement of receipt, access code, status updates) — see the next section.

The filing itself is not a publication: the transparency register is not open to public inspection; only the bodies named in the Act have access.

Disclosure Abroad

We process your data in Switzerland as a matter of principle. Disclosure abroad occurs in the following cases:

Payment processing: if you pay online, the payment is handled by Stripe Payments Europe Ltd., Dublin (Ireland); depending on the payment method, data may reach affiliated companies in the United States. Ireland is on the Federal Council's list of states with adequate data protection (Art. 16 para. 1 FADP); for the United States we rely on the standard contractual clauses as an appropriate safeguard (Art. 16 para. 2 FADP). You enter the payment details directly with Stripe; we never see card numbers.
E-mail for the transparency register service: we send and receive the messages of this process via our own mail server in France. France is on the Federal Council's list of states with adequate data protection (Annex 1 to the Data Protection Ordinance), so the disclosure rests on Art. 16 para. 1 FADP. This concerns the contents of those messages — your address, the company and the status of processing; your documents and the details of the beneficial owners are not sent by e-mail and remain in your personal area on the Swiss server.
Conduct of your mandate: where your mandate requires it — for instance in proceedings, or with an opposing party or authority abroad — we disclose the data needed for that purpose to the state concerned. We rely on an adequacy decision of the Federal Council (Art. 16 para. 1 FADP), on appropriate safeguards such as the standard contractual clauses (Art. 16 para. 2 FADP) or on an exception under Art. 17 FADP, in particular necessity for establishing or exercising your legal claims. Which state is involved follows from your case; we name it to you within the mandate before we disclose the data.

A current list of the states involved and the safeguards in place is available at any time from info@steurifisch.ch.

Data Security

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, misuse or destruction. Data transmission on our website is encrypted via HTTPS.

Your Rights

You have the right to information about your data stored by us, as well as the right to rectification, deletion or restriction of processing. You may also object to data processing and have a right to data portability. To exercise your rights, please contact: info@steurifisch.ch.

Supervisory Authority

The competent supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, www.edoeb.admin.ch.

Applicable Law and Jurisdiction

Swiss law applies. Unless mandatory places of jurisdiction provide otherwise, the place of jurisdiction is Wil SG.

Amendments

We reserve the right to amend this privacy policy at any time. The current version is available on our website.

Version: September 2026