of Schilter Rechtsanwälte GmbH, A. Schilter Rechtsanwälte GmbH and I. Schilter Rechtsanwälte GmbH.
Schilter Rechtsanwälte GmbH, together with its affiliated companies A. Schilter Rechtsanwälte GmbH and I. Schilter Rechtsanwälte GmbH (hereinafter referred to as ‘Schilter Rechtsanwälte’, “we” or ‘us’), is a law firm based in Zug, Canton of Zug. In the course of our business activities, we collect and process personal data, in particular personal data about our clients, affiliated persons, counterparties, courts and authorities, correspondent law firms, professional and other associations, visitors to our website, participants in events, recipients of newsletters and other entities or their respective contact persons and employees (hereinafter also referred to as ‘you’). In this privacy policy, we provide information about this data processing. In addition to this privacy policy, we may inform you separately about the processing of your data (e.g. in forms or contract terms and conditions).
If you disclose data about other persons (e.g. family members, representatives, counterparties or other associated persons) to us, we assume that you are authorised to do so, that this data is correct and that you have ensured that these persons are informed of this disclosure, insofar as a legal obligation to provide information applies (e.g. by bringing this data protection declaration to their attention in advance) .
The following entity is responsible for data protection in relation to the processing described in this privacy policy:
Schilter Rechtsanwälte GmbH
Baarerstrasse 10
6300 Zug
info@schilterlaw.ch
When you use our services, visit www.schilterlaw.ch (hereinafter referred to as the ‘website’) or otherwise interact with us, we collect and process various categories of your personal data. In principle, we may collect and otherwise process this data for the following purposes in particular:
Communication: We process personal data in order to communicate with you as well as with third parties, such as parties to proceedings, courts or authorities, by email, telephone, letter or other means (e.g. to respond to enquiries, in the context of legal advice and representation, and for the initiation or performance of contracts). This also includes sending our clients, contractual partners and other interested persons information about events, changes in legislation, news about our law firm or similar matters. This may take place, for example, in the form of newsletters and other regular contacts (electronically, by post or by telephone). You may object to such communications at any time or refuse or withdraw your consent to such communications. For this purpose, we process in particular the content of the communication, your contact details and the metadata of the communication, as well as image and audio recordings of (video) telephone calls. In the case of audio or video recordings, we will inform you separately, and you are free to let us know if you do not wish to be recorded or to end the communication. If we need or wish to verify your identity, we will collect additional data (e.g. a copy of an identity document).
Initiation and conclusion of contracts: With regard to the conclusion of a contract, in particular a contract establishing a client relationship, with you or your client or employer, which also includes the clarification of any conflicts of interest, we may obtain and process, in particular, your name, contact details, powers of attorney, declarations of consent, information about third parties (e.g. contact persons, information about family members and counterparties), contract content, date of conclusion, creditworthiness data and any other data that you provide to us or that we collect from public sources or third parties (e.g. commercial registers, credit agencies, sanctions lists, media, legal protection insurance companies or the internet).
Administration and performance of contracts: We obtain and process personal data in order to comply with our contractual obligations towards our clients and other contractual partners (e.g. suppliers, service providers, correspondent law firms, project partners) and, in particular, to provide and enforce the agreed contractual services. This also includes the processing of data for the conduct of mandates (e.g. legal advice and representation of our clients before courts and authorities and related correspondence), as well as data processing for the enforcement of contracts (debt collection, court proceedings, etc.), accounting, and public communications (where permitted). For these purposes, we process in particular the data that we have received or collected in the course of initiating, concluding and performing the contract, as well as data that we create in the course of providing our contractual services or that we obtain from public sources or other third parties (e.g. courts, authorities, opposing parties, information services, media, detective agencies or from the internet). Such data may include, in particular, records of conversations and consultations, notes, internal and external correspondence, contractual documents, documents that we prepare and receive in the context of proceedings before courts and authorities (e.g. statements of claim, appeals and complaints, judgments and decisions), background information about you, opposing parties or other persons, as well as other mandate-related information, records of services rendered, invoices, and financial and payment information.
Operation of our website: In order to operate our website securely and reliably, we collect technical data such as the IP address, information about the operating system and settings of your end device, the region, and the time and type of use. In addition, we use cookies and similar technologies.
Improvement of our electronic offerings: In order to continuously improve our website and other electronic offerings, we collect data about your behaviour and preferences, for example by analysing how you navigate our website and how you interact with our social media profiles.
Registration: In order to use certain offers and services (e.g. Wi-Fi, newsletters, encrypted email communication), you must register (either directly with us or via our external login service providers). For this purpose, we process the data disclosed in the course of the respective registration. In addition, we may collect personal data about you during your use of the offer or service; where necessary, we will provide you with further information about the processing of such data.
Security purposes and access controls: We obtain and process personal data in order to ensure and continuously improve the appropriate security of our IT systems and other infrastructure (e.g. buildings). This includes, for example, the monitoring and control of electronic access to our IT systems as well as physical access to our premises, analyses and testing of our IT infrastructures, system and error checks, and the creation of backup copies.
Compliance with laws, directives and recommendations of authorities, and internal regulations (“compliance”): We obtain and process personal data in order to comply with applicable laws (e.g. for the prevention of money laundering, tax law obligations or our professional duties), self-regulatory regimes, certifications, industry standards, our corporate governance, as well as for internal and external investigations in which we are a (procedural) party (e.g. by a law enforcement or supervisory authority or a commissioned private body).
Risk management and corporate governance: We obtain and process personal data in the context of risk management (e.g. to protect against unlawful activities) and corporate governance. This includes, among other things, our operational organisation (e.g. resource planning) and corporate development (e.g. the acquisition and sale of business units or companies).
Job applications: If you apply for a position with us, we obtain and process the relevant data for the purpose of reviewing the application, conducting the application process and, in the case of successful applications, preparing and concluding a corresponding contract. In addition to your contact details and the information from the relevant communications, we process in particular the data contained in your application documents and data that we may additionally obtain about you, for example from professional social networks, the internet, the media and from references, provided you consent to us obtaining references. The processing of data in connection with the employment relationship is the subject of a separate privacy policy.
Further purposes: Further purposes include, for example, training and educational purposes as well as administrative purposes (e.g. accounting). In addition, we may process personal data for the organisation, conduct and follow-up of events, in particular participant lists and the content of presentations and discussions, as well as image and audio recordings created during such events. The safeguarding of other legitimate interests also constitutes further purposes, which cannot be exhaustively listed.
From you: The majority of the data we process is provided to us by you (or by your end device) yourself (e.g. in connection with our services, the use of our website and apps, or communication with us). With exceptions in individual cases (e.g. statutory obligations), you are not obliged to disclose your data. However, if you wish, for example, to enter into contracts with us or make use of our services, you must provide us with certain data. The use of our website is also not possible without data processing.
From third parties: We may also obtain data from publicly accessible sources (e.g. debt enforcement registers, land registers, commercial registers, the media or the internet, including social media) or receive such data from (i) authorities, (ii) your employer or principal, who is either in a business relationship with us or otherwise involved with us, as well as from (iii) other third parties (e.g. clients, opposing parties, insurers, credit reference agencies, address brokers, associations, contractual partners, internet analytics services). This includes, in particular, the data that we process in the course of initiating, concluding and performing contracts, as well as data from correspondence and meetings with third parties, but also all other categories of data.
In connection with the purposes listed above, we disclose your personal data in particular to the categories of recipients listed below. Where required, we will obtain your consent for this or have our professional duty of confidentiality lifted by our supervisory authority.
Affiliated law firms: The affiliated law firms include A. Schilter Rechtsanwälte GmbH and I. Schilter Rechtsanwälte GmbH. This privacy policy applies to them in the same manner.
Service providers: We work with service providers in Switzerland and abroad who process data (i) on our behalf, (ii) jointly with us, or (iii) under their own responsibility, which they receive from us or collect for us. Such service providers include, for example, IT providers, banks, insurance companies, accounting firms, debt collection agencies, other law firms or consulting companies. As a rule, we enter into agreements with these third parties governing the use and protection of personal data.
Clients and other contractual partners: This primarily refers to our clients and other contractual partners where the disclosure of your data arises from the contract (e.g. because you act for a contractual partner or the partner provides services for you). This category of recipients also includes entities with which we cooperate, such as other law firms in Switzerland and abroad or legal expenses insurers. As a rule, the recipients process the data under their own responsibility.
Authorities and courts: We may disclose personal data to offices, courts and other authorities in Switzerland and abroad if this is necessary for the performance of our contractual obligations and, in particular, for the conduct of mandates, or if we are legally obliged or authorised to do so, or if this appears necessary to safeguard our interests. These recipients process the data under their own responsibility.
Opposing parties and involved persons: Where this is necessary for the performance of our contractual obligations, in particular for the conduct of mandates, we also disclose your personal data to opposing parties and other involved persons (e.g. guarantors, financiers, affiliated companies, other law firms, information providers or experts, etc.).bb v v. d ..
Other persons: This refers to other cases in which the involvement of third parties arises from the purposes described above. This includes, for example, delivery recipients or payees designated by you, third parties in the context of representation relationships (e.g. your lawyer or your bank), or persons involved in administrative or court proceedings. We may also disclose your personal data to our supervisory authority, in particular where this is necessary in individual cases to obtain a release from our professional duty of confidentiality. If we cooperate with the media and provide them with material (e.g. photographs), you may also be affected. In the context of corporate development, we may sell or acquire businesses, parts of businesses, assets or companies, or enter into partnerships, which may also result in the disclosure of data (including data relating to you, e.g. as a client or supplier or as their representative) to persons involved in such transactions. Data relating to you may also be exchanged in the context of communications with our competitors, industry organisations, associations and other bodies.
All of these categories of recipients may in turn involve third parties, with the result that your data may also be made accessible to them. We may be able to restrict processing by certain third parties (e.g. IT providers), but not by others (e.g. authorities, banks, etc.).
We also allow certain third parties to collect personal data from you on our website and at our events under their own responsibility (e.g. media photographers, providers of tools that we have integrated into our website, etc.). To the extent that we are not decisively involved in such data collection, these third parties are solely responsible for it. For any enquiries or for the exercise of your data protection rights, please contact these third parties directly.
We process and store personal data mainly in Switzerland and the European Economic Area (EEA). Depending on the circumstances—such as through subcontractors of our service providers or in the context of proceedings before foreign courts or authorities—personal data may, however, potentially be processed in any country worldwide. In the course of our activities for clients, your personal data may also be transferred to any country in the world.
If a recipient is located in a country without an adequate level of data protection, we contractually oblige the recipient to comply with an adequate level of data protection (for this purpose, we use the revised Standard Contractual Clauses of the European Commission, available here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj ?, including the supplements required for Switzerland), unless the recipient is already subject to a legally recognised framework ensuring data protection. We may also disclose personal data to a country without an adequate level of data protection without entering into a separate contract if we can rely on an applicable statutory exception. Such an exception may apply in particular in the context of legal proceedings abroad, but also in cases of overriding public interests, or where the performance of a contract in your interest requires such disclosure (e.g. where we disclose data to our correspondent law firms), where you have consented, or where obtaining your consent within a reasonable time is not possible and the disclosure is necessary to protect your life or physical integrity or that of a third party, or where the data concerned has been made generally accessible by you and you have not objected to its processing. We may also rely on the exception for data from a legally prescribed register (e.g. the commercial register) to which we have been granted lawful access. We may also rely on the exception for data from a legally prescribed register (e.g. the commercial register) to which we have been granted lawful access.
Under applicable law, you have certain rights in connection with our processing of your personal data. In particular, you may request information about the processing of your personal data, have inaccurate personal data corrected, request the deletion of personal data, object to the processing of personal data, and request the release of certain personal data in a commonly used electronic format or their transfer to other controllers.
If you wish to exercise your rights vis-à-vis us, please contact us; our contact details can be found at the beginning of this privacy policy. In order to prevent misuse, we may need to verify your identity (e.g. by requesting a copy of an identity document, if necessary).
Please note that these rights are subject to conditions, exceptions or limitations (e.g. to protect third parties or trade secrets, or due to our professional duty of confidentiality). We reserve the right, for data protection or confidentiality reasons, to redact copies or to provide them only in part.
When you use our website (including newsletters and other digital offerings), data is generated that is stored in logs (in particular technical data). In addition, we may use cookies and similar technologies (e.g. pixel tags or fingerprints) in order to recognise website visitors, analyse their behaviour and identify preferences. A cookie is a small file that is transmitted between the server and your system and enables the recognition of a specific device or browser.
You can configure your browser to automatically reject, accept or delete cookies. You can also disable or delete cookies on a case-by-case basis. Information on how to manage cookies in your browser can be found in your browser’s help menu.
Both the technical data collected by us and cookies generally do not contain personal data. However, personal data that we or third-party providers engaged by us store about you (e.g. if you have a user account with us or with such providers) may be linked to the technical data or to the information stored in and derived from cookies and thus possibly to you as a person.
We also use social media plug-ins, which are small software components that establish a connection between your visit to our website and a third-party provider. The social media plug-in informs the third-party provider that you have visited our website and may transmit to the third-party provider cookies that the provider has previously placed on your web browser. Further information on how these third-party providers use the personal data collected via their social media plug-ins can be found in their respective privacy policies.
In addition, we use our own tools as well as services from third-party providers (which may themselves use cookies) on our website, in particular to improve the functionality or content of our website (e.g. the integration of videos or maps), to compile statistics and to place advertisements.
At present, we may in particular use services offered by the following service providers and advertising partners; their contact details and further information on the respective data processing can be found in their respective privacy policies:
Google Analytics | https://analytics.google.com
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Privacy policy: https://support.google.com/analytics/answer/6004245
Information for Google accounts: https://policies.google.com/technologies/partner-sites?hl=de
Cloudflare Turnstile | https://www.cloudflare.com/
Provider: Cloudflare, Inc., San Francisco, California, USA
Terms of service: https://www.cloudflare.com/website-terms/
Privacy policy: https://www.cloudflare.com/turnstile-privacy-policy/
Google Maps | https://www.google.com/maps
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Terms of service: https://policies.google.com/terms?hl=de
Privacy policy: https://policies.google.com/privacy
Akismet Anti-Spam | https://akismet.com/
Provider: Automattic Inc., USA
Terms of service: https://akismet.com/tos/
Privacy policy: https://automattic.com/privacy/
WP Go Maps – OpenStreetMap | https://www.openstreetmap.org/
Provider: OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, United Kingdom
Privacy policy: https://wiki.osmfoundation.org/wiki/Privacy_Policy
AddToAny Share Buttons | https://www.addtoany.com/
Provider: AddToAny, LLC, USA
Terms of service: https://www.addtoany.com/terms
Privacy policy: https://www.addtoany.com/privacy
Some of the third-party providers we use are located outside Switzerland. Information on the disclosure of data abroad can be found above. From a data protection perspective, they act in some cases “only” as processors on our behalf and in other cases as independent controllers. Further details in this regard can be found in the relevant privacy policies.
We operate pages and other online presences on social networks and other platforms operated by third parties and, in this context, process data relating to you. In doing so, we receive data from you (e.g. when you communicate with us or comment on our content) and from the platforms (e.g. statistics). The platform providers may analyse your use and process these data together with other data they hold about you. They also process these data for their own purposes (e.g. marketing and market research purposes and to operate their platforms) and act as independent controllers for these purposes. Further information on processing by the platform operators can be found in the respective platforms’ privacy policies.
We currently use the following platforms; the identity and contact details of the respective platform operators can be found in their privacy policies:
LinkedIn | [www.linkedin.com](http://www.linkedin.com)
Provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
Privacy policy: [https://de.linkedin.com/legal/privacy-policy](https://de.linkedin.com/legal/privacy-policy)
We are entitled, but not obliged, to review third-party content before or after its publication on our online presences, to delete content without prior notice and, where appropriate, to report it to the operator of the relevant platform.
Some of the platform operators are located outside Switzerland. Information on the disclosure of data abroad can be found above.
We do not assume that the EU General Data Protection Regulation (“GDPR”) is applicable in our case. However, should this exceptionally be the case for certain data processing activities, this section 10 shall additionally apply exclusively for the purposes of the GDPR and the data processing activities subject to it.
We base the processing of your personal data in particular on the fact that
it is necessary, as described in section 3, for the initiation and conclusion of contracts and for their administration and enforcement (Art. 6(1)(b) GDPR);
it is necessary to safeguard legitimate interests of ours or of third parties as described in section 3, in particular for communication with you or third parties, for operating our website, for improving our electronic offerings and for registration for certain offers and services, for security purposes, for compliance with Swiss law and internal regulations, for our risk management and corporate governance, and for further purposes such as training and education, administration, evidence and quality assurance, the organisation, conduct and follow-up of events, and the safeguarding of other legitimate interests (cf. section 3 above; Art. 6(1)(f) GDPR);
it is required or permitted by law under our mandate or our position pursuant to the law of the EEA or of a Member State (Art. 6(1)(c) GDPR), or is necessary to protect your vital interests or those of other natural persons (Art. 6(1)(d) GDPR);
you have given separate consent to the processing, by means of a corresponding declaration on our website (Art. 6(1)(a) and Art. 9(2)(a) GDPR).
We would like to inform you that, as a rule, we process your data for as long as required by our processing purposes (cf. section 3), the statutory retention periods and our legitimate interests, in particular for documentation and evidentiary purposes, or for as long as storage is technically required (e.g. in the case of backups or document management systems). If there are no legal or contractual obligations or technical reasons to the contrary, we generally delete or anonymise your data after the expiry of the storage or processing period in the course of our usual procedures and in accordance with our retention policy.
If you do not provide certain personal data, this may result in our being unable to provide the related services or to conclude a contract. As a rule, we indicate where personal data requested by us is mandatory.
The right set out in section 7 to object to the processing of your data applies in particular to data processing for the purposes of direct marketing.
If you do not agree with how we handle your rights or with data protection matters, please let us know (see the contact details in section 2). If you are located in the EEA, you also have the right to lodge a complaint with the data protection supervisory authority in your country. A list of the authorities in the EEA can be found here: [https://edpb.europa.eu/about-edpb/board/members_de](https://edpb.europa.eu/about-edpb/board/members_de).
Schilter Rechtsanwälte GmbH, Stand: 25.01.2026