Skip to content

Data protection law

We have been advising our clients on data protection issues for many years. From simple data protection declarations to complex expert opinions, from the examination of order processing agreements to representation in data protection disputes, we offer our services to clients from all sectors.

We can help with
  • Digital business models

    With our legal expertise we provide support for companies and their digitisation plans from the basic concept to going live.

    It may be necessary in the case of critical business processes to examine compliance with data protection laws by providing an expert opinion. Our evaluations always conclude with a clear result and a practical recommendation for action. If necessary, we also accompany the preparation of data protection impact assessments.

  • Data protection for transactions

    Whether asset deal or share deal, we advise companies on the legally secure transfer of customer data in connection with corporate transactions. The question of the permissibility of access to personal data by the potential acquirer regularly arises as early as the due diligence stage. We also provide advice to insolvency administrators on the realisation of assets involving personal data.

  • Consent declarations and data protection declarations

    We prepare all necessary legal texts: Data protection information for websites and apps, advertising consent, declarations of consent or social media guidelines. This also includes the actual textual design of potentially annoying cookie banners and the integration of content management tools.

  • Data protection projects

    In the course of implementing the GDPR, we have supported data protection projects in many companies, primarily larger ones. We help you to make your company or individual areas compliant with the GDPR. In most cases, this now involves a re-evaluation of the list of processing activities or data protection management systems that have been introduced.

  • Order processing contracts and joint control agreements

    When working with service providers and cooperation partners, the question of the legal basis for data protection always arises. We examine whether this is the case from a data protection perspective (Art. 28 GDPR, Art. 26 GDPR or controller-to-controller) and draw up the necessary legal texts.

  • Examination of suspected cases according to Art. 33, 34 GDPR

    Over the past 2 years, we have investigated more than 2,000 cases of possible data protection breaches to determine whether the incident should be reported to the relevant data protection authority. In many cases, the result is that notification is not required because there is no likely risk to the data subjects. You will usually receive documentation of the incident and a clear recommendation on the obligation to report it, together with information on legally required immediate measures, on the same day.

  • Employee data protection

    We advise companies on all legal issues concerning the contemporary workplace. Our HR-IT team will assist you in all questions of employee data protection. From the digitalisation of the application procedure to the digital personnel file for home office and mobile working to the use of digital control and monitoring measures – we will put the digitalisation of your personnel department and employee management on a secure footing in terms of data protection and employment law.

  • Dispute with data protection authorities

    We have been representing clients in proceedings against German data protection authorities long before the GDPR came into force. However, the number and importance of these proceedings has increased significantly in recent years. Our data protection litigation team handles many challenging proceedings for companies against data protection authorities. While there are potentially large GDPR fines in some cases, there are sometimes (seemingly) minor issues that need to be resolved.

  • Data protection officer...

    …this is not us. We are not offering to provide an external data protection officer because we consider ourselves precluded from doing so by our professional regulations. As lawyers, we cannot advise you on data protection issues and at the same time perform the functions of the monitoring data protection officer. However, we work together with specialised data protection officers, in whose services we have great confidence. Please do not hesitate to contact us in this regard.

Current projects
Long-term data protection project management for a major bank

On behalf of a German automotive bank, we are constantly reviewing incoming cases of potentially reportable protection violations under Art. 33 and 34 DSGVO. We have advised the client for years on various internal data protection projects and their digital business models. Several of our colleagues have been working directly within the client’s systems.

Formulation of a new declaration of consent for an insurance group

On several occasions in the past, we have been involved in the process of obtaining a new advertising permit where the GDPR and UWG intersect. This always involves striking a balance between the greatest possible degree of authorisation to advertise potential customers on the various channels and the effectiveness of the consent. Very often we are also responsible for recording the consent and implementing any objections to advertising. We are currently working together with in-house colleagues from a large international insurance group on the fundamental redesign of the group-wide advertising consent.

Data protection due diligence for mobility companies

Commissioned by a potential investor, we are currently examining the data protection documentation and records of a mobility provider for obvious risks to the company.

Previous slide
/
Next slide
Team
Die neusten Insights
More transparency for communication platforms: An overview of the new Swiss Platform Act

10. November 2025
by Nicole Beranek Zanon & Corinna Stubenvoll

With the recently launched legislative process, the Federal Council wants to oblige large online platforms and search engines such as Google, Facebook, TikTok, and X to ensure greater fairness, transparency, and user rights. Users are to be better protected in the future—from reporting and complaint procedures to clear information requirements and greater data and advertising transparency. This is a historic step toward regulating digital infrastructure in Switzerland.

New Swiss FDPIC guidelines on cookies – it’s no longer possible without banners!

10. October 2025
by Nicole Beranek Zanon

Cookies make surfing the web easier, save settings and enable targeted advertising. At the same time, they raise significant data protection issues. In his latest guidelines, the Federal Data Protection and Information Commissioner (FDPIC) has specified the requirements that companies and website operators must observe when using cookies in Switzerland. The main focus is on consent requirements, tracking and the processing principles of the Data Protection Act (DPA). Which cookies are still permitted, when explicit consent is required and what requirements are placed on consent banners - we clarify the most important questions.

New Swiss Federal Data Protection and Information Commissioner (FDPIC) information sheet: What medical practices must now consider when it comes to patient forms

10. October 2025
by Nicole Beranek Zanon

The FDPIC has published a leaflet that sheds light on the often unclear handling of patient forms in terms of data protection law – from the duty to provide information and secure data communication to proportionate data collection. We show what doctors, therapists and associations should now specifically check and implement.

Accessible websites and apps: New obligations under the draft of the new Swiss Disability Discrimination Act (BehiG)

3. October 2025
by Nicole Beranek Zanon

Private website and app providers are facing a paradigm shift: with the partial revision of the Disability Discrimination Act (DDA), digital accessibility is also coming into focus as a legal obligation. Those who fail to make their online offerings accessible today risk legal disputes in the future. This article shows what companies can expect, what requirements apply, and how to systematically implement them in web and app projects.

EU Regulator Advisor – Guidance through the EU legal jungle for Swiss companies

2. October 2025
by Nicole Beranek Zanon

Access to the EU single market opens up great opportunities for Swiss companies, but it also brings with it a multitude of regulatory requirements. Whether it's product safety, CE marking, data protection (GDPR), artificial intelligence (AI), sustainability reports (ESG) or industry-specific guidelines: anyone who wants to operate in the EU needs to know which regulations apply.

Prenuptial agreements for matrimonial property regimes, community of property and separation of property explained briefly

12. September 2025
by Nicole Beranek Zanon

A prenuptial agreement is much more than a legal precautionary document – it is a key instrument for securing assets, especially for entrepreneurs, heirs and wealthy individuals. The statutory matrimonial property regime of participation in acquired property may often suffice, but it quickly reveals its limitations in the event of separation or divorce. Economic interests, family obligations and emotional tensions can then easily come into conflict.

Härting
Data protection in pension funds: legal requirements and practical implementation

31. July 2025
by Nicole Beranek Zanon

Although many pension funds have implemented initial measures, key obligations such as procedure directories divided into procedures in accordance with the BVG obligation and private insurance, processing directories, data protection impact assessments and clear responsibilities are still incomplete in some cases. The EDÖB is increasing its vigilance in view of new risks. Read here to find out what needs to be done and how you can ensure legal compliance.

Alle Insights zum Datenschutzrecht
Mehr über uns
Expertise
Data compliance

The GDPR stipulates serious fines for non-compliance with data protection regulations. We provide support in the establishment of a data protection structure and the many data protection issues that arise in practice.

Learn more
Expertise
Employee data protection

We advise companies on all legal issues relating to contemporary working life. From the digitalisation of the application procedure and the maintenance of a digital personnel file to home office and mobile working to the use of digital management and control measures - we will put the digitalisation of your personnel department and employee management on a secure footing in terms of data protection and employment law.

Learn more