Privacy Policy

1. Data Controller

Responsible for the processing of personal data within the meaning of the Swiss Federal Act on Data Protection (FADP) and, where applicable, the EU General Data Protection Regulation (GDPR), is:

FJHERMANN CONSULTING, Frank Hermann, Turbinenstrasse 60, 8005 Zurich, Switzerland. Email: info@fjhermannconsulting.ch

2. Scope and Principles

This Privacy Policy applies to the website www.fjhermannconsulting.ch as well as to related inquiries, communications and business contacts with FJHERMANN CONSULTING.

We process personal data carefully, for specified purposes, proportionately, and in accordance with applicable data protection law, in particular the Swiss FADP and, where applicable, the GDPR.

3. Categories of Personal Data

Depending on the occasion and purpose, we process, in particular, the following categories of personal data:

• Master data — e.g., name, first name, company, role, business address, language, country
• Contact data — e.g., email address, phone number, other communication details
• Communication data — e.g., content of emails, contact inquiries, meeting notes, correspondence, appointment scheduling
• Mandate and project data — e.g., project-related information, briefings, documents, feedback, work products, approvals, business correspondence
• Technical usage data — e.g., IP address, date and time of access, browser type, operating system, referrer, pages visited
• Billing and contract data — e.g., proposals, contract content, invoice data, payment information, proof of services
• Other data you voluntarily provide to us, or that become necessary in the course of a business relationship

As a general rule, we do not process special categories of personal data, unless disclosed by you in an individual case, required for mandate processing, or based on a legal basis or consent.

4. Purposes of Processing

Processing of personal data occurs, in particular, for the following purposes:

• Provision, operation and security of the website
• Handling inquiries and contact requests
• Preparation, conclusion, performance and documentation of mandates
• Communication with prospects, clients, business partners and service providers
• Organization of meetings, video conferences and appointments
• Invoicing, administration and compliance with legal obligations
• Safeguarding legitimate interests in a professional, secure and efficient business operation

5. Hosting and Server Log Files

This website is hosted by Kreativmedia. When the website is accessed, the hosting provider automatically collects technical information in so-called server log files, including in particular: IP address, date and time of access, pages/content accessed, browser type and version, operating system, and referrer URL, if transmitted.

This data is processed exclusively for the purpose of technical provision, stability, security and abuse prevention, and is not combined with other data sources.

To the extent the hosting provider processes personal data on our behalf, this is done on the basis of a contractual data processing arrangement or another data-protection-compliant contractual arrangement.

Server log files are retained only as long as necessary for the stated purposes; as of today, this is generally within approximately 7 to 30 days.

6. Cookies and Similar Technologies

As of the date of this Privacy Policy, this website does not use any cookies that are not technically required, and no analytics, tracking or marketing services such as Google Analytics, Meta Pixel or comparable technologies.

Should this change in the future, we will update this Privacy Policy accordingly and, where legally required, obtain your consent in advance.

7. Contacting Us via the Website

The website does not contain any form fields for data entry. Contact options are provided exclusively via direct email and phone links (e.g. "Request a Consultation"). Clicking such a link opens your own email program or phone app; FJHERMANN CONSULTING receives no data whatsoever until you actively compose and send an email, or call us.

Data transmitted this way (e.g. name, email address, content of your message) is processed exclusively to handle your inquiry, to contact you, and, where applicable, to prepare or carry out a business relationship.

Should a contact form be introduced on the website in the future, this Privacy Policy will be updated in advance accordingly, and the data fields collected will be specifically named here.

8. Communication by Email, Phone and in the Course of Mandates

If you contact us by email, phone or otherwise, we process the related personal data to the extent necessary to handle your request, communicate with you, or carry out a mandate.

In the course of mandates, we may also process personal data of contact persons, employees or other contacts of our clients, to the extent necessary for the provision of services. We treat such data confidentially and only within the scope of the respective mandate and the applicable contractual and legal requirements.

Please note that transmitting information via ordinary email may involve security vulnerabilities. If you wish to transmit particularly confidential or sensitive information, we recommend agreeing with us in advance on a suitable, secure transmission channel.

9. Video Conferences and Online Meetings

For meetings, project coordination, workshops or advisory discussions, we may use video conferencing or online meeting services.

This may involve processing, in particular: name and contact details of participants; appointment and meta data of the session; communication content, to the extent disclosed in the conversation; chat content, shared files or screen sharing; and technical connection data.

Processing occurs for the purpose of conducting meetings, mandate handling, collaboration with clients and business partners, and efficient communication.

If external meeting service providers are used, they receive personal data only to the extent necessary for technical execution. Recordings of video conferences are only made after prior notice and, where required, with the consent of the individuals concerned.

10. Recipients and Categories of Recipients

We only disclose personal data to the extent necessary for the stated purposes, a legal obligation exists, you have consented, or an overriding legitimate interest exists.

Recipients may include, in particular: hosting and IT service providers; email and communication service providers; video conferencing and collaboration service providers; fiduciary, accounting and payment service providers; professional advisors such as lawyers or tax advisors; authorities, courts or other public bodies, to the extent a legal obligation or legitimate reason exists; and engaged technical or subject-matter third parties, to the extent necessary for service provision and contractually secured.

Engaged third parties only receive access to personal data to the extent necessary for their tasks.

11. Data Processing in Switzerland and Abroad

Personal data is generally processed in Switzerland or the EEA. To the extent we engage service providers who process, or can access, data outside Switzerland or the EEA, we ensure that this only occurs within the framework of legal requirements.

Where disclosure occurs to a state without an adequate level of data protection, we ensure, where necessary, an adequate level of data protection through suitable contractual guarantees or other legally provided safeguards.

12. Legal Bases under the GDPR (where applicable)

To the extent the GDPR applies, we base the processing of personal data, in particular, on the following legal grounds:

• Art. 6(1)(b) GDPR — for taking pre-contractual steps and performing a contract
• Art. 6(1)(f) GDPR — for safeguarding legitimate interests, in particular in a secure website, professional communication and efficient mandate handling
• Art. 6(1)(c) GDPR — for compliance with legal obligations
• Art. 6(1)(a) GDPR — where consent is required

13. Data Security

We take appropriate technical and organizational measures to protect personal data against loss, unauthorized access, misuse, alteration or unlawful disclosure.

Despite all due care, data transmission over the internet may involve security vulnerabilities. Absolute protection cannot therefore be guaranteed.

14. Retention Period

We process and store personal data only as long as necessary for the respective purpose or as required by statutory retention obligations.

In particular, the following may apply: inquiries and general correspondence — as long as necessary for handling and follow-up; mandate-related documents — as long as necessary for performance, documentation and completion of the mandate; billing, contract and accounting records — within the framework of statutory retention obligations, generally up to 10 years; technical log data — generally only as long as necessary for operation, security and error analysis.

Thereafter, personal data is deleted or anonymized, unless further legal or factual necessity exists.

15. Your Rights

To the extent provided by applicable data protection law, you have, in particular, the right to: request information about the personal data processed; have inaccurate personal data corrected; request deletion of personal data; request restriction of processing; object to processing; withdraw consent given, with effect for the future; and request data portability, where applicable.

To exercise your rights, a notice to the contact address given above is sufficient.

You also have the right to lodge a complaint with a competent supervisory authority, in Switzerland in particular the Federal Data Protection and Information Commissioner (FDPIC).

16. No Automated Individual Decision-Making

As of today, we do not make any automated individual decisions within the meaning of applicable data protection law that produce legal effects concerning data subjects or similarly significantly affect them.

17. Changes to this Privacy Policy

We may amend this Privacy Policy at any time, in particular if our website, our services, the technologies used, or the legal situation change.

The version published on our website at the relevant time shall apply.

18. Contact

For questions regarding data protection, please contact:

FJHERMANN CONSULTING, Frank Hermann, Turbinenstrasse 60, 8005 Zurich, Switzerland. Email: info@fjhermannconsulting.ch