Privacy Policy

1. Controller

KOSEN Partners AG, Poststrasse 24, 6300 Zug, Switzerland · UID: CH-170.3.051.646-0 · mail@kosen.ch

2. Scope

This policy explains how we process personal data when you visit our website or interact with us. It applies to our online services and advisory work. We comply with the Swiss Data Protection Act (DPA 2023) and — where applicable — the EU General Data Protection Regulation (GDPR).

3. Data We Process

  • Data you provide (e.g., name, company, email, phone, message content).
  • Technical data (e.g., IP address, date/time, pages viewed, cookies, log files).
  • Project/engagement data (only within legal limits and contractual purpose).

4. Purposes & Legal Bases

  • Communication and handling of enquiries (legitimate interests; contractual necessity).
  • Provision, security and optimization of the website (legitimate interests).
  • Fulfilment of legal obligations (legal basis: law).
  • With consent: analytics cookies or specific processing (revocable at any time).

5. Disclosure to Third Parties

We may share data with IT/hosting providers, analytics providers (if consented), external advisors or law firms within projects, and authorities/courts where legally required. Processor agreements are concluded where necessary.

6. International Transfers

Transfers outside Switzerland/EU/EEA occur only with adequate protection (e.g., adequacy decision, Standard Contractual Clauses) or with explicit consent. (If Art. 27 GDPR requires an EU representative, details will be provided on request.)

7. Cookies & Analytics

We use necessary cookies for site operation. Analytics cookies (e.g., Google Analytics) are used only with your prior consent via the cookie banner. You can withdraw consent at any time and delete/block cookies in your browser. A persistent Cookie Settings link is available in the footer.

8. Retention

We retain personal data only as long as necessary for the purposes described or as required by law (e.g., commercial/tax retention; typically up to 10 years for project records).

9. Your Rights

Subject to applicable law, you have rights to access, rectification, deletion, restriction, objection, portability (where applicable), and to lodge a complaint with a supervisory authority (e.g., FDPIC in Switzerland; for EU residents, your local authority).

10. Security

We use appropriate technical and organisational measures (TLS encryption, access controls, secure hosting in Switzerland/EU) to protect personal data.

11. No Automated Decision-Making

We do not conduct automated individual decision-making producing legal effects.

12. Updates

We may update this policy. The version published on our website is authoritative. Last updated: September 2025.