Swiss FADP & GDPR Compliance

Startup Law Go complies with both the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR). We are committed to processing your personal data securely and transparently, and to upholding your rights at all times.

1. Legal Basis for Processing

We process personal data only on the following legal grounds:

• Consent (Art. 6(1)(a) GDPR / FADP) – e.g. newsletter sign-ups, marketing.
• Contract Performance (Art. 6(1)(b) GDPR / FADP) – e.g. consulting engagements.
• Legal Obligation (Art. 6(1)(c) GDPR / FADP) – e.g. accounting records.
• Legitimate Interests (Art. 6(1)(f) GDPR / FADP) – e.g. internal analytics, service improvements.

2. Transparency & Information Duties

When we collect data, we inform you clearly about the purpose, categories, and recipients. See our Privacy Policy and form notices (e.g. registration, cookie banner) for full details.

3. Data Subject Rights

As a data subject, you have the right to:

• Access the personal data we hold and its source.
• Rectification of inaccurate or incomplete data.
• Erasure (“right to be forgotten”) under certain conditions.
• Restriction of Processing where legal grounds are unclear.
• Data Portability to receive your data in a structured, common format.
• Objection to processing based on legitimate interests.
• Withdraw Consent at any time, with future effect.

4. Categories of Data Processed

We process, among others:

• Identifiers (name, address, contact details)
• Contract data (engagement records, payment information)
• Usage data (site logs, cookies)
• Communication data (emails, messages)

5. Security & Retention

We employ appropriate technical and organizational measures, including:

• Encryption (SSL/TLS) for all data in transit
• Access controls and role-based permissions
• Regular backups and monitoring

Data is retained only as long as necessary for its purpose or as required by law (e.g. up to 10 years for accounting records).

6. International Transfers

If personal data is transferred outside Switzerland or the EU/EEA, we use standard contractual clauses and binding corporate rules to ensure adequate protection.

7. Data Breach Notification

In case of a security incident, we will notify supervisory authorities and affected individuals without undue delay, pursuant to Art. 33 ff. GDPR and FADP requirements.

8. Data Protection Officer & Contact

For questions or to exercise your rights, please contact our Data Protection Officer:

Email: info@startuplawgo.com
Address: Falkenstrasse 22, 8008 Zürich, Switzerland