Who is responsible for your data

Opufinite is responsible for the personal data described in this notice when it determines how and why that data is processed.

Opufinite
Zürich, Switzerland
enquiries@opufinite.com

Where another organisation determines the purposes and means of processing, that organisation may be separately responsible for the relevant personal data.

Personal data we may collect

The personal data we process depends on how you interact with Opufinite. It may include:

identification and contact information, such as your name, organisation, role, email address and telephone number;
information you provide in an enquiry, email, meeting request or other correspondence;
professional or business information relevant to a potential or existing relationship with Opufinite;
technical information generated when you use the website, such as IP address, browser and device information, timestamps, requested pages and security or server-log data; and
cookie or similar technology information where such technologies are used.

Please do not send sensitive, highly confidential or unnecessary personal information through a website form or ordinary email unless specifically requested and an appropriate method of communication has been agreed.

How we use personal data

We may process personal data for purposes including:

responding to enquiries and requests;
considering, establishing and administering potential or existing professional relationships and engagements;
communicating with clients, prospective clients, professional contacts and other stakeholders;
operating, maintaining, securing and improving the website and related technology;
protecting Opufinite, website visitors and third parties against misuse, fraud, security incidents or unlawful activity;
maintaining appropriate business, administrative and compliance records; and
complying with legal, regulatory, professional or other lawful obligations.

Legal bases for processing

Opufinite processes personal data in accordance with applicable Swiss data-protection law. Where the EU or UK GDPR applies to a particular processing activity, the legal basis may include:

taking steps at your request before entering into a contract or performing a contract;
legitimate interests in operating the practice, responding to enquiries, maintaining professional relationships, securing the website and protecting legal interests;
compliance with a legal obligation; or
your consent, where consent is required or otherwise relied upon.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing carried out lawfully before withdrawal.

Website data, cookies and similar technologies

When you access the website, technical information may be processed automatically by the website infrastructure and service providers used to deliver, secure and maintain the site. This may include IP address, browser type, device information, date and time of access, requested pages, referring information and server-log data.

The website may use cookies and similar technologies that are necessary for core functionality, security and user preferences. Where optional analytics or similar technologies are enabled, they are used in accordance with applicable consent and transparency requirements.

You can control cookies through your browser settings and, where provided, through the website's cookie-preference controls. Disabling certain technologies may affect website functionality.

Who may receive personal data

Personal data is shared only where reasonably necessary for the purposes described in this notice or where required by law. Recipients may include:

website hosting, cloud, email, communications, IT and security providers;
professional advisers and service providers acting for Opufinite;
counterparties or other persons involved in a matter where disclosure is appropriate and lawful; and
courts, regulators, public authorities or law-enforcement bodies where disclosure is required or legally justified.

Service providers that process personal data on our behalf are expected to use it only for the agreed purposes and to protect it appropriately.

International transfers

Opufinite is based in Switzerland and may use service providers whose infrastructure or personnel are located in Switzerland, the European Economic Area, the United Kingdom or the United States. Personal data may therefore be processed outside the country in which it was originally collected.

Where personal data is transferred to a country that does not provide a legally recognised adequate level of data protection, Opufinite uses appropriate safeguards where required, which may include recognised standard contractual clauses and supplementary technical or organisational measures.

How long we retain personal data

Personal data is retained only for as long as reasonably necessary for the purposes for which it was collected and for any additional period required or permitted by applicable law.

Retention periods may depend on the nature of the relationship, the type and sensitivity of the information, contractual or professional requirements, legal record-keeping obligations and the need to establish, exercise or defend legal claims.

When personal data is no longer required, it is deleted, anonymised or otherwise handled in accordance with applicable requirements.

Data security

Opufinite uses appropriate technical and organisational measures designed to protect personal data against unauthorised access, misuse, alteration, loss or disclosure, taking account of the nature of the information and the risks involved.

No method of transmission or storage is completely secure. Accordingly, absolute security cannot be guaranteed.

Your data-protection rights

Depending on the law that applies to you and the relevant processing, you may have rights to:

obtain information about whether and how your personal data is processed;
request access to your personal data;
request correction of inaccurate or incomplete personal data;
request deletion of personal data in appropriate circumstances;
request restriction of processing or object to certain processing;
receive certain personal data in a portable format where the applicable law provides that right; and
withdraw consent where processing is based on consent.

Rights are subject to applicable legal conditions, limitations and exceptions. We may need to verify your identity before acting on a request.

You may also have the right to raise a concern with the competent data-protection authority. In Switzerland, the supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC).

Automated decision-making

Opufinite does not use personal data collected through this website to make decisions based solely on automated processing that produce legal effects or similarly significant effects for individuals.

Changes to this notice

This privacy notice may be updated from time to time to reflect changes in the website, the practice, legal requirements or the way personal data is processed. The current version will be published on this page and identified by the update date below.

Privacy enquiries

Questions about this notice or requests concerning your personal data may be directed to:

Opufinite
Zürich, Switzerland
enquiries@opufinite.com

For general website terms, please see the Legal Notice.