Data privacy statement
The following text is intended to inform you about the extent to which and the purpose for which Kohli Law (hereinafter ‘Kohli Law’ or ‘we’) collects and processes your personal data (data that directly or indirectly identify natural persons) and the rights you have when you visit the website kohlilaw.ch, use Kohli Law services or otherwise make contact with Kohli Law. Please note that this data privacy statement may change at any time, so it may be worth viewing it on a regular basis.
1. Responsibility for data processing
Thomas Kohli is responsible for collecting, processing and using your personal data in the context described above. We take data protection seriously and comply with the provisions of the Swiss Federal Act on Data Protection (FADP). You can send any concerns you have regarding data protection law to the following contact address:
2.Extent and purpose of personal data processing
a. When visiting our website
The website kohlilaw.ch is hosted on servers in Switzerland by Kreativ Media GmbH, which has its registered office in Zurich.
Whenever you visit the website kohlilaw.ch, the servers temporarily store each access event in a log file. In the process, the following data are stored by us automatically without any action on your part:
- the IP address of the computer used to access the website;
- host name of the accessing computer;
- the date and time of the access event;
- browser type and browser version;
- the operating system used;
- referrer URL.
These data are collected and processed for the purpose of enabling our website to be used (establishing a connection) and ensuring system security and stability.
Only in the event of an attack on the network infrastructure or if other unauthorized use of the website is suspected can the IP address be analysed for clarification and defence purposes or used to identify the user concerned in connection with civil or criminal proceedings.
We consider the purposes described above to be our legitimate interest in processing data.
b. In the context of the lawyer-client relationship
Kohli Law offers legal services.
When you request our services and when we perform the engagement, we receive personal data from you over the telephone or by e-mail, such as names, contact details and your role at the company on behalf of which you are contacting us.
Moreover, at the pre-contract stage and when performing the engagement, we may receive further personal data from you that may be of use in handling the engagement. These data may also include dates of birth, data relating to income status, data relating to state of health and the private sphere, data relating to administrative and criminal proceedings and sanctions, and data relating to social assistance measures.
We do not only receive the aforementioned data from the data subjects themselves. Rather, it may be the case that we obtain such personal data from third parties (in particular, clients, counterparties and their legal representatives, courts and other authorities).
Moreover, we also collect some personal data ourselves, for example from public registers or internet searches.
We carry out the personal data processing mentioned so that we can provide, document and bill our legal services. In this respect, we have a legitimate interest in this data processing.
3. Cookies
A cookie is a small file that is stored by the web browser used when a website is visited.
The website kohlilaw.ch only uses session cookies; that is, cookies that are deleted again immediately after your website visit. They help to make the connection from your browser to the website secure. This website does not use permanent cookies; that is, cookies that remain on the accessing device.
4. E-mail and video calling
We use means of communication such as e-mail and video calling that entail certain data security risks.
If you communicate with us via normal e-mail or via video calling, we assume that you are aware of those risks and consent to us communicating with you in the same way. Should you wish to take particular security measures, such as communicating via the confidential IncaMail platform, it is your responsibility to inform us of that wish.
5. Disclosing personal data to third parties
To fulfil the purposes described above in section 2a, it may be necessary for us to disclose the personal data to the following categories of recipients: external service providers, clients, counterparties and their legal representatives, business partners with whom we may need to coordinate legal services provision, courts and other authorities.
6. Disclosing personal data abroad
We process the personal data within our area of responsibility in Switzerland. However, we may disclose the personal data to recipients (namely clients, counterparties and their legal representatives or authorities) who for their part process the personal data in other countries, including those that do not guarantee a level of data protection similar to that under Swiss law. We will do the latter based on consent or standard data protection clauses, or if it is necessary in order to perform a contract or enforce legal rights.
7. Data security
We use suitable technical and organizational security measures to protect your personal data stored with us against manipulation, data loss and unauthorized access by third parties.
8. Retention periods
We store personal data only for as long as is necessary in order to conduct the lawyer-client relationship, there is a statutory duty to retain and document the data, or we have an overriding private or public interest in doing so.
9. Rights of data subjects
You have the following data subject rights, where in each case certain requirements must be met and exceptions apply. You can send your request to the address set out above in section 1. Please note that we usually request proof of identity in order to process your request:
Right to information: You have the right to request information about your personal data stored with us and the purpose for which the data are processed.
Right to correction: You generally have the right to have inaccurate personal data corrected and to be informed about their correction. In this case, we inform the recipients of the data concerned about the changes made, unless this is impossible or requires disproportionate effort.
Right to mark the data as being disputed: If neither the accuracy nor the inaccuracy of the relevant personal data can be established, you may request that the data be marked as being disputed.
Right to deletion: In certain circumstances, you have the right to request that your personal data be deleted.
Right to restrict processing: In certain circumstances, you have the right to request that the processing of your personal data be restricted.
Right of withdrawal: You generally have the right to withdraw given consent at any time. However, past processing activities based on your consent do not become unlawful as a result of your withdrawal of consent.
Right to data portability: In certain circumstances, you have the right to request that personal data provided by yourself be delivered to you or transferred to third parties.
Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with the competent data protection authority. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch).
April 2026