We process personal data (i.e., data that directly or indirectly identifies individuals) that you or third parties provide us based on a contractual relationship. The same applies to data that we collect ourselves. NFS Group SA is responsible for processing personal data in accordance with this statement.

Some personal data is provided to us by the client (or other interested parties) when they contact us via email or phone to request our services. This data may include the name, contact details, or information on the role of the person concerned within the company or organization for which they work, or on whose behalf they contact us. In carrying out the mandate, we also process personal data that we gather from our correspondence with clients or third parties (especially administrative-tax-judicial authorities, counterparties, their respective employees, or other contacts). Such data can include names, addresses, birthdates, employment details, income, family situation, or health status. We also collect certain personal data ourselves, such as from public registers or websites.

Regarding the purposes of processing personal data, they primarily allow us to provide, document, and invoice our fiduciary and/or legal services.

We process contact data of the client, their employees, or other people for marketing purposes (using any communication means such as email, social media, mail, or phone) to provide information about publications, events, new services, or products that may be of interest to them.

To achieve these goals, we may need to transfer personal data to the following categories of recipients: external service providers, clients, opposing parties and their legal representatives, business partners with whom we may need to coordinate our services, and authorities and/or courts.

We process personal data related to our area of responsibility in Switzerland and the EU/EEA. We can also transfer such data to recipients (particularly clients, opposing parties, or authorities) who in turn process personal data in other countries, even if they do not guarantee a level of protection comparable to Swiss law. In such cases, we will do so based on consent or standard contractual clauses. The same applies if the data transfer is necessary for contract execution or to assert legal rights.

We retain personal data for the time necessary to carry out the mandate, but in any case for the legally required retention or documentation period, or as long as a prevailing public or private interest exists. We adopt appropriate and proportionate measures to protect personal data from loss, unauthorized changes, or illegal third-party access. If you provide us with personal data through third parties (e.g., your employees or other contacts), you must inform them comprehensively about the data processing carried out by NFS Group SA and other fiduciary and/or legal or external service providers (e.g., in a data protection statement for your employees).

Please note that to execute the mandate, we use external IT or cloud providers with servers in Switzerland. In these cases, we use certain IT services or communication means that may pose data security risks (for example, email and videoconferencing). If you wish for us to implement specific security measures, please inform us.

The purposes mentioned above are based on a legitimate interest in processing personal data. Some processes are also necessary to fulfill our contractual obligations to you. The same applies to legal obligations we are subject to, such as document retention requirements.

Specifically, data subjects have the right to obtain information about personal data recorded about them, know the purpose of the data, rectify or delete it, limit its processing, object to its processing, and appeal to a supervisory authority. They also have the right to data transmission or portability. Please note, however, that these rights are subject to conditions and exceptions. To the extent permitted or required by law, some requests may be denied. For instance, we might be required to keep personal data or continue processing it for legal reasons, despite a request for deletion or limitation of data processing.

This statement does not require any formal consent from the client, their employees, or other contacts. This statement merely informs about the nature, scope, and purpose of the data processed by NFS Group SA, which reserves the right to unilaterally modify the content of this statement at any time and without notice. We therefore advise you to regularly consult NFS Group SA's data protection statement available on our website.

If you, your employees, or other contacts have questions or wish to assert your data protection rights or those of the data subjects, please contact us at legal@nfs.group or write to us at NFS Group SA, Corso Elvezia 9a, 6901 Lugano.