Data protection
Privacy statement for this website
This statement explains what personal data is processed when you visit the website avocat.anthonioz.ch, write to the firm using the contact form, book an appointment online, pay for a service or use the calculation tools, for what purpose, and what your rights are. It is based on the Swiss Federal Act on Data Protection (FADP (new tab)).
In brief
- The website uses no cookies, no audience measurement and no advertising.
- Your messages are used solely to answer your request and are covered by the lawyer’s professional secrecy.
- The website is hosted in France by OVH; the firm’s email and appointment booking run on Microsoft 365, and payments are processed by SumUp, TWINT or Worldline.
- You may ask to access, correct or erase your data.
Controller
The controller is Me Jean-Philippe Anthonioz, attorney at the Geneva Bar, boulevard Georges-Favon 14, 1204 Geneva (hereinafter: the firm). For any question about your data:
Browsing the website
When you view a page, your browser automatically sends technical information to the server: IP address, date and time, page requested, referring page, browser and operating system type. The hosting provider records this information in the server logs, which are used to keep the website running and secure (e.g. to detect an attack). The firm does not use it to identify visitors.
The website uses no cookies and no audience measurement, tracking or advertising tools. Its fonts, images and scripts are hosted on the website itself: viewing its pages sends no data to third parties (but see the calculation tools).
If you use the dark mode button, your choice is stored in your browser’s local storage, on your device only; it is not sent to the firm. You can erase it by deleting the site data in your browser settings.
Links to other websites (e.g. legislation, authorities, LinkedIn, Facebook or Google Maps) send no data until you click on them. On those websites, their own data protection rules apply.
Contact form and emails
When you write to the firm using the contact form, the form sends your email address and your message, as well as your name and the subject of the message if you provide them. This data is used solely to handle your request and reply to you.
The message is sent through OVH’s mail server, over an encrypted connection, to the firm’s mailbox, hosted by Microsoft (Microsoft 365). It is not stored on the web server. If sending fails, your text is simply displayed again in your browser so that you can copy it. Emails you send directly to the firm are handled in the same way.
To protect the form against spam, the web server counts the messages sent from the same IP address. It does not keep the address itself, only a pseudonymised fingerprint of it, which is deleted after 24 hours. Sending the form requires JavaScript to be enabled in your browser.
The information you entrust to the lawyer is covered by professional secrecy (art. 321 of the Swiss Criminal Code and art. 13 of the Lawyers Act, BGFA/LLCA).
A message sent over the internet is never entirely safe from interception or misdelivery. For particularly sensitive information, please prefer a meeting. Urgent matters must not be reported via the form or by email.
Online appointment booking
The “Book an appointment” button opens the firm’s booking page on the Microsoft Bookings service in a new tab. The data you enter there (surname, first name, address, telephone number and email address), as well as your IP address, is used to arrange and confirm the appointment. It is deleted once the consultation fee has been paid or, if the appointment is cancelled, as soon as the cancellation has been confirmed.
Microsoft processes this data on the firm’s behalf. On its own pages, Microsoft may also use cookies and process technical data in accordance with its privacy statement (new tab). If you prefer, you can book an appointment by telephone.
Payment
When the price of a consultation or service is paid by card or with TWINT, on site or via a payment link, the payment is processed by SumUp, TWINT and Worldline, which receive the data required (e.g. amount, date, payment method, card number and, for a payment link, name and email address). These providers process it to execute the payment and comply with their legal obligations, in accordance with their own privacy statements: SumUp (new tab) (in French), TWINT (new tab) and Worldline (new tab).
The firm receives confirmation of the payment (amount, date and payment method) and keeps it with its accounting records (see Retention and security).
Calculation tools
The child support calculator and the LPP letter generator run in your browser: the data you enter is not sent to the firm. So that you can resume your entries later, it is kept in your browser’s local storage, on your device, until you erase it (the “Reset” button of the calculator, “Effacer les informations” in the letter generator). Remember to do so if you use a shared device.
Both tools only use resources hosted on the website: when you use them, your browser does not connect to any other provider.
Recipients and transfers abroad
The firm does not sell or rent your data and does not use it for advertising. It uses the following service providers, which process data on its behalf:
- OVH SAS, Roubaix (France): website hosting and sending of contact form messages;
- Microsoft (Microsoft 365): the firm’s email and online appointment booking.
Payments are processed by SumUp, TWINT and Worldline, in accordance with their own privacy statements (see Payment).
If you instruct the lawyer, your data is disclosed to third parties (e.g. courts, authorities, the opposing party, experts or translators) only to the extent necessary to perform the mandate, or where required by law.
These providers may process data outside Switzerland: in France and other European Union states, which the Federal Council has recognised as providing an adequate level of protection, and in the United States. Microsoft is certified under the Swiss-U.S. Data Privacy Framework; since 15 September 2024, the Federal Council has recognised that US companies so certified provide an adequate level of protection (art. 16 para. 1 FADP and Annex 1 to the Data Protection Ordinance).
Retention and security
Data is kept only for as long as necessary:
- server logs: for a limited period set by the hosting provider;
- IP address fingerprints (protecting the form against spam): 24 hours;
- messages and emails: for as long as needed to handle your request and check for conflicts of interest; if you instruct the lawyer, they become part of the file, which is generally kept for ten years after the end of the mandate;
- online bookings: until the consultation fee has been paid or the cancellation has been confirmed;
- payments: payment confirmations are kept with the accounting records for ten years (art. 958f CO);
- your browser’s local storage (display mode, entries in the calculation tools): on your device, until you erase it.
The website can only be accessed over an encrypted connection (HTTPS), and contact form messages are delivered to the mail server over an encrypted and authenticated connection. The firm takes appropriate technical and organisational measures to protect your data against loss and unauthorised access (art. 8 FADP).
Your rights
You may:
- ask whether data concerning you is being processed and obtain a copy of it (right of access, art. 25 FADP);
- have inaccurate data corrected (art. 32 para. 1 FADP);
- request the erasure of your data or object to its processing (art. 30 and 32 para. 2 FADP);
- under certain conditions, receive the data you have provided in a commonly used electronic format (art. 28 FADP).
These rights may be restricted where the law so provides, in particular to protect professional secrecy, or where the overriding interests of a third party so require (art. 26 FADP). The firm may also be required to keep certain data despite a request for erasure.
Send your request in writing to the firm, by post or by email (see the contact details). The firm may ask you to prove your identity; it will reply within 30 days (art. 16 and 18 of the Data Protection Ordinance).
If you believe that your data is being processed unlawfully, you may contact the Federal Data Protection and Information Commissioner (new tab) (FDPIC), Feldeggweg 1, 3003 Bern. If the EU General Data Protection Regulation (GDPR) applies to your situation, you also have the rights it provides, including the right to lodge a complaint with the supervisory authority of your country.
The firm may amend this statement, in particular if the website or its service providers change; the version published on this page prevails.