Privacy

Your details stay
where they belong.

When you describe a case through LAW4, your details go to the law firm you chose — and nowhere else. This page says who processes them, where they sit and what we deliberately do not collect.

  • Data centre in Zurich
  • No cookies, no tracking
  • Legal privilege preserved

Who processes your data

The firm decides, we carry it out.

Two roles that data protection law keeps cleanly apart — and that decide who to turn to with a question.

“The controller is the law firm. LAW4 processes your details only on its instructions.”

If you fill in the intake window on a law firm’s website, that firm is the controller in the sense of data protection law. It decides what your details are used for, how long they stay and who gets to see them — and it is bound by professional secrecy under Art. 321 of the Swiss Criminal Code.

LAW4 supplies the software. We are the processor and handle your details solely on the firm’s instructions, for the purpose it commissioned. The basis is a data processing agreement under Art. 9 of the Swiss Federal Act on Data Protection, supplemented by Art. 28 GDPR, which every firm accepts before the first enquiry reaches it.

In practice: questions about your case and your data are answered by the law firm. We support it in doing so — access, correction and erasure run through the firm, not past it.

CHData centre in Zurich
0Cookies in the intake window
0Resources from outside servers
FADPThe Swiss data protection act applies

Where your data sits

In Switzerland — and nowhere else.

No detour through data centres abroad, no copy sitting with a third party.

Zurich, not just anywhere

Case and contact data sit in the Google Cloud region europe-west6 in Zurich. Operation, storage and backup all happen in that same region.

Separated firm by firm

Every firm works in its own, closed-off area. Another firm cannot see your enquiry — not even by accident.

Encrypted in transit and at rest

Transmission is encrypted throughout, and so is storage. Backups run regularly — and they stay in the same region.

No disclosure abroad

Your details are not transferred to third countries. Were that ever necessary, it could only happen under Art. 16 ff. FADP — and the firm would hear of it beforehand.

What the intake window collects

What you type — and nothing else.

Your account of the case

What you write in the fields, plus your name, contact details and any files. Nothing is transmitted until you send it at the end — before that everything stays in your browser.

No cookies

The window sets no cookie and leaves nothing in your browser that would make you recognisable later. The firm’s own website learns nothing about you through us either.

Nothing from outside servers

The window brings its own fonts, icons and code. No tracking pixel, no outside network — otherwise a third party would learn, from the mere page load, that you are interested in this firm.

Measurement without content

We measure where intakes are abandoned — as structure, never as content: no free text, no IP address, no browser fingerprint. “Do Not Track” and “Sec-GPC” switch the measurement off entirely.

Your rights

Access, correction, erasure.

You are entitled to learn what is stored about you, and to have it corrected and deleted. The route there runs through the law firm — that is not a hurdle, it is exactly what legal privilege protects.

How to get to your data

  1. Turn to the law firm. It is the controller; its privacy notice names the office in charge.
  2. We give it what it needs. On its instruction we release, correct or delete the stored details.
  3. The answer comes from the firm. That keeps it in your hands who learns of your matter at all.

Zurich · developed and hosted in Switzerland

Frequently asked

Short and clear

Who sees my enquiry?

The law firm you addressed it to. Inside the firm, only the people the case is assigned to can see it — access is bound to roles. LAW4 staff do not work inside your case data; where a fault makes it unavoidable, it happens solely on the firm’s instruction.

Where exactly does the data sit?

In the Google Cloud region europe-west6 in Zurich. Operation, storage and backup stay in that region — no disclosure abroad takes place.

Does the intake window set cookies?

No. No cookies, no tracking pixels, no session recording. It also loads nothing from outside servers — it brings its fonts, icons and code with it.

What happens if I stop halfway through?

Then nothing is transmitted. Your entries stay in your browser until you send them; close the window and they are gone. At most the analysis records that someone stopped at that step — without a word of what you had written.

Does the Swiss FADP apply, or the GDPR?

The Swiss Federal Act on Data Protection always applies. The GDPR comes on top wherever processing falls within its scope. The data processing agreement between the firm and LAW4 is written for both.

How long are my details kept?

The law firm decides — it sets the retention period and is bound by the statutory deadlines for case files. If its collaboration with LAW4 ends, the data is deleted or returned, subject to statutory retention duties.

Questions about data protection

Ask us
before you trust us.

You run a law firm and would like to see the data processing agreement, the technical measures or the list of sub-processors? Write to us — we answer personally.

Reply within 24 hours · Zurich