Your account of the case
What you write in the fields, plus your name, contact details and any files. Nothing is transmitted until you send it at the end — before that everything stays in your browser.
Privacy
When you describe a case through LAW4, your details go to the law firm you chose — and nowhere else. This page says who processes them, where they sit and what we deliberately do not collect.
Who processes your data
Two roles that data protection law keeps cleanly apart — and that decide who to turn to with a question.
“The controller is the law firm. LAW4 processes your details only on its instructions.”
If you fill in the intake window on a law firm’s website, that firm is the controller in the sense of data protection law. It decides what your details are used for, how long they stay and who gets to see them — and it is bound by professional secrecy under Art. 321 of the Swiss Criminal Code.
LAW4 supplies the software. We are the processor and handle your details solely on the firm’s instructions, for the purpose it commissioned. The basis is a data processing agreement under Art. 9 of the Swiss Federal Act on Data Protection, supplemented by Art. 28 GDPR, which every firm accepts before the first enquiry reaches it.
In practice: questions about your case and your data are answered by the law firm. We support it in doing so — access, correction and erasure run through the firm, not past it.
Where your data sits
No detour through data centres abroad, no copy sitting with a third party.
Zurich, not just anywhere
Case and contact data sit in the Google Cloud region europe-west6 in Zurich. Operation, storage and backup all happen in that same region.
Separated firm by firm
Every firm works in its own, closed-off area. Another firm cannot see your enquiry — not even by accident.
Encrypted in transit and at rest
Transmission is encrypted throughout, and so is storage. Backups run regularly — and they stay in the same region.
No disclosure abroad
Your details are not transferred to third countries. Were that ever necessary, it could only happen under Art. 16 ff. FADP — and the firm would hear of it beforehand.
What the intake window collects
What you write in the fields, plus your name, contact details and any files. Nothing is transmitted until you send it at the end — before that everything stays in your browser.
The window sets no cookie and leaves nothing in your browser that would make you recognisable later. The firm’s own website learns nothing about you through us either.
The window brings its own fonts, icons and code. No tracking pixel, no outside network — otherwise a third party would learn, from the mere page load, that you are interested in this firm.
We measure where intakes are abandoned — as structure, never as content: no free text, no IP address, no browser fingerprint. “Do Not Track” and “Sec-GPC” switch the measurement off entirely.
Your rights
You are entitled to learn what is stored about you, and to have it corrected and deleted. The route there runs through the law firm — that is not a hurdle, it is exactly what legal privilege protects.
How to get to your data
Zurich · developed and hosted in Switzerland
Frequently asked
The law firm you addressed it to. Inside the firm, only the people the case is assigned to can see it — access is bound to roles. LAW4 staff do not work inside your case data; where a fault makes it unavoidable, it happens solely on the firm’s instruction.
In the Google Cloud region europe-west6 in Zurich. Operation, storage and backup stay in that region — no disclosure abroad takes place.
No. No cookies, no tracking pixels, no session recording. It also loads nothing from outside servers — it brings its fonts, icons and code with it.
Then nothing is transmitted. Your entries stay in your browser until you send them; close the window and they are gone. At most the analysis records that someone stopped at that step — without a word of what you had written.
The Swiss Federal Act on Data Protection always applies. The GDPR comes on top wherever processing falls within its scope. The data processing agreement between the firm and LAW4 is written for both.
The law firm decides — it sets the retention period and is bound by the statutory deadlines for case files. If its collaboration with LAW4 ends, the data is deleted or returned, subject to statutory retention duties.
Questions about data protection
You run a law firm and would like to see the data processing agreement, the technical measures or the list of sub-processors? Write to us — we answer personally.
Reply within 24 hours · Zurich