Legal Information

Privacy Policy

Last updated: 24 March 2026

1. Introduction

This privacy policy describes how the law firm Kulik & Hottelier (hereinafter "the Firm", "we") collects, processes and protects your personal data when you use our website khlegal.ch (hereinafter "the Website") and when you contact us.

This policy applies to individuals who visit the Website, contact us or schedule an appointment, up until the formal acceptance of a mandate. Once a client relationship is established, a client-specific privacy policy takes over and is communicated to you as part of the mandate.

The Firm attaches particular importance to the protection of your privacy and to compliance with applicable data protection legislation, in particular the Swiss Federal Act on Data Protection (nFADP) and, to the extent applicable, the General Data Protection Regulation of the European Union (GDPR).

2. Data Controller

Kulik & Hottelier
Grand Verger 9
1920 Martigny
Switzerland

Email: contact@khlegal.ch
Phone: +41 27 552 00 40

Data protection contact person:
Damien Hottelier, Attorney-at-Law
Grand-Verger 9, 1920 Martigny
Email: contact@khlegal.ch

For any questions regarding the protection of your personal data, you may contact the above-mentioned contact person.

3. Data Collected

3.1 Data collected during your visit to the Website

Each time you visit the Website, the following data is automatically collected and stored in the server log files:

  • IP address (anonymised where possible);
  • date and time of the request;
  • page visited and referring URL (referrer);
  • browser used and operating system;
  • screen resolution and device type.

This data is necessary for the proper technical functioning of the Website and to ensure its security. It constitutes personal data within the meaning of the nFADP. Its processing is based on our legitimate interest in ensuring the availability and security of the Website (Art. 31(1) nFADP).

The Website is hosted by Cloudflare, Inc. (101 Townsend Street, San Francisco, United States) via the Cloudflare Workers service. Cloudflare may temporarily process the above-mentioned connection data in the context of delivering the Website and providing protection against attacks (web application firewall, DDoS protection). For more information, please refer to Cloudflare's privacy policy.

3.2 Data submitted via the contact form

When you use our contact form, we collect the following data in particular:

  • first name and last name;
  • email address;
  • phone number (where applicable);
  • the content of your message;
  • information about the adverse party (first name, last name, contact details);
  • any additional information you choose to provide (relevant legal area, preferred contact method, description of your situation).

This data is processed solely for the purpose of responding to your enquiry and, where applicable, establishing a mandate. The processing is based on the performance of pre-contractual measures taken at your request.

Information submitted via the contact form is stored in our internal management tool (Notion, provided by Notion Labs, Inc., San Francisco, United States). Your enquiries may also be processed via our collaborative messaging platform (Missive, provided by Missive Inc., Quebec, Canada).

This data may be subject to partial automated processing using artificial intelligence technologies, in particular via OpenAI, L.L.C. (San Francisco, United States), for sorting, categorisation or the preparation of a response.

3.3 Data collected via WhatsApp

If you contact us via WhatsApp, we collect your phone number, profile name and the content of your messages. This data is processed via the WhatsApp Business API through the Superchat platform (provided by Superchat GmbH, Berlin, Germany) and then stored in our internal management tool for the same purposes as contact form data (Section 3.2). The processing is based on the performance of pre-contractual measures taken at your request. WhatsApp is a service provided by Meta Platforms Ireland Limited; please refer to WhatsApp's privacy policy for processing carried out by Meta and Superchat's privacy policy for processing carried out by Superchat.

3.4 Online appointment booking

If you use our online appointment booking system, we collect your name, email address, phone number and preferred time slot. This data is processed on a server operated by the Firm in Switzerland. The underlying calendar is provided by Google Workspace (Google Ireland Limited, Dublin, Ireland); appointment data (time slot, name, email) is therefore also processed by Google. This data is used exclusively for managing your appointment.

3.5 Application data

If you apply via our Careers page, we collect your name, contact details and the information contained in your application. This data is processed exclusively for the purposes of the recruitment process.

4. Cookies and Similar Technologies

4.1 General

The Website uses cookies, i.e. small text files placed on your device. Some cookies are essential for the operation of the Website, while others help us improve your experience or measure website traffic.

You can manage your cookie preferences at any time via the consent manager accessible at the bottom left of each page of the Website.

4.2 Strictly necessary cookies

These cookies are essential for the operation of the Website. They enable, among other things, the storage of your cookie preferences, the security of browsing and the basic functionality of the Website. They do not require your consent.

CookiePurposeDuration
Consent preferencesStore your cookie choices12 months
Session cookiesEnsure technical operation of the WebsiteSession

4.3 Analytics and audience measurement cookies

Subject to your consent, we use the following tools to analyse Website usage and improve our services.

Google Analytics 4 (GA4)
The Website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). GA4 uses cookies to analyse your use of the Website. The information generated is generally transmitted to and stored on a Google server. IP address anonymisation is enabled by default in GA4. For more information, please refer to Google's privacy policy.

Google Tag Manager (GTM)
Google Tag Manager is a tag management tool that allows us to centrally manage tracking scripts and tags on the Website. GTM does not collect personal data itself but triggers other tags that may do so.

4.4 Advertising and marketing cookies

Subject to your consent, we use the following technologies for advertising purposes.

Google Ads (Remarketing and conversion tracking)
The Website uses Google Ads services, including conversion tracking and remarketing. These features allow us to measure the effectiveness of our advertising campaigns and serve you personalised ads on the Google network. Google may use cookies to serve ads based on your previous visits to the Website. You can disable ad personalisation in your Google account settings.

Meta Pixel (Facebook Pixel)
The Website uses the Meta Pixel, an analytics tool provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland ("Meta"). The Meta Pixel measures the effectiveness of our advertising on Meta platforms (Facebook, Instagram) by tracking actions taken on the Website after clicking on an ad. Data such as your IP address, browser and pages visited may be transmitted to Meta. For more information, please refer to Meta's privacy policy.

5. Disclosure of Data to Third Parties

We do not sell or rent your personal data to third parties.

Your personal data may be disclosed to the following categories of recipients, to the extent necessary for the purposes described above:

  • Cloudflare, Inc. (United States): Website hosting and protection against cyber attacks;
  • Google Ireland Limited (Ireland / United States): web analytics (GA4), tag management (GTM), online advertising (Google Ads) and calendar (Google Workspace);
  • Meta Platforms Ireland Limited (Ireland / United States): targeted advertising and conversion measurement (Meta Pixel), WhatsApp messaging infrastructure;
  • Superchat GmbH (Germany): WhatsApp Business messaging management interface;
  • Notion Labs, Inc. (United States): management and tracking of contact requests;
  • Missive Inc. (Canada): collaborative processing of incoming emails;
  • OpenAI, L.L.C. (United States): partial automated processing of incoming enquiries (sorting, categorisation);
  • Internal hosting (Switzerland): server operated by the Firm for the appointment booking system, WhatsApp Business integration and internal automations (n8n). The n8n automations may make calls to the above-mentioned third-party services in the course of processing your data.

6. International Data Transfers

Some of our processors are established outside Switzerland and process data in their respective countries. Data transfers take place to the following countries:

  • United States: Cloudflare, Google, Meta, Notion, OpenAI;
  • Germany: Superchat (WhatsApp Business);
  • Canada: Missive (emails);
  • Ireland: Google, Meta (European headquarters).

Internal automations (n8n), hosted in Switzerland, may make calls to the above-mentioned third-party services, resulting in data transfers to the countries concerned.

We ensure that appropriate safeguards are in place for each transfer, in particular through the use of the European Commission's Standard Contractual Clauses (SCCs), verification of the processor's participation in the EU-U.S. Data Privacy Framework, and/or the implementation of supplementary technical measures (encryption, pseudonymisation). Transfers to Germany and Ireland (EU/EEA members) benefit from a recognised adequate level of protection. Canada benefits from an adequacy decision of the European Commission.

7. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, in particular:

  • Contact form data: for the duration of the processing of your enquiry, then in accordance with legal retention obligations applicable to lawyers;
  • Application data: for the duration of the recruitment process, then deleted within 6 months of the closure of the position, unless you agree to longer retention;
  • Analytics and advertising cookies: in accordance with the durations indicated in Section 4 above.

8. Automated Processing and Profiling

Certain data that you submit to us via the contact form, WhatsApp or email may be subject to partial automated processing using artificial intelligence technologies, in particular via OpenAI, to facilitate the sorting, categorisation and processing of incoming enquiries.

This automated processing does not constitute high-risk profiling within the meaning of Art. 21 nFADP.

You may object to the automated processing of your data at any time by contacting us at the address indicated in Section 2.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, modification, disclosure or destruction. The Website uses the HTTPS protocol to secure data transmission.

10. Your Rights

Under the nFADP and, where applicable, the GDPR, you have the following rights:

  • Right of access: you may request to know whether and what personal data we process about you;
  • Right to rectification: you may request the correction of inaccurate data;
  • Right to erasure: you may request the deletion of your personal data, subject to legal retention obligations;
  • Right to restriction of processing: you may request the restriction of the processing of your data in certain circumstances;
  • Right to data portability: you may request the provision of your data in a structured and commonly used format;
  • Right to object: you may object to the processing of your data for direct marketing purposes at any time.

To exercise your rights, please contact us at the address indicated in Section 2 above.

If you believe that the processing of your personal data violates applicable legislation, you have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, where applicable, with the competent supervisory authority in the European Union.

11. Links to Third-Party Websites

The Website may contain links to third-party websites. We assume no responsibility for the content of these websites or their data protection practices. We encourage you to consult the privacy policies of these websites before transmitting personal data to them.

12. Amendments

We reserve the right to amend this privacy policy at any time. The version in force is the one published on the Website. The date of the last update appears at the top of this document.

13. Applicable Law and Jurisdiction

This privacy policy is governed by Swiss law. Any dispute relating to data protection is subject to the exclusive jurisdiction of the courts of the Canton of Valais, subject to any mandatory jurisdiction provided by law.