PRIVACY
Last updated: 2 September 2026
This Privacy Policy explains how personal data is processed when you visit ml-law.ch . It is governed by the Swiss Federal Act on Data Protection (FADP). Where the European Union’s General Data Protection Regulation (GDPR) applies, its requirements are also taken into account.
1. Controller
The controller responsible for processing personal data on this website is:
Dr iur. Martin Liebi
c/o gunnercooke GmbH
Bahnhofstrasse 10
8001 Zurich
Switzerland
Privacy enquiries may be submitted by post to the address above or through the contact page .
2. Principles and purposes of data processing
Personal data is processed only to the extent required for the secure and reliable operation of this website, the provision of its content, audience measurement and communication with data subjects. Processing is carried out in accordance with the principles of lawfulness, proportionality, purpose limitation, transparency and data security.
Where the GDPR applies, technically necessary processing is based in particular on Article 6(1)(f) GDPR (legitimate interest in the secure and functional operation of the website). Processing that requires consent is based on Article 6(1)(a) GDPR.
3. Accessing the website and server logs
Each time the website is accessed, the web server automatically records technical log data. This may include the IP address, date and time of access, requested address and file, amount of data transferred, referrer address, browser type and version, operating system and HTTP status code.
This data is used to deliver the website, ensure its stability and security, analyse technical errors and prevent misuse. Server logs are generally retained by the hosting provider for up to 30 days unless longer retention is necessary to investigate a security incident or comply with legal obligations.
4. Hosting
This website is operated using services provided by SiteGround. SiteGround Spain S.L., Calle de Prim 19, 28004 Madrid, Spain, may in particular act as the European contracting party and processor. SiteGround processes hosting, security and log data to provide and secure the website and may engage contractually bound infrastructure providers and subprocessors for this purpose.
Further information is available in the SiteGround Privacy Policy.
5. Cookies and similar technologies
Cookies are small text files stored on a user’s device. Strictly necessary cookies may be used to provide WordPress security, administration and display functions. For visitors who are not signed in, these functions are limited to what is technically necessary.
Google Analytics also uses its own cookies, in particular _ga and _ga_<Container-ID>. They distinguish pseudonymous visitors and sessions and may be stored for up to two years. Cookies can be blocked or deleted in the browser settings. Blocking cookies may affect certain functions.
6. Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Where data is processed in the United States, Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, may be involved.
The website uses the Google Analytics measurement ID G-210T581WE9. It is loaded when the website is accessed. In its standard configuration, Google Analytics records in particular information about the device and browser, pages visited, session and interaction data, approximate location, referrer and timestamps. Enhanced Measurement is enabled and may record additional events such as page views, scroll activity and outbound clicks. Google uses the IP address to provide and secure the service and to determine an approximate location; according to Google, IP addresses are not logged or stored in Google Analytics.
The purpose of this processing is to statistically analyse use of the website and improve its content, structure and technical quality. Collected user and event data is generally retained for two or fourteen months, depending on the Google Analytics property configuration; aggregated reports may remain available for longer.
Where consent is required for analytics cookies, Article 6(1)(a) GDPR is the applicable legal basis. No separate consent manager is currently configured on this website. Visitors who do not consent to analytics may block or delete Google Analytics cookies in their browser settings and use the Google Analytics opt-out browser add-on .
Information about Google’s processing of personal data is available at Google Privacy and Data privacy and security in Google Analytics.
7. Disclosure of data abroad
In connection with hosting and web analytics, personal data may be disclosed to or made accessible in countries outside Switzerland. Processing by Google may take place in Ireland and the United States in particular. Transfers to countries without a generally recognised adequate level of data protection are based on safeguards provided by law, including recognised data privacy frameworks or standard contractual clauses. Google LLC states that it participates in the Swiss-U.S. and EU-U.S. Data Privacy Frameworks.
8. Website search
When the internal search is used, the search term entered is transmitted to the web server as part of the requested address. It may therefore appear in server logs and Google Analytics. The search function does not create a separate user account.
9. Contact and external links
When you use the contact form, we process your name, email address, optional company or organisation, selected topic and message in order to review and answer your enquiry and to coordinate a possible initial consultation. Required fields are marked accordingly. The information is sent by email to Martin Liebi at gunnercooke and is not additionally stored as a contact enquiry in WordPress. It is retained only for as long as necessary to handle the enquiry, prepare a possible engagement or comply with statutory documentation and retention duties. Please do not send sensitive or confidential information through the form. The respective operator remains responsible for data processing on external websites.
10. Recipients and processors
Personal data is made accessible only to persons and service providers who require it for the purposes described above. These include hosting, security, maintenance and analytics service providers. Where necessary, they are contractually required to maintain confidentiality and data security and to process data only for the agreed purposes. Data may also be disclosed where required by law or where necessary to establish, exercise or defend legal claims.
11. Retention periods
Personal data is retained only for as long as required for the relevant purpose or to comply with statutory retention and documentation obligations. It is then deleted or anonymised. The specific retention periods for server logs and Google Analytics are described in the sections above.
12. Data security
Appropriate technical and organisational measures are taken to protect personal data against loss, misuse, unauthorised access, alteration and disclosure. Data transmitted between the browser and the website is encrypted using HTTPS. Nevertheless, absolute security cannot be guaranteed for electronic data transmission.
13. Rights of data subjects
Subject to applicable data protection law, data subjects may in particular request information about their personal data being processed, its rectification or erasure, the restriction or cessation of certain processing and, where provided for, the disclosure or transfer of their data. Consent may be withdrawn at any time with effect for the future.
Where the GDPR applies, data subjects also have the rights provided for under the GDPR, including the right to object to processing based on legitimate interests and the right to lodge a complaint with a competent data protection supervisory authority. In Switzerland, data subjects may contact the Federal Data Protection and Information Commissioner (FDPIC).
Suitable proof of identity may be requested when handling a request. Statutory restrictions and retention obligations remain reserved.
14. No automated individual decision-making
No decisions based solely on automated processing are made through this website, and no high-risk profiling is carried out.
15. Amendments
This Privacy Policy may be amended if the data processing activities, services used or legal requirements change. The version published on this page at the relevant time applies.