Privacy Policy
Berger&Strategies Consulting
Effective date: 10 October 2026
1. Purpose and Scope
This Privacy Policy sets out the principles governing the collection, processing, use, disclosure, retention and protection of personal data by Berger&Strategies Consulting in connection with its website, business communications and advisory engagements.
Berger&Strategies Consulting is committed to the lawful, proportionate and confidential handling of personal information, having particular regard to the international nature of its advisory activities and the sensitivity of information that may arise in individual engagements.
Personal data is processed in accordance with applicable Swiss data protection legislation, including the Swiss Federal Act on Data Protection (FADP). Where Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) applies to a particular processing activity, the relevant requirements of that Regulation are observed in addition.
2. Data Controller
The controller responsible for the processing of personal data is:
Berger&Strategies Consulting
Owner and Managing Director: Adrian Berger
In der Au 30
8706 Meilen
Switzerland
Email: berger@bergerstrategy.com
Telephone: +41 44 597 80 99
Website: https://bergerstrategy.com
Swiss Business Identification Number (UID): CHE-338.063.967
Any enquiries relating to data protection or the exercise of applicable data subject rights may be addressed to the contact details set out above.
3. Definitions
Personal data means any information relating to an identified or identifiable natural person.
Processing includes any operation performed upon personal data, irrespective of the means or procedures employed, including collection, recording, storage, use, alteration, disclosure, archiving and deletion.
Sensitive personal data is processed only where the relevant legal requirements are satisfied and appropriate safeguards are applied.
4. Categories of Personal Data
Depending on the nature of the relevant interaction or engagement, the following categories of personal data may be processed:
Identification and contact information: Names, addresses, email addresses, telephone numbers, nationality, dates of birth and other information required for identification.
Communications: Correspondence, enquiries, emails, telephone communications and other business-related exchanges.
Contractual and engagement information: Information relating to prospective or existing advisory engagements, contractual arrangements and the provision of professional services.
Advisory-related information: Where necessary for a particular engagement, information concerning personal, family, professional, corporate, immigration, financial or international matters.
Supporting documentation: Where required, identification documents, immigration documentation, corporate records, official correspondence and other relevant materials.
Technical information: IP addresses, device and browser information, access times, requested resources and other technical information generated through the operation of the website.
The processing of such information is limited to what is necessary or otherwise lawfully permitted for the relevant purpose.
5. Sources of Personal Data
Personal data is ordinarily obtained directly from the individuals concerned, including through enquiries, correspondence and advisory engagements.
Where lawful and necessary, personal data may also be obtained from publicly available sources, official registers, appointed professional advisers, business partners or other authorised third parties.
Applicable transparency requirements are observed where information is obtained indirectly, subject to any statutory exemptions.
6. Purposes of Processing
Personal data may be processed for the following purposes:
a) Operating, maintaining, securing and improving the website;
b) Receiving, assessing and responding to enquiries;
c) Establishing, performing and administering contractual and advisory relationships;
d) Assessing complex matters and developing individual strategic solutions;
e) Coordinating international administrative, professional and advisory services;
f) Communicating with clients, professional advisers, service providers and competent authorities;
g) Complying with legal, regulatory, accounting and tax obligations;
h) Managing internal administration, records and invoicing;
i) Protecting legitimate interests, including information security, business continuity and the establishment, exercise or defence of legal claims.
Any additional processing is undertaken only where permitted under applicable law.
7. Legal Bases under the GDPR
Where the GDPR applies, personal data may be processed on the following legal bases, as appropriate to the particular processing activity:
Article 6(1)(b): Performance of a contract or steps taken at the request of the data subject prior to entering into a contract;
Article 6(1)(c): Compliance with a legal obligation;
* Article 6(1)(f): Legitimate interests pursued by the controller or a third party, subject to the applicable balancing requirements;
* Article 6(1)(a): Consent, where valid consent has been obtained.
Processing of special categories of personal data under Article 9 GDPR requires an additional applicable condition under Article 9(2).
The foregoing legal bases are applied only where their respective requirements are satisfied.
8. Website Hosting and Platform
The website is hosted on Squarespace. When a page is requested, the platform processes technical information such as IP address, browser and device information, requests and security logs as necessary to provide, stabilize and protect the website.
The four contact and consultation forms use native Squarespace integration with Google reCAPTCHA Enterprise. Squarespace loads reCAPTCHA on form pages before a cookie-banner choice to detect automated submissions and prevent spam and abuse. Technical and interaction data may be processed, and the _GRECAPTCHA cookie may be set even if optional cookies are rejected. Form notifications are configured for berger@bergerstrategy.com.
Squarespace processes website and form data under the terms applicable to the account and may use sub-processors. Squarespace has not yet provided the current account-specific sub-processor list or the specific recipients, transfer mechanisms, and retention periods applicable to its native reCAPTCHA integration. Processing outside Switzerland, particularly in the United States, may occur.
Further information: https://www.squarespace.com/privacy
9. Contact Forms and Communications
Where an individual contacts Berger&Strategies Consulting by means of a website contact form, email, telephone or other communication channel, the information provided is processed for the purpose of receiving, assessing and responding to the enquiry.
This may include the individual’s name, contact details, the subject matter of the enquiry and the content of the communication.
Where an enquiry concerns a potential advisory engagement, the information may also be processed for pre-contractual purposes.
Individuals are advised not to submit identity documents, banking records or other highly sensitive materials through a general website contact form unless a suitable transmission method has been agreed.
10. Advisory Engagements and Confidentiality
In the course of providing strategic and internationally oriented advisory services, Berger&Strategies Consulting may process information of a sensitive or confidential nature.
Such information is handled in accordance with applicable law, the relevant engagement requirements and appropriate confidentiality and security measures.
Disclosure to external professional advisers or service providers is limited to what is necessary and legally permissible for the relevant engagement.
Additional contractual confidentiality or data protection arrangements may be implemented where appropriate.
Nothing in this Privacy Policy shall be construed as establishing a statutory professional privilege or secrecy obligation that does not otherwise apply.
11. Recipients of Personal Data
Where necessary and lawful, personal data may be disclosed to the following categories of recipients:
a) Website hosting, information technology and communications service providers;
b) External lawyers, tax advisers, fiduciaries and other professional specialists;
c) Banks, financial institutions and other regulated service providers, where required for a specific engagement;
d) Public authorities, official registers and administrative bodies;
e) Other contracted service providers or professional partners whose involvement is necessary for a legitimate purpose.
Any such disclosure is subject to the applicable legal requirements and appropriate safeguards.
Personal data is not disclosed to third parties without a lawful basis or legitimate purpose.
12. International Transfers of Personal Data
Processing by Squarespace and security services may take place outside Switzerland, particularly in the United States. Squarespace states in its contractual documents that safeguards are used for international transfers. The current account-specific sub-processor list and the specific transfer chain for the native reCAPTCHA integration have not yet been received. The recipient countries and transfer bases for the concrete processing therefore cannot yet be specified. International advisory engagements may also require disclosures to countries relevant to the specific matter. Transfers take place only where permitted under the Swiss FADP and, where applicable, GDPR Articles 44 et seq.
13. Cookies and Similar Technologies
The Squarespace cookie banner is enabled. Visitors can accept cookies, reject all non-essential cookies, or manage their choices. A pill link to cookie settings remains available. Non-essential Squarespace cookies are set to “Restricted” in the website settings, and activity-log data is excluded from Analytics.
Depending on the site features used, Squarespace may use necessary technical cookies and storage values, as well as identifiers that remember cookie choices. Squarespace lists ss_performancecookiesAllowed and ss_marketingcookiesAllowed (each for up to 30 days) as possible choice identifiers. Actual storage can vary by browser, page, and choice. Squarespace documents the Analytics cookies ss_cid, ss_cpvisit, ss_cvisit, ss_cvr, and ss_cvt; these are not enabled for ordinary Analytics use in the currently reviewed configuration. A browser-level measurement of every storage value under each choice has not yet been completed.
Google reCAPTCHA Enterprise loads on form pages before a choice and may set _GRECAPTCHA even when optional cookies are rejected. This security function is disclosed separately in the cookie banner. Rejecting optional cookies does not stop reCAPTCHA. Visitors can change their selection through “Cookie settings.”
14. Analytics and Third-Party Services
The current configuration review found the Google Analytics measurement ID, Amazon partner ID, and Meta Pixel field empty; no third-party account is connected under “Connected Accounts.” No external tracking or embedded service other than Google reCAPTCHA Enterprise was found on the reviewed redesign pages. Images and the uploaded font are served through Squarespace CDNs. Google Fonts, maps, video embeds, and social-media tracking were not found.
This inventory is based on current Squarespace settings and the reviewed page resources. It is not a complete measurement of every cookie and local-storage value in every browser and consent state. Squarespace notes that its banner does not automatically block every third-party resource. The specific sub-processor and transfer chain for Squarespace and reCAPTCHA will be added when the relevant provider information is available.
This review reflects the Squarespace settings and public page resources checked on 10 October 2026; it does not establish every browser-level storage value or the account-specific processing chain for native reCAPTCHA described above. Those details remain to be confirmed.
15. Information Security
Berger&Strategies Consulting implements appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, unlawful alteration, disclosure and other unauthorised processing.
The nature and extent of such measures are determined by the sensitivity of the information, the purposes of processing and the associated risks.
Measures may include access restrictions, suitable authentication procedures, encrypted communications and organisational confidentiality controls.
No method of electronic transmission or storage can, however, be guaranteed to be entirely free from security risks.
16. Retention and Deletion
Personal data is retained only for as long as necessary for the relevant processing purposes or as required by applicable statutory retention, accounting, documentation or evidentiary obligations.
Retention periods depend on the nature of the information and the legal requirements applicable to the relevant activity.
Certain business and accounting records may be subject to statutory retention periods of ten years.
Once the relevant purpose and any applicable retention obligations have ceased, personal data is deleted or anonymised where legally and technically appropriate.
17. Rights of Data Subjects
Subject to the conditions, limitations and exceptions established by applicable law, individuals may have the following rights:
a) The right to obtain information concerning the processing of their personal data;
b) The right to request correction of inaccurate personal data;
c) The right to request erasure or destruction of personal data where legally applicable;
d) Where applicable, the right to data portability;
e) Where applicable, the right to object to or request restriction of certain processing activities;
f) The right to withdraw consent with prospective effect.
Requests may be submitted to:
Reasonable evidence of identity may be requested where necessary to prevent unauthorised disclosure.
18. Supervisory Authorities and Complaints
Individuals may contact Berger&Strategies Consulting directly regarding any concerns relating to the processing of their personal data.
They may also have the right to contact a competent data protection supervisory authority in accordance with applicable law.
In Switzerland, the relevant federal supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC).
Where the GDPR applies, competent supervisory authorities within the European Union may also have jurisdiction.
19. External Websites
The website may contain links to third-party websites.
Such websites are operated independently and are subject to the privacy practices and policies of their respective operators.
The inclusion of an external link does not, in itself, establish responsibility for the independent processing activities of the relevant third party.
20. Amendments
Berger&Strategies Consulting reserves the right to amend this Privacy Policy where necessary to reflect changes in applicable law, business operations, technical infrastructure or processing activities.
The version published on the website shall be the current version. Where required by law, affected individuals will be informed separately of material changes.
Berger&Strategies Consulting
In der Au 30
8706 Meilen, Switzerland
berger@bergerstrategy.com
+41 44 597 80 99