Legal›Privacy Notice
Isak Legal, Michael Isak, Zunstrasse 11, 8152 Glattbrugg, Switzerland, is responsible for the processing described in this notice.
For privacy enquiries or to exercise your rights, contact mailbox@isak.ch.
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP). Where the EU General Data Protection Regulation (GDPR) or UK GDPR applies to particular processing, the additional requirements and rights under those laws also apply.
This website does not use cookies, analytics or advertising trackers. Fonts and other website resources are served from our own web server, without embedded third-party services.
Our hosting provider in Europe (EU/EEA) processes technical connection data, including IP addresses, browser information, dates and times of access, and pages requested. These data are used to deliver, secure and troubleshoot the website. Server logs are retained only for as long as those purposes require.
Following a link to an external website takes you to a service governed by its own privacy arrangements.
If you select a language, your preference is stored in your browser's local storage so that the website can display your preferred language on future visits.
The stored preference remains on your device and is not used for tracking. You can remove it through your browser settings.
When you contact us, we process the information you provide, such as your name, contact details, organisation, the subject of your enquiry and the parties involved. We use this information to respond, carry out conflict checks and consider whether we can assist.
Please initially provide only an outline of the matter and the information needed for these purposes. Email is not a fully secure means of communication. Arrangements for exchanging sensitive documents can be made with us.
Calls to our office number are answered by an AI receptionist provided through ElevenLabs. It identifies itself at the start of the call and explains that a written record will be made. You can contact us by email instead if you prefer not to use the automated service.
Audio recording storage is disabled for the receptionist. Your speech is nevertheless processed during the call to produce a transcript and summary and, where needed, an English translation. These written records are delivered to our enquiries inbox.
We process the information you provide, such as your name, preferred contact details and the outline of your enquiry, to respond and consider whether we can assist. We also process technical call information needed to operate the service and deliver messages.
Processing involves our telecommunications provider, ElevenLabs and its relevant AI and infrastructure providers, and our hosted message-delivery and email services. This includes processing in the United States.
The receptionist is configured to delete its transcripts and derived conversation fields from ElevenLabs after seven days. Copies delivered to us are retained separately under the criteria described below. Deletion from the receptionist platform does not automatically delete copies in our inbox or matter records.
Automated transcription, summaries and translations may contain errors. We check material details with you where needed. The receptionist does not assess legal matters or decide whether we will accept instructions.
Please provide only an outline of your enquiry and your preferred contact details. Avoid confidential or sensitive information on this service, including when calling about an existing matter.
Where we are engaged, we process personal data as necessary to provide our services, communicate with clients and other relevant parties, and administer the engagement.
This may include information obtained from clients, their representatives, counterparties, professional advisers, public registers, courts, authorities and other sources relevant to the matter.
We also process information to comply with applicable legal and professional obligations, including conflict checks, record-keeping and, where applicable, anti-money-laundering and sanctions requirements.
We handle information received from clients and prospective clients in accordance with applicable professional confidentiality obligations.
Under the FADP, we process personal data in accordance with the applicable principles of lawfulness, good faith, proportionality, transparency and purpose limitation.
Where the GDPR or UK GDPR applies, we rely on the legal basis appropriate to the processing:
Where information falls within a specially protected category, we also require an applicable condition permitting that processing, such as necessity for establishing, exercising or defending legal claims.
Any consent required for the use of the automated telephone service is addressed separately from the basis for handling the resulting enquiry.
We disclose personal data only where needed for the purposes described in this notice or where otherwise permitted or required by law.
Recipients may include:
Where a service provider processes personal data on our behalf, we use appropriate contractual arrangements governing that processing.
We do not sell personal data or disclose it to third parties for their own marketing purposes.
Our website is hosted in Europe (EU/EEA). Our email and hosted message-delivery services also involve processing in the EU/EEA. EU/EEA member states are recognised under Swiss law as providing an adequate level of data protection.
The automated telephone service involves processing by ElevenLabs and relevant service providers, including in the United States.
Where applicable to the recipient and transfer, transfers to the United States rely on recognised adequacy arrangements, including the Swiss-US Data Privacy Framework, the EU-US Data Privacy Framework or its UK Extension. Where a transfer is not covered by an applicable adequacy arrangement, we use appropriate safeguards, including standard contractual clauses with the adaptations required by Swiss law or the UK Addendum, as relevant.
An engagement may require disclosures to recipients in other jurisdictions. Where necessary, we provide further information about those disclosures in connection with the matter.
You may contact us for information about the safeguards applicable to a transfer and how to obtain a copy, subject to necessary redactions to protect confidential information and the rights of others.
We retain personal data for as long as needed for the purposes for which it was collected and for any further period required by applicable legal or professional obligations.
The retention period depends on the record and its purpose. Information relating to an enquiry that does not lead to an engagement is not automatically retained for ten years. We may retain information where needed to deal with the enquiry, maintain necessary conflict records, comply with obligations, or establish, exercise or defend legal claims.
Client and business records are retained in accordance with the obligations applicable to them. Certain business records must generally be retained for ten years under Swiss law.
The receptionist's seven-day setting applies to its transcripts and derived conversation fields at ElevenLabs. Messages delivered to us, related correspondence and any evidence of notice or consent that must be retained are governed by their respective purposes and retention requirements.
We delete information, or reduce it to what remains necessary, when the relevant purposes and obligations no longer require its retention.
We use technical and organisational measures appropriate to the nature of the information and the risks of processing it. These include access restrictions and measures to protect communications and systems.
No means of electronic communication or storage is entirely secure. Please contact us before sending sensitive documents so that suitable arrangements can be made.
Depending on the applicable law and the circumstances, you may have rights to:
These rights are subject to applicable conditions and exceptions, including legal retention requirements, professional confidentiality and the rights of others.
To exercise your rights, contact mailbox@isak.ch. We may request information reasonably necessary to verify your identity.
You may also contact or complain to a competent supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC). Where the EU GDPR applies, you may complain to a competent EU supervisory authority, including in the Member State of your habitual residence, place of work or the alleged infringement. Where the UK GDPR applies, you may complain to the Information Commissioner's Office (ICO).
We may update this notice to reflect changes in our services, processing or legal obligations. The version published on this website identifies the date of the notice.
Version: 26 October 2026.
Find capabilities, client updates, and more