Privacy Policy

This privacy policy explains how Ludwig Limbeck AG processes personal data in connection with the website www.zugtrust.ch and the services offered through it.

1. Controller

Ludwig Limbeck AG
Sinserstrasse 67
CH - 6330 Cham
Switzerland

Phone	+41 41 781 07 81
E-mail	info@zugtrust.ch

zugtrust.ch is a service of Ludwig Limbeck AG. Please send any data protection enquiries to the address above or by e-mail to info@zugtrust.ch.

2. Applicable law

We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and the Data Protection Ordinance (DPO). Where the EU General Data Protection Regulation (GDPR) applies in an individual case, in particular because we provide services to persons resident in the EU or the EEA, its provisions apply in addition. References to legal bases under the GDPR relate only to such cases.

3. Personal data processed and purposes

3.1 Visiting the website (server log files)

When you access the website, your browser automatically transmits the following data to our server:

• IP address
• date and time of access
• page or file accessed
• referrer (previously visited page)
• browser type and version, operating system

We use this data to provide the website, to ensure its security and stability and to prevent misuse or attacks. It is not combined with other data to identify individual visitors. Log files are deleted after a short period unless they are needed to investigate a security incident.

Legal basis under the GDPR: Art. 6(1)(f) (legitimate interest in the secure operation of the website).

3.2 Contact, enquiry and order forms

If you contact us by e-mail, phone, WhatsApp or through a form on the website (e.g. request a quote, domicile enquiry, consultation request, company formation portal), we process the data you provide, usually your name, company, contact details and the content of your enquiry. Mandatory fields are marked in each form.

We use this data to respond to your enquiry, prepare a quote and, where applicable, prepare and perform a contract.

Legal basis under the GDPR: Art. 6(1)(b) (pre-contractual measures, contract) or Art. 6(1)(f) (legitimate interest in handling enquiries).

If you contact us via WhatsApp, data is also processed by the provider WhatsApp (Meta) in accordance with its own privacy policy. If you wish to avoid this, please contact us by e-mail or phone.

3.3 Mandates, domicile and company formation services

In the course of a mandate, we process the data required to provide our services, in particular identification and contact details, information on companies, beneficial owners and officers, correspondence, accounting and tax documents, and payment data.

As a domicile provider, we are subject to the Swiss Anti-Money Laundering Act (AMLA). We are therefore required to identify our contracting parties and beneficial owners, to obtain and retain the necessary documents (e.g. copies of identity documents, commercial register extracts, information on the origin of assets) and to monitor the business relationship. This data may be disclosed to the supervisory authority, our self-regulatory organisation and public authorities to the extent provided by law.

Where we act vis-à-vis commercial register, tax or other authorities (e.g. company formations, relocations of registered office, register amendments), we disclose the necessary data to these bodies and, where applicable, to notaries.

Legal basis under the GDPR: Art. 6(1)(b) (contract) and Art. 6(1)(c) (legal obligation).

3.4 Job applications

We process application documents solely for the purpose of the application procedure. If no employment relationship is concluded, we generally delete the documents two months after the procedure has ended, unless you have consented to longer retention.

3.5 Newsletter and information by e-mail

We only send a newsletter with your consent. We may send existing clients information on our own similar services, provided they were informed of the option to object when their contact details were collected (Art. 3 para. 1 let. o of the Swiss Federal Act against Unfair Competition). You can unsubscribe at any time via the link in the e-mail or by notifying info@zugtrust.ch.

4. Cookies and consent management

Our website uses cookies and similar technologies. We use technically necessary cookies to make the website work (e.g. session management, form protection, storing your cookie settings). All other services – web analytics, advertising measurement and maps – are only activated once you have given your consent via the cookie banner.

We store your choice in a cookie (“data-privacy”) for 12 months. You can change or withdraw your consent at any time via the “Settings” link in the website footer. Withdrawal takes effect for the future.

Legal basis under the GDPR for non-essential cookies: Art. 6(1)(a) (consent).

5. Google Analytics 4

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

Using cookies and similar technologies, Google Analytics collects information on how the website is used, e.g. pages visited, time spent, source of the visit, device and browser information, and interactions such as clicks on e-mail addresses, phone numbers, WhatsApp links or PDF documents. Google Analytics 4 does not store IP addresses. We use this information to evaluate website usage statistically and to improve our services.

We use Google Analytics in Consent Mode. Without your consent, no analytics cookies are set; in that case Google only receives technically necessary, cookieless signals without a user identifier.

Retention: data is deleted by Google after 14 months.

Further information: policies.google.com/privacy and support.google.com/analytics/answer/6004245

6. Google Ads

We advertise through Google Ads. If you have consented to the “Google Ads” category, information about your visit (e.g. that you reached our website via an ad and whether you submitted a form) is transmitted to Google. We use this to measure the success of our ads and, where applicable, to show ads on other websites to people who have visited our website (remarketing). We only receive statistical reports from Google that do not identify individuals.

The provider is Google (see section 5). Further information and settings for personalised advertising: adssettings.google.com

7. Advertising in ChatGPT – OpenAI Measurement Pixel

We advertise in ChatGPT. To measure the success of these ads, we use the OpenAI Measurement Pixel. For persons in Switzerland and the EEA, the responsible entity is OpenAI Ireland Limited, Dublin, Ireland (“OpenAI”).

The pixel is only activated once you have consented to the “OpenAI Ads” category. Before that, it does not send any data. After your consent, the following data is processed:

• an identifier passed to our website when you arrive via an ad in ChatGPT (cookie “__oppref”, retention 30 days)
• a randomly generated browser identifier (cookie “__obref”, retention 12 months)
• events on our website (e.g. page view, submission of an enquiry) and technical information about your browser and device

OpenAI uses this data to determine whether an ad led to a visit or an enquiry and provides us with aggregated reports. OpenAI processes the data as an independent controller in accordance with its own privacy policy. If you withdraw your consent, both cookies are removed.

Further information: openai.com/policies/privacy-policy and openai.com/policies/ad-tools-dpa

8. Google Maps

To show our location, we embed maps from Google Maps (provider: Google, see section 5). The map is only loaded once you have consented to the “Google Maps” category. When the map loads, your browser transmits in particular your IP address, the page visited and technical browser information to Google. Google may set cookies in the process. Without consent, the map is not loaded.

Further information: policies.google.com/privacy

9. Google reviews and links to social networks

On the website we display our Google rating and link to our Google Business Profile and to our profiles on LinkedIn, Facebook, Instagram and X. These are simple links; visiting our website does not transmit any data to these providers. Only when you click a link are you taken to the provider’s site, where its privacy policy applies.

10. Service providers (processors)

We use service providers to operate the website and our business processes, in particular for hosting, e-mail, IT operations, accounting and data storage. They process personal data only on our behalf and according to our instructions and are contractually bound to confidentiality and data security.

11. Disclosure abroad

In connection with the services described above, personal data is disclosed in particular to Ireland and the USA.

• Ireland (Google Ireland Limited, OpenAI Ireland Limited) provides adequate data protection according to Annex 1 of the Data Protection Ordinance.
• For the USA, adequate data protection applies to companies certified under the Swiss-U.S. Data Privacy Framework. Google LLC is so certified.
• Where data is disclosed to recipients in countries without adequate data protection, we or the respective providers rely on the European Commission’s standard contractual clauses recognised by the Federal Data Protection and Information Commissioner (FDPIC) or, in individual cases, on your consent.

A copy of the safeguards can be requested from us.

12. Retention and deletion

We process personal data only for as long as necessary for the respective purpose or as required by statutory retention obligations. In particular:

• accounting records and vouchers: 10 years (Art. 958f of the Swiss Code of Obligations)
• identification and due diligence records under the AMLA: at least 10 years after the end of the business relationship (Art. 7 para. 3 AMLA)
• enquiries that do not lead to a mandate: generally 12 months after the last communication

Retention periods for analytics and advertising services are stated in the respective sections. Thereafter, the data is deleted or anonymised.

13. Data security

We take appropriate technical and organisational measures to protect personal data against loss, unauthorised access and misuse. Data transmitted via the website is encrypted (TLS, indicated by “https://” and the padlock symbol in your browser). We treat client data confidentially; our employees are bound to confidentiality.

14. Your rights

Within the scope of applicable data protection law, you have in particular the following rights:

• access to information on whether and which personal data we process about you (Art. 25 FADP)
• rectification of inaccurate personal data (Art. 32 FADP)
• erasure or restriction of processing, unless statutory retention obligations or overriding interests prevent this (Art. 32 FADP)
• delivery or transfer of your personal data in a common electronic format (Art. 28 FADP)
• objection to processing, in particular for direct marketing purposes
• withdrawal of consent with effect for the future

Where the GDPR applies, you have the rights under Art. 15–21 GDPR.

To exercise your rights, please contact us in writing or by e-mail at the address in section 1. We may request proof of identity.

You also have the right to lodge a complaint with the competent supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch. Where the GDPR applies, you may also contact the supervisory authority in your country of residence.

15. Changes

We may amend this privacy policy at any time, in particular in the event of changes to the website, the services used or the legal situation. The version published on the website is authoritative. In case of discrepancies between the German and English versions, the German version prevails.

Last updated: 25 September 2026