NeriLaw NeriLaw
Nerilaw

Privacy Policy

cover-expertise
Edition — July 30, 2026 Reference — nFADP / GDPR-CH-2026 Scope — clients, prospects, correspondents
Art.01

Preamble

What this document covers, and why it exists.

Nerilaw applies to the protection of the data entrusted to it by its clients and correspondents the same standards it applies to the practice of law: rigour, discretion and traceability. This policy describes how personal data is collected, used, stored and protected in the course of our mandates and when visiting our website, in Geneva, Paris and Marbella.

It is drawn up in accordance with the Swiss Federal Act on Data Protection (nFADP, in force since 1 September 2023) and, where the General Data Protection Regulation (GDPR) applies to a processing operation — in particular for our Paris and Marbella offices — with the provisions of the latter.

Art.02

Data controller

The data controller within the meaning of art. 5 let. j nFADP is:

Entity

Nerilaw, Attorneys — Law firm registered with the Geneva Bar
Rue Saint-Léger 2, 1204 Geneva, Switzerland

For any question relating to this document, the partner in charge of data protection can be reached at the contact details set out in Art.12.

Art.03

Attorney-client privilege

Beyond general data-protection obligations, information provided in the context of a mandate is covered by the attorney’s professional secrecy (art. 321 of the Swiss Criminal Code and art. 13 of the Federal Act on the Freedom of Movement for Lawyers). This secrecy is absolute and prevails, in its effects, over third-party access requests, including from authorities, subject to the exceptions provided by law.

Practical scope

Communications relating to a matter are never disclosed to third parties without your express instruction, nor used for commercial or profiling purposes.

Art.04

Categories of data collected

  • Identification data — name, capacity, address, contact details.
  • Mandate data — documents, correspondence, financial or personal information required to handle the matter.
  • Billing data — bank details, tax information relating to fees.
  • Browsing data — limited technical data collected when visiting the website (see Art.10).

This data is collected directly from you, from your representatives or, in the context of contentious mandates, from authorities, courts or opposing parties.

Art.05

Purposes and legal bases

PurposeBasis
Performance of the mandateMandate agreement / legitimate interest in the proper performance of legal services
Billing & accountingStatutory bookkeeping obligations
Conflict-of-interest checksProfessional conduct rules of the Bar
Anti-money-launderingStatutory obligations (AMLA, where applicable)
Institutional communicationConsent, revocable at any time
Art.06

Recipients and processors

Data is shared only with the persons strictly necessary to the performance of the mandate: correspondent lawyers, experts, notaries, courts and competent authorities, as well as our technical service providers (hosting, secure messaging, accounting), all bound by contractual confidentiality undertakings equivalent to our own.

No data is sold, rented or used for advertising purposes.

Art.07

International transfers

Nerilaw has offices in Geneva, Paris and Marbella. In cross-border matters, data may be transferred between our offices or to correspondents located outside Switzerland. Such transfers only take place to countries recognised as providing an adequate level of protection, or are governed by standard contractual clauses approved by the Federal Data Protection and Information Commissioner (FDPIC).

Art.08

Retention period

Data relating to a mandate is kept for the duration of the mandate and thereafter for the limitation period applicable to the attorney’s liability (in principle ten years), in accordance with the professional rules of the Geneva Bar. Accounting records are kept for ten years in accordance with Swiss law. After these periods, data is destroyed or irreversibly anonymised.

Art.09

Your rights

In accordance with the nFADP and, where applicable, the GDPR, you have the following rights over your data:

RightScope
AccessObtain confirmation and a copy of the data concerning you
RectificationHave inaccurate or incomplete data corrected
ErasureRequest deletion, subject to statutory retention obligations
ObjectionObject to processing based on legitimate interest
PortabilityReceive your data in a structured format, where applicable

These rights are exercised without prejudice to the professional secrecy described in Art.03, which may limit their scope with respect to data covered by a mandate.

Art.10

Cookies and website

Our website uses a deliberately limited number of trackers: cookies strictly necessary for its operation and, with your consent, an anonymised audience-measurement tool. No advertising or third-party tracking cookies are set.

Art.11

Data security

Files are hosted on encrypted infrastructure with restricted, logged access. Sensitive exchanges are carried over secure messaging upon request. These measures are reviewed periodically in light of the state of the art and the requirements of the Bar.

Art.12

Contact and complaints

To exercise your rights or for any question relating to the processing of your data:

Partner in charge — data protection

Nerilaw, Attorneys — Geneva
Rue Saint-Léger 2, 1204 Geneva, Switzerland
info@nerilaw.ch · +41 22 908 07 00

If you consider that your rights are not being respected, you may lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Berne — www.edoeb.admin.ch.

Loading…
Loading the web debug toolbar…
Attempt #