Privacy Policy

Last updated: 18 February 2026

Confidentiality and Tax Privacy

As a law firm specialising in cross-border tax matters, we are subject to professional confidentiality obligations under applicable German and Swiss law.
Information provided in the context of tax disputes, adjustments or procedural matters is handled under strict professional secrecy and organisational safeguards.

The protection of sensitive tax-related information (“tax privacy”) is a core professional obligation and forms part of our internal compliance and data protection framework.

1. Controller

The data controller for this website is:
OBENHAUS International Tax GmbH
Holzgasse 4, CH-8001 Zurich, Switzerland
Email: info@steueranwaltskanzlei.com

Note on our two-office structure (Hamburg / Zurich):
We operate with offices in Hamburg and Zurich. Depending on the subject matter of your inquiry, it may be handled by the office that is substantively responsible.

2. Collection and Processing of Personal Data

a) When visiting the website

When you access our website, your browser automatically transmits certain information to our server. This information is temporarily stored in server log files.
The following data may be processed:

  • IP address (and/or a shortened form thereof, depending on server configuration)
  • Date and time of access
  • Requested page / file and URL
  • Referrer URL
  • Browser type and version, operating system
  • Name of your internet service provider

We process this data for the following purposes:

  • Ensuring technical stability and security
  • Ensuring a smooth connection setup and website delivery
  • Preventing misuse and defending against attacks
  • Administrative and troubleshooting purposes

Legal basis: Art. 6(1)(f) GDPR (legitimate interests) and Art. 31(1) revDSG.
Our legitimate interest follows from the purposes stated above.
We do not use server log data to draw direct conclusions about your identity.

b) When contacting us (email, contact form, or similar)

If you contact us, we process the information you provide (for example: name, email address, company, subject matter, and any attachments or content of your message)
in order to handle your request and respond.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps / performance of a contract), Art. 6(1)(f) GDPR (legitimate interests), and Art. 31(1) revDSG.
Where you provide information voluntarily beyond what is necessary, processing may also be based on Art. 6(1)(a) GDPR / Art. 31(1) revDSG (consent).

c) Internal forwarding between Hamburg and Zurich

In order to process your inquiry efficiently and correctly, we may forward your request internally to the office (Hamburg or Zurich) that is substantively responsible.

By contacting us, you consent to this internal forwarding within our organisation to the responsible office,
insofar as this is necessary to handle your inquiry.

3. Disclosure of Data

We do not disclose your personal data to third parties except where necessary for the purposes described in this policy, or where we are legally required to do so.

We may share personal data with third parties in particular if:

  • you have given your express consent (Art. 6(1)(a) GDPR / Art. 31(1) revDSG),
  • disclosure is necessary for the establishment, exercise, or defence of legal claims and no overriding interests prevail (Art. 6(1)(f) GDPR / Art. 31(1) revDSG),
  • we are legally obliged to disclose data (Art. 6(1)(c) GDPR / Art. 31(1) revDSG),
  • disclosure is necessary for contract performance or pre-contractual measures (Art. 6(1)(b) GDPR / Art. 31(1) revDSG),
  • we use service providers (processors) who support us in operating the website and our IT systems (e.g., hosting, email, security, website maintenance) under appropriate contractual safeguards.

4. Cookies and Analytics

a) Cookies

Our website may use cookies or similar technologies that are necessary for the technical operation and security of the website.
If optional cookies (e.g., analytics or marketing cookies) are used, they are typically only set with your consent, depending on your cookie settings and configuration.

b) Google Analytics (if enabled)

If Google Analytics is enabled on this website, it is used to analyse website usage.
Google Analytics typically uses cookies and processes usage information which may be transmitted to and stored on Google servers.
Depending on your configuration, IP anonymisation and other privacy settings may be applied.

Legal basis: Art. 6(1)(a) GDPR (consent) and Art. 31(1) revDSG (consent), where applicable.
If you do not consent (or withdraw consent), analytics will not be used (where configured accordingly).

You can also prevent the storage of cookies via your browser settings. Please note that this may limit website functionality.
If you wish to opt out of Google Analytics, you may use Google’s browser add-on (where available):
https://tools.google.com/dlpage/gaoptout?hl=en

Important: If you do not use Google Analytics (or use a different analytics solution), this section should be adjusted accordingly.

5. Data Retention

We retain personal data only as long as necessary for the purposes stated in this policy, or as required by statutory retention obligations,
or as long as necessary to establish, exercise, or defend legal claims.

6. Data Transfers to Third Countries

Where service providers are located outside Switzerland or the European Economic Area (EEA), personal data may be transferred to third countries.
In such cases, we implement appropriate safeguards, such as adequacy decisions, standard contractual clauses, or other measures required by applicable law.

7. Data Subject Rights

You have the right to:

  • request access to your personal data (Art. 15 GDPR / Art. 25 revDSG),
  • request rectification of inaccurate data (Art. 16 GDPR / Art. 32 revDSG),
  • request deletion, where legally applicable (Art. 17 GDPR / Art. 32 revDSG),
  • request restriction of processing, where applicable (Art. 18 GDPR),
  • receive your data in a structured, commonly used format and request transfer, where applicable (Art. 20 GDPR),
  • withdraw consent at any time, with effect for the future (Art. 7(3) GDPR / Art. 31 revDSG),
  • lodge a complaint with a supervisory authority (Art. 77 GDPR; and under Swiss law with the competent authorities, where applicable).

8. Right to Object

If we process personal data based on legitimate interests (Art. 6(1)(f) GDPR), you have the right to object to such processing
on grounds relating to your particular situation. If the objection concerns direct marketing, you may object at any time.

To exercise your rights, please contact us at:
OBENHAUS International Tax GmbH

9. Data Security

We use appropriate technical and organisational security measures.
This website uses TLS/SSL encryption. You can recognise an encrypted connection by the lock symbol in your browser address bar.