Data protection

Privacy Policy

This Privacy Policy explains how Grande Garcia GmbH collects and processes personal data (i.e., data that directly or indirectly identifies natural persons) on the website www.grandegarcia.com, in connection with client relationships, and in response to job applications. The entity responsible for the processing of personal data described in this Privacy Policy is Grande Garcia GmbH, Moosstrasse 20, 9014 St. Gallen cesar@grandegarcia.com

1. Website www.grandegarcia.com

The website is provided by Grande Garcia GmbH.

When you contact Grande Garcia GmbH via the website, the information you provide—as well as any information provided by your device (name, email address, IP address, etc.)—will be stored in order to process your inquiry and to respond to incoming requests. You are not required to provide personal data; however, we may be unable to respond to your inquiry if insufficient information is provided. Please note that any communication via email is neither secure nor confidential.

When you visit the website, the web server automatically collects information about your device, specifically the IP address associated with your device. This is a technical necessity and essential for delivering content. This information is not linked to your personal data.

Grande Garcia GmbH will not disclose any personal data to third parties without your consent, unless required by law, ordered by a court or government agency, or necessary to enforce legal claims. Web hosting is provided by a contracted provider in Switzerland. Access to the data is also granted to the contracted web designer and external IT service providers.

Personal data is stored only for as long as is necessary for the purpose for which it was collected, or as long as there is a legal obligation or a legitimate interest in retaining it (e.g., for evidentiary purposes or for IT security).

2. Client-Attorney Relationships

Grande Garcia GmbH and its employees process personal data that they receive from you or relevant third parties, or collect themselves, in the course of the client relationship.

You or the data subjects provide certain personal data directly to Grande Garcia GmbH or its employees when you or the data subjects contact Grande Garcia GmbH or its employees—particularly via email or telephone—to inquire about their services. This includes, for example, name and contact details, as well as information about the data subject’s role within the company or organization for which you or the respective contact persons work, or on whose behalf you or the contact person contact Grande Garcia GmbH or its employees. Grande Garcia GmbH and its employees also process personal data that they receive in correspondence with third parties (in particular clients, counterparties, authorities, and courts, as well as their employees or other contact persons) within the scope of the client relationship (e.g., name, contact details, date of birth, details regarding employment status, income and financial situation, family circumstances, or health status). In addition, Grande Garcia GmbH and its employees collect certain personal data themselves (e.g., from public registers or websites).

The types of personal data mentioned are primarily processed by Grande Garcia GmbH and its employees for the purpose of providing, documenting, and billing legal services.

To achieve the purposes described in this Privacy Policy, Grande Garcia GmbH or its employees may need to disclose personal data to the following categories of recipients in particular: external service providers, clients, counterparties and their legal representatives, business partners with whom the provision of legal services may need to be coordinated, as well as government agencies, courts, and arbitration tribunals.

Grande Garcia GmbH and its employees may transfer personal data to recipients (in particular clients, counterparties, and government agencies, courts, and arbitration tribunals) who, in turn, process the personal data in other countries, including those that do not guarantee a level of data protection comparable to that under Swiss law. This is done on the basis of consent or standard contractual clauses, or when necessary to fulfill a contract or to enforce legal claims.

Grande Garcia GmbH stores personal data only for as long as is necessary to fulfill the client relationship, as required by legal retention and documentation obligations, or where there is an overriding private or public interest. Grande Garcia GmbH takes reasonable and appropriate measures to protect personal data against loss, unauthorized alteration, or unauthorized access by third parties. If you provide personal data through a third party (e.g., through your employees or other contacts), it is your responsibility to inform them in general terms about the processing by legal service providers (such as Grande Garcia GmbH) or other external service providers (e.g., in a privacy policy for employees).

Grande Garcia GmbH and its employees may engage external IT service providers in the course of handling client matters. In addition, certain IT services and communication tools are used that may pose data security risks (e.g., email, video conferencing). It is your responsibility to inform Grande Garcia GmbH and its employees of any specific security measures you wish to implement.

Grande Garcia GmbH and its employees have a legitimate interest in processing personal data for the purposes stated above. In addition, some processing is necessary to fulfill contractual obligations toward you or legal obligations (e.g., retention requirements).

3. Job Applications

When you apply for a position, we collect and process the relevant data for the purpose of reviewing your application, conducting the application process, and, if your application is successful, preparing and concluding the relevant contract.

To this end, in addition to your contact information and the details contained in our communications with you, we process, in particular, the data included in your application materials and any additional information we may obtain about you—for example, from professional social networks, the internet, the media, and references—provided that you consent to our obtaining references.

4. General Information

Consent given for the collection or disclosure of personal data may be revoked at any time; however, this does not affect any data processing that has already taken place.

Data subjects have, in particular, the right to access the personal data stored about them and to know the purpose of the data processing; the right to rectification, as well as to erasure or restriction of the processing of their personal data; the right to object to the processing; the right to lodge a complaint with a competent supervisory authority; and the right to data portability. These rights are subject to conditions and exceptions. To the extent permitted or required by law, Grande Garcia GmbH may refuse requests to exercise these rights, with the result that personal data may be retained or otherwise further processed for legal reasons, even if a request for erasure or restriction of processing has been made.

Consent to this Privacy Policy is not required. This Privacy Policy simply provides information about the nature, scope, and purpose of the use of personal data by Grande Garcia GmbH and its employees.

Grande Garcia GmbH reserves the right to unilaterally amend the content of this Privacy Policy at any time and without notice. The most recent version published on the website www.grandegarcia.com shall apply. We therefore recommend that you regularly review Grande Garcia GmbH’s Privacy Policy on the website www.grandegarcia.com.

Grande Garcia, LLC

Version as of January 1, 2026