Privacy policy
How Wolf+Bär handles personal data on wolfundbaer.ch: what we collect, which services process it, how long we keep it and the rights you have.
Who is responsible
Wolf & Bär GmbH, the company behind the Wolf+Bär brand, runs wolfundbaer.ch and decides why and how personal data is processed on this website. We are based in Switzerland, so Swiss data protection law applies to everything described here.
- Wolf & Bär GmbH, Stampfenbachstrasse 32, 8006 Zürich, Switzerland
- Email: hello@wolfundbaer.ch
- Or write to us through our contact form
Our full company details are on the imprint page.
We process personal data under the Swiss Federal Act on Data Protection. If you are in the European Union or the European Economic Area, the General Data Protection Regulation (GDPR) applies as well, and the rights described further down are the ones it gives you.
When you visit the website
Server logs
Every time a page is requested, our infrastructure records technical data: the IP address of your device, the date and time, the page requested, the page you came from, your browser and your operating system. We need this to keep the site available, to find errors and to recognise attacks. We do not use it to identify you, and we keep it only as long as it serves those purposes.
The pages are delivered through the network of Cloudflare, Inc. (101 Townsend Street, San Francisco, USA), which also filters malicious traffic before it reaches the site. Cloudflare processes this data on our behalf and under contract. More about it in the Cloudflare privacy policy.
Cookies and similar technologies
Cookies are small files that a website stores in your browser so it can recognise your device on the next page or the next visit. Some of them are needed for basic functions such as a form submission. Others belong to the measurement and advertising services described below, stay for longer and count how often you come back.
You decide what stays: every common browser lets you block cookies, delete them or clear them automatically when you close the window. If you block them, parts of this site, in particular the forms and the booking calendar, may no longer work properly.
Your cookie consent
We use Cookiebot to ask for your consent to cookies that are not strictly necessary and to record your answer. Cookiebot is a service of Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark. It stores your decision and a key for it in your browser, together with your IP address in shortened form, so we can show later what was agreed and when.
Which visitors see the banner depends on the rules that apply where they are, so it may not appear in every country. You can change or withdraw your choice at any time in the cookie banner, or by deleting the cookies in your browser. Withdrawing has effect from that moment on and does not make the earlier processing unlawful.
Your answer is passed on to the Google tools described below through the consent mode Google provides. Without your consent they set no cookies and receive no advertising identifiers, only a signal that a page was viewed.
When you get in touch
Forms and bookings
The contact form, the email gate in front of our free tools and the booking calendar run on HubSpot. When you submit one of them, we receive what you typed (usually your name, your email address, your company and your message), the time of the submission and technical data such as your IP address. We use it to answer you, to send you the material you asked for and to prepare the call you booked.
The data lands in our CRM at HubSpot, Inc. (Two Canal Park, Cambridge, Massachusetts, USA), which processes it on our behalf. Details are in the HubSpot privacy policy.
The chat assistant
The chat window on this site is answered by our own assistant, built by SweetCode, the technology unit of Wolf & Bär GmbH. It runs on our infrastructure, so what you type stays with us and is not handed to an outside chat provider.
We process the messages you write, the contact details you leave and the page you were on when the conversation started, so we can answer you and follow up. In our statistics we also count when a conversation starts, when a link in it is clicked and when someone leaves contact details. Please do not enter sensitive personal data in the chat.
Emails, calls and chat
When you write to us, call us or use the chat window, we keep your message and your contact details so we can pick the conversation up again. If a project comes out of it, we keep the correspondence for as long as the business relationship lasts and afterwards for as long as the law tells us to.
Marketing emails
If you sign up for our emails, we use your address to send them through HubSpot and we record whether an email was opened and which links were clicked. That tells us which topics are worth writing about. Every email carries an unsubscribe link, and unsubscribing also ends this measurement.
Measurement and advertising
We want to know which pages people actually read and which campaigns bring them here. The tools that tell us are listed below, and they all load through Google Tag Manager. For visitors in Switzerland and the EEA, the provider behind them is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager
Tag Manager itself stores no personal data. It is the tool that loads the measurement tags below, which is why it is mentioned here at all.
Google Analytics
Google Analytics counts visits, pages and traffic sources and shows us how people move through the site. It stores an identifier in your browser and uses your IP address to work out an approximate location, usually the country, without storing the address itself. We do not use this data to identify individual visitors. You can switch the measurement off for every website with the Google Analytics opt-out add-on.
Google Ads
We advertise on Google. When you reach the site through one of our ads, a cookie records that click so we can see which campaigns lead to an enquiry. The same technology lets us show ads later to people who have already been here. Neither we nor any other advertiser receives data from this that identifies you personally. Personalised advertising can be switched off in your Google ad settings.
Meta pixel
We advertise on Facebook and Instagram. The Meta pixel records that a page was viewed and that a form was sent, so we can see which of those ads work and show ads to people who have already been here. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, which may pass the data to its parent company in the USA. What Meta does with it is described in the Meta privacy policy. If you have a Facebook or Instagram account, the ad settings there decide what is used for advertising.
The same applies to our advertising on LinkedIn: a tag records that a form was sent, so a campaign can be matched to the enquiry it produced. The provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Details are in the LinkedIn privacy policy, and you can object to the analysis with the LinkedIn opt-out for visitors.
The services behind this website
| Service | What it does here | Provider |
|---|---|---|
| Cloudflare | Delivers the pages, filters attacks | Cloudflare, Inc., USA |
| HubSpot | Forms, booking calendar, CRM, emails, chat | HubSpot, Inc., USA |
| Cookiebot | Asks for and records your cookie consent | Usercentrics A/S, Denmark |
| Google Tag Manager | Loads the measurement tags | Google Ireland Limited, Ireland |
| Google Analytics | Visitor statistics | Google Ireland Limited, Ireland |
| Google Ads | Conversion measurement and advertising | Google Ireland Limited, Ireland |
| Meta pixel | Advertising on Facebook and Instagram | Meta Platforms Ireland Limited, Ireland |
| Advertising on LinkedIn | LinkedIn Ireland Unlimited Company, Ireland | |
| Chat assistant | Answers questions, takes enquiries | SweetCode, part of Wolf & Bär GmbH, Switzerland |
Fonts and scripts come from our own domain, so simply opening a page does not make your browser call a third party. The search on this site runs entirely in your browser: what you type into it never reaches us.
Data sent abroad
Some of these providers are based in the United States or process data there. For transfers to certified US companies, Switzerland has recognised the Swiss US Data Privacy Framework as an adequate level of protection since 15 September 2024. Where a provider is not certified under it, the transfer is covered by the standard contractual clauses together with additional technical and organisational safeguards.
How long we keep your data
- Server logs: as long as we need them for security and troubleshooting, then they are deleted.
- Enquiries and correspondence: for as long as the conversation or the resulting project runs, plus the statutory retention periods (business records in Switzerland have to be kept for ten years).
- Measurement data: for the retention period set in the tool concerned, after which it exists only as an aggregate statistic.
- Marketing emails: until you unsubscribe, plus a note that you did so, so we do not write to you again.
How we protect your data
The site runs over an encrypted connection (HTTPS), so nobody can read along on the way. Access to our CRM is limited to the people at Wolf+Bär who need it and is protected with two factor authentication. Every provider named here works for us under a contract that binds them to data protection and forbids them to use your data for their own purposes beyond what their own policies disclose.
Your rights
What you can ask us to do
- Tell you whether we process data about you and give you a copy of it
- Correct data that is wrong or incomplete
- Delete data, unless a legal duty makes us keep it
- Restrict a processing operation or object to it, in particular to direct marketing
- Hand your data over to you or to another provider in a common file format
- Withdraw consent you gave us, with effect for the future
Write to hello@wolfundbaer.ch and we will deal with it, normally within 30 days. We may ask you for proof of identity first, so that your data does not end up with someone else.
If you think we handle your data wrongly, you can turn to the Federal Data Protection and Information Commissioner in Bern. In the EU and the EEA you can complain to the supervisory authority of the country you live in.
Why we are allowed to process this data
Swiss law lets us process personal data when we do it in good faith, proportionately and for the purposes we have named. Where the GDPR applies, we rely on performing a contract or preparing one (Art. 6(1)(b)), on our legitimate interest in a secure, useful website and in reaching potential clients (Art. 6(1)(f)), on your consent where we have asked for it, for example for marketing emails and for cookies that are not strictly necessary (Art. 6(1)(a)), and on legal obligations such as accounting rules (Art. 6(1)(c)).
Changes to this policy
We update this page whenever the website or the services behind it change, without announcing it separately. The version you are reading is from September 2026.
How to reach us
Questions about this policy, or a request about your data, go to hello@wolfundbaer.ch or through our contact form. A letter works too: Wolf & Bär GmbH, Stampfenbachstrasse 32, 8006 Zürich, Switzerland.