Skip to content
Book an appointment

Legal

Privacy policy

Tax documents are among the most sensitive data you can hand over. This page explains what we do with your information, how long we keep it and who else gets to see it.

This is a translation for convenience; the German version is legally binding.

Controller

Shehe Atlas Financial Consulting (sole proprietorship, owner Paul Shehe), operator of Steuererklärung Winterthur, Archplatz 2, 8400 Winterthur. If you have any questions about data protection, you can reach us by phone on +41 79 889 30 84 or in writing at the postal address above.

Principle

We process personal data in accordance with the revised Swiss Federal Act on Data Protection (revFADP / revDSG). We only collect data that we need to prepare your tax return or to answer your enquiry. We do not sell data and do not pass it on for advertising purposes.

What data we process

  • Contact details: name, address, email address, phone number — from the appointment or submission form, or from you contacting us directly.
  • Tax-relevant personal data: date of birth, AHV number (Swiss social security number), marital status, religious denomination, details of children, occupation and employer. Information on religious denomination is considered particularly sensitive personal data; we only collect it because the tax return strictly requires it.
  • Tax documents: salary certificates, bank and securities account statements, insurance certificates, medical and dental bills and other supporting documents that you upload or send to us.
  • Technical data: when you visit the website, the IP address, time and page accessed are logged on the server. These logs serve to operate the site and to prevent misuse.

Purpose and legal basis

We process your data to carry out the engagement you give us — preparing and filing your tax return and the related correspondence with the tax authority. Without this data we cannot carry out the engagement.

Disclosure to third parties

Your tax data is transmitted to the competent tax office — that is the purpose of the engagement. Beyond that, we only pass on data if you expressly consent or if there is a legal obligation to do so.

We use the following data processors:

  • Hosting: operation of the website on servers in Switzerland or in the European Economic Area.
  • Email delivery: Resend (Resend, Inc.) for sending confirmations of receipt and internal notifications. The information entered in the form and any attachments are transmitted in the process.
  • Web analytics and advertising: Google Analytics 4 and Google Ads (Google Ireland Ltd., Dublin; parent company Google LLC, USA) — see «Cookies and analytics».
  • Audience measurement: DLM Digital (Zurich, Switzerland), our web agency — see «Cookies and analytics».

Forms and uploads

Data is transferred in encrypted form via HTTPS. Appointment requests, online submissions and uploaded files are stored in our password-protected client management system (servers in Switzerland or the European Economic Area), and we also receive an email notification. Only the responsible people in our office have access.

Cookies and analytics

Our own visitor statistics: To understand which pages are read and how enquiries come about, we record page views, clicks on the phone number and on buttons, and where a visit came from (e.g. a search engine or a campaign). Your browser stores a random identifier in local storage for this — no cookie, no name, and nothing is passed on to third parties. The data stays on our own servers.

Google Analytics 4 and Google Ads: We also use Google Analytics 4 and Google Ads conversion measurement. Google sets cookies for this and processes usage data (e.g. pages viewed, device information, truncated IP address), including in the USA. Google Analytics 4 does not store full IP addresses. This shows us how many enquiries and calls result from our ads. Transfers are based on the Swiss-U.S. Data Privacy Framework or standard contractual clauses. You can prevent this by blocking cookies in your browser or installing Google's browser add-on. See Google's privacy policy for details.

Audience measurement: To improve this website, our web agency DLM Digital (Zurich, Switzerland) measures on our behalf, anonymously, which pages are viewed and which contact channels (phone, WhatsApp, email, form) are used. No cookies are set and no IP addresses are stored; visitors cannot be recognised beyond a single day. Form contents (e.g. name, email, message) are not transmitted to DLM Digital. Data is processed in Switzerland or the EU.

Fonts are served locally; no external font servers are called.

Retention

We keep engagement-related documents for the statutory retention periods — usually ten years after the end of the financial year. Enquiries that do not lead to an engagement are deleted no later than twelve months after the last contact.

Your rights

You have the right to information about the data we process, to have incorrect data corrected, to have data deleted unless a statutory retention obligation applies, and to receive your data in a common format. To exercise these rights, write to the postal address above or give us a call. We may ask for proof of identity.

If you do not agree with how your data is processed, you can contact the Federal Data Protection and Information Commissioner (FDPIC / EDÖB).

Changes

We update this policy when our processing or the legal situation changes. The version published on this page at any given time applies.

Legal notice · Terms