Legal
Privacy Policy
Effective: February 2026
1. Introduction
Auditsuisse Assurance AG and its US-registered CPA firm affiliate ("Auditsuisse," "we," "us," or "our") are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, engage our services, or otherwise interact with us.
2. Information We Collect
We may collect the following categories of personal information:
- Contact Information: Name, email address, phone number, company name, and job title when you submit inquiry forms or request consultations.
- Engagement Data: Information provided during audit engagements, including business records, system descriptions, and control documentation.
- Website Usage Data: IP address, browser type, operating system, referring URLs, pages visited, and time spent on pages, collected via cookies and analytics tools.
- Communication Records: Emails, chat transcripts, and other correspondence related to service inquiries or active engagements.
3. How We Use Your Information
We use your personal information for the following purposes:
- Responding to inquiries and providing requested audit and compliance services
- Managing client relationships and engagement deliverables
- Improving our website, services, and client experience
- Sending relevant industry updates and service information (with your consent)
- Complying with legal obligations, professional standards, and regulatory requirements
- Protecting our rights, property, and the security of our systems
4. Legal Basis for Processing (EU/Swiss)
For individuals in the European Economic Area and Switzerland, we process personal data under the following legal bases:
- Contract Performance: Processing necessary to deliver our audit and consulting services
- Legitimate Interests: Business development, service improvement, and security purposes
- Consent: Marketing communications and non-essential cookies
- Legal Obligation: Compliance with professional standards, tax regulations, and regulatory requirements
5. Information Sharing
We do not sell your personal information. We may share information with:
- Service Providers: Trusted third parties who assist with website hosting, analytics, and business operations, bound by contractual data protection obligations
- Professional Bodies: AICPA and relevant regulatory authorities as required by professional standards and peer review obligations
- Legal Authorities: When required by law, subpoena, or to protect our legal rights
- Affiliated Entities: Between our US and Swiss entities for engagement delivery and business operations
6. International Data Transfers
As a US and Swiss based firm, your data may be transferred between the United States and Switzerland. Switzerland has been recognized by the European Commission as providing an adequate level of data protection. For transfers to the US, we rely on Standard Contractual Clauses and the EU-US Data Privacy Framework where applicable.
7. Data Retention
We retain personal information for as long as necessary to fulfill the purposes described in this policy, comply with professional standards (which typically require retention of audit working papers for a minimum of 7 years), and meet legal obligations. Website usage data is retained for up to 26 months.
8. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access to your personal data and a copy of the information we hold
- Rectification of inaccurate or incomplete information
- Erasure of your personal data (subject to legal retention requirements)
- Restriction of processing in certain circumstances
- Data portability — receiving your data in a structured, machine-readable format
- Objection to processing based on legitimate interests
- Withdrawal of consent at any time for consent-based processing
To exercise any of these rights, please contact us at the address below.
9. Cookies
Our website uses cookies and similar technologies to enhance your browsing experience and collect usage analytics. Essential cookies are necessary for site functionality. Analytics cookies help us understand how visitors interact with our website. You can manage cookie preferences through your browser settings.
10. Security
We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit and at rest, access controls, regular security assessments, and employee training. As a firm that audits others' security controls, we hold ourselves to the highest standards.
11. Contact Information
For privacy-related inquiries or to exercise your data rights, please contact:
Auditsuisse Assurance AG
Data Protection Officer
Email: privacy@auditsuisse.com
If you are located in the EU or Switzerland and are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.