Alltax AG Treuhandgesellschaft,
Alltax AG Wirtschaftsprüfung and
Conto GmbH
Hereinafter: the “Alltax Companies”
Alltax AG Treuhandgesellschaft, Alltax AG Wirtschaftsprüfung and Conto GmbH, each with its registered office in Basel, are hereinafter collectively referred to as the “Alltax Companies”, “we” or “us”. We collect and process personal data relating to you (e.g. clients, contractual partners, etc.), applicants in connection with a recruitment process, and other persons (“Third Parties”).
Protecting your data is important to us in the course of our activities. We treat your personal data confidentially and in accordance with the applicable data protection legislation and this Privacy Notice. This Privacy Notice describes what we do with your data when you use our website www.alltax.ch, use our services, receive advice from us, communicate with us or otherwise interact with us. Where necessary, we may provide you separately with additional information about the processing of your data (e.g. in forms, contractual terms or supplementary privacy notices).
In this Privacy Notice, we use the term “data” synonymously with “personal data”. “Personal data” means data relating to an identified or identifiable individual, and “processing” means any operation performed on personal data, such as collecting, storing, using, modifying, disclosing or deleting it.
If you disclose to us data relating to other persons (e.g. family members, clients, suppliers, etc.), we assume that you are authorised to do so, that the data is accurate and that you have ensured that those persons have been informed of the disclosure (e.g. by providing them with this Privacy Notice in advance).
The controller responsible for the data processing described in this Privacy Notice is:
Alltax AG Treuhandgesellschaft or
Alltax AG Wirtschaftsprüfung or
Conto GmbH
Grosspeteranlage 5
4052 Basel
info@alltax.ch
Telephone +41 (0)61 327 37 37
As a rule, the responsible controller is the Alltax Company with which you are in contact, which provides services to you or which, in the individual case, determines the purposes and means of the relevant data processing.
Depending on the purpose of the processing, the client segment and the area of activity, we collect various types of personal data, which may include sensitive personal data. We primarily process personal data that we receive from our clients, other business partners and other persons involved in the course of our business relationships. We also process data for our internal organisation and in connection with our website and its users. The main categories include, in particular, the following:
Master data: This comprises basic data such as names, contact details, email addresses, telephone numbers, personal details, nationality, date of birth and photographs, as well as information concerning Third Parties (e.g. bank details), etc.
Contract data relating to the performance of mandates: This comprises data generated in connection with the provision of our services and the conclusion of contracts, such as contractual services, data concerning the provision of services, legal form, share capital, income statements, balance sheets, account statements, tax documents, wage and salary data, bank details, health data, minutes, data from the pre-contractual stage, information concerning contract administration (e.g. invoicing) and financial data (e.g. information about financial circumstances for tariff classification), debt enforcement register extracts, information concerning equity interests, as well as other data, some of which may constitute sensitive personal data, etc.
Applicant data: This comprises data generated in connection with an application for employment with us, such as employment history, education and training, references, data from public sources (e.g. social media and the internet) and image data. It may also include information concerning criminal convictions (if such information is collected at all) and, where applicable, other sensitive personal data, etc.
Employee data: This comprises data required in connection with an employment relationship, such as OASI numbers, salary data, health data, social insurance information, information about children, date of employment, function, financial information and bank details; for employees subject to withholding tax, it may also include religious denomination, foreign national permits, information about other gainful activities, information from appraisal interviews, and working-time and holiday records, etc.
Communication data: This comprises data generated in connection with communications between you, us and Third Parties (e.g. by email, telephone, letter or other means of communication), such as the content of emails or letters, your contact details and communication metadata, etc.
Registration and marketing data: This comprises data generated when you register with us (e.g. for a newsletter) or provide information to us (e.g. your email address). It also generally includes data used to send information about events, publications and similar matters (marketing purposes), and may include photographs and videos of events, etc.
Technical data: This comprises data generated when you use our electronic services (e.g. our website), such as your IP address, information about your device’s operating system, the region and time of use, server log files (date, access time and data volume), referring URL and cookies, etc. Technical data generally does not, by itself, allow conclusions to be drawn about your identity. It may, however, be linked with other categories of data (e.g. registration data) and therefore, in certain circumstances, with you personally.
Behavioural and preference data: This comprises data about your behaviour and preferences, such as responses to electronic communications, navigation on the website, interactions with our social media profiles and participation in events, where applicable supplemented by information from Third Parties (including publicly accessible sources).
Other data: This includes, in particular, data generated in connection with administrative or court proceedings (e.g. case files), data collected for health-protection purposes, photographs and video or audio recordings that we create or receive from Third Parties and in which you may be identifiable (e.g. at events or through security cameras in the entrance areas of our offices), participation in events, and data concerning suppliers and other contractual partners, such as responsible employees and advisers, information about services provided, financial information and bank details.
From you: You disclose much of the data we process to us yourself (e.g. in connection with our services or communications with us). Subject to statutory obligations, you are not required to disclose your data to us. However, if you wish, for example, to enter into contracts with us or use our services, you must provide us with certain data.
From Third Parties: We may also obtain data from publicly accessible sources (e.g. debt enforcement registers, the media or the internet, including social media) or receive it from authorities (e.g. municipalities, tax authorities or commercial registers), your employer or principal that has a business relationship or other dealings with us, and other Third Parties (e.g. associations). This includes, in particular, master data, contract data and other data, as well as all other categories of data referred to in Section III and data from correspondence and discussions with Third Parties.
We primarily use the personal data we collect to enter into and perform contracts with our clients and business partners, in particular when providing fiduciary services, tax advice, audit services and management consulting. If you work for such a client or business partner, your personal data may also be affected in that capacity. In addition, to the extent permitted and considered appropriate, we process personal data relating to you and other persons for purposes in which we (and sometimes Third Parties) have an overriding interest corresponding to the relevant purpose.
These purposes include, in particular:
Acceptance, administration and performance of mandates and contracts:
We process personal data in connection with mandates or contracts with you as a client, supplier, service provider or other contractual partner. This includes tax advice, maintaining financial or payroll accounts, preparing annual and consolidated financial statements, business valuations and compliance with statutory obligations in Switzerland and abroad. It also includes enforcing contractual claims (debt collection, court proceedings, etc.), terminating contracts and public communications. We also process data in recruitment processes and in preparation for employment relationships.
Performance of mandates in the areas of fiduciary services, tax, audit or management consulting: In performing mandates, we process data relating to you and Third Parties.
Communication: We process your data in order to communicate with you (e.g. to respond to enquiries, perform contracts and provide support).
Marketing and relationship management: We process data for marketing and relationship-management purposes, for example to send our clients, other contractual partners and other interested persons personalised advertising (e.g. in printed form, by email or through other electronic channels) concerning our services and other news. You may object to such communications at any time or refuse or withdraw consent to being contacted for advertising purposes by notifying us (Section II).
Improving our services and operations: To continuously improve our services (including our website), we analyse, for example, how you navigate our website and which services are used by which groups of persons and in what manner.
Registration: To use certain offers and services (e.g. newsletters), you must register, either directly with us or through our external service providers; we process data for this purpose.
Security purposes and technical and physical access controls: For security purposes, we also maintain visitor lists and use surveillance systems (e.g. security cameras in the entrance areas of our offices). Appropriate signs at the relevant locations inform you of such surveillance systems.
Compliance with laws and with official instructions and recommendations: We may process personal data in order to comply with laws and discharge any statutory duties (e.g. tax-law obligations). Data may also be processed in connection with internal investigations and external investigations (e.g. by a criminal prosecution or supervisory authority or by an appointed private body).
Risk management and corporate governance: We may process personal data for risk management (e.g. protection against criminal activities) and corporate governance, including our corporate organisation (e.g. resource planning) and corporate development (e.g. the acquisition and sale of business units or companies).
Other purposes: These include, for example, training and education, administrative purposes (e.g. master-data administration or accounting), safeguarding our rights, and evaluating and improving internal processes. They also include safeguarding other legitimate interests, which cannot be listed exhaustively.
Where you have consented to our processing of your personal data for specific purposes (for example, when subscribing to newsletters), we process your personal data within the scope of and on the basis of that consent, to the extent that we have no other legal basis and require one. Consent may be withdrawn at any time; withdrawal does not affect processing that has already taken place.
In connection with our business activities, contracts, website, services and legal obligations, or otherwise to safeguard our legitimate interests and for the other purposes set out in Section V, we, to the extent permitted and considered appropriate, also disclose your personal data (including sensitive personal data) to Third Parties, in particular to the following categories of recipients:
Group companies: Each Alltax Company may use your data for its own purposes as described in this Privacy Notice (see Section V).
Service providers: We work with service providers in Switzerland and abroad that process data (i) on our behalf, (ii) as joint controllers with us or (iii) as independent controllers (e.g. IT providers, software suppliers, banks and insurers).
Principals and contractual partners: Our principals and contractual partners where disclosure of your data arises from the contract (e.g. fiduciary bookkeeping or preparation of tax returns). As a rule, recipients process the data under their own responsibility.
Authorities: We may disclose personal data, tax data, etc. to public offices, courts and other authorities (e.g. commercial registers, tax authorities, social insurance institutions and supervisory authorities) in Switzerland and abroad where we are legally obliged or entitled to do so or where this appears necessary to safeguard our interests.
Other persons: This covers other situations in which the involvement of Third Parties follows from the purposes set out in Section V. Other recipients include, for example, Third Parties involved in representation arrangements (e.g. your lawyer or other contact persons designated by you) and persons involved in administrative or court proceedings. In the course of corporate development, we may sell or acquire businesses, business units, assets or companies, or enter into partnerships, which may also result in data being disclosed to persons involved in those transactions. Data that may concern you may also be exchanged in communications with our competitors, industry organisations, associations and other bodies.
All these categories of recipients may in turn engage Third Parties, with the result that your data may also become accessible to them. We can restrict processing by certain Third Parties (e.g. IT providers), but not by others (e.g. authorities and banks).
We process and store personal data mainly in Switzerland and the EU, but in exceptional cases—such as through subprocessors of our service providers—potentially in any country worldwide.
Data may be transferred, in particular, to countries in which our clients, their affiliated companies, counterparties or business partners, or engaged service providers or experts, are located, or in which our clients and their group companies are involved in proceedings.
If a recipient is located in a country without an adequate level of statutory data protection, we contractually require the recipient to comply with the applicable data protection requirements. For this purpose, we use the revised Standard Contractual Clauses of the European Commission, adapted for Switzerland in accordance with the guidance of the Federal Data Protection and Information Commissioner (FDPIC), available here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj. This does not apply where the recipient is already subject to a legally recognised framework ensuring data protection or where we may rely on a statutory exception. An exception may apply, in particular, to legal proceedings abroad, but also in cases of overriding public interests, where performance of a contract requires such disclosure, where you have consented, or where the data has been made generally accessible by you and you have not objected to its processing.
When you use our website (www.alltax.ch), various personal data is collected.
Some of the third-party providers we use may be located outside Switzerland. Information on cross-border data disclosure is also provided in Section VII.
We use AI-assisted tools for certain processing operations, in particular for translating documents. We work exclusively with providers with whom we have entered into data processing agreements. These providers process personal data only in accordance with our instructions and are subject to strict contractual data protection and data-security obligations. Wherever possible, we use AI-assisted tools only with anonymised or pseudonymised data or data limited to what is necessary. To the extent possible and contractually agreed, we exclude the use of input data to train general-purpose AI models. We do not use the results of AI-assisted processing without review; where necessary, they are subject to appropriate human oversight. Where personal data is disclosed abroad in connection with the use of AI-assisted tools, the information on cross-border data disclosure in Section VII applies.
We process and store your data for as long as is necessary to fulfil our contractual and statutory obligations or otherwise for the purposes pursued by the processing. This may include the entire duration of the business relationship and any additional period required by our processing purposes, statutory retention periods or legitimate interests, in particular for documentation and evidentiary purposes, or for technical reasons (e.g. backups or document-management systems). If there are no legal or contractual obligations or technical reasons to the contrary, we delete or anonymise your data as part of our usual processes once the applicable storage or processing period has expired.
We take appropriate technical and organisational security measures to protect your personal data against unauthorised access and misuse. These include, in particular, internal instructions, training, IT and network-security solutions, access controls and restrictions, encryption of data carriers and data transmissions, and other appropriate control measures.
In the course of our business relationship, you must provide the personal data required to establish and conduct a business relationship and to perform the related contractual obligations (as a rule, you are not under a statutory obligation to provide us with data). Without this data, we will generally be unable to enter into or perform a contract with you (or with the entity or person you represent). The website likewise cannot be used unless certain information required to ensure data transmission (such as the IP address) is disclosed.
You have certain rights in connection with our processing of data. In accordance with applicable law, you may, in particular, request information about the processing of your personal data, have inaccurate personal data corrected, request the deletion of personal data, object to data processing, request the release of certain personal data in a commonly used electronic format or its transfer to another controller, or withdraw consent where our processing is based on your consent.
Please note that these rights are subject to requirements, exceptions or restrictions (e.g. to protect Third Parties or trade secrets). We reserve the right to redact copies for data-protection or confidentiality reasons or to provide extracts only.
As a rule, exercising these rights requires you to provide clear proof of your identity (e.g. by providing a copy of an identity document where your identity is otherwise unclear or cannot be verified). To exercise your rights, you may contact us at the address specified in Section II.
You also have the right to lodge a complaint with the competent supervisory authority. The competent data protection authority in Switzerland is the Federal Data Protection and Information Commissioner (https://www.edoeb.admin.ch).
We may amend this Privacy Notice at any time without prior notice. The version currently published on our website applies. Where the Privacy Notice forms part of an agreement with you, we will notify you of any update by email or by other appropriate means.
Version: October 2026
Grosspeteranlage 5
CH-4052 Basel
T +41 (0)61 327 37 37
F +41 (0)61 302 33 13
info@alltax.ch
Montag – Donnerstag
08.00 – 12.00 / 13.30 – 17.00
Freitag
08.00 – 12.00 / 13.30 – 16.30
Zum fünften Mal in Folge dürfen wir uns über die Wahl im BILANZ-Ranking der «Top Steuer- und Treuhandexperten 2027» freuen. Das ehrt uns und macht uns stolz!
Können wir auch Sie unterstützen? Wir freuen uns auf Ihre Kontaktaufnahme!
Hier geht’s zum BILANZ-Ranking 2027.
