Privacy Notice
Last updated: September 11, 2026
This notice explains how personal data is processed through the JCapRisk website and related communications.
1. Controller
The controller for personal data processed through the JCapRisk website is JCapRisk – Dr. Jasmin Šahbegović, Kreuzlingen, Switzerland. Privacy contact: info@jcaprisk.ch.
2. Categories of personal data
Website and server-log data may include IP address, date and time, requested page, referring page, browser type, operating system, device information, response status, and technical security information. Inquiry data may include name, institution, business email address, area of interest, deadline, message content, and information included in an email or attachment. Communication data may include email metadata, correspondence, meeting information, and follow-up records.
3. Processing purposes
Personal data may be processed to operate and secure the website, respond to inquiries, assess potential engagements, prepare discussions and proposals, maintain necessary business records, comply with legal obligations, and establish, exercise, or defend legal claims.
4. Website hosting and server logs
The website is hosted through Infomaniak Network SA. The hosting provider may process server-log and security data to deliver, maintain and protect the service. The log fields, storage locations, access controls and retention periods depend on the active hosting configuration.
5. Contact and email processing
The website provides a direct email link to info@jcaprisk.ch. It does not collect inquiry data through a contact-form backend. Following an email link does not send a message; the visitor sends it through the visitor's email application. After sending, the data is processed by the sender's email provider, the JCapRisk email service and infrastructure used to route the message.
6. Processors and recipient categories
Recipient categories may include the website and email hosting provider, authorized representatives of JCapRisk, professional advisers where necessary, approved service providers supporting a defined engagement, and public authorities where disclosure is legally required. Independent specialists receive client information only where their role, confidentiality terms, permitted access, and client approval have been established.
7. Storage location and retention
Website and domain-email services are managed through Infomaniak. Storage locations, email routing, backups, administrative access and server-log retention depend on the service configuration. Inquiry and correspondence data is retained only for as long as needed to respond, assess an engagement, maintain required records, comply with legal obligations, or establish, exercise or defend legal claims. Retention is determined by purpose and applicable obligations rather than one fixed period.
8. International transfers
Email messages may transit through infrastructure outside Switzerland depending on the sender's provider and message routing. The website loads Montserrat through Google Fonts. A font request may transmit technical data, including the visitor's IP address and browser information, to Google. Destination countries and applicable safeguards depend on the service configuration and provider terms.
9. External services, fonts, analytics, tracking, cookies, and embedded content
The website loads Google Fonts. The website code contains no analytics scripts, advertising tags, social-media pixels or embedded third-party media. It does not intentionally set analytics or marketing cookies. Hosting services may use technically necessary cookies or similar mechanisms. External links, including LinkedIn and MDS Digital, are not embedded content. After following a link, the external provider's terms apply.
10. Data-security principles
JCapRisk uses risk-appropriate organizational and technical measures intended to protect personal data against unauthorized access, loss, alteration, disclosure or misuse. Specific engagement requirements for client-system access, confidentiality, encryption, handover, return and deletion are defined in the engagement terms. Certification references on the Delivery page relate to the identified partner, not to JCapRisk.
11. Data-subject rights
Subject to applicable law and exceptions, individuals may request information about personal data processed about them and may request correction, deletion, restriction, objection, or portability where applicable. Requests may be sent to info@jcaprisk.ch. Identity may need to be verified before a request is fulfilled. Individuals may also contact the Swiss Federal Data Protection and Information Commissioner.
12. Changes to this notice
This notice is updated when relevant changes are made to the website or its data-processing arrangements, including the operator, hosting, email services, external resources, contact mechanisms, analytics or retention practices.