PRIVACY POLICY
Last updated: 28.07.2026
Version: 03.2026
1. Controller and Scope of this Policy
This Privacy Policy explains how Cristiane Schmitt-Braitling, practising professionally under the name Schmitt-Braitling International Law, processes personal data in connection with the use of the website www.schmitt-braitling.com and communications made through the contact channels available on the website.
This Policy applies to visitors and users of the website. Personal data is processed in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable, Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR).
Controller: Cristiane Schmitt-Braitling
Professional address: Leutschenbachstrasse 95, 8050 Zurich Switzerland
Email: contato@schmitt-braitling.com
Telephone: +41 77 268 9093
The website is provided for informational purposes. Accessing the website, reading its content or sending a communication does not, in itself, constitute the engagement of legal services or establish an attorney-client relationship.
2. Data Processed and Purposes
Depending on how the website is used, technical and browsing data may be processed, including IP address, date and time of access, pages visited, information about the browser, device and operating system, approximate location and statistical usage data.
When a user voluntarily contacts the Firm by email, telephone or WhatsApp, the data provided in the communication may be processed, including name, email address, telephone number, the content of the communication and any other information the user chooses to provide.
The website does not provide a contact form, user registration, newsletter, e-commerce functionality or client portal.
Personal data may be processed to ensure the operation, security and maintenance of the website, generate usage statistics, improve its content and performance, respond to communications initiated by users, comply with legal obligations, and establish, exercise or defend legal rights.
Where the GDPR applies, processing is carried out on the legal basis appropriate to the relevant purpose, including consent where required, steps taken at the request of the data subject prior to entering into a contract, compliance with a legal obligation or legitimate interests, in accordance with Article 6 GDPR.
For processing subject to the FADP, the principles and requirements of Swiss data protection law are observed, including lawfulness, good faith, transparency, proportionality, purpose limitation and data security.
3. Cookies, Complianz and Google Analytics
The website uses cookies and similar technologies that are necessary for its operation and, with the user’s consent, for statistical purposes.
Complianz is used to manage cookie preferences. Through the banner and cookie settings available on the website, users can accept, reject or manage their choices.
Cookies that are strictly necessary for the operation of the website and for storing privacy preferences may remain active regardless of consent.
The website uses Google Analytics 4 (GA4) to obtain statistical information about its use and performance. The service may process information relating to interactions with the website, pages visited, browser and device characteristics, approximate location and other technical data.
Google Analytics cookies are used only after the user has given consent for the relevant category. Refusing these cookies does not prevent access to the website’s content.
Where the GDPR applies, processing carried out through these analytics technologies, where subject to consent, is based on Article 6(1)(a) GDPR. Consent may be withdrawn at any time through the cookie settings without affecting the lawfulness of processing carried out before its withdrawal.
Under the configuration currently used, the retention period for Google Analytics event data is 2 months, while the retention period for user data is 14 months. These periods relate to the retention of the relevant data within Google Analytics and do not necessarily correspond to the lifespan of the cookies used.
Google Analytics uses the IP address during processing, including to derive approximate location information. According to the information provided by Google regarding GA4, IP addresses are not logged or stored by Google Analytics.
Detailed information about the cookies used, their purposes, providers and duration is available in the Cookie Policy and through the cookie settings available on the website.
4. Contact by Email, Telephone and WhatsApp
The website provides an email address, telephone number and a button linking to WhatsApp through which users may voluntarily contact the Firm.
The information provided by users is used to receive, review and respond to communications and, where relevant, to take steps in connection with the potential provision of legal services.
The WhatsApp button directs users to an external service. When using that service, processing carried out by the relevant provider is subject to its own terms and privacy policies.
Users are advised not to send unnecessary personal data, particularly sensitive information or confidential documents, before an appropriate channel for professional communication has been established.
Initial contact through any of these channels does not, in itself, constitute the engagement of legal services or establish an attorney-client relationship.
5. Service Providers, External Links and International Data Transfers
The website’s hosting and primary technical infrastructure are provided by NovaTrend Services GmbH, using infrastructure located in Switzerland.
The website uses services provided by Google through Google Analytics 4 and provides access to WhatsApp when a user chooses to use that communication channel.
Articles and other content may contain links to third-party websites, documents or services. When accessing an external link, users are subject to the privacy practices of the relevant third party. The Firm does not control the processing carried out by external websites or services.
The use of certain services, particularly Google Analytics and WhatsApp, may involve the processing of, or access to, personal data outside Switzerland or the European Economic Area.
Where personal data is transferred internationally, the requirements of the FADP and, where applicable, the GDPR will be observed. Depending on the circumstances, transfers may be made to countries recognised as providing an adequate level of protection or on the basis of adequacy decisions, Standard Contractual Clauses (SCCs), or other mechanisms and safeguards permitted under applicable law.
The Firm does not sell the personal data of website visitors.
6. Retention and Security
Personal data is retained only for as long as necessary for the relevant purposes, taking into account applicable legal, regulatory and professional obligations and, where necessary, the establishment, exercise or defence of legal claims.
Technical data and records relating to the operation and security of the website may be retained in accordance with the retention periods applicable to the infrastructure and hosting services used.
Communications by email, telephone or WhatsApp are retained for as long as necessary to review and respond to the relevant request. Where the communication results in the provision of legal services or another professional relationship, the data may be retained for additional periods in accordance with applicable legal, regulatory, professional and record-keeping obligations.
When personal data is no longer required, it will be deleted or anonymised unless further retention is required or permitted by applicable law.
Technical and organisational measures appropriate to the relevant risks are implemented to protect personal data against unauthorised access, loss, alteration, disclosure or misuse.
7. Rights of Data Subjects
The rights available to data subjects depend on the law applicable to the relevant processing activity.
Where the FADP applies, data subjects may exercise the rights provided under Swiss law, including, where applicable, requesting information about and access to their personal data, correction of inaccurate data, and disclosure or transfer of data where the applicable legal requirements are met.
Where the GDPR applies, data subjects may, subject to the applicable legal requirements and limitations, request access to, rectification or erasure of their personal data, request restriction of processing, exercise the right to data portability, object to processing, withdraw consent and exercise rights relating to solely automated decision-making.
The website is not used to make decisions based solely on automated processing that produce legal effects concerning users or similarly significantly affect them, nor is it used to profile visitors for behavioural advertising purposes.
To exercise their rights or raise questions concerning data protection, data subjects may contact the Firm at contato@schmitt-braitling.com. Information necessary to verify the identity of the person making the request may be requested.
Where the FADP applies, data subjects may contact the Federal Data Protection and Information Commissioner (FDPIC) in accordance with Swiss law. Where the GDPR applies, they may also lodge a complaint with the competent data protection supervisory authority.
8. Changes and Contact
This Policy may be updated to reflect changes to the website, the services used, data processing practices or applicable law. The current version will be made available on the website together with the date of the latest update.
For questions concerning this Policy or the processing of personal data:
Cristiane Schmitt-Braitling
Schmitt-Braitling International Law
Address: Leutschenbachstrasse 95, 8050 Zurich Switzerland
Email: contato@schmitt-braitling.com
Telephone: +41 77 268 9093
Website: www.schmitt-braitling.com
Effective date: 28.07.2026
Version: 03.2026
Strategic legal advice for Brazilians, businesses and investors with interests across Brazil, Switzerland and Europe.