Privacy Policy

Status: September 2026

1. Controller

The controller responsible for processing personal data under Swiss data protection law and, where applicable, the EU General Data Protection Regulation (GDPR) and the UK General Data Protection Regulation (UK GDPR), is:

HK Management Partners GmbH
CHE-349.620.754
Roosstrasse 53
CH-8832 Wollerau
Switzerland

Email: info@hk-mp.com

2. General Information

The protection of your personal data is important to us. We process personal data carefully, confidentially, and exclusively in accordance with applicable legal requirements.

This Privacy Policy informs you about which personal data we collect, the purposes for which we use it, and the rights you have regarding your data.

Personal data means any information relating to an identified or identifiable natural person.

3. Collection of Personal Data When Visiting the Website

When our website is accessed, information is automatically collected by the hosting provider and technical systems and stored in server log files.

In particular, the following data may be processed:

• IP address
• Date and time of access
• Name of the accessed file or page
• Browser type and browser version
• Operating system
• Referrer URL
• Amount of data transferred
• Access status

This data is used for the technical provision of the website, ensuring system security, and error analysis.

The processing is based on our legitimate interest in the secure and stable operation of our website.

4. Contact

If you contact us by email or via contact forms, we process the personal data you provide in order to handle your inquiry and for further business communication.

This may include in particular:

• Name
• Email address
• Company
• Telephone number
• Content of your message
• Other voluntarily provided information

The data is stored only for as long as necessary to process your inquiry or as required by statutory retention obligations.

5. Contract Initiation and Business Communication

If you request or use our services, we process personal data in particular for:

• Providing our website
• Responding to inquiries
• Carrying out pre-contractual measures
• Concluding and performing consulting mandates
• Customer support
• Applicant management
• Compliance with legal obligations
• Invoicing
• Risk management
• IT and system security
• Establishing or defending legal claims

6. Microsoft 365

We use Microsoft 365 from Microsoft Corporation for business communication and collaboration.

Personal data may be processed in connection with the use of email, document management, appointment scheduling, or other communication services.

Microsoft may also process data outside Switzerland, the European Economic Area (EEA), or the United Kingdom. Where required, such data transfers are based on appropriate safeguards, in particular standard contractual clauses recognized by the competent authorities or comparable protection mechanisms.

Further information is available at:
https://www.microsoft.com/privacy

7. Hosting

Our website is hosted by:

Mittwald CM Service GmbH & Co. KG
Königsberger Straße 4–6
32339 Espelkamp
Germany

For the operation of the website, the hosting provider processes technical access data, in particular server log files, on our behalf. Processing takes place on servers within the European Union.

A data processing agreement exists with the hosting provider in accordance with applicable data protection regulations.

Further information:
https://www.mittwald.de/datenschutz

8. Cookies and Consent Management

Our website uses the consent management tool Borlabs Cookie to obtain, manage, and document data protection consents. The software is provided by Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg, Germany.

Borlabs Cookie runs entirely on our own server. Your consent decision is stored in your browser and in our website database. No data is transmitted to Borlabs GmbH or to any other third party.

For this purpose, the following cookie is set:

• borlabs-cookie – storage period 60 days – stores your consent decision for the individual service groups and services

In connection with the documentation of consent, the following information may in particular be processed:

• Your consent decision or refusal
• Date and time of the decision
• The version of the consent banner presented to you
• Browser information
• An anonymized technical identifier

This data is used exclusively to demonstrate compliance with our obligation to document consent and is not used for marketing or analytics purposes.

The cookie set by Borlabs Cookie is technically necessary and therefore does not itself require consent. The legal basis for the processing is our legal obligation to demonstrate consent pursuant to Art. 7(1) GDPR in conjunction with Art. 6(1)(c) GDPR and, under Swiss data protection law, Art. 31(1) FADP.

The consent record is retained for the duration of the statutory limitation and evidentiary periods and is deleted thereafter.

In addition to technically necessary cookies, we use analytics cookies. These are set only after you have given your explicit consent. Details are set out in the following section.

You can review, change, or withdraw your cookie settings at any time using the respective functions on the website.

9. Analytics and Tracking Technologies

Google Tag Manager

We use Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google Tag Manager is a technical administration tool that allows us to manage website tags – such as the analytics tag described below – from a central location. Google Tag Manager does not set any cookies of its own and does not collect personal data for its own purposes. It only controls whether and when other services are activated, in accordance with your consent settings.

The Google Tag Manager code is stored on our own server and delivered from there. As a result, no connection to Google servers is established when our website is loaded.

The legal basis is our legitimate interest in the technically reliable and data protection compliant management of the services used on our website.

Google Analytics 4

Subject to your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables us to understand how visitors use our website, so that we can improve our content and its usability. For this purpose, a pseudonymous identifier is stored in a cookie and usage information is transmitted to Google.

The following data may in particular be processed:

• Truncated (anonymized) IP address
• Approximate location, at country or region level
• Date, time, and duration of the visit
• Pages viewed and interactions, for example scroll depth, clicks on links, and file downloads
• Referrer URL and traffic source
• Device type, browser, operating system, and screen resolution
• A pseudonymous identifier assigned by the cookie

In Google Analytics 4, IP addresses are used only transiently in order to derive approximate location information. They are not logged or stored by Google.

The following cookies are set once consent has been given:

• _ga – storage period 2 years – used to distinguish users
• _ga_<container> – storage period 2 years – used to persist session state

Event data and user data are retained for a maximum of 14 months and are deleted automatically thereafter.

The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR and, under Swiss data protection law, Art. 31(1) of the Federal Act on Data Protection (FADP). You may withdraw your consent at any time with effect for the future.

Google Ireland Limited is our contractual partner for the European Economic Area, Switzerland, and the United Kingdom. Data may nevertheless be transferred to Google LLC in the United States. Google LLC is certified under the EU–U.S. Data Privacy Framework, its UK Extension, and the Swiss–U.S. Data Privacy Framework. In addition, standard contractual clauses have been agreed as part of the Google Ads Data Processing Terms, on the basis of which we have concluded a data processing agreement with Google.

Further information is available at:
https://policies.google.com/privacy
https://business.safety.google/adsdatatransfers/

Google Consent Mode

We use Google Consent Mode v2. Before you give your consent, no cookies are set and no identifiers are transmitted. In this state, Google receives only cookieless signals that contain no identifiers permitting your identification. These signals are used solely to produce aggregated, statistically modelled reports.

Once you consent to the “Statistics” category, the measurement described above takes place. Signals relating to advertising remain deactivated, as we do not use any advertising services.

Withdrawal and Objection

You can review, change, or withdraw your consent at any time via the cookie settings on our website. Withdrawal takes effect for the future and does not affect the lawfulness of processing carried out before withdrawal.

Independently of this, you can prevent the collection of your data by Google Analytics by installing the browser add-on provided by Google:
https://tools.google.com/dlpage/gaoptout

10. Download of Specialist Information and Whitepapers

On our website, we offer specialist information, whitepapers, studies, insights, or comparable content for download.

For the delivery of certain content, providing an email address may be required. The data you provide is used to:

• Provide the requested content
• Process your inquiry
• Document the use of our content
• Where applicable, maintain business contact

The legal basis for processing is the implementation of pre-contractual measures, our legitimate interest in providing specialist information, and, where applicable, your consent.

Data collected in connection with requests for such content is currently stored on our systems and is not transferred to external newsletter or email marketing service providers.

11. Newsletter and Marketing Communication

If you have expressly consented, we may use your email address in the future to inform you about specialist publications, market analyses, events, services, and further information from HK Management Partners GmbH.

Consent is voluntary and can be withdrawn at any time with effect for the future. Withdrawal may be made in particular by email to:

info@hk-mp.com

Currently, no external email marketing service provider is used for sending communications. If such a service is used in the future, this Privacy Policy will be updated accordingly.

12. Disclosure of Data

We disclose personal data only if:

• You have expressly consented
• This is necessary to fulfill contractual or pre-contractual obligations
• We are legally obliged to do so
• This is necessary to safeguard our legitimate interests and no overriding interests of the data subject conflict with this

Recipients may include, in particular, IT service providers, hosting providers, communication service providers, web analytics service providers, advisors, or other processors.

13. International Business Operations and Data Transfers

As we offer our services worldwide, personal data may also be processed across borders in connection with business initiation or contract performance.

If data is transferred to countries whose level of data protection is not recognized by an adequacy decision, we ensure an adequate level of data protection through appropriate contractual, organizational, or legal measures.

14. Data Security

We take appropriate technical and organizational security measures to protect personal data against loss, misuse, unauthorized access, disclosure, alteration, or destruction.

Despite all security measures, complete security during data transmission over the Internet cannot be guaranteed.

15. Retention Period

We store personal data only for as long as necessary for the respective purposes or as required by statutory retention obligations.

Once the processing purpose no longer applies, the data is deleted or anonymized, unless statutory or contractual retention obligations prevent this.

16. Rights of Data Subjects

Where the legal requirements are met, data subjects have in particular the following rights:

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to object to processing
• Right to data portability, where legally provided
• Right to withdraw consent granted with effect for the future

To exercise your rights, you may contact us at any time:

info@hk-mp.com

17. Right to Lodge a Complaint

Data subjects have the right to lodge a complaint with a competent data protection supervisory authority.

Competent authority in Switzerland:

Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1
CH-3003 Bern
https://www.edoeb.admin.ch

Persons within the European Union or the United Kingdom may additionally contact the competent data protection supervisory authority in their country of residence.

18. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy at any time, in particular in the event of changes to legal requirements, technical developments, or the expansion of our website and services.

The current version published on this website applies.