The PwC network and each of the individual PwC firms are strongly committed to protecting personal data.
This Privacy Statement describes why and how we collect and use personal data and provides information about individuals’ rights. It applies to personal data provided to us, both by individuals themselves or by others. We may use personal data provided to us for any of the purposes described in this Privacy Statement or as otherwise stated at the point of collection. Please note that this Privacy Statement serves as a general overview and data subjects might receive further specific information about their rights and the use of their data at the point of collection.
In this Privacy Statement, ‘PwC’, ‘we’ or ‘us’ refers to PricewaterhouseCoopers AG, which is a separate legal entity of the PwC network.
PricewaterhouseCoopers GmbH, Vaduz, Liechtenstein is a wholly owned subsidiary of PricewaterhouseCoopers AG and generally adheres to the same data protection and privacy principles as set forth in this Privacy Statement. Please find specific data protection terms for PricewaterhouseCoopers GmbH under the following link: PwC Liechtenstein Privacy Statement. For further information about the structure of the PwC network, visit www.pwc.com/structure.
Personal data are any information relating to an identified or identifiable natural person (data subject). PwC processes personal data for numerous purposes, and the means of collection, lawful basis of processing, use, disclosure and retention periods may differ for each of these purposes.
The data controller responsible for the processing of your personal data as described in this Privacy Statement is PricewaterhouseCoopers AG (CHE-106.839.438). You will be informed in case of a different data controller deciding about the processing of your data.
We have appointed a Data Protection Officer. If you have any questions about this Privacy Statement or about how and why we process personal data, please contact our Data Protection Officer at:
Data Protection Officer
PricewaterhouseCoopers AG
Birchstrasse 160
8050 Zurich
Email: ch_swiss_data_privacy@pwc.ch
Phone: +41 (0) 58 792 00 00
In the following sections, we take a detailed look at the data subject groups from which we process personal data. Please note that other data subjects from whom we might process personal data (e.g. partners and staff, suppliers), will be informed separately about the processing of their data.
We only process personal data as necessary for providing our services resp. for agreed purposes. Generally, we collect such personal data from our clients or from a third party acting on the instructions of the relevant client. In such case, we ask our clients to provide associated data subjects (e.g. employees, suppliers, customers or other associated individuals) with the necessary information regarding the processing. Our clients may use relevant sections of this Privacy Statement or refer data subjects to this Privacy Statement if they consider it appropriate to do so.
We provide a diverse range of professional services (click here for information on our services). Some of our services require us to process personal data in order to provide advice and deliverables. Given the diversity of the services that we provide to clients, we process many categories of personal data, including:
For certain services (e.g. payroll and immigration services, specific advisory mandates) or with the data subject’s consent, we may also process special categories of personal data such as information about religious beliefs, physical or mental health, sexual life or sexual orientation, excerpts from the debt register or criminal records.
We retain the personal data processed for as long as is considered necessary for the purpose for which it was collected and described above (including as required by applicable laws or regulations).
In the absence of specific legal, regulatory or contractual requirements, our baseline retention period for records and other documentary evidence created in the provision of services is 10 years.
If no information to the contrary is provided, we do generally not perform profiling or undertake any automated decision-making when processing personal data provided by our corporate clients.
We process limited personal data of visitors of our websites such as:
This data is collected directly from the website visitors and generally on a voluntary basis. An exception is the provision of credit card details in case a purchase is made via our website.
When a website visitor provides personal data to us, we use them in connection with the purposes stated below or as obvious from the context of collection.
Cookies may be used on some pages of our site. Cookies are small text files placed on your hard drive that assist us in providing a more customised website experience. For example, a cookie can be used to store registration information in an area of the site so that a user does not need to re-enter it on subsequent visits to that area. It is PwC’s policy to use cookies to make navigation of our websites easier for visitors and to facilitate efficient registration procedures. Site statistics are compiled by third parties and therefore your IP address will be passed to third parties for statistical reporting only.
Our website uses cookies for a variety of purposes detailed on the cookies information page. Visitors to the website get prompted to accept or reject these cookies upon their first visit. There are options to set preferences for analytics, personalisation and advertisting cookies.
Please bear in mind that the cookie settings don’t apply to third-party websites.
We retain the personal data processed for as long as is considered necessary for the purpose for which it was collected and described above (including as required by applicable laws or regulations).
Contact information about visitors (such as information generated though registration for access to areas on the site) shall be kept as long as the information is required to service the contact request or until a user requests that we delete that information. Mailing list information, discussion posts and emails are kept for only the period of time considered reasonable to facilitate the visitor’s requests.
In case a user has accepted personalisation cookies, we might use automated technology to display personalised content such as reading recommendations, event invitations or other relevant content related to a user’s browsing behavior. Users can opt out at any time by declining these cookies.
When applying for a job, applicants should refer to the details provided on why and how personal data are collected and processed. If you should enter in an employment relationship with us, contractual agreements will regulate our use of your personal data. For more details about how we handle recruitment data, please visit our separate Privacy Statement and terms of use for the relevant tools.
We collect and process personal data about our suppliers (including subcontractors and individuals associated with our suppliers and subcontractors) in order to manage the relationship, contract, to receive services from our suppliers and, where relevant, to provide professional services to our clients. We commonly process contact details, e.g. name, job title, work telephone numbers, work email addresses, other contact details.
We retain personal data processed by us for as long as necessary for the purpose for which it was collected (including as required by applicable law or regulation). Personal data may be held for longer periods where extended retention periods are required by law or regulation and in order to establish, exercise or defend our legal rights.
We use personal data collected in connection with the PwC Switzerland alumni community through the offboarding process or registration on the alumni website for our global community platform and for communication purposes, including sending alumni newsletters and event invitations. The following categories of personal data will be processed to enable you to use the application and its features:
In addition, you may voluntarily and optionally provide further information in the course of using PwC’s alumni community platform.
The data processing is conducted solely for the specified purposes and will not be carried out in a manner incompatible with these objectives. Further details on the processing of your personal data can be found in the global alumni privacy statement.
We use different social media platforms to provide information about us and our services, get in touch with interested parties and learn more about how our brand is perceived.
In this connection we might process certain personal data, including your name, social media handle, posts and other social media content (including pictures) as well as certain statistics provided by the social media platforms that might include personal data. Furthermore, we will process direct messages or the like in case you get in contact with us.
This data is only used for managing our social media profiles, for the purpose of social media listening (please see below) and to answer to your requests or react to your suggestions, praises or criticism. Furthermore and as far as the platform allows for it, we may share personal data made publicly available by you (e.g. re-share your posts mentioning our brand or the like).
We will store your data for as long as necessary to meet the purposes mentioned above.
Please note that we have no influence on the type and extent of personal data collected and processed by the social media networks for their own purposes. Refer to the privacy statements of the respective networks for information on this.
We use a dedicated social media management platform, to monitor public conversations across social networks like X (formerly Twitter), Facebook, and Instagram. This allows us to track mentions of our brand, products, and services. Through this platform we may collect publicly available data such as posts, comments, and interactions related to our company. This data is securely processed on servers of our provider in the United States of America and used solely and as far as necessary for social listening purposes to understand customer sentiment as well as engage with our audience.
We do not collect or store any personal or sensitive information beyond what is publicly shared on social media platforms. The collected data is processed based on our legitimate interest and generally deleted from our platform when the corresponding social media data is deleted natively on the respective social media network unless it is needed for a longer period of time to meet the purposes mentioned above.
If you do not want your public social media activity included in our monitoring, you can adjust your privacy settings on the respective platforms or avoid mentioning our brand.
We provide external users access to various applications managed by us. Such applications generally include their own Privacy Statements explaining why and how personal data are collected and processed by those applications
PwC understands the importance of protecting children’s privacy, especially in an online environment. Our website is not intentionally designed for or directed at children 16 years of age or younger. It is PwC’s practice never knowingly to collect or maintain information about anyone under the age of 16.
PwC organizes or helps organize events and takes part in fairs (e.g. at universities or the like) or other social gatherings. We may use various applications to manage event registration processes, which applications will contain their own privacy notices explaining why and how personal data is collected and processed by these applications. Please refer to the privacy notices available on those applications.
Should you register via our website for such an event please see above in section covering website visitors. As part of the event management, we may process event-related data (but only to the extent required for a specific event), such as dietary restrictions, special requirements, travel information. We do not intentionally collect sensitive personal data unless you provide us with such data.
Participants of such events can interact with our employees and provide their personal data (such as information on business cards or by registering for talent pools, newsletter, games or the like). We will use this data to fulfill the purpose your data has been collected for or to get in touch with you with information about us or our services which could be of interest to you. You can at all times request us to stop our communication in accordance with your privacy rights described below.
We shall only share personal data with third parties when and as far as we are legally permitted to do so. When we share data with third parties, we protect the data and comply with our data protection, confidentiality and security standards by means of e.g. security mechanisms, contractual and organizational arrangements.
The transfer of personal data may be possible to:
The data are not further shared within the PwC network for secondary or unrelated purposes or shared with a third party other than as described in this Privacy Statement or otherwise disclosed at the point of collection. If there is an instance where such information may be shared, the visitor shall be asked for permission beforehand.
In several places, pwc.ch may link to other websites that do not operate under the privacy practices of pwc.ch. If visitors follow links to other websites, PwC’s privacy practices no longer apply. We encourage visitors to review each site’s Privacy Statement before disclosing any personally identifiable information.
PwC makes every practical effort to avoid excessive or irrelevant collection of data. If you believe that we have collected excessive information, we encourage you to contact us to raise any concerns.
Information Security is a high priority for the PricewaterhouseCoopers network. PwC member firms are accountable to their people, clients, suppliers and other stakeholders to protect information that is entrusted to them. The PwC Information Security Policy (ISP) outlines the minimum security requirements with which every member firm must comply.
The PwC ISP has been developed to safeguard the confidentiality, integrity and availability of the information and technology assets used by the PwC member firms. The PwC ISP is aligned with the industry standard ISO/IEC 27002:2013 Information technology – Security techniques – Code of practice for information security controls.
PwC reserves the right to modify or amend this Privacy Statement at any time by publishing an updated version here. The current version of the statement shall be accessible on this website. This Privacy Statement was last updated on 6 May 2024.