

Individuals can apply for registration of a fixed camera which must be approved by the privacy agency of the state. If it is approved, you can film into public space, but normally this comes with rules like the anonymization of visible faces and car plates when you are a normal citizen.
Without doing this you are allowed to place a camera for constant monitoring at a fixed place if it films your private property only.
For normal businesses the same rules apply, although you might get a camera approved which watches the area around your entry/exit easier.
Those rules made dashcams illegal in most of the EU, but legislation has caught up in those cases in a few countries - but not all yet.



ProtonMail does not log things by default, but they can still be court ordered to do so by swiss authorities - if you want to run any business at all, you have to submit to a jurisdiction, you can only choose which one to run under. And even if your chosen authority is alright by itself, it can still be misled by other jurisdictions like the French did, using the terror-cudgel against climate activists.
I can also recall that in this case Proton said that had their user actually bothered to use any VPN, even Proton’s, there wouldn’t have been anything to give to authorities except for an exit node IP.