Privacy Policy

Last updated: 6 July 2026

Effective date: 6 July 2026

This Privacy Policy explains how Cerentix (“Cerentix”, “we”, “us” or “our”) collects, uses, stores, and protects personal data when you visit our website www.cerentix.com (the “Website”) or engage our services. Cerentix is committed to protecting your personal data and processes it in accordance with the Swiss Federal Act on Data Protection (FADP) and its Ordinance, and, where applicable, the EU General Data Protection Regulation (GDPR).

By using the Website or engaging our services, you confirm that you are at least 18 years old. Cerentix does not knowingly collect personal data from persons under the age of 18.

1. Data controller

The data controller responsible for the processing of your personal data is:

Cerentix

Geneva, Switzerland

Email: jo.koudelak@gmail.com

Telephone: +41 77 407 61 83

For any question relating to this Privacy Policy or to the processing of your personal data, contact us using the details above.

2. Scope of this Policy

This Policy applies to personal data processed through the Website and in connection with the delivery of our services. The Website functions as an informational front through which you can learn about our services and request an appointment. The Website does not offer client accounts, does not process online payments, and does not allow visitors to upload or post content.

Communication and service delivery outside the Website take place by email and by telephone. This Policy also governs the personal data we process through those channels in connection with our services.

3. Our services

Cerentix offers three services. The way we handle information for each is set out below.

3.1 Workshops

Workshops are delivered on site. Where a workshop concerns a subject requested by the client organisation, the related information is kept confidential by Cerentix and is not disclosed to third parties.

3.2 Assessment

Assessments are delivered online. An assessment provides the client organisation with a preview of opportunities regarding possible projects, or a review of a project the organisation intends to implement. All information is kept confidential by Cerentix, and the final report is transferred to the client.

3.3 Audit

Audits are delivered on site. An audit provides a full view of the possibilities within an organisation’s processes for modification, and identifies where significant gains are possible. All information is kept confidential by Cerentix, and the final report is transferred to the client.

4. Personal data we collect

We collect only the personal data you provide to us and the analytics data described below. We do not collect information about you from any other source.

Through the Website contact and appointment form, we collect the following:

Category of data	Purpose of processing
Full name	To identify you, respond to enquiries, and deliver services under the contract.
Email address	To respond to enquiries, send administrative information, and manage the service relationship.
Telephone number	To contact you regarding your enquiry, appointment, or service.
Company name	To identify the organisation you represent and to deliver the requested service.
Job title (optional)	To understand your role and tailor our response. Provision of this field is not mandatory.
Usage and analytics data (via Google Analytics)	To measure website traffic and improve the website. Collected through cookies, as described in the Cookies section.

We do not ask for any personal data other than the categories listed above. We do not collect sensitive personal data as defined by the FADP or the GDPR.

5. Purposes and legal bases for processing

We process your personal data for the following purposes, each supported by a lawful basis:

To deliver and facilitate the delivery of our services to you. Legal basis: performance of a contract, or steps taken at your request prior to entering into a contract.
To fulfil and manage your orders for our services. Legal basis: performance of a contract.
To respond to your enquiries. Legal basis: performance of a contract, or our legitimate interest in answering the requests you send us.
To send you administrative information. Legal basis: performance of a contract, or our legitimate interest in managing the service relationship.
To send information about changes to our services, new services, or company policy to our customer base by email. Legal basis: our legitimate interest in keeping clients informed. These communications are not promotional or marketing communications. You may object to receiving them at any time.
To measure website traffic through Google Analytics. Legal basis: your consent, obtained as described in the Cookies section.

We do not use your personal data for any purpose other than those stated above. We do not carry out marketing or promotional campaigns, and we do not carry out high-risk profiling or automated decision-making that produces legal or similarly significant effects concerning you.

6. Processing by artificial intelligence

Cerentix uses an artificial intelligence system for appointment and meeting scheduling and for internal management. This system is hosted internally within Cerentix. No personal data is shared with any external party through its use. The system does not make automated decisions that produce legal or similarly significant effects concerning you; it supports our internal organisation and scheduling only.

7. Cookies and analytics

The Website uses Google Analytics to measure traffic and understand how visitors use the Website. Google Analytics sets cookies on your device to collect usage and analytics data. These cookies are used solely for traffic measurement. The Website does not use cookies or similar technologies for advertising, and there are no third-party advertisers on the Website.

Analytics cookies are set only where you have given your consent. You may withdraw your consent at any time through the cookie settings available on the Website, and you may also manage or delete cookies through your browser settings. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

Google Analytics is provided by Google, which acts as our processor for this purpose. Details of the associated data transfer are set out in the Data transfers section below.

8. Recipients and processors

Cerentix does not sell your personal data and does not transmit it to third parties for their own purposes. We do not disclose your personal data to business partners or affiliates unless you have agreed to this in writing in advance.

We use Google (Google Workspace and Google Analytics) as a processor. All meetings, documents, and data connected to the service relationship are stored within a Google professional account, and website traffic is measured through Google Analytics. Google processes this data on our behalf, under our instructions, and on the basis of a data processing agreement. Google does not use your personal data for its own purposes in this context.

We may disclose personal data where we are required to do so by law, by a court, or by a competent authority.

9. Data transfers

Cerentix is established in Switzerland, and our processing is based in Switzerland. As a general rule, we do not transfer client information outside Switzerland or outside your country of residence.

Our use of Google Workspace and Google Analytics involves processing by Google, a provider established in the United States, which may process data on servers located outside Switzerland. This constitutes a transfer of personal data abroad. We rely on the Swiss-U.S. Data Privacy Framework, which the Swiss Federal Council recognises as providing an adequate level of protection for transfers to certified United States organisations. Where the Data Privacy Framework does not apply, we rely on the Standard Contractual Clauses recognised under the FADP and the GDPR, together with supplementary measures where required.

You may request further information about these transfers and the applicable safeguards by contacting us at jo.koudelak@gmail.com.

10. Data retention

We retain your personal data for two years following your last interaction with Cerentix. After this period, we delete or anonymise your personal data, unless a longer retention period is required to comply with a legal obligation or to establish, exercise, or defend legal claims.

11. Data security

Cerentix applies appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. In the event of a data security breach that is likely to result in a high risk to your rights, we notify the competent supervisory authority as required by law, and we inform affected individuals of the categories of information concerned within 72 hours of becoming aware of the breach.

12. Your rights

Subject to the conditions and exceptions set out in the FADP and, where applicable, the GDPR, you have the following rights in relation to your personal data:

Right	What it means
Right to information	You may ask us to confirm whether we process your personal data and to receive a copy of that data together with the required details.
Right to rectification	You may ask us to correct personal data that is inaccurate or incomplete.
Right to erasure	You may ask us to delete your personal data where there is no lawful ground to retain it.
Right to restriction	You may ask us to restrict the processing of your personal data in defined circumstances.
Right to object	You may object to processing based on our legitimate interests.
Right to data portability	Where applicable, you may ask to receive your data in a structured, commonly used and machine-readable format.
Right to withdraw consent	Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Right to lodge a complaint	You may lodge a complaint with the competent supervisory authority, as set out in the Complaints section.

The Website does not provide a dedicated self-service function to view, edit, or delete the personal data we hold. You may exercise access to your personal data where the privacy law of your country grants you that right. To exercise any of your rights, contact us at jo.koudelak@gmail.com. We respond within the period required by the applicable law.

13. Representative

Cerentix does not have a representative in the European Economic Area or the United Kingdom.

14. Complaints

If you consider that our processing of your personal data infringes data protection law, you may lodge a complaint with the competent supervisory authority.

In Switzerland, the competent authority is the Federal Data Protection and Information Commissioner (FDPIC). If you are located in the European Economic Area, you may lodge a complaint with the supervisory authority of your country of residence. We ask that you contact us first at jo.koudelak@gmail.com so that we can address your concern.

15. Changes to this Policy

We may update this Privacy Policy from time to time. The version in force is the one published on the Website, and the date of the latest update is shown at the top of this document. We encourage you to review this Policy periodically.

16. Contact

For any question regarding this Privacy Policy or the processing of your personal data, contact us: