This policy describes how CCZ Business Sàrl, which operates the Awareness Expert brand (“we”), processes personal data on www.awareness-expert.ch and in the delivery of its services. It is drawn up in accordance with the Swiss Federal Act on Data Protection (revFADP).
1. Controller
- CCZ Business Sàrl, Chemin de l'Église 9b, CH-1610 Châtillens, Switzerland
- E-mail: info@awareness-expert.ch
- Telephone: +41 58 590 19 90
2. Data we process
2.1 Data you send us through our forms
When you complete one of our forms, we record the type of enquiry, your first and last name, e-mail address, the name and size of your organisation, your telephone number, your message and your consent, where given, to receive our newsletter. We also record the page you write from, the browsing language and the IP address the form was sent from, to prevent automated submissions.
Mandatory fields: first name, last name, business e-mail and organisation name; the others are optional.
Our form runs in four steps. Your contact details are recorded from the second, before the final submission: an enquiry left unfinished stays visible to our team, who may get back to you. It is kept for the periods set out in section 6 and deleted on request to info@awareness-expert.ch.
Once sent, you receive an acknowledgement restating your enquiry, what happens next and our direct number.
2.2 Log data
Like any online service, our site and its host record technical data on each visit: IP address, date and time, page requested, response code, volume transferred, browser and operating system. These logs serve only the security and proper operation of the site.
2.3 Cookies
The site sets two cookies that are strictly necessary for it to work and one cookie that remembers your choice about measurement cookies. Analytics and advertising cookies are only set with your consent. Details are set out on our cookie policy page.
2.4 Audience measurement
We measure traffic on the site and the performance of our advertising campaigns with Google Analytics and Google Ads, which we manage with Google Tag Manager. Google Tag Manager is loaded from Google's servers on every visit, which passes your IP address to Google.
Analytics and advertising cookies are only set if you accept them in the banner shown on your first visit. You can change your mind at any time through the “Cookie preferences” link in the footer; if you withdraw your consent, the Google cookies already set are deleted.
3. Purposes
We process this data in order to:
- answer your enquiries and prepare a quote;
- perform the contract and manage the client relationship;
- send our newsletter to the people who have subscribed;
- keep the site secure and prevent abuse;
- comply with our legal obligations, in particular accounting ones.
4. Recipients
We neither sell nor rent your data. It may be disclosed, to the extent necessary for the delivery of our services, in particular:
- to our hosting provider, established in Switzerland (site, database and mail service);
- to the publisher of the e-learning and phishing simulation platform, for the campaigns commissioned by our clients;
- to Google, for audience measurement and the tracking of our advertising campaigns (section 2.4);
- to our professional advisers and to the authorities, where the law requires it.
The list of our processors and the countries concerned is available on request.
5. International transfers
The site and its database are hosted in Switzerland. Some of our processors are established outside Switzerland, and data passed to Google may be processed in the United States; such transfers rely on the safeguards provided for in art. 16 and 17 revFADP.
6. Retention periods
- Contact enquiries and unfinished entries: until your enquiry has been dealt with, then deleted during our periodic reviews.
- Contractual relationship: the duration of the contract, then ten years under Swiss accounting obligations (art. 958f CO).
- Newsletter subscription: until you unsubscribe.
- Technical logs: a limited period.
- Cookies: the periods given on our cookie policy page.
After those periods, data is deleted or anonymised.
7. Security
We implement administrative, organisational and technical measures: encryption in transit (HTTPS), access limited to the staff who need it and regular backups. No transmission over the Internet is, however, entirely secure.
8. Your rights
Within the limits of the law, you have the right:
- to access the data we process about you;
- to request its rectification where it is inaccurate;
- to request its erasure;
- to object to a processing operation;
- to withdraw consent at any time, with no effect on processing already carried out.
To exercise these rights, write to info@awareness-expert.ch. We may verify your identity before acting on your request.
You may also report the matter to the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern.
9. Newsletter
Subscribing to the newsletter is optional and based on your consent. The subscription is recorded when the form is sent: e-mail address, language, the form used, IP address and date. If you tick the newsletter box in a contact form, your agreement is recorded with your enquiry. Write to us at any time to be taken off the list.
10. Data processed on behalf of our clients
For awareness campaigns, simulated phishing tests and e-learning courses, we process data about our clients' employees: name, business e-mail address, department, training and simulation results. Our client is then the controller; we act as a processor, under the particular conditions of the platform attached to the contract. Data subjects should address their requests to their employer.
Simulation results serve educational purposes and collective measurement; we recommend that our clients do not use them to sanction an individual.
11. Testimonials and references
We publish a person's name, role, organisation and quote only with their written agreement and that of their organisation. A client's logo is shown only with their agreement. That agreement may be withdrawn at any time by e-mail: the mention then leaves the site.
12. Changes
We may adapt this policy. The applicable version is the one published here; its update date appears at the top.