Legal Notice
Last updated: 2026, September 28
1. Controller
The controller responsible for the processing of personal data on this website is:
cena impact GmbH
Blegistrasse 9
6340 Baar
Switzerland
Email: info@cenaimpact.com
Represented by:
Dr. Cetin Nazikkol, Managing Director
2. General information
We take the protection of your personal data seriously.
This Privacy Policy explains what personal data we collect when you visit this website or contact us, how and why we process it, with whom it may be shared, and what rights you have in relation to your personal data.
We process personal data in accordance with applicable Swiss data protection law, in particular the Swiss Federal Act on Data Protection (FADP), and, where applicable, the EU General Data Protection Regulation (GDPR).
3. Hosting and website platform
This website is hosted and operated using Squarespace, a service provided by Squarespace, Inc.
When you visit this website, Squarespace may process technical information required to deliver and secure the website. This may include, for example:
IP address
browser and device information
operating system
date and time of access
pages visited
referring website
technical log and security data
We use Squarespace to provide, operate and secure this website.
Squarespace may process data outside Switzerland and the European Economic Area, including in the United States. Where required, appropriate safeguards for international data transfers are used.
More information about Squarespace's data processing practices can be found in Squarespace's Privacy Policy.
Fonts
This website uses web fonts provided through Squarespace. The font files used on this website are delivered via Squarespace’s content delivery infrastructure as part of the technical operation of the website.
4. Contact forms and enquiries
If you contact us through a form on this website, we process the information you provide in order to respond to your enquiry and, where relevant, to discuss a possible engagement with you.
Depending on the form, this may include:
name
email address
company
role or position
information about your transformation, organisation or enquiry
any other information you choose to provide
The information is processed for the purpose of handling your enquiry and taking steps at your request prior to entering into a possible business relationship.
Where the GDPR applies, the legal basis is generally Art. 6(1)(b) GDPR where the enquiry relates to a possible contractual relationship, or Art. 6(1)(f) GDPR where we process the information on the basis of our legitimate interest in responding to business enquiries.
Form submissions are processed through Squarespace and may be stored using Squarespace's infrastructure.
We retain enquiry data only for as long as reasonably necessary to deal with your request and any subsequent business relationship, or for as long as required by applicable legal retention obligations.
5. Google reCAPTCHA
We use Google reCAPTCHA on forms to help protect this website against spam, automated submissions and misuse.
reCAPTCHA analyses technical and behavioural information to determine whether a form submission is made by a person or by an automated system. This may include information such as:
IP address
browser and device information
interaction with the website
technical identifiers and security information
The provider is Google.
The purpose of this processing is to protect our website and communication channels against abuse and automated attacks.
Where the GDPR applies, we rely on our legitimate interest in maintaining the security and integrity of the website, unless consent is legally required for a particular form of processing.
Data processed by Google may be transferred to countries outside Switzerland and the European Economic Area, including the United States.
6. Website analytics
We use Squarespace Analytics to understand how visitors use our website and to improve its content, structure and performance.
Squarespace Analytics may process information including:
browser, network and device information
IP address
referring website
pages visited
clicks and internal links
searches
scrolling behaviour
timestamps and other information about the use of the website
Where analytics involves non-essential cookies or similar technologies that require consent, they are used only in accordance with the choices you make through our cookie settings.
You can change your cookie preferences at any time through Cookie Settings on this website.
7. Cookies and similar technologies
This website uses cookies and similar technologies.
Some cookies are necessary for the technical operation, security and functionality of the website. Other cookies may be used for analytics or similar purposes.
Where required by law, non-essential cookies are activated only after you have given your consent.
You can accept cookies, reject non-essential cookies or manage your preferences through the cookie banner or the Cookie Settings link on this website.
You may change or withdraw your consent at any time.
8. International data transfers
Some of the service providers we use, particularly Squarespace and Google, may process personal data in countries outside Switzerland and the European Economic Area.
Where required, such transfers are based on recognised legal safeguards, such as adequacy decisions, standard contractual clauses or other appropriate transfer mechanisms.
9. Retention of personal data
We retain personal data only for as long as necessary for the purposes for which it was collected.
The specific retention period depends on the type of data and the purpose of processing.
We may retain certain information for longer where necessary to comply with legal, accounting or contractual obligations or to establish, exercise or defend legal claims.
10. Your rights
Depending on the data protection law applicable to you, you may have the right to:
request information about the personal data we process about you
request correction of inaccurate personal data
request deletion of your personal data
request restriction of processing
object to certain processing
withdraw consent at any time where processing is based on consent
request the transfer of certain personal data in a structured, commonly used and machine-readable format
If you wish to exercise any of these rights, please contact us at:
Where applicable, you also have the right to lodge a complaint with the competent data protection authority.
11. Data security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
However, no transmission of data over the internet can be guaranteed to be completely secure.
12. External links
This website may contain links to third-party websites.
If you follow an external link, the privacy practices of the respective third-party provider apply. We have no control over how third-party websites process personal data.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our website, services or legal requirements.
The current version is always available on this website.