Data Protection Policy

1. Controller & Contact

The controller responsible for the processing of your personal data under Swiss data protection law (nDSG) is:

For any questions regarding this policy or the exercise of your data protection rights, please contact us at the above address or by email.

2. Scope and Legal Basis

This Data Protection Policy applies to all personal data processed by Catalyst Group GmbH in connection with the operation of this website and any business activities. Processing is carried out in accordance with the Swiss Federal Act on Data Protection (Datenschutzgesetz, nDSG) and, where applicable to persons in the European Economic Area, the EU General Data Protection Regulation (GDPR).

We process personal data only where we have a valid legal basis, including: your consent, the performance of a contract or pre-contractual measures, compliance with a legal obligation, or our legitimate interests (provided these do not override your fundamental rights).

3. Data We Collect and How

We collect personal data in the following contexts:

Contact Enquiries
When you use the contact form or send us an email, we collect: first name, last name, company or organisation, job title (optional), email address, phone number (optional), your message, and any service or referral information you choose to provide. This data is used solely to respond to your enquiry and, where relevant, to establish a consulting engagement.

Website Usage Data
When you visit our website, your browser automatically transmits certain technical data to our web server: your IP address, browser type and version, operating system, referring URL, and pages visited with timestamps. This data is processed for security, error diagnosis, and statistical analysis and is not used to personally identify visitors.

Business Communications
If you enter into a consulting engagement with us, we process personal data necessary for the performance of that engagement and for compliance with applicable legal obligations, including invoicing and record-keeping.

4. Purpose and Use of Data

We use the data we collect for the following purposes:

• Responding to enquiries and managing pre-contractual communications
• Delivering consulting services and managing client engagements
• Compliance with legal and regulatory obligations
• Improving the functionality and security of this website
• Internal administration, invoicing, and record-keeping

We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. Data Sharing and Recipients

Your personal data may be shared with the following categories of recipients, only to the extent necessary:

• Service providers: IT infrastructure, email hosting, and web hosting providers who process data on our behalf under contractual data protection obligations.
• Partner experts: Specialist consultants and advisors engaged for specific client projects, where disclosure is necessary for service delivery and subject to appropriate confidentiality obligations.
• Authorities: Where required by applicable law or official order.

Where data is transferred to countries outside Switzerland or the EU/EEA that do not provide an equivalent level of data protection, we ensure appropriate safeguards are in place (such as standard contractual clauses).

6. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy, or as required by applicable law. Contact enquiry data is generally retained for up to 3 years unless an ongoing business relationship is established. Client engagement data is retained for the duration required by Swiss commercial and tax law (ordinarily 10 years). Website log data is typically retained for a maximum of 30 days.

7. Cookies and Tracking

This website uses cookies and similar technologies. For detailed information about which cookies are used, their purpose, and how to manage your preferences, please see our Cookie Policy.

8. Your Rights

Under the Swiss nDSG (and, where applicable, the GDPR), you have the following rights regarding your personal data:

• Right of access: You may request confirmation of whether we process personal data about you and, if so, a copy of that data.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure: You may request deletion of your personal data where there is no longer a legal basis for its retention.
• Right to restriction: You may request that we restrict processing of your personal data in certain circumstances.
• Right to data portability: Where processing is based on consent or contract, you may request your data in a structured, machine-readable format.
• Right to object: You may object to processing based on our legitimate interests.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@catalystgroup.ch. We will respond within the timeframes required by applicable law. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or the competent supervisory authority in your country of residence.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. Our website is served over HTTPS. Access to personal data is restricted to authorised personnel only.

10. Third-Party Links

This website may contain links to third-party websites. Catalyst Group GmbH is not responsible for the data protection practices or content of those sites. We encourage you to review their privacy policies before providing any personal information.

11. Changes to This Policy

We may update this Data Protection Policy from time to time to reflect changes in legal requirements or our processing activities. The current version is always available on this page. Material changes will be communicated where required by law.