Trust & Security

Privacy Policy

Version: 1.0. Last updated: 12 July 2026. Owner: Cytria Sàrl.

1. Data Controller and Contact Details

The data controller responsible for the processing of your personal data on this website is:

Cytria Sàrl
Chemin de la Florence 10
1208 Genève
Switzerland

For any questions regarding data protection, you can contact us at: contact@cytria.com.

2. Data Categories and Collection Methods

We process personal data that you provide to us directly through our interactive forms, assessment tools, or contact requests:

  • Contact and Booking Forms: Name, work email address, company name, job role, phone number, and the specific details of your request or desired timing.
  • Where to Start Diagnostic: Your responses regarding your business situation, processes, and tool usage, combined with your name and work email.
  • AI Readiness Assessment: Your evaluation answers across strategy, people, processes, data, governance, and technology dimensions, alongside your email, company name, and consent state.
  • Technical Logs: IP address, date and time of request, browser version, operating system, and referral page details.

3. Purposes of Processing

We use the collected personal data for the following purposes:

  • To qualify and respond to your consulting, training, or solutions inquiries.
  • To generate and deliver your AI Readiness maturity score and custom recommended path.
  • To contact you regarding booked advisory calls with Enrico Bartolotti.
  • To deliver practical editorial updates and newsletters, subject to your explicit consent.
  • To secure our website infrastructure and diagnose technical issues.

4. Legal Bases under the Swiss FADP (nLPD)

We process your data in conformity with the Swiss Federal Act on Data Protection (FADP). The processing is based on the following grounds:

  • Consent: When you subscribe to our newsletter or request your assessment report, you give us explicit permission to contact you.
  • Pre-contractual measures: Form submissions asking for quotes or audit bookings represent steps toward establishing a business agreement.
  • Legitimate interest: Securing our website and analyzing general visitor habits to improve services.

5. Integration Status (CRM, SMTP and Analytics)

Current Implementation Status:

  • • CRM: No live third-party CRM sync is active. All data remains in localized secure databases.
  • • SMTP: Emails are sent via standard transactional services. No marketing automation is active.
  • • Analytics: Only privacy-preserving, cookie-less analytic tools are used to measure traffic. No individual tracking occurs.
  • • Spam Protection: Turnstile integration is prepared but currently deactivated pending final dependency checks.

6. Data Retention Periods

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected:

  • Contact inquiries & Diagnostics: Retained for 12 months after the last communication.
  • AI Readiness Reports: Retained for 24 months to allow comparison with future evaluations.
  • Newsletter Subscriptions: Retained until you withdraw your consent or unsubscribe.
  • Technical server logs: Automatically deleted after 30 days.

7. Data Recipients and Processors

Our server infrastructure is hosted entirely in Switzerland. We do not sell or lease your personal data. We only share information with third-party service providers (processors) that help operate our infrastructure, under strict confidentiality agreements. No international data transfer occurs during the standard use of this website.

8. Your Rights

Under the Swiss FADP, you have the following rights regarding your personal information:

  • Right of Access: You can request a copy of all personal data we hold about you.
  • Right to Rectification: You can ask us to correct incorrect or incomplete information.
  • Right to Erasure (Deletion): You can request the deletion of your personal data.
  • Right to Object: You can object to data processing based on legitimate interests or withdraw consent at any time.

To exercise any of these rights, please email us at contact@cytria.com.

9. Complaint Authority

If you believe your data has been processed unlawfully, you have the right to file a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC / PFPDT) in Bern.

10. Policy Updates

We may update this policy periodically to reflect changes in our services, integrations, or legal obligations. We recommend reviewing this page regularly for the latest details.