Privacy Policy

Arenema Sàrl

Last updated: 1 November 2026

1. Introduction

At Arenema, we take privacy, confidentiality and information security seriously.

As a technology consultancy specialising in digital transformation, cloud engineering, cybersecurity, artificial intelligence and operational resilience, we recognise the importance of protecting personal information and handling data responsibly.

This Privacy Policy explains how Arenema Sàrl (“Arenema”, “we”, “us” or “our”) collects, uses, stores, shares and protects personal data when you:

Visit our website
Contact us through our website or other communication channels
Engage with our content and publications
Enquire about or use our professional services
Establish a business relationship with us

We process personal data in accordance with applicable data protection legislation, including the Swiss Federal Act on Data Protection (FADP) and, where applicable, the European Union General Data Protection Regulation (EU GDPR) and UK General Data Protection Regulation (UK GDPR).

We are committed to collecting only the information necessary for legitimate business purposes and treating personal data with appropriate care, transparency and security.

2. Who We Are

The data controller responsible for this website is:

Arenema Sàrl
Chemin de la Beurière 12
1264 St-Cergue, Vaud
Switzerland

Company identification number: CHE-387.978.317

Website: https://arenema.com
Email: say_hello@arenema.com

For questions concerning this Privacy Policy, the processing of personal information or the exercise of your data protection rights, please contact us using the email address above.

3. Personal Information We Collect

We collect personal information through several channels, depending on how you interact with Arenema.

3.1 Information You Provide Directly

When you contact us through our website, email or other communication channels, we may collect:

Your name
Organisation or company name
Email address
Telephone number, where provided
Professional role or job title, where provided
Details of your enquiry or message
Other information you voluntarily share with us

We use this information primarily to respond to enquiries, discuss potential business relationships and provide professional services.

3.2 Website and Technical Information

When you visit our website, certain technical information may be collected automatically by our hosting infrastructure, security systems and analytics services.

This may include:

IP address
Browser type and version
Device type and operating system
Pages visited and resources requested
Date and time of website access
Referring websites or search engines
General geographical location
Technical errors and performance information
Cookie identifiers and website interaction data

This information helps us operate, maintain, secure and improve our website.

3.3 Business and Professional Information

When establishing or maintaining professional relationships, we may process:

Business contact details
Company information
Professional correspondence
Contractual and commercial information
Meeting and communication records
Information necessary to deliver agreed services

We may also obtain professional information from publicly available sources, business directories, professional networking platforms or referrals where appropriate and lawful.

4. How We Use Personal Information

Arenema processes personal information for legitimate and clearly defined business purposes.

These include:

Communication and enquiries

Responding to messages and contact requests
Arranging meetings and consultations
Discussing prospective projects and services
Maintaining professional correspondence

Business operations

Providing consultancy and technology services
Managing client, supplier and partner relationships
Preparing proposals and contractual documentation
Meeting accounting, regulatory and legal obligations

Website operations

Operating and maintaining our website
Monitoring website performance
Understanding visitor engagement
Improving website content and accessibility
Identifying and preventing security threats
Diagnosing technical problems

Business communications

Sharing relevant information with existing professional contacts
Providing updates requested by visitors or clients
Communicating about our services where permitted by applicable law

We do not automatically subscribe visitors to marketing communications merely because they submit a contact form.

5. Legal Basis for Processing

Where the EU GDPR or UK GDPR applies, we process personal data under one or more of the following legal bases:

Legitimate interests

Processing necessary for the reasonable operation of our business, including responding to professional enquiries, managing business relationships and maintaining website security, provided those interests are not overridden by individuals’ rights.

Contractual necessity

Processing necessary to enter into or fulfil contractual obligations, including the provision of professional services.

Legal obligations

Processing required to comply with applicable legal, regulatory, financial or accounting obligations.

Consent

Processing based on your freely given consent, including where consent is required for non-essential analytics cookies or particular marketing activities.

Where processing relies on consent, you may withdraw that consent at any time.

Under Swiss data protection law, we process personal data in accordance with the applicable principles of lawfulness, good faith, proportionality, purpose limitation and transparency.

6. Cookies and Website Technologies

6.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website.

They help websites operate correctly, remember preferences, maintain security and understand how visitors interact with online content.

Our website may use the following categories of cookies and similar technologies:

Essential cookies

These support necessary website functions, security and technical operation.

Analytics cookies

These help us understand website traffic, visitor behaviour and content performance.

Preference cookies

Where enabled, these remember visitor choices and settings.

We do not require visitors to accept non-essential analytics cookies to access the main content of our website.

6.2 Google Analytics 4

Arenema uses Google Analytics 4 (GA4), a website analytics service provided by Google LLC.

Google Analytics helps us understand how visitors interact with our website, which content is most useful and how we can improve the overall visitor experience.

Depending on our configuration and your consent preferences, Google Analytics may collect information including:

Pages viewed
Time spent on pages
Website navigation and engagement
Device type and browser information
Operating system
General geographical location, such as country or city
Referring websites and traffic sources
Website interactions and events
Pseudonymous visitor identifiers associated with analytics cookies

We use this information to:

Analyse website traffic and engagement
Understand which services and articles attract interest
Improve website navigation and content
Monitor website performance
Evaluate the effectiveness of our digital communications
Identify general trends in visitor behaviour

We primarily review analytics information through statistical reports and aggregated measurements.

We do not intentionally send names, email addresses, contact-form message contents or other directly identifying personal information to Google Analytics.

6.3 IP Addresses and Google Analytics

Google Analytics may process IP addresses for technical purposes, including determining approximate geographical location.

According to Google’s published documentation, Google Analytics 4 does not log or store individual IP addresses originating from visitors in Switzerland, the European Union or the United Kingdom.

IP addresses may nevertheless be processed temporarily during the collection and routing of analytics information.

6.4 Google as an Analytics Provider

Google Analytics is provided by:

Google LLC
1600 Amphitheatre Parkway
Mountain View, CA 94043
United States

Analytics information is transmitted to Google for processing and may be processed using infrastructure located outside Switzerland.

Where international transfers of personal data occur, applicable data protection requirements and appropriate safeguards must be observed.

Further information about Google’s data protection practices is available at:

Information about Google Analytics is available at:

https://policies.google.com/privacy

https://marketingplatform.google.com/about/analytics

6.5 Cookie Consent and Visitor Choices

Where required by applicable legislation, Arenema requests visitors’ consent before activating non-essential analytics cookies.

Visitors may accept or reject optional analytics cookies through the website’s consent mechanism.

You can also manage, block or delete cookies through your browser settings.

Google provides a browser add-on designed to prevent visitor information from being used by Google Analytics:

https://tools.google.com/dlpage/gaoptout

Disabling analytics cookies does not prevent access to the principal content of our website.

6.6 Analytics Data Retention

Google Analytics data is retained according to the retention settings configured within Arenema’s Google Analytics account and Google’s applicable policies.

Retention periods may differ between event-level information and aggregated statistical reporting.

We review our analytics requirements periodically and aim to retain information only for as long as reasonably necessary for website analysis and business improvement.

Where appropriate, we rely on aggregated or anonymised information to reduce the processing of identifiable visitor data.

7. Contact Forms and Communications

When you submit an enquiry through our website, we collect the information you provide to review and respond to your message.

This may include your name, organisation, email address and enquiry details.

Information submitted through our contact form may be processed by our website infrastructure, communication systems and authorised Arenema personnel.

We use contact-form information to:

Respond to your enquiry
Arrange further discussions where requested
Assess potential business opportunities
Maintain appropriate records of professional correspondence

Submitting a contact form does not automatically enrol you in marketing communications.

Please avoid submitting passwords, payment card details, sensitive personal data or confidential third-party information through our general contact form.

8. Sharing Personal Information

We may share personal information with trusted service providers where necessary to operate our business and deliver professional services.

These may include:

Website hosting and infrastructure providers
Google Analytics and relevant website technology providers
Business email and communication services
IT support and cybersecurity providers
Cloud infrastructure providers
Professional advisers, including legal and accounting services
Regulatory authorities and public bodies where legally required

We take appropriate steps to ensure that service providers processing personal information on our behalf maintain suitable confidentiality, security and data protection safeguards.

We do not disclose personal information to unrelated third parties for their independent marketing activities without an appropriate legal basis.

9. International Data Transfers

Arenema operates internationally and may work with personnel, business partners and technology providers located outside Switzerland.

Consequently, personal data may be processed, stored or accessed internationally, including through cloud infrastructure, communication systems and third-party service providers.

Where personal information is transferred outside Switzerland, the European Economic Area or the United Kingdom, as applicable, we take steps to ensure that appropriate safeguards are in place.

Depending on the destination and circumstances, these may include:

Transfers to countries recognised as providing adequate data protection
Recognised Standard Contractual Clauses
Applicable international data protection frameworks
Other safeguards permitted by relevant legislation

Information about the countries involved in particular transfers and the safeguards applied may be requested by contacting say_hello@arenema.com.

10. Information Security

Information security is an important part of Arenema’s professional activities and operating principles.

We apply technical and organisational safeguards appropriate to the nature of the information we process and the risks involved.

Depending on the circumstances, these may include:

Access controls and authentication
Encryption of information in transit
Secure system and infrastructure configurations
Role-based access restrictions
Security monitoring and vulnerability management
Appropriate backup and recovery measures
Confidentiality requirements for authorised personnel
Periodic review of security risks and controls

We seek to limit access to personal information to individuals who require it for legitimate business purposes.

Although we take reasonable precautions to protect information, no system or internet-based service can guarantee absolute security.

11. Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes for which it was collected.

Retention periods depend on factors including:

The nature of the information
The purpose for which it was collected
The duration of a business relationship
Applicable contractual obligations
Legal, accounting and regulatory requirements
The need to establish, exercise or defend legal claims

Website technical logs and analytics information may have different retention periods from client correspondence or contractual records.

When personal information is no longer required, we take appropriate steps to delete, anonymise or securely dispose of it.

12. Your Data Protection Rights

Depending on the legislation applicable to your circumstances, you may have the right to:

Access

Request confirmation of whether we process your personal data and obtain information about that processing.

Correction

Request correction of inaccurate or incomplete personal information.

Deletion

Request deletion of personal information where the applicable legal conditions are satisfied.

Restriction

Request that certain processing activities be restricted where this right applies.

Objection

Object to particular processing activities, including certain forms of direct marketing.

Data portability

Request a copy of eligible personal data in a structured, commonly used and machine-readable format where legally applicable.

Withdrawal of consent

Withdraw consent previously provided for particular processing activities.

Withdrawal of consent does not affect processing lawfully carried out before withdrawal.

Exercising Your Rights

To exercise any applicable data protection rights, please contact:

say_hello@arenema.com

We may request reasonable information to verify your identity before responding.

We will handle requests in accordance with the timeframes and requirements established by applicable law.

Supervisory Authorities

You may raise concerns with the relevant data protection authority where permitted by applicable legislation.

In Switzerland, the relevant federal supervisory authority is:

Federal Data Protection and Information Commissioner (FDPIC)
https://www.edoeb.admin.ch

Where the EU GDPR or UK GDPR applies, you may also have the right to lodge a complaint with a competent European or UK supervisory authority.

13. Third-Party Websites and External Links

Our website may contain links to external websites, including:

Professional networking platforms
Technology providers
Business partners
Industry organisations
External publications and resources

These websites operate independently and may apply their own privacy policies, cookies and data processing practices.

Arenema does not control the privacy practices of external websites.

We encourage visitors to review the relevant privacy policies before sharing personal information with third parties.

14. Client Data and Professional Services

As part of our consultancy, software engineering, cloud, cybersecurity and technology services, Arenema may process personal information on behalf of clients.

In these circumstances, Arenema may act as a data processor rather than a data controller.

Where we process personal data under a client’s instructions, the relevant service agreement, data processing agreement and applicable contractual obligations govern that processing.

We maintain appropriate confidentiality and security measures in connection with client information.

This website Privacy Policy primarily describes the processing activities for which Arenema acts as a data controller.

15. Automated Decision-Making and Profiling

Our website analytics activities are intended to help us understand website performance and general visitor engagement.

We do not use website analytics information to make solely automated decisions that produce legal or similarly significant effects concerning individual visitors.

Should we introduce processing involving automated individual decisions that require additional disclosure under applicable law, we will provide the relevant information and rights.

16. Children’s Privacy

Our website and professional services are primarily intended for businesses, organisations and adult professional users.

We do not knowingly seek to collect personal information from children through our website.

If we become aware that personal information relating to a child has been collected inappropriately, we will take reasonable steps to address the situation in accordance with applicable law.

17. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in:

Our business activities
Website functionality
Technology providers
Data processing practices
Applicable laws and regulatory requirements

The most recent version will be published on this page with its updated revision date.

We encourage visitors to review this policy periodically.

18. Contact Us

If you have questions about this Privacy Policy, our handling of personal information or your data protection rights, please contact:

Arenema Sàrl
Chemin de la Beurière 12
1264 St-Cergue
Switzerland

Company identification: CHE-387.978.317

Email: say_hello@arenema.com
Website: https://arenema.com