Skip to content
LEADNOW – leadership development

Privacy Policy

1. What is this privacy policy about?

Leadnow GmbH («we») processes personal data when you visit our website leadnow.ch, subscribe to our newsletter or contact us. This policy describes which data we process, for what purpose, where and for how long, and which rights you have. We comply with the Swiss Federal Act on Data Protection (FADP).

2. Who is responsible?

The controller is Leadnow GmbH, Hermetschloostrasse 70, 8048 Zurich, Switzerland, represented by Stefan Heer (managing director). For questions on data protection and to exercise your rights, contact us at [email protected] or by post at this address.

3. Which data do we process, and why?

Visiting the website

When you open the website, the server processes technically necessary data: the IP address, date and time, the page requested, the server's response and information about your browser and operating system (server log data). We need it to deliver the website, operate it securely and find faults. We keep it only as long as necessary for that. Only the technically responsible people have access to it.

Cookies

We set one technically necessary cookie called «NEXT_LOCALE». It stores your language choice (German, English or French), contains no personal data and is used neither for advertising nor for analysis. For other services that may set cookies, see section 4.

Newsletter

If you subscribe to our newsletter, we process, optionally, your first and last name, your email address, your consent, the language of the page, the place where you signed up (for example the footer) and the time. The consent box is not ticked in advance; without consent you cannot sign up. We use this data to send you the newsletter and to prove your consent. The legal basis is your consent.

Your sign-up is stored on our server and passed to an automation system we operate. From there the data goes to our sending provider Brevo (Sendinblue SAS, France), which sends the newsletter.

You can withdraw your consent at any time, for example via the unsubscribe link in the newsletter or by email to us. After that we no longer send you newsletters and delete or anonymise your data, unless a retention obligation or an interest in keeping proof of consent prevents it.

Protection of forms (Cloudflare Turnstile)

To protect the newsletter form against automated sign-ups (bots) we use Cloudflare Turnstile. A check is run in your browser and its result is sent to Cloudflare; Cloudflare receives technical information such as your IP address and browser characteristics for this. This only happens once you click into or open the form, not on a mere page view. The legal basis is our legitimate interest in protection against abuse.

Contact

If you contact us by email or telephone, we process your details (for example name, contact details, content of your enquiry) to answer your request. We store them with our email provider as long as needed to handle the request and for statutory retention obligations.

On the «Contact» page we link to an appointment booking through Google Calendar (Google Ireland Limited or Google LLC). A mere page view makes no connection to Google; only when you click the link does Google’s booking page open in a new window. What you enter there (for example your name, email address and the chosen time) is received by Google and by us; Google may set cookies and transfer data to countries outside Switzerland. Google’s privacy policy then applies. We use your details to hold the appointment with you. The legal basis is the initiation of a contract and our legitimate interest in arranging appointments.

Embedded content (YouTube)

On some pages we show videos from YouTube (Google). The page first shows only a preview image that we serve ourselves; a mere page view makes no connection to YouTube. Only when you click the video is the player loaded, via the privacy-enhanced address youtube-nocookie.com, and Google receives your IP address and information about your use.

Links to social networks

The website contains links to LinkedIn, Instagram, Facebook, X (Twitter) and YouTube. These are plain links, not embedded plug-ins: data goes to the network only when you click a link. From then on the provider's privacy policy applies.

4. Analytics and advertising services

We use no advertising services, in particular neither Google Tag Manager nor the Meta Pixel nor Leadfeeder.

For reach measurement we use Umami, statistics software we run ourselves at analytics.kampaspace.ch. Umami sets no cookies and uses no cross-device identifiers. Your IP address is processed only briefly, to derive a day-scoped identifier that cannot be traced back and to determine the country; it is not stored. What is recorded: the page visited, the referring page, the country, device type, operating system, browser and screen size. This produces aggregate figures; we do not build usage profiles and cannot recognise individual visitors. No cookies are set for analytics purposes.

5. On what basis do we process data?

  • Consent: newsletter.
  • Contract or preparation of a contract: answering enquiries and preparing a collaboration.
  • Legitimate interests: secure operation of the website, protection against abuse, and audience measurement and marketing. We weigh your interests in doing so.
  • Legal obligations, for example retention periods.

6. Who do we disclose data to, and does it go abroad?

We share data only as far as needed for the stated purposes. Recipients are service providers working on our behalf:

  • Infomaniak Network SA (Switzerland) for operating the website, the database and the automation system;
  • Cloudflare, Inc. (USA) for delivering and protecting the website and for Turnstile;
  • Brevo (Sendinblue SAS, France) for sending the newsletter;
  • Google (Calendar) for appointment booking;
  • Google (YouTube) for embedded videos;
  • Hetzner Online GmbH (Germany) as the server operator of our statistics instance (Umami);
  • our email provider for enquiries by email;

Data may also reach countries outside Switzerland, for example the USA. Where a country does not have an adequate level of data protection, we ensure protection through recognised safeguards, such as standard contractual clauses or certification of the recipient.

7. How long do we process data?

Only as long as the purpose requires or the law demands. We process newsletter data until you withdraw consent, and enquiries until they are dealt with and beyond that where a retention obligation exists.

8. How do we protect data?

We transmit the website encrypted (HTTPS) and take technical and organisational measures, including access restrictions and protection of the forms against abuse. There is no absolute security on the internet.

9. What rights do you have?

Where the FADP provides for it, you can request information about your data, have incorrect data corrected and data deleted, object to processing, withdraw consent at any time and request your data in a common format. Write to us at the address in section 2; to review your request we may need to verify your identity. If you disagree with our processing, you can complain to the Federal Data Protection and Information Commissioner (FDPIC).

10. Changes

We may amend this policy. The version published on the website applies.

Last updated: September 2026

Kontakt