Legal

Privacy policy

Last updated: 21 October 2026

This privacy policy explains how AYYA Consulting GmbH (“we”, “us”) processes personal data when you visit sadza.ch, apply for the AI for Entrepreneurs programme, or use the member area. We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP / nDSG) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Controller

For any data protection question or to exercise your rights, write to info@sadza.ch.

2. What data we process, and why

2.1 Visiting the website

When you visit our website, our hosting provider automatically records technical data in server log files: IP address, date and time, page requested, referrer, browser and operating system. We use this data to deliver the website securely and to detect misuse. Log files are deleted by the hosting provider after a short period, usually no more than 30 days.

To protect our forms against abuse, we store a one-way hashed (non-readable) version of your IP address for up to 24 hours.

2.2 Applying for the programme

When you apply, we process the details you provide: name, e-mail address, and optionally phone, location, LinkedIn or website, information about your idea or business, your ambitions, motivation, time availability, how you heard of us, and your self-check result. We use this data solely to assess your application, to contact you and, if you are accepted, to prepare and deliver the programme.

To protect against misuse, we first send a confirmation link to the e-mail address you entered. Your application is only passed on for review once you click it. Applications that are not confirmed are deleted automatically after 14 days.

Legal basis: steps prior to entering into a contract at your request and your consent (Art. 6(1)(a) and (b) GDPR, where applicable).

2.3 Member area and login

If you are accepted, we create a member account with your name and e-mail address. Login works with one-time links sent by e-mail; we store only an encrypted (hashed) version of each link, which expires after a short time. We store your entries in the prioritisation matrix and the date of your last login so we can work with you during the programme.

2.4 E-mail communication

When you write to us or we write to you (confirmations, login links), we process your e-mail address and the content of the message.

3. Cookies and local storage

We use only one technically necessary session cookie (sadza_sid) to keep you logged in and to protect forms against cross-site attacks. It is deleted when you close your browser.

The application form saves a draft of your entries and your self-check result in your browser’s local storage so you don’t lose them. This data stays on your device and is deleted when you submit the form; you can also clear it in your browser settings at any time.

To understand which channels bring relevant applicants, the page also remembers in your browser’s local storage how you first found us (for example the referring website or a campaign tag such as utm_source) and sends it with your application. No third-party tracking service is involved.

We do not use analytics, advertising or tracking tools.

4. Fonts

All fonts are hosted on our own server. No connection to external font providers is made.

5. YouTube video

We reference a video by Vusi Thembekwayo hosted on YouTube. The video is not loaded when you open our page. Only when you click the play button is a connection established to YouTube (Google Ireland Ltd. / Google LLC, USA) in “privacy-enhanced mode” (youtube-nocookie.com). YouTube may then process data such as your IP address and set cookies. Please see Google’s privacy policy: policies.google.com/privacy. Legal basis: your consent by clicking play.

6. Payments

If you are accepted and pay online, you are forwarded to a payment page of Payrexx AG, Burgstrasse 20, 3600 Thun, Switzerland. We pass your name, e-mail address, the amount and a reference to Payrexx; your payment details (for example card data) are entered and processed by Payrexx and the payment methods you choose, not by us. We receive the payment status and keep payment records as required by accounting law. Payrexx privacy policy: payrexx.com/en-gb/legal/privacy-policy.

7. Recipients and processors

We do not sell your data. We share it only with service providers who help us run the website and e-mail (hosting provider and e-mail provider), and who process it on our behalf under a contract. If a provider processes data outside Switzerland or the EU/EEA, we ensure an adequate level of protection, for example through the EU Standard Contractual Clauses.

8. How long we keep data

• Applications that are not accepted: deleted no later than 12 months after our decision, unless you ask us to keep them for a future cohort.
• Participant data: for the duration of the programme and afterwards as long as required by statutory retention obligations (for accounting records, generally 10 years).
• Login links: expire after minutes and are removed automatically.

9. Your rights

Subject to the applicable law, you have the right to request access to your personal data, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent at any time with effect for the future. Contact us at info@sadza.ch. You also have the right to lodge a complaint with a supervisory authority. In Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC, edoeb.admin.ch).

10. Security

We use encrypted connections (HTTPS), password-less logins with short-lived one-time links, and technical and organisational measures appropriate to the risk to protect your data.

11. Changes

We may update this privacy policy. The version published on this page applies.