Privacy policy
This policy explains which personal data we process, why, and what rights you have. It follows the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR).
Version of 11 October 2026
1. Who is responsible
Bit2Board Consulting GmbH, Blegistrasse 11A, 6340 Baar, Switzerland, is responsible for the processing described here. For any data protection question, write to faysal.cherradi@bit2boardconsulting.com.
2. Visiting this website
When you visit this website, our hosting provider automatically records technical data in server log files: IP address, date and time, page requested, referring page, browser and operating system. We use these logs only to operate and secure the website, and they are deleted after a short period, usually within 30 days.
This website does not use cookies, tracking, advertising tools or third-party analytics, and it loads no content from third parties. To see how much the website is used, our own server counts page views: the page address, the website a visitor came from (domain only) and the date. No IP addresses, cookies or device identifiers are stored, and the counts cannot be linked to a person. Fonts are served from our own server.
3. Requests and orientation calls
When you request a proposal or an orientation call, we process the details you enter: name, organisation, role, e-mail address, optional phone number and the content of your request. The form sends these details to us by e-mail. As a safeguard against lost e-mails, a copy is also kept in a protected folder on our web server in Switzerland, which is not accessible from the internet; we delete it after transferring the request, at the latest after 30 days. We use them only to answer your request, prepare a proposal or arrange the call.
If you book a time through our online calendar, the calendar provider processes your name, e-mail address and the time you choose on our behalf.
If an AI assistant submits a request on your behalf, we process the same details, and only on the basis of the consent you gave the assistant.
4. Clients and engagements
In engagements we process contact details of our clients' staff and, where the engagement requires it, personal data contained in documents our clients provide. We do so only for the agreed purpose and as described in our rules on AI and data.
5. Purposes and legal basis
We process personal data to operate this website, to answer requests, to prepare and perform contracts, and to meet legal obligations such as bookkeeping. Under the GDPR, the legal bases are our legitimate interest in operating a secure website (Art. 6(1)(f)), the performance of a contract or pre-contractual steps (Art. 6(1)(b)), your consent (Art. 6(1)(a)) and legal obligations (Art. 6(1)(c)).
6. Service providers and disclosure abroad
We work with carefully selected service providers who process data on our behalf:
- hosting of this website, by a provider in Switzerland;
- e-mail and documents, using Microsoft 365;
- the online calendar for orientation calls, if you use it;
- AI services, under the rules described on our About page.
Some of these providers, or their subcontractors, may process data outside Switzerland, including in the United States. We disclose data abroad only to countries with an adequate level of data protection, such as the EU and US companies certified under the Swiss-US Data Privacy Framework, or on the basis of standard contractual clauses. We do not sell personal data.
7. How long we keep data
We keep requests that do not lead to an engagement for up to 12 months. Contract and accounting records are kept for as long as the law requires, generally ten years. Server logs are deleted within about 30 days.
8. Your rights
You can ask for information about your data, its correction or deletion, object to processing, and receive data you provided in a common format. If processing is based on consent, you can withdraw it at any time with effect for the future. Write to faysal.cherradi@bit2boardconsulting.com.
You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, in the EU, with the supervisory authority of your country.
9. Security
We protect personal data with appropriate technical and organisational measures, including encrypted connections (HTTPS), access controls and multi-factor authentication for our systems.
10. Changes
We may update this policy when our services or the law change. The version published on this page applies.